@thunderid/react 1.10.0 → 1.11.0

package/dist/cjs/components/account/UserProfile/BaseUserProfile.cjs

@@ -4,8 +4,8 @@ const require_useTheme = require('../../../contexts/Theme/useTheme.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
 const require_Button = require('../../primitives/Button/Button.cjs');
 const require_Typography = require('../../primitives/Typography/Typography.cjs');
-const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_Card = require('../../primitives/Card/Card.cjs');
+const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_TextField = require('../../primitives/TextField/TextField.cjs');
 const require_Checkbox = require('../../primitives/Checkbox/Checkbox.cjs');
 const require_DatePicker = require('../../primitives/DatePicker/DatePicker.cjs');

package/dist/cjs/components/admin/GroupMembers/GroupMembers.cjs

@@ -29,11 +29,12 @@ const getMembershipInvalidatedKeys = ({ groupId }) => [
 * <GroupMembers groupId={groupId} />
 * ```
 */
-const GroupMembers = ({ administrationMode, editable = false, groupId, preferences,...rest }) => {
+const GroupMembers = ({ administrationMode, editable = false, groupId, ouId, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const groupsEndpoint = require_useManagementEndpoint.default("groups");
 	const usersEndpoint = require_useManagementEndpoint.default("users");
 	const agentsEndpoint = require_useManagementEndpoint.default("agents");
+	const filter = (0, __thunderid_browser.toEqualityFilter)("ouId", ouId);
 	const members = require_useResourceQuery.default([
 		__thunderid_browser.GroupQueryKeys.GROUP_MEMBERS,
 		groupId,
@@ -44,15 +45,29 @@ const GroupMembers = ({ administrationMode, editable = false, groupId, preferenc
 		groupId,
 		limit: 100
 	}), { enabled: Boolean(groupId) });
-	const users = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USERS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getUsers)({
-		...usersEndpoint,
-		fetcher,
+	const users = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USERS, {
+		filter,
 		limit: 100
+	}], async (fetcher) => ({
+		filter,
+		page: await (0, __thunderid_browser.getUsers)({
+			...usersEndpoint,
+			fetcher,
+			filter,
+			limit: 100
+		})
 	}), { enabled: editable });
-	const agents = require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENTS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getAgents)({
-		...agentsEndpoint,
-		fetcher,
+	const agents = require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENTS, {
+		filter,
 		limit: 100
+	}], async (fetcher) => ({
+		filter,
+		page: await (0, __thunderid_browser.getAgents)({
+			...agentsEndpoint,
+			fetcher,
+			filter,
+			limit: 100
+		})
 	}), { enabled: editable });
 	const add = require_useResourceMutation.default(({ groupId: id, members: changes }, fetcher) => (0, __thunderid_browser.addGroupMembers)({
 		...groupsEndpoint,
@@ -67,16 +82,23 @@ const GroupMembers = ({ administrationMode, editable = false, groupId, preferenc
 		groupId: id,
 		members: changes
 	}), getMembershipInvalidatedKeys);
-	const candidates = (0, react.useMemo)(() => ({
-		agent: (agents.data?.agents ?? []).map((agent) => ({
-			id: agent.id,
-			label: (0, __thunderid_browser.getAgentName)(agent)
-		})),
-		user: (users.data?.users ?? []).map((user) => ({
-			id: user.id,
-			label: (0, __thunderid_browser.resolveManagedIdentityName)(user)
-		}))
-	}), [agents.data, users.data]);
+	const candidates = (0, react.useMemo)(() => {
+		const current = (data) => data && data.filter === filter ? data.page : void 0;
+		return {
+			agent: (current(agents.data)?.agents ?? []).map((agent) => ({
+				id: agent.id,
+				label: (0, __thunderid_browser.getAgentName)(agent)
+			})),
+			user: (current(users.data)?.users ?? []).map((user) => ({
+				id: user.id,
+				label: (0, __thunderid_browser.resolveManagedIdentityName)(user)
+			}))
+		};
+	}, [
+		agents.data,
+		filter,
+		users.data
+	]);
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseGroupMembers.default, {
 		members: members.data?.members ?? [],
 		isLoading: members.isLoading,

package/dist/cjs/components/admin/GroupMembers/GroupMembers.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"GroupMembers.cjs","names":["GroupQueryKeys","RoleQueryKeys","GroupMembers: FC<GroupMembersProps>","useTranslation","groupsEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","members: ResourceQueryResult<GroupMemberListResponse>","useResourceQuery","users: ResourceQueryResult<ManagedUserListResponse>","UserQueryKeys","agents: ResourceQueryResult<AgentListResponse>","AgentQueryKeys","add: ResourceMutationResult<Group, GroupMembersVariables>","useResourceMutation","remove: ResourceMutationResult<Group, GroupMembersVariables>","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupMember,\n  GroupMemberListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  ResourceQueryKey,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addGroupMembers,\n  getAgentName,\n  getAgents,\n  getGroupMembers,\n  getUsers,\n  removeGroupMembers,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface GroupMembersVariables {\n  groupId: string;\n  members: Pick<GroupMember, 'id' | 'type'>[];\n}\n\n/**\n * Query keys to refetch after a group's membership changes.\n */\nconst getMembershipInvalidatedKeys = ({groupId}: GroupMembersVariables): ResourceQueryKey[] => [\n  [GroupQueryKeys.GROUP, groupId],\n  [GroupQueryKeys.GROUP_MEMBERS, groupId],\n  [GroupQueryKeys.MEMBERSHIPS],\n  [RoleQueryKeys.ROLE_ASSIGNMENTS],\n];\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * How a member is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  administrationMode,\n  editable = false,\n  groupId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const members: ResourceQueryResult<GroupMemberListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUP_MEMBERS, groupId, {limit: 100}],\n    (fetcher) => getGroupMembers({...groupsEndpoint, fetcher, groupId, limit: 100}),\n    {enabled: Boolean(groupId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const add: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      addGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n  const remove: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      removeGroupMembers({...groupsEndpoint, administrationMode, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: getAgentName(agent)})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, users.data],\n  );\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;AA0CA,MAAM,gCAAgC,EAAC,cAAwD;CAC7F,CAACA,mCAAe,OAAO,QAAQ;CAC/B,CAACA,mCAAe,eAAe,QAAQ;CACvC,CAACA,mCAAe,YAAY;CAC5B,CAACC,kCAAc,iBAAiB;CACjC;;;;;;;;;AA4BD,MAAMC,gBAAuC,EAC3C,oBACA,WAAW,OACX,SACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,iBAAqCC,sCAAsB,SAAS;CAC1E,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,UAAwDC,iCAC5D;EAACT,mCAAe;EAAe;EAAS,EAAC,OAAO,KAAI;EAAC,GACpD,qDAA4B;EAAC,GAAG;EAAgB;EAAS;EAAS,OAAO;EAAI,CAAC,EAC/E,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMU,QAAsDD,iCAC1D,CAACE,kCAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,8CAAqB;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDH,iCACrD,CAACI,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,MAA4DC,qCAC/D,EAAC,SAAS,IAAI,SAAS,WAAiC,qDACvC;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EAC9E,6BACD;CACD,MAAMC,SAA+DD,qCAClE,EAAC,SAAS,IAAI,SAAS,WAAiC,wDACpC;EAAC,GAAG;EAAgB;EAAoB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EACrG,6BACD;CAED,MAAME,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,6CAAoB,MAAM;GAAC,EAAE;EAC3G,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD,CAAC,OAAO,MAAM,MAAM,KAAK,CAC1B;AAED,QACE,2CAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,yDAC2B,GAAG,QAAQ,OAAO,6BAA6B,sDAC/C,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}
+{"version":3,"file":"GroupMembers.cjs","names":["GroupQueryKeys","RoleQueryKeys","GroupMembers: FC<GroupMembersProps>","useTranslation","groupsEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","filter: string | undefined","members: ResourceQueryResult<GroupMemberListResponse>","useResourceQuery","users: ResourceQueryResult<FilteredPage<ManagedUserListResponse>>","UserQueryKeys","agents: ResourceQueryResult<FilteredPage<AgentListResponse>>","AgentQueryKeys","add: ResourceMutationResult<Group, GroupMembersVariables>","useResourceMutation","remove: ResourceMutationResult<Group, GroupMembersVariables>","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupMember,\n  GroupMemberListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  ResourceQueryKey,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addGroupMembers,\n  getAgentName,\n  getAgents,\n  getGroupMembers,\n  getUsers,\n  removeGroupMembers,\n  resolveManagedIdentityName,\n  toEqualityFilter,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface GroupMembersVariables {\n  groupId: string;\n  members: Pick<GroupMember, 'id' | 'type'>[];\n}\n\n/**\n * A candidate page with the filter it was listed with.\n */\ninterface FilteredPage<T> {\n  filter: string | undefined;\n  page: T;\n}\n\n/**\n * Query keys to refetch after a group's membership changes.\n */\nconst getMembershipInvalidatedKeys = ({groupId}: GroupMembersVariables): ResourceQueryKey[] => [\n  [GroupQueryKeys.GROUP, groupId],\n  [GroupQueryKeys.GROUP_MEMBERS, groupId],\n  [GroupQueryKeys.MEMBERSHIPS],\n  [RoleQueryKeys.ROLE_ASSIGNMENTS],\n];\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * How a member is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n  /**\n   * Organization unit the users and agents offered for adding are listed from.\n   */\n  ouId?: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  administrationMode,\n  editable = false,\n  groupId,\n  ouId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const filter: string | undefined = toEqualityFilter('ouId', ouId);\n  const members: ResourceQueryResult<GroupMemberListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUP_MEMBERS, groupId, {limit: 100}],\n    (fetcher) => getGroupMembers({...groupsEndpoint, fetcher, groupId, limit: 100}),\n    {enabled: Boolean(groupId)},\n  );\n  const users: ResourceQueryResult<FilteredPage<ManagedUserListResponse>> = useResourceQuery(\n    [UserQueryKeys.USERS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getUsers({...usersEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<FilteredPage<AgentListResponse>> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getAgents({...agentsEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const add: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      addGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n  const remove: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      removeGroupMembers({...groupsEndpoint, administrationMode, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(() => {\n    // A page listed for an earlier ouId stays in a query until the next one succeeds, so it is not offered.\n    const current = <T,>(data: FilteredPage<T> | undefined): T | undefined =>\n      data && data.filter === filter ? data.page : undefined;\n\n    return {\n      agent: (current(agents.data)?.agents ?? []).map((agent: BasicAgent) => ({\n        id: agent.id,\n        label: getAgentName(agent),\n      })),\n      user: (current(users.data)?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    };\n  }, [agents.data, filter, users.data]);\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;AAmDA,MAAM,gCAAgC,EAAC,cAAwD;CAC7F,CAACA,mCAAe,OAAO,QAAQ;CAC/B,CAACA,mCAAe,eAAe,QAAQ;CACvC,CAACA,mCAAe,YAAY;CAC5B,CAACC,kCAAc,iBAAiB;CACjC;;;;;;;;;AAgCD,MAAMC,gBAAuC,EAC3C,oBACA,WAAW,OACX,SACA,MACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,iBAAqCC,sCAAsB,SAAS;CAC1E,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,mDAA8C,QAAQ,KAAK;CACjE,MAAMC,UAAwDC,iCAC5D;EAACV,mCAAe;EAAe;EAAS,EAAC,OAAO,KAAI;EAAC,GACpD,qDAA4B;EAAC,GAAG;EAAgB;EAAS;EAAS,OAAO;EAAI,CAAC,EAC/E,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMW,QAAoED,iCACxE,CAACE,kCAAc,OAAO;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC3C,OAAO,aAAa;EAAC;EAAQ,MAAM,wCAAe;GAAC,GAAG;GAAe;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACnG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAA+DH,iCACnE,CAACI,mCAAe,QAAQ;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC7C,OAAO,aAAa;EAAC;EAAQ,MAAM,yCAAgB;GAAC,GAAG;GAAgB;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACrG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,MAA4DC,qCAC/D,EAAC,SAAS,IAAI,SAAS,WAAiC,qDACvC;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EAC9E,6BACD;CACD,MAAMC,SAA+DD,qCAClE,EAAC,SAAS,IAAI,SAAS,WAAiC,wDACpC;EAAC,GAAG;EAAgB;EAAoB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EACrG,6BACD;CAED,MAAME,sCAAmF;EAEvF,MAAM,WAAe,SACnB,QAAQ,KAAK,WAAW,SAAS,KAAK,OAAO;AAE/C,SAAO;GACL,QAAQ,QAAQ,OAAO,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,WAAuB;IACtE,IAAI,MAAM;IACV,6CAAoB,MAAM;IAC3B,EAAE;GACH,OAAO,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAE,EAAE,KAAK,UAAuB;IACnE,IAAI,KAAK;IACT,2DAAkC,KAAK;IACxC,EAAE;GACJ;IACA;EAAC,OAAO;EAAM;EAAQ,MAAM;EAAK,CAAC;AAErC,QACE,2CAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,yDAC2B,GAAG,QAAQ,OAAO,6BAA6B,sDAC/C,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}

package/dist/cjs/components/auth/AcceptInvite/BaseAcceptInvite.cjs

@@ -8,8 +8,8 @@ const require_flowTransformer = require('../../../utils/flowTransformer.cjs');
 const require_Spinner = require('../../primitives/Spinner/Spinner.cjs');
 const require_Button = require('../../primitives/Button/Button.cjs');
 const require_Typography = require('../../primitives/Typography/Typography.cjs');
-const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_Card = require('../../primitives/Card/Card.cjs');
+const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_isConsentApprovalBlocked = require('../../../utils/isConsentApprovalBlocked.cjs');
 const require_AuthOptionFactory = require('../flow/AuthOptionFactory.cjs');
 const require_useOAuthCallback = require('../../../hooks/auth/useOAuthCallback.cjs');

package/dist/cjs/components/auth/DeviceGrant/BaseDeviceGrant.cjs

@@ -0,0 +1,61 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTheme = require('../../../contexts/Theme/useTheme.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_BaseDeviceGrant_styles = require('./BaseDeviceGrant.styles.cjs');
+const require_Typography = require('../../primitives/Typography/Typography.cjs');
+const require_Card = require('../../primitives/Card/Card.cjs');
+const require_BaseSignIn = require('../SignIn/BaseSignIn.cjs');
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/auth/DeviceGrant/BaseDeviceGrant.tsx
+/** Renders the server-described Device Grant prompt independently of SDK orchestration. */
+const BaseDeviceGrant = ({ components, className = "", completeMessage = void 0, completeDescription = void 0, failedMessage = void 0, failedDescription = void 0, error, isLoading, preferences, result = null, variant = "default",...signInProps }) => {
+	const { theme } = require_useTheme.default();
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const styles = require_BaseDeviceGrant_styles.default(theme);
+	if ((error || result) && components.length === 0) {
+		const isSuccess = result === "success" && !error;
+		const resolvedCompleteMessage = completeMessage ?? t("deviceGrant.messages.complete");
+		const resolvedCompleteDescription = completeDescription ?? t("deviceGrant.messages.completeDescription");
+		const resolvedFailedMessage = failedMessage ?? t("deviceGrant.messages.failed");
+		const resolvedFailedDescription = failedDescription ?? t("deviceGrant.messages.failedDescription");
+		const title = isSuccess ? resolvedCompleteMessage : resolvedFailedMessage;
+		const description = isSuccess ? resolvedCompleteDescription : !error || error.message === resolvedFailedMessage ? resolvedFailedDescription : error.message;
+		return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(require_Card.default, {
+			className: `${styles["terminalCard"]} ${className}`,
+			"data-testid": "device-grant-result",
+			variant,
+			children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Typography.default, {
+				className: styles["terminalTitle"],
+				color: isSuccess ? "success" : "error",
+				component: "h2",
+				fontWeight: 600,
+				variant: "h6",
+				children: title
+			}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Typography.default, {
+				className: styles["terminalDescription"],
+				color: "textSecondary",
+				component: "p",
+				variant: "caption",
+				children: description
+			})]
+		});
+	}
+	return /* @__PURE__ */ (0, react.createElement)(require_BaseSignIn.default, {
+		...signInProps,
+		className,
+		key: components.map((component) => component.id).join("|"),
+		components,
+		error,
+		isLoading,
+		preferences
+	});
+};
+var BaseDeviceGrant_default = BaseDeviceGrant;
+
+//#endregion
+exports.default = BaseDeviceGrant_default;
+//# sourceMappingURL=BaseDeviceGrant.cjs.map

package/dist/cjs/components/auth/DeviceGrant/BaseDeviceGrant.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseDeviceGrant.cjs","names":["BaseDeviceGrant: FC<BaseDeviceGrantProps>","useTheme","useTranslation","useStyles","CardPrimitive","Typography","BaseSignIn"],"sources":["../../../../../src/components/auth/DeviceGrant/BaseDeviceGrant.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type {EmbeddedFlowComponent} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport useStyles from './BaseDeviceGrant.styles';\nimport useTheme from '../../../contexts/Theme/useTheme';\nimport useTranslation from '../../../hooks/useTranslation';\nimport CardPrimitive from '../../primitives/Card/Card';\nimport Typography from '../../primitives/Typography/Typography';\nimport BaseSignIn, {type BaseSignInProps} from '../SignIn/BaseSignIn';\n\nexport type DeviceGrantResult = 'failure' | 'success' | null;\n\nexport interface BaseDeviceGrantProps extends Omit<BaseSignInProps, 'components' | 'onSubmit'> {\n  components: EmbeddedFlowComponent[];\n  completeMessage?: string;\n  completeDescription?: string;\n  failedMessage?: string;\n  failedDescription?: string;\n  onSubmit: NonNullable<BaseSignInProps['onSubmit']>;\n  result?: DeviceGrantResult;\n}\n\n/** Renders the server-described Device Grant prompt independently of SDK orchestration. */\nconst BaseDeviceGrant: FC<BaseDeviceGrantProps> = ({\n  components,\n  className = '',\n  completeMessage = undefined,\n  completeDescription = undefined,\n  failedMessage = undefined,\n  failedDescription = undefined,\n  error,\n  isLoading,\n  preferences,\n  result = null,\n  variant = 'default',\n  ...signInProps\n}: BaseDeviceGrantProps): ReactElement => {\n  const {theme} = useTheme();\n  const {t} = useTranslation(preferences?.i18n);\n  const styles = useStyles(theme);\n\n  if ((error || result) && components.length === 0) {\n    const isSuccess = result === 'success' && !error;\n    const resolvedCompleteMessage = completeMessage ?? t('deviceGrant.messages.complete');\n    const resolvedCompleteDescription = completeDescription ?? t('deviceGrant.messages.completeDescription');\n    const resolvedFailedMessage = failedMessage ?? t('deviceGrant.messages.failed');\n    const resolvedFailedDescription = failedDescription ?? t('deviceGrant.messages.failedDescription');\n    const title = isSuccess ? resolvedCompleteMessage : resolvedFailedMessage;\n    const description = isSuccess\n      ? resolvedCompleteDescription\n      : !error || error.message === resolvedFailedMessage\n        ? resolvedFailedDescription\n        : error.message;\n\n    return (\n      <CardPrimitive\n        className={`${styles['terminalCard']} ${className}`}\n        data-testid=\"device-grant-result\"\n        variant={variant}\n      >\n        <Typography\n          className={styles['terminalTitle']}\n          color={isSuccess ? 'success' : 'error'}\n          component=\"h2\"\n          fontWeight={600}\n          variant=\"h6\"\n        >\n          {title}\n        </Typography>\n        <Typography className={styles['terminalDescription']} color=\"textSecondary\" component=\"p\" variant=\"caption\">\n          {description}\n        </Typography>\n      </CardPrimitive>\n    );\n  }\n\n  return (\n    <BaseSignIn\n      {...signInProps}\n      className={className}\n      key={components.map((component: EmbeddedFlowComponent) => component.id).join('|')}\n      components={components}\n      error={error}\n      isLoading={isLoading}\n      preferences={preferences}\n    />\n  );\n};\n\nexport default BaseDeviceGrant;\n"],"mappings":";;;;;;;;;;;;;;AAyBA,MAAMA,mBAA6C,EACjD,YACA,YAAY,IACZ,kBAAkB,QAClB,sBAAsB,QACtB,gBAAgB,QAChB,oBAAoB,QACpB,OACA,WACA,aACA,SAAS,MACT,UAAU,UACV,GAAG,kBACqC;CACxC,MAAM,EAAC,UAASC,0BAAU;CAC1B,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,SAASC,uCAAU,MAAM;AAE/B,MAAK,SAAS,WAAW,WAAW,WAAW,GAAG;EAChD,MAAM,YAAY,WAAW,aAAa,CAAC;EAC3C,MAAM,0BAA0B,mBAAmB,EAAE,gCAAgC;EACrF,MAAM,8BAA8B,uBAAuB,EAAE,2CAA2C;EACxG,MAAM,wBAAwB,iBAAiB,EAAE,8BAA8B;EAC/E,MAAM,4BAA4B,qBAAqB,EAAE,yCAAyC;EAClG,MAAM,QAAQ,YAAY,0BAA0B;EACpD,MAAM,cAAc,YAChB,8BACA,CAAC,SAAS,MAAM,YAAY,wBAC1B,4BACA,MAAM;AAEZ,SACE,4CAACC;GACC,WAAW,GAAG,OAAO,gBAAgB,GAAG;GACxC,eAAY;GACH;cAET,2CAACC;IACC,WAAW,OAAO;IAClB,OAAO,YAAY,YAAY;IAC/B,WAAU;IACV,YAAY;IACZ,SAAQ;cAEP;KACU,EACb,2CAACA;IAAW,WAAW,OAAO;IAAwB,OAAM;IAAgB,WAAU;IAAI,SAAQ;cAC/F;KACU;IACC;;AAIpB,QACE,yCAACC;EACC,GAAI;EACO;EACX,KAAK,WAAW,KAAK,cAAqC,UAAU,GAAG,CAAC,KAAK,IAAI;EACrE;EACL;EACI;EACE;GACb;;AAIN,8BAAe"}

package/dist/cjs/components/auth/DeviceGrant/BaseDeviceGrant.styles.cjs

@@ -0,0 +1,26 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_emotion = require('../../../styles/emotion.cjs');
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+
+//#region src/components/auth/DeviceGrant/BaseDeviceGrant.styles.ts
+const useStyles = (theme) => (0, react.useMemo)(() => ({
+	terminalCard: require_emotion.css`
+        box-sizing: border-box;
+        width: 100%;
+        max-width: calc(${theme.vars.spacing.unit} * 60);
+        margin: 0 auto;
+        gap: ${theme.vars.spacing.unit};
+      `,
+	terminalDescription: require_emotion.css`
+        margin: 0;
+      `,
+	terminalTitle: require_emotion.css`
+        margin: 0;
+      `
+}), [theme]);
+var BaseDeviceGrant_styles_default = useStyles;
+
+//#endregion
+exports.default = BaseDeviceGrant_styles_default;
+//# sourceMappingURL=BaseDeviceGrant.styles.cjs.map

package/dist/cjs/components/auth/DeviceGrant/BaseDeviceGrant.styles.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseDeviceGrant.styles.cjs","names":[],"sources":["../../../../../src/components/auth/DeviceGrant/BaseDeviceGrant.styles.ts"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Theme} from '@thunderid/browser';\nimport {useMemo} from 'react';\nimport {css} from '../../../styles/emotion';\n\nconst useStyles = (theme: Theme): Record<string, string> =>\n  useMemo(\n    () => ({\n      terminalCard: css`\n        box-sizing: border-box;\n        width: 100%;\n        max-width: calc(${theme.vars.spacing.unit} * 60);\n        margin: 0 auto;\n        gap: ${theme.vars.spacing.unit};\n      `,\n      terminalDescription: css`\n        margin: 0;\n      `,\n      terminalTitle: css`\n        margin: 0;\n      `,\n    }),\n    [theme],\n  );\n\nexport default useStyles;\n"],"mappings":";;;;;;AAOA,MAAM,aAAa,oCAER;CACL,cAAc,mBAAG;;;0BAGG,MAAM,KAAK,QAAQ,KAAK;;eAEnC,MAAM,KAAK,QAAQ,KAAK;;CAEjC,qBAAqB,mBAAG;;;CAGxB,eAAe,mBAAG;;;CAGnB,GACD,CAAC,MAAM,CACR;AAEH,qCAAe"}

package/dist/cjs/components/auth/DeviceGrant/DeviceGrant.cjs

@@ -0,0 +1,192 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useThunderID = require('../../../contexts/ThunderID/useThunderID.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_flowTransformer = require('../../../utils/flowTransformer.cjs');
+const require_BaseDeviceGrant = require('./BaseDeviceGrant.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/auth/DeviceGrant/DeviceGrant.tsx
+const clearVerificationParameters = () => {
+	if (!window.location.href) return;
+	const url = new URL(window.location.href);
+	url.searchParams.delete("user_code");
+	url.searchParams.delete("applicationId");
+	window.history.replaceState(window.history.state, "", url.toString());
+};
+const hasUserCodeInput = (components) => components.some((component) => component.ref === "user_code" || Array.isArray(component.components) && hasUserCodeInput(component.components));
+/**
+* Runs the application's configured Device Grant flow and exposes its state for custom renderers.
+*/
+const DeviceGrant = ({ children = void 0, className = "", onComplete = void 0, onError = void 0, preferences = {}, size = "medium", variant = "default",...baseProps }) => {
+	const { applicationId, baseUrl, meta } = require_useThunderID.default();
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const [components, setComponents] = (0, react.useState)([]);
+	const [additionalData, setAdditionalData] = (0, react.useState)({});
+	const [initialValues, setInitialValues] = (0, react.useState)({});
+	const [serverFieldErrors, setServerFieldErrors] = (0, react.useState)(null);
+	const [executionId, setExecutionId] = (0, react.useState)("");
+	const [challengeToken, setChallengeToken] = (0, react.useState)("");
+	const [error, setError] = (0, react.useState)(null);
+	const [isLoading, setIsLoading] = (0, react.useState)(() => {
+		if (applicationId) return true;
+		return typeof window !== "undefined" && Boolean(new URL(window.location.href).searchParams.get("applicationId"));
+	});
+	const [result, setResult] = (0, react.useState)(null);
+	const flowStartAttempted = (0, react.useRef)(false);
+	const verificationParametersRead = (0, react.useRef)(false);
+	const handleError = (0, react.useCallback)((flowError) => {
+		setComponents([]);
+		setAdditionalData({});
+		setServerFieldErrors(null);
+		setError(flowError);
+		setResult("failure");
+		onError?.(flowError);
+	}, [onError]);
+	const applyResponse = (0, react.useCallback)((response) => {
+		const normalized = require_flowTransformer.normalizeFlowResponse(response, t, {
+			throwOnError: false,
+			resolveTranslations: false
+		}, meta);
+		setExecutionId(response.executionId);
+		setChallengeToken(response.challengeToken ?? "");
+		setComponents(normalized.components);
+		setAdditionalData(normalized.additionalData);
+		setServerFieldErrors(response.data?.fieldErrors ?? null);
+		setError(response.error ? new Error(require_flowTransformer.extractErrorMessage(response, t)) : null);
+		if (response.flowStatus === __thunderid_browser.EmbeddedSignInFlowStatus.Complete) {
+			setResult("success");
+			onComplete?.(response);
+			return;
+		}
+		if (response.flowStatus === __thunderid_browser.EmbeddedSignInFlowStatus.Error) {
+			const flowError = new Error(require_flowTransformer.extractErrorMessage(response, t, "deviceGrant.messages.failed"));
+			setError(flowError);
+			setResult("failure");
+			onError?.(flowError);
+			return;
+		}
+		setResult(null);
+	}, [
+		meta,
+		onComplete,
+		onError,
+		t
+	]);
+	const startFlow = (0, react.useCallback)(async (appId) => {
+		setIsLoading(true);
+		setError(null);
+		try {
+			const response = await (0, __thunderid_browser.executeEmbeddedDeviceGrantFlow)({
+				baseUrl,
+				payload: {
+					applicationId: appId,
+					flowType: __thunderid_browser.EmbeddedFlowType.DeviceGrant,
+					inputs: {}
+				}
+			});
+			clearVerificationParameters();
+			applyResponse(response);
+		} catch (flowError) {
+			handleError(flowError instanceof Error ? flowError : new Error(t("deviceGrant.errors.continue")));
+		} finally {
+			setIsLoading(false);
+		}
+	}, [
+		applyResponse,
+		baseUrl,
+		handleError,
+		t
+	]);
+	(0, react.useEffect)(() => {
+		const url = new URL(window.location.href);
+		if (!verificationParametersRead.current) {
+			verificationParametersRead.current = true;
+			const userCode = url.searchParams.get("user_code") ?? "";
+			if (userCode) setInitialValues({ user_code: userCode });
+		}
+		const applicationIdFromUrl = url.searchParams.get("applicationId");
+		const appId = applicationIdFromUrl?.trim() ? applicationIdFromUrl : applicationId;
+		if (flowStartAttempted.current) return;
+		if (!appId) {
+			flowStartAttempted.current = true;
+			handleError(new Error(t("deviceGrant.errors.start")));
+			return;
+		}
+		flowStartAttempted.current = true;
+		startFlow(appId);
+	}, [
+		applicationId,
+		handleError,
+		startFlow,
+		t
+	]);
+	const submit = async (payload, actionId) => {
+		setIsLoading(true);
+		setError(null);
+		setResult(null);
+		try {
+			if (!executionId) return;
+			applyResponse(await (0, __thunderid_browser.executeEmbeddedDeviceGrantFlow)({
+				baseUrl,
+				payload: {
+					action: payload.action ?? actionId,
+					challengeToken,
+					executionId,
+					inputs: {
+						...Object.fromEntries(Object.entries(payload.inputs ?? {}).filter(([key]) => !key.startsWith("__consent_opt__"))),
+						...!hasUserCodeInput(components) ? { user_code: void 0 } : {}
+					}
+				}
+			}));
+		} catch (flowError) {
+			handleError(flowError instanceof Error ? flowError : new Error(t("deviceGrant.errors.continue")));
+		} finally {
+			setIsLoading(false);
+		}
+	};
+	const handleBaseSubmit = (payload, component) => submit(payload, component.id);
+	const fieldErrors = (0, react.useMemo)(() => {
+		const errors = {};
+		(serverFieldErrors ?? []).forEach((fieldError) => {
+			if (!(fieldError.identifier in errors)) errors[fieldError.identifier] = fieldError.message;
+		});
+		return errors;
+	}, [serverFieldErrors]);
+	if (children) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(react_jsx_runtime.Fragment, { children: children({
+		additionalData,
+		components,
+		error,
+		fieldErrors,
+		initialValues,
+		isLoading,
+		meta,
+		onSubmit: submit,
+		result
+	}) });
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseDeviceGrant.default, {
+		...baseProps,
+		className,
+		components,
+		additionalData,
+		error,
+		initialValues,
+		isLoading,
+		onError: handleError,
+		onSubmit: handleBaseSubmit,
+		preferences,
+		result,
+		serverFieldErrors,
+		size,
+		variant
+	});
+};
+var DeviceGrant_default = DeviceGrant;
+
+//#endregion
+exports.default = DeviceGrant_default;
+//# sourceMappingURL=DeviceGrant.cjs.map

package/dist/cjs/components/auth/DeviceGrant/DeviceGrant.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeviceGrant.cjs","names":["DeviceGrant: FC<DeviceGrantProps>","useThunderID","useTranslation","normalizeFlowResponse","extractErrorMessage","EmbeddedSignInFlowStatus","EmbeddedFlowType","errors: Record<string, string>","BaseDeviceGrant"],"sources":["../../../../../src/components/auth/DeviceGrant/DeviceGrant.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {EmbeddedFlowType, EmbeddedSignInFlowStatus, executeEmbeddedDeviceGrantFlow} from '@thunderid/browser';\nimport type {EmbeddedFlowComponent, EmbeddedSignInFlowRequest, FlowMetadataResponse} from '@thunderid/browser';\nimport {useCallback, useEffect, useMemo, useRef, useState} from 'react';\nimport type {FC, ReactElement, ReactNode} from 'react';\nimport BaseDeviceGrant, {type BaseDeviceGrantProps, type DeviceGrantResult} from './BaseDeviceGrant';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {extractErrorMessage, normalizeFlowResponse} from '../../../utils/flowTransformer';\n\ntype EmbeddedDeviceGrantFlowResponse = Awaited<ReturnType<typeof executeEmbeddedDeviceGrantFlow>>;\ntype DeviceGrantFieldError = NonNullable<EmbeddedDeviceGrantFlowResponse['data']['fieldErrors']>[number];\n\n/** Values exposed to consumers that provide custom Device Grant UI. */\nexport interface DeviceGrantRenderProps {\n  /** Additional values returned for the active flow step. */\n  additionalData: Record<string, unknown>;\n  /** Components returned by the configured flow. */\n  components: EmbeddedFlowComponent[];\n  /** Current flow error, when one needs to be shown. */\n  error: Error | null;\n  /** First server validation message for each field. */\n  fieldErrors: Record<string, string>;\n  /** Values prefilled from the verification URI. */\n  initialValues: Record<string, string>;\n  /** Whether a flow request is in progress. */\n  isLoading: boolean;\n  /** Flow metadata used to resolve application-specific template values. */\n  meta: FlowMetadataResponse | null;\n  /** Submits user-code input or continues the active flow. */\n  onSubmit: (payload: EmbeddedSignInFlowRequest) => Promise<void>;\n  /** Terminal flow result when the flow has no configured prompt to render. */\n  result: DeviceGrantResult;\n}\n\nexport type DeviceGrantProps = Omit<\n  BaseDeviceGrantProps,\n  'children' | 'components' | 'error' | 'initialValues' | 'isLoading' | 'onSubmit' | 'result' | 'serverFieldErrors'\n> & {\n  /** Render props for Gate or other consumers that provide their own flow UI. */\n  children?: (props: DeviceGrantRenderProps) => ReactNode;\n  onComplete?: (response: EmbeddedDeviceGrantFlowResponse) => void;\n};\n\nconst clearVerificationParameters = (): void => {\n  if (!window.location.href) return;\n  const url = new URL(window.location.href);\n  url.searchParams.delete('user_code');\n  url.searchParams.delete('applicationId');\n  window.history.replaceState(window.history.state, '', url.toString());\n};\n\nconst hasUserCodeInput = (components: EmbeddedFlowComponent[]): boolean =>\n  components.some(\n    (component: EmbeddedFlowComponent) =>\n      component.ref === 'user_code' || (Array.isArray(component.components) && hasUserCodeInput(component.components)),\n  );\n\n/**\n * Runs the application's configured Device Grant flow and exposes its state for custom renderers.\n */\nconst DeviceGrant: FC<DeviceGrantProps> = ({\n  children = undefined,\n  className = '',\n  onComplete = undefined,\n  onError = undefined,\n  preferences = {},\n  size = 'medium',\n  variant = 'default',\n  ...baseProps\n}: DeviceGrantProps): ReactElement => {\n  const {applicationId, baseUrl, meta} = useThunderID();\n  const {t} = useTranslation(preferences?.i18n);\n  const [components, setComponents] = useState<EmbeddedFlowComponent[]>([]);\n  const [additionalData, setAdditionalData] = useState<Record<string, unknown>>({});\n  const [initialValues, setInitialValues] = useState<Record<string, string>>({});\n  const [serverFieldErrors, setServerFieldErrors] = useState<\n    EmbeddedDeviceGrantFlowResponse['data']['fieldErrors'] | null\n  >(null);\n  const [executionId, setExecutionId] = useState('');\n  const [challengeToken, setChallengeToken] = useState('');\n  const [error, setError] = useState<Error | null>(null);\n  const [isLoading, setIsLoading] = useState(() => {\n    if (applicationId) return true;\n    return typeof window !== 'undefined' && Boolean(new URL(window.location.href).searchParams.get('applicationId'));\n  });\n  const [result, setResult] = useState<DeviceGrantResult>(null);\n  const flowStartAttempted = useRef(false);\n  const verificationParametersRead = useRef(false);\n\n  const handleError = useCallback(\n    (flowError: Error): void => {\n      setComponents([]);\n      setAdditionalData({});\n      setServerFieldErrors(null);\n      setError(flowError);\n      setResult('failure');\n      onError?.(flowError);\n    },\n    [onError],\n  );\n\n  const applyResponse = useCallback(\n    (response: EmbeddedDeviceGrantFlowResponse): void => {\n      const normalized = normalizeFlowResponse(\n        response,\n        t,\n        {\n          throwOnError: false,\n          resolveTranslations: false,\n        },\n        meta,\n      );\n      setExecutionId(response.executionId);\n      setChallengeToken(response.challengeToken ?? '');\n      setComponents(normalized.components);\n      setAdditionalData(normalized.additionalData);\n      setServerFieldErrors(response.data?.fieldErrors ?? null);\n      setError(response.error ? new Error(extractErrorMessage(response, t)) : null);\n\n      if (response.flowStatus === EmbeddedSignInFlowStatus.Complete) {\n        setResult('success');\n        onComplete?.(response);\n        return;\n      }\n\n      if (response.flowStatus === EmbeddedSignInFlowStatus.Error) {\n        const flowError = new Error(extractErrorMessage(response, t, 'deviceGrant.messages.failed'));\n        setError(flowError);\n        setResult('failure');\n        onError?.(flowError);\n        return;\n      }\n\n      setResult(null);\n    },\n    [meta, onComplete, onError, t],\n  );\n\n  const startFlow = useCallback(\n    async (appId: string): Promise<void> => {\n      setIsLoading(true);\n      setError(null);\n      try {\n        const response = await executeEmbeddedDeviceGrantFlow({\n          baseUrl,\n          payload: {\n            applicationId: appId,\n            flowType: EmbeddedFlowType.DeviceGrant,\n            inputs: {},\n          },\n        });\n        clearVerificationParameters();\n        applyResponse(response);\n      } catch (flowError) {\n        handleError(flowError instanceof Error ? flowError : new Error(t('deviceGrant.errors.continue')));\n      } finally {\n        setIsLoading(false);\n      }\n    },\n    [applyResponse, baseUrl, handleError, t],\n  );\n\n  useEffect(() => {\n    const url = new URL(window.location.href);\n    if (!verificationParametersRead.current) {\n      verificationParametersRead.current = true;\n      const userCode = url.searchParams.get('user_code') ?? '';\n      if (userCode) setInitialValues({user_code: userCode});\n    }\n\n    const applicationIdFromUrl = url.searchParams.get('applicationId');\n    const appId = applicationIdFromUrl?.trim() ? applicationIdFromUrl : applicationId;\n    if (flowStartAttempted.current) return;\n    if (!appId) {\n      flowStartAttempted.current = true;\n      handleError(new Error(t('deviceGrant.errors.start')));\n      return;\n    }\n\n    flowStartAttempted.current = true;\n    void startFlow(appId);\n  }, [applicationId, handleError, startFlow, t]);\n\n  const submit = async (payload: EmbeddedSignInFlowRequest, actionId?: string): Promise<void> => {\n    setIsLoading(true);\n    setError(null);\n    setResult(null);\n    try {\n      if (!executionId) return;\n\n      const response = await executeEmbeddedDeviceGrantFlow({\n        baseUrl,\n        payload: {\n          action: payload.action ?? actionId,\n          challengeToken,\n          executionId,\n          inputs: {\n            ...Object.fromEntries(\n              Object.entries(payload.inputs ?? {}).filter(\n                ([key]: [string, unknown]) => !key.startsWith('__consent_opt__'),\n              ),\n            ),\n            ...(!hasUserCodeInput(components) ? {user_code: undefined} : {}),\n          },\n        },\n      });\n      applyResponse(response);\n    } catch (flowError) {\n      handleError(flowError instanceof Error ? flowError : new Error(t('deviceGrant.errors.continue')));\n    } finally {\n      setIsLoading(false);\n    }\n  };\n\n  const handleBaseSubmit = (payload: EmbeddedSignInFlowRequest, component: EmbeddedFlowComponent): Promise<void> =>\n    submit(payload, component.id);\n\n  const fieldErrors = useMemo<Record<string, string>>(() => {\n    const errors: Record<string, string> = {};\n    (serverFieldErrors ?? []).forEach((fieldError: DeviceGrantFieldError) => {\n      if (!(fieldError.identifier in errors)) errors[fieldError.identifier] = fieldError.message;\n    });\n\n    return errors;\n  }, [serverFieldErrors]);\n\n  if (children) {\n    return (\n      <>\n        {children({\n          additionalData,\n          components,\n          error,\n          fieldErrors,\n          initialValues,\n          isLoading,\n          meta,\n          onSubmit: submit,\n          result,\n        })}\n      </>\n    );\n  }\n\n  return (\n    <BaseDeviceGrant\n      {...baseProps}\n      className={className}\n      components={components}\n      additionalData={additionalData}\n      error={error}\n      initialValues={initialValues}\n      isLoading={isLoading}\n      onError={handleError}\n      onSubmit={handleBaseSubmit}\n      preferences={preferences}\n      result={result}\n      serverFieldErrors={serverFieldErrors}\n      size={size}\n      variant={variant}\n    />\n  );\n};\n\nexport default DeviceGrant;\n"],"mappings":";;;;;;;;;;;;;AA8CA,MAAM,oCAA0C;AAC9C,KAAI,CAAC,OAAO,SAAS,KAAM;CAC3B,MAAM,MAAM,IAAI,IAAI,OAAO,SAAS,KAAK;AACzC,KAAI,aAAa,OAAO,YAAY;AACpC,KAAI,aAAa,OAAO,gBAAgB;AACxC,QAAO,QAAQ,aAAa,OAAO,QAAQ,OAAO,IAAI,IAAI,UAAU,CAAC;;AAGvE,MAAM,oBAAoB,eACxB,WAAW,MACR,cACC,UAAU,QAAQ,eAAgB,MAAM,QAAQ,UAAU,WAAW,IAAI,iBAAiB,UAAU,WAAW,CAClH;;;;AAKH,MAAMA,eAAqC,EACzC,WAAW,QACX,YAAY,IACZ,aAAa,QACb,UAAU,QACV,cAAc,EAAE,EAChB,OAAO,UACP,UAAU,UACV,GAAG,gBACiC;CACpC,MAAM,EAAC,eAAe,SAAS,SAAQC,8BAAc;CACrD,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,qCAAmD,EAAE,CAAC;CACzE,MAAM,CAAC,gBAAgB,yCAAuD,EAAE,CAAC;CACjF,MAAM,CAAC,eAAe,wCAAqD,EAAE,CAAC;CAC9E,MAAM,CAAC,mBAAmB,4CAExB,KAAK;CACP,MAAM,CAAC,aAAa,sCAA2B,GAAG;CAClD,MAAM,CAAC,gBAAgB,yCAA8B,GAAG;CACxD,MAAM,CAAC,OAAO,gCAAmC,KAAK;CACtD,MAAM,CAAC,WAAW,0CAA+B;AAC/C,MAAI,cAAe,QAAO;AAC1B,SAAO,OAAO,WAAW,eAAe,QAAQ,IAAI,IAAI,OAAO,SAAS,KAAK,CAAC,aAAa,IAAI,gBAAgB,CAAC;GAChH;CACF,MAAM,CAAC,QAAQ,iCAAyC,KAAK;CAC7D,MAAM,uCAA4B,MAAM;CACxC,MAAM,+CAAoC,MAAM;CAEhD,MAAM,sCACH,cAA2B;AAC1B,gBAAc,EAAE,CAAC;AACjB,oBAAkB,EAAE,CAAC;AACrB,uBAAqB,KAAK;AAC1B,WAAS,UAAU;AACnB,YAAU,UAAU;AACpB,YAAU,UAAU;IAEtB,CAAC,QAAQ,CACV;CAED,MAAM,wCACH,aAAoD;EACnD,MAAM,aAAaC,8CACjB,UACA,GACA;GACE,cAAc;GACd,qBAAqB;GACtB,EACD,KACD;AACD,iBAAe,SAAS,YAAY;AACpC,oBAAkB,SAAS,kBAAkB,GAAG;AAChD,gBAAc,WAAW,WAAW;AACpC,oBAAkB,WAAW,eAAe;AAC5C,uBAAqB,SAAS,MAAM,eAAe,KAAK;AACxD,WAAS,SAAS,QAAQ,IAAI,MAAMC,4CAAoB,UAAU,EAAE,CAAC,GAAG,KAAK;AAE7E,MAAI,SAAS,eAAeC,6CAAyB,UAAU;AAC7D,aAAU,UAAU;AACpB,gBAAa,SAAS;AACtB;;AAGF,MAAI,SAAS,eAAeA,6CAAyB,OAAO;GAC1D,MAAM,YAAY,IAAI,MAAMD,4CAAoB,UAAU,GAAG,8BAA8B,CAAC;AAC5F,YAAS,UAAU;AACnB,aAAU,UAAU;AACpB,aAAU,UAAU;AACpB;;AAGF,YAAU,KAAK;IAEjB;EAAC;EAAM;EAAY;EAAS;EAAE,CAC/B;CAED,MAAM,mCACJ,OAAO,UAAiC;AACtC,eAAa,KAAK;AAClB,WAAS,KAAK;AACd,MAAI;GACF,MAAM,WAAW,8DAAqC;IACpD;IACA,SAAS;KACP,eAAe;KACf,UAAUE,qCAAiB;KAC3B,QAAQ,EAAE;KACX;IACF,CAAC;AACF,gCAA6B;AAC7B,iBAAc,SAAS;WAChB,WAAW;AAClB,eAAY,qBAAqB,QAAQ,YAAY,IAAI,MAAM,EAAE,8BAA8B,CAAC,CAAC;YACzF;AACR,gBAAa,MAAM;;IAGvB;EAAC;EAAe;EAAS;EAAa;EAAE,CACzC;AAED,4BAAgB;EACd,MAAM,MAAM,IAAI,IAAI,OAAO,SAAS,KAAK;AACzC,MAAI,CAAC,2BAA2B,SAAS;AACvC,8BAA2B,UAAU;GACrC,MAAM,WAAW,IAAI,aAAa,IAAI,YAAY,IAAI;AACtD,OAAI,SAAU,kBAAiB,EAAC,WAAW,UAAS,CAAC;;EAGvD,MAAM,uBAAuB,IAAI,aAAa,IAAI,gBAAgB;EAClE,MAAM,QAAQ,sBAAsB,MAAM,GAAG,uBAAuB;AACpE,MAAI,mBAAmB,QAAS;AAChC,MAAI,CAAC,OAAO;AACV,sBAAmB,UAAU;AAC7B,eAAY,IAAI,MAAM,EAAE,2BAA2B,CAAC,CAAC;AACrD;;AAGF,qBAAmB,UAAU;AAC7B,EAAK,UAAU,MAAM;IACpB;EAAC;EAAe;EAAa;EAAW;EAAE,CAAC;CAE9C,MAAM,SAAS,OAAO,SAAoC,aAAqC;AAC7F,eAAa,KAAK;AAClB,WAAS,KAAK;AACd,YAAU,KAAK;AACf,MAAI;AACF,OAAI,CAAC,YAAa;AAkBlB,iBAhBiB,8DAAqC;IACpD;IACA,SAAS;KACP,QAAQ,QAAQ,UAAU;KAC1B;KACA;KACA,QAAQ;MACN,GAAG,OAAO,YACR,OAAO,QAAQ,QAAQ,UAAU,EAAE,CAAC,CAAC,QAClC,CAAC,SAA4B,CAAC,IAAI,WAAW,kBAAkB,CACjE,CACF;MACD,GAAI,CAAC,iBAAiB,WAAW,GAAG,EAAC,WAAW,QAAU,GAAG,EAAE;MAChE;KACF;IACF,CAAC,CACqB;WAChB,WAAW;AAClB,eAAY,qBAAqB,QAAQ,YAAY,IAAI,MAAM,EAAE,8BAA8B,CAAC,CAAC;YACzF;AACR,gBAAa,MAAM;;;CAIvB,MAAM,oBAAoB,SAAoC,cAC5D,OAAO,SAAS,UAAU,GAAG;CAE/B,MAAM,uCAAoD;EACxD,MAAMC,SAAiC,EAAE;AACzC,GAAC,qBAAqB,EAAE,EAAE,SAAS,eAAsC;AACvE,OAAI,EAAE,WAAW,cAAc,QAAS,QAAO,WAAW,cAAc,WAAW;IACnF;AAEF,SAAO;IACN,CAAC,kBAAkB,CAAC;AAEvB,KAAI,SACF,QACE,mFACG,SAAS;EACR;EACA;EACA;EACA;EACA;EACA;EACA;EACA,UAAU;EACV;EACD,CAAC,GACD;AAIP,QACE,2CAACC;EACC,GAAI;EACO;EACC;EACI;EACT;EACQ;EACJ;EACX,SAAS;EACT,UAAU;EACG;EACL;EACW;EACb;EACG;GACT;;AAIN,0BAAe"}

package/dist/cjs/components/auth/InviteUser/BaseInviteUser.cjs

@@ -7,8 +7,8 @@ const require_useTranslation = require('../../../hooks/useTranslation.cjs');
 const require_flowTransformer = require('../../../utils/flowTransformer.cjs');
 const require_Spinner = require('../../primitives/Spinner/Spinner.cjs');
 const require_Typography = require('../../primitives/Typography/Typography.cjs');
-const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_Card = require('../../primitives/Card/Card.cjs');
+const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_AuthOptionFactory = require('../flow/AuthOptionFactory.cjs');
 const require_BaseInviteUser_styles = require('./BaseInviteUser.styles.cjs');
 let __thunderid_browser = require("@thunderid/browser");

package/dist/cjs/components/auth/Recovery/BaseRecovery.cjs

@@ -10,10 +10,10 @@ const require_useTranslation = require('../../../hooks/useTranslation.cjs');
 const require_flowTransformer = require('../../../utils/flowTransformer.cjs');
 const require_useForm = require('../../../hooks/useForm.cjs');
 const require_Spinner = require('../../primitives/Spinner/Spinner.cjs');
-const require_composeAffixedInputs = require('../../../utils/composeAffixedInputs.cjs');
 const require_Typography = require('../../primitives/Typography/Typography.cjs');
-const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_Card = require('../../primitives/Card/Card.cjs');
+const require_composeAffixedInputs = require('../../../utils/composeAffixedInputs.cjs');
+const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_AuthOptionFactory = require('../flow/AuthOptionFactory.cjs');
 const require_BaseSignUp_styles = require('../SignUp/BaseSignUp.styles.cjs');
 const require_getAuthComponentHeadings = require('../../../utils/getAuthComponentHeadings.cjs');

package/dist/cjs/components/auth/SignIn/BaseSignIn.cjs

@@ -10,11 +10,11 @@ const require_useTranslation = require('../../../hooks/useTranslation.cjs');
 const require_flowTransformer = require('../../../utils/flowTransformer.cjs');
 const require_useForm = require('../../../hooks/useForm.cjs');
 const require_Spinner = require('../../primitives/Spinner/Spinner.cjs');
+const require_Typography = require('../../primitives/Typography/Typography.cjs');
+const require_Card = require('../../primitives/Card/Card.cjs');
 const require_BaseSignIn_styles = require('./BaseSignIn.styles.cjs');
 const require_composeAffixedInputs = require('../../../utils/composeAffixedInputs.cjs');
-const require_Typography = require('../../primitives/Typography/Typography.cjs');
 const require_Alert = require('../../primitives/Alert/Alert.cjs');
-const require_Card = require('../../primitives/Card/Card.cjs');
 const require_AuthOptionFactory = require('../flow/AuthOptionFactory.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -27,7 +27,7 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 /**
 * Internal component that consumes FlowContext and renders the sign-in UI.
 */
-const BaseSignInContent = ({ components = [], onSubmit, onError, error: externalError, id, className = "", inputClassName = "", buttonClassName = "", messageClassName = "", size = "medium", variant = "outlined", isLoading: externalIsLoading, children, additionalData = {}, isTimeoutDisabled = false, serverFieldErrors = null, revalidateOnChangeAfterBlur = false }) => {
+const BaseSignInContent = ({ components = [], onSubmit, onError, error: externalError, id, className = "", inputClassName = "", buttonClassName = "", messageClassName = "", size = "medium", variant = "outlined", isLoading: externalIsLoading, initialValues, children, additionalData = {}, isTimeoutDisabled = false, serverFieldErrors = null, revalidateOnChangeAfterBlur = false }) => {
 	const { meta, vendor } = require_useThunderID.default();
 	const { theme } = require_useTheme.default();
 	const customRenderers = (0, react.useContext)(require_ComponentRendererContext.default);
@@ -98,7 +98,7 @@ const BaseSignInContent = ({ components = [], onSubmit, onError, error: external
 		processComponents(flowComponents);
 		return fields;
 	}, [t]);
-	const { values: formValues, touched: touchedFields, errors: formErrors, isValid: isFormValid, setValue: setFormValue, setTouched: setFormTouched, setTouchedFields, setErrors: setFormErrors, clearErrors: clearFormErrors, validateForm, touchAllFields, reset: resetForm, revalidateTouchedFields } = require_useForm.useForm({
+	const { values: formValues, touched: touchedFields, errors: formErrors, isValid: isFormValid, setValue: setFormValue, setValues: setFormValues, setTouched: setFormTouched, setTouchedFields, setErrors: setFormErrors, clearErrors: clearFormErrors, validateForm, touchAllFields, reset: resetForm, revalidateTouchedFields } = require_useForm.useForm({
 		fields: (0, react.useMemo)(() => components ? extractFormFields(components) : [], [components, extractFormFields]),
 		initialValues: {},
 		requiredMessage: t("validations.required.field.error"),
@@ -106,6 +106,17 @@ const BaseSignInContent = ({ components = [], onSubmit, onError, error: external
 		validateOnBlur: true,
 		validateOnChange: false
 	});
+	const initialValuesKey = (0, react.useMemo)(() => JSON.stringify(Object.entries(initialValues ?? {}).sort(([left], [right]) => left.localeCompare(right))), [initialValues]);
+	const appliedInitialValuesKeyRef = (0, react.useRef)(null);
+	(0, react.useEffect)(() => {
+		if (!initialValues || Object.keys(initialValues).length === 0 || appliedInitialValuesKeyRef.current === initialValuesKey) return;
+		appliedInitialValuesKeyRef.current = initialValuesKey;
+		setFormValues(initialValues);
+	}, [
+		initialValues,
+		initialValuesKey,
+		setFormValues
+	]);
 	(0, react.useEffect)(() => {
 		clearFormErrors();
 		if (!serverFieldErrors || serverFieldErrors.length === 0) return;