@thunderid/react 1.14.0 → 1.15.1

package/dist/components/auth/flow/AuthOptionFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthOptionFactory.js","names":["logger: ReturnType<typeof createPackageComponentLogger>","richTextClassCache: string | undefined","authOptionIconClassCache: string | undefined","providerId: any","providerMatches: any","theme: any","customRenderers: ComponentRendererMap","key: string | number","customRenderer: ComponentRenderer | undefined","rendered: ReactElement | null","identifier: string","isTouched: boolean","Button","value: string","error: string","fieldType: string","hasPrefixes: boolean","hasPostfix: boolean","prefixStateKey: string","postfixStateKey: string","defaultPrefixValue: string","selectedPrefix: string","AffixedField","isDeviceUserCode: boolean","currentValue: string","reportedLength: number","otpLength: number | undefined","numericOnly: boolean","actionId: string","eventType: string","buttonText: string","componentVariant: string","shouldSkipValidation: boolean","buttonType: HTMLButtonElement['type']","hasInvalidConsentApproval: boolean","isConsentApprovalBlocked","formData: Record<string, any>","consentPrompt: ConsentPromptData | undefined","isDeny: boolean","decisions: ConsentDecisions","socialButtonClassName: string","GoogleButton","GitHubButton","FacebookButton","MicrosoftButton","LinkedInButton","SignInWithEthereumButton","SmsOtpButton","startIconEl: ReactElement | null","endIconEl: ReactElement | null","variant: any","color: TypographyColor | undefined","textAlignClass: string","Typography","Divider","selectOptions: any","Select","DatePicker","BaseUserSelect","BaseAuthFlowSelect","BaseUserTypeSelect","formClass: string","blockComponents: any","richTextAction: EmbeddedFlowComponentAction | undefined","syntheticAction: EmbeddedFlowComponent","formData: Record<string, string>","handleRichTextClick: React.MouseEventHandler<HTMLDivElement> | undefined","anchor: HTMLAnchorElement | null","handleRichTextKeyDown: React.KeyboardEventHandler<HTMLDivElement> | undefined","explicitHeight: string","explicitWidth: string","ImageComponent","iconName: string","IconComponent: any","flowIconRegistry","direction: string","gap: number","align: string","justify: string","rawItems: string | number | undefined","parsedItems: number","items: number | null","isColumn: boolean","gridJustify: string","track: string","stackClass: string","stackChildren: (ReactElement | null)[]","consentPromptRawData: ConsentPromptData | string | undefined","Consent","textTemplate: string","timeoutMs: number","FlowTimer","sourceKey: string | undefined","CopyableText","pairs: KeyValuePair[]","KeyValueList"],"sources":["../../../../src/components/auth/flow/AuthOptionFactory.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type {CSSInterpolation} from '@emotion/css/create-instance';\nimport {\n  ConsentConstants,\n  FieldType,\n  FlowMetadataResponse,\n  EmbeddedFlowComponent,\n  EmbeddedFlowComponentAction,\n  EmbeddedFlowComponentType,\n  EmbeddedFlowTextVariant,\n  EmbeddedFlowEventType,\n  createPackageComponentLogger,\n  resolveFlowTemplateLiterals,\n  resolveEmojiUrisInHtml,\n  ConsentPurposeData,\n  ConsentPromptData,\n  ConsentDecisions,\n  ConsentPurposeDecision,\n  ConsentAttributeElement,\n  OrganizationUnitListResponse,\n  PrefixOption,\n  KeyValuePair,\n  parseKeyValuePairs,\n  FetchAuthFlows,\n  FetchUserTypes,\n  FetchUsers,\n  getConsentElementDecision,\n} from '@thunderid/browser';\nimport DOMPurify from 'dompurify';\nimport {ChangeEvent, cloneElement, CSSProperties, FormEvent, MouseEvent, ReactElement} from 'react';\nimport Consent from './Consent';\nimport {getConsentOptionalKey} from './ConsentCheckboxList';\nimport {createField} from './FieldFactory';\nimport FlowTimer from './FlowTimer';\nimport ImageComponent from './ImageComponent';\nimport {\n  ComponentRenderer,\n  ComponentRenderContext,\n  ComponentRendererMap,\n} from '../../../contexts/ComponentRenderer/ComponentRendererContext';\nimport {UseTranslation} from '../../../hooks/useTranslation';\nimport {css, cx} from '../../../styles/emotion';\nimport {affixPostfixKey, affixPrefixKey} from '../../../utils/composeAffixedInputs';\nimport isConsentApprovalBlocked from '../../../utils/isConsentApprovalBlocked';\nimport AffixedField from '../../primitives/AffixedField/AffixedField';\nimport BaseAuthFlowSelect from '../../primitives/AuthFlowSelect/BaseAuthFlowSelect';\nimport Button from '../../primitives/Button/Button';\nimport CopyableText from '../../primitives/CopyableText/CopyableText';\nimport DatePicker from '../../primitives/DatePicker/DatePicker';\nimport Divider from '../../primitives/Divider/Divider';\nimport flowIconRegistry from '../../primitives/Icons/flowIconRegistry';\nimport KeyValueList from '../../primitives/KeyValueList/KeyValueList';\nimport Select from '../../primitives/Select/Select';\nimport Typography from '../../primitives/Typography/Typography';\nimport {TypographyColor, TypographyVariant} from '../../primitives/Typography/Typography.styles';\nimport BaseUserSelect, {BaseUserSelectProps} from '../../primitives/UserSelect/BaseUserSelect';\nimport BaseUserTypeSelect from '../../primitives/UserTypeSelect/BaseUserTypeSelect';\nimport FacebookButton from '../buttons/FacebookButton';\nimport GitHubButton from '../buttons/GitHubButton';\nimport GoogleButton from '../buttons/GoogleButton';\nimport LinkedInButton from '../buttons/LinkedInButton';\nimport MicrosoftButton from '../buttons/MicrosoftButton';\nimport SignInWithEthereumButton from '../buttons/SignInWithEthereumButton';\nimport SmsOtpButton from '../buttons/SmsOtpButton';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'AuthOptionFactory',\n);\n\n/**\n * Replaces `emoji:` URIs embedded in HTML before DOMPurify sanitization.\n *\n * DOMPurify strips unknown URI schemes from attributes (e.g. `src=\"emoji:🦊\"` → `src=\"\"`).\n * This function converts:\n *   - `<img src=\"emoji:X\" alt=\"Y\">` → `<span role=\"img\" aria-label=\"Y\">X</span>`\n *   - Any remaining `emoji:X` text occurrences → `X`\n */\n\n// This module's functions (renderSignInComponents, etc.) are called imperatively from a\n// component's render, not React components/hooks themselves — so these classes can't be computed\n// at module scope: that runs at import time, before <ThunderIDProvider> has had a chance to\n// configure Emotion's CSP nonce, which would insert them into an un-nonced <style> tag. Instead\n// they're computed lazily, on first actual use (still just once — Emotion's own cache dedupes any\n// further calls to a no-op after that).\nlet richTextClassCache: string | undefined;\n\n/** Ensures rich-text content (including all inner elements from the server) always word-wraps. */\nfunction getRichTextClass(): string {\n  richTextClassCache ??= css`\n    overflow-wrap: anywhere;\n    & * {\n      overflow-wrap: anywhere;\n      word-break: break-word;\n    }\n    & .rich-text-align-left {\n      text-align: left;\n    }\n    & .rich-text-align-center {\n      text-align: center;\n    }\n    & .rich-text-align-right {\n      text-align: right;\n    }\n    & .rich-text-align-justify {\n      text-align: justify;\n    }\n    & a,\n    & .rich-text-link {\n      text-decoration: underline;\n    }\n    & span[role='img'] {\n      display: inline-block;\n    }\n  `;\n  return richTextClassCache;\n}\n\nlet authOptionIconClassCache: string | undefined;\n\nfunction getAuthOptionIconClass(): string {\n  authOptionIconClassCache ??= css({height: '1.25em', objectFit: 'contain', width: '1.25em'});\n  return authOptionIconClassCache;\n}\n\nexport type AuthType = 'signin' | 'signup' | 'recovery' | 'verification';\n\n/**\n * Get the appropriate FieldType for an input component.\n */\n/** Upper bound on STACK grid slots, so a mistyped `items` cannot render thousands of cells. */\nconst MAX_STACK_ITEMS = 12;\n\nconst getFieldType = (variant: EmbeddedFlowComponentType): FieldType => {\n  switch (variant) {\n    case EmbeddedFlowComponentType.EmailInput:\n      return FieldType.Email;\n    case EmbeddedFlowComponentType.PhoneInput:\n      return FieldType.Tel;\n    case EmbeddedFlowComponentType.PasswordInput:\n      return FieldType.Password;\n    case EmbeddedFlowComponentType.TextInput:\n    default:\n      return FieldType.Text;\n  }\n};\n\n/**\n * Get typography variant from component variant.\n */\nconst getTypographyVariant = (variant: string): any => {\n  const variantMap: Record<EmbeddedFlowTextVariant, TypographyVariant> = {\n    BODY_1: 'body1',\n    BODY_2: 'body2',\n    BUTTON_TEXT: 'button',\n    CAPTION: 'caption',\n    HEADING_1: 'h1',\n    HEADING_2: 'h2',\n    HEADING_3: 'h3',\n    HEADING_4: 'h4',\n    HEADING_5: 'h5',\n    HEADING_6: 'h6',\n    OVERLINE: 'overline',\n    SUBTITLE_1: 'subtitle1',\n    SUBTITLE_2: 'subtitle2',\n  };\n\n  return variantMap[variant] || 'h3';\n};\n\n/** Maps flow text color values to SDK typography color variants. */\nconst getTypographyColor = (color?: string): TypographyColor | undefined => {\n  switch (color?.toUpperCase()) {\n    case 'ERROR':\n      return 'error';\n    case 'WARNING':\n      return 'warning';\n    case 'SUCCESS':\n      return 'success';\n    case 'INFO':\n      return 'info';\n    case 'PRIMARY':\n      return 'primary';\n    case 'SECONDARY':\n      return 'secondary';\n    default:\n      return undefined;\n  }\n};\n\n/**\n * Check if a button text or action matches a social provider.\n */\nconst matchesSocialProvider = (\n  actionId: string,\n  eventType: string,\n  buttonText: string,\n  provider: string,\n  authType: AuthType,\n  /* eslint-disable-next-line @typescript-eslint/no-unused-vars */\n  _componentVariant?: string,\n): boolean => {\n  const providerId: any = `${provider}_auth`;\n  const providerMatches: any = actionId === providerId || eventType === providerId;\n\n  // Social buttons usually have \"Sign in with X\" or \"Continue with X\" text,\n  // so also check button text for the provider name to increase chances of correct detection (especially for signup flows where action IDs are less standardized)\n  if (buttonText.toLowerCase().includes(provider)) {\n    return true;\n  }\n\n  // For signup, also check button text\n  if (authType === 'signup') {\n    return providerMatches || buttonText.toLowerCase().includes(provider);\n  }\n\n  return providerMatches;\n};\n\n/**\n * Create an auth component from flow component configuration.\n */\nconst createAuthComponentFromFlow = (\n  component: EmbeddedFlowComponent,\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  authType: AuthType,\n  options: {\n    /** @internal Passed from the host React component so hooks aren't called inside a loop. */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal Passed from the host React component so hooks aren't called inside a loop. */\n    _theme?: any;\n    /** Additional data from the flow response, used for different dynamic data */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    /** Current consent purpose being rendered. Set by CONSENT_PURPOSE block iteration. */\n    currentConsentPurpose?: ConsentPurposeData;\n    inStack?: boolean;\n    inputClassName?: string;\n    /** Flag to determine if the step timeline has expired */\n    isTimeoutDisabled?: boolean;\n    key?: string | number;\n    /** Data source for AUTH_FLOW_SELECT fields. */\n    fetchAuthFlows?: FetchAuthFlows;\n    /** Data source for USER_SELECT fields. */\n    fetchUsers?: FetchUsers;\n    /** Data source for USER_TYPE_SELECT fields. */\n    fetchUserTypes?: FetchUserTypes;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    /** Called with the error of a failed picker load. The form itself shows no error for it. */\n    onPickerError?: (error: Error) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    /** Renders RESEND actions; only attribute verification sets it, so other flows skip them as before. */\n    renderResend?: boolean;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  } = {},\n): ReactElement | null => {\n  const theme: any = options._theme;\n  const customRenderers: ComponentRendererMap = options._customRenderers ?? {};\n\n  const key: string | number = options.key || component.id;\n\n  const customRenderer: ComponentRenderer | undefined =\n    customRenderers[component.id] ?? customRenderers[component.type];\n  if (customRenderer) {\n    const renderCtx: ComponentRenderContext = {\n      additionalData: options.additionalData,\n      authType,\n      formErrors,\n      formValues,\n      isFormValid,\n      isLoading,\n      meta: options.meta,\n      resetForm,\n      onInputBlur: options.onInputBlur,\n      onInputChange,\n      onSubmit: options.onSubmit,\n      touchedFields,\n    };\n    // Key the element here so a renderer does not have to, as the built-in cases below do.\n    const rendered: ReactElement | null = customRenderer(component, renderCtx);\n\n    return rendered ? cloneElement(rendered, {key}) : null;\n  }\n\n  /** Resolve any remaining {{t()}} or {{meta()}} template expressions in a string at render time. */\n  const resolve = (text: string | undefined): string => {\n    if (!text || (!options.t && !options.meta)) {\n      return text || '';\n    }\n    return resolveFlowTemplateLiterals(text, {meta: options.meta, t: options.t || ((k: string): string => k)});\n  };\n\n  // The props a flow gives each of the resource pickers (USER_SELECT, AUTH_FLOW_SELECT, USER_TYPE_SELECT).\n  const resourceSelectProps = (): Omit<BaseUserSelectProps, 'fetchUsers' | 'mapping'> => {\n    const identifier: string = component.ref!;\n    const isTouched: boolean = touchedFields[identifier] || false;\n\n    return {\n      className: cx(options.inputClassName, component.classes),\n      component,\n      error: isTouched ? formErrors[identifier] : undefined,\n      id: component.id,\n      label: resolve(component.label) || '',\n      name: identifier,\n      onBlur: (): void => options.onInputBlur?.(identifier),\n      onChange: (event: ChangeEvent<HTMLSelectElement>): void => onInputChange(identifier, event.target.value),\n      onError: options.onPickerError,\n      placeholder: resolve(component.placeholder),\n      required: component.required,\n      value: formValues[identifier] || '',\n    };\n  };\n\n  // A component type this render cannot draw is logged and left out.\n  const skipUnsupported = (typeName: string): null => {\n    logger.warn(`${typeName} component type is not supported. Skipping render.`);\n\n    return null;\n  };\n\n  // A resend asks for a new code, so it submits its own action without the step's values or validation.\n  if (component.type === EmbeddedFlowComponentType.Resend && options.renderResend) {\n    return (\n      <Button\n        fullWidth\n        key={key}\n        id={component.id}\n        onClick={(): void => options.onSubmit?.(component, {}, true)}\n        disabled={isLoading || options.isTimeoutDisabled}\n        className={cx(options.buttonClassName, component.classes)}\n        variant=\"text\"\n        color=\"primary\"\n        type=\"button\"\n      >\n        {resolve(component.label)}\n      </Button>\n    );\n  }\n\n  switch (component.type) {\n    case EmbeddedFlowComponentType.TextInput:\n    case EmbeddedFlowComponentType.PasswordInput:\n    case EmbeddedFlowComponentType.EmailInput:\n    case EmbeddedFlowComponentType.PhoneInput: {\n      const identifier: string = component.ref!;\n      const value: string = formValues[identifier] || '';\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n      const fieldType: string = getFieldType(component.type);\n\n      // Prefix/postfix are accepted on any text-family input. When either is present,\n      // route to AffixedField so the leading affix renders and submit-time composition\n      // is picked up by composeAffixedInputs via the sentinel keys.\n      // Both string.length and Array.length are defined, so a single truthy+length\n      // check covers `prefixes?: string | PrefixOption[]`.\n      const hasPrefixes: boolean = !!component.prefixes && component.prefixes.length > 0;\n      const hasPostfix: boolean = typeof component.postfix === 'string' && component.postfix.length > 0;\n\n      if (hasPrefixes || hasPostfix) {\n        const prefixStateKey: string = affixPrefixKey(identifier, options.vendor);\n        const postfixStateKey: string = affixPostfixKey(identifier, options.vendor);\n        const defaultPrefixValue: string = hasPrefixes\n          ? typeof component.prefixes === 'string'\n            ? component.prefixes\n            : (component.prefixes as PrefixOption[])[0].value\n          : '';\n        const selectedPrefix: string = formValues[prefixStateKey] ?? defaultPrefixValue;\n\n        return (\n          <AffixedField\n            key={key}\n            className={cx(options.inputClassName, component.classes)}\n            id={component.id}\n            label={resolve(component.label) || ''}\n            name={identifier}\n            placeholder={resolve(component.placeholder) || ''}\n            required={component.required || false}\n            error={error}\n            value={value}\n            type={fieldType}\n            prefixes={component.prefixes}\n            prefixValue={selectedPrefix}\n            onChange={(e: ChangeEvent<HTMLInputElement>): void => onInputChange(identifier, e.target.value)}\n            onBlur={(): void => options.onInputBlur?.(identifier)}\n            onPrefixChange={(newPrefix: string): void => onInputChange(prefixStateKey, newPrefix)}\n            onFocus={(): void => {\n              if (hasPrefixes && formValues[prefixStateKey] === undefined) {\n                onInputChange(prefixStateKey, defaultPrefixValue);\n              }\n              if (hasPostfix && formValues[postfixStateKey] === undefined) {\n                onInputChange(postfixStateKey, component.postfix!);\n              }\n            }}\n          />\n        );\n      }\n\n      const field: any = createField({\n        className: cx(options.inputClassName, component.classes),\n        error,\n        id: component.id,\n        label: resolve(component.label) || '',\n        name: identifier,\n        onBlur: () => options.onInputBlur?.(identifier),\n        onChange: (newValue: string) => onInputChange(identifier, newValue),\n        placeholder: resolve(component.placeholder) || '',\n        required: component.required || false,\n        type: fieldType as FieldType,\n        value,\n      });\n\n      return cloneElement(field, {key});\n    }\n\n    case EmbeddedFlowComponentType.OtpInput: {\n      const identifier: string = component.ref!;\n      const isDeviceUserCode: boolean = identifier === 'user_code';\n      const currentValue: string = formValues[identifier] || '';\n      const value: string = isDeviceUserCode ? currentValue.replace(/[-\\s]/g, '').toUpperCase() : currentValue;\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n\n      // Device Grant user codes are eight uppercase characters today. Keep this fallback in the SDK\n      // until the flow UI metadata can supply the configured code length.\n      const reportedLength: number = Number(options.additionalData?.['otpLength']);\n      const otpLength: number | undefined = isDeviceUserCode\n        ? 8\n        : Number.isInteger(reportedLength) && reportedLength > 0\n          ? reportedLength\n          : undefined;\n      const numericOnly: boolean = !isDeviceUserCode && options.additionalData?.['otpNumericOnly'] !== 'false';\n\n      const field: any = createField({\n        className: cx(options.inputClassName, component.classes),\n        error,\n        id: component.id,\n        label: resolve(component.label) || '',\n        length: otpLength,\n        name: identifier,\n        numericOnly,\n        separatorAfter: isDeviceUserCode ? 4 : undefined,\n        onBlur: () => options.onInputBlur?.(identifier),\n        onChange: (newValue: string) => onInputChange(identifier, newValue),\n        placeholder: resolve(component.placeholder) || '',\n        required: component.required || false,\n        type: FieldType.Otp,\n        value,\n      });\n\n      return cloneElement(field, {key});\n    }\n\n    case EmbeddedFlowComponentType.Action: {\n      const actionId: string = component.id;\n      const eventType: string = component.eventType || '';\n      const buttonText: string = resolve(component.label);\n      const componentVariant: string = component.variant || '';\n\n      // Only validate on submit type events.\n      const shouldSkipValidation: boolean = eventType.toUpperCase() !== EmbeddedFlowEventType.Submit;\n\n      // Determine the button type based on the event type. Default to 'submit' if not recognized.\n      const buttonTypeEnum = {\n        [EmbeddedFlowEventType.Submit]: 'submit',\n        [EmbeddedFlowEventType.Reset]: 'reset',\n        [EmbeddedFlowEventType.Cancel]: 'button',\n        [EmbeddedFlowEventType.Trigger]: 'button',\n        [EmbeddedFlowEventType.Back]: 'button',\n      };\n      const buttonType: HTMLButtonElement['type'] = buttonTypeEnum[eventType.toUpperCase()] ?? 'submit';\n\n      // Approval waits while an approved authorization detail shows a modified value that cannot be submitted.\n      const hasInvalidConsentApproval: boolean =\n        !shouldSkipValidation &&\n        componentVariant.toLowerCase() === 'primary' &&\n        isConsentApprovalBlocked(\n          (options.additionalData?.['consentPrompt'] as ConsentPromptData | undefined)?.purposes ?? [],\n          formValues,\n        );\n\n      const handleClick = (event: MouseEvent<HTMLButtonElement>): void => {\n        // Flow actions are handled by the SDK. Cancel the native button action before\n        // onSubmit can switch steps or replace the form; otherwise the browser tries to\n        // submit a form that React has already disconnected from the document.\n        event.preventDefault();\n\n        if (options.onSubmit) {\n          const formData: Record<string, any> = {};\n          Object.keys(formValues).forEach((field: any) => {\n            // Include all values, even empty strings, to ensure proper submission\n            formData[field] = formValues[field];\n          });\n\n          // For consent actions, build the consent_decisions JSON from the form values.\n          // The allow action captures per-attribute choices; the deny action sends\n          // all purposes as rejected so the backend ConsentExecutor can fail the flow.\n          const consentPrompt: ConsentPromptData | undefined = options.additionalData?.['consentPrompt'] as\n            | ConsentPromptData\n            | undefined;\n          if (consentPrompt && eventType.toUpperCase() === EmbeddedFlowEventType.Submit) {\n            const isDeny: boolean = componentVariant.toLowerCase() !== 'primary';\n            const decisions: ConsentDecisions = {\n              approved: !isDeny,\n              ...(isDeny ? {reason: ConsentConstants.REASON_USER_DENIED} : {}),\n              purposes: consentPrompt.purposes.map(\n                (p: ConsentPurposeData): ConsentPurposeDecision => ({\n                  approved: !isDeny,\n                  elements: [\n                    // Permission purposes carry no essential elements, so the server sends null here\n                    ...(p.essential ?? []).map((e): ConsentAttributeElement => ({approved: !isDeny, name: e.name})),\n                    ...(p.optional ?? []).map(\n                      (e): ConsentAttributeElement =>\n                        getConsentElementDecision(\n                          p.purposeId,\n                          e,\n                          !isDeny && formValues[getConsentOptionalKey(p.purposeId, e.name)] === 'true',\n                          formValues,\n                        ),\n                    ),\n                  ],\n                  purposeName: p.purposeName!,\n                }),\n              ),\n            };\n            formData['consent_decisions'] = JSON.stringify(decisions);\n          }\n\n          // For submit events, pass the form data to the onSubmit callback. For other event types, reset the form and call onSubmit with an empty data object.\n          if (eventType.toUpperCase() === EmbeddedFlowEventType.Submit) {\n            options.onSubmit(component, formData, shouldSkipValidation);\n          } else {\n            resetForm();\n            options.onSubmit(component, {}, shouldSkipValidation);\n          }\n        }\n      };\n\n      // Render branded social login buttons for known action IDs\n\n      const socialButtonClassName: string = cx(options.buttonClassName, component.classes);\n\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'google', authType, componentVariant)) {\n        return <GoogleButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'github', authType, componentVariant)) {\n        return <GitHubButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'facebook', authType, componentVariant)) {\n        return <FacebookButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'microsoft', authType, componentVariant)) {\n        return <MicrosoftButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'linkedin', authType, componentVariant)) {\n        return <LinkedInButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'ethereum', authType, componentVariant)) {\n        return (\n          <SignInWithEthereumButton\n            key={key}\n            id={component.id}\n            onClick={handleClick}\n            className={socialButtonClassName}\n          />\n        );\n      }\n      if (actionId === 'prompt_mobile' || eventType === 'prompt_mobile') {\n        return <SmsOtpButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n\n      const startIconEl: ReactElement | null = component.startIcon ? (\n        <img src={component.startIcon} alt=\"\" aria-hidden=\"true\" className={getAuthOptionIconClass()} />\n      ) : null;\n\n      const endIconEl: ReactElement | null = component.endIcon ? (\n        <img src={component.endIcon} alt=\"\" aria-hidden=\"true\" className={getAuthOptionIconClass()} />\n      ) : null;\n\n      return (\n        <Button\n          fullWidth\n          key={key}\n          id={component.id}\n          onClick={handleClick}\n          disabled={\n            isLoading ||\n            (!isFormValid && !shouldSkipValidation) ||\n            hasInvalidConsentApproval ||\n            options.isTimeoutDisabled ||\n            (component as any).config?.disabled\n          }\n          className={cx(options.buttonClassName, component.classes)}\n          data-testid=\"thunderid-signin-submit\"\n          variant={component.variant?.toLowerCase() === 'primary' ? 'solid' : 'outline'}\n          color={component.variant?.toLowerCase() === 'primary' ? 'primary' : 'secondary'}\n          startIcon={startIconEl}\n          endIcon={endIconEl}\n          type={buttonType}\n        >\n          {buttonText || 'Submit'}\n        </Button>\n      );\n    }\n\n    case EmbeddedFlowComponentType.Text: {\n      const variant: any = getTypographyVariant(component.variant!);\n      const color: TypographyColor | undefined = getTypographyColor(component.color);\n      const textAlignClass: string = css({\n        marginBottom: 2,\n        textAlign:\n          typeof component?.align === 'string' ? (component.align as React.CSSProperties['textAlign']) : 'left',\n      });\n      return (\n        <Typography\n          key={key}\n          id={component.id}\n          className={cx(component.classes, textAlignClass)}\n          variant={variant}\n          color={color}\n        >\n          {resolve(component.label)}\n        </Typography>\n      );\n    }\n\n    case EmbeddedFlowComponentType.Divider: {\n      return <Divider key={key}>{resolve(component.label) || ''}</Divider>;\n    }\n\n    case EmbeddedFlowComponentType.Select: {\n      const identifier: string = component.ref!;\n      const value: string = formValues[identifier] || '';\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n\n      // Options are pre-sanitized by flowTransformer to {value: string, label: string} format\n      const selectOptions: any = (component.options || []).map((opt: any) => ({\n        label: typeof opt === 'string' ? opt : String(opt.label ?? opt.value ?? ''),\n        value: typeof opt === 'string' ? opt : String(opt.value ?? ''),\n      }));\n\n      return (\n        <Select\n          key={key}\n          id={component.id}\n          name={identifier}\n          label={resolve(component.label) || ''}\n          placeholder={resolve(component.placeholder)}\n          required={component.required}\n          options={selectOptions}\n          value={value}\n          error={error}\n          onChange={(e: any): void => onInputChange(identifier, e.target.value)}\n          onBlur={(): any => options.onInputBlur?.(identifier)}\n          className={cx(options.inputClassName, component.classes)}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.DateInput: {\n      const identifier: string = component.ref!;\n      const value: string = formValues[identifier] || '';\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n\n      return (\n        <DatePicker\n          key={key}\n          id={component.id}\n          name={identifier}\n          label={resolve(component.label) || ''}\n          placeholder={resolve(component.placeholder)}\n          required={component.required}\n          dateFormat={component.dateFormat}\n          value={value}\n          error={error}\n          onChange={(e: any): void => onInputChange(identifier, e.target.value)}\n          onBlur={(): any => options.onInputBlur?.(identifier)}\n          className={cx(options.inputClassName, component.classes)}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.OuSelect:\n      return skipUnsupported('OU_SELECT');\n\n    // The resource pickers load with a signed-in user's access token, so without a data source, which is every flow\n    // except InviteUser, they are not drawn.\n    case EmbeddedFlowComponentType.UserSelect:\n      return options.fetchUsers ? (\n        <BaseUserSelect key={key} {...resourceSelectProps()} fetchUsers={options.fetchUsers} />\n      ) : (\n        skipUnsupported('USER_SELECT')\n      );\n\n    case EmbeddedFlowComponentType.AuthFlowSelect:\n      return options.fetchAuthFlows ? (\n        <BaseAuthFlowSelect key={key} {...resourceSelectProps()} fetchAuthFlows={options.fetchAuthFlows} />\n      ) : (\n        skipUnsupported('AUTH_FLOW_SELECT')\n      );\n\n    case EmbeddedFlowComponentType.UserTypeSelect:\n      return options.fetchUserTypes ? (\n        <BaseUserTypeSelect key={key} {...resourceSelectProps()} fetchUserTypes={options.fetchUserTypes} />\n      ) : (\n        skipUnsupported('USER_TYPE_SELECT')\n      );\n\n    case EmbeddedFlowComponentType.Block: {\n      if (component.components && component.components.length > 0) {\n        const formClass: string = css({\n          display: 'flex',\n          flexDirection: 'column',\n          gap: `calc(${theme?.vars?.spacing?.unit ?? '4px'} * 2)`,\n        });\n\n        const blockComponents: any = component.components\n          .map((childComponent: any, index: any) =>\n            createAuthComponentFromFlow(\n              childComponent,\n              formValues,\n              touchedFields,\n              formErrors,\n              isLoading,\n              isFormValid,\n              resetForm,\n              onInputChange,\n              authType,\n              {\n                ...options,\n                key: childComponent.id || `${component.id}_${index}`,\n              },\n            ),\n          )\n          .filter(Boolean);\n\n        // The submit button's `type=\"submit\"` (and pressing Enter in a field) would\n        // otherwise trigger the browser's native form submission — a GET request to\n        // the current URL with all field values (including passwords) as query params.\n        // Actual submission is handled entirely via `onClick`/`onSubmit` above.\n        return (\n          <form\n            id={component.id}\n            key={key}\n            className={cx(component.classes, formClass)}\n            onSubmit={(event: FormEvent<HTMLFormElement>): void => event.preventDefault()}\n          >\n            {blockComponents}\n          </form>\n        );\n      }\n      return null;\n    }\n\n    case EmbeddedFlowComponentType.RichText: {\n      const richTextAction: EmbeddedFlowComponentAction | undefined = component.action;\n\n      const dispatchRichTextAction = (): void => {\n        if (!richTextAction || !options.onSubmit) {\n          return;\n        }\n        const eventTypeValue = String(richTextAction.eventType ?? EmbeddedFlowEventType.Submit);\n        const shouldSkipValidation: boolean = eventTypeValue.toUpperCase() === String(EmbeddedFlowEventType.Trigger);\n        const syntheticAction: EmbeddedFlowComponent = {\n          eventType: eventTypeValue,\n          id: `${component.id}_action`,\n          ref: richTextAction.ref,\n          type: EmbeddedFlowComponentType.Action,\n        };\n        const formData: Record<string, string> = {};\n        Object.keys(formValues).forEach((field: string) => {\n          formData[field] = formValues[field];\n        });\n        options.onSubmit(syntheticAction, formData, shouldSkipValidation);\n      };\n\n      // Sentinel-anchor contract: only anchors carrying `data-action-ref` equal to\n      // richTextAction.ref dispatch the action. Anchors without the sentinel (or with\n      // a non-matching one) are treated as ordinary links and are ignored here.\n      const isMatchingSentinelAnchor = (anchor: HTMLAnchorElement): boolean =>\n        anchor.getAttribute('data-action-ref') === richTextAction?.ref;\n\n      const handleRichTextClick: React.MouseEventHandler<HTMLDivElement> | undefined = richTextAction\n        ? (event: React.MouseEvent<HTMLDivElement>): void => {\n            const anchor: HTMLAnchorElement | null = (event.target as HTMLElement).closest('a');\n            if (!anchor || !isMatchingSentinelAnchor(anchor)) {\n              return;\n            }\n            event.preventDefault();\n            dispatchRichTextAction();\n          }\n        : undefined;\n\n      const handleRichTextKeyDown: React.KeyboardEventHandler<HTMLDivElement> | undefined = richTextAction\n        ? (event: React.KeyboardEvent<HTMLDivElement>): void => {\n            if (event.key !== 'Enter' && event.key !== ' ') {\n              return;\n            }\n            const anchor: HTMLAnchorElement | null = (event.target as HTMLElement).closest('a');\n            if (!anchor || !isMatchingSentinelAnchor(anchor)) {\n              return;\n            }\n            event.preventDefault();\n            dispatchRichTextAction();\n          }\n        : undefined;\n\n      return (\n        // Sentinel anchors are made keyboard-operable via the container's onKeyDown\n        // (Enter/Space activate the matching anchor). Authors should ensure the anchor\n        // is focusable (`href` or `tabIndex`); the click+keydown delegation covers both\n        // pointer and keyboard activation once focus lands on the anchor.\n        // eslint-disable-next-line jsx-a11y/no-static-element-interactions\n        <div\n          key={key}\n          className={getRichTextClass()}\n          onClick={handleRichTextClick}\n          onKeyDown={handleRichTextKeyDown}\n          // Manually sanitizes with `DOMPurify`.\n          // IMPORTANT: DO NOT REMOVE OR MODIFY THIS SANITIZATION STEP.\n          dangerouslySetInnerHTML={{__html: DOMPurify.sanitize(resolveEmojiUrisInHtml(resolve(component.label)))}}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.Image: {\n      const explicitHeight: string = resolve(component.height?.toString());\n      const explicitWidth: string = resolve(component.width?.toString());\n      return (\n        <ImageComponent\n          key={key}\n          component={\n            {\n              config: {\n                alt: resolve(component.alt) || resolve(component.label) || 'Image',\n                height: explicitHeight || (options.inStack ? '50' : 'auto'),\n                src: resolve(component.src),\n                width: explicitWidth || (options.inStack ? '50' : '100%'),\n              },\n            } as any\n          }\n          formErrors={undefined!}\n          formValues={undefined!}\n          isFormValid={false}\n          isLoading={false}\n          onInputChange={(): void => {\n            throw new Error('Function not implemented.');\n          }}\n          touchedFields={undefined!}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.Icon: {\n      const iconName: string = component.name || '';\n      const IconComponent: any = flowIconRegistry[iconName];\n      if (!IconComponent) {\n        logger.warn(`Unknown icon name: \"${iconName}\". Skipping render.`);\n        return null;\n      }\n      return <IconComponent key={key} size={component.size || 24} color={component.color || 'currentColor'} />;\n    }\n\n    case EmbeddedFlowComponentType.Stack: {\n      const direction: string = (component as any).direction || 'row';\n      const gap: number = (component as any).gap ?? 2;\n      const align: string = (component as any).align || 'center';\n      const justify: string = (component as any).justify || 'flex-start';\n\n      // `items` is the number of slots across the main axis and `direction` picks\n      // that axis: with `row` it is the column count (items: 2 with four buttons\n      // renders a 2 x 2 grid), and with `column` it is the row count and children\n      // flow into further columns. Fewer than two slots keeps the flex layout, so\n      // stacks authored before grid support are unaffected.\n      const rawItems: string | number | undefined = component.items;\n      const parsedItems: number =\n        typeof rawItems === 'string' ? Number(rawItems) : typeof rawItems === 'number' ? rawItems : NaN;\n      const items: number | null =\n        Number.isFinite(parsedItems) && Math.floor(parsedItems) >= 2\n          ? Math.min(Math.floor(parsedItems), MAX_STACK_ITEMS)\n          : null;\n      // CSS Grid has no reverse auto-flow, so the reverse variants fall back to\n      // their base axis rather than silently becoming a row.\n      const isColumn: boolean = direction.startsWith('column');\n      const gridJustify: string = component.justify ?? 'stretch';\n      // Equal `1fr` tracks fill the container, leaving `justify-content` no free\n      // space to distribute. Content-sized tracks restore it, so every justify\n      // value has a visible effect while the default stays an even split.\n      const track: string = gridJustify === 'stretch' ? '1fr' : 'auto';\n\n      const stackStyle: CSSProperties =\n        items !== null\n          ? {\n              alignItems: component.align ?? 'stretch',\n              display: 'grid',\n              gap: `${gap * 0.5}rem`,\n              gridAutoFlow: isColumn ? 'column' : 'row',\n              justifyContent: gridJustify,\n              width: '100%',\n              ...(isColumn\n                ? {gridTemplateRows: `repeat(${items}, ${track})`}\n                : {gridTemplateColumns: `repeat(${items}, ${track})`}),\n            }\n          : {\n              alignItems: align,\n              display: 'flex',\n              flexDirection: direction as CSSProperties['flexDirection'],\n              flexWrap: 'wrap',\n              gap: `${gap * 0.5}rem`,\n              justifyContent: justify,\n            };\n\n      const stackClass: string = css(stackStyle as CSSInterpolation);\n\n      const stackChildren: (ReactElement | null)[] = component.components\n        ? component.components.map((childComponent: any, index: number) =>\n            createAuthComponentFromFlow(\n              childComponent,\n              formValues,\n              touchedFields,\n              formErrors,\n              isLoading,\n              isFormValid,\n              resetForm,\n              onInputChange,\n              authType,\n              {\n                ...options,\n                inStack: true,\n                key: childComponent.id || `${component.id}_${index}`,\n              },\n            ),\n          )\n        : [];\n\n      return (\n        <div key={key} id={component.id} className={cx(component.classes, stackClass)}>\n          {stackChildren}\n        </div>\n      );\n    }\n\n    case EmbeddedFlowComponentType.Consent: {\n      const consentPromptRawData: ConsentPromptData | string | undefined = options.additionalData?.['consentPrompt'];\n\n      return (\n        <Consent\n          key={key}\n          consentData={consentPromptRawData as any}\n          formValues={formValues}\n          onInputChange={onInputChange}\n          t={options.t}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.Timer: {\n      const textTemplate: string = resolve((component as any).label) || 'Time remaining: {time}';\n      const timeoutMs: number = Number(options.additionalData?.['stepTimeout']) || 0;\n      const expiresIn: number = timeoutMs > 0 ? Math.max(0, Math.floor((timeoutMs - Date.now()) / 1000)) : 0;\n\n      return <FlowTimer key={key} expiresIn={expiresIn} textTemplate={textTemplate} />;\n    }\n\n    case EmbeddedFlowComponentType.CopyableText: {\n      const sourceKey: string | undefined = (component as any).source;\n      const value: string = sourceKey && options.additionalData ? String(options.additionalData[sourceKey] ?? '') : '';\n      const labelText: string | undefined = resolve((component as any).label) || undefined;\n\n      return <CopyableText key={key} label={labelText} masked={Boolean(component.masked)} value={value} />;\n    }\n\n    case EmbeddedFlowComponentType.KeyValueList: {\n      const sourceKey: string | undefined = component.source;\n      const pairs: KeyValuePair[] = parseKeyValuePairs(\n        sourceKey && options.additionalData ? options.additionalData[sourceKey] : undefined,\n      ).map((pair: KeyValuePair) => ({...pair, label: resolve(pair.label)}));\n\n      // An empty panel tells the user nothing, so a list with no pairs renders nothing at all.\n      if (pairs.length === 0) {\n        return null;\n      }\n\n      return <KeyValueList key={key} label={resolve(component.label) || undefined} pairs={pairs} />;\n    }\n\n    default:\n      // Gracefully handle unsupported component types by returning null\n      logger.warn(`Unsupported component type: ${component.type}. Skipping render.`);\n      return null;\n  }\n};\n\n/**\n * Processes an array of components and renders them as React elements for sign-in.\n */\nexport const renderSignInComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    inputClassName?: string;\n    /** Flag to determine if the step timeline has expired */\n    isTimeoutDisabled?: boolean;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'signin',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for sign-up.\n */\nexport const renderSignUpComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    inputClassName?: string;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'signup',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for recovery flow.\n */\nexport const renderRecoveryComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    inputClassName?: string;\n    /** Flag to determine if the step timeline has expired */\n    isTimeoutDisabled?: boolean;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'recovery',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for attribute verification.\n */\nexport const renderVerificationComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: Parameters<typeof renderRecoveryComponents>[8],\n): ReactElement[] =>\n  components\n    .map((component: EmbeddedFlowComponent, index: number) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'verification',\n        {\n          ...options,\n          key: component.id ?? index,\n          renderResend: true,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for invite user.\n * This is used by both InviteUser and AcceptInvite components.\n */\nexport const renderInviteUserComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    /** Function to fetch child organization units for OU_SELECT components. */\n    fetchOrganizationUnitChildren?: (\n      parentId: string,\n      limit: number,\n      offset: number,\n    ) => Promise<OrganizationUnitListResponse>;\n    inputClassName?: string;\n    /** Data source for AUTH_FLOW_SELECT fields. */\n    fetchAuthFlows?: FetchAuthFlows;\n    /** Data source for USER_SELECT fields. */\n    fetchUsers?: FetchUsers;\n    /** Data source for USER_TYPE_SELECT fields. */\n    fetchUserTypes?: FetchUserTypes;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    /** Called with the error of a failed picker load. The form itself shows no error for it. */\n    onPickerError?: (error: Error) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'signup',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmEA,MAAMA,WAA0D,6BAC9D,oBACA,oBACD;;;;;;;;;AAiBD,IAAIC;;AAGJ,SAAS,mBAA2B;AAClC,wBAAuB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;AA0B1B,QAAO;;AAGT,IAAIC;AAEJ,SAAS,yBAAiC;AACxC,8BAA6B,IAAI;EAAC,QAAQ;EAAU,WAAW;EAAW,OAAO;EAAS,CAAC;AAC3F,QAAO;;;;;;AAST,MAAM,kBAAkB;AAExB,MAAM,gBAAgB,YAAkD;AACtE,SAAQ,SAAR;EACE,KAAK,0BAA0B,WAC7B,QAAO,UAAU;EACnB,KAAK,0BAA0B,WAC7B,QAAO,UAAU;EACnB,KAAK,0BAA0B,cAC7B,QAAO,UAAU;EACnB,KAAK,0BAA0B;EAC/B,QACE,QAAO,UAAU;;;;;;AAOvB,MAAM,wBAAwB,YAAyB;AAiBrD,QAhBuE;EACrE,QAAQ;EACR,QAAQ;EACR,aAAa;EACb,SAAS;EACT,WAAW;EACX,WAAW;EACX,WAAW;EACX,WAAW;EACX,WAAW;EACX,WAAW;EACX,UAAU;EACV,YAAY;EACZ,YAAY;EACb,CAEiB,YAAY;;;AAIhC,MAAM,sBAAsB,UAAgD;AAC1E,SAAQ,OAAO,aAAa,EAA5B;EACE,KAAK,QACH,QAAO;EACT,KAAK,UACH,QAAO;EACT,KAAK,UACH,QAAO;EACT,KAAK,OACH,QAAO;EACT,KAAK,UACH,QAAO;EACT,KAAK,YACH,QAAO;EACT,QACE;;;;;;AAON,MAAM,yBACJ,UACA,WACA,YACA,UACA,UAEA,sBACY;CACZ,MAAMC,aAAkB,GAAG,SAAS;CACpC,MAAMC,kBAAuB,aAAa,cAAc,cAAc;AAItE,KAAI,WAAW,aAAa,CAAC,SAAS,SAAS,CAC7C,QAAO;AAIT,KAAI,aAAa,SACf,QAAO,mBAAmB,WAAW,aAAa,CAAC,SAAS,SAAS;AAGvE,QAAO;;;;;AAMT,MAAM,+BACJ,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA,UAmCI,EAAE,KACkB;CACxB,MAAMC,QAAa,QAAQ;CAC3B,MAAMC,kBAAwC,QAAQ,oBAAoB,EAAE;CAE5E,MAAMC,MAAuB,QAAQ,OAAO,UAAU;CAEtD,MAAMC,iBACJ,gBAAgB,UAAU,OAAO,gBAAgB,UAAU;AAC7D,KAAI,gBAAgB;EAgBlB,MAAMC,WAAgC,eAAe,WAfX;GACxC,gBAAgB,QAAQ;GACxB;GACA;GACA;GACA;GACA;GACA,MAAM,QAAQ;GACd;GACA,aAAa,QAAQ;GACrB;GACA,UAAU,QAAQ;GAClB;GACD,CAEyE;AAE1E,SAAO,WAAW,aAAa,UAAU,EAAC,KAAI,CAAC,GAAG;;;CAIpD,MAAM,WAAW,SAAqC;AACpD,MAAI,CAAC,QAAS,CAAC,QAAQ,KAAK,CAAC,QAAQ,KACnC,QAAO,QAAQ;AAEjB,SAAO,4BAA4B,MAAM;GAAC,MAAM,QAAQ;GAAM,GAAG,QAAQ,OAAO,MAAsB;GAAG,CAAC;;CAI5G,MAAM,4BAAiF;EACrF,MAAMC,aAAqB,UAAU;EACrC,MAAMC,YAAqB,cAAc,eAAe;AAExD,SAAO;GACL,WAAW,GAAG,QAAQ,gBAAgB,UAAU,QAAQ;GACxD;GACA,OAAO,YAAY,WAAW,cAAc;GAC5C,IAAI,UAAU;GACd,OAAO,QAAQ,UAAU,MAAM,IAAI;GACnC,MAAM;GACN,cAAoB,QAAQ,cAAc,WAAW;GACrD,WAAW,UAAgD,cAAc,YAAY,MAAM,OAAO,MAAM;GACxG,SAAS,QAAQ;GACjB,aAAa,QAAQ,UAAU,YAAY;GAC3C,UAAU,UAAU;GACpB,OAAO,WAAW,eAAe;GAClC;;CAIH,MAAM,mBAAmB,aAA2B;AAClD,WAAO,KAAK,GAAG,SAAS,oDAAoD;AAE5E,SAAO;;AAIT,KAAI,UAAU,SAAS,0BAA0B,UAAU,QAAQ,aACjE,QACE,oBAACC;EACC;EAEA,IAAI,UAAU;EACd,eAAqB,QAAQ,WAAW,WAAW,EAAE,EAAE,KAAK;EAC5D,UAAU,aAAa,QAAQ;EAC/B,WAAW,GAAG,QAAQ,iBAAiB,UAAU,QAAQ;EACzD,SAAQ;EACR,OAAM;EACN,MAAK;YAEJ,QAAQ,UAAU,MAAM;IATpB,IAUE;AAIb,SAAQ,UAAU,MAAlB;EACE,KAAK,0BAA0B;EAC/B,KAAK,0BAA0B;EAC/B,KAAK,0BAA0B;EAC/B,KAAK,0BAA0B,YAAY;GACzC,MAAMF,aAAqB,UAAU;GACrC,MAAMG,QAAgB,WAAW,eAAe;GAEhD,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;GAC3D,MAAMC,YAAoB,aAAa,UAAU,KAAK;GAOtD,MAAMC,cAAuB,CAAC,CAAC,UAAU,YAAY,UAAU,SAAS,SAAS;GACjF,MAAMC,aAAsB,OAAO,UAAU,YAAY,YAAY,UAAU,QAAQ,SAAS;AAEhG,OAAI,eAAe,YAAY;IAC7B,MAAMC,iBAAyB,eAAe,YAAY,QAAQ,OAAO;IACzE,MAAMC,kBAA0B,gBAAgB,YAAY,QAAQ,OAAO;IAC3E,MAAMC,qBAA6B,cAC/B,OAAO,UAAU,aAAa,WAC5B,UAAU,WACT,UAAU,SAA4B,GAAG,QAC5C;IACJ,MAAMC,iBAAyB,WAAW,mBAAmB;AAE7D,WACE,oBAACC;KAEC,WAAW,GAAG,QAAQ,gBAAgB,UAAU,QAAQ;KACxD,IAAI,UAAU;KACd,OAAO,QAAQ,UAAU,MAAM,IAAI;KACnC,MAAM;KACN,aAAa,QAAQ,UAAU,YAAY,IAAI;KAC/C,UAAU,UAAU,YAAY;KACzB;KACA;KACP,MAAM;KACN,UAAU,UAAU;KACpB,aAAa;KACb,WAAW,MAA2C,cAAc,YAAY,EAAE,OAAO,MAAM;KAC/F,cAAoB,QAAQ,cAAc,WAAW;KACrD,iBAAiB,cAA4B,cAAc,gBAAgB,UAAU;KACrF,eAAqB;AACnB,UAAI,eAAe,WAAW,oBAAoB,OAChD,eAAc,gBAAgB,mBAAmB;AAEnD,UAAI,cAAc,WAAW,qBAAqB,OAChD,eAAc,iBAAiB,UAAU,QAAS;;OApBjD,IAuBL;;AAkBN,UAAO,aAdY,YAAY;IAC7B,WAAW,GAAG,QAAQ,gBAAgB,UAAU,QAAQ;IACxD;IACA,IAAI,UAAU;IACd,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,MAAM;IACN,cAAc,QAAQ,cAAc,WAAW;IAC/C,WAAW,aAAqB,cAAc,YAAY,SAAS;IACnE,aAAa,QAAQ,UAAU,YAAY,IAAI;IAC/C,UAAU,UAAU,YAAY;IAChC,MAAM;IACN;IACD,CAAC,EAEyB,EAAC,KAAI,CAAC;;EAGnC,KAAK,0BAA0B,UAAU;GACvC,MAAMZ,aAAqB,UAAU;GACrC,MAAMa,mBAA4B,eAAe;GACjD,MAAMC,eAAuB,WAAW,eAAe;GACvD,MAAMX,QAAgB,mBAAmB,aAAa,QAAQ,UAAU,GAAG,CAAC,aAAa,GAAG;GAE5F,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;GAI3D,MAAMW,iBAAyB,OAAO,QAAQ,iBAAiB,aAAa;GAC5E,MAAMC,YAAgC,mBAClC,IACA,OAAO,UAAU,eAAe,IAAI,iBAAiB,IACnD,iBACA;GACN,MAAMC,cAAuB,CAAC,oBAAoB,QAAQ,iBAAiB,sBAAsB;AAmBjG,UAAO,aAjBY,YAAY;IAC7B,WAAW,GAAG,QAAQ,gBAAgB,UAAU,QAAQ;IACxD;IACA,IAAI,UAAU;IACd,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,QAAQ;IACR,MAAM;IACN;IACA,gBAAgB,mBAAmB,IAAI;IACvC,cAAc,QAAQ,cAAc,WAAW;IAC/C,WAAW,aAAqB,cAAc,YAAY,SAAS;IACnE,aAAa,QAAQ,UAAU,YAAY,IAAI;IAC/C,UAAU,UAAU,YAAY;IAChC,MAAM,UAAU;IAChB;IACD,CAAC,EAEyB,EAAC,KAAI,CAAC;;EAGnC,KAAK,0BAA0B,QAAQ;GACrC,MAAMC,WAAmB,UAAU;GACnC,MAAMC,YAAoB,UAAU,aAAa;GACjD,MAAMC,aAAqB,QAAQ,UAAU,MAAM;GACnD,MAAMC,mBAA2B,UAAU,WAAW;GAGtD,MAAMC,uBAAgC,UAAU,aAAa,KAAK,sBAAsB;GAUxF,MAAMC,aAPiB;KACpB,sBAAsB,SAAS;KAC/B,sBAAsB,QAAQ;KAC9B,sBAAsB,SAAS;KAC/B,sBAAsB,UAAU;KAChC,sBAAsB,OAAO;IAC/B,CAC4D,UAAU,aAAa,KAAK;GAGzF,MAAMC,4BACJ,CAAC,wBACD,iBAAiB,aAAa,KAAK,aACnCC,kCACG,QAAQ,iBAAiB,mBAAoD,YAAY,EAAE,EAC5F,WACD;GAEH,MAAM,eAAe,UAA+C;AAIlE,UAAM,gBAAgB;AAEtB,QAAI,QAAQ,UAAU;KACpB,MAAMC,WAAgC,EAAE;AACxC,YAAO,KAAK,WAAW,CAAC,SAAS,UAAe;AAE9C,eAAS,SAAS,WAAW;OAC7B;KAKF,MAAMC,gBAA+C,QAAQ,iBAAiB;AAG9E,SAAI,iBAAiB,UAAU,aAAa,KAAK,sBAAsB,QAAQ;MAC7E,MAAMC,SAAkB,iBAAiB,aAAa,KAAK;MAC3D,MAAMC,YAA8B;OAClC,UAAU,CAAC;OACX,GAAI,SAAS,EAAC,QAAQ,iBAAiB,oBAAmB,GAAG,EAAE;OAC/D,UAAU,cAAc,SAAS,KAC9B,OAAmD;QAClD,UAAU,CAAC;QACX,UAAU,CAER,IAAI,EAAE,aAAa,EAAE,EAAE,KAAK,OAAgC;SAAC,UAAU,CAAC;SAAQ,MAAM,EAAE;SAAK,EAAE,EAC/F,IAAI,EAAE,YAAY,EAAE,EAAE,KACnB,MACC,0BACE,EAAE,WACF,GACA,CAAC,UAAU,WAAW,sBAAsB,EAAE,WAAW,EAAE,KAAK,MAAM,QACtE,WACD,CACJ,CACF;QACD,aAAa,EAAE;QAChB,EACF;OACF;AACD,eAAS,uBAAuB,KAAK,UAAU,UAAU;;AAI3D,SAAI,UAAU,aAAa,KAAK,sBAAsB,OACpD,SAAQ,SAAS,WAAW,UAAU,qBAAqB;UACtD;AACL,iBAAW;AACX,cAAQ,SAAS,WAAW,EAAE,EAAE,qBAAqB;;;;GAO3D,MAAMC,wBAAgC,GAAG,QAAQ,iBAAiB,UAAU,QAAQ;AAEpF,OAAI,sBAAsB,UAAU,WAAW,YAAY,UAAU,UAAU,iBAAiB,CAC9F,QAAO,oBAACC;IAAuB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE7G,OAAI,sBAAsB,UAAU,WAAW,YAAY,UAAU,UAAU,iBAAiB,CAC9F,QAAO,oBAACC;IAAuB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE7G,OAAI,sBAAsB,UAAU,WAAW,YAAY,YAAY,UAAU,iBAAiB,CAChG,QAAO,oBAACC;IAAyB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE/G,OAAI,sBAAsB,UAAU,WAAW,YAAY,aAAa,UAAU,iBAAiB,CACjG,QAAO,oBAACC;IAA0B,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAEhH,OAAI,sBAAsB,UAAU,WAAW,YAAY,YAAY,UAAU,iBAAiB,CAChG,QAAO,oBAACC;IAAyB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE/G,OAAI,sBAAsB,UAAU,WAAW,YAAY,YAAY,UAAU,iBAAiB,CAChG,QACE,oBAACC;IAEC,IAAI,UAAU;IACd,SAAS;IACT,WAAW;MAHN,IAIL;AAGN,OAAI,aAAa,mBAAmB,cAAc,gBAChD,QAAO,oBAACC;IAAuB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;GAG7G,MAAMC,cAAmC,UAAU,YACjD,oBAAC;IAAI,KAAK,UAAU;IAAW,KAAI;IAAG,eAAY;IAAO,WAAW,wBAAwB;KAAI,GAC9F;GAEJ,MAAMC,YAAiC,UAAU,UAC/C,oBAAC;IAAI,KAAK,UAAU;IAAS,KAAI;IAAG,eAAY;IAAO,WAAW,wBAAwB;KAAI,GAC5F;AAEJ,UACE,oBAACrC;IACC;IAEA,IAAI,UAAU;IACd,SAAS;IACT,UACE,aACC,CAAC,eAAe,CAAC,wBAClB,6BACA,QAAQ,qBACP,UAAkB,QAAQ;IAE7B,WAAW,GAAG,QAAQ,iBAAiB,UAAU,QAAQ;IACzD,eAAY;IACZ,SAAS,UAAU,SAAS,aAAa,KAAK,YAAY,UAAU;IACpE,OAAO,UAAU,SAAS,aAAa,KAAK,YAAY,YAAY;IACpE,WAAW;IACX,SAAS;IACT,MAAM;cAEL,cAAc;MAlBV,IAmBE;;EAIb,KAAK,0BAA0B,MAAM;GACnC,MAAMsC,UAAe,qBAAqB,UAAU,QAAS;GAC7D,MAAMC,QAAqC,mBAAmB,UAAU,MAAM;GAC9E,MAAMC,iBAAyB,IAAI;IACjC,cAAc;IACd,WACE,OAAO,WAAW,UAAU,WAAY,UAAU,QAA6C;IAClG,CAAC;AACF,UACE,oBAACC;IAEC,IAAI,UAAU;IACd,WAAW,GAAG,UAAU,SAAS,eAAe;IACvC;IACF;cAEN,QAAQ,UAAU,MAAM;MANpB,IAOM;;EAIjB,KAAK,0BAA0B,QAC7B,QAAO,oBAACC,6BAAmB,QAAQ,UAAU,MAAM,IAAI,MAAlC,IAA+C;EAGtE,KAAK,0BAA0B,QAAQ;GACrC,MAAM5C,aAAqB,UAAU;GACrC,MAAMG,QAAgB,WAAW,eAAe;GAEhD,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;GAG3D,MAAMyC,iBAAsB,UAAU,WAAW,EAAE,EAAE,KAAK,SAAc;IACtE,OAAO,OAAO,QAAQ,WAAW,MAAM,OAAO,IAAI,SAAS,IAAI,SAAS,GAAG;IAC3E,OAAO,OAAO,QAAQ,WAAW,MAAM,OAAO,IAAI,SAAS,GAAG;IAC/D,EAAE;AAEH,UACE,oBAACC;IAEC,IAAI,UAAU;IACd,MAAM;IACN,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,aAAa,QAAQ,UAAU,YAAY;IAC3C,UAAU,UAAU;IACpB,SAAS;IACF;IACA;IACP,WAAW,MAAiB,cAAc,YAAY,EAAE,OAAO,MAAM;IACrE,cAAmB,QAAQ,cAAc,WAAW;IACpD,WAAW,GAAG,QAAQ,gBAAgB,UAAU,QAAQ;MAXnD,IAYL;;EAIN,KAAK,0BAA0B,WAAW;GACxC,MAAM9C,aAAqB,UAAU;GACrC,MAAMG,QAAgB,WAAW,eAAe;GAEhD,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;AAE3D,UACE,oBAAC2C;IAEC,IAAI,UAAU;IACd,MAAM;IACN,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,aAAa,QAAQ,UAAU,YAAY;IAC3C,UAAU,UAAU;IACpB,YAAY,UAAU;IACf;IACA;IACP,WAAW,MAAiB,cAAc,YAAY,EAAE,OAAO,MAAM;IACrE,cAAmB,QAAQ,cAAc,WAAW;IACpD,WAAW,GAAG,QAAQ,gBAAgB,UAAU,QAAQ;MAXnD,IAYL;;EAIN,KAAK,0BAA0B,SAC7B,QAAO,gBAAgB,YAAY;EAIrC,KAAK,0BAA0B,WAC7B,QAAO,QAAQ,aACb,oBAACC;GAAyB,GAAI,qBAAqB;GAAE,YAAY,QAAQ;KAApD,IAAkE,GAEvF,gBAAgB,cAAc;EAGlC,KAAK,0BAA0B,eAC7B,QAAO,QAAQ,iBACb,oBAACC;GAA6B,GAAI,qBAAqB;GAAE,gBAAgB,QAAQ;KAAxD,IAA0E,GAEnG,gBAAgB,mBAAmB;EAGvC,KAAK,0BAA0B,eAC7B,QAAO,QAAQ,iBACb,oBAACC;GAA6B,GAAI,qBAAqB;GAAE,gBAAgB,QAAQ;KAAxD,IAA0E,GAEnG,gBAAgB,mBAAmB;EAGvC,KAAK,0BAA0B;AAC7B,OAAI,UAAU,cAAc,UAAU,WAAW,SAAS,GAAG;IAC3D,MAAMC,YAAoB,IAAI;KAC5B,SAAS;KACT,eAAe;KACf,KAAK,QAAQ,OAAO,MAAM,SAAS,QAAQ,MAAM;KAClD,CAAC;IAEF,MAAMC,kBAAuB,UAAU,WACpC,KAAK,gBAAqB,UACzB,4BACE,gBACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;KACE,GAAG;KACH,KAAK,eAAe,MAAM,GAAG,UAAU,GAAG,GAAG;KAC9C,CACF,CACF,CACA,OAAO,QAAQ;AAMlB,WACE,oBAAC;KACC,IAAI,UAAU;KAEd,WAAW,GAAG,UAAU,SAAS,UAAU;KAC3C,WAAW,UAA4C,MAAM,gBAAgB;eAE5E;OAJI,IAKA;;AAGX,UAAO;EAGT,KAAK,0BAA0B,UAAU;GACvC,MAAMC,iBAA0D,UAAU;GAE1E,MAAM,+BAAqC;AACzC,QAAI,CAAC,kBAAkB,CAAC,QAAQ,SAC9B;IAEF,MAAM,iBAAiB,OAAO,eAAe,aAAa,sBAAsB,OAAO;IACvF,MAAM/B,uBAAgC,eAAe,aAAa,KAAK,OAAO,sBAAsB,QAAQ;IAC5G,MAAMgC,kBAAyC;KAC7C,WAAW;KACX,IAAI,GAAG,UAAU,GAAG;KACpB,KAAK,eAAe;KACpB,MAAM,0BAA0B;KACjC;IACD,MAAMC,WAAmC,EAAE;AAC3C,WAAO,KAAK,WAAW,CAAC,SAAS,UAAkB;AACjD,cAAS,SAAS,WAAW;MAC7B;AACF,YAAQ,SAAS,iBAAiB,UAAU,qBAAqB;;GAMnE,MAAM,4BAA4B,WAChC,OAAO,aAAa,kBAAkB,KAAK,gBAAgB;GAE7D,MAAMC,sBAA2E,kBAC5E,UAAkD;IACjD,MAAMC,SAAoC,MAAM,OAAuB,QAAQ,IAAI;AACnF,QAAI,CAAC,UAAU,CAAC,yBAAyB,OAAO,CAC9C;AAEF,UAAM,gBAAgB;AACtB,4BAAwB;OAE1B;GAEJ,MAAMC,wBAAgF,kBACjF,UAAqD;AACpD,QAAI,MAAM,QAAQ,WAAW,MAAM,QAAQ,IACzC;IAEF,MAAMD,SAAoC,MAAM,OAAuB,QAAQ,IAAI;AACnF,QAAI,CAAC,UAAU,CAAC,yBAAyB,OAAO,CAC9C;AAEF,UAAM,gBAAgB;AACtB,4BAAwB;OAE1B;AAEJ,UAME,oBAAC;IAEC,WAAW,kBAAkB;IAC7B,SAAS;IACT,WAAW;IAGX,yBAAyB,EAAC,QAAQ,UAAU,SAAS,uBAAuB,QAAQ,UAAU,MAAM,CAAC,CAAC,EAAC;MANlG,IAOL;;EAIN,KAAK,0BAA0B,OAAO;GACpC,MAAME,iBAAyB,QAAQ,UAAU,QAAQ,UAAU,CAAC;GACpE,MAAMC,gBAAwB,QAAQ,UAAU,OAAO,UAAU,CAAC;AAClE,UACE,oBAACC;IAEC,WACE,EACE,QAAQ;KACN,KAAK,QAAQ,UAAU,IAAI,IAAI,QAAQ,UAAU,MAAM,IAAI;KAC3D,QAAQ,mBAAmB,QAAQ,UAAU,OAAO;KACpD,KAAK,QAAQ,UAAU,IAAI;KAC3B,OAAO,kBAAkB,QAAQ,UAAU,OAAO;KACnD,EACF;IAEH,YAAY;IACZ,YAAY;IACZ,aAAa;IACb,WAAW;IACX,qBAA2B;AACzB,WAAM,IAAI,MAAM,4BAA4B;;IAE9C,eAAe;MAlBV,IAmBL;;EAIN,KAAK,0BAA0B,MAAM;GACnC,MAAMC,WAAmB,UAAU,QAAQ;GAC3C,MAAMC,gBAAqBC,yBAAiB;AAC5C,OAAI,CAAC,eAAe;AAClB,aAAO,KAAK,uBAAuB,SAAS,qBAAqB;AACjE,WAAO;;AAET,UAAO,oBAAC;IAAwB,MAAM,UAAU,QAAQ;IAAI,OAAO,UAAU,SAAS;MAA3D,IAA6E;;EAG1G,KAAK,0BAA0B,OAAO;GACpC,MAAMC,YAAqB,UAAkB,aAAa;GAC1D,MAAMC,MAAe,UAAkB,OAAO;GAC9C,MAAMC,QAAiB,UAAkB,SAAS;GAClD,MAAMC,UAAmB,UAAkB,WAAW;GAOtD,MAAMC,WAAwC,UAAU;GACxD,MAAMC,cACJ,OAAO,aAAa,WAAW,OAAO,SAAS,GAAG,OAAO,aAAa,WAAW,WAAW;GAC9F,MAAMC,QACJ,OAAO,SAAS,YAAY,IAAI,KAAK,MAAM,YAAY,IAAI,IACvD,KAAK,IAAI,KAAK,MAAM,YAAY,EAAE,gBAAgB,GAClD;GAGN,MAAMC,WAAoB,UAAU,WAAW,SAAS;GACxD,MAAMC,cAAsB,UAAU,WAAW;GAIjD,MAAMC,QAAgB,gBAAgB,YAAY,QAAQ;GAwB1D,MAAMC,aAAqB,IArBzB,UAAU,OACN;IACE,YAAY,UAAU,SAAS;IAC/B,SAAS;IACT,KAAK,GAAG,MAAM,GAAI;IAClB,cAAc,WAAW,WAAW;IACpC,gBAAgB;IAChB,OAAO;IACP,GAAI,WACA,EAAC,kBAAkB,UAAU,MAAM,IAAI,MAAM,IAAG,GAChD,EAAC,qBAAqB,UAAU,MAAM,IAAI,MAAM,IAAG;IACxD,GACD;IACE,YAAY;IACZ,SAAS;IACT,eAAe;IACf,UAAU;IACV,KAAK,GAAG,MAAM,GAAI;IAClB,gBAAgB;IACjB,CAEuD;GAE9D,MAAMC,gBAAyC,UAAU,aACrD,UAAU,WAAW,KAAK,gBAAqB,UAC7C,4BACE,gBACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;IACE,GAAG;IACH,SAAS;IACT,KAAK,eAAe,MAAM,GAAG,UAAU,GAAG,GAAG;IAC9C,CACF,CACF,GACD,EAAE;AAEN,UACE,oBAAC;IAAc,IAAI,UAAU;IAAI,WAAW,GAAG,UAAU,SAAS,WAAW;cAC1E;MADO,IAEJ;;EAIV,KAAK,0BAA0B,SAAS;GACtC,MAAMC,uBAA+D,QAAQ,iBAAiB;AAE9F,UACE,oBAACC;IAEC,aAAa;IACD;IACG;IACf,GAAG,QAAQ;MAJN,IAKL;;EAIN,KAAK,0BAA0B,OAAO;GACpC,MAAMC,eAAuB,QAAS,UAAkB,MAAM,IAAI;GAClE,MAAMC,YAAoB,OAAO,QAAQ,iBAAiB,eAAe,IAAI;AAG7E,UAAO,oBAACC;IAAoB,WAFF,YAAY,IAAI,KAAK,IAAI,GAAG,KAAK,OAAO,YAAY,KAAK,KAAK,IAAI,IAAK,CAAC,GAAG;IAErC;MAAzC,IAAyD;;EAGlF,KAAK,0BAA0B,cAAc;GAC3C,MAAMC,YAAiC,UAAkB;GACzD,MAAM/E,QAAgB,aAAa,QAAQ,iBAAiB,OAAO,QAAQ,eAAe,cAAc,GAAG,GAAG;AAG9G,UAAO,oBAACgF;IAAuB,OAFO,QAAS,UAAkB,MAAM,IAAI;IAE1B,QAAQ,QAAQ,UAAU,OAAO;IAAS;MAAjE,IAA0E;;EAGtG,KAAK,0BAA0B,cAAc;GAC3C,MAAMD,YAAgC,UAAU;GAChD,MAAME,QAAwB,mBAC5B,aAAa,QAAQ,iBAAiB,QAAQ,eAAe,aAAa,OAC3E,CAAC,KAAK,UAAwB;IAAC,GAAG;IAAM,OAAO,QAAQ,KAAK,MAAM;IAAC,EAAE;AAGtE,OAAI,MAAM,WAAW,EACnB,QAAO;AAGT,UAAO,oBAACC;IAAuB,OAAO,QAAQ,UAAU,MAAM,IAAI;IAAkB;MAA1D,IAAmE;;EAG/F;AAEE,YAAO,KAAK,+BAA+B,UAAU,KAAK,oBAAoB;AAC9E,UAAO;;;;;;AAOb,MAAa,0BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAuBA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;AAKjD,MAAa,0BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAqBA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;AAKjD,MAAa,4BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAuBA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;AAKjD,MAAa,gCACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAEA,WACG,KAAK,WAAkC,UACtC,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,gBACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACrB,cAAc;CACf,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;;AAMjD,MAAa,8BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAmCA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK"}
+{"version":3,"file":"AuthOptionFactory.js","names":["logger: ReturnType<typeof createPackageComponentLogger>","richTextClassCache: string | undefined","authOptionIconClassCache: string | undefined","providerId: any","providerMatches: any","theme: any","customRenderers: ComponentRendererMap","key: string | number","customRenderer: ComponentRenderer | undefined","rendered: ReactElement | null","identifier: string","isTouched: boolean","Button","value: string","error: string","fieldType: string","hasPrefixes: boolean","hasPostfix: boolean","prefixStateKey: string","postfixStateKey: string","defaultPrefixValue: string","selectedPrefix: string","AffixedField","isDeviceUserCode: boolean","currentValue: string","reportedLength: number","otpLength: number | undefined","numericOnly: boolean","actionId: string","eventType: string","buttonText: string","componentVariant: string","shouldSkipValidation: boolean","buttonType: HTMLButtonElement['type']","hasInvalidConsentApproval: boolean","isConsentApprovalBlocked","formData: Record<string, any>","consentPrompt: ConsentPromptData | undefined","isDeny: boolean","decisions: ConsentDecisions","socialButtonClassName: string","GoogleButton","GitHubButton","FacebookButton","MicrosoftButton","LinkedInButton","SignInWithEthereumButton","SmsOtpButton","startIconEl: ReactElement | null","endIconEl: ReactElement | null","variant: any","color: TypographyColor | undefined","textAlignClass: string","Typography","Divider","selectOptions: any","Select","DatePicker","BaseUserSelect","BaseAuthFlowSelect","BaseUserTypeSelect","formClass: string","blockComponents: any","richTextAction: EmbeddedFlowComponentAction | undefined","syntheticAction: EmbeddedFlowComponent","formData: Record<string, string>","handleRichTextClick: React.MouseEventHandler<HTMLDivElement> | undefined","anchor: HTMLAnchorElement | null","handleRichTextKeyDown: React.KeyboardEventHandler<HTMLDivElement> | undefined","explicitHeight: string","explicitWidth: string","ImageComponent","iconName: string","IconComponent: any","flowIconRegistry","direction: string","gap: number","align: string","justify: string","rawItems: string | number | undefined","parsedItems: number","items: number | null","isColumn: boolean","gridJustify: string","track: string","stackClass: string","stackChildren: (ReactElement | null)[]","consentPromptRawData: ConsentPromptData | string | undefined","Consent","textTemplate: string","timeoutMs: number","FlowTimer","sourceKey: string | undefined","CopyableText","pairs: KeyValuePair[]","KeyValueList"],"sources":["../../../../src/components/auth/flow/AuthOptionFactory.tsx"],"sourcesContent":["// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport type {CSSInterpolation} from '@emotion/css/create-instance';\nimport {\n  ConsentConstants,\n  FieldType,\n  FlowMetadataResponse,\n  EmbeddedFlowComponent,\n  EmbeddedFlowComponentAction,\n  EmbeddedFlowComponentType,\n  EmbeddedFlowTextVariant,\n  EmbeddedFlowEventType,\n  createPackageComponentLogger,\n  resolveFlowTemplateLiterals,\n  resolveEmojiUrisInHtml,\n  ConsentPurposeData,\n  ConsentPromptData,\n  ConsentDecisions,\n  ConsentPurposeDecision,\n  ConsentAttributeElement,\n  OrganizationUnitListResponse,\n  PrefixOption,\n  KeyValuePair,\n  parseKeyValuePairs,\n  FetchAuthFlows,\n  FetchUserTypes,\n  FetchUsers,\n  getConsentElementDecision,\n} from '@thunderid/browser';\nimport DOMPurify from 'dompurify';\nimport {ChangeEvent, cloneElement, CSSProperties, FormEvent, MouseEvent, ReactElement} from 'react';\nimport Consent from './Consent';\nimport {getConsentOptionalKey} from './ConsentCheckboxList';\nimport {createField} from './FieldFactory';\nimport FlowTimer from './FlowTimer';\nimport ImageComponent from './ImageComponent';\nimport {\n  ComponentRenderer,\n  ComponentRenderContext,\n  ComponentRendererMap,\n} from '../../../contexts/ComponentRenderer/ComponentRendererContext';\nimport {UseTranslation} from '../../../hooks/useTranslation';\nimport {css, cx} from '../../../styles/emotion';\nimport {affixPostfixKey, affixPrefixKey} from '../../../utils/composeAffixedInputs';\nimport isConsentApprovalBlocked from '../../../utils/isConsentApprovalBlocked';\nimport AffixedField from '../../primitives/AffixedField/AffixedField';\nimport BaseAuthFlowSelect from '../../primitives/AuthFlowSelect/BaseAuthFlowSelect';\nimport Button from '../../primitives/Button/Button';\nimport CopyableText from '../../primitives/CopyableText/CopyableText';\nimport DatePicker from '../../primitives/DatePicker/DatePicker';\nimport Divider from '../../primitives/Divider/Divider';\nimport flowIconRegistry from '../../primitives/Icons/flowIconRegistry';\nimport KeyValueList from '../../primitives/KeyValueList/KeyValueList';\nimport Select from '../../primitives/Select/Select';\nimport Typography from '../../primitives/Typography/Typography';\nimport {TypographyColor, TypographyVariant} from '../../primitives/Typography/Typography.styles';\nimport BaseUserSelect, {BaseUserSelectProps} from '../../primitives/UserSelect/BaseUserSelect';\nimport BaseUserTypeSelect from '../../primitives/UserTypeSelect/BaseUserTypeSelect';\nimport FacebookButton from '../buttons/FacebookButton';\nimport GitHubButton from '../buttons/GitHubButton';\nimport GoogleButton from '../buttons/GoogleButton';\nimport LinkedInButton from '../buttons/LinkedInButton';\nimport MicrosoftButton from '../buttons/MicrosoftButton';\nimport SignInWithEthereumButton from '../buttons/SignInWithEthereumButton';\nimport SmsOtpButton from '../buttons/SmsOtpButton';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'AuthOptionFactory',\n);\n\n/**\n * Replaces `emoji:` URIs embedded in HTML before DOMPurify sanitization.\n *\n * DOMPurify strips unknown URI schemes from attributes (e.g. `src=\"emoji:🦊\"` → `src=\"\"`).\n * This function converts:\n *   - `<img src=\"emoji:X\" alt=\"Y\">` → `<span role=\"img\" aria-label=\"Y\">X</span>`\n *   - Any remaining `emoji:X` text occurrences → `X`\n */\n\n// This module's functions (renderSignInComponents, etc.) are called imperatively from a\n// component's render, not React components/hooks themselves — so these classes can't be computed\n// at module scope: that runs at import time, before <ThunderIDProvider> has had a chance to\n// configure Emotion's CSP nonce, which would insert them into an un-nonced <style> tag. Instead\n// they're computed lazily, on first actual use (still just once — Emotion's own cache dedupes any\n// further calls to a no-op after that).\nlet richTextClassCache: string | undefined;\n\n/** Ensures rich-text content (including all inner elements from the server) always word-wraps. */\nfunction getRichTextClass(): string {\n  richTextClassCache ??= css`\n    overflow-wrap: anywhere;\n    & * {\n      overflow-wrap: anywhere;\n      word-break: break-word;\n    }\n    & .rich-text-align-left {\n      text-align: left;\n    }\n    & .rich-text-align-center {\n      text-align: center;\n    }\n    & .rich-text-align-right {\n      text-align: right;\n    }\n    & .rich-text-align-justify {\n      text-align: justify;\n    }\n    & a,\n    & .rich-text-link {\n      text-decoration: underline;\n    }\n    & span[role='img'] {\n      display: inline-block;\n    }\n  `;\n  return richTextClassCache;\n}\n\nlet authOptionIconClassCache: string | undefined;\n\nfunction getAuthOptionIconClass(): string {\n  authOptionIconClassCache ??= css({height: '1.25em', objectFit: 'contain', width: '1.25em'});\n  return authOptionIconClassCache;\n}\n\nexport type AuthType = 'signin' | 'signup' | 'recovery' | 'verification';\n\n/**\n * Get the appropriate FieldType for an input component.\n */\n/** Upper bound on STACK grid slots, so a mistyped `items` cannot render thousands of cells. */\nconst MAX_STACK_ITEMS = 12;\n\nconst getFieldType = (variant: EmbeddedFlowComponentType): FieldType => {\n  switch (variant) {\n    case EmbeddedFlowComponentType.EmailInput:\n      return FieldType.Email;\n    case EmbeddedFlowComponentType.PhoneInput:\n      return FieldType.Tel;\n    case EmbeddedFlowComponentType.PasswordInput:\n      return FieldType.Password;\n    case EmbeddedFlowComponentType.TextInput:\n    default:\n      return FieldType.Text;\n  }\n};\n\n/**\n * Get typography variant from component variant.\n */\nconst getTypographyVariant = (variant: string): any => {\n  const variantMap: Record<EmbeddedFlowTextVariant, TypographyVariant> = {\n    BODY_1: 'body1',\n    BODY_2: 'body2',\n    BUTTON_TEXT: 'button',\n    CAPTION: 'caption',\n    HEADING_1: 'h1',\n    HEADING_2: 'h2',\n    HEADING_3: 'h3',\n    HEADING_4: 'h4',\n    HEADING_5: 'h5',\n    HEADING_6: 'h6',\n    OVERLINE: 'overline',\n    SUBTITLE_1: 'subtitle1',\n    SUBTITLE_2: 'subtitle2',\n  };\n\n  return variantMap[variant] || 'h3';\n};\n\n/** Maps flow text color values to SDK typography color variants. */\nconst getTypographyColor = (color?: string): TypographyColor | undefined => {\n  switch (color?.toUpperCase()) {\n    case 'ERROR':\n      return 'error';\n    case 'WARNING':\n      return 'warning';\n    case 'SUCCESS':\n      return 'success';\n    case 'INFO':\n      return 'info';\n    case 'PRIMARY':\n      return 'primary';\n    case 'SECONDARY':\n      return 'secondary';\n    default:\n      return undefined;\n  }\n};\n\n/**\n * Check if a button text or action matches a social provider.\n */\nconst matchesSocialProvider = (\n  actionId: string,\n  eventType: string,\n  buttonText: string,\n  provider: string,\n  authType: AuthType,\n  /* eslint-disable-next-line @typescript-eslint/no-unused-vars */\n  _componentVariant?: string,\n): boolean => {\n  const providerId: any = `${provider}_auth`;\n  const providerMatches: any = actionId === providerId || eventType === providerId;\n\n  // Social buttons usually have \"Sign in with X\" or \"Continue with X\" text,\n  // so also check button text for the provider name to increase chances of correct detection (especially for signup flows where action IDs are less standardized)\n  if (buttonText.toLowerCase().includes(provider)) {\n    return true;\n  }\n\n  // For signup, also check button text\n  if (authType === 'signup') {\n    return providerMatches || buttonText.toLowerCase().includes(provider);\n  }\n\n  return providerMatches;\n};\n\n/**\n * Create an auth component from flow component configuration.\n */\nconst createAuthComponentFromFlow = (\n  component: EmbeddedFlowComponent,\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  authType: AuthType,\n  options: {\n    /** @internal Passed from the host React component so hooks aren't called inside a loop. */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal Passed from the host React component so hooks aren't called inside a loop. */\n    _theme?: any;\n    /** Additional data from the flow response, used for different dynamic data */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    /** Current consent purpose being rendered. Set by CONSENT_PURPOSE block iteration. */\n    currentConsentPurpose?: ConsentPurposeData;\n    inStack?: boolean;\n    inputClassName?: string;\n    /** Flag to determine if the step timeline has expired */\n    isTimeoutDisabled?: boolean;\n    key?: string | number;\n    /** Data source for AUTH_FLOW_SELECT fields. */\n    fetchAuthFlows?: FetchAuthFlows;\n    /** Data source for USER_SELECT fields. */\n    fetchUsers?: FetchUsers;\n    /** Data source for USER_TYPE_SELECT fields. */\n    fetchUserTypes?: FetchUserTypes;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    /** Called with the error of a failed picker load. The form itself shows no error for it. */\n    onPickerError?: (error: Error) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    /** Renders RESEND actions; only attribute verification sets it, so other flows skip them as before. */\n    renderResend?: boolean;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  } = {},\n): ReactElement | null => {\n  const theme: any = options._theme;\n  const customRenderers: ComponentRendererMap = options._customRenderers ?? {};\n\n  const key: string | number = options.key || component.id;\n\n  const customRenderer: ComponentRenderer | undefined =\n    customRenderers[component.id] ?? customRenderers[component.type];\n  if (customRenderer) {\n    const renderCtx: ComponentRenderContext = {\n      additionalData: options.additionalData,\n      authType,\n      formErrors,\n      formValues,\n      isFormValid,\n      isLoading,\n      meta: options.meta,\n      resetForm,\n      onInputBlur: options.onInputBlur,\n      onInputChange,\n      onSubmit: options.onSubmit,\n      touchedFields,\n    };\n    // Key the element here so a renderer does not have to, as the built-in cases below do.\n    const rendered: ReactElement | null = customRenderer(component, renderCtx);\n\n    return rendered ? cloneElement(rendered, {key}) : null;\n  }\n\n  /** Resolve any remaining {{t()}} or {{meta()}} template expressions in a string at render time. */\n  const resolve = (text: string | undefined): string => {\n    if (!text || (!options.t && !options.meta)) {\n      return text || '';\n    }\n    return resolveFlowTemplateLiterals(text, {meta: options.meta, t: options.t || ((k: string): string => k)});\n  };\n\n  // The props a flow gives each of the resource pickers (USER_SELECT, AUTH_FLOW_SELECT, USER_TYPE_SELECT).\n  const resourceSelectProps = (): Omit<BaseUserSelectProps, 'fetchUsers' | 'mapping'> => {\n    const identifier: string = component.ref!;\n    const isTouched: boolean = touchedFields[identifier] || false;\n\n    return {\n      className: cx(options.inputClassName, component.classes),\n      component,\n      error: isTouched ? formErrors[identifier] : undefined,\n      id: component.id,\n      label: resolve(component.label) || '',\n      name: identifier,\n      onBlur: (): void => options.onInputBlur?.(identifier),\n      onChange: (event: ChangeEvent<HTMLSelectElement>): void => onInputChange(identifier, event.target.value),\n      onError: options.onPickerError,\n      placeholder: resolve(component.placeholder),\n      required: component.required,\n      value: formValues[identifier] || '',\n    };\n  };\n\n  // A component type this render cannot draw is logged and left out.\n  const skipUnsupported = (typeName: string): null => {\n    logger.warn(`${typeName} component type is not supported. Skipping render.`);\n\n    return null;\n  };\n\n  // A resend asks for a new code, so it submits its own action without the step's values or validation.\n  if (component.type === EmbeddedFlowComponentType.Resend && options.renderResend) {\n    return (\n      <Button\n        fullWidth\n        key={key}\n        id={component.id}\n        onClick={(): void => options.onSubmit?.(component, {}, true)}\n        disabled={isLoading || options.isTimeoutDisabled}\n        className={cx(options.buttonClassName, component.classes)}\n        variant=\"text\"\n        color=\"primary\"\n        type=\"button\"\n      >\n        {resolve(component.label)}\n      </Button>\n    );\n  }\n\n  switch (component.type) {\n    case EmbeddedFlowComponentType.TextInput:\n    case EmbeddedFlowComponentType.PasswordInput:\n    case EmbeddedFlowComponentType.EmailInput:\n    case EmbeddedFlowComponentType.PhoneInput:\n    // A Resolve OU step asks for the organization unit before sign-in, when no unit is ever listed, so the\n    // user types its handle or identifier. After sign-in the step offers the eligible units as a SELECT.\n    case EmbeddedFlowComponentType.OuSelect: {\n      const identifier: string = component.ref!;\n      const value: string = formValues[identifier] || '';\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n      const fieldType: string = getFieldType(component.type);\n\n      // Prefix/postfix are accepted on any text-family input. When either is present,\n      // route to AffixedField so the leading affix renders and submit-time composition\n      // is picked up by composeAffixedInputs via the sentinel keys.\n      // Both string.length and Array.length are defined, so a single truthy+length\n      // check covers `prefixes?: string | PrefixOption[]`.\n      const hasPrefixes: boolean = !!component.prefixes && component.prefixes.length > 0;\n      const hasPostfix: boolean = typeof component.postfix === 'string' && component.postfix.length > 0;\n\n      if (hasPrefixes || hasPostfix) {\n        const prefixStateKey: string = affixPrefixKey(identifier, options.vendor);\n        const postfixStateKey: string = affixPostfixKey(identifier, options.vendor);\n        const defaultPrefixValue: string = hasPrefixes\n          ? typeof component.prefixes === 'string'\n            ? component.prefixes\n            : (component.prefixes as PrefixOption[])[0].value\n          : '';\n        const selectedPrefix: string = formValues[prefixStateKey] ?? defaultPrefixValue;\n\n        return (\n          <AffixedField\n            key={key}\n            className={cx(options.inputClassName, component.classes)}\n            id={component.id}\n            label={resolve(component.label) || ''}\n            name={identifier}\n            placeholder={resolve(component.placeholder) || ''}\n            required={component.required || false}\n            error={error}\n            value={value}\n            type={fieldType}\n            prefixes={component.prefixes}\n            prefixValue={selectedPrefix}\n            onChange={(e: ChangeEvent<HTMLInputElement>): void => onInputChange(identifier, e.target.value)}\n            onBlur={(): void => options.onInputBlur?.(identifier)}\n            onPrefixChange={(newPrefix: string): void => onInputChange(prefixStateKey, newPrefix)}\n            onFocus={(): void => {\n              if (hasPrefixes && formValues[prefixStateKey] === undefined) {\n                onInputChange(prefixStateKey, defaultPrefixValue);\n              }\n              if (hasPostfix && formValues[postfixStateKey] === undefined) {\n                onInputChange(postfixStateKey, component.postfix!);\n              }\n            }}\n          />\n        );\n      }\n\n      const field: any = createField({\n        className: cx(options.inputClassName, component.classes),\n        error,\n        id: component.id,\n        label: resolve(component.label) || '',\n        name: identifier,\n        onBlur: () => options.onInputBlur?.(identifier),\n        onChange: (newValue: string) => onInputChange(identifier, newValue),\n        placeholder: resolve(component.placeholder) || '',\n        required: component.required || false,\n        type: fieldType as FieldType,\n        value,\n      });\n\n      return cloneElement(field, {key});\n    }\n\n    case EmbeddedFlowComponentType.OtpInput: {\n      const identifier: string = component.ref!;\n      const isDeviceUserCode: boolean = identifier === 'user_code';\n      const currentValue: string = formValues[identifier] || '';\n      const value: string = isDeviceUserCode ? currentValue.replace(/[-\\s]/g, '').toUpperCase() : currentValue;\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n\n      // Device Grant user codes are eight uppercase characters today. Keep this fallback in the SDK\n      // until the flow UI metadata can supply the configured code length.\n      const reportedLength: number = Number(options.additionalData?.['otpLength']);\n      const otpLength: number | undefined = isDeviceUserCode\n        ? 8\n        : Number.isInteger(reportedLength) && reportedLength > 0\n          ? reportedLength\n          : undefined;\n      const numericOnly: boolean = !isDeviceUserCode && options.additionalData?.['otpNumericOnly'] !== 'false';\n\n      const field: any = createField({\n        className: cx(options.inputClassName, component.classes),\n        error,\n        id: component.id,\n        label: resolve(component.label) || '',\n        length: otpLength,\n        name: identifier,\n        numericOnly,\n        separatorAfter: isDeviceUserCode ? 4 : undefined,\n        onBlur: () => options.onInputBlur?.(identifier),\n        onChange: (newValue: string) => onInputChange(identifier, newValue),\n        placeholder: resolve(component.placeholder) || '',\n        required: component.required || false,\n        type: FieldType.Otp,\n        value,\n      });\n\n      return cloneElement(field, {key});\n    }\n\n    case EmbeddedFlowComponentType.Action: {\n      const actionId: string = component.id;\n      const eventType: string = component.eventType || '';\n      const buttonText: string = resolve(component.label);\n      const componentVariant: string = component.variant || '';\n\n      // Only validate on submit type events.\n      const shouldSkipValidation: boolean = eventType.toUpperCase() !== EmbeddedFlowEventType.Submit;\n\n      // Determine the button type based on the event type. Default to 'submit' if not recognized.\n      const buttonTypeEnum = {\n        [EmbeddedFlowEventType.Submit]: 'submit',\n        [EmbeddedFlowEventType.Reset]: 'reset',\n        [EmbeddedFlowEventType.Cancel]: 'button',\n        [EmbeddedFlowEventType.Trigger]: 'button',\n        [EmbeddedFlowEventType.Back]: 'button',\n      };\n      const buttonType: HTMLButtonElement['type'] = buttonTypeEnum[eventType.toUpperCase()] ?? 'submit';\n\n      // Approval waits while an approved authorization detail shows a modified value that cannot be submitted.\n      const hasInvalidConsentApproval: boolean =\n        !shouldSkipValidation &&\n        componentVariant.toLowerCase() === 'primary' &&\n        isConsentApprovalBlocked(\n          (options.additionalData?.['consentPrompt'] as ConsentPromptData | undefined)?.purposes ?? [],\n          formValues,\n        );\n\n      const handleClick = (event: MouseEvent<HTMLButtonElement>): void => {\n        // Flow actions are handled by the SDK. Cancel the native button action before\n        // onSubmit can switch steps or replace the form; otherwise the browser tries to\n        // submit a form that React has already disconnected from the document.\n        event.preventDefault();\n\n        if (options.onSubmit) {\n          const formData: Record<string, any> = {};\n          Object.keys(formValues).forEach((field: any) => {\n            // Include all values, even empty strings, to ensure proper submission\n            formData[field] = formValues[field];\n          });\n\n          // For consent actions, build the consent_decisions JSON from the form values.\n          // The allow action captures per-attribute choices; the deny action sends\n          // all purposes as rejected so the backend ConsentExecutor can fail the flow.\n          const consentPrompt: ConsentPromptData | undefined = options.additionalData?.['consentPrompt'] as\n            | ConsentPromptData\n            | undefined;\n          if (consentPrompt && eventType.toUpperCase() === EmbeddedFlowEventType.Submit) {\n            const isDeny: boolean = componentVariant.toLowerCase() !== 'primary';\n            const decisions: ConsentDecisions = {\n              approved: !isDeny,\n              ...(isDeny ? {reason: ConsentConstants.REASON_USER_DENIED} : {}),\n              purposes: consentPrompt.purposes.map(\n                (p: ConsentPurposeData): ConsentPurposeDecision => ({\n                  approved: !isDeny,\n                  elements: [\n                    // Permission purposes carry no essential elements, so the server sends null here\n                    ...(p.essential ?? []).map((e): ConsentAttributeElement => ({approved: !isDeny, name: e.name})),\n                    ...(p.optional ?? []).map(\n                      (e): ConsentAttributeElement =>\n                        getConsentElementDecision(\n                          p.purposeId,\n                          e,\n                          !isDeny && formValues[getConsentOptionalKey(p.purposeId, e.name)] === 'true',\n                          formValues,\n                        ),\n                    ),\n                  ],\n                  purposeName: p.purposeName!,\n                }),\n              ),\n            };\n            formData['consent_decisions'] = JSON.stringify(decisions);\n          }\n\n          // For submit events, pass the form data to the onSubmit callback. For other event types, reset the form and call onSubmit with an empty data object.\n          if (eventType.toUpperCase() === EmbeddedFlowEventType.Submit) {\n            options.onSubmit(component, formData, shouldSkipValidation);\n          } else {\n            resetForm();\n            options.onSubmit(component, {}, shouldSkipValidation);\n          }\n        }\n      };\n\n      // Render branded social login buttons for known action IDs\n\n      const socialButtonClassName: string = cx(options.buttonClassName, component.classes);\n\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'google', authType, componentVariant)) {\n        return <GoogleButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'github', authType, componentVariant)) {\n        return <GitHubButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'facebook', authType, componentVariant)) {\n        return <FacebookButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'microsoft', authType, componentVariant)) {\n        return <MicrosoftButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'linkedin', authType, componentVariant)) {\n        return <LinkedInButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n      if (matchesSocialProvider(actionId, eventType, buttonText, 'ethereum', authType, componentVariant)) {\n        return (\n          <SignInWithEthereumButton\n            key={key}\n            id={component.id}\n            onClick={handleClick}\n            className={socialButtonClassName}\n          />\n        );\n      }\n      if (actionId === 'prompt_mobile' || eventType === 'prompt_mobile') {\n        return <SmsOtpButton key={key} id={component.id} onClick={handleClick} className={socialButtonClassName} />;\n      }\n\n      const startIconEl: ReactElement | null = component.startIcon ? (\n        <img src={component.startIcon} alt=\"\" aria-hidden=\"true\" className={getAuthOptionIconClass()} />\n      ) : null;\n\n      const endIconEl: ReactElement | null = component.endIcon ? (\n        <img src={component.endIcon} alt=\"\" aria-hidden=\"true\" className={getAuthOptionIconClass()} />\n      ) : null;\n\n      return (\n        <Button\n          fullWidth\n          key={key}\n          id={component.id}\n          onClick={handleClick}\n          disabled={\n            isLoading ||\n            (!isFormValid && !shouldSkipValidation) ||\n            hasInvalidConsentApproval ||\n            options.isTimeoutDisabled ||\n            (component as any).config?.disabled\n          }\n          className={cx(options.buttonClassName, component.classes)}\n          data-testid=\"thunderid-signin-submit\"\n          variant={component.variant?.toLowerCase() === 'primary' ? 'solid' : 'outline'}\n          color={component.variant?.toLowerCase() === 'primary' ? 'primary' : 'secondary'}\n          startIcon={startIconEl}\n          endIcon={endIconEl}\n          type={buttonType}\n        >\n          {buttonText || 'Submit'}\n        </Button>\n      );\n    }\n\n    case EmbeddedFlowComponentType.Text: {\n      const variant: any = getTypographyVariant(component.variant!);\n      const color: TypographyColor | undefined = getTypographyColor(component.color);\n      const textAlignClass: string = css({\n        marginBottom: 2,\n        textAlign:\n          typeof component?.align === 'string' ? (component.align as React.CSSProperties['textAlign']) : 'left',\n      });\n      return (\n        <Typography\n          key={key}\n          id={component.id}\n          className={cx(component.classes, textAlignClass)}\n          variant={variant}\n          color={color}\n        >\n          {resolve(component.label)}\n        </Typography>\n      );\n    }\n\n    case EmbeddedFlowComponentType.Divider: {\n      return <Divider key={key}>{resolve(component.label) || ''}</Divider>;\n    }\n\n    case EmbeddedFlowComponentType.Select: {\n      const identifier: string = component.ref!;\n      const value: string = formValues[identifier] || '';\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n\n      // Options are pre-sanitized by flowTransformer to {value: string, label: string} format\n      const selectOptions: any = (component.options || []).map((opt: any) => ({\n        label: typeof opt === 'string' ? opt : String(opt.label ?? opt.value ?? ''),\n        value: typeof opt === 'string' ? opt : String(opt.value ?? ''),\n      }));\n\n      return (\n        <Select\n          key={key}\n          id={component.id}\n          name={identifier}\n          label={resolve(component.label) || ''}\n          placeholder={resolve(component.placeholder)}\n          required={component.required}\n          options={selectOptions}\n          value={value}\n          error={error}\n          onChange={(e: any): void => onInputChange(identifier, e.target.value)}\n          onBlur={(): any => options.onInputBlur?.(identifier)}\n          className={cx(options.inputClassName, component.classes)}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.DateInput: {\n      const identifier: string = component.ref!;\n      const value: string = formValues[identifier] || '';\n      const isTouched: boolean = touchedFields[identifier] || false;\n      const error: string = isTouched ? formErrors[identifier] : undefined!;\n\n      return (\n        <DatePicker\n          key={key}\n          id={component.id}\n          name={identifier}\n          label={resolve(component.label) || ''}\n          placeholder={resolve(component.placeholder)}\n          required={component.required}\n          dateFormat={component.dateFormat}\n          value={value}\n          error={error}\n          onChange={(e: any): void => onInputChange(identifier, e.target.value)}\n          onBlur={(): any => options.onInputBlur?.(identifier)}\n          className={cx(options.inputClassName, component.classes)}\n        />\n      );\n    }\n\n    // The resource pickers load with a signed-in user's access token, so without a data source, which is every flow\n    // except InviteUser, they are not drawn.\n    case EmbeddedFlowComponentType.UserSelect:\n      return options.fetchUsers ? (\n        <BaseUserSelect key={key} {...resourceSelectProps()} fetchUsers={options.fetchUsers} />\n      ) : (\n        skipUnsupported('USER_SELECT')\n      );\n\n    case EmbeddedFlowComponentType.AuthFlowSelect:\n      return options.fetchAuthFlows ? (\n        <BaseAuthFlowSelect key={key} {...resourceSelectProps()} fetchAuthFlows={options.fetchAuthFlows} />\n      ) : (\n        skipUnsupported('AUTH_FLOW_SELECT')\n      );\n\n    case EmbeddedFlowComponentType.UserTypeSelect:\n      return options.fetchUserTypes ? (\n        <BaseUserTypeSelect key={key} {...resourceSelectProps()} fetchUserTypes={options.fetchUserTypes} />\n      ) : (\n        skipUnsupported('USER_TYPE_SELECT')\n      );\n\n    case EmbeddedFlowComponentType.Block: {\n      if (component.components && component.components.length > 0) {\n        const formClass: string = css({\n          display: 'flex',\n          flexDirection: 'column',\n          gap: `calc(${theme?.vars?.spacing?.unit ?? '4px'} * 2)`,\n        });\n\n        const blockComponents: any = component.components\n          .map((childComponent: any, index: any) =>\n            createAuthComponentFromFlow(\n              childComponent,\n              formValues,\n              touchedFields,\n              formErrors,\n              isLoading,\n              isFormValid,\n              resetForm,\n              onInputChange,\n              authType,\n              {\n                ...options,\n                key: childComponent.id || `${component.id}_${index}`,\n              },\n            ),\n          )\n          .filter(Boolean);\n\n        // The submit button's `type=\"submit\"` (and pressing Enter in a field) would\n        // otherwise trigger the browser's native form submission — a GET request to\n        // the current URL with all field values (including passwords) as query params.\n        // Actual submission is handled entirely via `onClick`/`onSubmit` above.\n        return (\n          <form\n            id={component.id}\n            key={key}\n            className={cx(component.classes, formClass)}\n            onSubmit={(event: FormEvent<HTMLFormElement>): void => event.preventDefault()}\n          >\n            {blockComponents}\n          </form>\n        );\n      }\n      return null;\n    }\n\n    case EmbeddedFlowComponentType.RichText: {\n      const richTextAction: EmbeddedFlowComponentAction | undefined = component.action;\n\n      const dispatchRichTextAction = (): void => {\n        if (!richTextAction || !options.onSubmit) {\n          return;\n        }\n        const eventTypeValue = String(richTextAction.eventType ?? EmbeddedFlowEventType.Submit);\n        const shouldSkipValidation: boolean = eventTypeValue.toUpperCase() === String(EmbeddedFlowEventType.Trigger);\n        const syntheticAction: EmbeddedFlowComponent = {\n          eventType: eventTypeValue,\n          id: `${component.id}_action`,\n          ref: richTextAction.ref,\n          type: EmbeddedFlowComponentType.Action,\n        };\n        const formData: Record<string, string> = {};\n        Object.keys(formValues).forEach((field: string) => {\n          formData[field] = formValues[field];\n        });\n        options.onSubmit(syntheticAction, formData, shouldSkipValidation);\n      };\n\n      // Sentinel-anchor contract: only anchors carrying `data-action-ref` equal to\n      // richTextAction.ref dispatch the action. Anchors without the sentinel (or with\n      // a non-matching one) are treated as ordinary links and are ignored here.\n      const isMatchingSentinelAnchor = (anchor: HTMLAnchorElement): boolean =>\n        anchor.getAttribute('data-action-ref') === richTextAction?.ref;\n\n      const handleRichTextClick: React.MouseEventHandler<HTMLDivElement> | undefined = richTextAction\n        ? (event: React.MouseEvent<HTMLDivElement>): void => {\n            const anchor: HTMLAnchorElement | null = (event.target as HTMLElement).closest('a');\n            if (!anchor || !isMatchingSentinelAnchor(anchor)) {\n              return;\n            }\n            event.preventDefault();\n            dispatchRichTextAction();\n          }\n        : undefined;\n\n      const handleRichTextKeyDown: React.KeyboardEventHandler<HTMLDivElement> | undefined = richTextAction\n        ? (event: React.KeyboardEvent<HTMLDivElement>): void => {\n            if (event.key !== 'Enter' && event.key !== ' ') {\n              return;\n            }\n            const anchor: HTMLAnchorElement | null = (event.target as HTMLElement).closest('a');\n            if (!anchor || !isMatchingSentinelAnchor(anchor)) {\n              return;\n            }\n            event.preventDefault();\n            dispatchRichTextAction();\n          }\n        : undefined;\n\n      return (\n        // Sentinel anchors are made keyboard-operable via the container's onKeyDown\n        // (Enter/Space activate the matching anchor). Authors should ensure the anchor\n        // is focusable (`href` or `tabIndex`); the click+keydown delegation covers both\n        // pointer and keyboard activation once focus lands on the anchor.\n        // eslint-disable-next-line jsx-a11y/no-static-element-interactions\n        <div\n          key={key}\n          className={getRichTextClass()}\n          onClick={handleRichTextClick}\n          onKeyDown={handleRichTextKeyDown}\n          // Manually sanitizes with `DOMPurify`.\n          // IMPORTANT: DO NOT REMOVE OR MODIFY THIS SANITIZATION STEP.\n          dangerouslySetInnerHTML={{__html: DOMPurify.sanitize(resolveEmojiUrisInHtml(resolve(component.label)))}}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.Image: {\n      const explicitHeight: string = resolve(component.height?.toString());\n      const explicitWidth: string = resolve(component.width?.toString());\n      return (\n        <ImageComponent\n          key={key}\n          component={\n            {\n              config: {\n                alt: resolve(component.alt) || resolve(component.label) || 'Image',\n                height: explicitHeight || (options.inStack ? '50' : 'auto'),\n                src: resolve(component.src),\n                width: explicitWidth || (options.inStack ? '50' : '100%'),\n              },\n            } as any\n          }\n          formErrors={undefined!}\n          formValues={undefined!}\n          isFormValid={false}\n          isLoading={false}\n          onInputChange={(): void => {\n            throw new Error('Function not implemented.');\n          }}\n          touchedFields={undefined!}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.Icon: {\n      const iconName: string = component.name || '';\n      const IconComponent: any = flowIconRegistry[iconName];\n      if (!IconComponent) {\n        logger.warn(`Unknown icon name: \"${iconName}\". Skipping render.`);\n        return null;\n      }\n      return <IconComponent key={key} size={component.size || 24} color={component.color || 'currentColor'} />;\n    }\n\n    case EmbeddedFlowComponentType.Stack: {\n      const direction: string = (component as any).direction || 'row';\n      const gap: number = (component as any).gap ?? 2;\n      const align: string = (component as any).align || 'center';\n      const justify: string = (component as any).justify || 'flex-start';\n\n      // `items` is the number of slots across the main axis and `direction` picks\n      // that axis: with `row` it is the column count (items: 2 with four buttons\n      // renders a 2 x 2 grid), and with `column` it is the row count and children\n      // flow into further columns. Fewer than two slots keeps the flex layout, so\n      // stacks authored before grid support are unaffected.\n      const rawItems: string | number | undefined = component.items;\n      const parsedItems: number =\n        typeof rawItems === 'string' ? Number(rawItems) : typeof rawItems === 'number' ? rawItems : NaN;\n      const items: number | null =\n        Number.isFinite(parsedItems) && Math.floor(parsedItems) >= 2\n          ? Math.min(Math.floor(parsedItems), MAX_STACK_ITEMS)\n          : null;\n      // CSS Grid has no reverse auto-flow, so the reverse variants fall back to\n      // their base axis rather than silently becoming a row.\n      const isColumn: boolean = direction.startsWith('column');\n      const gridJustify: string = component.justify ?? 'stretch';\n      // Equal `1fr` tracks fill the container, leaving `justify-content` no free\n      // space to distribute. Content-sized tracks restore it, so every justify\n      // value has a visible effect while the default stays an even split.\n      const track: string = gridJustify === 'stretch' ? '1fr' : 'auto';\n\n      const stackStyle: CSSProperties =\n        items !== null\n          ? {\n              alignItems: component.align ?? 'stretch',\n              display: 'grid',\n              gap: `${gap * 0.5}rem`,\n              gridAutoFlow: isColumn ? 'column' : 'row',\n              justifyContent: gridJustify,\n              width: '100%',\n              ...(isColumn\n                ? {gridTemplateRows: `repeat(${items}, ${track})`}\n                : {gridTemplateColumns: `repeat(${items}, ${track})`}),\n            }\n          : {\n              alignItems: align,\n              display: 'flex',\n              flexDirection: direction as CSSProperties['flexDirection'],\n              flexWrap: 'wrap',\n              gap: `${gap * 0.5}rem`,\n              justifyContent: justify,\n            };\n\n      const stackClass: string = css(stackStyle as CSSInterpolation);\n\n      const stackChildren: (ReactElement | null)[] = component.components\n        ? component.components.map((childComponent: any, index: number) =>\n            createAuthComponentFromFlow(\n              childComponent,\n              formValues,\n              touchedFields,\n              formErrors,\n              isLoading,\n              isFormValid,\n              resetForm,\n              onInputChange,\n              authType,\n              {\n                ...options,\n                inStack: true,\n                key: childComponent.id || `${component.id}_${index}`,\n              },\n            ),\n          )\n        : [];\n\n      return (\n        <div key={key} id={component.id} className={cx(component.classes, stackClass)}>\n          {stackChildren}\n        </div>\n      );\n    }\n\n    case EmbeddedFlowComponentType.Consent: {\n      const consentPromptRawData: ConsentPromptData | string | undefined = options.additionalData?.['consentPrompt'];\n\n      return (\n        <Consent\n          key={key}\n          consentData={consentPromptRawData as any}\n          formValues={formValues}\n          onInputChange={onInputChange}\n          t={options.t}\n        />\n      );\n    }\n\n    case EmbeddedFlowComponentType.Timer: {\n      const textTemplate: string = resolve((component as any).label) || 'Time remaining: {time}';\n      const timeoutMs: number = Number(options.additionalData?.['stepTimeout']) || 0;\n      const expiresIn: number = timeoutMs > 0 ? Math.max(0, Math.floor((timeoutMs - Date.now()) / 1000)) : 0;\n\n      return <FlowTimer key={key} expiresIn={expiresIn} textTemplate={textTemplate} />;\n    }\n\n    case EmbeddedFlowComponentType.CopyableText: {\n      const sourceKey: string | undefined = (component as any).source;\n      const value: string = sourceKey && options.additionalData ? String(options.additionalData[sourceKey] ?? '') : '';\n      const labelText: string | undefined = resolve((component as any).label) || undefined;\n\n      return <CopyableText key={key} label={labelText} masked={Boolean(component.masked)} value={value} />;\n    }\n\n    case EmbeddedFlowComponentType.KeyValueList: {\n      const sourceKey: string | undefined = component.source;\n      const pairs: KeyValuePair[] = parseKeyValuePairs(\n        sourceKey && options.additionalData ? options.additionalData[sourceKey] : undefined,\n      ).map((pair: KeyValuePair) => ({...pair, label: resolve(pair.label)}));\n\n      // An empty panel tells the user nothing, so a list with no pairs renders nothing at all.\n      if (pairs.length === 0) {\n        return null;\n      }\n\n      return <KeyValueList key={key} label={resolve(component.label) || undefined} pairs={pairs} />;\n    }\n\n    default:\n      // Gracefully handle unsupported component types by returning null\n      logger.warn(`Unsupported component type: ${component.type}. Skipping render.`);\n      return null;\n  }\n};\n\n/**\n * Processes an array of components and renders them as React elements for sign-in.\n */\nexport const renderSignInComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    inputClassName?: string;\n    /** Flag to determine if the step timeline has expired */\n    isTimeoutDisabled?: boolean;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'signin',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for sign-up.\n */\nexport const renderSignUpComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    inputClassName?: string;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'signup',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for recovery flow.\n */\nexport const renderRecoveryComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    inputClassName?: string;\n    /** Flag to determine if the step timeline has expired */\n    isTimeoutDisabled?: boolean;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'recovery',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for attribute verification.\n */\nexport const renderVerificationComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: Parameters<typeof renderRecoveryComponents>[8],\n): ReactElement[] =>\n  components\n    .map((component: EmbeddedFlowComponent, index: number) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'verification',\n        {\n          ...options,\n          key: component.id ?? index,\n          renderResend: true,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n\n/**\n * Processes an array of components and renders them as React elements for invite user.\n * This is used by both InviteUser and AcceptInvite components.\n */\nexport const renderInviteUserComponents = (\n  components: EmbeddedFlowComponent[],\n  formValues: Record<string, string>,\n  touchedFields: Record<string, boolean>,\n  formErrors: Record<string, string>,\n  isLoading: boolean,\n  isFormValid: boolean,\n  resetForm: () => void,\n  onInputChange: (name: string, value: string) => void,\n  options?: {\n    /** @internal */\n    _customRenderers?: ComponentRendererMap;\n    /** @internal */\n    _theme?: any;\n    /** Additional data from the flow response */\n    additionalData?: Record<string, any>;\n    buttonClassName?: string;\n    /** Function to fetch child organization units for OU_SELECT components. */\n    fetchOrganizationUnitChildren?: (\n      parentId: string,\n      limit: number,\n      offset: number,\n    ) => Promise<OrganizationUnitListResponse>;\n    inputClassName?: string;\n    /** Data source for AUTH_FLOW_SELECT fields. */\n    fetchAuthFlows?: FetchAuthFlows;\n    /** Data source for USER_SELECT fields. */\n    fetchUsers?: FetchUsers;\n    /** Data source for USER_TYPE_SELECT fields. */\n    fetchUserTypes?: FetchUserTypes;\n    /** Flow metadata for resolving {{meta(...)}} expressions at render time */\n    meta?: FlowMetadataResponse | null;\n    onInputBlur?: (name: string) => void;\n    /** Called with the error of a failed picker load. The form itself shows no error for it. */\n    onPickerError?: (error: Error) => void;\n    onSubmit?: (component: EmbeddedFlowComponent, data?: Record<string, any>, skipValidation?: boolean) => void;\n    size?: 'small' | 'medium' | 'large';\n    /** Translation function for resolving {{t(...)}} expressions at render time */\n    t?: UseTranslation['t'];\n    variant?: any;\n    /** Vendor namespace used to derive affix sentinel keys for prefix/postfix-bearing inputs. */\n    vendor?: string;\n  },\n): ReactElement[] =>\n  components\n    .map((component: any, index: any) =>\n      createAuthComponentFromFlow(\n        component,\n        formValues,\n        touchedFields,\n        formErrors,\n        isLoading,\n        isFormValid,\n        resetForm,\n        onInputChange,\n        'signup',\n        {\n          ...options,\n          key: component.id || index,\n        },\n      ),\n    )\n    .filter((x): x is ReactElement => x !== null);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmEA,MAAMA,WAA0D,6BAC9D,oBACA,oBACD;;;;;;;;;AAiBD,IAAIC;;AAGJ,SAAS,mBAA2B;AAClC,wBAAuB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;AA0B1B,QAAO;;AAGT,IAAIC;AAEJ,SAAS,yBAAiC;AACxC,8BAA6B,IAAI;EAAC,QAAQ;EAAU,WAAW;EAAW,OAAO;EAAS,CAAC;AAC3F,QAAO;;;;;;AAST,MAAM,kBAAkB;AAExB,MAAM,gBAAgB,YAAkD;AACtE,SAAQ,SAAR;EACE,KAAK,0BAA0B,WAC7B,QAAO,UAAU;EACnB,KAAK,0BAA0B,WAC7B,QAAO,UAAU;EACnB,KAAK,0BAA0B,cAC7B,QAAO,UAAU;EACnB,KAAK,0BAA0B;EAC/B,QACE,QAAO,UAAU;;;;;;AAOvB,MAAM,wBAAwB,YAAyB;AAiBrD,QAhBuE;EACrE,QAAQ;EACR,QAAQ;EACR,aAAa;EACb,SAAS;EACT,WAAW;EACX,WAAW;EACX,WAAW;EACX,WAAW;EACX,WAAW;EACX,WAAW;EACX,UAAU;EACV,YAAY;EACZ,YAAY;EACb,CAEiB,YAAY;;;AAIhC,MAAM,sBAAsB,UAAgD;AAC1E,SAAQ,OAAO,aAAa,EAA5B;EACE,KAAK,QACH,QAAO;EACT,KAAK,UACH,QAAO;EACT,KAAK,UACH,QAAO;EACT,KAAK,OACH,QAAO;EACT,KAAK,UACH,QAAO;EACT,KAAK,YACH,QAAO;EACT,QACE;;;;;;AAON,MAAM,yBACJ,UACA,WACA,YACA,UACA,UAEA,sBACY;CACZ,MAAMC,aAAkB,GAAG,SAAS;CACpC,MAAMC,kBAAuB,aAAa,cAAc,cAAc;AAItE,KAAI,WAAW,aAAa,CAAC,SAAS,SAAS,CAC7C,QAAO;AAIT,KAAI,aAAa,SACf,QAAO,mBAAmB,WAAW,aAAa,CAAC,SAAS,SAAS;AAGvE,QAAO;;;;;AAMT,MAAM,+BACJ,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA,UAmCI,EAAE,KACkB;CACxB,MAAMC,QAAa,QAAQ;CAC3B,MAAMC,kBAAwC,QAAQ,oBAAoB,EAAE;CAE5E,MAAMC,MAAuB,QAAQ,OAAO,UAAU;CAEtD,MAAMC,iBACJ,gBAAgB,UAAU,OAAO,gBAAgB,UAAU;AAC7D,KAAI,gBAAgB;EAgBlB,MAAMC,WAAgC,eAAe,WAfX;GACxC,gBAAgB,QAAQ;GACxB;GACA;GACA;GACA;GACA;GACA,MAAM,QAAQ;GACd;GACA,aAAa,QAAQ;GACrB;GACA,UAAU,QAAQ;GAClB;GACD,CAEyE;AAE1E,SAAO,WAAW,aAAa,UAAU,EAAC,KAAI,CAAC,GAAG;;;CAIpD,MAAM,WAAW,SAAqC;AACpD,MAAI,CAAC,QAAS,CAAC,QAAQ,KAAK,CAAC,QAAQ,KACnC,QAAO,QAAQ;AAEjB,SAAO,4BAA4B,MAAM;GAAC,MAAM,QAAQ;GAAM,GAAG,QAAQ,OAAO,MAAsB;GAAG,CAAC;;CAI5G,MAAM,4BAAiF;EACrF,MAAMC,aAAqB,UAAU;EACrC,MAAMC,YAAqB,cAAc,eAAe;AAExD,SAAO;GACL,WAAW,GAAG,QAAQ,gBAAgB,UAAU,QAAQ;GACxD;GACA,OAAO,YAAY,WAAW,cAAc;GAC5C,IAAI,UAAU;GACd,OAAO,QAAQ,UAAU,MAAM,IAAI;GACnC,MAAM;GACN,cAAoB,QAAQ,cAAc,WAAW;GACrD,WAAW,UAAgD,cAAc,YAAY,MAAM,OAAO,MAAM;GACxG,SAAS,QAAQ;GACjB,aAAa,QAAQ,UAAU,YAAY;GAC3C,UAAU,UAAU;GACpB,OAAO,WAAW,eAAe;GAClC;;CAIH,MAAM,mBAAmB,aAA2B;AAClD,WAAO,KAAK,GAAG,SAAS,oDAAoD;AAE5E,SAAO;;AAIT,KAAI,UAAU,SAAS,0BAA0B,UAAU,QAAQ,aACjE,QACE,oBAACC;EACC;EAEA,IAAI,UAAU;EACd,eAAqB,QAAQ,WAAW,WAAW,EAAE,EAAE,KAAK;EAC5D,UAAU,aAAa,QAAQ;EAC/B,WAAW,GAAG,QAAQ,iBAAiB,UAAU,QAAQ;EACzD,SAAQ;EACR,OAAM;EACN,MAAK;YAEJ,QAAQ,UAAU,MAAM;IATpB,IAUE;AAIb,SAAQ,UAAU,MAAlB;EACE,KAAK,0BAA0B;EAC/B,KAAK,0BAA0B;EAC/B,KAAK,0BAA0B;EAC/B,KAAK,0BAA0B;EAG/B,KAAK,0BAA0B,UAAU;GACvC,MAAMF,aAAqB,UAAU;GACrC,MAAMG,QAAgB,WAAW,eAAe;GAEhD,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;GAC3D,MAAMC,YAAoB,aAAa,UAAU,KAAK;GAOtD,MAAMC,cAAuB,CAAC,CAAC,UAAU,YAAY,UAAU,SAAS,SAAS;GACjF,MAAMC,aAAsB,OAAO,UAAU,YAAY,YAAY,UAAU,QAAQ,SAAS;AAEhG,OAAI,eAAe,YAAY;IAC7B,MAAMC,iBAAyB,eAAe,YAAY,QAAQ,OAAO;IACzE,MAAMC,kBAA0B,gBAAgB,YAAY,QAAQ,OAAO;IAC3E,MAAMC,qBAA6B,cAC/B,OAAO,UAAU,aAAa,WAC5B,UAAU,WACT,UAAU,SAA4B,GAAG,QAC5C;IACJ,MAAMC,iBAAyB,WAAW,mBAAmB;AAE7D,WACE,oBAACC;KAEC,WAAW,GAAG,QAAQ,gBAAgB,UAAU,QAAQ;KACxD,IAAI,UAAU;KACd,OAAO,QAAQ,UAAU,MAAM,IAAI;KACnC,MAAM;KACN,aAAa,QAAQ,UAAU,YAAY,IAAI;KAC/C,UAAU,UAAU,YAAY;KACzB;KACA;KACP,MAAM;KACN,UAAU,UAAU;KACpB,aAAa;KACb,WAAW,MAA2C,cAAc,YAAY,EAAE,OAAO,MAAM;KAC/F,cAAoB,QAAQ,cAAc,WAAW;KACrD,iBAAiB,cAA4B,cAAc,gBAAgB,UAAU;KACrF,eAAqB;AACnB,UAAI,eAAe,WAAW,oBAAoB,OAChD,eAAc,gBAAgB,mBAAmB;AAEnD,UAAI,cAAc,WAAW,qBAAqB,OAChD,eAAc,iBAAiB,UAAU,QAAS;;OApBjD,IAuBL;;AAkBN,UAAO,aAdY,YAAY;IAC7B,WAAW,GAAG,QAAQ,gBAAgB,UAAU,QAAQ;IACxD;IACA,IAAI,UAAU;IACd,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,MAAM;IACN,cAAc,QAAQ,cAAc,WAAW;IAC/C,WAAW,aAAqB,cAAc,YAAY,SAAS;IACnE,aAAa,QAAQ,UAAU,YAAY,IAAI;IAC/C,UAAU,UAAU,YAAY;IAChC,MAAM;IACN;IACD,CAAC,EAEyB,EAAC,KAAI,CAAC;;EAGnC,KAAK,0BAA0B,UAAU;GACvC,MAAMZ,aAAqB,UAAU;GACrC,MAAMa,mBAA4B,eAAe;GACjD,MAAMC,eAAuB,WAAW,eAAe;GACvD,MAAMX,QAAgB,mBAAmB,aAAa,QAAQ,UAAU,GAAG,CAAC,aAAa,GAAG;GAE5F,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;GAI3D,MAAMW,iBAAyB,OAAO,QAAQ,iBAAiB,aAAa;GAC5E,MAAMC,YAAgC,mBAClC,IACA,OAAO,UAAU,eAAe,IAAI,iBAAiB,IACnD,iBACA;GACN,MAAMC,cAAuB,CAAC,oBAAoB,QAAQ,iBAAiB,sBAAsB;AAmBjG,UAAO,aAjBY,YAAY;IAC7B,WAAW,GAAG,QAAQ,gBAAgB,UAAU,QAAQ;IACxD;IACA,IAAI,UAAU;IACd,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,QAAQ;IACR,MAAM;IACN;IACA,gBAAgB,mBAAmB,IAAI;IACvC,cAAc,QAAQ,cAAc,WAAW;IAC/C,WAAW,aAAqB,cAAc,YAAY,SAAS;IACnE,aAAa,QAAQ,UAAU,YAAY,IAAI;IAC/C,UAAU,UAAU,YAAY;IAChC,MAAM,UAAU;IAChB;IACD,CAAC,EAEyB,EAAC,KAAI,CAAC;;EAGnC,KAAK,0BAA0B,QAAQ;GACrC,MAAMC,WAAmB,UAAU;GACnC,MAAMC,YAAoB,UAAU,aAAa;GACjD,MAAMC,aAAqB,QAAQ,UAAU,MAAM;GACnD,MAAMC,mBAA2B,UAAU,WAAW;GAGtD,MAAMC,uBAAgC,UAAU,aAAa,KAAK,sBAAsB;GAUxF,MAAMC,aAPiB;KACpB,sBAAsB,SAAS;KAC/B,sBAAsB,QAAQ;KAC9B,sBAAsB,SAAS;KAC/B,sBAAsB,UAAU;KAChC,sBAAsB,OAAO;IAC/B,CAC4D,UAAU,aAAa,KAAK;GAGzF,MAAMC,4BACJ,CAAC,wBACD,iBAAiB,aAAa,KAAK,aACnCC,kCACG,QAAQ,iBAAiB,mBAAoD,YAAY,EAAE,EAC5F,WACD;GAEH,MAAM,eAAe,UAA+C;AAIlE,UAAM,gBAAgB;AAEtB,QAAI,QAAQ,UAAU;KACpB,MAAMC,WAAgC,EAAE;AACxC,YAAO,KAAK,WAAW,CAAC,SAAS,UAAe;AAE9C,eAAS,SAAS,WAAW;OAC7B;KAKF,MAAMC,gBAA+C,QAAQ,iBAAiB;AAG9E,SAAI,iBAAiB,UAAU,aAAa,KAAK,sBAAsB,QAAQ;MAC7E,MAAMC,SAAkB,iBAAiB,aAAa,KAAK;MAC3D,MAAMC,YAA8B;OAClC,UAAU,CAAC;OACX,GAAI,SAAS,EAAC,QAAQ,iBAAiB,oBAAmB,GAAG,EAAE;OAC/D,UAAU,cAAc,SAAS,KAC9B,OAAmD;QAClD,UAAU,CAAC;QACX,UAAU,CAER,IAAI,EAAE,aAAa,EAAE,EAAE,KAAK,OAAgC;SAAC,UAAU,CAAC;SAAQ,MAAM,EAAE;SAAK,EAAE,EAC/F,IAAI,EAAE,YAAY,EAAE,EAAE,KACnB,MACC,0BACE,EAAE,WACF,GACA,CAAC,UAAU,WAAW,sBAAsB,EAAE,WAAW,EAAE,KAAK,MAAM,QACtE,WACD,CACJ,CACF;QACD,aAAa,EAAE;QAChB,EACF;OACF;AACD,eAAS,uBAAuB,KAAK,UAAU,UAAU;;AAI3D,SAAI,UAAU,aAAa,KAAK,sBAAsB,OACpD,SAAQ,SAAS,WAAW,UAAU,qBAAqB;UACtD;AACL,iBAAW;AACX,cAAQ,SAAS,WAAW,EAAE,EAAE,qBAAqB;;;;GAO3D,MAAMC,wBAAgC,GAAG,QAAQ,iBAAiB,UAAU,QAAQ;AAEpF,OAAI,sBAAsB,UAAU,WAAW,YAAY,UAAU,UAAU,iBAAiB,CAC9F,QAAO,oBAACC;IAAuB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE7G,OAAI,sBAAsB,UAAU,WAAW,YAAY,UAAU,UAAU,iBAAiB,CAC9F,QAAO,oBAACC;IAAuB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE7G,OAAI,sBAAsB,UAAU,WAAW,YAAY,YAAY,UAAU,iBAAiB,CAChG,QAAO,oBAACC;IAAyB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE/G,OAAI,sBAAsB,UAAU,WAAW,YAAY,aAAa,UAAU,iBAAiB,CACjG,QAAO,oBAACC;IAA0B,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAEhH,OAAI,sBAAsB,UAAU,WAAW,YAAY,YAAY,UAAU,iBAAiB,CAChG,QAAO,oBAACC;IAAyB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;AAE/G,OAAI,sBAAsB,UAAU,WAAW,YAAY,YAAY,UAAU,iBAAiB,CAChG,QACE,oBAACC;IAEC,IAAI,UAAU;IACd,SAAS;IACT,WAAW;MAHN,IAIL;AAGN,OAAI,aAAa,mBAAmB,cAAc,gBAChD,QAAO,oBAACC;IAAuB,IAAI,UAAU;IAAI,SAAS;IAAa,WAAW;MAAxD,IAAiF;GAG7G,MAAMC,cAAmC,UAAU,YACjD,oBAAC;IAAI,KAAK,UAAU;IAAW,KAAI;IAAG,eAAY;IAAO,WAAW,wBAAwB;KAAI,GAC9F;GAEJ,MAAMC,YAAiC,UAAU,UAC/C,oBAAC;IAAI,KAAK,UAAU;IAAS,KAAI;IAAG,eAAY;IAAO,WAAW,wBAAwB;KAAI,GAC5F;AAEJ,UACE,oBAACrC;IACC;IAEA,IAAI,UAAU;IACd,SAAS;IACT,UACE,aACC,CAAC,eAAe,CAAC,wBAClB,6BACA,QAAQ,qBACP,UAAkB,QAAQ;IAE7B,WAAW,GAAG,QAAQ,iBAAiB,UAAU,QAAQ;IACzD,eAAY;IACZ,SAAS,UAAU,SAAS,aAAa,KAAK,YAAY,UAAU;IACpE,OAAO,UAAU,SAAS,aAAa,KAAK,YAAY,YAAY;IACpE,WAAW;IACX,SAAS;IACT,MAAM;cAEL,cAAc;MAlBV,IAmBE;;EAIb,KAAK,0BAA0B,MAAM;GACnC,MAAMsC,UAAe,qBAAqB,UAAU,QAAS;GAC7D,MAAMC,QAAqC,mBAAmB,UAAU,MAAM;GAC9E,MAAMC,iBAAyB,IAAI;IACjC,cAAc;IACd,WACE,OAAO,WAAW,UAAU,WAAY,UAAU,QAA6C;IAClG,CAAC;AACF,UACE,oBAACC;IAEC,IAAI,UAAU;IACd,WAAW,GAAG,UAAU,SAAS,eAAe;IACvC;IACF;cAEN,QAAQ,UAAU,MAAM;MANpB,IAOM;;EAIjB,KAAK,0BAA0B,QAC7B,QAAO,oBAACC,6BAAmB,QAAQ,UAAU,MAAM,IAAI,MAAlC,IAA+C;EAGtE,KAAK,0BAA0B,QAAQ;GACrC,MAAM5C,aAAqB,UAAU;GACrC,MAAMG,QAAgB,WAAW,eAAe;GAEhD,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;GAG3D,MAAMyC,iBAAsB,UAAU,WAAW,EAAE,EAAE,KAAK,SAAc;IACtE,OAAO,OAAO,QAAQ,WAAW,MAAM,OAAO,IAAI,SAAS,IAAI,SAAS,GAAG;IAC3E,OAAO,OAAO,QAAQ,WAAW,MAAM,OAAO,IAAI,SAAS,GAAG;IAC/D,EAAE;AAEH,UACE,oBAACC;IAEC,IAAI,UAAU;IACd,MAAM;IACN,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,aAAa,QAAQ,UAAU,YAAY;IAC3C,UAAU,UAAU;IACpB,SAAS;IACF;IACA;IACP,WAAW,MAAiB,cAAc,YAAY,EAAE,OAAO,MAAM;IACrE,cAAmB,QAAQ,cAAc,WAAW;IACpD,WAAW,GAAG,QAAQ,gBAAgB,UAAU,QAAQ;MAXnD,IAYL;;EAIN,KAAK,0BAA0B,WAAW;GACxC,MAAM9C,aAAqB,UAAU;GACrC,MAAMG,QAAgB,WAAW,eAAe;GAEhD,MAAMC,QADqB,cAAc,eAAe,QACtB,WAAW,cAAc;AAE3D,UACE,oBAAC2C;IAEC,IAAI,UAAU;IACd,MAAM;IACN,OAAO,QAAQ,UAAU,MAAM,IAAI;IACnC,aAAa,QAAQ,UAAU,YAAY;IAC3C,UAAU,UAAU;IACpB,YAAY,UAAU;IACf;IACA;IACP,WAAW,MAAiB,cAAc,YAAY,EAAE,OAAO,MAAM;IACrE,cAAmB,QAAQ,cAAc,WAAW;IACpD,WAAW,GAAG,QAAQ,gBAAgB,UAAU,QAAQ;MAXnD,IAYL;;EAMN,KAAK,0BAA0B,WAC7B,QAAO,QAAQ,aACb,oBAACC;GAAyB,GAAI,qBAAqB;GAAE,YAAY,QAAQ;KAApD,IAAkE,GAEvF,gBAAgB,cAAc;EAGlC,KAAK,0BAA0B,eAC7B,QAAO,QAAQ,iBACb,oBAACC;GAA6B,GAAI,qBAAqB;GAAE,gBAAgB,QAAQ;KAAxD,IAA0E,GAEnG,gBAAgB,mBAAmB;EAGvC,KAAK,0BAA0B,eAC7B,QAAO,QAAQ,iBACb,oBAACC;GAA6B,GAAI,qBAAqB;GAAE,gBAAgB,QAAQ;KAAxD,IAA0E,GAEnG,gBAAgB,mBAAmB;EAGvC,KAAK,0BAA0B;AAC7B,OAAI,UAAU,cAAc,UAAU,WAAW,SAAS,GAAG;IAC3D,MAAMC,YAAoB,IAAI;KAC5B,SAAS;KACT,eAAe;KACf,KAAK,QAAQ,OAAO,MAAM,SAAS,QAAQ,MAAM;KAClD,CAAC;IAEF,MAAMC,kBAAuB,UAAU,WACpC,KAAK,gBAAqB,UACzB,4BACE,gBACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;KACE,GAAG;KACH,KAAK,eAAe,MAAM,GAAG,UAAU,GAAG,GAAG;KAC9C,CACF,CACF,CACA,OAAO,QAAQ;AAMlB,WACE,oBAAC;KACC,IAAI,UAAU;KAEd,WAAW,GAAG,UAAU,SAAS,UAAU;KAC3C,WAAW,UAA4C,MAAM,gBAAgB;eAE5E;OAJI,IAKA;;AAGX,UAAO;EAGT,KAAK,0BAA0B,UAAU;GACvC,MAAMC,iBAA0D,UAAU;GAE1E,MAAM,+BAAqC;AACzC,QAAI,CAAC,kBAAkB,CAAC,QAAQ,SAC9B;IAEF,MAAM,iBAAiB,OAAO,eAAe,aAAa,sBAAsB,OAAO;IACvF,MAAM/B,uBAAgC,eAAe,aAAa,KAAK,OAAO,sBAAsB,QAAQ;IAC5G,MAAMgC,kBAAyC;KAC7C,WAAW;KACX,IAAI,GAAG,UAAU,GAAG;KACpB,KAAK,eAAe;KACpB,MAAM,0BAA0B;KACjC;IACD,MAAMC,WAAmC,EAAE;AAC3C,WAAO,KAAK,WAAW,CAAC,SAAS,UAAkB;AACjD,cAAS,SAAS,WAAW;MAC7B;AACF,YAAQ,SAAS,iBAAiB,UAAU,qBAAqB;;GAMnE,MAAM,4BAA4B,WAChC,OAAO,aAAa,kBAAkB,KAAK,gBAAgB;GAE7D,MAAMC,sBAA2E,kBAC5E,UAAkD;IACjD,MAAMC,SAAoC,MAAM,OAAuB,QAAQ,IAAI;AACnF,QAAI,CAAC,UAAU,CAAC,yBAAyB,OAAO,CAC9C;AAEF,UAAM,gBAAgB;AACtB,4BAAwB;OAE1B;GAEJ,MAAMC,wBAAgF,kBACjF,UAAqD;AACpD,QAAI,MAAM,QAAQ,WAAW,MAAM,QAAQ,IACzC;IAEF,MAAMD,SAAoC,MAAM,OAAuB,QAAQ,IAAI;AACnF,QAAI,CAAC,UAAU,CAAC,yBAAyB,OAAO,CAC9C;AAEF,UAAM,gBAAgB;AACtB,4BAAwB;OAE1B;AAEJ,UAME,oBAAC;IAEC,WAAW,kBAAkB;IAC7B,SAAS;IACT,WAAW;IAGX,yBAAyB,EAAC,QAAQ,UAAU,SAAS,uBAAuB,QAAQ,UAAU,MAAM,CAAC,CAAC,EAAC;MANlG,IAOL;;EAIN,KAAK,0BAA0B,OAAO;GACpC,MAAME,iBAAyB,QAAQ,UAAU,QAAQ,UAAU,CAAC;GACpE,MAAMC,gBAAwB,QAAQ,UAAU,OAAO,UAAU,CAAC;AAClE,UACE,oBAACC;IAEC,WACE,EACE,QAAQ;KACN,KAAK,QAAQ,UAAU,IAAI,IAAI,QAAQ,UAAU,MAAM,IAAI;KAC3D,QAAQ,mBAAmB,QAAQ,UAAU,OAAO;KACpD,KAAK,QAAQ,UAAU,IAAI;KAC3B,OAAO,kBAAkB,QAAQ,UAAU,OAAO;KACnD,EACF;IAEH,YAAY;IACZ,YAAY;IACZ,aAAa;IACb,WAAW;IACX,qBAA2B;AACzB,WAAM,IAAI,MAAM,4BAA4B;;IAE9C,eAAe;MAlBV,IAmBL;;EAIN,KAAK,0BAA0B,MAAM;GACnC,MAAMC,WAAmB,UAAU,QAAQ;GAC3C,MAAMC,gBAAqBC,yBAAiB;AAC5C,OAAI,CAAC,eAAe;AAClB,aAAO,KAAK,uBAAuB,SAAS,qBAAqB;AACjE,WAAO;;AAET,UAAO,oBAAC;IAAwB,MAAM,UAAU,QAAQ;IAAI,OAAO,UAAU,SAAS;MAA3D,IAA6E;;EAG1G,KAAK,0BAA0B,OAAO;GACpC,MAAMC,YAAqB,UAAkB,aAAa;GAC1D,MAAMC,MAAe,UAAkB,OAAO;GAC9C,MAAMC,QAAiB,UAAkB,SAAS;GAClD,MAAMC,UAAmB,UAAkB,WAAW;GAOtD,MAAMC,WAAwC,UAAU;GACxD,MAAMC,cACJ,OAAO,aAAa,WAAW,OAAO,SAAS,GAAG,OAAO,aAAa,WAAW,WAAW;GAC9F,MAAMC,QACJ,OAAO,SAAS,YAAY,IAAI,KAAK,MAAM,YAAY,IAAI,IACvD,KAAK,IAAI,KAAK,MAAM,YAAY,EAAE,gBAAgB,GAClD;GAGN,MAAMC,WAAoB,UAAU,WAAW,SAAS;GACxD,MAAMC,cAAsB,UAAU,WAAW;GAIjD,MAAMC,QAAgB,gBAAgB,YAAY,QAAQ;GAwB1D,MAAMC,aAAqB,IArBzB,UAAU,OACN;IACE,YAAY,UAAU,SAAS;IAC/B,SAAS;IACT,KAAK,GAAG,MAAM,GAAI;IAClB,cAAc,WAAW,WAAW;IACpC,gBAAgB;IAChB,OAAO;IACP,GAAI,WACA,EAAC,kBAAkB,UAAU,MAAM,IAAI,MAAM,IAAG,GAChD,EAAC,qBAAqB,UAAU,MAAM,IAAI,MAAM,IAAG;IACxD,GACD;IACE,YAAY;IACZ,SAAS;IACT,eAAe;IACf,UAAU;IACV,KAAK,GAAG,MAAM,GAAI;IAClB,gBAAgB;IACjB,CAEuD;GAE9D,MAAMC,gBAAyC,UAAU,aACrD,UAAU,WAAW,KAAK,gBAAqB,UAC7C,4BACE,gBACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;IACE,GAAG;IACH,SAAS;IACT,KAAK,eAAe,MAAM,GAAG,UAAU,GAAG,GAAG;IAC9C,CACF,CACF,GACD,EAAE;AAEN,UACE,oBAAC;IAAc,IAAI,UAAU;IAAI,WAAW,GAAG,UAAU,SAAS,WAAW;cAC1E;MADO,IAEJ;;EAIV,KAAK,0BAA0B,SAAS;GACtC,MAAMC,uBAA+D,QAAQ,iBAAiB;AAE9F,UACE,oBAACC;IAEC,aAAa;IACD;IACG;IACf,GAAG,QAAQ;MAJN,IAKL;;EAIN,KAAK,0BAA0B,OAAO;GACpC,MAAMC,eAAuB,QAAS,UAAkB,MAAM,IAAI;GAClE,MAAMC,YAAoB,OAAO,QAAQ,iBAAiB,eAAe,IAAI;AAG7E,UAAO,oBAACC;IAAoB,WAFF,YAAY,IAAI,KAAK,IAAI,GAAG,KAAK,OAAO,YAAY,KAAK,KAAK,IAAI,IAAK,CAAC,GAAG;IAErC;MAAzC,IAAyD;;EAGlF,KAAK,0BAA0B,cAAc;GAC3C,MAAMC,YAAiC,UAAkB;GACzD,MAAM/E,QAAgB,aAAa,QAAQ,iBAAiB,OAAO,QAAQ,eAAe,cAAc,GAAG,GAAG;AAG9G,UAAO,oBAACgF;IAAuB,OAFO,QAAS,UAAkB,MAAM,IAAI;IAE1B,QAAQ,QAAQ,UAAU,OAAO;IAAS;MAAjE,IAA0E;;EAGtG,KAAK,0BAA0B,cAAc;GAC3C,MAAMD,YAAgC,UAAU;GAChD,MAAME,QAAwB,mBAC5B,aAAa,QAAQ,iBAAiB,QAAQ,eAAe,aAAa,OAC3E,CAAC,KAAK,UAAwB;IAAC,GAAG;IAAM,OAAO,QAAQ,KAAK,MAAM;IAAC,EAAE;AAGtE,OAAI,MAAM,WAAW,EACnB,QAAO;AAGT,UAAO,oBAACC;IAAuB,OAAO,QAAQ,UAAU,MAAM,IAAI;IAAkB;MAA1D,IAAmE;;EAG/F;AAEE,YAAO,KAAK,+BAA+B,UAAU,KAAK,oBAAoB;AAC9E,UAAO;;;;;;AAOb,MAAa,0BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAuBA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;AAKjD,MAAa,0BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAqBA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;AAKjD,MAAa,4BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAuBA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;AAKjD,MAAa,gCACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAEA,WACG,KAAK,WAAkC,UACtC,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,gBACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACrB,cAAc;CACf,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK;;;;;AAMjD,MAAa,8BACX,YACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,YAmCA,WACG,KAAK,WAAgB,UACpB,4BACE,WACA,YACA,eACA,YACA,WACA,aACA,WACA,eACA,UACA;CACE,GAAG;CACH,KAAK,UAAU,MAAM;CACtB,CACF,CACF,CACA,QAAQ,MAAyB,MAAM,KAAK"}

package/dist/components/common/LanguageSwitcher/BaseLanguageSwitcher.js

@@ -1,8 +1,8 @@
 import { cx } from "../../../styles/emotion.js";
 import useTheme_default from "../../../contexts/Theme/useTheme.js";
 import Check_default from "../../primitives/Icons/Check.js";
-import BaseLanguageSwitcher_styles_default from "./BaseLanguageSwitcher.styles.js";
 import ChevronDown_default from "../../primitives/Icons/ChevronDown.js";
+import BaseLanguageSwitcher_styles_default from "./BaseLanguageSwitcher.styles.js";
 import { useEffect, useState } from "react";
 import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
 import { FloatingFocusManager, FloatingPortal, autoUpdate, flip, offset, shift, useClick, useDismiss, useFloating, useInteractions, useRole } from "@floating-ui/react";

package/dist/components/{admin → management}/AgentCreate/AgentCreate.d.ts

@@ -7,7 +7,8 @@ export type AgentCreateProps = Omit<BaseAgentCreateProps, 'agentTypes' | 'error'
      */
     onCreated?: (agent: Agent) => void;
     /**
-     * Organization unit the agent is created in. Defaults to the signed-in user's organization unit.
+     * Organization unit the agent is created in. Without it, the resource is created in the
+     * current project (sent as `projectId`) when one is chosen, otherwise in the signed-in user's organization unit.
      */
     ouId?: string;
     /**

package/dist/components/management/AgentCreate/AgentCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentCreate.d.ts","sourceRoot":"","sources":["../../../../src/components/management/AgentCreate/AgentCreate.tsx"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,EASN,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,EAAE,EAAwB,MAAM,OAAO,CAAC;AAChD,OAAwB,EAAwB,oBAAoB,EAAC,MAAM,mBAAmB,CAAC;AAO/F,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,EAAE,YAAY,GAAG,OAAO,GAAG,cAAc,GAAG,UAAU,CAAC,GAAG;IAChH;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACnC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAiDrC,CAAC;AAEF,eAAe,WAAW,CAAC"}

package/dist/components/{admin → management}/AgentCreate/AgentCreate.js

@@ -2,13 +2,13 @@ import useTranslation_default from "../../../hooks/useTranslation.js";
 import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
 import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
 import useResourceMutation_default from "../../../hooks/management/useResourceMutation.js";
-import useDefaultOuId_default from "../shared/useDefaultOuId.js";
 import BaseAgentCreate_default from "./BaseAgentCreate.js";
+import useProjectPlacement_default from "../shared/useProjectPlacement.js";
 import { AgentQueryKeys, createAgent, getAgentTypes, toManagementErrorMessage } from "@thunderid/browser";
 import { useMemo } from "react";
 import { jsx } from "react/jsx-runtime";
 
-//#region src/components/admin/AgentCreate/AgentCreate.tsx
+//#region src/components/management/AgentCreate/AgentCreate.tsx
 /**
 * Registers an agent through the management API.
 *
@@ -19,7 +19,8 @@ import { jsx } from "react/jsx-runtime";
 */
 const AgentCreate = ({ onCreated, ouId, owner, preferences,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
-	const resolvedOuId = useDefaultOuId_default(ouId);
+	const placement = useProjectPlacement_default(ouId);
+	const canPlace = Boolean(placement.ouId ?? placement.projectId);
 	const agentsEndpoint = useManagementEndpoint_default("agents");
 	const agentTypesEndpoint = useManagementEndpoint_default("agentTypes");
 	const { data: agentTypes } = useResourceQuery_default([AgentQueryKeys.AGENT_TYPES, { limit: 100 }], (fetcher) => getAgentTypes({
@@ -37,19 +38,19 @@ const AgentCreate = ({ onCreated, ouId, owner, preferences,...rest }) => {
 		value: agentType.handle
 	})), [agentTypes]);
 	const handleSubmit = ({ description, name, type }) => {
-		if (resolvedOuId) mutate({
+		if (canPlace) mutate({
 			attributes: { name },
 			description,
-			ouId: resolvedOuId,
 			owner,
-			type
+			type,
+			...placement
 		});
 	};
 	return /* @__PURE__ */ jsx(BaseAgentCreate_default, {
 		agentTypes: options,
 		onSubmit: handleSubmit,
 		isSubmitting: isLoading,
-		error: resolvedOuId ? toManagementErrorMessage(t, error, "admin.agents.create.error") : t("admin.common.errors.no_ou"),
+		error: canPlace ? toManagementErrorMessage(t, error, "admin.agents.create.error") : t("admin.common.errors.no_ou"),
 		preferences,
 		...rest
 	});

package/dist/components/management/AgentCreate/AgentCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentCreate.js","names":["AgentCreate: FC<AgentCreateProps>","useTranslation","placement: ProjectPlacement","useProjectPlacement","agentsEndpoint: ManagementEndpoint","useManagementEndpoint","agentTypesEndpoint: ManagementEndpoint","useResourceQuery","useResourceMutation","options: SelectOption[]","BaseAgentCreate"],"sources":["../../../../src/components/management/AgentCreate/AgentCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  Agent,\n  AgentQueryKeys,\n  AgentType,\n  AgentTypeListResponse,\n  CreateAgentRequest,\n  SelectOption,\n  createAgent,\n  getAgentTypes,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseAgentCreate, {AgentCreateSubmission, BaseAgentCreateProps} from './BaseAgentCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useProjectPlacement, {ProjectPlacement} from '../shared/useProjectPlacement';\n\nexport type AgentCreateProps = Omit<BaseAgentCreateProps, 'agentTypes' | 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created agent.\n   */\n  onCreated?: (agent: Agent) => void;\n  /**\n   * Organization unit the agent is created in. Without it, the resource is created in the\n   * current project (sent as `projectId`) when one is chosen, otherwise in the signed-in user's organization unit.\n   */\n  ouId?: string;\n  /**\n   * The person responsible for the agent. Defaults to the server's choice, usually the creator.\n   */\n  owner?: string;\n};\n\n/**\n * Registers an agent through the management API.\n *\n * @example\n * ```tsx\n * <AgentCreate onCreated={(agent) => navigate(`/agents/${agent.id}`)} />\n * ```\n */\nconst AgentCreate: FC<AgentCreateProps> = ({\n  onCreated,\n  ouId,\n  owner,\n  preferences,\n  ...rest\n}: AgentCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const placement: ProjectPlacement = useProjectPlacement(ouId);\n  const canPlace = Boolean(placement.ouId ?? placement.projectId);\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const agentTypesEndpoint: ManagementEndpoint = useManagementEndpoint('agentTypes');\n  const {data: agentTypes}: ResourceQueryResult<AgentTypeListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENT_TYPES, {limit: 100}],\n    (fetcher) => getAgentTypes({...agentTypesEndpoint, fetcher, limit: 100}),\n  );\n  const {error, isLoading, mutate}: ResourceMutationResult<Agent, CreateAgentRequest> = useResourceMutation(\n    (payload: CreateAgentRequest, fetcher) => createAgent({...agentsEndpoint, fetcher, payload}),\n    () => [[AgentQueryKeys.AGENTS]],\n    {onSuccess: onCreated},\n  );\n\n  const options: SelectOption[] = useMemo(\n    () =>\n      (agentTypes?.types ?? []).map((agentType: AgentType) => ({\n        label: agentType.displayName,\n        value: agentType.handle,\n      })),\n    [agentTypes],\n  );\n\n  const handleSubmit = ({description, name, type}: AgentCreateSubmission): void => {\n    if (canPlace) {\n      void mutate({attributes: {name}, description, owner, type, ...placement});\n    }\n  };\n\n  return (\n    <BaseAgentCreate\n      agentTypes={options}\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        canPlace ? toManagementErrorMessage(t, error, 'admin.agents.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default AgentCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA8CA,MAAMA,eAAqC,EACzC,WACA,MACA,OACA,YACA,GAAG,WACiC;CACpC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,YAA8BC,4BAAoB,KAAK;CAC7D,MAAM,WAAW,QAAQ,UAAU,QAAQ,UAAU,UAAU;CAC/D,MAAMC,iBAAqCC,8BAAsB,SAAS;CAC1E,MAAMC,qBAAyCD,8BAAsB,aAAa;CAClF,MAAM,EAAC,MAAM,eAA0DE,yBACrE,CAAC,eAAe,aAAa,EAAC,OAAO,KAAI,CAAC,GACzC,YAAY,cAAc;EAAC,GAAG;EAAoB;EAAS,OAAO;EAAI,CAAC,CACzE;CACD,MAAM,EAAC,OAAO,WAAW,WAA6DC,6BACnF,SAA6B,YAAY,YAAY;EAAC,GAAG;EAAgB;EAAS;EAAQ,CAAC,QACtF,CAAC,CAAC,eAAe,OAAO,CAAC,EAC/B,EAAC,WAAW,WAAU,CACvB;CAED,MAAMC,UAA0B,eAE3B,YAAY,SAAS,EAAE,EAAE,KAAK,eAA0B;EACvD,OAAO,UAAU;EACjB,OAAO,UAAU;EAClB,EAAE,EACL,CAAC,WAAW,CACb;CAED,MAAM,gBAAgB,EAAC,aAAa,MAAM,WAAuC;AAC/E,MAAI,SACF,CAAK,OAAO;GAAC,YAAY,EAAC,MAAK;GAAE;GAAa;GAAO;GAAM,GAAG;GAAU,CAAC;;AAI7E,QACE,oBAACC;EACC,YAAY;EACZ,UAAU;EACV,cAAc;EACd,OACE,WAAW,yBAAyB,GAAG,OAAO,4BAA4B,GAAG,EAAE,4BAA4B;EAEhG;EACb,GAAI;GACJ;;AAIN,0BAAe"}

package/dist/components/management/AgentCreate/BaseAgentCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseAgentCreate.d.ts","sourceRoot":"","sources":["../../../../src/components/management/AgentCreate/BaseAgentCreate.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAC,WAAW,EAAE,YAAY,EAAC,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAc,EAAE,EAA2B,SAAS,EAAW,MAAM,OAAO,CAAC;AAUpF;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;OAEG;IACH,iBAAiB,EAAE,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnF;;OAEG;IACH,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;IACtB;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,MAAM,EAAE;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAC,CAAC;CAC3D;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,0BAA0B,KAAK,SAAS,CAAC;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,QAAQ,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;IACjD,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAwG7C,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/components/{admin → management}/AgentCreate/BaseAgentCreate.js

@@ -9,7 +9,7 @@ import AdminSection_default from "../shared/AdminSection.js";
 import { useState } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
 
-//#region src/components/admin/AgentCreate/BaseAgentCreate.tsx
+//#region src/components/management/AgentCreate/BaseAgentCreate.tsx
 /**
 * A form that collects a new agent's name, type and description. Holds no data of its own: pass
 * the agent types and handle the submission.

package/dist/components/management/AgentCreate/BaseAgentCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseAgentCreate.js","names":["BaseAgentCreate: FC<BaseAgentCreateProps>","useTheme","styles: Record<string, string>","useStyles","useTranslation","type: string","isValid: boolean","setters: Record<'description' | 'name' | 'type', (value: string) => void>","AdminSection","Alert","TextField","Select","Button"],"sources":["../../../../src/components/management/AgentCreate/BaseAgentCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Preferences, SelectOption} from '@thunderid/browser';\nimport {ChangeEvent, FC, FormEvent, ReactElement, ReactNode, useState} from 'react';\nimport useTheme from '../../../contexts/Theme/useTheme';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport Button from '../../primitives/Button/Button';\nimport Select from '../../primitives/Select/Select';\nimport TextField from '../../primitives/TextField/TextField';\nimport AdminSection from '../shared/AdminSection';\nimport useStyles from '../shared/AdminSection.styles';\n\n/**\n * The agent {@link BaseAgentCreate} submits. The organization unit is added by the caller.\n */\nexport interface AgentCreateSubmission {\n  description?: string;\n  name: string;\n  type: string;\n}\n\n/**\n * What {@link BaseAgentCreate} hands its `children` render function, so the form can be built with any UI.\n */\nexport interface BaseAgentCreateRenderProps {\n  agentTypes: SelectOption[];\n  error: string | null;\n  /**\n   * Sets one field of the form.\n   */\n  handleInputChange: (field: 'description' | 'name' | 'type', value: string) => void;\n  /**\n   * Submits the current values. Does nothing while they are not valid.\n   */\n  handleSubmit: () => void;\n  isSubmitting: boolean;\n  /**\n   * Whether the values can be submitted.\n   */\n  isValid: boolean;\n  onCancel?: () => void;\n  values: {description: string; name: string; type: string};\n}\n\nexport interface BaseAgentCreateProps {\n  /**\n   * The agent types to choose from. The first one is selected by default.\n   */\n  agentTypes: SelectOption[];\n  /**\n   * Renders custom UI in place of the default form. Receives the values, their setters, the agent\n   * types, the submit handler and the submission state.\n   */\n  children?: (props: BaseAgentCreateRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isSubmitting?: boolean;\n  onCancel?: () => void;\n  onSubmit: (agent: AgentCreateSubmission) => void;\n  preferences?: Preferences;\n  title?: string;\n}\n\n/**\n * A form that collects a new agent's name, type and description. Holds no data of its own: pass\n * the agent types and handle the submission.\n */\nconst BaseAgentCreate: FC<BaseAgentCreateProps> = ({\n  agentTypes,\n  children,\n  className,\n  description,\n  error = null,\n  isSubmitting = false,\n  onCancel,\n  onSubmit,\n  preferences,\n  title,\n}: BaseAgentCreateProps): ReactElement => {\n  const {theme, colorScheme} = useTheme();\n  const styles: Record<string, string> = useStyles(theme, colorScheme);\n  const {t} = useTranslation(preferences?.i18n);\n  const [name, setName] = useState<string>('');\n  const [chosenType, setType] = useState<string>('');\n  const type: string = chosenType || (agentTypes[0]?.value ?? '');\n  const [agentDescription, setAgentDescription] = useState<string>('');\n\n  const isValid: boolean = Boolean(name.trim()) && Boolean(type);\n\n  const submit = (): void => {\n    if (isValid) {\n      onSubmit({description: agentDescription.trim() || undefined, name: name.trim(), type});\n    }\n  };\n\n  const handleSubmit = (event: FormEvent<HTMLFormElement>): void => {\n    event.preventDefault();\n    submit();\n  };\n\n  if (children) {\n    const setters: Record<'description' | 'name' | 'type', (value: string) => void> = {\n      description: setAgentDescription,\n      name: setName,\n      type: setType,\n    };\n\n    return (\n      <div className={className}>\n        {children({\n          agentTypes,\n          error,\n          handleInputChange: (field: 'description' | 'name' | 'type', value: string): void => setters[field](value),\n          handleSubmit: submit,\n          isSubmitting,\n          isValid,\n          onCancel,\n          values: {description: agentDescription, name, type},\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"agent-create\"\n      className={className}\n      title={title ?? t('admin.agents.create.title')}\n      description={description}\n      preferences={preferences}\n    >\n      <form className={styles['form']} onSubmit={handleSubmit} noValidate>\n        {error && (\n          <Alert variant=\"error\" role=\"alert\">\n            {error}\n          </Alert>\n        )}\n        <TextField\n          name=\"name\"\n          label={t('admin.agents.create.fields.name')}\n          required\n          value={name}\n          onChange={(event: ChangeEvent<HTMLInputElement>): void => setName(event.target.value)}\n        />\n        <Select\n          label={t('admin.agents.create.fields.type')}\n          name=\"type\"\n          required\n          value={type}\n          options={agentTypes}\n          onChange={(event: ChangeEvent<HTMLSelectElement>): void => setType(event.target.value)}\n        />\n        <TextField\n          name=\"description\"\n          label={t('admin.agents.create.fields.description')}\n          value={agentDescription}\n          onChange={(event: ChangeEvent<HTMLInputElement>): void => setAgentDescription(event.target.value)}\n        />\n        <div className={styles['formActions']}>\n          {onCancel && (\n            <Button type=\"button\" variant=\"text\" onClick={onCancel} disabled={isSubmitting}>\n              {t('admin.common.actions.cancel')}\n            </Button>\n          )}\n          <Button type=\"submit\" loading={isSubmitting} disabled={!isValid || isSubmitting}>\n            {t('admin.agents.create.submit')}\n          </Button>\n        </div>\n      </form>\n    </AdminSection>\n  );\n};\n\nexport default BaseAgentCreate;\n"],"mappings":";;;;;;;;;;;;;;;;AAsEA,MAAMA,mBAA6C,EACjD,YACA,UACA,WACA,aACA,QAAQ,MACR,eAAe,OACf,UACA,UACA,aACA,YACwC;CACxC,MAAM,EAAC,OAAO,gBAAeC,kBAAU;CACvC,MAAMC,SAAiCC,4BAAU,OAAO,YAAY;CACpE,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,MAAM,WAAW,SAAiB,GAAG;CAC5C,MAAM,CAAC,YAAY,WAAW,SAAiB,GAAG;CAClD,MAAMC,OAAe,eAAe,WAAW,IAAI,SAAS;CAC5D,MAAM,CAAC,kBAAkB,uBAAuB,SAAiB,GAAG;CAEpE,MAAMC,UAAmB,QAAQ,KAAK,MAAM,CAAC,IAAI,QAAQ,KAAK;CAE9D,MAAM,eAAqB;AACzB,MAAI,QACF,UAAS;GAAC,aAAa,iBAAiB,MAAM,IAAI;GAAW,MAAM,KAAK,MAAM;GAAE;GAAK,CAAC;;CAI1F,MAAM,gBAAgB,UAA4C;AAChE,QAAM,gBAAgB;AACtB,UAAQ;;AAGV,KAAI,UAAU;EACZ,MAAMC,UAA4E;GAChF,aAAa;GACb,MAAM;GACN,MAAM;GACP;AAED,SACE,oBAAC;GAAe;aACb,SAAS;IACR;IACA;IACA,oBAAoB,OAAwC,UAAwB,QAAQ,OAAO,MAAM;IACzG,cAAc;IACd;IACA;IACA;IACA,QAAQ;KAAC,aAAa;KAAkB;KAAM;KAAK;IACpD,CAAC;IACE;;AAIV,QACE,oBAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,4BAA4B;EACjC;EACA;YAEb,qBAAC;GAAK,WAAW,OAAO;GAAS,UAAU;GAAc;;IACtD,SACC,oBAACC;KAAM,SAAQ;KAAQ,MAAK;eACzB;MACK;IAEV,oBAACC;KACC,MAAK;KACL,OAAO,EAAE,kCAAkC;KAC3C;KACA,OAAO;KACP,WAAW,UAA+C,QAAQ,MAAM,OAAO,MAAM;MACrF;IACF,oBAACC;KACC,OAAO,EAAE,kCAAkC;KAC3C,MAAK;KACL;KACA,OAAO;KACP,SAAS;KACT,WAAW,UAAgD,QAAQ,MAAM,OAAO,MAAM;MACtF;IACF,oBAACD;KACC,MAAK;KACL,OAAO,EAAE,yCAAyC;KAClD,OAAO;KACP,WAAW,UAA+C,oBAAoB,MAAM,OAAO,MAAM;MACjG;IACF,qBAAC;KAAI,WAAW,OAAO;gBACpB,YACC,oBAACE;MAAO,MAAK;MAAS,SAAQ;MAAO,SAAS;MAAU,UAAU;gBAC/D,EAAE,8BAA8B;OAC1B,EAEX,oBAACA;MAAO,MAAK;MAAS,SAAS;MAAc,UAAU,CAAC,WAAW;gBAChE,EAAE,6BAA6B;OACzB;MACL;;IACD;GACM;;AAInB,8BAAe"}

package/dist/components/management/AgentDetails/AgentDetails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentDetails.d.ts","sourceRoot":"","sources":["../../../../src/components/management/AgentDetails/AgentDetails.tsx"],"names":[],"mappings":"AAgBA,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AACvC,OAAyB,EAAC,qBAAqB,EAAC,MAAM,oBAAoB,CAAC;AAO3E,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAClC,qBAAqB,EACnB,OAAO,GACP,OAAO,GACP,QAAQ,GACR,YAAY,GACZ,WAAW,GACX,0BAA0B,GAC1B,kBAAkB,GAClB,UAAU,GACV,mBAAmB,GACnB,OAAO,CACV,GAAG;IACF,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;CACxB,CAAC;AAEF;;;;;;;;GAQG;AACH,QAAA,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CA4DvC,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/components/{admin → management}/AgentDetails/AgentDetails.js

@@ -7,7 +7,7 @@ import BaseAgentDetails_default from "./BaseAgentDetails.js";
 import { AgentQueryKeys, GroupQueryKeys, RoleQueryKeys, deleteAgent, getAgent, getAgentGroups, getAgentRoles, toManagementErrorMessage } from "@thunderid/browser";
 import { jsx } from "react/jsx-runtime";
 
-//#region src/components/admin/AgentDetails/AgentDetails.tsx
+//#region src/components/management/AgentDetails/AgentDetails.tsx
 /**
 * Shows an agent with the groups and roles it holds, and optionally lets the signed-in user delete
 * it.

package/dist/components/management/AgentDetails/AgentDetails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentDetails.js","names":["AgentDetails: FC<AgentDetailsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","agent: ResourceQueryResult<Agent>","useResourceQuery","groups: ResourceQueryResult<MembershipGroupListResponse>","roles: ResourceQueryResult<AgentRoleListResponse>","deletion: ResourceMutationResult<void, string>","useResourceMutation","lifecycle: AccountLifecycleState","useAccountLifecycle","BaseAgentDetails"],"sources":["../../../../src/components/management/AgentDetails/AgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  Agent,\n  AgentQueryKeys,\n  AgentRoleListResponse,\n  GroupQueryKeys,\n  MembershipGroupListResponse,\n  RoleQueryKeys,\n  deleteAgent,\n  getAgent,\n  getAgentGroups,\n  getAgentRoles,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseAgentDetails, {BaseAgentDetailsProps} from './BaseAgentDetails';\nimport useAccountLifecycle, {AccountLifecycleState} from '../../../hooks/management/useAccountLifecycle';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type AgentDetailsProps = Omit<\n  BaseAgentDetailsProps,\n  | 'agent'\n  | 'error'\n  | 'groups'\n  | 'isDeleting'\n  | 'isLoading'\n  | 'isRunningLifecycleAction'\n  | 'lifecycleActions'\n  | 'onDelete'\n  | 'onLifecycleAction'\n  | 'roles'\n> & {\n  agentId: string;\n  /**\n   * Whether the agent can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the agent can be suspended, unsuspended and unlocked from this view. Each action runs through its\n   * administration flow and is offered only when the server configures that flow. Reading the configured\n   * flows needs a token that may read the server configuration.\n   * @default false\n   */\n  lifecycleActions?: boolean;\n  /**\n   * Called after the agent has been deleted.\n   */\n  onDeleted?: () => void;\n};\n\n/**\n * Shows an agent with the groups and roles it holds, and optionally lets the signed-in user delete\n * it.\n *\n * @example\n * ```tsx\n * <AgentDetails agentId={agentId} deletable onDeleted={() => navigate('/agents')} />\n * ```\n */\nconst AgentDetails: FC<AgentDetailsProps> = ({\n  agentId,\n  deletable = false,\n  lifecycleActions = false,\n  onDeleted,\n  preferences,\n  ...rest\n}: AgentDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const agent: ResourceQueryResult<Agent> = useResourceQuery(\n    [AgentQueryKeys.AGENT, agentId],\n    (fetcher) => getAgent({...endpoint, agentId, fetcher}),\n    {enabled: Boolean(agentId)},\n  );\n  const groups: ResourceQueryResult<MembershipGroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.MEMBERSHIPS, 'agent', agentId, {limit: 100}],\n    (fetcher) => getAgentGroups({...endpoint, agentId, fetcher, limit: 100}),\n    {enabled: Boolean(agentId)},\n  );\n  const roles: ResourceQueryResult<AgentRoleListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, 'agent', agentId, {limit: 100}],\n    (fetcher) => getAgentRoles({...endpoint, agentId, fetcher, limit: 100}),\n    {enabled: Boolean(agentId)},\n  );\n  const deletion: ResourceMutationResult<void, string> = useResourceMutation(\n    (id: string, fetcher) => deleteAgent({...endpoint, agentId: id, fetcher}),\n    () => [[AgentQueryKeys.AGENTS]],\n    {onSuccess: onDeleted},\n  );\n\n  const lifecycle: AccountLifecycleState = useAccountLifecycle({\n    enabled: lifecycleActions,\n    invalidatedKeys: [[AgentQueryKeys.AGENT, agentId], [AgentQueryKeys.AGENTS]],\n    kind: 'agent',\n    status: agent.data?.status?.value,\n    subject: agentId,\n  });\n\n  return (\n    <BaseAgentDetails\n      agent={agent.data}\n      groups={groups.data?.groups}\n      roles={roles.data?.roles}\n      isLoading={agent.isLoading}\n      error={\n        toManagementErrorMessage(t, agent.error, 'admin.agents.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.agents.details.delete.error') ??\n        toManagementErrorMessage(t, lifecycle.error, 'admin.common.lifecycle.error') ??\n        toManagementErrorMessage(t, lifecycle.loadError, 'admin.common.lifecycle.load_error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(agentId) : undefined}\n      lifecycleActions={lifecycle.actions}\n      isRunningLifecycleAction={lifecycle.isRunning}\n      onLifecycleAction={lifecycleActions ? lifecycle.run : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default AgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAiEA,MAAMA,gBAAuC,EAC3C,SACA,YAAY,OACZ,mBAAmB,OACnB,WACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,8BAAsB,SAAS;CACpE,MAAMC,QAAoCC,yBACxC,CAAC,eAAe,OAAO,QAAQ,GAC9B,YAAY,SAAS;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,EACtD,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMC,SAA2DD,yBAC/D;EAAC,eAAe;EAAa;EAAS;EAAS,EAAC,OAAO,KAAI;EAAC,GAC3D,YAAY,eAAe;EAAC,GAAG;EAAU;EAAS;EAAS,OAAO;EAAI,CAAC,EACxE,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAME,QAAoDF,yBACxD;EAAC,cAAc;EAAkB;EAAS;EAAS,EAAC,OAAO,KAAI;EAAC,GAC/D,YAAY,cAAc;EAAC,GAAG;EAAU;EAAS;EAAS,OAAO;EAAI,CAAC,EACvE,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMG,WAAiDC,6BACpD,IAAY,YAAY,YAAY;EAAC,GAAG;EAAU,SAAS;EAAI;EAAQ,CAAC,QACnE,CAAC,CAAC,eAAe,OAAO,CAAC,EAC/B,EAAC,WAAW,WAAU,CACvB;CAED,MAAMC,YAAmCC,4BAAoB;EAC3D,SAAS;EACT,iBAAiB,CAAC,CAAC,eAAe,OAAO,QAAQ,EAAE,CAAC,eAAe,OAAO,CAAC;EAC3E,MAAM;EACN,QAAQ,MAAM,MAAM,QAAQ;EAC5B,SAAS;EACV,CAAC;AAEF,QACE,oBAACC;EACC,OAAO,MAAM;EACb,QAAQ,OAAO,MAAM;EACrB,OAAO,MAAM,MAAM;EACnB,WAAW,MAAM;EACjB,OACE,yBAAyB,GAAG,MAAM,OAAO,6BAA6B,IACtE,yBAAyB,GAAG,SAAS,OAAO,oCAAoC,IAChF,yBAAyB,GAAG,UAAU,OAAO,+BAA+B,IAC5E,yBAAyB,GAAG,UAAU,WAAW,oCAAoC;EAEvF,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,QAAQ,GAAG;EAClE,kBAAkB,UAAU;EAC5B,0BAA0B,UAAU;EACpC,mBAAmB,mBAAmB,UAAU,MAAM;EACzC;EACb,GAAI;GACJ;;AAIN,2BAAe"}

package/dist/components/management/AgentDetails/BaseAgentDetails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseAgentDetails.d.ts","sourceRoot":"","sources":["../../../../src/components/management/AgentDetails/BaseAgentDetails.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAC,sBAAsB,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAe,MAAM,oBAAoB,CAAC;AAC7G,OAAO,EAAC,EAAE,EAAgB,SAAS,EAAC,MAAM,OAAO,CAAC;AAUlD;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,wBAAwB,EAAE,OAAO,CAAC;IAClC;;OAEG;IACH,gBAAgB,EAAE,sBAAsB,EAAE,CAAC;IAC3C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB;;OAEG;IACH,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,2BAA2B,KAAK,SAAS,CAAC;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;OAEG;IACH,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC5C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;GAGG;AACH,QAAA,MAAM,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CA+H/C,CAAC;AAEF,eAAe,gBAAgB,CAAC"}

package/dist/components/{admin → management}/AgentDetails/BaseAgentDetails.js

@@ -9,7 +9,7 @@ import { ChipList, ConfirmButton, DetailList, Panel } from "../shared/AdminParts
 import { getAgentName } from "@thunderid/browser";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 
-//#region src/components/admin/AgentDetails/BaseAgentDetails.tsx
+//#region src/components/management/AgentDetails/BaseAgentDetails.tsx
 /**
 * Shows an agent's type, owner, client and the groups and roles it holds. Holds no data of its own:
 * pass the agent and handle deletion.

package/dist/components/management/AgentDetails/BaseAgentDetails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseAgentDetails.js","names":["BaseAgentDetails: FC<BaseAgentDetailsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","AdminSection","Spinner","Alert","details: {label: string; value: ReactNode}[]","CopyableText"],"sources":["../../../../src/components/management/AgentDetails/BaseAgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {AccountLifecycleAction, Agent, MembershipGroup, Preferences, getAgentName} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport CopyableText from '../../primitives/CopyableText/CopyableText';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport {AccessStatusBadge, AccountLifecycleButtons} from '../shared/AccountLifecycleParts';\nimport {ChipList, ConfirmButton, DetailList, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * What {@link BaseAgentDetails} hands its `children` render function, so the agent can be shown with any UI.\n */\nexport interface BaseAgentDetailsRenderProps {\n  agent?: Agent;\n  error: string | null;\n  groups: MembershipGroup[];\n  isDeleting: boolean;\n  isLoading: boolean;\n  isRunningLifecycleAction: boolean;\n  /**\n   * The account lifecycle actions offered for the agent. Empty when none is allowed.\n   */\n  lifecycleActions: AccountLifecycleAction[];\n  /**\n   * Deletes the agent. Undefined when deletion is not allowed, including for read-only agents.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action, with the operator's note on a suspension. Undefined when none is allowed.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  roles: string[];\n}\n\nexport interface BaseAgentDetailsProps {\n  /**\n   * Controls rendered next to the agent's name.\n   */\n  actions?: ReactNode;\n  agent?: Agent;\n  /**\n   * Renders custom UI in place of the default view. Receives the agent, its groups and roles, the\n   * loading and error state, and the delete handler.\n   */\n  children?: (props: BaseAgentDetailsRenderProps) => ReactNode;\n  className?: string;\n  error?: string | null;\n  /**\n   * The groups the agent belongs to.\n   */\n  groups?: MembershipGroup[];\n  isDeleting?: boolean;\n  isLoading?: boolean;\n  isRunningLifecycleAction?: boolean;\n  /**\n   * The account lifecycle actions to offer (suspend, unsuspend, unlock), shown only with `onLifecycleAction`. They change\n   * only runtime state, so they apply to read-only agents too.\n   */\n  lifecycleActions?: AccountLifecycleAction[];\n  /**\n   * Deletes the agent. The delete action is hidden when omitted.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action. Suspending and unsuspending ask for confirmation first, and a\n   * suspension takes an optional operator note.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  preferences?: Preferences;\n  /**\n   * The names of the roles the agent holds, directly or through its groups.\n   */\n  roles?: string[];\n}\n\n/**\n * Shows an agent's type, owner, client and the groups and roles it holds. Holds no data of its own:\n * pass the agent and handle deletion.\n */\nconst BaseAgentDetails: FC<BaseAgentDetailsProps> = ({\n  actions,\n  agent,\n  children,\n  className,\n  error = null,\n  groups = [],\n  isDeleting = false,\n  isLoading = false,\n  isRunningLifecycleAction = false,\n  lifecycleActions = [],\n  onDelete,\n  onLifecycleAction,\n  preferences,\n  roles = [],\n}: BaseAgentDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          agent,\n          error,\n          groups,\n          isDeleting,\n          isLoading,\n          isRunningLifecycleAction,\n          lifecycleActions: onLifecycleAction && agent ? lifecycleActions : [],\n          onDelete: agent && !agent.isReadOnly ? onDelete : undefined,\n          onLifecycleAction: agent ? onLifecycleAction : undefined,\n          roles,\n        })}\n      </div>\n    );\n  }\n\n  if (isLoading && !agent) {\n    return (\n      <AdminSection block=\"agent-details\" className={className} preferences={preferences}>\n        <span className={styles['muted']} role=\"status\">\n          <Spinner size=\"small\" /> {t('admin.common.loading')}\n        </span>\n      </AdminSection>\n    );\n  }\n\n  if (!agent) {\n    return (\n      <AdminSection block=\"agent-details\" className={className} preferences={preferences}>\n        <Alert variant=\"error\" role=\"alert\">\n          {error ?? t('admin.common.errors.not_found')}\n        </Alert>\n      </AdminSection>\n    );\n  }\n\n  const details: {label: string; value: ReactNode}[] = [\n    {label: t('admin.agents.details.type'), value: agent.type},\n    {label: t('admin.agents.details.owner'), value: agent.owner ?? t('admin.agents.details.no_owner')},\n    {label: t('admin.common.columns.organization_unit'), value: agent.ouHandle ?? agent.ouId},\n  ];\n\n  if (agent.status) {\n    details.push({label: t('admin.common.columns.status'), value: <AccessStatusBadge status={agent.status.value} />});\n  }\n\n  if (agent.clientId) {\n    details.push({label: t('admin.agents.list.columns.client_id'), value: <CopyableText value={agent.clientId} />});\n  }\n\n  return (\n    <AdminSection\n      block=\"agent-details\"\n      className={className}\n      title={getAgentName(agent)}\n      description={agent.description}\n      preferences={preferences}\n      actions={\n        <>\n          {actions}\n          {onLifecycleAction && (\n            <AccountLifecycleButtons\n              actions={lifecycleActions}\n              collectsOperatorNote\n              isRunning={isRunningLifecycleAction}\n              name={getAgentName(agent)}\n              onAction={onLifecycleAction}\n            />\n          )}\n          {onDelete && !agent.isReadOnly && (\n            <ConfirmButton\n              confirmText={t('admin.agents.details.delete.confirm', {name: getAgentName(agent)})}\n              isLoading={isDeleting}\n              onConfirm={onDelete}\n            >\n              {t('admin.agents.details.delete.action')}\n            </ConfirmButton>\n          )}\n        </>\n      }\n    >\n      {error && (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      )}\n      <Panel title={t('admin.agents.details.overview')}>\n        <DetailList items={details} />\n      </Panel>\n      <Panel title={t('admin.agents.details.groups')}>\n        <ChipList\n          label={t('admin.agents.details.groups')}\n          emptyText={t('admin.agents.details.no_groups')}\n          items={groups.map((group: MembershipGroup) => ({id: group.id, label: group.name}))}\n        />\n      </Panel>\n      <Panel title={t('admin.agents.details.roles')}>\n        <ChipList\n          label={t('admin.agents.details.roles')}\n          emptyText={t('admin.agents.details.no_roles')}\n          items={roles.map((role: string) => ({id: role, label: role}))}\n        />\n      </Panel>\n    </AdminSection>\n  );\n};\n\nexport default BaseAgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;AAoFA,MAAMA,oBAA+C,EACnD,SACA,OACA,UACA,WACA,QAAQ,MACR,SAAS,EAAE,EACX,aAAa,OACb,YAAY,OACZ,2BAA2B,OAC3B,mBAAmB,EAAE,EACrB,UACA,mBACA,aACA,QAAQ,EAAE,OAC+B;CACzC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,4BAAoB;AAE3D,KAAI,SACF,QACE,oBAAC;EAAe;YACb,SAAS;GACR;GACA;GACA;GACA;GACA;GACA;GACA,kBAAkB,qBAAqB,QAAQ,mBAAmB,EAAE;GACpE,UAAU,SAAS,CAAC,MAAM,aAAa,WAAW;GAClD,mBAAmB,QAAQ,oBAAoB;GAC/C;GACD,CAAC;GACE;AAIV,KAAI,aAAa,CAAC,MAChB,QACE,oBAACC;EAAa,OAAM;EAA2B;EAAwB;YACrE,qBAAC;GAAK,WAAW,OAAO;GAAU,MAAK;;IACrC,oBAACC,mBAAQ,MAAK,UAAU;;IAAE,EAAE,uBAAuB;;IAC9C;GACM;AAInB,KAAI,CAAC,MACH,QACE,oBAACD;EAAa,OAAM;EAA2B;EAAwB;YACrE,oBAACE;GAAM,SAAQ;GAAQ,MAAK;aACzB,SAAS,EAAE,gCAAgC;IACtC;GACK;CAInB,MAAMC,UAA+C;EACnD;GAAC,OAAO,EAAE,4BAA4B;GAAE,OAAO,MAAM;GAAK;EAC1D;GAAC,OAAO,EAAE,6BAA6B;GAAE,OAAO,MAAM,SAAS,EAAE,gCAAgC;GAAC;EAClG;GAAC,OAAO,EAAE,yCAAyC;GAAE,OAAO,MAAM,YAAY,MAAM;GAAK;EAC1F;AAED,KAAI,MAAM,OACR,SAAQ,KAAK;EAAC,OAAO,EAAE,8BAA8B;EAAE,OAAO,oBAAC,qBAAkB,QAAQ,MAAM,OAAO,QAAS;EAAC,CAAC;AAGnH,KAAI,MAAM,SACR,SAAQ,KAAK;EAAC,OAAO,EAAE,sCAAsC;EAAE,OAAO,oBAACC,wBAAa,OAAO,MAAM,WAAY;EAAC,CAAC;AAGjH,QACE,qBAACJ;EACC,OAAM;EACK;EACX,OAAO,aAAa,MAAM;EAC1B,aAAa,MAAM;EACN;EACb,SACE;GACG;GACA,qBACC,oBAAC;IACC,SAAS;IACT;IACA,WAAW;IACX,MAAM,aAAa,MAAM;IACzB,UAAU;KACV;GAEH,YAAY,CAAC,MAAM,cAClB,oBAAC;IACC,aAAa,EAAE,uCAAuC,EAAC,MAAM,aAAa,MAAM,EAAC,CAAC;IAClF,WAAW;IACX,WAAW;cAEV,EAAE,qCAAqC;KAC1B;MAEjB;;GAGJ,SACC,oBAACE;IAAM,SAAQ;IAAQ,MAAK;cACzB;KACK;GAEV,oBAAC;IAAM,OAAO,EAAE,gCAAgC;cAC9C,oBAAC,cAAW,OAAO,UAAW;KACxB;GACR,oBAAC;IAAM,OAAO,EAAE,8BAA8B;cAC5C,oBAAC;KACC,OAAO,EAAE,8BAA8B;KACvC,WAAW,EAAE,iCAAiC;KAC9C,OAAO,OAAO,KAAK,WAA4B;MAAC,IAAI,MAAM;MAAI,OAAO,MAAM;MAAK,EAAE;MAClF;KACI;GACR,oBAAC;IAAM,OAAO,EAAE,6BAA6B;cAC3C,oBAAC;KACC,OAAO,EAAE,6BAA6B;KACtC,WAAW,EAAE,gCAAgC;KAC7C,OAAO,MAAM,KAAK,UAAkB;MAAC,IAAI;MAAM,OAAO;MAAK,EAAE;MAC7D;KACI;;GACK;;AAInB,+BAAe"}

package/dist/components/{admin → management}/AgentList/AgentList.d.ts

@@ -3,10 +3,16 @@ import { BaseAgentListProps } from './BaseAgentList';
 export type AgentListProps = Omit<BaseAgentListProps, 'agents' | 'error' | 'isLoading' | 'offset' | 'onPageChange' | 'onSearch' | 'search' | 'totalResults'> & {
     /**
      * Whether to show the search form. Agents are searched by a custom attribute, by default `name`, and
-     * the server matches the whole value.
+     * the server matches the whole value. The server can't combine a search with a project, so the form
+     * is hidden while a project scopes the list.
      * @default true
      */
     searchable?: boolean;
+    /**
+     * Lists the agents this project's root organization unit owns, followed by the ones shared into it.
+     * Defaults to the current project (see `ProjectSwitcher`) when one is chosen.
+     */
+    projectId?: string;
 };
 /**
  * Lists the agents the signed-in user is allowed to see, a page at a time.

package/dist/components/management/AgentList/AgentList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentList.d.ts","sourceRoot":"","sources":["../../../../src/components/management/AgentList/AgentList.tsx"],"names":[],"mappings":"AAWA,OAAO,EAAC,EAAE,EAAyB,MAAM,OAAO,CAAC;AACjD,OAAsB,EAAC,kBAAkB,EAAC,MAAM,iBAAiB,CAAC;AAOlE,MAAM,MAAM,cAAc,GAAG,IAAI,CAC/B,kBAAkB,EAClB,QAAQ,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,cAAc,GAAG,UAAU,GAAG,QAAQ,GAAG,cAAc,CACtG,GAAG;IACF;;;;;OAKG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,SAAS,EAAE,EAAE,CAAC,cAAc,CA8CjC,CAAC;AAEF,eAAe,SAAS,CAAC"}