@thunderid/react 1.13.0 → 1.15.0

package/dist/cjs/components/admin/ApplicationDetails/ApplicationDetails.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApplicationDetails.cjs","names":["ApplicationDetails: FC<ApplicationDetailsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","application: ResourceQueryResult<Application>","useResourceQuery","ApplicationQueryKeys","deletion: ResourceMutationResult<void, string>","useResourceMutation","update: ResourceMutationResult<Application, UpdateApplicationVariables>","regeneration: ResourceMutationResult<RegenerateClientSecretResult, string>","lifecycle: AccountLifecycleState","useAccountLifecycle","BaseApplicationDetails"],"sources":["../../../../../src/components/admin/ApplicationDetails/ApplicationDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  Application,\n  ApplicationQueryKeys,\n  deleteApplication,\n  getApplication,\n  regenerateClientSecret,\n  RegenerateClientSecretResult,\n  toManagementErrorMessage,\n  toUpdateApplicationRequest,\n  updateApplication,\n} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseApplicationDetails, {\n  ApplicationUpdateSubmission,\n  BaseApplicationDetailsProps,\n} from './BaseApplicationDetails';\nimport useAccountLifecycle, {AccountLifecycleState} from '../../../hooks/management/useAccountLifecycle';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\ninterface UpdateApplicationVariables {\n  application: Application;\n  changes: ApplicationUpdateSubmission;\n}\n\nexport type ApplicationDetailsProps = Omit<\n  BaseApplicationDetailsProps,\n  | 'application'\n  | 'clientSecret'\n  | 'error'\n  | 'isDeleting'\n  | 'isLoading'\n  | 'isRegeneratingSecret'\n  | 'isRunningLifecycleAction'\n  | 'isUpdating'\n  | 'lifecycleActions'\n  | 'onDelete'\n  | 'onLifecycleAction'\n  | 'onRegenerateSecret'\n  | 'onSecretDismiss'\n  | 'onUpdate'\n> & {\n  /**\n   * How the delete and the client secret regeneration run. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  applicationId: string;\n  /**\n   * Whether the application can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the application's general fields, redirect URIs and grant types can be edited from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether the application can be suspended and unsuspended from this view. Each action runs through its\n   * administration flow and is offered only when the server configures that flow. Reading the configured\n   * flows needs a token that may read the server configuration.\n   * @default false\n   */\n  lifecycleActions?: boolean;\n  /**\n   * Called after the application has been deleted.\n   */\n  onDeleted?: () => void;\n  /**\n   * Whether the application's client secret can be regenerated from this view. The new secret is shown\n   * once.\n   * @default false\n   */\n  secretRegenerable?: boolean;\n};\n\n/**\n * Shows an application and its OAuth configuration, and optionally lets the signed-in user edit it,\n * regenerate its client secret or delete it.\n *\n * The server guards applications with the root `system` permission, for reading and for changes alike;\n * it defines no application-specific permission. Gate the view and its actions on it with\n * `useGrantedPermissions().can('system')`.\n *\n * @example\n * ```tsx\n * const {can} = useGrantedPermissions();\n * const isAdmin = can('system');\n *\n * <ApplicationDetails\n *   applicationId={applicationId}\n *   editable={isAdmin}\n *   deletable={isAdmin}\n *   secretRegenerable={isAdmin}\n *   onDeleted={() => navigate('/applications')}\n * />\n * ```\n */\nconst ApplicationDetails: FC<ApplicationDetailsProps> = ({\n  administrationMode,\n  applicationId,\n  deletable = false,\n  editable = false,\n  lifecycleActions = false,\n  onDeleted,\n  preferences,\n  secretRegenerable = false,\n  ...rest\n}: ApplicationDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('applications');\n  const application: ResourceQueryResult<Application> = useResourceQuery(\n    [ApplicationQueryKeys.APPLICATION, applicationId],\n    (fetcher) => getApplication({...endpoint, applicationId, fetcher}),\n    {enabled: Boolean(applicationId)},\n  );\n  const deletion: ResourceMutationResult<void, string> = useResourceMutation(\n    (id: string, fetcher) => deleteApplication({...endpoint, administrationMode, applicationId: id, fetcher}),\n    () => [[ApplicationQueryKeys.APPLICATIONS]],\n    {onSuccess: onDeleted},\n  );\n  const update: ResourceMutationResult<Application, UpdateApplicationVariables> = useResourceMutation(\n    ({application: current, changes}: UpdateApplicationVariables, fetcher) =>\n      updateApplication({\n        ...endpoint,\n        applicationId: current.id,\n        fetcher,\n        payload: toUpdateApplicationRequest(current, changes),\n      }),\n    ({application: current}: UpdateApplicationVariables) => [\n      [ApplicationQueryKeys.APPLICATION, current.id],\n      [ApplicationQueryKeys.APPLICATIONS],\n    ],\n  );\n  const regeneration: ResourceMutationResult<RegenerateClientSecretResult, string> = useResourceMutation(\n    (id: string, fetcher) => regenerateClientSecret({...endpoint, administrationMode, applicationId: id, fetcher}),\n    (id: string) => [[ApplicationQueryKeys.APPLICATION, id], [ApplicationQueryKeys.APPLICATIONS]],\n  );\n\n  const lifecycle: AccountLifecycleState = useAccountLifecycle({\n    enabled: lifecycleActions,\n    invalidatedKeys: [[ApplicationQueryKeys.APPLICATION, applicationId], [ApplicationQueryKeys.APPLICATIONS]],\n    kind: 'application',\n    status: application.data?.status?.value,\n    subject: applicationId,\n  });\n\n  return (\n    <BaseApplicationDetails\n      application={application.data}\n      isLoading={application.isLoading}\n      error={\n        toManagementErrorMessage(t, application.error, 'admin.applications.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.applications.details.delete.error') ??\n        toManagementErrorMessage(t, update.error, 'admin.applications.details.edit.error') ??\n        toManagementErrorMessage(t, regeneration.error, 'admin.applications.details.secret.error') ??\n        toManagementErrorMessage(t, lifecycle.error, 'admin.common.lifecycle.error') ??\n        toManagementErrorMessage(t, lifecycle.loadError, 'admin.common.lifecycle.load_error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(applicationId) : undefined}\n      lifecycleActions={lifecycle.actions}\n      isRunningLifecycleAction={lifecycle.isRunning}\n      onLifecycleAction={lifecycleActions ? lifecycle.run : undefined}\n      isUpdating={update.isLoading}\n      onUpdate={\n        editable && application.data\n          ? (changes: ApplicationUpdateSubmission): void =>\n              void update.mutate({application: application.data!, changes})\n          : undefined\n      }\n      isRegeneratingSecret={regeneration.isLoading}\n      onRegenerateSecret={secretRegenerable ? (): void => void regeneration.mutate(applicationId) : undefined}\n      clientSecret={regeneration.data?.clientSecret ?? null}\n      onSecretDismiss={regeneration.reset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default ApplicationDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0GA,MAAMA,sBAAmD,EACvD,oBACA,eACA,YAAY,OACZ,WAAW,OACX,mBAAmB,OACnB,WACA,aACA,oBAAoB,MACpB,GAAG,WACwC;CAC3C,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,sCAAsB,eAAe;CAC1E,MAAMC,cAAgDC,iCACpD,CAACC,yCAAqB,aAAa,cAAc,GAChD,oDAA2B;EAAC,GAAG;EAAU;EAAe;EAAQ,CAAC,EAClE,EAAC,SAAS,QAAQ,cAAc,EAAC,CAClC;CACD,MAAMC,WAAiDC,qCACpD,IAAY,uDAA8B;EAAC,GAAG;EAAU;EAAoB,eAAe;EAAI;EAAQ,CAAC,QACnG,CAAC,CAACF,yCAAqB,aAAa,CAAC,EAC3C,EAAC,WAAW,WAAU,CACvB;CACD,MAAMG,SAA0ED,qCAC7E,EAAC,aAAa,SAAS,WAAsC,uDAC1C;EAChB,GAAG;EACH,eAAe,QAAQ;EACvB;EACA,6DAAoC,SAAS,QAAQ;EACtD,CAAC,GACH,EAAC,aAAa,cAAyC,CACtD,CAACF,yCAAqB,aAAa,QAAQ,GAAG,EAC9C,CAACA,yCAAqB,aAAa,CACpC,CACF;CACD,MAAMI,eAA6EF,qCAChF,IAAY,4DAAmC;EAAC,GAAG;EAAU;EAAoB,eAAe;EAAI;EAAQ,CAAC,GAC7G,OAAe,CAAC,CAACF,yCAAqB,aAAa,GAAG,EAAE,CAACA,yCAAqB,aAAa,CAAC,CAC9F;CAED,MAAMK,YAAmCC,oCAAoB;EAC3D,SAAS;EACT,iBAAiB,CAAC,CAACN,yCAAqB,aAAa,cAAc,EAAE,CAACA,yCAAqB,aAAa,CAAC;EACzG,MAAM;EACN,QAAQ,YAAY,MAAM,QAAQ;EAClC,SAAS;EACV,CAAC;AAEF,QACE,2CAACO;EACC,aAAa,YAAY;EACzB,WAAW,YAAY;EACvB,yDAC2B,GAAG,YAAY,OAAO,mCAAmC,sDACzD,GAAG,SAAS,OAAO,0CAA0C,sDAC7D,GAAG,OAAO,OAAO,wCAAwC,sDACzD,GAAG,aAAa,OAAO,0CAA0C,sDACjE,GAAG,UAAU,OAAO,+BAA+B,sDACnD,GAAG,UAAU,WAAW,oCAAoC;EAEvF,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,cAAc,GAAG;EACxE,kBAAkB,UAAU;EAC5B,0BAA0B,UAAU;EACpC,mBAAmB,mBAAmB,UAAU,MAAM;EACtD,YAAY,OAAO;EACnB,UACE,YAAY,YAAY,QACnB,YACC,KAAK,OAAO,OAAO;GAAC,aAAa,YAAY;GAAO;GAAQ,CAAC,GAC/D;EAEN,sBAAsB,aAAa;EACnC,oBAAoB,0BAAgC,KAAK,aAAa,OAAO,cAAc,GAAG;EAC9F,cAAc,aAAa,MAAM,gBAAgB;EACjD,iBAAiB,aAAa;EACjB;EACb,GAAI;GACJ;;AAIN,iCAAe"}

package/dist/cjs/components/admin/ApplicationDetails/BaseApplicationDetails.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseApplicationDetails.cjs","names":["BaseApplicationDetails: FC<BaseApplicationDetailsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","oauthConfig: OAuth2Config | undefined","isWritable: boolean","canRegenerate: boolean","oauth: Omit<OAuth2Config, 'clientSecret'> | undefined","AdminSection","Spinner","Alert","notSet: string","overview: DetailListItem[]","CopyableText","AccessStatusBadge","AccountLifecycleButtons","ConfirmButton","Panel","ApplicationFormFields","Button","DetailList","ClientSecretNotice","ChipList","APPLICATION_GRANT_TYPES"],"sources":["../../../../../src/components/admin/ApplicationDetails/BaseApplicationDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AccountLifecycleAction,\n  Application,\n  APPLICATION_GRANT_TYPES,\n  ApplicationSubmission,\n  getApplicationOAuthConfig,\n  isApplicationSubmissionValid,\n  OAuth2Config,\n  parseRedirectUris,\n  Preferences,\n} from '@thunderid/browser';\nimport {FC, FormEvent, ReactElement, ReactNode, useState} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport Button from '../../primitives/Button/Button';\nimport CopyableText from '../../primitives/CopyableText/CopyableText';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport {AccessStatusBadge, AccountLifecycleButtons} from '../shared/AccountLifecycleParts';\nimport {ChipList, ConfirmButton, DetailList, DetailListItem, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport ApplicationFormFields, {ApplicationFormValues, ApplicationTextField} from '../shared/ApplicationFormFields';\nimport ClientSecretNotice from '../shared/ClientSecretNotice';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * The edited fields {@link BaseApplicationDetails} hands `onUpdate`. Whether the client is public does\n * not change.\n */\nexport type ApplicationUpdateSubmission = Omit<ApplicationSubmission, 'publicClient'>;\n\n/**\n * What {@link BaseApplicationDetails} hands its `children` render function, so the application can be\n * shown with any UI.\n */\nexport interface BaseApplicationDetailsRenderProps {\n  application?: Application;\n  /**\n   * The new client secret, to show once. `null` while there is none.\n   */\n  clientSecret: string | null;\n  error: string | null;\n  isDeleting: boolean;\n  isLoading: boolean;\n  isRegeneratingSecret: boolean;\n  isRunningLifecycleAction: boolean;\n  isUpdating: boolean;\n  /**\n   * The account lifecycle actions offered for the application. Empty when none is allowed.\n   */\n  lifecycleActions: AccountLifecycleAction[];\n  /**\n   * The application's OAuth configuration, without its client secret. Undefined when it has no OAuth client.\n   */\n  oauth?: Omit<OAuth2Config, 'clientSecret'>;\n  /**\n   * Deletes the application. Undefined when deletion is not allowed, including for read-only applications.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action. Undefined when none is allowed.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  /**\n   * Gives the application a new client secret. Undefined when not allowed, for read-only applications\n   * and for applications without a confidential OAuth client.\n   */\n  onRegenerateSecret?: () => void;\n  /**\n   * Hides the new client secret once it has been copied. Undefined while there is no secret.\n   */\n  onSecretDismiss?: () => void;\n  /**\n   * Saves edited fields. Undefined when editing is not allowed, including for read-only applications.\n   */\n  onUpdate?: (application: ApplicationUpdateSubmission) => void;\n}\n\nexport interface BaseApplicationDetailsProps {\n  /**\n   * Controls rendered next to the application's name.\n   */\n  actions?: ReactNode;\n  application?: Application;\n  /**\n   * Renders custom UI in place of the default view. Receives the application, its OAuth configuration,\n   * the loading and error state, the actions the app allows and the new client secret to show.\n   */\n  children?: (props: BaseApplicationDetailsRenderProps) => ReactNode;\n  className?: string;\n  /**\n   * A client secret just generated by `onRegenerateSecret`, shown once until `onSecretDismiss` clears it.\n   */\n  clientSecret?: string | null;\n  error?: string | null;\n  isDeleting?: boolean;\n  isLoading?: boolean;\n  isRegeneratingSecret?: boolean;\n  isRunningLifecycleAction?: boolean;\n  isUpdating?: boolean;\n  /**\n   * The account lifecycle actions to offer (suspend, unsuspend; applications are never locked), shown only with `onLifecycleAction`. They change\n   * only runtime state, so they apply to read-only applications too.\n   */\n  lifecycleActions?: AccountLifecycleAction[];\n  /**\n   * Deletes the application. The delete action is hidden when omitted.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action. Suspending and unsuspending ask for confirmation first.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  /**\n   * Gives the application a new client secret. The regenerate action is hidden when omitted, and for\n   * public clients, which have no secret.\n   */\n  onRegenerateSecret?: () => void;\n  /**\n   * Called when the user has copied the new client secret.\n   */\n  onSecretDismiss?: () => void;\n  /**\n   * Saves the edited general fields, redirect URIs and grant types. Editing is offered only when set.\n   */\n  onUpdate?: (application: ApplicationUpdateSubmission) => void;\n  preferences?: Preferences;\n}\n\nconst toFormValues = (application: Application, oauth?: OAuth2Config): ApplicationFormValues => ({\n  description: application.description ?? '',\n  grantTypes: oauth?.grantTypes ?? [],\n  logoUrl: application.logoUrl ?? '',\n  name: application.name,\n  publicClient: Boolean(oauth?.publicClient),\n  redirectUris: (oauth?.redirectUris ?? []).join(', '),\n  url: application.url ?? '',\n});\n\nconst toSubmission = (values: ApplicationFormValues): ApplicationSubmission => ({\n  description: values.description.trim() || undefined,\n  grantTypes: values.grantTypes,\n  logoUrl: values.logoUrl.trim() || undefined,\n  name: values.name.trim(),\n  publicClient: values.publicClient,\n  redirectUris: parseRedirectUris(values.redirectUris),\n  url: values.url.trim() || undefined,\n});\n\n/**\n * Shows an application's general fields and OAuth configuration. Holds no data of its own: pass the\n * application and handle editing, deletion and client secret regeneration, each offered only when its\n * handler is set.\n */\nconst BaseApplicationDetails: FC<BaseApplicationDetailsProps> = ({\n  actions,\n  application,\n  children,\n  className,\n  clientSecret = null,\n  error = null,\n  isDeleting = false,\n  isLoading = false,\n  isRegeneratingSecret = false,\n  isRunningLifecycleAction = false,\n  isUpdating = false,\n  lifecycleActions = [],\n  onDelete,\n  onLifecycleAction,\n  onRegenerateSecret,\n  onSecretDismiss,\n  onUpdate,\n  preferences,\n}: BaseApplicationDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n  const [draft, setDraft] = useState<ApplicationFormValues | null>(null);\n\n  const oauthConfig: OAuth2Config | undefined = getApplicationOAuthConfig(application);\n  const isWritable: boolean = Boolean(application) && !application?.isReadOnly;\n  const canRegenerate: boolean = isWritable && Boolean(oauthConfig) && !oauthConfig?.publicClient;\n\n  if (children) {\n    let oauth: Omit<OAuth2Config, 'clientSecret'> | undefined;\n\n    if (oauthConfig) {\n      const {clientSecret: storedSecret, ...rest}: OAuth2Config = oauthConfig;\n      void storedSecret;\n      oauth = rest;\n    }\n\n    return (\n      <div className={className}>\n        {children({\n          application,\n          clientSecret,\n          error,\n          isDeleting,\n          isLoading,\n          isRegeneratingSecret,\n          isRunningLifecycleAction,\n          isUpdating,\n          lifecycleActions: onLifecycleAction && application ? lifecycleActions : [],\n          oauth,\n          onDelete: isWritable ? onDelete : undefined,\n          onLifecycleAction: application ? onLifecycleAction : undefined,\n          onRegenerateSecret: canRegenerate ? onRegenerateSecret : undefined,\n          onSecretDismiss: clientSecret ? onSecretDismiss : undefined,\n          onUpdate: isWritable ? onUpdate : undefined,\n        })}\n      </div>\n    );\n  }\n\n  if (isLoading && !application) {\n    return (\n      <AdminSection block=\"application-details\" className={className} preferences={preferences}>\n        <span className={styles['muted']} role=\"status\">\n          <Spinner size=\"small\" /> {t('admin.common.loading')}\n        </span>\n      </AdminSection>\n    );\n  }\n\n  if (!application) {\n    return (\n      <AdminSection block=\"application-details\" className={className} preferences={preferences}>\n        <Alert variant=\"error\" role=\"alert\">\n          {error ?? t('admin.common.errors.not_found')}\n        </Alert>\n      </AdminSection>\n    );\n  }\n\n  const notSet: string = t('admin.applications.details.not_set');\n  const overview: DetailListItem[] = [\n    {\n      label: t('admin.applications.list.columns.client_id'),\n      value: oauthConfig?.clientId ? <CopyableText value={oauthConfig.clientId} /> : notSet,\n    },\n    {label: t('admin.applications.details.type'), value: application.type ?? application.template ?? notSet},\n    {label: t('admin.common.columns.organization_unit'), value: application.ouId ?? notSet},\n    {label: t('admin.applications.fields.url'), value: application.url ?? notSet},\n    {label: t('admin.applications.fields.logo_url'), value: application.logoUrl ?? notSet},\n  ];\n\n  if (application.status?.value) {\n    overview.push({\n      label: t('admin.common.columns.status'),\n      value: <AccessStatusBadge status={application.status.value} />,\n    });\n  }\n\n  const handleSave = (event: FormEvent<HTMLFormElement>): void => {\n    event.preventDefault();\n\n    if (!draft) {\n      return;\n    }\n\n    const {publicClient, ...submission}: ApplicationSubmission = toSubmission(draft);\n    void publicClient;\n    onUpdate?.(submission);\n    setDraft(null);\n  };\n\n  return (\n    <AdminSection\n      block=\"application-details\"\n      className={className}\n      title={application.name}\n      description={application.description}\n      preferences={preferences}\n      actions={\n        <>\n          {actions}\n          {onLifecycleAction && (\n            <AccountLifecycleButtons\n              actions={lifecycleActions}\n              isRunning={isRunningLifecycleAction}\n              name={application.name}\n              onAction={onLifecycleAction}\n            />\n          )}\n          {onDelete && isWritable && (\n            <ConfirmButton\n              confirmText={t('admin.applications.details.delete.confirm', {name: application.name})}\n              isLoading={isDeleting}\n              onConfirm={onDelete}\n            >\n              {t('admin.applications.details.delete.action')}\n            </ConfirmButton>\n          )}\n        </>\n      }\n    >\n      {error && (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      )}\n      {draft ? (\n        <Panel title={t('admin.applications.details.edit.action')}>\n          <form\n            className={styles['row']}\n            style={{alignItems: 'stretch', flexDirection: 'column'}}\n            onSubmit={handleSave}\n            noValidate\n          >\n            <ApplicationFormFields\n              preferences={preferences}\n              values={draft}\n              onInputChange={(field: ApplicationTextField, value: string): void =>\n                setDraft((previous: ApplicationFormValues | null) => previous && {...previous, [field]: value})\n              }\n              onGrantTypesChange={(grantTypes: string[]): void =>\n                setDraft((previous: ApplicationFormValues | null) => previous && {...previous, grantTypes})\n              }\n            />\n            <div className={styles['row']} style={{justifyContent: 'flex-end'}}>\n              <Button type=\"button\" variant=\"text\" disabled={isUpdating} onClick={(): void => setDraft(null)}>\n                {t('admin.common.actions.cancel')}\n              </Button>\n              <Button\n                type=\"submit\"\n                loading={isUpdating}\n                disabled={isUpdating || !isApplicationSubmissionValid(toSubmission(draft))}\n              >\n                {t('admin.applications.details.edit.save')}\n              </Button>\n            </div>\n          </form>\n        </Panel>\n      ) : (\n        <>\n          <Panel\n            title={t('admin.applications.details.overview')}\n            actions={\n              onUpdate && isWritable ? (\n                <Button\n                  variant=\"outline\"\n                  size=\"small\"\n                  onClick={(): void => setDraft(toFormValues(application, oauthConfig))}\n                >\n                  {t('admin.applications.details.edit.action')}\n                </Button>\n              ) : undefined\n            }\n          >\n            <DetailList items={overview} />\n          </Panel>\n          {oauthConfig && (\n            <Panel\n              title={t('admin.applications.details.oauth')}\n              actions={\n                onRegenerateSecret && canRegenerate && !clientSecret ? (\n                  <ConfirmButton\n                    confirmText={t('admin.applications.details.secret.confirm', {name: application.name})}\n                    isLoading={isRegeneratingSecret}\n                    onConfirm={onRegenerateSecret}\n                  >\n                    {t('admin.applications.details.secret.action')}\n                  </ConfirmButton>\n                ) : undefined\n              }\n            >\n              {clientSecret && (\n                <ClientSecretNotice secret={clientSecret} onDismiss={onSecretDismiss} preferences={preferences} />\n              )}\n              <DetailList\n                items={[\n                  {\n                    label: t('admin.applications.fields.grant_types'),\n                    value: (\n                      <ChipList\n                        label={t('admin.applications.fields.grant_types')}\n                        emptyText={t('admin.applications.details.no_grant_types')}\n                        items={(oauthConfig.grantTypes ?? []).map((grantType: string) => ({\n                          id: grantType,\n                          label: APPLICATION_GRANT_TYPES.includes(grantType)\n                            ? t(`admin.applications.grant_types.${grantType}`)\n                            : grantType,\n                        }))}\n                      />\n                    ),\n                  },\n                  {\n                    label: t('admin.applications.fields.redirect_uris'),\n                    value: (\n                      <ChipList\n                        label={t('admin.applications.fields.redirect_uris')}\n                        emptyText={t('admin.applications.details.no_redirect_uris')}\n                        items={(oauthConfig.redirectUris ?? []).map((uri: string) => ({id: uri, label: uri}))}\n                      />\n                    ),\n                  },\n                  {\n                    label: t('admin.applications.details.public_client'),\n                    value: oauthConfig.publicClient\n                      ? t('admin.applications.details.yes')\n                      : t('admin.applications.details.no'),\n                  },\n                ]}\n              />\n            </Panel>\n          )}\n        </>\n      )}\n    </AdminSection>\n  );\n};\n\nexport default BaseApplicationDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAmIA,MAAM,gBAAgB,aAA0B,WAAiD;CAC/F,aAAa,YAAY,eAAe;CACxC,YAAY,OAAO,cAAc,EAAE;CACnC,SAAS,YAAY,WAAW;CAChC,MAAM,YAAY;CAClB,cAAc,QAAQ,OAAO,aAAa;CAC1C,eAAe,OAAO,gBAAgB,EAAE,EAAE,KAAK,KAAK;CACpD,KAAK,YAAY,OAAO;CACzB;AAED,MAAM,gBAAgB,YAA0D;CAC9E,aAAa,OAAO,YAAY,MAAM,IAAI;CAC1C,YAAY,OAAO;CACnB,SAAS,OAAO,QAAQ,MAAM,IAAI;CAClC,MAAM,OAAO,KAAK,MAAM;CACxB,cAAc,OAAO;CACrB,yDAAgC,OAAO,aAAa;CACpD,KAAK,OAAO,IAAI,MAAM,IAAI;CAC3B;;;;;;AAOD,MAAMA,0BAA2D,EAC/D,SACA,aACA,UACA,WACA,eAAe,MACf,QAAQ,MACR,aAAa,OACb,YAAY,OACZ,uBAAuB,OACvB,2BAA2B,OAC3B,aAAa,OACb,mBAAmB,EAAE,EACrB,UACA,mBACA,oBACA,iBACA,UACA,kBAC+C;CAC/C,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,oCAAoB;CAC3D,MAAM,CAAC,OAAO,gCAAmD,KAAK;CAEtE,MAAMC,iEAAkE,YAAY;CACpF,MAAMC,aAAsB,QAAQ,YAAY,IAAI,CAAC,aAAa;CAClE,MAAMC,gBAAyB,cAAc,QAAQ,YAAY,IAAI,CAAC,aAAa;AAEnF,KAAI,UAAU;EACZ,IAAIC;AAEJ,MAAI,aAAa;GACf,MAAM,EAAC,cAAc,aAAc,GAAG,SAAsB;AAE5D,WAAQ;;AAGV,SACE,2CAAC;GAAe;aACb,SAAS;IACR;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,kBAAkB,qBAAqB,cAAc,mBAAmB,EAAE;IAC1E;IACA,UAAU,aAAa,WAAW;IAClC,mBAAmB,cAAc,oBAAoB;IACrD,oBAAoB,gBAAgB,qBAAqB;IACzD,iBAAiB,eAAe,kBAAkB;IAClD,UAAU,aAAa,WAAW;IACnC,CAAC;IACE;;AAIV,KAAI,aAAa,CAAC,YAChB,QACE,2CAACC;EAAa,OAAM;EAAiC;EAAwB;YAC3E,4CAAC;GAAK,WAAW,OAAO;GAAU,MAAK;;IACrC,2CAACC,2BAAQ,MAAK,UAAU;;IAAE,EAAE,uBAAuB;;IAC9C;GACM;AAInB,KAAI,CAAC,YACH,QACE,2CAACD;EAAa,OAAM;EAAiC;EAAwB;YAC3E,2CAACE;GAAM,SAAQ;GAAQ,MAAK;aACzB,SAAS,EAAE,gCAAgC;IACtC;GACK;CAInB,MAAMC,SAAiB,EAAE,qCAAqC;CAC9D,MAAMC,WAA6B;EACjC;GACE,OAAO,EAAE,4CAA4C;GACrD,OAAO,aAAa,WAAW,2CAACC,gCAAa,OAAO,YAAY,WAAY,GAAG;GAChF;EACD;GAAC,OAAO,EAAE,kCAAkC;GAAE,OAAO,YAAY,QAAQ,YAAY,YAAY;GAAO;EACxG;GAAC,OAAO,EAAE,yCAAyC;GAAE,OAAO,YAAY,QAAQ;GAAO;EACvF;GAAC,OAAO,EAAE,gCAAgC;GAAE,OAAO,YAAY,OAAO;GAAO;EAC7E;GAAC,OAAO,EAAE,qCAAqC;GAAE,OAAO,YAAY,WAAW;GAAO;EACvF;AAED,KAAI,YAAY,QAAQ,MACtB,UAAS,KAAK;EACZ,OAAO,EAAE,8BAA8B;EACvC,OAAO,2CAACC,mDAAkB,QAAQ,YAAY,OAAO,QAAS;EAC/D,CAAC;CAGJ,MAAM,cAAc,UAA4C;AAC9D,QAAM,gBAAgB;AAEtB,MAAI,CAAC,MACH;EAGF,MAAM,EAAC,aAAc,GAAG,eAAqC,aAAa,MAAM;AAEhF,aAAW,WAAW;AACtB,WAAS,KAAK;;AAGhB,QACE,4CAACN;EACC,OAAM;EACK;EACX,OAAO,YAAY;EACnB,aAAa,YAAY;EACZ;EACb,SACE;GACG;GACA,qBACC,2CAACO;IACC,SAAS;IACT,WAAW;IACX,MAAM,YAAY;IAClB,UAAU;KACV;GAEH,YAAY,cACX,2CAACC;IACC,aAAa,EAAE,6CAA6C,EAAC,MAAM,YAAY,MAAK,CAAC;IACrF,WAAW;IACX,WAAW;cAEV,EAAE,2CAA2C;KAChC;MAEjB;aAGJ,SACC,2CAACN;GAAM,SAAQ;GAAQ,MAAK;aACzB;IACK,EAET,QACC,2CAACO;GAAM,OAAO,EAAE,yCAAyC;aACvD,4CAAC;IACC,WAAW,OAAO;IAClB,OAAO;KAAC,YAAY;KAAW,eAAe;KAAS;IACvD,UAAU;IACV;eAEA,2CAACC;KACc;KACb,QAAQ;KACR,gBAAgB,OAA6B,UAC3C,UAAU,aAA2C,YAAY;MAAC,GAAG;OAAW,QAAQ;MAAM,CAAC;KAEjG,qBAAqB,eACnB,UAAU,aAA2C,YAAY;MAAC,GAAG;MAAU;MAAW,CAAC;MAE7F,EACF,4CAAC;KAAI,WAAW,OAAO;KAAQ,OAAO,EAAC,gBAAgB,YAAW;gBAChE,2CAACC;MAAO,MAAK;MAAS,SAAQ;MAAO,UAAU;MAAY,eAAqB,SAAS,KAAK;gBAC3F,EAAE,8BAA8B;OAC1B,EACT,2CAACA;MACC,MAAK;MACL,SAAS;MACT,UAAU,cAAc,uDAA8B,aAAa,MAAM,CAAC;gBAEzE,EAAE,uCAAuC;OACnC;MACL;KACD;IACD,GAER,qFACE,2CAACF;GACC,OAAO,EAAE,sCAAsC;GAC/C,SACE,YAAY,aACV,2CAACE;IACC,SAAQ;IACR,MAAK;IACL,eAAqB,SAAS,aAAa,aAAa,YAAY,CAAC;cAEpE,EAAE,yCAAyC;KACrC,GACP;aAGN,2CAACC,iCAAW,OAAO,WAAY;IACzB,EACP,eACC,4CAACH;GACC,OAAO,EAAE,mCAAmC;GAC5C,SACE,sBAAsB,iBAAiB,CAAC,eACtC,2CAACD;IACC,aAAa,EAAE,6CAA6C,EAAC,MAAM,YAAY,MAAK,CAAC;IACrF,WAAW;IACX,WAAW;cAEV,EAAE,2CAA2C;KAChC,GACd;cAGL,gBACC,2CAACK;IAAmB,QAAQ;IAAc,WAAW;IAA8B;KAAe,EAEpG,2CAACD,iCACC,OAAO;IACL;KACE,OAAO,EAAE,wCAAwC;KACjD,OACE,2CAACE;MACC,OAAO,EAAE,wCAAwC;MACjD,WAAW,EAAE,4CAA4C;MACzD,QAAQ,YAAY,cAAc,EAAE,EAAE,KAAK,eAAuB;OAChE,IAAI;OACJ,OAAOC,4CAAwB,SAAS,UAAU,GAC9C,EAAE,kCAAkC,YAAY,GAChD;OACL,EAAE;OACH;KAEL;IACD;KACE,OAAO,EAAE,0CAA0C;KACnD,OACE,2CAACD;MACC,OAAO,EAAE,0CAA0C;MACnD,WAAW,EAAE,8CAA8C;MAC3D,QAAQ,YAAY,gBAAgB,EAAE,EAAE,KAAK,SAAiB;OAAC,IAAI;OAAK,OAAO;OAAI,EAAE;OACrF;KAEL;IACD;KACE,OAAO,EAAE,2CAA2C;KACpD,OAAO,YAAY,eACf,EAAE,iCAAiC,GACnC,EAAE,gCAAgC;KACvC;IACF,GACD;IACI,IAET;GAEQ;;AAInB,qCAAe"}

package/dist/cjs/components/admin/ApplicationList/ApplicationList.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"ApplicationList.cjs","names":["ApplicationList: FC<ApplicationListProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","ApplicationQueryKeys","BaseApplicationList"],"sources":["../../../../../src/components/admin/ApplicationList/ApplicationList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ApplicationListResponse,\n  ApplicationQueryKeys,\n  getApplications,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseApplicationList, {BaseApplicationListProps} from './BaseApplicationList';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type ApplicationListProps = Omit<\n  BaseApplicationListProps,\n  'applications' | 'error' | 'isLoading' | 'offset' | 'onPageChange' | 'totalResults'\n>;\n\n/**\n * Lists the applications the signed-in user is allowed to see, a page at a time.\n *\n * The server guards applications with the root `system` permission, for reading and for changes alike;\n * it defines no application-specific permission. Gate the view and its actions on it with\n * `useGrantedPermissions().can('system')`.\n *\n * @example\n * ```tsx\n * <ApplicationList onSelect={(application) => setSelectedApplicationId(application.id)} />\n * ```\n */\nconst ApplicationList: FC<ApplicationListProps> = ({\n  limit = 20,\n  preferences,\n  ...rest\n}: ApplicationListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('applications');\n  const {data, error, isLoading}: ResourceQueryResult<ApplicationListResponse> = useResourceQuery(\n    [ApplicationQueryKeys.APPLICATIONS, {limit, offset}],\n    (fetcher) => getApplications({...endpoint, fetcher, limit, offset}),\n  );\n\n  return (\n    <BaseApplicationList\n      applications={data?.applications ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.applications.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default ApplicationList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,MAAMA,mBAA6C,EACjD,QAAQ,IACR,YACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAMC,WAA+BC,sCAAsB,eAAe;CAC1E,MAAM,EAAC,MAAM,OAAO,cAA2DC,iCAC7E,CAACC,yCAAqB,cAAc;EAAC;EAAO;EAAO,CAAC,GACnD,qDAA4B;EAAC,GAAG;EAAU;EAAS;EAAO;EAAO,CAAC,CACpE;AAED,QACE,2CAACC;EACC,cAAc,MAAM,gBAAgB,EAAE;EACtC,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,gCAAgC;EACnE;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,8BAAe"}

package/dist/cjs/components/admin/ApplicationList/BaseApplicationList.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseApplicationList.cjs","names":["value: string | undefined","BaseApplicationList: FC<BaseApplicationListProps>","useTranslation","columns: DataTableColumn<BasicApplication>[]","AdminSection","DataTable"],"sources":["../../../../../src/components/admin/ApplicationList/BaseApplicationList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {BasicApplication, Preferences} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport DataTable, {DataTableColumn} from '../../primitives/DataTable/DataTable';\nimport {AdminListRenderProps} from '../shared/AdminListRenderProps';\nimport AdminSection from '../shared/AdminSection';\n\n/**\n * What {@link BaseApplicationList} hands its `children` render function. `applications` and `rows` are\n * the same array.\n */\nexport type BaseApplicationListRenderProps = AdminListRenderProps<BasicApplication> & {\n  applications: BasicApplication[];\n};\n\nexport interface BaseApplicationListProps {\n  /**\n   * Controls rendered next to the title, such as a button that opens `ApplicationCreate`.\n   */\n  actions?: ReactNode;\n  applications: BasicApplication[];\n  /**\n   * Renders custom UI in place of the default table, for example a third-party data grid. Receives\n   * the applications, the default columns, the loading and error state, and the pagination and\n   * selection handlers.\n   */\n  children?: (props: BaseApplicationListRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isLoading?: boolean;\n  /**\n   * Page size.\n   * @default 20\n   */\n  limit?: number;\n  offset?: number;\n  /**\n   * Called with the offset of the page to show. Pagination is hidden when omitted.\n   */\n  onPageChange?: (offset: number) => void;\n  /**\n   * Called when an application is chosen. Rows are selectable only when set.\n   */\n  onSelect?: (application: BasicApplication) => void;\n  preferences?: Preferences;\n  selectedApplicationId?: string;\n  /**\n   * Heading of the list. Pass an empty string to hide it.\n   */\n  title?: string;\n  totalResults?: number;\n}\n\n/**\n * The translated access status of an application, or its raw value when the status is one this SDK\n * does not know.\n */\nconst getStatusLabel = (application: BasicApplication, t: (key: string) => string): string => {\n  const value: string | undefined = application.status?.value;\n\n  switch (value?.toUpperCase()) {\n    case 'ACTIVE':\n      return t('admin.applications.status.active');\n    case 'SUSPENDED':\n      return t('admin.applications.status.suspended');\n    default:\n      return value ?? '';\n  }\n};\n\n/**\n * Lists applications with their client identifier, type and, when the server reports it, access status. Holds no data of its own: pass the page\n * of applications and handle selection and pagination.\n */\nconst BaseApplicationList: FC<BaseApplicationListProps> = ({\n  actions,\n  applications,\n  children,\n  className,\n  description,\n  error = null,\n  isLoading = false,\n  limit = 20,\n  offset = 0,\n  onPageChange,\n  onSelect,\n  preferences,\n  selectedApplicationId,\n  title,\n  totalResults,\n}: BaseApplicationListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n\n  const columns: DataTableColumn<BasicApplication>[] = [\n    {\n      header: t('admin.applications.list.columns.name'),\n      id: 'name',\n      render: (application: BasicApplication): ReactNode => application.name,\n    },\n    {\n      header: t('admin.applications.list.columns.client_id'),\n      id: 'clientId',\n      render: (application: BasicApplication): ReactNode =>\n        application.clientId ? <code>{application.clientId}</code> : null,\n    },\n    {\n      header: t('admin.applications.list.columns.type'),\n      id: 'type',\n      render: (application: BasicApplication): ReactNode => application.type ?? application.template ?? '',\n    },\n    // A server that does not report the access status gets no empty status column.\n    ...(applications.some((application: BasicApplication) => application.status?.value)\n      ? [\n          {\n            header: t('admin.applications.list.columns.status'),\n            id: 'status',\n            render: (application: BasicApplication): ReactNode => getStatusLabel(application, t),\n          },\n        ]\n      : []),\n  ];\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          applications,\n          columns,\n          error,\n          isLoading,\n          limit,\n          offset,\n          onPageChange,\n          onSelect,\n          rows: applications,\n          selectedRowId: selectedApplicationId,\n          totalResults: totalResults ?? applications.length,\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"application-list\"\n      className={className}\n      title={title ?? t('admin.applications.list.title')}\n      description={description}\n      actions={actions}\n      preferences={preferences}\n    >\n      <DataTable\n        caption={title?.length ? title : t('admin.applications.list.title')}\n        columns={columns}\n        rows={applications}\n        getRowId={(application: BasicApplication): string => application.id}\n        isLoading={isLoading}\n        error={error}\n        emptyText={t('admin.applications.list.empty')}\n        onRowClick={onSelect}\n        selectedRowId={selectedApplicationId}\n        pagination={\n          onPageChange ? {limit, offset, onChange: onPageChange, total: totalResults ?? applications.length} : undefined\n        }\n      />\n    </AdminSection>\n  );\n};\n\nexport default BaseApplicationList;\n"],"mappings":";;;;;;;;;;;;AA6DA,MAAM,kBAAkB,aAA+B,MAAuC;CAC5F,MAAMA,QAA4B,YAAY,QAAQ;AAEtD,SAAQ,OAAO,aAAa,EAA5B;EACE,KAAK,SACH,QAAO,EAAE,mCAAmC;EAC9C,KAAK,YACH,QAAO,EAAE,sCAAsC;EACjD,QACE,QAAO,SAAS;;;;;;;AAQtB,MAAMC,uBAAqD,EACzD,SACA,cACA,UACA,WACA,aACA,QAAQ,MACR,YAAY,OACZ,QAAQ,IACR,SAAS,GACT,cACA,UACA,aACA,uBACA,OACA,mBAC4C;CAC5C,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAE7C,MAAMC,UAA+C;EACnD;GACE,QAAQ,EAAE,uCAAuC;GACjD,IAAI;GACJ,SAAS,gBAA6C,YAAY;GACnE;EACD;GACE,QAAQ,EAAE,4CAA4C;GACtD,IAAI;GACJ,SAAS,gBACP,YAAY,WAAW,2CAAC,oBAAM,YAAY,WAAgB,GAAG;GAChE;EACD;GACE,QAAQ,EAAE,uCAAuC;GACjD,IAAI;GACJ,SAAS,gBAA6C,YAAY,QAAQ,YAAY,YAAY;GACnG;EAED,GAAI,aAAa,MAAM,gBAAkC,YAAY,QAAQ,MAAM,GAC/E,CACE;GACE,QAAQ,EAAE,yCAAyC;GACnD,IAAI;GACJ,SAAS,gBAA6C,eAAe,aAAa,EAAE;GACrF,CACF,GACD,EAAE;EACP;AAED,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,MAAM;GACN,eAAe;GACf,cAAc,gBAAgB,aAAa;GAC5C,CAAC;GACE;AAIV,QACE,2CAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,gCAAgC;EACrC;EACJ;EACI;YAEb,2CAACC;GACC,SAAS,OAAO,SAAS,QAAQ,EAAE,gCAAgC;GAC1D;GACT,MAAM;GACN,WAAW,gBAA0C,YAAY;GACtD;GACJ;GACP,WAAW,EAAE,gCAAgC;GAC7C,YAAY;GACZ,eAAe;GACf,YACE,eAAe;IAAC;IAAO;IAAQ,UAAU;IAAc,OAAO,gBAAgB,aAAa;IAAO,GAAG;IAEvG;GACW;;AAInB,kCAAe"}

package/dist/cjs/components/admin/GroupCreate/BaseGroupCreate.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseGroupCreate.cjs","names":["BaseGroupCreate: FC<BaseGroupCreateProps>","useTheme","styles: Record<string, string>","useStyles","useTranslation","isValid: boolean","AdminSection","Alert","TextField","Button"],"sources":["../../../../../src/components/admin/GroupCreate/BaseGroupCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Preferences} from '@thunderid/browser';\nimport {ChangeEvent, FC, FormEvent, ReactElement, ReactNode, useState} from 'react';\nimport useTheme from '../../../contexts/Theme/useTheme';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport Button from '../../primitives/Button/Button';\nimport TextField from '../../primitives/TextField/TextField';\nimport AdminSection from '../shared/AdminSection';\nimport useStyles from '../shared/AdminSection.styles';\n\n/**\n * The group {@link BaseGroupCreate} submits. The organization unit is added by the caller.\n */\nexport interface GroupCreateSubmission {\n  description?: string;\n  name: string;\n}\n\n/**\n * What {@link BaseGroupCreate} hands its `children` render function, so the form can be built with any UI.\n */\nexport interface BaseGroupCreateRenderProps {\n  error: string | null;\n  /**\n   * Sets one field of the form.\n   */\n  handleInputChange: (field: 'description' | 'name', value: string) => void;\n  /**\n   * Submits the current values. Does nothing while they are not valid.\n   */\n  handleSubmit: () => void;\n  isSubmitting: boolean;\n  /**\n   * Whether the values can be submitted.\n   */\n  isValid: boolean;\n  onCancel?: () => void;\n  values: {description: string; name: string};\n}\n\nexport interface BaseGroupCreateProps {\n  /**\n   * Renders custom UI in place of the default form. Receives the values, their setters, the submit\n   * handler and the submission state.\n   */\n  children?: (props: BaseGroupCreateRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isSubmitting?: boolean;\n  onCancel?: () => void;\n  onSubmit: (group: GroupCreateSubmission) => void;\n  preferences?: Preferences;\n  title?: string;\n}\n\n/**\n * A form that collects a new group's name and description. Holds no data of its own: handle the\n * submission.\n */\nconst BaseGroupCreate: FC<BaseGroupCreateProps> = ({\n  children,\n  className,\n  description,\n  error = null,\n  isSubmitting = false,\n  onCancel,\n  onSubmit,\n  preferences,\n  title,\n}: BaseGroupCreateProps): ReactElement => {\n  const {theme, colorScheme} = useTheme();\n  const styles: Record<string, string> = useStyles(theme, colorScheme);\n  const {t} = useTranslation(preferences?.i18n);\n  const [name, setName] = useState<string>('');\n  const [groupDescription, setGroupDescription] = useState<string>('');\n\n  const isValid: boolean = name.trim().length > 0;\n\n  const submit = (): void => {\n    if (isValid) {\n      onSubmit({description: groupDescription.trim() || undefined, name: name.trim()});\n    }\n  };\n\n  const handleSubmit = (event: FormEvent<HTMLFormElement>): void => {\n    event.preventDefault();\n    submit();\n  };\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          error,\n          handleInputChange: (field: 'description' | 'name', value: string): void =>\n            field === 'name' ? setName(value) : setGroupDescription(value),\n          handleSubmit: submit,\n          isSubmitting,\n          isValid,\n          onCancel,\n          values: {description: groupDescription, name},\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"group-create\"\n      className={className}\n      title={title ?? t('admin.groups.create.title')}\n      description={description}\n      preferences={preferences}\n    >\n      <form className={styles['form']} onSubmit={handleSubmit} noValidate>\n        {error && (\n          <Alert variant=\"error\" role=\"alert\">\n            {error}\n          </Alert>\n        )}\n        <TextField\n          name=\"name\"\n          label={t('admin.groups.create.fields.name')}\n          required\n          value={name}\n          onChange={(event: ChangeEvent<HTMLInputElement>): void => setName(event.target.value)}\n        />\n        <TextField\n          name=\"description\"\n          label={t('admin.groups.create.fields.description')}\n          value={groupDescription}\n          onChange={(event: ChangeEvent<HTMLInputElement>): void => setGroupDescription(event.target.value)}\n        />\n        <div className={styles['formActions']}>\n          {onCancel && (\n            <Button type=\"button\" variant=\"text\" onClick={onCancel} disabled={isSubmitting}>\n              {t('admin.common.actions.cancel')}\n            </Button>\n          )}\n          <Button type=\"submit\" loading={isSubmitting} disabled={!isValid || isSubmitting}>\n            {t('admin.groups.create.submit')}\n          </Button>\n        </div>\n      </form>\n    </AdminSection>\n  );\n};\n\nexport default BaseGroupCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;AA+DA,MAAMA,mBAA6C,EACjD,UACA,WACA,aACA,QAAQ,MACR,eAAe,OACf,UACA,UACA,aACA,YACwC;CACxC,MAAM,EAAC,OAAO,gBAAeC,0BAAU;CACvC,MAAMC,SAAiCC,oCAAU,OAAO,YAAY;CACpE,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,MAAM,+BAA4B,GAAG;CAC5C,MAAM,CAAC,kBAAkB,2CAAwC,GAAG;CAEpE,MAAMC,UAAmB,KAAK,MAAM,CAAC,SAAS;CAE9C,MAAM,eAAqB;AACzB,MAAI,QACF,UAAS;GAAC,aAAa,iBAAiB,MAAM,IAAI;GAAW,MAAM,KAAK,MAAM;GAAC,CAAC;;CAIpF,MAAM,gBAAgB,UAA4C;AAChE,QAAM,gBAAgB;AACtB,UAAQ;;AAGV,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA,oBAAoB,OAA+B,UACjD,UAAU,SAAS,QAAQ,MAAM,GAAG,oBAAoB,MAAM;GAChE,cAAc;GACd;GACA;GACA;GACA,QAAQ;IAAC,aAAa;IAAkB;IAAK;GAC9C,CAAC;GACE;AAIV,QACE,2CAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,4BAA4B;EACjC;EACA;YAEb,4CAAC;GAAK,WAAW,OAAO;GAAS,UAAU;GAAc;;IACtD,SACC,2CAACC;KAAM,SAAQ;KAAQ,MAAK;eACzB;MACK;IAEV,2CAACC;KACC,MAAK;KACL,OAAO,EAAE,kCAAkC;KAC3C;KACA,OAAO;KACP,WAAW,UAA+C,QAAQ,MAAM,OAAO,MAAM;MACrF;IACF,2CAACA;KACC,MAAK;KACL,OAAO,EAAE,yCAAyC;KAClD,OAAO;KACP,WAAW,UAA+C,oBAAoB,MAAM,OAAO,MAAM;MACjG;IACF,4CAAC;KAAI,WAAW,OAAO;gBACpB,YACC,2CAACC;MAAO,MAAK;MAAS,SAAQ;MAAO,SAAS;MAAU,UAAU;gBAC/D,EAAE,8BAA8B;OAC1B,EAEX,2CAACA;MAAO,MAAK;MAAS,SAAS;MAAc,UAAU,CAAC,WAAW;gBAChE,EAAE,6BAA6B;OACzB;MACL;;IACD;GACM;;AAInB,8BAAe"}

package/dist/cjs/components/admin/GroupCreate/GroupCreate.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"GroupCreate.cjs","names":["GroupCreate: FC<GroupCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceMutation","GroupQueryKeys","BaseGroupCreate"],"sources":["../../../../../src/components/admin/GroupCreate/GroupCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {CreateGroupRequest, Group, GroupQueryKeys, createGroup, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseGroupCreate, {BaseGroupCreateProps, GroupCreateSubmission} from './BaseGroupCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type GroupCreateProps = Omit<BaseGroupCreateProps, 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created group.\n   */\n  onCreated?: (group: Group) => void;\n  /**\n   * Organization unit the group is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates a group through the management API.\n *\n * @example\n * ```tsx\n * <GroupCreate onCreated={(group) => navigate(`/groups/${group.id}`)} />\n * ```\n */\nconst GroupCreate: FC<GroupCreateProps> = ({onCreated, ouId, preferences, ...rest}: GroupCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const {error, isLoading, mutate}: ResourceMutationResult<Group, CreateGroupRequest> = useResourceMutation(\n    (payload: CreateGroupRequest, fetcher) => createGroup({...endpoint, fetcher, payload}),\n    () => [[GroupQueryKeys.GROUPS], [GroupQueryKeys.MEMBERSHIPS]],\n    {onSuccess: onCreated},\n  );\n\n  const handleSubmit = ({description, name}: GroupCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId});\n    }\n  };\n\n  return (\n    <BaseGroupCreate\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.groups.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA8BA,MAAMA,eAAqC,EAAC,WAAW,MAAM,YAAa,GAAG,WAA0C;CACrH,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAMC,WAA+BC,sCAAsB,SAAS;CACpE,MAAM,EAAC,OAAO,WAAW,WAA6DC,qCACnF,SAA6B,iDAAwB;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,QAChF,CAAC,CAACC,mCAAe,OAAO,EAAE,CAACA,mCAAe,YAAY,CAAC,EAC7D,EAAC,WAAW,WAAU,CACvB;CAED,MAAM,gBAAgB,EAAC,aAAa,WAAuC;AACzE,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAa,CAAC;;AAIxD,QACE,2CAACC;EACC,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,4BAA4B,GAAG,EAAE,4BAA4B;EAEpG;EACb,GAAI;GACJ;;AAIN,0BAAe"}

package/dist/cjs/components/admin/GroupList/BaseGroupList.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseGroupList.cjs","names":["BaseGroupList: FC<BaseGroupListProps>","useTranslation","columns: DataTableColumn<Group>[]","AdminSection","DataTable"],"sources":["../../../../../src/components/admin/GroupList/BaseGroupList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Group, Preferences} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport DataTable, {DataTableColumn} from '../../primitives/DataTable/DataTable';\nimport {AdminListRenderProps} from '../shared/AdminListRenderProps';\nimport AdminSection from '../shared/AdminSection';\n\n/**\n * What {@link BaseGroupList} hands its `children` render function. `groups` and `rows` are the same array.\n */\nexport type BaseGroupListRenderProps = AdminListRenderProps<Group> & {groups: Group[]};\n\nexport interface BaseGroupListProps {\n  /**\n   * Controls rendered next to the title, such as a button that opens `GroupCreate`.\n   */\n  actions?: ReactNode;\n  /**\n   * Renders custom UI in place of the default table, for example a third-party data grid. Receives\n   * the groups, the default columns, the loading and error state, and the pagination and selection\n   * handlers.\n   */\n  children?: (props: BaseGroupListRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  groups: Group[];\n  isLoading?: boolean;\n  /**\n   * Page size.\n   * @default 20\n   */\n  limit?: number;\n  offset?: number;\n  /**\n   * Called with the offset of the page to show. Pagination is hidden when omitted.\n   */\n  onPageChange?: (offset: number) => void;\n  /**\n   * Called when a group is chosen. Rows are selectable only when set.\n   */\n  onSelect?: (group: Group) => void;\n  preferences?: Preferences;\n  selectedGroupId?: string;\n  /**\n   * Heading of the list. Pass an empty string to hide it.\n   */\n  title?: string;\n  totalResults?: number;\n}\n\n/**\n * Lists groups with their description and organization unit. Holds no data of its own: pass the\n * page of groups and handle selection and pagination.\n */\nconst BaseGroupList: FC<BaseGroupListProps> = ({\n  actions,\n  children,\n  className,\n  description,\n  error = null,\n  groups,\n  isLoading = false,\n  limit = 20,\n  offset = 0,\n  onPageChange,\n  onSelect,\n  preferences,\n  selectedGroupId,\n  title,\n  totalResults,\n}: BaseGroupListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n\n  const columns: DataTableColumn<Group>[] = [\n    {header: t('admin.groups.list.columns.name'), id: 'name', render: (group: Group): ReactNode => group.name},\n    {\n      header: t('admin.groups.list.columns.description'),\n      id: 'description',\n      render: (group: Group): ReactNode => group.description ?? '',\n    },\n    {\n      header: t('admin.common.columns.organization_unit'),\n      id: 'ou',\n      render: (group: Group): ReactNode => group.ouHandle ?? group.ouId,\n    },\n  ];\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          columns,\n          error,\n          isLoading,\n          limit,\n          offset,\n          onPageChange,\n          onSelect,\n          rows: groups,\n          selectedRowId: selectedGroupId,\n          totalResults: totalResults ?? groups.length,\n          groups,\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"group-list\"\n      className={className}\n      title={title ?? t('admin.groups.list.title')}\n      description={description}\n      actions={actions}\n      preferences={preferences}\n    >\n      <DataTable\n        caption={title?.length ? title : t('admin.groups.list.title')}\n        columns={columns}\n        rows={groups}\n        getRowId={(group: Group): string => group.id}\n        isLoading={isLoading}\n        error={error}\n        emptyText={t('admin.groups.list.empty')}\n        onRowClick={onSelect}\n        selectedRowId={selectedGroupId}\n        pagination={\n          onPageChange ? {limit, offset, onChange: onPageChange, total: totalResults ?? groups.length} : undefined\n        }\n      />\n    </AdminSection>\n  );\n};\n\nexport default BaseGroupList;\n"],"mappings":";;;;;;;;;;;;AA0DA,MAAMA,iBAAyC,EAC7C,SACA,UACA,WACA,aACA,QAAQ,MACR,QACA,YAAY,OACZ,QAAQ,IACR,SAAS,GACT,cACA,UACA,aACA,iBACA,OACA,mBACsC;CACtC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAE7C,MAAMC,UAAoC;EACxC;GAAC,QAAQ,EAAE,iCAAiC;GAAE,IAAI;GAAQ,SAAS,UAA4B,MAAM;GAAK;EAC1G;GACE,QAAQ,EAAE,wCAAwC;GAClD,IAAI;GACJ,SAAS,UAA4B,MAAM,eAAe;GAC3D;EACD;GACE,QAAQ,EAAE,yCAAyC;GACnD,IAAI;GACJ,SAAS,UAA4B,MAAM,YAAY,MAAM;GAC9D;EACF;AAED,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA;GACA;GACA;GACA;GACA;GACA;GACA,MAAM;GACN,eAAe;GACf,cAAc,gBAAgB,OAAO;GACrC;GACD,CAAC;GACE;AAIV,QACE,2CAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,0BAA0B;EAC/B;EACJ;EACI;YAEb,2CAACC;GACC,SAAS,OAAO,SAAS,QAAQ,EAAE,0BAA0B;GACpD;GACT,MAAM;GACN,WAAW,UAAyB,MAAM;GAC/B;GACJ;GACP,WAAW,EAAE,0BAA0B;GACvC,YAAY;GACZ,eAAe;GACf,YACE,eAAe;IAAC;IAAO;IAAQ,UAAU;IAAc,OAAO,gBAAgB,OAAO;IAAO,GAAG;IAEjG;GACW;;AAInB,4BAAe"}

package/dist/cjs/components/admin/GroupList/GroupList.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"GroupList.cjs","names":["GroupList: FC<GroupListProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","GroupQueryKeys","BaseGroupList"],"sources":["../../../../../src/components/admin/GroupList/GroupList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {GroupListResponse, GroupQueryKeys, getGroups, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseGroupList, {BaseGroupListProps} from './BaseGroupList';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type GroupListProps = Omit<\n  BaseGroupListProps,\n  'error' | 'groups' | 'isLoading' | 'offset' | 'onPageChange' | 'totalResults'\n>;\n\n/**\n * Lists the groups the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <GroupList onSelect={(group) => setSelectedGroupId(group.id)} />\n * ```\n */\nconst GroupList: FC<GroupListProps> = ({limit = 20, preferences, ...rest}: GroupListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const {data, error, isLoading}: ResourceQueryResult<GroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUPS, {limit, offset}],\n    (fetcher) => getGroups({...endpoint, fetcher, limit, offset}),\n  );\n\n  return (\n    <BaseGroupList\n      groups={data?.groups ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.groups.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuBA,MAAMA,aAAiC,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAwC;CAC1G,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAMC,WAA+BC,sCAAsB,SAAS;CACpE,MAAM,EAAC,MAAM,OAAO,cAAqDC,iCACvE,CAACC,mCAAe,QAAQ;EAAC;EAAO;EAAO,CAAC,GACvC,+CAAsB;EAAC,GAAG;EAAU;EAAS;EAAO;EAAO,CAAC,CAC9D;AAED,QACE,2CAACC;EACC,QAAQ,MAAM,UAAU,EAAE;EAC1B,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,0BAA0B;EAC7D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,wBAAe"}

package/dist/cjs/components/admin/GroupMembers/BaseGroupMembers.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseGroupMembers.cjs","names":["BaseGroupMembers: FC<BaseGroupMembersProps>","useTranslation","columns: DataTableColumn<GroupMember>[]","Button","AdminSection","IdentityPicker","DataTable"],"sources":["../../../../../src/components/admin/GroupMembers/BaseGroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {GroupMember, GroupMemberType, Preferences} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Button from '../../primitives/Button/Button';\nimport DataTable, {DataTableColumn} from '../../primitives/DataTable/DataTable';\nimport AdminSection from '../shared/AdminSection';\nimport IdentityPicker, {IdentityCandidate} from '../shared/IdentityPicker';\n\n/**\n * What {@link BaseGroupMembers} hands its `children` render function, so the members can be shown\n * with any UI, such as a third-party data grid.\n */\nexport interface BaseGroupMembersRenderProps {\n  /**\n   * The identities that can be added, keyed by member type. Undefined when adding is not allowed.\n   */\n  candidates?: Partial<Record<GroupMemberType, IdentityCandidate[]>>;\n  /**\n   * The columns the default table shows, including the remove action when removing is allowed.\n   */\n  columns: DataTableColumn<GroupMember>[];\n  error: string | null;\n  isLoading: boolean;\n  isMutating: boolean;\n  members: GroupMember[];\n  /**\n   * Adds a member. Undefined when adding is not allowed.\n   */\n  onAdd?: (member: Pick<GroupMember, 'id' | 'type'>) => void;\n  /**\n   * Removes a member. Undefined when removing is not allowed.\n   */\n  onRemove?: (member: GroupMember) => void;\n}\n\nexport interface BaseGroupMembersProps {\n  /**\n   * The identities that can be added, keyed by member type. Adding is hidden when omitted.\n   */\n  candidates?: Partial<Record<GroupMemberType, IdentityCandidate[]>>;\n  /**\n   * Renders custom UI in place of the default table and picker. Receives the members, the default\n   * columns, the candidates, the loading and error state, and the add and remove handlers.\n   */\n  children?: (props: BaseGroupMembersRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isLoading?: boolean;\n  isMutating?: boolean;\n  members: GroupMember[];\n  onAdd?: (member: Pick<GroupMember, 'id' | 'type'>) => void;\n  /**\n   * Removes a member. The remove action is hidden when omitted.\n   */\n  onRemove?: (member: GroupMember) => void;\n  preferences?: Preferences;\n  title?: string;\n}\n\n/**\n * Lists the members of a group and lets the caller add and remove them. Holds no data of its own.\n */\nconst BaseGroupMembers: FC<BaseGroupMembersProps> = ({\n  candidates,\n  children,\n  className,\n  description,\n  error = null,\n  isLoading = false,\n  isMutating = false,\n  members,\n  onAdd,\n  onRemove,\n  preferences,\n  title,\n}: BaseGroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n\n  const columns: DataTableColumn<GroupMember>[] = [\n    {\n      header: t('admin.groups.members.columns.member'),\n      id: 'member',\n      render: (member: GroupMember): ReactNode => member.display ?? member.id,\n    },\n    {\n      header: t('admin.groups.members.columns.type'),\n      id: 'type',\n      render: (member: GroupMember): ReactNode => t(`admin.common.identity_types.${member.type}`),\n    },\n  ];\n\n  if (onRemove) {\n    columns.push({\n      header: t('admin.common.columns.actions'),\n      id: 'actions',\n      render: (member: GroupMember): ReactNode => (\n        <Button\n          variant=\"text\"\n          color=\"error\"\n          size=\"small\"\n          disabled={isMutating}\n          aria-label={t('admin.groups.members.remove_label', {name: member.display ?? member.id})}\n          onClick={(): void => onRemove(member)}\n        >\n          {t('admin.common.actions.remove')}\n        </Button>\n      ),\n    });\n  }\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          candidates: onAdd ? candidates : undefined,\n          columns,\n          error,\n          isLoading,\n          isMutating,\n          members,\n          onAdd: candidates ? onAdd : undefined,\n          onRemove,\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"group-members\"\n      className={className}\n      title={title ?? t('admin.groups.members.title')}\n      description={description}\n      headingLevel={3}\n      preferences={preferences}\n    >\n      {onAdd && candidates && (\n        <IdentityPicker<GroupMemberType>\n          addLabel={t('admin.groups.members.add')}\n          candidates={candidates}\n          excludedIds={members.map((member: GroupMember) => member.id)}\n          isSubmitting={isMutating}\n          onAdd={onAdd}\n          types={(['user', 'agent', 'group'] as GroupMemberType[])\n            .filter((type: GroupMemberType) => candidates[type] !== undefined)\n            .map((type: GroupMemberType) => ({label: t(`admin.common.identity_types.${type}`), value: type}))}\n        />\n      )}\n      <DataTable\n        caption={title?.length ? title : t('admin.groups.members.title')}\n        columns={columns}\n        rows={members}\n        getRowId={(member: GroupMember): string => `${member.type}:${member.id}`}\n        isLoading={isLoading}\n        error={error}\n        emptyText={t('admin.groups.members.empty')}\n      />\n    </AdminSection>\n  );\n};\n\nexport default BaseGroupMembers;\n"],"mappings":";;;;;;;;;;;;;AAkEA,MAAMA,oBAA+C,EACnD,YACA,UACA,WACA,aACA,QAAQ,MACR,YAAY,OACZ,aAAa,OACb,SACA,OACA,UACA,aACA,YACyC;CACzC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAE7C,MAAMC,UAA0C,CAC9C;EACE,QAAQ,EAAE,sCAAsC;EAChD,IAAI;EACJ,SAAS,WAAmC,OAAO,WAAW,OAAO;EACtE,EACD;EACE,QAAQ,EAAE,oCAAoC;EAC9C,IAAI;EACJ,SAAS,WAAmC,EAAE,+BAA+B,OAAO,OAAO;EAC5F,CACF;AAED,KAAI,SACF,SAAQ,KAAK;EACX,QAAQ,EAAE,+BAA+B;EACzC,IAAI;EACJ,SAAS,WACP,2CAACC;GACC,SAAQ;GACR,OAAM;GACN,MAAK;GACL,UAAU;GACV,cAAY,EAAE,qCAAqC,EAAC,MAAM,OAAO,WAAW,OAAO,IAAG,CAAC;GACvF,eAAqB,SAAS,OAAO;aAEpC,EAAE,8BAA8B;IAC1B;EAEZ,CAAC;AAGJ,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR,YAAY,QAAQ,aAAa;GACjC;GACA;GACA;GACA;GACA;GACA,OAAO,aAAa,QAAQ;GAC5B;GACD,CAAC;GACE;AAIV,QACE,4CAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,6BAA6B;EAClC;EACb,cAAc;EACD;aAEZ,SAAS,cACR,2CAACC;GACC,UAAU,EAAE,2BAA2B;GAC3B;GACZ,aAAa,QAAQ,KAAK,WAAwB,OAAO,GAAG;GAC5D,cAAc;GACP;GACP,OAAQ;IAAC;IAAQ;IAAS;IAAQ,CAC/B,QAAQ,SAA0B,WAAW,UAAU,OAAU,CACjE,KAAK,UAA2B;IAAC,OAAO,EAAE,+BAA+B,OAAO;IAAE,OAAO;IAAK,EAAE;IACnG,EAEJ,2CAACC;GACC,SAAS,OAAO,SAAS,QAAQ,EAAE,6BAA6B;GACvD;GACT,MAAM;GACN,WAAW,WAAgC,GAAG,OAAO,KAAK,GAAG,OAAO;GACzD;GACJ;GACP,WAAW,EAAE,6BAA6B;IAC1C;GACW;;AAInB,+BAAe"}

package/dist/cjs/components/admin/GroupMembers/GroupMembers.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"GroupMembers.cjs","names":["GroupQueryKeys","RoleQueryKeys","GroupMembers: FC<GroupMembersProps>","useTranslation","groupsEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","filter: string | undefined","members: ResourceQueryResult<GroupMemberListResponse>","useResourceQuery","users: ResourceQueryResult<FilteredPage<ManagedUserListResponse>>","UserQueryKeys","agents: ResourceQueryResult<FilteredPage<AgentListResponse>>","AgentQueryKeys","add: ResourceMutationResult<Group, GroupMembersVariables>","useResourceMutation","remove: ResourceMutationResult<Group, GroupMembersVariables>","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupMember,\n  GroupMemberListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  ResourceQueryKey,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addGroupMembers,\n  getAgentName,\n  getAgents,\n  getGroupMembers,\n  getUsers,\n  removeGroupMembers,\n  resolveManagedIdentityName,\n  toEqualityFilter,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface GroupMembersVariables {\n  groupId: string;\n  members: Pick<GroupMember, 'id' | 'type'>[];\n}\n\n/**\n * A candidate page with the filter it was listed with.\n */\ninterface FilteredPage<T> {\n  filter: string | undefined;\n  page: T;\n}\n\n/**\n * Query keys to refetch after a group's membership changes.\n */\nconst getMembershipInvalidatedKeys = ({groupId}: GroupMembersVariables): ResourceQueryKey[] => [\n  [GroupQueryKeys.GROUP, groupId],\n  [GroupQueryKeys.GROUP_MEMBERS, groupId],\n  [GroupQueryKeys.MEMBERSHIPS],\n  [RoleQueryKeys.ROLE_ASSIGNMENTS],\n];\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * How a member is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n  /**\n   * Organization unit the users and agents offered for adding are listed from.\n   */\n  ouId?: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  administrationMode,\n  editable = false,\n  groupId,\n  ouId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const filter: string | undefined = toEqualityFilter('ouId', ouId);\n  const members: ResourceQueryResult<GroupMemberListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUP_MEMBERS, groupId, {limit: 100}],\n    (fetcher) => getGroupMembers({...groupsEndpoint, fetcher, groupId, limit: 100}),\n    {enabled: Boolean(groupId)},\n  );\n  const users: ResourceQueryResult<FilteredPage<ManagedUserListResponse>> = useResourceQuery(\n    [UserQueryKeys.USERS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getUsers({...usersEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<FilteredPage<AgentListResponse>> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getAgents({...agentsEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const add: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      addGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n  const remove: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      removeGroupMembers({...groupsEndpoint, administrationMode, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(() => {\n    // A page listed for an earlier ouId stays in a query until the next one succeeds, so it is not offered.\n    const current = <T,>(data: FilteredPage<T> | undefined): T | undefined =>\n      data && data.filter === filter ? data.page : undefined;\n\n    return {\n      agent: (current(agents.data)?.agents ?? []).map((agent: BasicAgent) => ({\n        id: agent.id,\n        label: getAgentName(agent),\n      })),\n      user: (current(users.data)?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    };\n  }, [agents.data, filter, users.data]);\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;AAmDA,MAAM,gCAAgC,EAAC,cAAwD;CAC7F,CAACA,mCAAe,OAAO,QAAQ;CAC/B,CAACA,mCAAe,eAAe,QAAQ;CACvC,CAACA,mCAAe,YAAY;CAC5B,CAACC,kCAAc,iBAAiB;CACjC;;;;;;;;;AAgCD,MAAMC,gBAAuC,EAC3C,oBACA,WAAW,OACX,SACA,MACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,iBAAqCC,sCAAsB,SAAS;CAC1E,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,mDAA8C,QAAQ,KAAK;CACjE,MAAMC,UAAwDC,iCAC5D;EAACV,mCAAe;EAAe;EAAS,EAAC,OAAO,KAAI;EAAC,GACpD,qDAA4B;EAAC,GAAG;EAAgB;EAAS;EAAS,OAAO;EAAI,CAAC,EAC/E,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMW,QAAoED,iCACxE,CAACE,kCAAc,OAAO;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC3C,OAAO,aAAa;EAAC;EAAQ,MAAM,wCAAe;GAAC,GAAG;GAAe;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACnG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAA+DH,iCACnE,CAACI,mCAAe,QAAQ;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC7C,OAAO,aAAa;EAAC;EAAQ,MAAM,yCAAgB;GAAC,GAAG;GAAgB;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACrG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,MAA4DC,qCAC/D,EAAC,SAAS,IAAI,SAAS,WAAiC,qDACvC;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EAC9E,6BACD;CACD,MAAMC,SAA+DD,qCAClE,EAAC,SAAS,IAAI,SAAS,WAAiC,wDACpC;EAAC,GAAG;EAAgB;EAAoB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EACrG,6BACD;CAED,MAAME,sCAAmF;EAEvF,MAAM,WAAe,SACnB,QAAQ,KAAK,WAAW,SAAS,KAAK,OAAO;AAE/C,SAAO;GACL,QAAQ,QAAQ,OAAO,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,WAAuB;IACtE,IAAI,MAAM;IACV,6CAAoB,MAAM;IAC3B,EAAE;GACH,OAAO,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAE,EAAE,KAAK,UAAuB;IACnE,IAAI,KAAK;IACT,2DAAkC,KAAK;IACxC,EAAE;GACJ;IACA;EAAC,OAAO;EAAM;EAAQ,MAAM;EAAK,CAAC;AAErC,QACE,2CAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,yDAC2B,GAAG,QAAQ,OAAO,6BAA6B,sDAC/C,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}

package/dist/cjs/components/admin/RoleAssignments/BaseRoleAssignments.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseRoleAssignments.cjs","names":["BaseRoleAssignments: FC<BaseRoleAssignmentsProps>","useTranslation","columns: DataTableColumn<RoleAssignment>[]","Button","AdminSection","IdentityPicker","Select","DataTable"],"sources":["../../../../../src/components/admin/RoleAssignments/BaseRoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Preferences, RoleAssigneeType, RoleAssignment, RoleAssignmentInput} from '@thunderid/browser';\nimport {ChangeEvent, FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Button from '../../primitives/Button/Button';\nimport DataTable, {DataTableColumn} from '../../primitives/DataTable/DataTable';\nimport Select from '../../primitives/Select/Select';\nimport AdminSection from '../shared/AdminSection';\nimport IdentityPicker, {IdentityCandidate} from '../shared/IdentityPicker';\n\n/**\n * What {@link BaseRoleAssignments} hands its `children` render function, so the assignments can be\n * shown with any UI, such as a third-party data grid.\n */\nexport interface BaseRoleAssignmentsRenderProps {\n  assignments: RoleAssignment[];\n  /**\n   * The identities the role can be assigned to, keyed by assignee type. Undefined when assigning is\n   * not allowed.\n   */\n  candidates?: Partial<Record<RoleAssigneeType, IdentityCandidate[]>>;\n  /**\n   * The columns the default table shows, including the remove action when unassigning is allowed.\n   */\n  columns: DataTableColumn<RoleAssignment>[];\n  error: string | null;\n  isLoading: boolean;\n  isMutating: boolean;\n  /**\n   * Assigns the role. Undefined when assigning is not allowed.\n   */\n  onAssign?: (assignment: RoleAssignmentInput) => void;\n  /**\n   * Shows only one assignee type, or every type with `null`. Undefined when the list cannot be filtered.\n   */\n  onTypeFilterChange?: (type: RoleAssigneeType | null) => void;\n  /**\n   * Removes an assignment. Undefined when unassigning is not allowed.\n   */\n  onUnassign?: (assignment: RoleAssignment) => void;\n  /**\n   * The assignee type the list is narrowed to, or `null` for every type.\n   */\n  typeFilter: RoleAssigneeType | null;\n}\n\nexport interface BaseRoleAssignmentsProps {\n  assignments: RoleAssignment[];\n  /**\n   * The identities the role can be assigned to, keyed by assignee type. Assigning is hidden when omitted.\n   */\n  candidates?: Partial<Record<RoleAssigneeType, IdentityCandidate[]>>;\n  /**\n   * Renders custom UI in place of the default table and picker. Receives the assignments, the\n   * default columns, the candidates, the loading and error state, and the assign and unassign\n   * handlers.\n   */\n  children?: (props: BaseRoleAssignmentsRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isLoading?: boolean;\n  isMutating?: boolean;\n  onAssign?: (assignment: RoleAssignmentInput) => void;\n  /**\n   * Narrows the list to one assignee type, on the server, or back to every type with `null`. The type\n   * filter shows only when set.\n   */\n  onTypeFilterChange?: (type: RoleAssigneeType | null) => void;\n  /**\n   * Removes an assignment. The remove action is hidden when omitted.\n   */\n  onUnassign?: (assignment: RoleAssignment) => void;\n  preferences?: Preferences;\n  title?: string;\n  /**\n   * The assignee type the list is narrowed to, or `null` for every type.\n   */\n  typeFilter?: RoleAssigneeType | null;\n}\n\n/**\n * Lists the users, groups and agents a role is assigned to, and lets the caller assign and unassign\n * it. Holds no data of its own.\n */\nconst BaseRoleAssignments: FC<BaseRoleAssignmentsProps> = ({\n  assignments,\n  candidates,\n  children,\n  className,\n  description,\n  error = null,\n  isLoading = false,\n  isMutating = false,\n  onAssign,\n  onTypeFilterChange,\n  onUnassign,\n  preferences,\n  title,\n  typeFilter = null,\n}: BaseRoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n\n  const columns: DataTableColumn<RoleAssignment>[] = [\n    {\n      header: t('admin.roles.assignments.columns.assignee'),\n      id: 'assignee',\n      render: (assignment: RoleAssignment): ReactNode => assignment.display ?? assignment.id,\n    },\n    {\n      header: t('admin.roles.assignments.columns.type'),\n      id: 'type',\n      render: (assignment: RoleAssignment): ReactNode => t(`admin.common.identity_types.${assignment.type}`),\n    },\n  ];\n\n  if (onUnassign) {\n    columns.push({\n      header: t('admin.common.columns.actions'),\n      id: 'actions',\n      render: (assignment: RoleAssignment): ReactNode => (\n        <Button\n          variant=\"text\"\n          color=\"error\"\n          size=\"small\"\n          disabled={isMutating}\n          aria-label={t('admin.roles.assignments.remove_label', {name: assignment.display ?? assignment.id})}\n          onClick={(): void => onUnassign(assignment)}\n        >\n          {t('admin.common.actions.remove')}\n        </Button>\n      ),\n    });\n  }\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          assignments,\n          candidates: onAssign ? candidates : undefined,\n          columns,\n          error,\n          isLoading,\n          isMutating,\n          onAssign: candidates ? onAssign : undefined,\n          onTypeFilterChange,\n          onUnassign,\n          typeFilter,\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"role-assignments\"\n      className={className}\n      title={title ?? t('admin.roles.assignments.title')}\n      description={description}\n      headingLevel={3}\n      preferences={preferences}\n    >\n      {onAssign && candidates && (\n        <IdentityPicker<RoleAssigneeType>\n          addLabel={t('admin.roles.assignments.add')}\n          candidates={candidates}\n          excludedIds={assignments.map((assignment: RoleAssignment) => assignment.id)}\n          isSubmitting={isMutating}\n          onAdd={onAssign}\n          types={(['user', 'group', 'agent', 'app'] as RoleAssigneeType[])\n            .filter((type: RoleAssigneeType) => candidates[type] !== undefined)\n            .map((type: RoleAssigneeType) => ({label: t(`admin.common.identity_types.${type}`), value: type}))}\n        />\n      )}\n      {onTypeFilterChange && (\n        <div style={{maxWidth: '16rem'}}>\n          <Select\n            label={t('admin.common.filters.type')}\n            name=\"assigneeType\"\n            value={typeFilter ?? ''}\n            options={[\n              {label: t('admin.common.filters.all_types'), value: ''},\n              ...(['user', 'group', 'agent', 'app'] as RoleAssigneeType[]).map((type: RoleAssigneeType) => ({\n                label: t(`admin.common.identity_types.${type}`),\n                value: type,\n              })),\n            ]}\n            onChange={(event: ChangeEvent<HTMLSelectElement>): void =>\n              onTypeFilterChange((event.target.value || null) as RoleAssigneeType | null)\n            }\n          />\n        </div>\n      )}\n      <DataTable\n        caption={title?.length ? title : t('admin.roles.assignments.title')}\n        columns={columns}\n        rows={assignments}\n        getRowId={(assignment: RoleAssignment): string => `${assignment.type}:${assignment.id}`}\n        isLoading={isLoading}\n        error={error}\n        emptyText={t('admin.roles.assignments.empty')}\n      />\n    </AdminSection>\n  );\n};\n\nexport default BaseRoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;AAuFA,MAAMA,uBAAqD,EACzD,aACA,YACA,UACA,WACA,aACA,QAAQ,MACR,YAAY,OACZ,aAAa,OACb,UACA,oBACA,YACA,aACA,OACA,aAAa,WAC+B;CAC5C,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAE7C,MAAMC,UAA6C,CACjD;EACE,QAAQ,EAAE,2CAA2C;EACrD,IAAI;EACJ,SAAS,eAA0C,WAAW,WAAW,WAAW;EACrF,EACD;EACE,QAAQ,EAAE,uCAAuC;EACjD,IAAI;EACJ,SAAS,eAA0C,EAAE,+BAA+B,WAAW,OAAO;EACvG,CACF;AAED,KAAI,WACF,SAAQ,KAAK;EACX,QAAQ,EAAE,+BAA+B;EACzC,IAAI;EACJ,SAAS,eACP,2CAACC;GACC,SAAQ;GACR,OAAM;GACN,MAAK;GACL,UAAU;GACV,cAAY,EAAE,wCAAwC,EAAC,MAAM,WAAW,WAAW,WAAW,IAAG,CAAC;GAClG,eAAqB,WAAW,WAAW;aAE1C,EAAE,8BAA8B;IAC1B;EAEZ,CAAC;AAGJ,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA,YAAY,WAAW,aAAa;GACpC;GACA;GACA;GACA;GACA,UAAU,aAAa,WAAW;GAClC;GACA;GACA;GACD,CAAC;GACE;AAIV,QACE,4CAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,gCAAgC;EACrC;EACb,cAAc;EACD;;GAEZ,YAAY,cACX,2CAACC;IACC,UAAU,EAAE,8BAA8B;IAC9B;IACZ,aAAa,YAAY,KAAK,eAA+B,WAAW,GAAG;IAC3E,cAAc;IACd,OAAO;IACP,OAAQ;KAAC;KAAQ;KAAS;KAAS;KAAM,CACtC,QAAQ,SAA2B,WAAW,UAAU,OAAU,CAClE,KAAK,UAA4B;KAAC,OAAO,EAAE,+BAA+B,OAAO;KAAE,OAAO;KAAK,EAAE;KACpG;GAEH,sBACC,2CAAC;IAAI,OAAO,EAAC,UAAU,SAAQ;cAC7B,2CAACC;KACC,OAAO,EAAE,4BAA4B;KACrC,MAAK;KACL,OAAO,cAAc;KACrB,SAAS,CACP;MAAC,OAAO,EAAE,iCAAiC;MAAE,OAAO;MAAG,EACvD,GAAI;MAAC;MAAQ;MAAS;MAAS;MAAM,CAAwB,KAAK,UAA4B;MAC5F,OAAO,EAAE,+BAA+B,OAAO;MAC/C,OAAO;MACR,EAAE,CACJ;KACD,WAAW,UACT,mBAAoB,MAAM,OAAO,SAAS,KAAiC;MAE7E;KACE;GAER,2CAACC;IACC,SAAS,OAAO,SAAS,QAAQ,EAAE,gCAAgC;IAC1D;IACT,MAAM;IACN,WAAW,eAAuC,GAAG,WAAW,KAAK,GAAG,WAAW;IACxE;IACJ;IACP,WAAW,EAAE,gCAAgC;KAC7C;;GACW;;AAInB,kCAAe"}

package/dist/cjs/components/admin/RoleAssignments/RoleAssignments.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"RoleAssignments.cjs","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","rolesEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","groupsEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","type: RoleAssigneeType | undefined","filter: string | undefined","assignments: ResourceQueryResult<RoleAssignmentListResponse>","useResourceQuery","RoleQueryKeys","users: ResourceQueryResult<FilteredPage<ManagedUserListResponse>>","UserQueryKeys","groups: ResourceQueryResult<FilteredPage<GroupListResponse>>","GroupQueryKeys","agents: ResourceQueryResult<FilteredPage<AgentListResponse>>","AgentQueryKeys","assign: ResourceMutationResult<void, RoleAssignmentsVariables>","useResourceMutation","unassign: ResourceMutationResult<void, RoleAssignmentsVariables>","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n  RoleAssignmentListResponse,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addRoleAssignments,\n  getAgentName,\n  getAgents,\n  getGroups,\n  getRoleAssignments,\n  getUsers,\n  removeRoleAssignments,\n  resolveManagedIdentityName,\n  toEqualityFilter,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface RoleAssignmentsVariables {\n  assignments: RoleAssignmentInput[];\n  roleId: string;\n}\n\n/**\n * A candidate page with the filter it was listed with.\n */\ninterface FilteredPage<T> {\n  filter: string | undefined;\n  page: T;\n}\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * How an assignment is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  /**\n   * Organization unit the users, groups and agents offered for assignment are listed from.\n   */\n  ouId?: string;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  administrationMode,\n  editable = false,\n  filterable = true,\n  ouId,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const rolesEndpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const type: RoleAssigneeType | undefined = typeFilter ?? undefined;\n  const filter: string | undefined = toEqualityFilter('ouId', ouId);\n  const assignments: ResourceQueryResult<RoleAssignmentListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, roleId, {limit: 100, type}],\n    (fetcher) => getRoleAssignments({...rolesEndpoint, fetcher, limit: 100, roleId, type}),\n    {enabled: Boolean(roleId)},\n  );\n  const users: ResourceQueryResult<FilteredPage<ManagedUserListResponse>> = useResourceQuery(\n    [UserQueryKeys.USERS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getUsers({...usersEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const groups: ResourceQueryResult<FilteredPage<GroupListResponse>> = useResourceQuery(\n    [GroupQueryKeys.GROUPS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getGroups({...groupsEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<FilteredPage<AgentListResponse>> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getAgents({...agentsEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const assign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      addRoleAssignments({...rolesEndpoint, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n  const unassign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      removeRoleAssignments({...rolesEndpoint, administrationMode, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(() => {\n    // A page listed for an earlier ouId stays in a query until the next one succeeds, so it is not offered.\n    const current = <T,>(data: FilteredPage<T> | undefined): T | undefined =>\n      data && data.filter === filter ? data.page : undefined;\n\n    return {\n      agent: (current(agents.data)?.agents ?? []).map((agent: BasicAgent) => ({\n        id: agent.id,\n        label: getAgentName(agent),\n      })),\n      group: (current(groups.data)?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (current(users.data)?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    };\n  }, [agents.data, filter, groups.data, users.data]);\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA+FA,MAAMA,mBAA6C,EACjD,oBACA,WAAW,OACX,aAAa,MACb,MACA,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,qCAAmD,KAAK;CAC3E,MAAMC,gBAAoCC,sCAAsB,QAAQ;CACxE,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,iBAAqCH,sCAAsB,SAAS;CAC1E,MAAMI,OAAqC,cAAc;CACzD,MAAMC,mDAA8C,QAAQ,KAAK;CACjE,MAAMC,cAA+DC,iCACnE;EAACC,kCAAc;EAAkB;EAAQ;GAAC,OAAO;GAAK;GAAK;EAAC,GAC3D,wDAA+B;EAAC,GAAG;EAAe;EAAS,OAAO;EAAK;EAAQ;EAAK,CAAC,EACtF,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,QAAoEF,iCACxE,CAACG,kCAAc,OAAO;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC3C,OAAO,aAAa;EAAC;EAAQ,MAAM,wCAAe;GAAC,GAAG;GAAe;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACnG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAA+DJ,iCACnE,CAACK,mCAAe,QAAQ;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC7C,OAAO,aAAa;EAAC;EAAQ,MAAM,yCAAgB;GAAC,GAAG;GAAgB;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACrG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAA+DN,iCACnE,CAACO,mCAAe,QAAQ;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC7C,OAAO,aAAa;EAAC;EAAQ,MAAM,yCAAgB;GAAC,GAAG;GAAgB;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACrG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiEC,qCACpE,EAAC,aAAa,SAAS,QAAQ,MAA+B,wDAC1C;EAAC,GAAG;EAAe,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QAC7E,CAAC,CAACR,kCAAc,iBAAiB,CAAC,CACzC;CACD,MAAMS,WAAmED,qCACtE,EAAC,aAAa,SAAS,QAAQ,MAA+B,2DACvC;EAAC,GAAG;EAAe;EAAoB,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QACpG,CAAC,CAACR,kCAAc,iBAAiB,CAAC,CACzC;CAED,MAAMU,sCAA6F;EAEjG,MAAM,WAAe,SACnB,QAAQ,KAAK,WAAW,SAAS,KAAK,OAAO;AAE/C,SAAO;GACL,QAAQ,QAAQ,OAAO,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,WAAuB;IACtE,IAAI,MAAM;IACV,6CAAoB,MAAM;IAC3B,EAAE;GACH,QAAQ,QAAQ,OAAO,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,WAAkB;IAAC,IAAI,MAAM;IAAI,OAAO,MAAM;IAAK,EAAE;GACtG,OAAO,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAE,EAAE,KAAK,UAAuB;IACnE,IAAI,KAAK;IACT,2DAAkC,KAAK;IACxC,EAAE;GACJ;IACA;EAAC,OAAO;EAAM;EAAQ,OAAO;EAAM,MAAM;EAAK,CAAC;AAElD,QACE,2CAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,yDAC2B,GAAG,YAAY,OAAO,gCAAgC,sDACtD,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}

package/dist/cjs/components/admin/RoleCreate/BaseRoleCreate.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseRoleCreate.cjs","names":["BaseRoleCreate: FC<BaseRoleCreateProps>","useTheme","styles: Record<string, string>","useStyles","useTranslation","isValid: boolean","AdminSection","Alert","TextField","Button"],"sources":["../../../../../src/components/admin/RoleCreate/BaseRoleCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Preferences} from '@thunderid/browser';\nimport {ChangeEvent, FC, FormEvent, ReactElement, ReactNode, useState} from 'react';\nimport useTheme from '../../../contexts/Theme/useTheme';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport Button from '../../primitives/Button/Button';\nimport TextField from '../../primitives/TextField/TextField';\nimport AdminSection from '../shared/AdminSection';\nimport useStyles from '../shared/AdminSection.styles';\n\n/**\n * The role {@link BaseRoleCreate} submits. The organization unit is added by the caller.\n */\nexport interface RoleCreateSubmission {\n  description?: string;\n  name: string;\n}\n\n/**\n * What {@link BaseRoleCreate} hands its `children` render function, so the form can be built with any UI.\n */\nexport interface BaseRoleCreateRenderProps {\n  error: string | null;\n  /**\n   * Sets one field of the form.\n   */\n  handleInputChange: (field: 'description' | 'name', value: string) => void;\n  /**\n   * Submits the current values. Does nothing while they are not valid.\n   */\n  handleSubmit: () => void;\n  isSubmitting: boolean;\n  /**\n   * Whether the values can be submitted.\n   */\n  isValid: boolean;\n  onCancel?: () => void;\n  values: {description: string; name: string};\n}\n\nexport interface BaseRoleCreateProps {\n  /**\n   * Renders custom UI in place of the default form. Receives the values, their setters, the submit\n   * handler and the submission state.\n   */\n  children?: (props: BaseRoleCreateRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isSubmitting?: boolean;\n  onCancel?: () => void;\n  onSubmit: (role: RoleCreateSubmission) => void;\n  preferences?: Preferences;\n  title?: string;\n}\n\n/**\n * A form that collects a new role's name and description. Holds no data of its own: handle the\n * submission.\n */\nconst BaseRoleCreate: FC<BaseRoleCreateProps> = ({\n  children,\n  className,\n  description,\n  error = null,\n  isSubmitting = false,\n  onCancel,\n  onSubmit,\n  preferences,\n  title,\n}: BaseRoleCreateProps): ReactElement => {\n  const {theme, colorScheme} = useTheme();\n  const styles: Record<string, string> = useStyles(theme, colorScheme);\n  const {t} = useTranslation(preferences?.i18n);\n  const [name, setName] = useState<string>('');\n  const [roleDescription, setRoleDescription] = useState<string>('');\n\n  const isValid: boolean = name.trim().length > 0;\n\n  const submit = (): void => {\n    if (isValid) {\n      onSubmit({description: roleDescription.trim() || undefined, name: name.trim()});\n    }\n  };\n\n  const handleSubmit = (event: FormEvent<HTMLFormElement>): void => {\n    event.preventDefault();\n    submit();\n  };\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          error,\n          handleInputChange: (field: 'description' | 'name', value: string): void =>\n            field === 'name' ? setName(value) : setRoleDescription(value),\n          handleSubmit: submit,\n          isSubmitting,\n          isValid,\n          onCancel,\n          values: {description: roleDescription, name},\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"role-create\"\n      className={className}\n      title={title ?? t('admin.roles.create.title')}\n      description={description}\n      preferences={preferences}\n    >\n      <form className={styles['form']} onSubmit={handleSubmit} noValidate>\n        {error && (\n          <Alert variant=\"error\" role=\"alert\">\n            {error}\n          </Alert>\n        )}\n        <TextField\n          name=\"name\"\n          label={t('admin.roles.create.fields.name')}\n          required\n          value={name}\n          onChange={(event: ChangeEvent<HTMLInputElement>): void => setName(event.target.value)}\n        />\n        <TextField\n          name=\"description\"\n          label={t('admin.roles.create.fields.description')}\n          value={roleDescription}\n          onChange={(event: ChangeEvent<HTMLInputElement>): void => setRoleDescription(event.target.value)}\n        />\n        <div className={styles['formActions']}>\n          {onCancel && (\n            <Button type=\"button\" variant=\"text\" onClick={onCancel} disabled={isSubmitting}>\n              {t('admin.common.actions.cancel')}\n            </Button>\n          )}\n          <Button type=\"submit\" loading={isSubmitting} disabled={!isValid || isSubmitting}>\n            {t('admin.roles.create.submit')}\n          </Button>\n        </div>\n      </form>\n    </AdminSection>\n  );\n};\n\nexport default BaseRoleCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;AA+DA,MAAMA,kBAA2C,EAC/C,UACA,WACA,aACA,QAAQ,MACR,eAAe,OACf,UACA,UACA,aACA,YACuC;CACvC,MAAM,EAAC,OAAO,gBAAeC,0BAAU;CACvC,MAAMC,SAAiCC,oCAAU,OAAO,YAAY;CACpE,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,MAAM,+BAA4B,GAAG;CAC5C,MAAM,CAAC,iBAAiB,0CAAuC,GAAG;CAElE,MAAMC,UAAmB,KAAK,MAAM,CAAC,SAAS;CAE9C,MAAM,eAAqB;AACzB,MAAI,QACF,UAAS;GAAC,aAAa,gBAAgB,MAAM,IAAI;GAAW,MAAM,KAAK,MAAM;GAAC,CAAC;;CAInF,MAAM,gBAAgB,UAA4C;AAChE,QAAM,gBAAgB;AACtB,UAAQ;;AAGV,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA,oBAAoB,OAA+B,UACjD,UAAU,SAAS,QAAQ,MAAM,GAAG,mBAAmB,MAAM;GAC/D,cAAc;GACd;GACA;GACA;GACA,QAAQ;IAAC,aAAa;IAAiB;IAAK;GAC7C,CAAC;GACE;AAIV,QACE,2CAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,2BAA2B;EAChC;EACA;YAEb,4CAAC;GAAK,WAAW,OAAO;GAAS,UAAU;GAAc;;IACtD,SACC,2CAACC;KAAM,SAAQ;KAAQ,MAAK;eACzB;MACK;IAEV,2CAACC;KACC,MAAK;KACL,OAAO,EAAE,iCAAiC;KAC1C;KACA,OAAO;KACP,WAAW,UAA+C,QAAQ,MAAM,OAAO,MAAM;MACrF;IACF,2CAACA;KACC,MAAK;KACL,OAAO,EAAE,wCAAwC;KACjD,OAAO;KACP,WAAW,UAA+C,mBAAmB,MAAM,OAAO,MAAM;MAChG;IACF,4CAAC;KAAI,WAAW,OAAO;gBACpB,YACC,2CAACC;MAAO,MAAK;MAAS,SAAQ;MAAO,SAAS;MAAU,UAAU;gBAC/D,EAAE,8BAA8B;OAC1B,EAEX,2CAACA;MAAO,MAAK;MAAS,SAAS;MAAc,UAAU,CAAC,WAAW;gBAChE,EAAE,4BAA4B;OACxB;MACL;;IACD;GACM;;AAInB,6BAAe"}

package/dist/cjs/components/admin/RoleCreate/RoleCreate.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"RoleCreate.cjs","names":["RoleCreate: FC<RoleCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceMutation","RoleQueryKeys","BaseRoleCreate"],"sources":["../../../../../src/components/admin/RoleCreate/RoleCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {CreateRoleRequest, Role, RoleQueryKeys, createRole, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRoleCreate, {BaseRoleCreateProps, RoleCreateSubmission} from './BaseRoleCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type RoleCreateProps = Omit<BaseRoleCreateProps, 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created role.\n   */\n  onCreated?: (role: Role) => void;\n  /**\n   * Organization unit the role is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates a role through the management API.\n *\n * @example\n * ```tsx\n * <RoleCreate onCreated={(role) => navigate(`/roles/${role.id}`)} />\n * ```\n */\nconst RoleCreate: FC<RoleCreateProps> = ({onCreated, ouId, preferences, ...rest}: RoleCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const {error, isLoading, mutate}: ResourceMutationResult<Role, CreateRoleRequest> = useResourceMutation(\n    (payload: CreateRoleRequest, fetcher) => createRole({...endpoint, fetcher, payload}),\n    () => [[RoleQueryKeys.ROLES], [RoleQueryKeys.ROLE_ASSIGNMENTS]],\n    {onSuccess: onCreated},\n  );\n\n  const handleSubmit = ({description, name}: RoleCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId});\n    }\n  };\n\n  return (\n    <BaseRoleCreate\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.roles.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA8BA,MAAMA,cAAmC,EAAC,WAAW,MAAM,YAAa,GAAG,WAAyC;CAClH,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAMC,WAA+BC,sCAAsB,QAAQ;CACnE,MAAM,EAAC,OAAO,WAAW,WAA2DC,qCACjF,SAA4B,gDAAuB;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,QAC9E,CAAC,CAACC,kCAAc,MAAM,EAAE,CAACA,kCAAc,iBAAiB,CAAC,EAC/D,EAAC,WAAW,WAAU,CACvB;CAED,MAAM,gBAAgB,EAAC,aAAa,WAAsC;AACxE,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAa,CAAC;;AAIxD,QACE,2CAACC;EACC,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,2BAA2B,GAAG,EAAE,4BAA4B;EAEnG;EACb,GAAI;GACJ;;AAIN,yBAAe"}

package/dist/cjs/components/admin/RoleList/BaseRoleList.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseRoleList.cjs","names":["BaseRoleList: FC<BaseRoleListProps>","useTranslation","columns: DataTableColumn<RoleSummary>[]","AdminSection","DataTable"],"sources":["../../../../../src/components/admin/RoleList/BaseRoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Preferences, RoleSummary} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport DataTable, {DataTableColumn} from '../../primitives/DataTable/DataTable';\nimport {AdminListRenderProps} from '../shared/AdminListRenderProps';\nimport AdminSection from '../shared/AdminSection';\n\n/**\n * What {@link BaseRoleList} hands its `children` render function. `roles` and `rows` are the same array.\n */\nexport type BaseRoleListRenderProps = AdminListRenderProps<RoleSummary> & {roles: RoleSummary[]};\n\nexport interface BaseRoleListProps {\n  /**\n   * Controls rendered next to the title, such as a button that opens `RoleCreate`.\n   */\n  actions?: ReactNode;\n  /**\n   * Renders custom UI in place of the default table, for example a third-party data grid. Receives\n   * the roles, the default columns, the loading and error state, and the pagination and selection\n   * handlers.\n   */\n  children?: (props: BaseRoleListRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isLoading?: boolean;\n  /**\n   * Page size.\n   * @default 20\n   */\n  limit?: number;\n  offset?: number;\n  /**\n   * Called with the offset of the page to show. Pagination is hidden when omitted.\n   */\n  onPageChange?: (offset: number) => void;\n  /**\n   * Called when a role is chosen. Rows are selectable only when set.\n   */\n  onSelect?: (role: RoleSummary) => void;\n  preferences?: Preferences;\n  roles: RoleSummary[];\n  selectedRoleId?: string;\n  /**\n   * Heading of the list. Pass an empty string to hide it.\n   */\n  title?: string;\n  totalResults?: number;\n}\n\n/**\n * Lists roles with their description and organization unit. Holds no data of its own: pass the\n * page of roles and handle selection and pagination.\n */\nconst BaseRoleList: FC<BaseRoleListProps> = ({\n  actions,\n  children,\n  className,\n  description,\n  error = null,\n  isLoading = false,\n  limit = 20,\n  offset = 0,\n  onPageChange,\n  onSelect,\n  preferences,\n  roles,\n  selectedRoleId,\n  title,\n  totalResults,\n}: BaseRoleListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n\n  const columns: DataTableColumn<RoleSummary>[] = [\n    {header: t('admin.roles.list.columns.name'), id: 'name', render: (role: RoleSummary): ReactNode => role.name},\n    {\n      header: t('admin.roles.list.columns.description'),\n      id: 'description',\n      render: (role: RoleSummary): ReactNode => role.description ?? '',\n    },\n    {\n      header: t('admin.common.columns.organization_unit'),\n      id: 'ou',\n      render: (role: RoleSummary): ReactNode => role.ouHandle ?? role.ouId,\n    },\n  ];\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          columns,\n          error,\n          isLoading,\n          limit,\n          offset,\n          onPageChange,\n          onSelect,\n          rows: roles,\n          selectedRowId: selectedRoleId,\n          totalResults: totalResults ?? roles.length,\n          roles,\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"role-list\"\n      className={className}\n      title={title ?? t('admin.roles.list.title')}\n      description={description}\n      actions={actions}\n      preferences={preferences}\n    >\n      <DataTable\n        caption={title?.length ? title : t('admin.roles.list.title')}\n        columns={columns}\n        rows={roles}\n        getRowId={(role: RoleSummary): string => role.id}\n        isLoading={isLoading}\n        error={error}\n        emptyText={t('admin.roles.list.empty')}\n        onRowClick={onSelect}\n        selectedRowId={selectedRoleId}\n        pagination={\n          onPageChange ? {limit, offset, onChange: onPageChange, total: totalResults ?? roles.length} : undefined\n        }\n      />\n    </AdminSection>\n  );\n};\n\nexport default BaseRoleList;\n"],"mappings":";;;;;;;;;;;;AA0DA,MAAMA,gBAAuC,EAC3C,SACA,UACA,WACA,aACA,QAAQ,MACR,YAAY,OACZ,QAAQ,IACR,SAAS,GACT,cACA,UACA,aACA,OACA,gBACA,OACA,mBACqC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAE7C,MAAMC,UAA0C;EAC9C;GAAC,QAAQ,EAAE,gCAAgC;GAAE,IAAI;GAAQ,SAAS,SAAiC,KAAK;GAAK;EAC7G;GACE,QAAQ,EAAE,uCAAuC;GACjD,IAAI;GACJ,SAAS,SAAiC,KAAK,eAAe;GAC/D;EACD;GACE,QAAQ,EAAE,yCAAyC;GACnD,IAAI;GACJ,SAAS,SAAiC,KAAK,YAAY,KAAK;GACjE;EACF;AAED,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA;GACA;GACA;GACA;GACA;GACA;GACA,MAAM;GACN,eAAe;GACf,cAAc,gBAAgB,MAAM;GACpC;GACD,CAAC;GACE;AAIV,QACE,2CAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,yBAAyB;EAC9B;EACJ;EACI;YAEb,2CAACC;GACC,SAAS,OAAO,SAAS,QAAQ,EAAE,yBAAyB;GACnD;GACT,MAAM;GACN,WAAW,SAA8B,KAAK;GACnC;GACJ;GACP,WAAW,EAAE,yBAAyB;GACtC,YAAY;GACZ,eAAe;GACf,YACE,eAAe;IAAC;IAAO;IAAQ,UAAU;IAAc,OAAO,gBAAgB,MAAM;IAAO,GAAG;IAEhG;GACW;;AAInB,2BAAe"}

package/dist/cjs/components/admin/RoleList/RoleList.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"RoleList.cjs","names":["RoleList: FC<RoleListProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","RoleQueryKeys","BaseRoleList"],"sources":["../../../../../src/components/admin/RoleList/RoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {RoleListResponse, RoleQueryKeys, getRoles, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseRoleList, {BaseRoleListProps} from './BaseRoleList';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RoleListProps = Omit<\n  BaseRoleListProps,\n  'error' | 'isLoading' | 'offset' | 'onPageChange' | 'roles' | 'totalResults'\n>;\n\n/**\n * Lists the roles the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <RoleList onSelect={(role) => setSelectedRoleId(role.id)} />\n * ```\n */\nconst RoleList: FC<RoleListProps> = ({limit = 20, preferences, ...rest}: RoleListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const {data, error, isLoading}: ResourceQueryResult<RoleListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLES, {limit, offset}],\n    (fetcher) => getRoles({...endpoint, fetcher, limit, offset}),\n  );\n\n  return (\n    <BaseRoleList\n      roles={data?.roles ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.roles.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuBA,MAAMA,YAA+B,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAuC;CACvG,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAMC,WAA+BC,sCAAsB,QAAQ;CACnE,MAAM,EAAC,MAAM,OAAO,cAAoDC,iCACtE,CAACC,kCAAc,OAAO;EAAC;EAAO;EAAO,CAAC,GACrC,8CAAqB;EAAC,GAAG;EAAU;EAAS;EAAO;EAAO,CAAC,CAC7D;AAED,QACE,2CAACC;EACC,OAAO,MAAM,SAAS,EAAE;EACxB,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,yBAAyB;EAC5D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,uBAAe"}

package/dist/cjs/components/admin/RolePermissions/BaseRolePermissions.cjs

@@ -1,69 +0,0 @@
-const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
-const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_Spinner = require('../../primitives/Spinner/Spinner.cjs');
-const require_Alert = require('../../primitives/Alert/Alert.cjs');
-const require_useAdminPartStyles = require('../shared/useAdminPartStyles.cjs');
-const require_AdminSection = require('../shared/AdminSection.cjs');
-const require_AdminParts = require('../shared/AdminParts.cjs');
-let react_jsx_runtime = require("react/jsx-runtime");
-react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
-
-//#region src/components/admin/RolePermissions/BaseRolePermissions.tsx
-/**
-* Shows the permissions a role grants, grouped by resource server. Read-only, and holds no data of its own.
-*/
-const BaseRolePermissions = ({ children, className, description, error = null, isLoading = false, permissions, preferences, resourceServerNames, title }) => {
-	const { t } = require_useTranslation.default(preferences?.i18n);
-	const styles = require_useAdminPartStyles.default();
-	const granted = permissions.filter((entry) => entry.permissions.length > 0);
-	const resolveResourceServerName = (resourceServerId) => resourceServerNames?.[resourceServerId] ?? resourceServerId;
-	if (children) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-		className,
-		children: children({
-			error,
-			isLoading,
-			permissions: granted,
-			resolveResourceServerName
-		})
-	});
-	const renderContent = () => {
-		if (isLoading) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Spinner.default, { size: "small" });
-		if (error) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Alert.default, {
-			variant: "error",
-			role: "alert",
-			children: error
-		});
-		if (granted.length === 0) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-			className: styles["muted"],
-			children: t("admin.roles.permissions.empty")
-		});
-		return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(react_jsx_runtime.Fragment, { children: granted.map((entry) => {
-			const name = resolveResourceServerName(entry.resourceServerId);
-			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.Panel, {
-				title: name,
-				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ChipList, {
-					label: name,
-					emptyText: t("admin.roles.permissions.empty"),
-					items: entry.permissions.map((permission) => ({
-						id: permission,
-						label: permission
-					}))
-				})
-			}, entry.resourceServerId);
-		}) });
-	};
-	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminSection.default, {
-		block: "role-permissions",
-		className,
-		title: title ?? t("admin.roles.permissions.title"),
-		description,
-		headingLevel: 3,
-		preferences,
-		children: renderContent()
-	});
-};
-var BaseRolePermissions_default = BaseRolePermissions;
-
-//#endregion
-exports.default = BaseRolePermissions_default;
-//# sourceMappingURL=BaseRolePermissions.cjs.map

package/dist/cjs/components/admin/RolePermissions/BaseRolePermissions.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseRolePermissions.cjs","names":["BaseRolePermissions: FC<BaseRolePermissionsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","granted: RoleResourcePermissions[]","Spinner","Alert","name: string","Panel","ChipList","AdminSection"],"sources":["../../../../../src/components/admin/RolePermissions/BaseRolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Preferences, RoleResourcePermissions} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport {ChipList, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * What {@link BaseRolePermissions} hands its `children` render function, so the permissions can be\n * shown with any UI.\n */\nexport interface BaseRolePermissionsRenderProps {\n  error: string | null;\n  isLoading: boolean;\n  /**\n   * The resource servers the role grants at least one permission on, with those permissions.\n   */\n  permissions: RoleResourcePermissions[];\n  /**\n   * Returns a resource server's display name, or its identifier when the name is missing.\n   */\n  resolveResourceServerName: (resourceServerId: string) => string;\n}\n\nexport interface BaseRolePermissionsProps {\n  /**\n   * Renders custom UI in place of the default view. Receives the granted permissions grouped by\n   * resource server, the loading and error state, and a resource server name resolver.\n   */\n  children?: (props: BaseRolePermissionsRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isLoading?: boolean;\n  permissions: RoleResourcePermissions[];\n  preferences?: Preferences;\n  /**\n   * Display names of resource servers, keyed by identifier. The identifier is shown when a name is missing.\n   */\n  resourceServerNames?: Record<string, string>;\n  title?: string;\n}\n\n/**\n * Shows the permissions a role grants, grouped by resource server. Read-only, and holds no data of its own.\n */\nconst BaseRolePermissions: FC<BaseRolePermissionsProps> = ({\n  children,\n  className,\n  description,\n  error = null,\n  isLoading = false,\n  permissions,\n  preferences,\n  resourceServerNames,\n  title,\n}: BaseRolePermissionsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n  const granted: RoleResourcePermissions[] = permissions.filter(\n    (entry: RoleResourcePermissions) => entry.permissions.length > 0,\n  );\n  const resolveResourceServerName = (resourceServerId: string): string =>\n    resourceServerNames?.[resourceServerId] ?? resourceServerId;\n\n  if (children) {\n    return (\n      <div className={className}>{children({error, isLoading, permissions: granted, resolveResourceServerName})}</div>\n    );\n  }\n\n  const renderContent = (): ReactElement => {\n    if (isLoading) {\n      return <Spinner size=\"small\" />;\n    }\n    if (error) {\n      return (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      );\n    }\n    if (granted.length === 0) {\n      return <span className={styles['muted']}>{t('admin.roles.permissions.empty')}</span>;\n    }\n\n    return (\n      <>\n        {granted.map((entry: RoleResourcePermissions) => {\n          const name: string = resolveResourceServerName(entry.resourceServerId);\n\n          return (\n            <Panel key={entry.resourceServerId} title={name}>\n              <ChipList\n                label={name}\n                emptyText={t('admin.roles.permissions.empty')}\n                items={entry.permissions.map((permission: string) => ({id: permission, label: permission}))}\n              />\n            </Panel>\n          );\n        })}\n      </>\n    );\n  };\n\n  return (\n    <AdminSection\n      block=\"role-permissions\"\n      className={className}\n      title={title ?? t('admin.roles.permissions.title')}\n      description={description}\n      headingLevel={3}\n      preferences={preferences}\n    >\n      {renderContent()}\n    </AdminSection>\n  );\n};\n\nexport default BaseRolePermissions;\n"],"mappings":";;;;;;;;;;;;;;AAmDA,MAAMA,uBAAqD,EACzD,UACA,WACA,aACA,QAAQ,MACR,YAAY,OACZ,aACA,aACA,qBACA,YAC4C;CAC5C,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,oCAAoB;CAC3D,MAAMC,UAAqC,YAAY,QACpD,UAAmC,MAAM,YAAY,SAAS,EAChE;CACD,MAAM,6BAA6B,qBACjC,sBAAsB,qBAAqB;AAE7C,KAAI,SACF,QACE,2CAAC;EAAe;YAAY,SAAS;GAAC;GAAO;GAAW,aAAa;GAAS;GAA0B,CAAC;GAAO;CAIpH,MAAM,sBAAoC;AACxC,MAAI,UACF,QAAO,2CAACC,2BAAQ,MAAK,UAAU;AAEjC,MAAI,MACF,QACE,2CAACC;GAAM,SAAQ;GAAQ,MAAK;aACzB;IACK;AAGZ,MAAI,QAAQ,WAAW,EACrB,QAAO,2CAAC;GAAK,WAAW,OAAO;aAAW,EAAE,gCAAgC;IAAQ;AAGtF,SACE,mFACG,QAAQ,KAAK,UAAmC;GAC/C,MAAMC,OAAe,0BAA0B,MAAM,iBAAiB;AAEtE,UACE,2CAACC;IAAmC,OAAO;cACzC,2CAACC;KACC,OAAO;KACP,WAAW,EAAE,gCAAgC;KAC7C,OAAO,MAAM,YAAY,KAAK,gBAAwB;MAAC,IAAI;MAAY,OAAO;MAAW,EAAE;MAC3F;MALQ,MAAM,iBAMV;IAEV,GACD;;AAIP,QACE,2CAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,gCAAgC;EACrC;EACb,cAAc;EACD;YAEZ,eAAe;GACH;;AAInB,kCAAe"}

package/dist/cjs/components/admin/RolePermissions/RolePermissions.cjs

@@ -1,40 +0,0 @@
-const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
-const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
-const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
-const require_BaseRolePermissions = require('./BaseRolePermissions.cjs');
-let __thunderid_browser = require("@thunderid/browser");
-__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
-let react_jsx_runtime = require("react/jsx-runtime");
-react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
-
-//#region src/components/admin/RolePermissions/RolePermissions.tsx
-/**
-* Shows the permissions a role grants.
-*
-* @example
-* ```tsx
-* <RolePermissions roleId={roleId} />
-* ```
-*/
-const RolePermissions = ({ preferences, roleId,...rest }) => {
-	const { t } = require_useTranslation.default(preferences?.i18n);
-	const endpoint = require_useManagementEndpoint.default("roles");
-	const role = require_useResourceQuery.default([__thunderid_browser.RoleQueryKeys.ROLE, roleId], (fetcher) => (0, __thunderid_browser.getRole)({
-		...endpoint,
-		fetcher,
-		roleId
-	}), { enabled: Boolean(roleId) });
-	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseRolePermissions.default, {
-		permissions: role.data?.permissions ?? [],
-		isLoading: role.isLoading,
-		error: (0, __thunderid_browser.toManagementErrorMessage)(t, role.error, "admin.roles.permissions.error"),
-		preferences,
-		...rest
-	});
-};
-var RolePermissions_default = RolePermissions;
-
-//#endregion
-exports.default = RolePermissions_default;
-//# sourceMappingURL=RolePermissions.cjs.map

package/dist/cjs/components/admin/RolePermissions/RolePermissions.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"RolePermissions.cjs","names":["RolePermissions: FC<RolePermissionsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","role: ResourceQueryResult<Role>","useResourceQuery","RoleQueryKeys","BaseRolePermissions"],"sources":["../../../../../src/components/admin/RolePermissions/RolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Role, RoleQueryKeys, getRole, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRolePermissions, {BaseRolePermissionsProps} from './BaseRolePermissions';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RolePermissionsProps = Omit<BaseRolePermissionsProps, 'error' | 'isLoading' | 'permissions'> & {\n  roleId: string;\n};\n\n/**\n * Shows the permissions a role grants.\n *\n * @example\n * ```tsx\n * <RolePermissions roleId={roleId} />\n * ```\n */\nconst RolePermissions: FC<RolePermissionsProps> = ({\n  preferences,\n  roleId,\n  ...rest\n}: RolePermissionsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const role: ResourceQueryResult<Role> = useResourceQuery(\n    [RoleQueryKeys.ROLE, roleId],\n    (fetcher) => getRole({...endpoint, fetcher, roleId}),\n    {enabled: Boolean(roleId)},\n  );\n\n  return (\n    <BaseRolePermissions\n      permissions={role.data?.permissions ?? []}\n      isLoading={role.isLoading}\n      error={toManagementErrorMessage(t, role.error, 'admin.roles.permissions.error')}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RolePermissions;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAsBA,MAAMA,mBAA6C,EACjD,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,sCAAsB,QAAQ;CACnE,MAAMC,OAAkCC,iCACtC,CAACC,kCAAc,MAAM,OAAO,GAC3B,6CAAoB;EAAC,GAAG;EAAU;EAAS;EAAO,CAAC,EACpD,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;AAED,QACE,2CAACC;EACC,aAAa,KAAK,MAAM,eAAe,EAAE;EACzC,WAAW,KAAK;EAChB,yDAAgC,GAAG,KAAK,OAAO,gCAAgC;EAClE;EACb,GAAI;GACJ;;AAIN,8BAAe"}

package/dist/cjs/components/admin/UserCreate/BaseUserCreate.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseUserCreate.cjs","names":["BaseUserCreate: FC<BaseUserCreateProps>","DEFAULT_USER_CREATE_FIELDS","useTheme","styles: Record<string, string>","useStyles","useTranslation","type: string","isComplete: boolean","AdminSection","Alert","Select","TextField","Button"],"sources":["../../../../../src/components/admin/UserCreate/BaseUserCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Preferences, SelectOption} from '@thunderid/browser';\nimport {ChangeEvent, FC, FormEvent, ReactElement, ReactNode, useState} from 'react';\nimport {DEFAULT_USER_CREATE_FIELDS, UserCreateField} from './userCreateFields';\nimport useTheme from '../../../contexts/Theme/useTheme';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport Button from '../../primitives/Button/Button';\nimport Select from '../../primitives/Select/Select';\nimport TextField from '../../primitives/TextField/TextField';\nimport AdminSection from '../shared/AdminSection';\nimport useStyles from '../shared/AdminSection.styles';\n\n/**\n * The user {@link BaseUserCreate} submits. The organization unit is added by the caller.\n */\nexport interface UserCreateSubmission {\n  attributes: Record<string, string>;\n  type: string;\n}\n\n/**\n * What {@link BaseUserCreate} hands its `children` render function, so the form can be built with any UI.\n */\nexport interface BaseUserCreateRenderProps {\n  error: string | null;\n  /**\n   * The attributes to collect.\n   */\n  fields: UserCreateField[];\n  /**\n   * Sets one attribute.\n   */\n  handleInputChange: (name: string, value: string) => void;\n  /**\n   * Submits the chosen type and the non-empty attributes. Does nothing while they are not valid.\n   */\n  handleSubmit: () => void;\n  /**\n   * Chooses the user type.\n   */\n  handleTypeChange: (type: string) => void;\n  isSubmitting: boolean;\n  /**\n   * Whether a type is chosen and every required attribute has a value.\n   */\n  isValid: boolean;\n  onCancel?: () => void;\n  /**\n   * The chosen user type.\n   */\n  type: string;\n  userTypes: SelectOption[];\n  /**\n   * The attribute values, keyed by attribute name.\n   */\n  values: Record<string, string>;\n}\n\nexport interface BaseUserCreateProps {\n  /**\n   * Renders custom UI in place of the default form. Receives the fields, the values and their\n   * setters, the user types, the submit handler and the submission state.\n   */\n  children?: (props: BaseUserCreateRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  /**\n   * Attributes to collect.\n   * @default username, email, given_name, family_name and password\n   */\n  fields?: UserCreateField[];\n  isSubmitting?: boolean;\n  onCancel?: () => void;\n  onSubmit: (user: UserCreateSubmission) => void;\n  preferences?: Preferences;\n  title?: string;\n  /**\n   * The user types to choose from. The first one is selected by default.\n   */\n  userTypes: SelectOption[];\n}\n\n/**\n * A form that collects a new user's type and attributes. Holds no data of its own: pass the user\n * types and handle the submission.\n */\nconst BaseUserCreate: FC<BaseUserCreateProps> = ({\n  children,\n  className,\n  description,\n  error = null,\n  fields = DEFAULT_USER_CREATE_FIELDS,\n  isSubmitting = false,\n  onCancel,\n  onSubmit,\n  preferences,\n  title,\n  userTypes,\n}: BaseUserCreateProps): ReactElement => {\n  const {theme, colorScheme} = useTheme();\n  const styles: Record<string, string> = useStyles(theme, colorScheme);\n  const {t} = useTranslation(preferences?.i18n);\n  const [chosenType, setType] = useState<string>('');\n  const type: string = chosenType || (userTypes[0]?.value ?? '');\n  const [values, setValues] = useState<Record<string, string>>({});\n\n  const isComplete: boolean =\n    Boolean(type) && fields.every((field: UserCreateField) => !field.required || Boolean(values[field.name]?.trim()));\n\n  const setValue = (name: string, value: string): void =>\n    setValues((previous: Record<string, string>) => ({...previous, [name]: value}));\n\n  const submit = (): void => {\n    if (!isComplete) {\n      return;\n    }\n\n    const attributes: Record<string, string> = Object.fromEntries(\n      Object.entries(values).filter(([, value]: [string, string]) => value.trim() !== ''),\n    );\n\n    onSubmit({attributes, type});\n  };\n\n  const handleSubmit = (event: FormEvent<HTMLFormElement>): void => {\n    event.preventDefault();\n    submit();\n  };\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          error,\n          fields,\n          handleInputChange: setValue,\n          handleSubmit: submit,\n          handleTypeChange: setType,\n          isSubmitting,\n          isValid: isComplete,\n          onCancel,\n          type,\n          userTypes,\n          values,\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"user-create\"\n      className={className}\n      title={title ?? t('admin.users.create.title')}\n      description={description}\n      preferences={preferences}\n    >\n      <form className={styles['form']} onSubmit={handleSubmit} noValidate>\n        {error && (\n          <Alert variant=\"error\" role=\"alert\">\n            {error}\n          </Alert>\n        )}\n        <Select\n          label={t('admin.users.create.fields.type')}\n          name=\"type\"\n          required\n          value={type}\n          options={userTypes}\n          onChange={(event: ChangeEvent<HTMLSelectElement>): void => setType(event.target.value)}\n        />\n        {fields.map((field: UserCreateField) => (\n          <TextField\n            key={field.name}\n            name={field.name}\n            type={field.type ?? 'text'}\n            label={field.label ?? t(`admin.users.create.fields.${field.name}`)}\n            required={field.required}\n            autoComplete={field.type === 'password' ? 'new-password' : 'off'}\n            value={values[field.name] ?? ''}\n            onChange={(event: ChangeEvent<HTMLInputElement>): void => setValue(field.name, event.target.value)}\n          />\n        ))}\n        <div className={styles['formActions']}>\n          {onCancel && (\n            <Button type=\"button\" variant=\"text\" onClick={onCancel} disabled={isSubmitting}>\n              {t('admin.common.actions.cancel')}\n            </Button>\n          )}\n          <Button type=\"submit\" loading={isSubmitting} disabled={!isComplete || isSubmitting}>\n            {t('admin.users.create.submit')}\n          </Button>\n        </div>\n      </form>\n    </AdminSection>\n  );\n};\n\nexport default BaseUserCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA0FA,MAAMA,kBAA2C,EAC/C,UACA,WACA,aACA,QAAQ,MACR,SAASC,qDACT,eAAe,OACf,UACA,UACA,aACA,OACA,gBACuC;CACvC,MAAM,EAAC,OAAO,gBAAeC,0BAAU;CACvC,MAAMC,SAAiCC,oCAAU,OAAO,YAAY;CACpE,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,+BAA4B,GAAG;CAClD,MAAMC,OAAe,eAAe,UAAU,IAAI,SAAS;CAC3D,MAAM,CAAC,QAAQ,iCAA8C,EAAE,CAAC;CAEhE,MAAMC,aACJ,QAAQ,KAAK,IAAI,OAAO,OAAO,UAA2B,CAAC,MAAM,YAAY,QAAQ,OAAO,MAAM,OAAO,MAAM,CAAC,CAAC;CAEnH,MAAM,YAAY,MAAc,UAC9B,WAAW,cAAsC;EAAC,GAAG;GAAW,OAAO;EAAM,EAAE;CAEjF,MAAM,eAAqB;AACzB,MAAI,CAAC,WACH;AAOF,WAAS;GAAC,YAJiC,OAAO,YAChD,OAAO,QAAQ,OAAO,CAAC,QAAQ,GAAG,WAA6B,MAAM,MAAM,KAAK,GAAG,CACpF;GAEqB;GAAK,CAAC;;CAG9B,MAAM,gBAAgB,UAA4C;AAChE,QAAM,gBAAgB;AACtB,UAAQ;;AAGV,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA;GACA,mBAAmB;GACnB,cAAc;GACd,kBAAkB;GAClB;GACA,SAAS;GACT;GACA;GACA;GACA;GACD,CAAC;GACE;AAIV,QACE,2CAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,2BAA2B;EAChC;EACA;YAEb,4CAAC;GAAK,WAAW,OAAO;GAAS,UAAU;GAAc;;IACtD,SACC,2CAACC;KAAM,SAAQ;KAAQ,MAAK;eACzB;MACK;IAEV,2CAACC;KACC,OAAO,EAAE,iCAAiC;KAC1C,MAAK;KACL;KACA,OAAO;KACP,SAAS;KACT,WAAW,UAAgD,QAAQ,MAAM,OAAO,MAAM;MACtF;IACD,OAAO,KAAK,UACX,2CAACC;KAEC,MAAM,MAAM;KACZ,MAAM,MAAM,QAAQ;KACpB,OAAO,MAAM,SAAS,EAAE,6BAA6B,MAAM,OAAO;KAClE,UAAU,MAAM;KAChB,cAAc,MAAM,SAAS,aAAa,iBAAiB;KAC3D,OAAO,OAAO,MAAM,SAAS;KAC7B,WAAW,UAA+C,SAAS,MAAM,MAAM,MAAM,OAAO,MAAM;OAP7F,MAAM,KAQX,CACF;IACF,4CAAC;KAAI,WAAW,OAAO;gBACpB,YACC,2CAACC;MAAO,MAAK;MAAS,SAAQ;MAAO,SAAS;MAAU,UAAU;gBAC/D,EAAE,8BAA8B;OAC1B,EAEX,2CAACA;MAAO,MAAK;MAAS,SAAS;MAAc,UAAU,CAAC,cAAc;gBACnE,EAAE,4BAA4B;OACxB;MACL;;IACD;GACM;;AAInB,6BAAe"}

package/dist/cjs/components/admin/UserCreate/UserCreate.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserCreate.cjs","names":["UserCreate: FC<UserCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","usersEndpoint: ManagementEndpoint","useManagementEndpoint","userTypesEndpoint: ManagementEndpoint","useResourceQuery","UserQueryKeys","useResourceMutation","options: SelectOption[]","InviteUser","BaseUserCreate"],"sources":["../../../../../src/components/admin/UserCreate/UserCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  CreateManagedUserRequest,\n  ManagedUser,\n  ManagedUserType,\n  ManagedUserTypeListResponse,\n  SelectOption,\n  UserQueryKeys,\n  createUser,\n  getUserTypes,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseUserCreate, {BaseUserCreateProps, UserCreateSubmission} from './BaseUserCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport InviteUser, {InviteUserProps} from '../../auth/InviteUser/InviteUser';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type UserCreateProps = Omit<BaseUserCreateProps, 'error' | 'isSubmitting' | 'onSubmit' | 'userTypes'> & {\n  /**\n   * Props passed to `InviteUser` when `mode` is `invite`.\n   */\n  inviteProps?: InviteUserProps;\n  /**\n   * How the user is added.\n   * - `api` creates the user directly through the management API.\n   * - `invite` runs the invite user flow, which asks the person to finish setting up their account.\n   *   Only available where flows run.\n   * @default 'api'\n   */\n  mode?: 'api' | 'invite';\n  /**\n   * Called with the created user. Not called in `invite` mode, where the flow reports progress\n   * through `inviteProps.onFlowChange`.\n   */\n  onCreated?: (user: ManagedUser) => void;\n  /**\n   * Organization unit the user is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Adds a user, either directly through the management API or by inviting them through the invite\n * user flow.\n *\n * @example\n * ```tsx\n * <UserCreate onCreated={(user) => navigate(`/users/${user.id}`)} />\n * <UserCreate mode=\"invite\" />\n * ```\n */\nconst UserCreate: FC<UserCreateProps> = ({\n  inviteProps,\n  mode = 'api',\n  onCreated,\n  ouId,\n  preferences,\n  ...rest\n}: UserCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const userTypesEndpoint: ManagementEndpoint = useManagementEndpoint('userTypes');\n  const {data: userTypes}: ResourceQueryResult<ManagedUserTypeListResponse> = useResourceQuery(\n    [UserQueryKeys.USER_TYPES, {limit: 100}],\n    (fetcher) => getUserTypes({...userTypesEndpoint, fetcher, limit: 100}),\n    {enabled: mode === 'api'},\n  );\n  const {error, isLoading, mutate}: ResourceMutationResult<ManagedUser, CreateManagedUserRequest> = useResourceMutation(\n    (payload: CreateManagedUserRequest, fetcher) => createUser({...usersEndpoint, fetcher, payload}),\n    () => [[UserQueryKeys.USERS]],\n    {onSuccess: onCreated},\n  );\n\n  const options: SelectOption[] = useMemo(\n    () =>\n      (userTypes?.types ?? []).map((userType: ManagedUserType) => ({\n        label: userType.displayName ?? userType.handle,\n        value: userType.handle,\n      })),\n    [userTypes],\n  );\n\n  if (mode === 'invite') {\n    return <InviteUser {...inviteProps} />;\n  }\n\n  const handleSubmit = ({attributes, type}: UserCreateSubmission): void => {\n    if (!resolvedOuId) {\n      return;\n    }\n\n    void mutate({attributes, ouId: resolvedOuId, type});\n  };\n\n  return (\n    <BaseUserCreate\n      userTypes={options}\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.users.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAyDA,MAAMA,cAAmC,EACvC,aACA,OAAO,OACP,WACA,MACA,YACA,GAAG,WACgC;CACnC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAMC,gBAAoCC,sCAAsB,QAAQ;CACxE,MAAMC,oBAAwCD,sCAAsB,YAAY;CAChF,MAAM,EAAC,MAAM,cAA+DE,iCAC1E,CAACC,kCAAc,YAAY,EAAC,OAAO,KAAI,CAAC,GACvC,kDAAyB;EAAC,GAAG;EAAmB;EAAS,OAAO;EAAI,CAAC,EACtE,EAAC,SAAS,SAAS,OAAM,CAC1B;CACD,MAAM,EAAC,OAAO,WAAW,WAAyEC,qCAC/F,SAAmC,gDAAuB;EAAC,GAAG;EAAe;EAAS;EAAQ,CAAC,QAC1F,CAAC,CAACD,kCAAc,MAAM,CAAC,EAC7B,EAAC,WAAW,WAAU,CACvB;CAED,MAAME,oCAED,WAAW,SAAS,EAAE,EAAE,KAAK,cAA+B;EAC3D,OAAO,SAAS,eAAe,SAAS;EACxC,OAAO,SAAS;EACjB,EAAE,EACL,CAAC,UAAU,CACZ;AAED,KAAI,SAAS,SACX,QAAO,2CAACC,8BAAW,GAAI,cAAe;CAGxC,MAAM,gBAAgB,EAAC,YAAY,WAAsC;AACvE,MAAI,CAAC,aACH;AAGF,EAAK,OAAO;GAAC;GAAY,MAAM;GAAc;GAAK,CAAC;;AAGrD,QACE,2CAACC;EACC,WAAW;EACX,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,2BAA2B,GAAG,EAAE,4BAA4B;EAEnG;EACb,GAAI;GACJ;;AAIN,yBAAe"}

package/dist/cjs/components/admin/UserCreate/userCreateFields.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"userCreateFields.cjs","names":["DEFAULT_USER_CREATE_FIELDS: UserCreateField[]"],"sources":["../../../../../src/components/admin/UserCreate/userCreateFields.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n/**\n * A user attribute collected by {@link BaseUserCreate}.\n */\nexport interface UserCreateField {\n  /**\n   * Label shown for the field. Defaults to the translation of `admin.users.create.fields.<name>`.\n   */\n  label?: string;\n  /**\n   * Attribute name, as defined in the user type schema.\n   */\n  name: string;\n  required?: boolean;\n  type?: 'text' | 'email' | 'password' | 'tel';\n}\n\n/**\n * The attributes `UserCreate` collects when no `fields` are given.\n */\nexport const DEFAULT_USER_CREATE_FIELDS: UserCreateField[] = [\n  {name: 'username', required: true},\n  {name: 'email', required: true, type: 'email'},\n  {name: 'given_name'},\n  {name: 'family_name'},\n  {name: 'password', type: 'password'},\n];\n"],"mappings":";;;;;AAsBA,MAAaA,6BAAgD;CAC3D;EAAC,MAAM;EAAY,UAAU;EAAK;CAClC;EAAC,MAAM;EAAS,UAAU;EAAM,MAAM;EAAQ;CAC9C,EAAC,MAAM,cAAa;CACpB,EAAC,MAAM,eAAc;CACrB;EAAC,MAAM;EAAY,MAAM;EAAW;CACrC"}

package/dist/cjs/components/admin/UserDetails/BaseUserDetails.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"BaseUserDetails.cjs","names":["BaseUserDetails: FC<BaseUserDetailsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","isWritable: boolean","AdminSection","Spinner","Alert","displayName: string","attributes: [string, unknown][]","editableAttributes: [string, string][]","AccountLifecycleButtons","ConfirmButton","Avatar","AccessStatusBadge","Panel","Button","TextField","DetailList","ChipList"],"sources":["../../../../../src/components/admin/UserDetails/BaseUserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AccountLifecycleAction,\n  resolveManagedIdentityName,\n  ManagedUser,\n  MembershipGroup,\n  Preferences,\n} from '@thunderid/browser';\nimport {ChangeEvent, FC, ReactElement, ReactNode, useState} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport {Avatar} from '../../primitives/Avatar/Avatar';\nimport Button from '../../primitives/Button/Button';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport TextField from '../../primitives/TextField/TextField';\nimport {AccessStatusBadge, AccountLifecycleButtons} from '../shared/AccountLifecycleParts';\nimport {ChipList, ConfirmButton, DetailList, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * What {@link BaseUserDetails} hands its `children` render function, so the user can be shown with any UI.\n */\nexport interface BaseUserDetailsRenderProps {\n  /**\n   * The user's attributes, without the hidden ones.\n   */\n  attributes: Record<string, unknown>;\n  /**\n   * The user's display name, or an empty string while there is no user.\n   */\n  displayName: string;\n  error: string | null;\n  groups: MembershipGroup[];\n  isDeleting: boolean;\n  isLoading: boolean;\n  isRunningLifecycleAction: boolean;\n  isUpdating: boolean;\n  /**\n   * The account lifecycle actions offered for the user. Empty when none is allowed.\n   */\n  lifecycleActions: AccountLifecycleAction[];\n  /**\n   * Deletes the user. Undefined when deletion is not allowed, including for read-only users.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action, with the operator's note on a suspension. Undefined when none is\n   * allowed.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  /**\n   * Saves the given attributes. Undefined when editing is not allowed, including for read-only users.\n   */\n  onUpdate?: (attributes: Record<string, unknown>) => void;\n  user?: ManagedUser;\n}\n\nexport interface BaseUserDetailsProps {\n  /**\n   * Controls rendered next to the user's name.\n   */\n  actions?: ReactNode;\n  /**\n   * Renders custom UI in place of the default view. Receives the user, their visible attributes and\n   * groups, the loading and error state, and the delete and update handlers.\n   */\n  children?: (props: BaseUserDetailsRenderProps) => ReactNode;\n  className?: string;\n  error?: string | null;\n  /**\n   * The groups the user belongs to.\n   */\n  groups?: MembershipGroup[];\n  /**\n   * Attribute names that are never shown, such as credentials.\n   * @default ['password']\n   */\n  hiddenAttributes?: string[];\n  isDeleting?: boolean;\n  isLoading?: boolean;\n  isRunningLifecycleAction?: boolean;\n  isUpdating?: boolean;\n  /**\n   * The account lifecycle actions to offer (suspend, unsuspend, unlock), shown only with\n   * `onLifecycleAction`. They change only runtime state, so they apply to read-only users too.\n   */\n  lifecycleActions?: AccountLifecycleAction[];\n  /**\n   * Deletes the user. The delete action is hidden when omitted.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action. Suspending and unsuspending ask for confirmation first, and a\n   * suspension takes an optional operator note.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  /**\n   * Saves edited attributes. Text attributes become editable only when set. Receives every\n   * attribute, edited or not.\n   */\n  onUpdate?: (attributes: Record<string, unknown>) => void;\n  preferences?: Preferences;\n  user?: ManagedUser;\n}\n\nconst stringify = (value: unknown): string => {\n  if (value === null || value === undefined) {\n    return '';\n  }\n\n  return typeof value === 'object' ? JSON.stringify(value) : String(value as string | number | boolean);\n};\n\n/**\n * Shows a user's attributes, type, organization unit and groups. Holds no data of its own: pass the\n * user and handle deletion.\n */\nconst BaseUserDetails: FC<BaseUserDetailsProps> = ({\n  actions,\n  children,\n  className,\n  error = null,\n  groups = [],\n  hiddenAttributes = ['password'],\n  isDeleting = false,\n  isLoading = false,\n  isRunningLifecycleAction = false,\n  isUpdating = false,\n  lifecycleActions = [],\n  onDelete,\n  onLifecycleAction,\n  onUpdate,\n  preferences,\n  user,\n}: BaseUserDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n  const [draft, setDraft] = useState<Record<string, string> | null>(null);\n\n  if (children) {\n    const isWritable: boolean = Boolean(user) && !user?.isReadOnly;\n\n    return (\n      <div className={className}>\n        {children({\n          attributes: Object.fromEntries(\n            Object.entries(user?.attributes ?? {}).filter(\n              ([name]: [string, unknown]) => !hiddenAttributes.includes(name),\n            ),\n          ),\n          displayName: user ? resolveManagedIdentityName(user) : '',\n          error,\n          groups,\n          isDeleting,\n          isLoading,\n          isRunningLifecycleAction,\n          isUpdating,\n          lifecycleActions: onLifecycleAction && user ? lifecycleActions : [],\n          onDelete: isWritable ? onDelete : undefined,\n          onLifecycleAction: user ? onLifecycleAction : undefined,\n          onUpdate: isWritable ? onUpdate : undefined,\n          user,\n        })}\n      </div>\n    );\n  }\n\n  if (isLoading && !user) {\n    return (\n      <AdminSection block=\"user-details\" className={className} preferences={preferences}>\n        <span className={styles['muted']} role=\"status\">\n          <Spinner size=\"small\" /> {t('admin.common.loading')}\n        </span>\n      </AdminSection>\n    );\n  }\n\n  if (!user) {\n    return (\n      <AdminSection block=\"user-details\" className={className} preferences={preferences}>\n        <Alert variant=\"error\" role=\"alert\">\n          {error ?? t('admin.common.errors.not_found')}\n        </Alert>\n      </AdminSection>\n    );\n  }\n\n  const displayName: string = resolveManagedIdentityName(user);\n  const attributes: [string, unknown][] = Object.entries(user.attributes ?? {}).filter(\n    ([name]: [string, unknown]) => !hiddenAttributes.includes(name),\n  );\n  const editableAttributes: [string, string][] = attributes.filter(\n    (entry: [string, unknown]): entry is [string, string] => typeof entry[1] === 'string',\n  );\n\n  return (\n    <AdminSection\n      block=\"user-details\"\n      className={className}\n      title={displayName}\n      description={t('admin.users.details.subtitle', {type: user.type})}\n      preferences={preferences}\n      actions={\n        <>\n          {actions}\n          {onLifecycleAction && (\n            <AccountLifecycleButtons\n              actions={lifecycleActions}\n              collectsOperatorNote\n              isRunning={isRunningLifecycleAction}\n              name={displayName}\n              onAction={onLifecycleAction}\n            />\n          )}\n          {onDelete && !user.isReadOnly && (\n            <ConfirmButton\n              confirmText={t('admin.users.details.delete.confirm', {name: displayName})}\n              isLoading={isDeleting}\n              onConfirm={onDelete}\n            >\n              {t('admin.users.details.delete.action')}\n            </ConfirmButton>\n          )}\n        </>\n      }\n    >\n      {error && (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      )}\n      <div className={styles['row']}>\n        <Avatar name={displayName} size={48} />\n        <span className={styles['muted']}>{user.ouHandle ?? user.ouId}</span>\n        <AccessStatusBadge status={user.status?.value} />\n      </div>\n      <Panel\n        title={t('admin.users.details.attributes')}\n        actions={\n          onUpdate && !user.isReadOnly && !draft && editableAttributes.length > 0 ? (\n            <Button\n              variant=\"outline\"\n              size=\"small\"\n              onClick={(): void => setDraft(Object.fromEntries(editableAttributes))}\n            >\n              {t('admin.users.details.edit.action')}\n            </Button>\n          ) : undefined\n        }\n      >\n        {draft ? (\n          <form\n            className={styles['row']}\n            style={{alignItems: 'stretch', flexDirection: 'column'}}\n            onSubmit={(event): void => {\n              event.preventDefault();\n              onUpdate?.({...(user.attributes ?? {}), ...draft});\n              setDraft(null);\n            }}\n          >\n            {Object.keys(draft).map((name: string) => (\n              <TextField\n                key={name}\n                name={name}\n                label={name}\n                aria-label={name}\n                value={draft[name]}\n                onChange={(event: ChangeEvent<HTMLInputElement>): void =>\n                  setDraft((previous: Record<string, string> | null) => ({...previous, [name]: event.target.value}))\n                }\n              />\n            ))}\n            <div className={styles['row']} style={{justifyContent: 'flex-end'}}>\n              <Button type=\"button\" variant=\"text\" disabled={isUpdating} onClick={(): void => setDraft(null)}>\n                {t('admin.common.actions.cancel')}\n              </Button>\n              <Button type=\"submit\" loading={isUpdating} disabled={isUpdating}>\n                {t('admin.users.details.edit.save')}\n              </Button>\n            </div>\n          </form>\n        ) : attributes.length > 0 ? (\n          <DetailList\n            items={attributes.map(([name, value]: [string, unknown]) => ({label: name, value: stringify(value)}))}\n          />\n        ) : (\n          <span className={styles['muted']}>{t('admin.users.details.no_attributes')}</span>\n        )}\n      </Panel>\n      <Panel title={t('admin.users.details.groups')}>\n        <ChipList\n          label={t('admin.users.details.groups')}\n          emptyText={t('admin.users.details.no_groups')}\n          items={groups.map((group: MembershipGroup) => ({id: group.id, label: group.name}))}\n        />\n      </Panel>\n    </AdminSection>\n  );\n};\n\nexport default BaseUserDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA4GA,MAAM,aAAa,UAA2B;AAC5C,KAAI,UAAU,QAAQ,UAAU,OAC9B,QAAO;AAGT,QAAO,OAAO,UAAU,WAAW,KAAK,UAAU,MAAM,GAAG,OAAO,MAAmC;;;;;;AAOvG,MAAMA,mBAA6C,EACjD,SACA,UACA,WACA,QAAQ,MACR,SAAS,EAAE,EACX,mBAAmB,CAAC,WAAW,EAC/B,aAAa,OACb,YAAY,OACZ,2BAA2B,OAC3B,aAAa,OACb,mBAAmB,EAAE,EACrB,UACA,mBACA,UACA,aACA,WACwC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,oCAAoB;CAC3D,MAAM,CAAC,OAAO,gCAAoD,KAAK;AAEvE,KAAI,UAAU;EACZ,MAAMC,aAAsB,QAAQ,KAAK,IAAI,CAAC,MAAM;AAEpD,SACE,2CAAC;GAAe;aACb,SAAS;IACR,YAAY,OAAO,YACjB,OAAO,QAAQ,MAAM,cAAc,EAAE,CAAC,CAAC,QACpC,CAAC,UAA6B,CAAC,iBAAiB,SAAS,KAAK,CAChE,CACF;IACD,aAAa,2DAAkC,KAAK,GAAG;IACvD;IACA;IACA;IACA;IACA;IACA;IACA,kBAAkB,qBAAqB,OAAO,mBAAmB,EAAE;IACnE,UAAU,aAAa,WAAW;IAClC,mBAAmB,OAAO,oBAAoB;IAC9C,UAAU,aAAa,WAAW;IAClC;IACD,CAAC;IACE;;AAIV,KAAI,aAAa,CAAC,KAChB,QACE,2CAACC;EAAa,OAAM;EAA0B;EAAwB;YACpE,4CAAC;GAAK,WAAW,OAAO;GAAU,MAAK;;IACrC,2CAACC,2BAAQ,MAAK,UAAU;;IAAE,EAAE,uBAAuB;;IAC9C;GACM;AAInB,KAAI,CAAC,KACH,QACE,2CAACD;EAAa,OAAM;EAA0B;EAAwB;YACpE,2CAACE;GAAM,SAAQ;GAAQ,MAAK;aACzB,SAAS,EAAE,gCAAgC;IACtC;GACK;CAInB,MAAMC,kEAAiD,KAAK;CAC5D,MAAMC,aAAkC,OAAO,QAAQ,KAAK,cAAc,EAAE,CAAC,CAAC,QAC3E,CAAC,UAA6B,CAAC,iBAAiB,SAAS,KAAK,CAChE;CACD,MAAMC,qBAAyC,WAAW,QACvD,UAAwD,OAAO,MAAM,OAAO,SAC9E;AAED,QACE,4CAACL;EACC,OAAM;EACK;EACX,OAAO;EACP,aAAa,EAAE,gCAAgC,EAAC,MAAM,KAAK,MAAK,CAAC;EACpD;EACb,SACE;GACG;GACA,qBACC,2CAACM;IACC,SAAS;IACT;IACA,WAAW;IACX,MAAM;IACN,UAAU;KACV;GAEH,YAAY,CAAC,KAAK,cACjB,2CAACC;IACC,aAAa,EAAE,sCAAsC,EAAC,MAAM,aAAY,CAAC;IACzE,WAAW;IACX,WAAW;cAEV,EAAE,oCAAoC;KACzB;MAEjB;;GAGJ,SACC,2CAACL;IAAM,SAAQ;IAAQ,MAAK;cACzB;KACK;GAEV,4CAAC;IAAI,WAAW,OAAO;;KACrB,2CAACM;MAAO,MAAM;MAAa,MAAM;OAAM;KACvC,2CAAC;MAAK,WAAW,OAAO;gBAAW,KAAK,YAAY,KAAK;OAAY;KACrE,2CAACC,mDAAkB,QAAQ,KAAK,QAAQ,QAAS;;KAC7C;GACN,2CAACC;IACC,OAAO,EAAE,iCAAiC;IAC1C,SACE,YAAY,CAAC,KAAK,cAAc,CAAC,SAAS,mBAAmB,SAAS,IACpE,2CAACC;KACC,SAAQ;KACR,MAAK;KACL,eAAqB,SAAS,OAAO,YAAY,mBAAmB,CAAC;eAEpE,EAAE,kCAAkC;MAC9B,GACP;cAGL,QACC,4CAAC;KACC,WAAW,OAAO;KAClB,OAAO;MAAC,YAAY;MAAW,eAAe;MAAS;KACvD,WAAW,UAAgB;AACzB,YAAM,gBAAgB;AACtB,iBAAW;OAAC,GAAI,KAAK,cAAc,EAAE;OAAG,GAAG;OAAM,CAAC;AAClD,eAAS,KAAK;;gBAGf,OAAO,KAAK,MAAM,CAAC,KAAK,SACvB,2CAACC;MAEO;MACN,OAAO;MACP,cAAY;MACZ,OAAO,MAAM;MACb,WAAW,UACT,UAAU,cAA6C;OAAC,GAAG;QAAW,OAAO,MAAM,OAAO;OAAM,EAAE;QAN/F,KAQL,CACF,EACF,4CAAC;MAAI,WAAW,OAAO;MAAQ,OAAO,EAAC,gBAAgB,YAAW;iBAChE,2CAACD;OAAO,MAAK;OAAS,SAAQ;OAAO,UAAU;OAAY,eAAqB,SAAS,KAAK;iBAC3F,EAAE,8BAA8B;QAC1B,EACT,2CAACA;OAAO,MAAK;OAAS,SAAS;OAAY,UAAU;iBAClD,EAAE,gCAAgC;QAC5B;OACL;MACD,GACL,WAAW,SAAS,IACtB,2CAACE,iCACC,OAAO,WAAW,KAAK,CAAC,MAAM,YAA+B;KAAC,OAAO;KAAM,OAAO,UAAU,MAAM;KAAC,EAAE,GACrG,GAEF,2CAAC;KAAK,WAAW,OAAO;eAAW,EAAE,oCAAoC;MAAQ;KAE7E;GACR,2CAACH;IAAM,OAAO,EAAE,6BAA6B;cAC3C,2CAACI;KACC,OAAO,EAAE,6BAA6B;KACtC,WAAW,EAAE,gCAAgC;KAC7C,OAAO,OAAO,KAAK,WAA4B;MAAC,IAAI,MAAM;MAAI,OAAO,MAAM;MAAK,EAAE;MAClF;KACI;;GACK;;AAInB,8BAAe"}

package/dist/cjs/components/admin/UserDetails/UserDetails.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserDetails.cjs","names":["UserDetails: FC<UserDetailsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","user: ResourceQueryResult<ManagedUser>","useResourceQuery","UserQueryKeys","groups: ResourceQueryResult<MembershipGroupListResponse>","GroupQueryKeys","deletion: ResourceMutationResult<void, string>","useResourceMutation","update: ResourceMutationResult<ManagedUser, UpdateUserVariables>","lifecycle: AccountLifecycleState","useAccountLifecycle","BaseUserDetails"],"sources":["../../../../../src/components/admin/UserDetails/UserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  GroupQueryKeys,\n  ManagedUser,\n  MembershipGroupListResponse,\n  UpdateManagedUserRequest,\n  UserQueryKeys,\n  deleteUser,\n  getUser,\n  getUserGroups,\n  toManagementErrorMessage,\n  updateUser,\n} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseUserDetails, {BaseUserDetailsProps} from './BaseUserDetails';\nimport useAccountLifecycle, {AccountLifecycleState} from '../../../hooks/management/useAccountLifecycle';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\ninterface UpdateUserVariables {\n  data: UpdateManagedUserRequest;\n  userId: string;\n}\n\nexport type UserDetailsProps = Omit<\n  BaseUserDetailsProps,\n  | 'error'\n  | 'groups'\n  | 'isDeleting'\n  | 'isLoading'\n  | 'isRunningLifecycleAction'\n  | 'isUpdating'\n  | 'lifecycleActions'\n  | 'onDelete'\n  | 'onLifecycleAction'\n  | 'onUpdate'\n  | 'user'\n> & {\n  /**\n   * How the delete runs. `flow` runs the user deletion flow the server configures, which revokes the\n   * user's grants and ends their sessions before the record goes. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether the user can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the user's text attributes can be edited from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether the user can be suspended, unsuspended and unlocked from this view. Each action runs\n   * through its administration flow and is offered only when the server configures that flow. Reading\n   * the configured flows needs a token that may read the server configuration.\n   * @default false\n   */\n  lifecycleActions?: boolean;\n  /**\n   * Called after the user has been deleted.\n   */\n  onDeleted?: () => void;\n  userId: string;\n};\n\n/**\n * Shows a user and the groups they belong to, and optionally lets the signed-in user delete them.\n *\n * @example\n * ```tsx\n * <UserDetails userId={userId} deletable onDeleted={() => navigate('/users')} />\n * ```\n */\nconst UserDetails: FC<UserDetailsProps> = ({\n  administrationMode,\n  deletable = false,\n  editable = false,\n  lifecycleActions = false,\n  onDeleted,\n  preferences,\n  userId,\n  ...rest\n}: UserDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const user: ResourceQueryResult<ManagedUser> = useResourceQuery(\n    [UserQueryKeys.USER, userId],\n    (fetcher) => getUser({...endpoint, fetcher, userId}),\n    {enabled: Boolean(userId)},\n  );\n  const groups: ResourceQueryResult<MembershipGroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.MEMBERSHIPS, 'user', userId, {limit: 100}],\n    (fetcher) => getUserGroups({...endpoint, fetcher, limit: 100, userId}),\n    {enabled: Boolean(userId)},\n  );\n  const deletion: ResourceMutationResult<void, string> = useResourceMutation(\n    (id: string, fetcher) => deleteUser({...endpoint, administrationMode, fetcher, userId: id}),\n    () => [[UserQueryKeys.USERS]],\n    {onSuccess: onDeleted},\n  );\n  const update: ResourceMutationResult<ManagedUser, UpdateUserVariables> = useResourceMutation(\n    ({data, userId: id}: UpdateUserVariables, fetcher) => updateUser({...endpoint, fetcher, payload: data, userId: id}),\n    ({userId: id}: UpdateUserVariables) => [[UserQueryKeys.USER, id], [UserQueryKeys.USERS]],\n  );\n\n  const lifecycle: AccountLifecycleState = useAccountLifecycle({\n    enabled: lifecycleActions,\n    invalidatedKeys: [[UserQueryKeys.USER, userId], [UserQueryKeys.USERS]],\n    kind: 'user',\n    status: user.data?.status?.value,\n    subject: userId,\n  });\n\n  return (\n    <BaseUserDetails\n      user={user.data}\n      groups={groups.data?.groups}\n      isLoading={user.isLoading}\n      error={\n        toManagementErrorMessage(t, user.error, 'admin.users.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.users.details.delete.error') ??\n        toManagementErrorMessage(t, update.error, 'admin.users.details.edit.error') ??\n        toManagementErrorMessage(t, lifecycle.error, 'admin.common.lifecycle.error') ??\n        toManagementErrorMessage(t, lifecycle.loadError, 'admin.common.lifecycle.load_error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(userId) : undefined}\n      lifecycleActions={lifecycle.actions}\n      isRunningLifecycleAction={lifecycle.isRunning}\n      onLifecycleAction={lifecycleActions ? lifecycle.run : undefined}\n      isUpdating={update.isLoading}\n      onUpdate={\n        editable && user.data\n          ? (attributes: Record<string, unknown>): void =>\n              void update.mutate({data: {attributes, ouId: user.data!.ouId, type: user.data!.type}, userId})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAiFA,MAAMA,eAAqC,EACzC,oBACA,YAAY,OACZ,WAAW,OACX,mBAAmB,OACnB,WACA,aACA,OACA,GAAG,WACiC;CACpC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,sCAAsB,QAAQ;CACnE,MAAMC,OAAyCC,iCAC7C,CAACC,kCAAc,MAAM,OAAO,GAC3B,6CAAoB;EAAC,GAAG;EAAU;EAAS;EAAO,CAAC,EACpD,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,SAA2DF,iCAC/D;EAACG,mCAAe;EAAa;EAAQ;EAAQ,EAAC,OAAO,KAAI;EAAC,GACzD,mDAA0B;EAAC,GAAG;EAAU;EAAS,OAAO;EAAK;EAAO,CAAC,EACtE,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,WAAiDC,qCACpD,IAAY,gDAAuB;EAAC,GAAG;EAAU;EAAoB;EAAS,QAAQ;EAAG,CAAC,QACrF,CAAC,CAACJ,kCAAc,MAAM,CAAC,EAC7B,EAAC,WAAW,WAAU,CACvB;CACD,MAAMK,SAAmED,qCACtE,EAAC,MAAM,QAAQ,MAA0B,gDAAuB;EAAC,GAAG;EAAU;EAAS,SAAS;EAAM,QAAQ;EAAG,CAAC,GAClH,EAAC,QAAQ,SAA6B,CAAC,CAACJ,kCAAc,MAAM,GAAG,EAAE,CAACA,kCAAc,MAAM,CAAC,CACzF;CAED,MAAMM,YAAmCC,oCAAoB;EAC3D,SAAS;EACT,iBAAiB,CAAC,CAACP,kCAAc,MAAM,OAAO,EAAE,CAACA,kCAAc,MAAM,CAAC;EACtE,MAAM;EACN,QAAQ,KAAK,MAAM,QAAQ;EAC3B,SAAS;EACV,CAAC;AAEF,QACE,2CAACQ;EACC,MAAM,KAAK;EACX,QAAQ,OAAO,MAAM;EACrB,WAAW,KAAK;EAChB,yDAC2B,GAAG,KAAK,OAAO,4BAA4B,sDAC3C,GAAG,SAAS,OAAO,mCAAmC,sDACtD,GAAG,OAAO,OAAO,iCAAiC,sDAClD,GAAG,UAAU,OAAO,+BAA+B,sDACnD,GAAG,UAAU,WAAW,oCAAoC;EAEvF,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,OAAO,GAAG;EACjE,kBAAkB,UAAU;EAC5B,0BAA0B,UAAU;EACpC,mBAAmB,mBAAmB,UAAU,MAAM;EACtD,YAAY,OAAO;EACnB,UACE,YAAY,KAAK,QACZ,eACC,KAAK,OAAO,OAAO;GAAC,MAAM;IAAC;IAAY,MAAM,KAAK,KAAM;IAAM,MAAM,KAAK,KAAM;IAAK;GAAE;GAAO,CAAC,GAChG;EAEO;EACb,GAAI;GACJ;;AAIN,0BAAe"}