@thunderid/react 1.14.0 → 1.15.0

package/dist/components/management/RoleDetails/RoleDetails.js

@@ -0,0 +1,65 @@
+import useTranslation_default from "../../../hooks/useTranslation.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
+import useResourceMutation_default from "../../../hooks/management/useResourceMutation.js";
+import RoleAssignments_default from "../RoleAssignments/RoleAssignments.js";
+import BaseRolePermissions_default from "../RolePermissions/BaseRolePermissions.js";
+import RolePermissions_default from "../RolePermissions/RolePermissions.js";
+import BaseRoleDetails_default from "./BaseRoleDetails.js";
+import { RoleQueryKeys, deleteRole, getRole, toManagementErrorMessage } from "@thunderid/browser";
+import { jsx } from "react/jsx-runtime";
+
+//#region src/components/management/RoleDetails/RoleDetails.tsx
+/**
+* Shows a role with its permissions and assignments, and lets the signed-in user manage the permissions and
+* assignments and delete the role.
+*
+* @example
+* ```tsx
+* <RoleDetails roleId={roleId} editable deletable onDeleted={() => navigate('/roles')} />
+* ```
+*/
+const RoleDetails = ({ administrationMode, deletable = false, editable = false, onDeleted, preferences, roleId,...rest }) => {
+	const { t } = useTranslation_default(preferences?.i18n);
+	const endpoint = useManagementEndpoint_default("roles");
+	const role = useResourceQuery_default([RoleQueryKeys.ROLE, roleId], (fetcher) => getRole({
+		...endpoint,
+		fetcher,
+		roleId
+	}), { enabled: Boolean(roleId) });
+	const deletion = useResourceMutation_default((id, fetcher) => deleteRole({
+		...endpoint,
+		administrationMode,
+		fetcher,
+		roleId: id
+	}), () => [[RoleQueryKeys.ROLES], [RoleQueryKeys.ROLE_ASSIGNMENTS]], { onSuccess: onDeleted });
+	return /* @__PURE__ */ jsx(BaseRoleDetails_default, {
+		role: role.data,
+		isLoading: role.isLoading,
+		error: toManagementErrorMessage(t, role.error, "admin.roles.details.error") ?? toManagementErrorMessage(t, deletion.error, "admin.roles.details.delete.error"),
+		isDeleting: deletion.isLoading,
+		onDelete: deletable ? () => void deletion.mutate(roleId) : void 0,
+		permissions: role.data && (editable ? /* @__PURE__ */ jsx(RolePermissions_default, {
+			roleId,
+			editable: true,
+			administrationMode,
+			preferences
+		}) : /* @__PURE__ */ jsx(BaseRolePermissions_default, {
+			permissions: role.data.permissions ?? [],
+			preferences
+		})),
+		assignments: role.data && /* @__PURE__ */ jsx(RoleAssignments_default, {
+			roleId,
+			ouId: role.data.ouId,
+			editable,
+			administrationMode
+		}),
+		preferences,
+		...rest
+	});
+};
+var RoleDetails_default = RoleDetails;
+
+//#endregion
+export { RoleDetails_default as default };
+//# sourceMappingURL=RoleDetails.js.map

package/dist/components/management/RoleDetails/RoleDetails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleDetails.js","names":["RoleDetails: FC<RoleDetailsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","role: ResourceQueryResult<Role>","useResourceQuery","deletion: ResourceMutationResult<void, string>","useResourceMutation","BaseRoleDetails","RolePermissions","BaseRolePermissions","RoleAssignments"],"sources":["../../../../src/components/management/RoleDetails/RoleDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  Role,\n  RoleQueryKeys,\n  deleteRole,\n  getRole,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRoleDetails, {BaseRoleDetailsProps} from './BaseRoleDetails';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport RoleAssignments from '../RoleAssignments/RoleAssignments';\nimport BaseRolePermissions from '../RolePermissions/BaseRolePermissions';\nimport RolePermissions from '../RolePermissions/RolePermissions';\n\nexport type RoleDetailsProps = Omit<\n  BaseRoleDetailsProps,\n  'assignments' | 'error' | 'isDeleting' | 'isLoading' | 'onDelete' | 'permissions' | 'role'\n> & {\n  /**\n   * How the role is deleted and an assignment removed. `flow` runs the administration flow the server configures for\n   * it, which can revoke grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether the role can be deleted from this view. Read-only roles never can.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the role's permissions can be added and removed, and the role assigned and taken away, from\n   * this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Called after the role has been deleted.\n   */\n  onDeleted?: () => void;\n  roleId: string;\n};\n\n/**\n * Shows a role with its permissions and assignments, and lets the signed-in user manage the permissions and\n * assignments and delete the role.\n *\n * @example\n * ```tsx\n * <RoleDetails roleId={roleId} editable deletable onDeleted={() => navigate('/roles')} />\n * ```\n */\nconst RoleDetails: FC<RoleDetailsProps> = ({\n  administrationMode,\n  deletable = false,\n  editable = false,\n  onDeleted,\n  preferences,\n  roleId,\n  ...rest\n}: RoleDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const role: ResourceQueryResult<Role> = useResourceQuery(\n    [RoleQueryKeys.ROLE, roleId],\n    (fetcher) => getRole({...endpoint, fetcher, roleId}),\n    {enabled: Boolean(roleId)},\n  );\n  const deletion: ResourceMutationResult<void, string> = useResourceMutation(\n    (id: string, fetcher) => deleteRole({...endpoint, administrationMode, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLES], [RoleQueryKeys.ROLE_ASSIGNMENTS]],\n    {onSuccess: onDeleted},\n  );\n\n  return (\n    <BaseRoleDetails\n      role={role.data}\n      isLoading={role.isLoading}\n      error={\n        toManagementErrorMessage(t, role.error, 'admin.roles.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.roles.details.delete.error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(roleId) : undefined}\n      permissions={\n        role.data &&\n        (editable ? (\n          // Shares the role's query, so editing the permissions refreshes this view too.\n          <RolePermissions roleId={roleId} editable administrationMode={administrationMode} preferences={preferences} />\n        ) : (\n          // The role carries its permissions, so they are shown without fetching it again.\n          <BaseRolePermissions permissions={role.data.permissions ?? []} preferences={preferences} />\n        ))\n      }\n      assignments={\n        role.data && (\n          // Assigning waits for the role, so the candidates are only ever listed from its organization unit.\n          <RoleAssignments\n            roleId={roleId}\n            ouId={role.data.ouId}\n            editable={editable}\n            administrationMode={administrationMode}\n          />\n        )\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA0DA,MAAMA,eAAqC,EACzC,oBACA,YAAY,OACZ,WAAW,OACX,WACA,aACA,OACA,GAAG,WACiC;CACpC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,8BAAsB,QAAQ;CACnE,MAAMC,OAAkCC,yBACtC,CAAC,cAAc,MAAM,OAAO,GAC3B,YAAY,QAAQ;EAAC,GAAG;EAAU;EAAS;EAAO,CAAC,EACpD,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,WAAiDC,6BACpD,IAAY,YAAY,WAAW;EAAC,GAAG;EAAU;EAAoB;EAAS,QAAQ;EAAG,CAAC,QACrF,CAAC,CAAC,cAAc,MAAM,EAAE,CAAC,cAAc,iBAAiB,CAAC,EAC/D,EAAC,WAAW,WAAU,CACvB;AAED,QACE,oBAACC;EACC,MAAM,KAAK;EACX,WAAW,KAAK;EAChB,OACE,yBAAyB,GAAG,KAAK,OAAO,4BAA4B,IACpE,yBAAyB,GAAG,SAAS,OAAO,mCAAmC;EAEjF,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,OAAO,GAAG;EACjE,aACE,KAAK,SACJ,WAEC,oBAACC;GAAwB;GAAQ;GAA6B;GAAiC;IAAe,GAG9G,oBAACC;GAAoB,aAAa,KAAK,KAAK,eAAe,EAAE;GAAe;IAAe;EAG/F,aACE,KAAK,QAEH,oBAACC;GACS;GACR,MAAM,KAAK,KAAK;GACN;GACU;IACpB;EAGO;EACb,GAAI;GACJ;;AAIN,0BAAe"}

package/dist/components/management/RoleList/BaseRoleList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseRoleList.d.ts","sourceRoot":"","sources":["../../../../src/components/management/RoleList/BaseRoleList.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAC,WAAW,EAAE,WAAW,EAAC,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAC,EAAE,EAAgB,SAAS,EAAC,MAAM,OAAO,CAAC;AAGlD,OAAO,EAAC,oBAAoB,EAAC,MAAM,gCAAgC,CAAC;AAGpE;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG,oBAAoB,CAAC,WAAW,CAAC,GAAG;IAAC,KAAK,EAAE,WAAW,EAAE,CAAA;CAAC,CAAC;AAEjG,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,SAAS,CAAC;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC;;OAEG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IACvC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,QAAA,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CA8EvC,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/components/{admin → management}/RoleList/BaseRoleList.js

@@ -3,7 +3,7 @@ import DataTable_default from "../../primitives/DataTable/DataTable.js";
 import AdminSection_default from "../shared/AdminSection.js";
 import { jsx } from "react/jsx-runtime";
 
-//#region src/components/admin/RoleList/BaseRoleList.tsx
+//#region src/components/management/RoleList/BaseRoleList.tsx
 /**
 * Lists roles with their description and organization unit. Holds no data of its own: pass the
 * page of roles and handle selection and pagination.

package/dist/components/management/RoleList/BaseRoleList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseRoleList.js","names":["BaseRoleList: FC<BaseRoleListProps>","useTranslation","columns: DataTableColumn<RoleSummary>[]","AdminSection","DataTable"],"sources":["../../../../src/components/management/RoleList/BaseRoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Preferences, RoleSummary} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport DataTable, {DataTableColumn} from '../../primitives/DataTable/DataTable';\nimport {AdminListRenderProps} from '../shared/AdminListRenderProps';\nimport AdminSection from '../shared/AdminSection';\n\n/**\n * What {@link BaseRoleList} hands its `children` render function. `roles` and `rows` are the same array.\n */\nexport type BaseRoleListRenderProps = AdminListRenderProps<RoleSummary> & {roles: RoleSummary[]};\n\nexport interface BaseRoleListProps {\n  /**\n   * Controls rendered next to the title, such as a button that opens `RoleCreate`.\n   */\n  actions?: ReactNode;\n  /**\n   * Renders custom UI in place of the default table, for example a third-party data grid. Receives\n   * the roles, the default columns, the loading and error state, and the pagination and selection\n   * handlers.\n   */\n  children?: (props: BaseRoleListRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isLoading?: boolean;\n  /**\n   * Page size.\n   * @default 20\n   */\n  limit?: number;\n  offset?: number;\n  /**\n   * Called with the offset of the page to show. Pagination is hidden when omitted.\n   */\n  onPageChange?: (offset: number) => void;\n  /**\n   * Called when a role is chosen. Rows are selectable only when set.\n   */\n  onSelect?: (role: RoleSummary) => void;\n  preferences?: Preferences;\n  roles: RoleSummary[];\n  selectedRoleId?: string;\n  /**\n   * Heading of the list. Pass an empty string to hide it.\n   */\n  title?: string;\n  totalResults?: number;\n}\n\n/**\n * Lists roles with their description and organization unit. Holds no data of its own: pass the\n * page of roles and handle selection and pagination.\n */\nconst BaseRoleList: FC<BaseRoleListProps> = ({\n  actions,\n  children,\n  className,\n  description,\n  error = null,\n  isLoading = false,\n  limit = 20,\n  offset = 0,\n  onPageChange,\n  onSelect,\n  preferences,\n  roles,\n  selectedRoleId,\n  title,\n  totalResults,\n}: BaseRoleListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n\n  const columns: DataTableColumn<RoleSummary>[] = [\n    {header: t('admin.roles.list.columns.name'), id: 'name', render: (role: RoleSummary): ReactNode => role.name},\n    {\n      header: t('admin.roles.list.columns.description'),\n      id: 'description',\n      render: (role: RoleSummary): ReactNode => role.description ?? '',\n    },\n    {\n      header: t('admin.common.columns.organization_unit'),\n      id: 'ou',\n      render: (role: RoleSummary): ReactNode => role.ouHandle ?? role.ouId,\n    },\n  ];\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          columns,\n          error,\n          isLoading,\n          limit,\n          offset,\n          onPageChange,\n          onSelect,\n          rows: roles,\n          selectedRowId: selectedRoleId,\n          totalResults: totalResults ?? roles.length,\n          roles,\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"role-list\"\n      className={className}\n      title={title ?? t('admin.roles.list.title')}\n      description={description}\n      actions={actions}\n      preferences={preferences}\n    >\n      <DataTable\n        caption={title?.length ? title : t('admin.roles.list.title')}\n        columns={columns}\n        rows={roles}\n        getRowId={(role: RoleSummary): string => role.id}\n        isLoading={isLoading}\n        error={error}\n        emptyText={t('admin.roles.list.empty')}\n        onRowClick={onSelect}\n        selectedRowId={selectedRoleId}\n        pagination={\n          onPageChange ? {limit, offset, onChange: onPageChange, total: totalResults ?? roles.length} : undefined\n        }\n      />\n    </AdminSection>\n  );\n};\n\nexport default BaseRoleList;\n"],"mappings":";;;;;;;;;;AA0DA,MAAMA,gBAAuC,EAC3C,SACA,UACA,WACA,aACA,QAAQ,MACR,YAAY,OACZ,QAAQ,IACR,SAAS,GACT,cACA,UACA,aACA,OACA,gBACA,OACA,mBACqC;CACrC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAE7C,MAAMC,UAA0C;EAC9C;GAAC,QAAQ,EAAE,gCAAgC;GAAE,IAAI;GAAQ,SAAS,SAAiC,KAAK;GAAK;EAC7G;GACE,QAAQ,EAAE,uCAAuC;GACjD,IAAI;GACJ,SAAS,SAAiC,KAAK,eAAe;GAC/D;EACD;GACE,QAAQ,EAAE,yCAAyC;GACnD,IAAI;GACJ,SAAS,SAAiC,KAAK,YAAY,KAAK;GACjE;EACF;AAED,KAAI,SACF,QACE,oBAAC;EAAe;YACb,SAAS;GACR;GACA;GACA;GACA;GACA;GACA;GACA;GACA,MAAM;GACN,eAAe;GACf,cAAc,gBAAgB,MAAM;GACpC;GACD,CAAC;GACE;AAIV,QACE,oBAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,yBAAyB;EAC9B;EACJ;EACI;YAEb,oBAACC;GACC,SAAS,OAAO,SAAS,QAAQ,EAAE,yBAAyB;GACnD;GACT,MAAM;GACN,WAAW,SAA8B,KAAK;GACnC;GACJ;GACP,WAAW,EAAE,yBAAyB;GACtC,YAAY;GACZ,eAAe;GACf,YACE,eAAe;IAAC;IAAO;IAAQ,UAAU;IAAc,OAAO,gBAAgB,MAAM;IAAO,GAAG;IAEhG;GACW;;AAInB,2BAAe"}

package/dist/components/management/RoleList/RoleList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleList.d.ts","sourceRoot":"","sources":["../../../../src/components/management/RoleList/RoleList.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAC,EAAE,EAAyB,MAAM,OAAO,CAAC;AACjD,OAAqB,EAAC,iBAAiB,EAAC,MAAM,gBAAgB,CAAC;AAK/D,MAAM,MAAM,aAAa,GAAG,IAAI,CAC9B,iBAAiB,EACjB,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,GAAG,cAAc,CAC7E,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CAsB/B,CAAC;AAEF,eAAe,QAAQ,CAAC"}

package/dist/components/{admin → management}/RoleList/RoleList.js

@@ -6,7 +6,7 @@ import { RoleQueryKeys, getRoles, toManagementErrorMessage } from "@thunderid/br
 import { useState } from "react";
 import { jsx } from "react/jsx-runtime";
 
-//#region src/components/admin/RoleList/RoleList.tsx
+//#region src/components/management/RoleList/RoleList.tsx
 /**
 * Lists the roles the signed-in user is allowed to see, a page at a time.
 *

package/dist/components/management/RoleList/RoleList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleList.js","names":["RoleList: FC<RoleListProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","BaseRoleList"],"sources":["../../../../src/components/management/RoleList/RoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {RoleListResponse, RoleQueryKeys, getRoles, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseRoleList, {BaseRoleListProps} from './BaseRoleList';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RoleListProps = Omit<\n  BaseRoleListProps,\n  'error' | 'isLoading' | 'offset' | 'onPageChange' | 'roles' | 'totalResults'\n>;\n\n/**\n * Lists the roles the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <RoleList onSelect={(role) => setSelectedRoleId(role.id)} />\n * ```\n */\nconst RoleList: FC<RoleListProps> = ({limit = 20, preferences, ...rest}: RoleListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const {data, error, isLoading}: ResourceQueryResult<RoleListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLES, {limit, offset}],\n    (fetcher) => getRoles({...endpoint, fetcher, limit, offset}),\n  );\n\n  return (\n    <BaseRoleList\n      roles={data?.roles ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.roles.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleList;\n"],"mappings":";;;;;;;;;;;;;;;;;AAuBA,MAAMA,YAA+B,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAuC;CACvG,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,aAAa,SAAiB,EAAE;CAC/C,MAAMC,WAA+BC,8BAAsB,QAAQ;CACnE,MAAM,EAAC,MAAM,OAAO,cAAoDC,yBACtE,CAAC,cAAc,OAAO;EAAC;EAAO;EAAO,CAAC,GACrC,YAAY,SAAS;EAAC,GAAG;EAAU;EAAS;EAAO;EAAO,CAAC,CAC7D;AAED,QACE,oBAACC;EACC,OAAO,MAAM,SAAS,EAAE;EACxB,cAAc,MAAM;EACT;EACX,OAAO,yBAAyB,GAAG,OAAO,yBAAyB;EAC5D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,uBAAe"}

package/dist/components/management/RolePermissions/BaseRolePermissions.d.ts

@@ -0,0 +1,104 @@
+import { Preferences, ResourceServerPermission, RoleResourcePermissions } from '@thunderid/browser';
+import { FC, ReactNode } from 'react';
+/**
+ * A resource server a permission can be granted on.
+ */
+export interface RolePermissionResourceServer {
+    id: string;
+    name: string;
+}
+/**
+ * One permission on one resource server, as added to or removed from a role.
+ */
+export interface RolePermissionChange {
+    permission: string;
+    resourceServerId: string;
+}
+/**
+ * What {@link BaseRolePermissions} hands its `children` render function, so the permissions can be
+ * shown with any UI.
+ */
+export interface BaseRolePermissionsRenderProps {
+    /**
+     * The permissions that can be granted, keyed by resource server identifier, for the resource servers
+     * loaded so far. Undefined when adding is not allowed.
+     */
+    availablePermissions?: Record<string, ResourceServerPermission[]>;
+    error: string | null;
+    isLoading: boolean;
+    isMutating: boolean;
+    /**
+     * Grants a permission. Undefined when the permissions cannot be edited.
+     */
+    onAdd?: (change: RolePermissionChange) => void;
+    /**
+     * Revokes a permission. Undefined when the permissions cannot be edited. Ask the user to confirm
+     * before calling it.
+     */
+    onRemove?: (change: RolePermissionChange) => void;
+    /**
+     * Asks for the permissions of a resource server, which then appear in `availablePermissions`.
+     * Undefined when adding is not allowed.
+     */
+    onResourceServerSelect?: (resourceServerId: string) => void;
+    /**
+     * The resource servers the role grants at least one permission on, with those permissions.
+     */
+    permissions: RoleResourcePermissions[];
+    /**
+     * Returns a resource server's display name, or its identifier when the name is missing.
+     */
+    resolveResourceServerName: (resourceServerId: string) => string;
+    /**
+     * The resource servers permissions can be granted on. Undefined when adding is not allowed.
+     */
+    resourceServers?: RolePermissionResourceServer[];
+}
+export interface BaseRolePermissionsProps {
+    /**
+     * The permissions that can be granted, keyed by resource server identifier. A resource server
+     * missing here is still loading, and `onResourceServerSelect` is called to load it.
+     */
+    availablePermissions?: Record<string, ResourceServerPermission[]>;
+    /**
+     * Renders custom UI in place of the default view. Receives the granted permissions grouped by
+     * resource server, the loading and error state, a resource server name resolver and, when the
+     * permissions can be edited, the add and remove handlers with what can be added.
+     */
+    children?: (props: BaseRolePermissionsRenderProps) => ReactNode;
+    className?: string;
+    description?: string;
+    error?: string | null;
+    isLoading?: boolean;
+    isMutating?: boolean;
+    /**
+     * Grants a permission. Adding is hidden when omitted, or when `resourceServers` is omitted.
+     */
+    onAdd?: (change: RolePermissionChange) => void;
+    /**
+     * Revokes a permission, after the user confirms. Removing is hidden when omitted.
+     */
+    onRemove?: (change: RolePermissionChange) => void;
+    /**
+     * Called when a resource server is picked to add a permission on, so its permissions can be loaded.
+     */
+    onResourceServerSelect?: (resourceServerId: string) => void;
+    permissions: RoleResourcePermissions[];
+    preferences?: Preferences;
+    /**
+     * Display names of resource servers, keyed by identifier. The identifier is shown when a name is missing.
+     */
+    resourceServerNames?: Record<string, string>;
+    /**
+     * The resource servers a permission can be added on.
+     */
+    resourceServers?: RolePermissionResourceServer[];
+    title?: string;
+}
+/**
+ * Shows the permissions a role grants, grouped by resource server, and lets the caller add and remove
+ * them. Holds no data of its own.
+ */
+declare const BaseRolePermissions: FC<BaseRolePermissionsProps>;
+export default BaseRolePermissions;
+//# sourceMappingURL=BaseRolePermissions.d.ts.map

package/dist/components/management/RolePermissions/BaseRolePermissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseRolePermissions.d.ts","sourceRoot":"","sources":["../../../../src/components/management/RolePermissions/BaseRolePermissions.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAC,WAAW,EAAE,wBAAwB,EAAE,uBAAuB,EAAe,MAAM,oBAAoB,CAAC;AAChH,OAAO,EAAc,EAAE,EAA2B,SAAS,EAAW,MAAM,OAAO,CAAC;AAUpF;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAClE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB;;OAEG;IACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAClD;;;OAGG;IACH,sBAAsB,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5D;;OAEG;IACH,WAAW,EAAE,uBAAuB,EAAE,CAAC;IACvC;;OAEG;IACH,yBAAyB,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,MAAM,CAAC;IAChE;;OAEG;IACH,eAAe,CAAC,EAAE,4BAA4B,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAClE;;;;OAIG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,8BAA8B,KAAK,SAAS,CAAC;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;OAEG;IACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAC/C;;OAEG;IACH,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAClD;;OAEG;IACH,sBAAsB,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5D,WAAW,EAAE,uBAAuB,EAAE,CAAC;IACvC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C;;OAEG;IACH,eAAe,CAAC,EAAE,4BAA4B,EAAE,CAAC;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,QAAA,MAAM,mBAAmB,EAAE,EAAE,CAAC,wBAAwB,CAmMrD,CAAC;AAEF,eAAe,mBAAmB,CAAC"}

package/dist/components/management/RolePermissions/BaseRolePermissions.js

@@ -0,0 +1,178 @@
+import useTranslation_default from "../../../hooks/useTranslation.js";
+import Spinner_default from "../../primitives/Spinner/Spinner.js";
+import Button_default from "../../primitives/Button/Button.js";
+import Alert_default from "../../primitives/Alert/Alert.js";
+import Select_default from "../../primitives/Select/Select.js";
+import useAdminPartStyles_default from "../shared/useAdminPartStyles.js";
+import AdminSection_default from "../shared/AdminSection.js";
+import { ChipList, Panel } from "../shared/AdminParts.js";
+import { useState } from "react";
+import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
+
+//#region src/components/management/RolePermissions/BaseRolePermissions.tsx
+/**
+* Shows the permissions a role grants, grouped by resource server, and lets the caller add and remove
+* them. Holds no data of its own.
+*/
+const BaseRolePermissions = ({ availablePermissions, children, className, description, error = null, isLoading = false, isMutating = false, onAdd, onRemove, onResourceServerSelect, permissions, preferences, resourceServerNames, resourceServers, title }) => {
+	const { t } = useTranslation_default(preferences?.i18n);
+	const styles = useAdminPartStyles_default();
+	const [resourceServerId, setResourceServerId] = useState("");
+	const [permission, setPermission] = useState("");
+	const [pendingRemoval, setPendingRemoval] = useState(null);
+	const granted = permissions.filter((entry) => entry.permissions.length > 0);
+	const canAdd = Boolean(onAdd && resourceServers);
+	const resolveResourceServerName = (id) => resourceServerNames?.[id] ?? resourceServers?.find((server) => server.id === id)?.name ?? id;
+	if (children) return /* @__PURE__ */ jsx("div", {
+		className,
+		children: children({
+			availablePermissions: canAdd ? availablePermissions ?? {} : void 0,
+			error,
+			isLoading,
+			isMutating,
+			onAdd: canAdd ? onAdd : void 0,
+			onRemove,
+			onResourceServerSelect: canAdd ? onResourceServerSelect : void 0,
+			permissions: granted,
+			resolveResourceServerName,
+			resourceServers: canAdd ? resourceServers : void 0
+		})
+	});
+	const grantedOn = (id) => granted.find((entry) => entry.resourceServerId === id)?.permissions ?? [];
+	const candidates = resourceServerId ? availablePermissions?.[resourceServerId] : void 0;
+	const permissionOptions = (candidates ?? []).filter((candidate) => !grantedOn(resourceServerId).includes(candidate.permission)).map((candidate) => ({
+		label: `${candidate.resourceName ? `${candidate.resourceName} / ` : ""}${candidate.name} (${candidate.permission})`,
+		value: candidate.permission
+	}));
+	const handleSubmit = (event) => {
+		event.preventDefault();
+		if (onAdd && resourceServerId && permission) {
+			onAdd({
+				permission,
+				resourceServerId
+			});
+			setPermission("");
+		}
+	};
+	const renderAdd = () => {
+		if (!canAdd) return null;
+		return /* @__PURE__ */ jsxs("form", {
+			className: styles["row"],
+			onSubmit: handleSubmit,
+			style: { alignItems: "flex-end" },
+			children: [
+				/* @__PURE__ */ jsx(Select_default, {
+					label: t("admin.roles.permissions.fields.resource_server"),
+					name: "resourceServer",
+					value: resourceServerId,
+					placeholder: t("admin.roles.permissions.fields.resource_server_placeholder"),
+					options: (resourceServers ?? []).map((server) => ({
+						label: server.name,
+						value: server.id
+					})),
+					onChange: (event) => {
+						setResourceServerId(event.target.value);
+						setPermission("");
+						if (event.target.value) onResourceServerSelect?.(event.target.value);
+					}
+				}),
+				/* @__PURE__ */ jsx(Select_default, {
+					label: t("admin.roles.permissions.fields.permission"),
+					name: "permission",
+					value: permission,
+					disabled: !resourceServerId,
+					loading: Boolean(resourceServerId) && candidates === void 0,
+					placeholder: t("admin.roles.permissions.fields.permission_placeholder"),
+					emptyText: t("admin.roles.permissions.fields.permission_empty"),
+					options: permissionOptions,
+					onChange: (event) => setPermission(event.target.value)
+				}),
+				/* @__PURE__ */ jsx(Button_default, {
+					type: "submit",
+					loading: isMutating,
+					disabled: !resourceServerId || !permission || isMutating,
+					children: t("admin.roles.permissions.add")
+				})
+			]
+		});
+	};
+	const renderContent = () => {
+		if (isLoading) return /* @__PURE__ */ jsx(Spinner_default, { size: "small" });
+		return /* @__PURE__ */ jsxs(Fragment$1, { children: [
+			error && /* @__PURE__ */ jsx(Alert_default, {
+				variant: "error",
+				role: "alert",
+				children: error
+			}),
+			renderAdd(),
+			pendingRemoval && onRemove && /* @__PURE__ */ jsxs("span", {
+				className: styles["confirm"],
+				role: "group",
+				"aria-label": t("admin.roles.permissions.remove_confirm", { permission: pendingRemoval.permission }),
+				children: [
+					/* @__PURE__ */ jsx("span", { children: t("admin.roles.permissions.remove_confirm", { permission: pendingRemoval.permission }) }),
+					/* @__PURE__ */ jsx(Button_default, {
+						variant: "text",
+						size: "small",
+						disabled: isMutating,
+						onClick: () => setPendingRemoval(null),
+						children: t("admin.common.actions.cancel")
+					}),
+					/* @__PURE__ */ jsx(Button_default, {
+						color: "error",
+						size: "small",
+						loading: isMutating,
+						disabled: isMutating,
+						onClick: () => {
+							onRemove(pendingRemoval);
+							setPendingRemoval(null);
+						},
+						children: t("admin.common.actions.confirm")
+					})
+				]
+			}),
+			granted.length === 0 && !error && /* @__PURE__ */ jsx("span", {
+				className: styles["muted"],
+				children: t("admin.roles.permissions.empty")
+			}),
+			granted.map((entry) => {
+				const name = resolveResourceServerName(entry.resourceServerId);
+				return /* @__PURE__ */ jsx(Panel, {
+					title: name,
+					children: /* @__PURE__ */ jsx(ChipList, {
+						label: name,
+						emptyText: t("admin.roles.permissions.empty"),
+						items: entry.permissions.map((grantedPermission) => ({
+							id: grantedPermission,
+							label: grantedPermission,
+							...onRemove ? {
+								onRemove: () => setPendingRemoval({
+									permission: grantedPermission,
+									resourceServerId: entry.resourceServerId
+								}),
+								removeLabel: t("admin.roles.permissions.remove_label", {
+									permission: grantedPermission,
+									resourceServer: name
+								})
+							} : {}
+						}))
+					})
+				}, entry.resourceServerId);
+			})
+		] });
+	};
+	return /* @__PURE__ */ jsx(AdminSection_default, {
+		block: "role-permissions",
+		className,
+		title: title ?? t("admin.roles.permissions.title"),
+		description,
+		headingLevel: 3,
+		preferences,
+		children: renderContent()
+	});
+};
+var BaseRolePermissions_default = BaseRolePermissions;
+
+//#endregion
+export { BaseRolePermissions_default as default };
+//# sourceMappingURL=BaseRolePermissions.js.map

package/dist/components/management/RolePermissions/BaseRolePermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseRolePermissions.js","names":["BaseRolePermissions: FC<BaseRolePermissionsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","granted: RoleResourcePermissions[]","candidates: ResourceServerPermission[] | undefined","permissionOptions: SelectOption[]","Select","Button","Spinner","Alert","name: string","AdminSection"],"sources":["../../../../src/components/management/RolePermissions/BaseRolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Preferences, ResourceServerPermission, RoleResourcePermissions, SelectOption} from '@thunderid/browser';\nimport {ChangeEvent, FC, FormEvent, ReactElement, ReactNode, useState} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport Button from '../../primitives/Button/Button';\nimport Select from '../../primitives/Select/Select';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport {ChipList, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * A resource server a permission can be granted on.\n */\nexport interface RolePermissionResourceServer {\n  id: string;\n  name: string;\n}\n\n/**\n * One permission on one resource server, as added to or removed from a role.\n */\nexport interface RolePermissionChange {\n  permission: string;\n  resourceServerId: string;\n}\n\n/**\n * What {@link BaseRolePermissions} hands its `children` render function, so the permissions can be\n * shown with any UI.\n */\nexport interface BaseRolePermissionsRenderProps {\n  /**\n   * The permissions that can be granted, keyed by resource server identifier, for the resource servers\n   * loaded so far. Undefined when adding is not allowed.\n   */\n  availablePermissions?: Record<string, ResourceServerPermission[]>;\n  error: string | null;\n  isLoading: boolean;\n  isMutating: boolean;\n  /**\n   * Grants a permission. Undefined when the permissions cannot be edited.\n   */\n  onAdd?: (change: RolePermissionChange) => void;\n  /**\n   * Revokes a permission. Undefined when the permissions cannot be edited. Ask the user to confirm\n   * before calling it.\n   */\n  onRemove?: (change: RolePermissionChange) => void;\n  /**\n   * Asks for the permissions of a resource server, which then appear in `availablePermissions`.\n   * Undefined when adding is not allowed.\n   */\n  onResourceServerSelect?: (resourceServerId: string) => void;\n  /**\n   * The resource servers the role grants at least one permission on, with those permissions.\n   */\n  permissions: RoleResourcePermissions[];\n  /**\n   * Returns a resource server's display name, or its identifier when the name is missing.\n   */\n  resolveResourceServerName: (resourceServerId: string) => string;\n  /**\n   * The resource servers permissions can be granted on. Undefined when adding is not allowed.\n   */\n  resourceServers?: RolePermissionResourceServer[];\n}\n\nexport interface BaseRolePermissionsProps {\n  /**\n   * The permissions that can be granted, keyed by resource server identifier. A resource server\n   * missing here is still loading, and `onResourceServerSelect` is called to load it.\n   */\n  availablePermissions?: Record<string, ResourceServerPermission[]>;\n  /**\n   * Renders custom UI in place of the default view. Receives the granted permissions grouped by\n   * resource server, the loading and error state, a resource server name resolver and, when the\n   * permissions can be edited, the add and remove handlers with what can be added.\n   */\n  children?: (props: BaseRolePermissionsRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isLoading?: boolean;\n  isMutating?: boolean;\n  /**\n   * Grants a permission. Adding is hidden when omitted, or when `resourceServers` is omitted.\n   */\n  onAdd?: (change: RolePermissionChange) => void;\n  /**\n   * Revokes a permission, after the user confirms. Removing is hidden when omitted.\n   */\n  onRemove?: (change: RolePermissionChange) => void;\n  /**\n   * Called when a resource server is picked to add a permission on, so its permissions can be loaded.\n   */\n  onResourceServerSelect?: (resourceServerId: string) => void;\n  permissions: RoleResourcePermissions[];\n  preferences?: Preferences;\n  /**\n   * Display names of resource servers, keyed by identifier. The identifier is shown when a name is missing.\n   */\n  resourceServerNames?: Record<string, string>;\n  /**\n   * The resource servers a permission can be added on.\n   */\n  resourceServers?: RolePermissionResourceServer[];\n  title?: string;\n}\n\n/**\n * Shows the permissions a role grants, grouped by resource server, and lets the caller add and remove\n * them. Holds no data of its own.\n */\nconst BaseRolePermissions: FC<BaseRolePermissionsProps> = ({\n  availablePermissions,\n  children,\n  className,\n  description,\n  error = null,\n  isLoading = false,\n  isMutating = false,\n  onAdd,\n  onRemove,\n  onResourceServerSelect,\n  permissions,\n  preferences,\n  resourceServerNames,\n  resourceServers,\n  title,\n}: BaseRolePermissionsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n  const [resourceServerId, setResourceServerId] = useState<string>('');\n  const [permission, setPermission] = useState<string>('');\n  const [pendingRemoval, setPendingRemoval] = useState<RolePermissionChange | null>(null);\n  const granted: RoleResourcePermissions[] = permissions.filter(\n    (entry: RoleResourcePermissions) => entry.permissions.length > 0,\n  );\n  const canAdd = Boolean(onAdd && resourceServers);\n  const resolveResourceServerName = (id: string): string =>\n    resourceServerNames?.[id] ??\n    resourceServers?.find((server: RolePermissionResourceServer) => server.id === id)?.name ??\n    id;\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          availablePermissions: canAdd ? (availablePermissions ?? {}) : undefined,\n          error,\n          isLoading,\n          isMutating,\n          onAdd: canAdd ? onAdd : undefined,\n          onRemove,\n          onResourceServerSelect: canAdd ? onResourceServerSelect : undefined,\n          permissions: granted,\n          resolveResourceServerName,\n          resourceServers: canAdd ? resourceServers : undefined,\n        })}\n      </div>\n    );\n  }\n\n  const grantedOn = (id: string): string[] =>\n    granted.find((entry: RoleResourcePermissions) => entry.resourceServerId === id)?.permissions ?? [];\n  const candidates: ResourceServerPermission[] | undefined = resourceServerId\n    ? availablePermissions?.[resourceServerId]\n    : undefined;\n  const permissionOptions: SelectOption[] = (candidates ?? [])\n    .filter((candidate: ResourceServerPermission) => !grantedOn(resourceServerId).includes(candidate.permission))\n    .map((candidate: ResourceServerPermission) => ({\n      label: `${candidate.resourceName ? `${candidate.resourceName} / ` : ''}${candidate.name} (${candidate.permission})`,\n      value: candidate.permission,\n    }));\n\n  const handleSubmit = (event: FormEvent<HTMLFormElement>): void => {\n    event.preventDefault();\n\n    if (onAdd && resourceServerId && permission) {\n      onAdd({permission, resourceServerId});\n      setPermission('');\n    }\n  };\n\n  const renderAdd = (): ReactElement | null => {\n    if (!canAdd) {\n      return null;\n    }\n\n    return (\n      <form className={styles['row']} onSubmit={handleSubmit} style={{alignItems: 'flex-end'}}>\n        <Select\n          label={t('admin.roles.permissions.fields.resource_server')}\n          name=\"resourceServer\"\n          value={resourceServerId}\n          placeholder={t('admin.roles.permissions.fields.resource_server_placeholder')}\n          options={(resourceServers ?? []).map((server: RolePermissionResourceServer) => ({\n            label: server.name,\n            value: server.id,\n          }))}\n          onChange={(event: ChangeEvent<HTMLSelectElement>): void => {\n            setResourceServerId(event.target.value);\n            setPermission('');\n            if (event.target.value) {\n              onResourceServerSelect?.(event.target.value);\n            }\n          }}\n        />\n        <Select\n          label={t('admin.roles.permissions.fields.permission')}\n          name=\"permission\"\n          value={permission}\n          disabled={!resourceServerId}\n          loading={Boolean(resourceServerId) && candidates === undefined}\n          placeholder={t('admin.roles.permissions.fields.permission_placeholder')}\n          emptyText={t('admin.roles.permissions.fields.permission_empty')}\n          options={permissionOptions}\n          onChange={(event: ChangeEvent<HTMLSelectElement>): void => setPermission(event.target.value)}\n        />\n        <Button type=\"submit\" loading={isMutating} disabled={!resourceServerId || !permission || isMutating}>\n          {t('admin.roles.permissions.add')}\n        </Button>\n      </form>\n    );\n  };\n\n  const renderContent = (): ReactElement => {\n    if (isLoading) {\n      return <Spinner size=\"small\" />;\n    }\n\n    return (\n      <>\n        {error && (\n          <Alert variant=\"error\" role=\"alert\">\n            {error}\n          </Alert>\n        )}\n        {renderAdd()}\n        {pendingRemoval && onRemove && (\n          <span\n            className={styles['confirm']}\n            role=\"group\"\n            aria-label={t('admin.roles.permissions.remove_confirm', {permission: pendingRemoval.permission})}\n          >\n            <span>{t('admin.roles.permissions.remove_confirm', {permission: pendingRemoval.permission})}</span>\n            <Button variant=\"text\" size=\"small\" disabled={isMutating} onClick={(): void => setPendingRemoval(null)}>\n              {t('admin.common.actions.cancel')}\n            </Button>\n            <Button\n              color=\"error\"\n              size=\"small\"\n              loading={isMutating}\n              disabled={isMutating}\n              onClick={(): void => {\n                onRemove(pendingRemoval);\n                setPendingRemoval(null);\n              }}\n            >\n              {t('admin.common.actions.confirm')}\n            </Button>\n          </span>\n        )}\n        {granted.length === 0 && !error && (\n          <span className={styles['muted']}>{t('admin.roles.permissions.empty')}</span>\n        )}\n        {granted.map((entry: RoleResourcePermissions) => {\n          const name: string = resolveResourceServerName(entry.resourceServerId);\n\n          return (\n            <Panel key={entry.resourceServerId} title={name}>\n              <ChipList\n                label={name}\n                emptyText={t('admin.roles.permissions.empty')}\n                items={entry.permissions.map((grantedPermission: string) => ({\n                  id: grantedPermission,\n                  label: grantedPermission,\n                  ...(onRemove\n                    ? {\n                        onRemove: (): void =>\n                          setPendingRemoval({permission: grantedPermission, resourceServerId: entry.resourceServerId}),\n                        removeLabel: t('admin.roles.permissions.remove_label', {\n                          permission: grantedPermission,\n                          resourceServer: name,\n                        }),\n                      }\n                    : {}),\n                }))}\n              />\n            </Panel>\n          );\n        })}\n      </>\n    );\n  };\n\n  return (\n    <AdminSection\n      block=\"role-permissions\"\n      className={className}\n      title={title ?? t('admin.roles.permissions.title')}\n      description={description}\n      headingLevel={3}\n      preferences={preferences}\n    >\n      {renderContent()}\n    </AdminSection>\n  );\n};\n\nexport default BaseRolePermissions;\n"],"mappings":";;;;;;;;;;;;;;;;AAqHA,MAAMA,uBAAqD,EACzD,sBACA,UACA,WACA,aACA,QAAQ,MACR,YAAY,OACZ,aAAa,OACb,OACA,UACA,wBACA,aACA,aACA,qBACA,iBACA,YAC4C;CAC5C,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,4BAAoB;CAC3D,MAAM,CAAC,kBAAkB,uBAAuB,SAAiB,GAAG;CACpE,MAAM,CAAC,YAAY,iBAAiB,SAAiB,GAAG;CACxD,MAAM,CAAC,gBAAgB,qBAAqB,SAAsC,KAAK;CACvF,MAAMC,UAAqC,YAAY,QACpD,UAAmC,MAAM,YAAY,SAAS,EAChE;CACD,MAAM,SAAS,QAAQ,SAAS,gBAAgB;CAChD,MAAM,6BAA6B,OACjC,sBAAsB,OACtB,iBAAiB,MAAM,WAAyC,OAAO,OAAO,GAAG,EAAE,QACnF;AAEF,KAAI,SACF,QACE,oBAAC;EAAe;YACb,SAAS;GACR,sBAAsB,SAAU,wBAAwB,EAAE,GAAI;GAC9D;GACA;GACA;GACA,OAAO,SAAS,QAAQ;GACxB;GACA,wBAAwB,SAAS,yBAAyB;GAC1D,aAAa;GACb;GACA,iBAAiB,SAAS,kBAAkB;GAC7C,CAAC;GACE;CAIV,MAAM,aAAa,OACjB,QAAQ,MAAM,UAAmC,MAAM,qBAAqB,GAAG,EAAE,eAAe,EAAE;CACpG,MAAMC,aAAqD,mBACvD,uBAAuB,oBACvB;CACJ,MAAMC,qBAAqC,cAAc,EAAE,EACxD,QAAQ,cAAwC,CAAC,UAAU,iBAAiB,CAAC,SAAS,UAAU,WAAW,CAAC,CAC5G,KAAK,eAAyC;EAC7C,OAAO,GAAG,UAAU,eAAe,GAAG,UAAU,aAAa,OAAO,KAAK,UAAU,KAAK,IAAI,UAAU,WAAW;EACjH,OAAO,UAAU;EAClB,EAAE;CAEL,MAAM,gBAAgB,UAA4C;AAChE,QAAM,gBAAgB;AAEtB,MAAI,SAAS,oBAAoB,YAAY;AAC3C,SAAM;IAAC;IAAY;IAAiB,CAAC;AACrC,iBAAc,GAAG;;;CAIrB,MAAM,kBAAuC;AAC3C,MAAI,CAAC,OACH,QAAO;AAGT,SACE,qBAAC;GAAK,WAAW,OAAO;GAAQ,UAAU;GAAc,OAAO,EAAC,YAAY,YAAW;;IACrF,oBAACC;KACC,OAAO,EAAE,iDAAiD;KAC1D,MAAK;KACL,OAAO;KACP,aAAa,EAAE,6DAA6D;KAC5E,UAAU,mBAAmB,EAAE,EAAE,KAAK,YAA0C;MAC9E,OAAO,OAAO;MACd,OAAO,OAAO;MACf,EAAE;KACH,WAAW,UAAgD;AACzD,0BAAoB,MAAM,OAAO,MAAM;AACvC,oBAAc,GAAG;AACjB,UAAI,MAAM,OAAO,MACf,0BAAyB,MAAM,OAAO,MAAM;;MAGhD;IACF,oBAACA;KACC,OAAO,EAAE,4CAA4C;KACrD,MAAK;KACL,OAAO;KACP,UAAU,CAAC;KACX,SAAS,QAAQ,iBAAiB,IAAI,eAAe;KACrD,aAAa,EAAE,wDAAwD;KACvE,WAAW,EAAE,kDAAkD;KAC/D,SAAS;KACT,WAAW,UAAgD,cAAc,MAAM,OAAO,MAAM;MAC5F;IACF,oBAACC;KAAO,MAAK;KAAS,SAAS;KAAY,UAAU,CAAC,oBAAoB,CAAC,cAAc;eACtF,EAAE,8BAA8B;MAC1B;;IACJ;;CAIX,MAAM,sBAAoC;AACxC,MAAI,UACF,QAAO,oBAACC,mBAAQ,MAAK,UAAU;AAGjC,SACE;GACG,SACC,oBAACC;IAAM,SAAQ;IAAQ,MAAK;cACzB;KACK;GAET,WAAW;GACX,kBAAkB,YACjB,qBAAC;IACC,WAAW,OAAO;IAClB,MAAK;IACL,cAAY,EAAE,0CAA0C,EAAC,YAAY,eAAe,YAAW,CAAC;;KAEhG,oBAAC,oBAAM,EAAE,0CAA0C,EAAC,YAAY,eAAe,YAAW,CAAC,GAAQ;KACnG,oBAACF;MAAO,SAAQ;MAAO,MAAK;MAAQ,UAAU;MAAY,eAAqB,kBAAkB,KAAK;gBACnG,EAAE,8BAA8B;OAC1B;KACT,oBAACA;MACC,OAAM;MACN,MAAK;MACL,SAAS;MACT,UAAU;MACV,eAAqB;AACnB,gBAAS,eAAe;AACxB,yBAAkB,KAAK;;gBAGxB,EAAE,+BAA+B;OAC3B;;KACJ;GAER,QAAQ,WAAW,KAAK,CAAC,SACxB,oBAAC;IAAK,WAAW,OAAO;cAAW,EAAE,gCAAgC;KAAQ;GAE9E,QAAQ,KAAK,UAAmC;IAC/C,MAAMG,OAAe,0BAA0B,MAAM,iBAAiB;AAEtE,WACE,oBAAC;KAAmC,OAAO;eACzC,oBAAC;MACC,OAAO;MACP,WAAW,EAAE,gCAAgC;MAC7C,OAAO,MAAM,YAAY,KAAK,uBAA+B;OAC3D,IAAI;OACJ,OAAO;OACP,GAAI,WACA;QACE,gBACE,kBAAkB;SAAC,YAAY;SAAmB,kBAAkB,MAAM;SAAiB,CAAC;QAC9F,aAAa,EAAE,wCAAwC;SACrD,YAAY;SACZ,gBAAgB;SACjB,CAAC;QACH,GACD,EAAE;OACP,EAAE;OACH;OAlBQ,MAAM,iBAmBV;KAEV;MACD;;AAIP,QACE,oBAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,gCAAgC;EACrC;EACb,cAAc;EACD;YAEZ,eAAe;GACH;;AAInB,kCAAe"}

package/dist/components/management/RolePermissions/RolePermissions.d.ts

@@ -0,0 +1,29 @@
+import { AdministrationMode } from '@thunderid/browser';
+import { FC } from 'react';
+import { BaseRolePermissionsProps } from './BaseRolePermissions';
+export type RolePermissionsProps = Omit<BaseRolePermissionsProps, 'availablePermissions' | 'error' | 'isLoading' | 'isMutating' | 'onAdd' | 'onRemove' | 'onResourceServerSelect' | 'permissions' | 'resourceServers'> & {
+    /**
+     * How an update that removes a permission is made. `flow` runs the administration flow the server
+     * configures for it. It needs `baseUrl`.
+     * @default 'native'
+     */
+    administrationMode?: AdministrationMode;
+    /**
+     * Whether permissions can be added and removed from this view. Read-only roles never can.
+     * @default false
+     */
+    editable?: boolean;
+    roleId: string;
+};
+/**
+ * Shows the permissions a role grants and, when `editable`, lets the signed-in user grant permissions
+ * from the resource servers' actions and revoke them. Every change saves the role.
+ *
+ * @example
+ * ```tsx
+ * <RolePermissions roleId={roleId} editable />
+ * ```
+ */
+declare const RolePermissions: FC<RolePermissionsProps>;
+export default RolePermissions;
+//# sourceMappingURL=RolePermissions.d.ts.map

package/dist/components/management/RolePermissions/RolePermissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RolePermissions.d.ts","sourceRoot":"","sources":["../../../../src/components/management/RolePermissions/RolePermissions.tsx"],"names":[],"mappings":"AAGA,OAAO,EACL,kBAAkB,EAYnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,EAAE,EAAkC,MAAM,OAAO,CAAC;AAC1D,OAA4B,EAC1B,wBAAwB,EAGzB,MAAM,uBAAuB,CAAC;AAM/B,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,wBAAwB,EACtB,sBAAsB,GACtB,OAAO,GACP,WAAW,GACX,YAAY,GACZ,OAAO,GACP,UAAU,GACV,wBAAwB,GACxB,aAAa,GACb,iBAAiB,CACpB,GAAG;IACF;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AA+BF;;;;;;;;GAQG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CA0F7C,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/components/management/RolePermissions/RolePermissions.js

@@ -0,0 +1,108 @@
+import useTranslation_default from "../../../hooks/useTranslation.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
+import useResourceMutation_default from "../../../hooks/management/useResourceMutation.js";
+import BaseRolePermissions_default from "./BaseRolePermissions.js";
+import { RoleQueryKeys, getResourceServerPermissions, getResourceServers, getRole, toManagementErrorMessage, updateRole } from "@thunderid/browser";
+import { useMemo, useState } from "react";
+import { jsx } from "react/jsx-runtime";
+
+//#region src/components/management/RolePermissions/RolePermissions.tsx
+/**
+* Returns the role's permissions with one permission added or taken away, dropping a resource server
+* left with none.
+*/
+const changePermissions = (current, { permission, resourceServerId }, add) => {
+	const next = current.map((entry) => {
+		if (entry.resourceServerId !== resourceServerId) return entry;
+		return {
+			...entry,
+			permissions: add ? Array.from(new Set([...entry.permissions, permission])) : entry.permissions.filter((granted) => granted !== permission)
+		};
+	});
+	if (add && !next.some((entry) => entry.resourceServerId === resourceServerId)) next.push({
+		permissions: [permission],
+		resourceServerId
+	});
+	return next.filter((entry) => entry.permissions.length > 0);
+};
+/**
+* Shows the permissions a role grants and, when `editable`, lets the signed-in user grant permissions
+* from the resource servers' actions and revoke them. Every change saves the role.
+*
+* @example
+* ```tsx
+* <RolePermissions roleId={roleId} editable />
+* ```
+*/
+const RolePermissions = ({ administrationMode, editable = false, preferences, roleId,...rest }) => {
+	const { t } = useTranslation_default(preferences?.i18n);
+	const endpoint = useManagementEndpoint_default("roles");
+	const resourceServersEndpoint = useManagementEndpoint_default("resourceServers");
+	const [selectedResourceServerId, setSelectedResourceServerId] = useState(null);
+	const role = useResourceQuery_default([RoleQueryKeys.ROLE, roleId], (fetcher) => getRole({
+		...endpoint,
+		fetcher,
+		roleId
+	}), { enabled: Boolean(roleId) });
+	const canEdit = editable && Boolean(role.data) && !role.data?.isReadOnly;
+	const resourceServers = useResourceQuery_default([
+		RoleQueryKeys.ROLE_PERMISSION_CANDIDATES,
+		"resource-servers",
+		{ limit: 100 }
+	], (fetcher) => getResourceServers({
+		...resourceServersEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: canEdit });
+	const candidates = useResourceQuery_default([
+		RoleQueryKeys.ROLE_PERMISSION_CANDIDATES,
+		"permissions",
+		selectedResourceServerId
+	], async (fetcher) => ({
+		permissions: await getResourceServerPermissions({
+			...resourceServersEndpoint,
+			fetcher,
+			resourceServerId: selectedResourceServerId
+		}),
+		resourceServerId: selectedResourceServerId
+	}), { enabled: canEdit && Boolean(selectedResourceServerId) });
+	const update = useResourceMutation_default((permissions, fetcher) => updateRole({
+		...endpoint,
+		administrationMode,
+		current: role.data,
+		fetcher,
+		payload: {
+			description: role.data.description,
+			name: role.data.name,
+			ouId: role.data.ouId,
+			permissions
+		},
+		roleId
+	}), () => [[RoleQueryKeys.ROLE, roleId], [RoleQueryKeys.ROLES]]);
+	const servers = useMemo(() => (resourceServers.data?.resourceServers ?? []).map((server) => ({
+		id: server.id,
+		name: server.name
+	})), [resourceServers.data]);
+	const change = (permissionChange, add) => {
+		if (role.data) update.mutate(changePermissions(role.data.permissions ?? [], permissionChange, add));
+	};
+	return /* @__PURE__ */ jsx(BaseRolePermissions_default, {
+		permissions: role.data?.permissions ?? [],
+		isLoading: role.isLoading,
+		isMutating: update.isLoading,
+		error: toManagementErrorMessage(t, role.error, "admin.roles.permissions.error") ?? toManagementErrorMessage(t, update.error, "admin.roles.permissions.update_error") ?? toManagementErrorMessage(t, resourceServers.error ?? candidates.error, "admin.roles.permissions.options_error"),
+		resourceServers: canEdit && resourceServers.data ? servers : void 0,
+		availablePermissions: candidates.data?.resourceServerId === selectedResourceServerId ? { [candidates.data.resourceServerId]: candidates.data.permissions } : {},
+		onResourceServerSelect: setSelectedResourceServerId,
+		onAdd: canEdit ? (permissionChange) => change(permissionChange, true) : void 0,
+		onRemove: canEdit ? (permissionChange) => change(permissionChange, false) : void 0,
+		preferences,
+		...rest
+	});
+};
+var RolePermissions_default = RolePermissions;
+
+//#endregion
+export { RolePermissions_default as default };
+//# sourceMappingURL=RolePermissions.js.map

package/dist/components/management/RolePermissions/RolePermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RolePermissions.js","names":["next: RoleResourcePermissions[]","RolePermissions: FC<RolePermissionsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","resourceServersEndpoint: ManagementEndpoint","role: ResourceQueryResult<Role>","useResourceQuery","canEdit: boolean","resourceServers: ResourceQueryResult<ResourceServerListResponse>","candidates: ResourceQueryResult<{permissions: ResourceServerPermission[]; resourceServerId: string}>","update: ResourceMutationResult<Role, RoleResourcePermissions[]>","useResourceMutation","servers: RolePermissionResourceServer[]","BaseRolePermissions"],"sources":["../../../../src/components/management/RolePermissions/RolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  ResourceServer,\n  ResourceServerListResponse,\n  ResourceServerPermission,\n  Role,\n  RoleQueryKeys,\n  RoleResourcePermissions,\n  getResourceServerPermissions,\n  getResourceServers,\n  getRole,\n  toManagementErrorMessage,\n  updateRole,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRolePermissions, {\n  BaseRolePermissionsProps,\n  RolePermissionChange,\n  RolePermissionResourceServer,\n} from './BaseRolePermissions';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RolePermissionsProps = Omit<\n  BaseRolePermissionsProps,\n  | 'availablePermissions'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAdd'\n  | 'onRemove'\n  | 'onResourceServerSelect'\n  | 'permissions'\n  | 'resourceServers'\n> & {\n  /**\n   * How an update that removes a permission is made. `flow` runs the administration flow the server\n   * configures for it. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether permissions can be added and removed from this view. Read-only roles never can.\n   * @default false\n   */\n  editable?: boolean;\n  roleId: string;\n};\n\n/**\n * Returns the role's permissions with one permission added or taken away, dropping a resource server\n * left with none.\n */\nconst changePermissions = (\n  current: RoleResourcePermissions[],\n  {permission, resourceServerId}: RolePermissionChange,\n  add: boolean,\n): RoleResourcePermissions[] => {\n  const next: RoleResourcePermissions[] = current.map((entry: RoleResourcePermissions) => {\n    if (entry.resourceServerId !== resourceServerId) {\n      return entry;\n    }\n\n    return {\n      ...entry,\n      permissions: add\n        ? Array.from(new Set([...entry.permissions, permission]))\n        : entry.permissions.filter((granted: string) => granted !== permission),\n    };\n  });\n\n  if (add && !next.some((entry: RoleResourcePermissions) => entry.resourceServerId === resourceServerId)) {\n    next.push({permissions: [permission], resourceServerId});\n  }\n\n  return next.filter((entry: RoleResourcePermissions) => entry.permissions.length > 0);\n};\n\n/**\n * Shows the permissions a role grants and, when `editable`, lets the signed-in user grant permissions\n * from the resource servers' actions and revoke them. Every change saves the role.\n *\n * @example\n * ```tsx\n * <RolePermissions roleId={roleId} editable />\n * ```\n */\nconst RolePermissions: FC<RolePermissionsProps> = ({\n  administrationMode,\n  editable = false,\n  preferences,\n  roleId,\n  ...rest\n}: RolePermissionsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const resourceServersEndpoint: ManagementEndpoint = useManagementEndpoint('resourceServers');\n  const [selectedResourceServerId, setSelectedResourceServerId] = useState<string | null>(null);\n  const role: ResourceQueryResult<Role> = useResourceQuery(\n    [RoleQueryKeys.ROLE, roleId],\n    (fetcher) => getRole({...endpoint, fetcher, roleId}),\n    {enabled: Boolean(roleId)},\n  );\n  const canEdit: boolean = editable && Boolean(role.data) && !role.data?.isReadOnly;\n  const resourceServers: ResourceQueryResult<ResourceServerListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_PERMISSION_CANDIDATES, 'resource-servers', {limit: 100}],\n    (fetcher) => getResourceServers({...resourceServersEndpoint, fetcher, limit: 100}),\n    {enabled: canEdit},\n  );\n  const candidates: ResourceQueryResult<{permissions: ResourceServerPermission[]; resourceServerId: string}> =\n    useResourceQuery(\n      [RoleQueryKeys.ROLE_PERMISSION_CANDIDATES, 'permissions', selectedResourceServerId],\n      async (fetcher) => ({\n        permissions: await getResourceServerPermissions({\n          ...resourceServersEndpoint,\n          fetcher,\n          resourceServerId: selectedResourceServerId!,\n        }),\n        resourceServerId: selectedResourceServerId!,\n      }),\n      {enabled: canEdit && Boolean(selectedResourceServerId)},\n    );\n  const update: ResourceMutationResult<Role, RoleResourcePermissions[]> = useResourceMutation(\n    (permissions: RoleResourcePermissions[], fetcher) =>\n      updateRole({\n        ...endpoint,\n        administrationMode,\n        current: role.data,\n        fetcher,\n        payload: {\n          description: role.data!.description,\n          name: role.data!.name,\n          ouId: role.data!.ouId,\n          permissions,\n        },\n        roleId,\n      }),\n    () => [[RoleQueryKeys.ROLE, roleId], [RoleQueryKeys.ROLES]],\n  );\n\n  const servers: RolePermissionResourceServer[] = useMemo(\n    () =>\n      (resourceServers.data?.resourceServers ?? []).map((server: ResourceServer) => ({\n        id: server.id,\n        name: server.name,\n      })),\n    [resourceServers.data],\n  );\n  const change = (permissionChange: RolePermissionChange, add: boolean): void => {\n    if (role.data) {\n      void update.mutate(changePermissions(role.data.permissions ?? [], permissionChange, add));\n    }\n  };\n\n  return (\n    <BaseRolePermissions\n      permissions={role.data?.permissions ?? []}\n      isLoading={role.isLoading}\n      isMutating={update.isLoading}\n      error={\n        toManagementErrorMessage(t, role.error, 'admin.roles.permissions.error') ??\n        toManagementErrorMessage(t, update.error, 'admin.roles.permissions.update_error') ??\n        toManagementErrorMessage(t, resourceServers.error ?? candidates.error, 'admin.roles.permissions.options_error')\n      }\n      resourceServers={canEdit && resourceServers.data ? servers : undefined}\n      availablePermissions={\n        candidates.data?.resourceServerId === selectedResourceServerId\n          ? {[candidates.data.resourceServerId]: candidates.data.permissions}\n          : {}\n      }\n      onResourceServerSelect={setSelectedResourceServerId}\n      onAdd={canEdit ? (permissionChange: RolePermissionChange): void => change(permissionChange, true) : undefined}\n      onRemove={canEdit ? (permissionChange: RolePermissionChange): void => change(permissionChange, false) : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RolePermissions;\n"],"mappings":";;;;;;;;;;;;;;AA0DA,MAAM,qBACJ,SACA,EAAC,YAAY,oBACb,QAC8B;CAC9B,MAAMA,OAAkC,QAAQ,KAAK,UAAmC;AACtF,MAAI,MAAM,qBAAqB,iBAC7B,QAAO;AAGT,SAAO;GACL,GAAG;GACH,aAAa,MACT,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,MAAM,aAAa,WAAW,CAAC,CAAC,GACvD,MAAM,YAAY,QAAQ,YAAoB,YAAY,WAAW;GAC1E;GACD;AAEF,KAAI,OAAO,CAAC,KAAK,MAAM,UAAmC,MAAM,qBAAqB,iBAAiB,CACpG,MAAK,KAAK;EAAC,aAAa,CAAC,WAAW;EAAE;EAAiB,CAAC;AAG1D,QAAO,KAAK,QAAQ,UAAmC,MAAM,YAAY,SAAS,EAAE;;;;;;;;;;;AAYtF,MAAMC,mBAA6C,EACjD,oBACA,WAAW,OACX,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,8BAAsB,QAAQ;CACnE,MAAMC,0BAA8CD,8BAAsB,kBAAkB;CAC5F,MAAM,CAAC,0BAA0B,+BAA+B,SAAwB,KAAK;CAC7F,MAAME,OAAkCC,yBACtC,CAAC,cAAc,MAAM,OAAO,GAC3B,YAAY,QAAQ;EAAC,GAAG;EAAU;EAAS;EAAO,CAAC,EACpD,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,UAAmB,YAAY,QAAQ,KAAK,KAAK,IAAI,CAAC,KAAK,MAAM;CACvE,MAAMC,kBAAmEF,yBACvE;EAAC,cAAc;EAA4B;EAAoB,EAAC,OAAO,KAAI;EAAC,GAC3E,YAAY,mBAAmB;EAAC,GAAG;EAAyB;EAAS,OAAO;EAAI,CAAC,EAClF,EAAC,SAAS,SAAQ,CACnB;CACD,MAAMG,aACJH,yBACE;EAAC,cAAc;EAA4B;EAAe;EAAyB,EACnF,OAAO,aAAa;EAClB,aAAa,MAAM,6BAA6B;GAC9C,GAAG;GACH;GACA,kBAAkB;GACnB,CAAC;EACF,kBAAkB;EACnB,GACD,EAAC,SAAS,WAAW,QAAQ,yBAAyB,EAAC,CACxD;CACH,MAAMI,SAAkEC,6BACrE,aAAwC,YACvC,WAAW;EACT,GAAG;EACH;EACA,SAAS,KAAK;EACd;EACA,SAAS;GACP,aAAa,KAAK,KAAM;GACxB,MAAM,KAAK,KAAM;GACjB,MAAM,KAAK,KAAM;GACjB;GACD;EACD;EACD,CAAC,QACE,CAAC,CAAC,cAAc,MAAM,OAAO,EAAE,CAAC,cAAc,MAAM,CAAC,CAC5D;CAED,MAAMC,UAA0C,eAE3C,gBAAgB,MAAM,mBAAmB,EAAE,EAAE,KAAK,YAA4B;EAC7E,IAAI,OAAO;EACX,MAAM,OAAO;EACd,EAAE,EACL,CAAC,gBAAgB,KAAK,CACvB;CACD,MAAM,UAAU,kBAAwC,QAAuB;AAC7E,MAAI,KAAK,KACP,CAAK,OAAO,OAAO,kBAAkB,KAAK,KAAK,eAAe,EAAE,EAAE,kBAAkB,IAAI,CAAC;;AAI7F,QACE,oBAACC;EACC,aAAa,KAAK,MAAM,eAAe,EAAE;EACzC,WAAW,KAAK;EAChB,YAAY,OAAO;EACnB,OACE,yBAAyB,GAAG,KAAK,OAAO,gCAAgC,IACxE,yBAAyB,GAAG,OAAO,OAAO,uCAAuC,IACjF,yBAAyB,GAAG,gBAAgB,SAAS,WAAW,OAAO,wCAAwC;EAEjH,iBAAiB,WAAW,gBAAgB,OAAO,UAAU;EAC7D,sBACE,WAAW,MAAM,qBAAqB,2BAClC,GAAE,WAAW,KAAK,mBAAmB,WAAW,KAAK,aAAY,GACjE,EAAE;EAER,wBAAwB;EACxB,OAAO,WAAW,qBAAiD,OAAO,kBAAkB,KAAK,GAAG;EACpG,UAAU,WAAW,qBAAiD,OAAO,kBAAkB,MAAM,GAAG;EAC3F;EACb,GAAI;GACJ;;AAIN,8BAAe"}