@thunderid/react 1.4.1 → 1.6.0

package/dist/cjs/contexts/ThunderID/ThunderIDProvider.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ThunderIDProvider.cjs","names":["logger: ReturnType<typeof createPackageComponentLogger>","ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>>","reRenderCheckRef: RefObject<boolean>","client: ThunderIDReactClient","ThunderIDReactClient","invalidator: ResourceInvalidator","createResourceInvalidator","storageManagerRef: any","useBrowserUrl","pendingSessionUpdateRef: RefObject<Promise<void> | null>","resolvedBaseUrl: string","decodedToken: IdToken","shouldFetchProfile: boolean","claims: User","currentSignInStatus: boolean","getUsersMe","getUsersMeMeta","arg1: any","isV2FlowRequest: boolean","ThunderIDRuntimeError","currentUrl: URL","urlParams: URLSearchParams","code: string | null","executionIdFromUrl: string | null","storedExecutionId: string | null","SPAUtils","interval: NodeJS.Timeout","status: boolean","getDecodedIdToken: () => Promise<IdToken>","getIdToken: () => Promise<string>","getAccessToken: () => Promise<string>","getStorageManager: ThunderIDContextProps['getStorageManager']","storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>>","request: (...args: any[]) => Promise<any>","requestAll: (...args: any[]) => Promise<any>","exchangeToken: (exchangeConfig: any) => Promise<any>","signOut: (...args: any[]) => Promise<any>","recover: ThunderIDContextProps['recover']","signUp: (...args: any[]) => Promise<any>","clearSession: (...args: any[]) => Promise<any>","reInitialize: (reInitConfig: any) => Promise<any>","result: any","reinitializedConfig: ThunderIDReactConfig","value: any","ThunderIDContext","I18nProvider","FlowMetaProvider","ThemeProvider","FlowProvider","UserProvider","ComponentRendererProvider"],"sources":["../../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ThunderIDRuntimeError,\n  generateFlattenedUserProfile,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  User,\n  UserProfile,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  EmbeddedSignInFlowResponse,\n  EmbeddedRecoveryFlowRequest,\n  EmbeddedRecoveryFlowResponse,\n  createPackageComponentLogger,\n  getVendorPrefix,\n  resolveResourceEndpoint,\n  AttributeSchema,\n  SPAUtils,\n} from '@thunderid/browser';\nimport {FC, RefObject, PropsWithChildren, ReactElement, useEffect, useMemo, useRef, useState, useCallback} from 'react';\nimport ThunderIDContext, {ThunderIDContextProps} from './ThunderIDContext';\nimport useBrowserUrl from '../../hooks/useBrowserUrl';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport {configureEmotionNonce} from '../../styles/emotion';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\nimport createResourceInvalidator, {ResourceInvalidator} from '../../utils/createResourceInvalidator';\nimport ComponentRendererProvider from '../ComponentRenderer/ComponentRendererProvider';\nimport FlowProvider from '../Flow/FlowProvider';\nimport FlowMetaProvider from '../FlowMeta/FlowMetaProvider';\nimport I18nProvider from '../I18n/I18nProvider';\nimport ThemeProvider from '../Theme/ThemeProvider';\nimport UserProvider from '../User/UserProvider';\nimport getUsersMe from '../../api/getUsersMe';\nimport getUsersMeMeta from '../../api/getUsersMeMeta';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'ThunderIDProvider',\n);\n\n/**\n * Props interface of {@link ThunderIDProvider}\n */\nexport type ThunderIDProviderProps = ThunderIDReactConfig;\n\nconst ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>> = ({\n  afterSignInUrl,\n  afterSignOutUrl,\n  baseUrl: initialBaseUrl,\n  clientId,\n  children,\n  extensions,\n  scopes,\n  preferences,\n  signInUrl,\n  signUpUrl,\n  organizationHandle,\n  applicationId,\n  signInOptions,\n  tokenRequest,\n  instanceId = 0,\n  organizationChain,\n  cspNonce,\n  vendor,\n  namespace,\n  http: httpOptions,\n  ...rest\n}: PropsWithChildren<ThunderIDProviderProps>): ReactElement => {\n  // Must run synchronously here, in the render body, before any descendant's css()/cx()/\n  // keyframes() calls execute during this same render pass - see the doc comment on\n  // `configureEmotionNonce` for why a `useEffect` would be too late.\n  configureEmotionNonce(cspNonce, vendor);\n\n  const reRenderCheckRef: RefObject<boolean> = useRef(false);\n  const client: ThunderIDReactClient = useMemo(() => new ThunderIDReactClient(instanceId), [instanceId]);\n  const invalidator: ResourceInvalidator = useMemo(() => createResourceInvalidator(), []);\n  const storageManagerRef: any = useRef<any>(null);\n  const {hasAuthParams, hasCalledForThisInstance} = useBrowserUrl();\n  const [user, setUser] = useState<User | null>(null);\n  const [isSignedInSync, setIsSignedInSync] = useState<boolean>(false);\n  const [isInitializedSync, setIsInitializedSync] = useState<boolean>(false);\n  const [isLoadingSync, setIsLoadingSync] = useState<boolean>(true);\n\n  const [userProfile, setUserProfile] = useState<UserProfile | null>(null);\n  const [userSchema, setUserSchema] = useState<Record<string, AttributeSchema> | null>(null);\n  const [baseUrl, setBaseUrl] = useState<string>(initialBaseUrl ?? '');\n  const [config, setConfig] = useState<ThunderIDReactConfig>({\n    afterSignInUrl: afterSignInUrl ?? window.location.origin,\n    afterSignOutUrl: afterSignOutUrl ?? window.location.origin,\n    applicationId,\n    baseUrl,\n    clientId,\n    organizationChain,\n    organizationHandle,\n    scopes,\n    signInOptions,\n    tokenRequest,\n    signInUrl,\n    signUpUrl,\n    vendor,\n    ...rest,\n  });\n\n  const [isUpdatingSession, setIsUpdatingSession] = useState<boolean>(false);\n  const [wellKnown, setWellKnown] = useState<OIDCDiscoveryApiResponse | null>(null);\n\n  // Holds the in-flight `updateSession()` promise so concurrent callers coalesce onto a single\n  // `/users/me` request instead of issuing one each.\n  const pendingSessionUpdateRef: RefObject<Promise<void> | null> = useRef<Promise<void> | null>(null);\n\n  useEffect(() => {\n    setBaseUrl(initialBaseUrl ?? '');\n  }, [initialBaseUrl]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      await client.initialize(config);\n      const initializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(initializedConfig);\n      setWellKnown(await client.getDiscoveryResponse());\n    })();\n  }, []);\n\n  async function performSessionUpdate(): Promise<void> {\n    try {\n      // Set flag to prevent loading state tracking from interfering\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      let resolvedBaseUrl: string = baseUrl;\n\n      const decodedToken: IdToken = await client.getDecodedIdToken();\n\n      // If there's a `user_org` claim in the ID token,\n      // Treat this login as a organization login.\n      if (decodedToken?.['user_org']) {\n        resolvedBaseUrl = `${(await client.getConfiguration()).baseUrl}/o`;\n        setBaseUrl(resolvedBaseUrl);\n      }\n\n      const shouldFetchProfile: boolean = preferences?.user?.fetchUserProfile !== false;\n      const claims: User = extractUserClaimsFromIdToken(decodedToken) as User;\n      let profileData = claims;\n      const currentSignInStatus: boolean = await client.isSignedIn();\n\n      if (currentSignInStatus && shouldFetchProfile) {\n        try {\n          const fetchedProfile = await getUsersMe({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMe', config),\n            instanceId,\n          });\n          profileData = {...claims, ...fetchedProfile};\n        } catch (err) {\n          logger.warn('Failed to fetch user profile from /users/me:', err);\n        }\n\n        try {\n          const metaRes = await getUsersMeMeta({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMeMeta', config),\n            instanceId,\n          });\n          if (metaRes?.schema) {\n            setUserSchema(metaRes.schema);\n          } else {\n            setUserSchema(null);\n          }\n        } catch (err) {\n          setUserSchema(null);\n          logger.warn('Failed to fetch user schema metadata from /users/me/meta:', err);\n        }\n      } else {\n        setUserSchema(null);\n      }\n\n      setUser(profileData);\n      setUserProfile({\n        flattenedProfile: generateFlattenedUserProfile(profileData, []),\n        profile: profileData,\n      });\n\n      // CRITICAL: Update sign-in status BEFORE setting loading to false\n      // This prevents the race condition where ProtectedRoute sees isLoading=false but isSignedIn=false\n      setIsSignedInSync(currentSignInStatus);\n    } catch (error) {\n      // TODO: Add an error log.\n    } finally {\n      // Clear the flag and set final loading state\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  }\n\n  /**\n   * Single-flight wrapper around {@link performSessionUpdate}.\n   *\n   * Concurrent callers share the in-flight request instead of each issuing their own `/users/me`.\n   * This is not a cache: once the request settles the ref is cleared, so a later caller (e.g.\n   * revalidation after a profile update) fetches again.\n   */\n  async function updateSession(): Promise<void> {\n    if (pendingSessionUpdateRef.current) {\n      return pendingSessionUpdateRef.current;\n    }\n\n    pendingSessionUpdateRef.current = performSessionUpdate().finally(() => {\n      pendingSessionUpdateRef.current = null;\n    });\n\n    return pendingSessionUpdateRef.current;\n  }\n\n  async function signIn(...args: any): Promise<User | EmbeddedSignInFlowResponse> {\n    // Check if this is a V2 embedded flow request BEFORE calling signIn\n    // This allows us to skip session checks entirely for V2 flows\n    const arg1: any = args[0];\n    const isV2FlowRequest: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    try {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(true);\n        setIsLoadingSync(true);\n      }\n\n      return await client.signIn(...args);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signIn-Error',\n        'react',\n        'An error occurred while trying to sign in.',\n      );\n    } finally {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(false);\n        setIsLoadingSync(client.isLoading());\n      }\n    }\n  }\n\n  /**\n   * Try signing in when the component is mounted.\n   */\n  useEffect(() => {\n    // React 18.x Strict.Mode has a new check for `Ensuring reusable state` to facilitate an upcoming react feature.\n    // https://reactjs.org/docs/strict-mode.html#ensuring-reusable-state\n    // This will remount all the useEffects to ensure that there are no unexpected side effects.\n    // When react remounts the signIn hook of the AuthProvider, it will cause a race condition. Hence, we have to\n    // prevent the re-render of this hook as suggested in the following discussion.\n    // https://github.com/reactwg/react-18/discussions/18#discussioncomment-795623\n    if (reRenderCheckRef.current) {\n      return;\n    }\n\n    reRenderCheckRef.current = true;\n\n    (async (): Promise<void> => {\n      // Sync session state whenever sign-in completes (both redirect and embedded V2 flows).\n      // Pass the user returned by the SDK's sign-in flow so users/me result is not discarded.\n      await client.on('sign-in', async () => {\n        await updateSession();\n      });\n\n      // Start auto-refresh with a soft failure. This also covers the case where the access token\n      // expired while the refresh token is still valid — startAutoRefreshToken() calls\n      // refreshAccessToken() immediately when timeUntilRefresh <= 0 — so the sign-in check below\n      // sees the refreshed state.\n      try {\n        await client.startAutoRefreshToken();\n      } catch (error) {\n        logger.warn('Failed to schedule automatic token refresh.', error);\n      }\n\n      // User is already authenticated. Restore the session and skip the sign-in path.\n      if (await client.isSignedIn()) {\n        await updateSession();\n\n        return;\n      }\n\n      const currentUrl: URL = new URL(window.location.href);\n      const hasAuthParamsResult: boolean =\n        hasAuthParams(currentUrl, config.afterSignInUrl!) && hasCalledForThisInstance(currentUrl, instanceId ?? 0);\n\n      if (hasAuthParamsResult) {\n        try {\n          const urlParams: URLSearchParams = currentUrl.searchParams;\n          const code: string | null = urlParams.get('code');\n          const executionIdFromUrl: string | null = urlParams.get('executionId');\n          const storedExecutionId: string | null = sessionStorage.getItem(\n            `${getVendorPrefix(config.vendor)}_execution_id`,\n          );\n\n          // A silent sign-in response is handled even without a code: an error such as\n          // login_required must still be relayed from the iframe to the waiting parent.\n          if ((code || SPAUtils.isSilentStatePresentInURL()) && !executionIdFromUrl && !storedExecutionId) {\n            await signIn();\n          }\n        } catch (error) {\n          throw new ThunderIDRuntimeError(\n            `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n            'thunderid-signIn-Error',\n            'react',\n            'An error occurred while trying to sign in.',\n          );\n        }\n      }\n    })();\n  }, []);\n\n  /**\n   * Check if the user is signed in and update the state accordingly.\n   * This will also set an interval to check for the sign-in status every second\n   * until the user is signed in.\n   */\n  useEffect(() => {\n    let interval: NodeJS.Timeout;\n\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isSignedIn();\n\n        setIsSignedInSync(status);\n\n        if (!status) {\n          interval = setInterval(async () => {\n            const newStatus: boolean = await client.isSignedIn();\n\n            if (newStatus) {\n              setIsSignedInSync(true);\n              clearInterval(interval);\n            }\n          }, 1000);\n        } else {\n          // TODO: Add a debug log to indicate that the user is already signed in.\n        }\n      } catch (error) {\n        setIsSignedInSync(false);\n      }\n    })();\n\n    return (): void => {\n      if (interval) {\n        clearInterval(interval);\n      }\n    };\n  }, [client]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isInitialized();\n\n        setIsInitializedSync(status);\n      } catch (error) {\n        setIsInitializedSync(false);\n      }\n    })();\n  }, [client]);\n\n  /**\n   * Track loading state changes from the ThunderID client\n   */\n  useEffect(() => {\n    const checkLoadingState = (): void => {\n      // Don't override loading state during critical session updates\n      if (isUpdatingSession) {\n        return;\n      }\n\n      // Don't set loading=false while auth params are in the URL and user isn't signed in yet.\n      // This prevents ProtectedRoute from redirecting before the sign-in effect processes the auth code.\n      const currentUrl: URL = new URL(window.location.href);\n      if (!isSignedInSync && hasAuthParams(currentUrl, config.afterSignInUrl!)) {\n        return;\n      }\n\n      setIsLoadingSync(client.isLoading());\n    };\n\n    // Initial check\n    checkLoadingState();\n\n    // Set up an interval to check for loading state changes\n    const interval: NodeJS.Timeout = setInterval(checkLoadingState, 100);\n\n    return (): void => {\n      clearInterval(interval);\n    };\n  }, [client, isLoadingSync, isSignedInSync, isUpdatingSession]);\n\n  const signInSilently = async (options?: SignInOptions): Promise<User | boolean> => {\n    try {\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      return await client.signInSilently(options);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Error while signing in silently: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signInSilently-Error',\n        'react',\n        'An error occurred while trying to sign in silently.',\n      );\n    } finally {\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  };\n\n  const handleProfileUpdate = (payload: User): void => {\n    setUser(payload);\n    setUserProfile((prev: UserProfile | null) => ({\n      flattenedProfile: generateFlattenedUserProfile(payload),\n      profile: payload,\n    }));\n  };\n\n  const getDecodedIdToken: () => Promise<IdToken> = useCallback(\n    async (): Promise<IdToken> => client.getDecodedIdToken(),\n    [client],\n  );\n\n  const getIdToken: () => Promise<string> = useCallback(async (): Promise<string> => client.getIdToken(), [client]);\n\n  const getAccessToken: () => Promise<string> = useCallback(\n    async (): Promise<string> => client.getAccessToken(),\n    [client],\n  );\n\n  const getStorageManager: ThunderIDContextProps['getStorageManager'] = useCallback(async () => {\n    const storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>> =\n      storageManagerRef.current ?? (await client.getStorageManager());\n    if (storageManager) {\n      storageManagerRef.current = storageManager;\n    }\n    return storageManager;\n  }, [client]);\n\n  const request: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.request(...args),\n    [client],\n  );\n\n  const requestAll: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.requestAll(...args),\n    [client],\n  );\n\n  const exchangeToken: (exchangeConfig: any) => Promise<any> = useCallback(\n    async (exchangeConfig: any): Promise<any> => client.exchangeToken(exchangeConfig),\n    [client],\n  );\n\n  const signOut: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signOut(...args),\n    [client],\n  );\n\n  const recover: ThunderIDContextProps['recover'] = useCallback(\n    async (payload?: EmbeddedRecoveryFlowRequest): Promise<EmbeddedRecoveryFlowResponse> =>\n      (await client.recover(payload)) as EmbeddedRecoveryFlowResponse,\n    [client],\n  );\n\n  const signUp: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signUp(...args),\n    [client],\n  );\n\n  const clearSession: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.clearSession(...args),\n    [client],\n  );\n\n  const reInitialize: (reInitConfig: any) => Promise<any> = useCallback(\n    async (reInitConfig: any): Promise<any> => {\n      const result: any = await client.reInitialize(reInitConfig);\n\n      // Refresh React state from the reinitialized client so the context (config.endpoints,\n      // baseUrl, discovery) reflects the new configuration instead of the pre-reinitialization state.\n      const reinitializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(reinitializedConfig);\n      setBaseUrl(reinitializedConfig.baseUrl ?? '');\n      setWellKnown(await client.getDiscoveryResponse());\n\n      return result;\n    },\n    [client],\n  );\n\n  const value: any = useMemo(\n    () => ({\n      afterSignInUrl: config.afterSignInUrl,\n      applicationId: config.applicationId,\n      baseUrl,\n      endpoints: config.endpoints,\n      scopes: config.scopes,\n      clearSession,\n      clientId,\n      discovery: {\n        wellKnown,\n      },\n      exchangeToken,\n      getAccessToken,\n      getDecodedIdToken,\n      getIdToken,\n      getStorageManager,\n      http: {\n        fetcher: httpOptions?.fetcher,\n        request,\n        requestAll,\n      },\n      instanceId,\n      invalidator,\n      isInitialized: isInitializedSync,\n      isLoading: isLoadingSync,\n      isSignedIn: isSignedInSync,\n      organizationChain,\n      organizationHandle: config?.organizationHandle,\n      preferences,\n      reInitialize,\n      recover,\n      signIn,\n      signInOptions,\n      tokenRequest,\n      signInSilently,\n      signInUrl,\n      signOut,\n      signUp,\n      signUpUrl,\n      user,\n      userSchema,\n      vendor: getVendorPrefix(config.vendor),\n    }),\n    [\n      applicationId,\n      config?.organizationHandle,\n      config.vendor,\n      config.afterSignInUrl,\n      config.endpoints,\n      config.scopes,\n      signInUrl,\n      signUpUrl,\n      baseUrl,\n      clientId,\n      wellKnown,\n      isInitializedSync,\n      isLoadingSync,\n      isSignedInSync,\n      signIn,\n      signInSilently,\n      user,\n      userSchema,\n      client,\n      signInOptions,\n      tokenRequest,\n      getDecodedIdToken,\n      clearSession,\n      exchangeToken,\n      httpOptions?.fetcher,\n      getAccessToken,\n      getStorageManager,\n      instanceId,\n      invalidator,\n      organizationChain,\n      preferences,\n      recover,\n      reInitialize,\n      request,\n      requestAll,\n      signOut,\n      signUp,\n    ],\n  );\n\n  return (\n    <ThunderIDContext.Provider value={value}>\n      <I18nProvider preferences={preferences?.i18n} vendor={getVendorPrefix(config.vendor)}>\n        <FlowMetaProvider enabled={preferences?.resolveFromMeta !== false} namespace={namespace}>\n          <ThemeProvider\n            theme={{\n              ...preferences?.theme?.overrides,\n              direction: preferences?.theme?.direction,\n            }}\n          >\n            <FlowProvider>\n              <UserProvider\n                profile={userProfile as UserProfile}\n                userSchema={userSchema}\n                onUpdateProfile={handleProfileUpdate}\n              >\n                <ComponentRendererProvider renderers={(extensions?.components?.renderers ?? {}) as any}>\n                  {children}\n                </ComponentRendererProvider>\n              </UserProvider>\n            </FlowProvider>\n          </ThemeProvider>\n        </FlowMetaProvider>\n      </I18nProvider>\n    </ThunderIDContext.Provider>\n  );\n};\n\nexport default ThunderIDProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAqCA,MAAMA,+DACJ,oBACA,oBACD;AAOD,MAAMC,qBAAoE,EACxE,gBACA,iBACA,SAAS,gBACT,UACA,UACA,YACA,QACA,aACA,WACA,WACA,oBACA,eACA,eACA,cACA,aAAa,GACb,mBACA,UACA,QACA,WACA,MAAM,YACN,GAAG,WAC0D;AAI7D,uCAAsB,UAAU,OAAO;CAEvC,MAAMC,qCAA8C,MAAM;CAC1D,MAAMC,kCAA6C,IAAIC,qCAAqB,WAAW,EAAE,CAAC,WAAW,CAAC;CACtG,MAAMC,uCAAiDC,2CAA2B,EAAE,EAAE,CAAC;CACvF,MAAMC,sCAAqC,KAAK;CAChD,MAAM,EAAC,eAAe,6BAA4BC,+BAAe;CACjE,MAAM,CAAC,MAAM,+BAAiC,KAAK;CACnD,MAAM,CAAC,gBAAgB,yCAAuC,MAAM;CACpE,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,eAAe,wCAAsC,KAAK;CAEjE,MAAM,CAAC,aAAa,sCAA+C,KAAK;CACxE,MAAM,CAAC,YAAY,qCAAkE,KAAK;CAC1F,MAAM,CAAC,SAAS,kCAA+B,kBAAkB,GAAG;CACpE,MAAM,CAAC,QAAQ,iCAA4C;EACzD,gBAAgB,kBAAkB,OAAO,SAAS;EAClD,iBAAiB,mBAAmB,OAAO,SAAS;EACpD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACJ,CAAC;CAEF,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,WAAW,oCAA0D,KAAK;CAIjF,MAAMC,4CAAwF,KAAK;AAEnG,4BAAgB;AACd,aAAW,kBAAkB,GAAG;IAC/B,CAAC,eAAe,CAAC;AAEpB,4BAAgB;AACd,GAAC,YAA2B;AAC1B,SAAM,OAAO,WAAW,OAAO;AAE/B,aADgD,MAAM,OAAO,kBAAkB,CACnD;AAC5B,gBAAa,MAAM,OAAO,sBAAsB,CAAC;MAC/C;IACH,EAAE,CAAC;CAEN,eAAe,uBAAsC;AACnD,MAAI;AAEF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;GACtB,IAAIC,kBAA0B;GAE9B,MAAMC,eAAwB,MAAM,OAAO,mBAAmB;AAI9D,OAAI,eAAe,aAAa;AAC9B,sBAAkB,IAAI,MAAM,OAAO,kBAAkB,EAAE,QAAQ;AAC/D,eAAW,gBAAgB;;GAG7B,MAAMC,qBAA8B,aAAa,MAAM,qBAAqB;GAC5E,MAAMC,+DAA4C,aAAa;GAC/D,IAAI,cAAc;GAClB,MAAMC,sBAA+B,MAAM,OAAO,YAAY;AAE9D,OAAI,uBAAuB,oBAAoB;AAC7C,QAAI;KACF,MAAM,iBAAiB,MAAMC,2BAAW;MACtC,SAAS;MACT,sDAA6B,WAAW,OAAO;MAC/C;MACD,CAAC;AACF,mBAAc;MAAC,GAAG;MAAQ,GAAG;MAAe;aACrC,KAAK;AACZ,YAAO,KAAK,gDAAgD,IAAI;;AAGlE,QAAI;KACF,MAAM,UAAU,MAAMC,+BAAe;MACnC,SAAS;MACT,sDAA6B,eAAe,OAAO;MACnD;MACD,CAAC;AACF,SAAI,SAAS,OACX,eAAc,QAAQ,OAAO;SAE7B,eAAc,KAAK;aAEd,KAAK;AACZ,mBAAc,KAAK;AACnB,YAAO,KAAK,6DAA6D,IAAI;;SAG/E,eAAc,KAAK;AAGrB,WAAQ,YAAY;AACpB,kBAAe;IACb,wEAA+C,aAAa,EAAE,CAAC;IAC/D,SAAS;IACV,CAAC;AAIF,qBAAkB,oBAAoB;WAC/B,OAAO,WAEN;AAER,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;;;;;;;;CAWxC,eAAe,gBAA+B;AAC5C,MAAI,wBAAwB,QAC1B,QAAO,wBAAwB;AAGjC,0BAAwB,UAAU,sBAAsB,CAAC,cAAc;AACrE,2BAAwB,UAAU;IAClC;AAEF,SAAO,wBAAwB;;CAGjC,eAAe,OAAO,GAAG,MAAuD;EAG9E,MAAMC,OAAY,KAAK;EACvB,MAAMC,kBACJ,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB;AAE5F,MAAI;AACF,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,KAAK;AAC1B,qBAAiB,KAAK;;AAGxB,UAAO,MAAM,OAAO,OAAO,GAAG,KAAK;WAC5B,OAAO;AACd,SAAM,IAAIC,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;YACO;AACR,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,MAAM;AAC3B,qBAAiB,OAAO,WAAW,CAAC;;;;;;;AAQ1C,4BAAgB;AAOd,MAAI,iBAAiB,QACnB;AAGF,mBAAiB,UAAU;AAE3B,GAAC,YAA2B;AAG1B,SAAM,OAAO,GAAG,WAAW,YAAY;AACrC,UAAM,eAAe;KACrB;AAMF,OAAI;AACF,UAAM,OAAO,uBAAuB;YAC7B,OAAO;AACd,WAAO,KAAK,+CAA+C,MAAM;;AAInE,OAAI,MAAM,OAAO,YAAY,EAAE;AAC7B,UAAM,eAAe;AAErB;;GAGF,MAAMC,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AAIrD,OAFE,cAAc,YAAY,OAAO,eAAgB,IAAI,yBAAyB,YAAY,cAAc,EAAE,CAG1G,KAAI;IACF,MAAMC,YAA6B,WAAW;IAC9C,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,qBAAoC,UAAU,IAAI,cAAc;IACtE,MAAMC,oBAAmC,eAAe,QACtD,4CAAmB,OAAO,OAAO,CAAC,eACnC;AAID,SAAK,QAAQC,6BAAS,2BAA2B,KAAK,CAAC,sBAAsB,CAAC,kBAC5E,OAAM,QAAQ;YAET,OAAO;AACd,UAAM,IAAIN,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;;MAGH;IACH,EAAE,CAAC;;;;;;AAON,4BAAgB;EACd,IAAIO;AAEJ,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,SAAkB,MAAM,OAAO,YAAY;AAEjD,sBAAkB,OAAO;AAEzB,QAAI,CAAC,OACH,YAAW,YAAY,YAAY;AAGjC,SAF2B,MAAM,OAAO,YAAY,EAErC;AACb,wBAAkB,KAAK;AACvB,oBAAc,SAAS;;OAExB,IAAK;YAIH,OAAO;AACd,sBAAkB,MAAM;;MAExB;AAEJ,eAAmB;AACjB,OAAI,SACF,eAAc,SAAS;;IAG1B,CAAC,OAAO,CAAC;AAEZ,4BAAgB;AACd,GAAC,YAA2B;AAC1B,OAAI;AAGF,yBAFwB,MAAM,OAAO,eAAe,CAExB;YACrB,OAAO;AACd,yBAAqB,MAAM;;MAE3B;IACH,CAAC,OAAO,CAAC;;;;AAKZ,4BAAgB;EACd,MAAM,0BAAgC;AAEpC,OAAI,kBACF;GAKF,MAAMP,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AACrD,OAAI,CAAC,kBAAkB,cAAc,YAAY,OAAO,eAAgB,CACtE;AAGF,oBAAiB,OAAO,WAAW,CAAC;;AAItC,qBAAmB;EAGnB,MAAMM,WAA2B,YAAY,mBAAmB,IAAI;AAEpE,eAAmB;AACjB,iBAAc,SAAS;;IAExB;EAAC;EAAQ;EAAe;EAAgB;EAAkB,CAAC;CAE9D,MAAM,iBAAiB,OAAO,YAAqD;AACjF,MAAI;AACF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;AACtB,UAAO,MAAM,OAAO,eAAe,QAAQ;WACpC,OAAO;AACd,SAAM,IAAIP,0CACR,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IAC1G,kCACA,SACA,sDACD;YACO;AACR,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;CAIxC,MAAM,uBAAuB,YAAwB;AACnD,UAAQ,QAAQ;AAChB,kBAAgB,UAA8B;GAC5C,wEAA+C,QAAQ;GACvD,SAAS;GACV,EAAE;;CAGL,MAAMS,2CACJ,YAA8B,OAAO,mBAAmB,EACxD,CAAC,OAAO,CACT;CAED,MAAMC,oCAAgD,YAA6B,OAAO,YAAY,EAAE,CAAC,OAAO,CAAC;CAEjH,MAAMC,wCACJ,YAA6B,OAAO,gBAAgB,EACpD,CAAC,OAAO,CACT;CAED,MAAMC,2CAA4E,YAAY;EAC5F,MAAMC,iBACJ,kBAAkB,WAAY,MAAM,OAAO,mBAAmB;AAChE,MAAI,eACF,mBAAkB,UAAU;AAE9B,SAAO;IACN,CAAC,OAAO,CAAC;CAEZ,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,oCACJ,OAAO,GAAG,SAA8B,OAAO,WAAW,GAAG,KAAK,EAClE,CAAC,OAAO,CACT;CAED,MAAMC,uCACJ,OAAO,mBAAsC,OAAO,cAAc,eAAe,EACjF,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,YACJ,MAAM,OAAO,QAAQ,QAAQ,EAChC,CAAC,OAAO,CACT;CAED,MAAMC,gCACJ,OAAO,GAAG,SAA8B,OAAO,OAAO,GAAG,KAAK,EAC9D,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,GAAG,SAA8B,OAAO,aAAa,GAAG,KAAK,EACpE,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,iBAAoC;EACzC,MAAMC,SAAc,MAAM,OAAO,aAAa,aAAa;EAI3D,MAAMC,sBAA4C,MAAM,OAAO,kBAAkB;AACjF,YAAU,oBAAoB;AAC9B,aAAW,oBAAoB,WAAW,GAAG;AAC7C,eAAa,MAAM,OAAO,sBAAsB,CAAC;AAEjD,SAAO;IAET,CAAC,OAAO,CACT;CAED,MAAMC,kCACG;EACL,gBAAgB,OAAO;EACvB,eAAe,OAAO;EACtB;EACA,WAAW,OAAO;EAClB,QAAQ,OAAO;EACf;EACA;EACA,WAAW,EACT,WACD;EACD;EACA;EACA;EACA;EACA;EACA,MAAM;GACJ,SAAS,aAAa;GACtB;GACA;GACD;EACD;EACA;EACA,eAAe;EACf,WAAW;EACX,YAAY;EACZ;EACA,oBAAoB,QAAQ;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,iDAAwB,OAAO,OAAO;EACvC,GACD;EACE;EACA,QAAQ;EACR,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;AAED,QACE,2CAACC,iCAAiB;EAAgB;YAChC,2CAACC;GAAa,aAAa,aAAa;GAAM,iDAAwB,OAAO,OAAO;aAClF,2CAACC;IAAiB,SAAS,aAAa,oBAAoB;IAAkB;cAC5E,2CAACC;KACC,OAAO;MACL,GAAG,aAAa,OAAO;MACvB,WAAW,aAAa,OAAO;MAChC;eAED,2CAACC,0CACC,2CAACC;MACC,SAAS;MACG;MACZ,iBAAiB;gBAEjB,2CAACC;OAA0B,WAAY,YAAY,YAAY,aAAa,EAAE;OAC3E;QACyB;OACf,GACF;MACD;KACC;IACN;GACW;;AAIhC,gCAAe"}
+{"version":3,"file":"ThunderIDProvider.cjs","names":["logger: ReturnType<typeof createPackageComponentLogger>","ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>>","reRenderCheckRef: RefObject<boolean>","client: ThunderIDReactClient","ThunderIDReactClient","invalidator: ResourceInvalidator","storageManagerRef: any","useBrowserUrl","pendingSessionUpdateRef: RefObject<Promise<void> | null>","resolvedBaseUrl: string","decodedToken: IdToken","shouldFetchProfile: boolean","claims: User","currentSignInStatus: boolean","getUsersMe","getUsersMeMeta","arg1: any","isV2FlowRequest: boolean","ThunderIDRuntimeError","currentUrl: URL","urlParams: URLSearchParams","code: string | null","executionIdFromUrl: string | null","storedExecutionId: string | null","SPAUtils","interval: NodeJS.Timeout","status: boolean","getDecodedIdToken: () => Promise<IdToken>","getIdToken: () => Promise<string>","getAccessToken: () => Promise<string>","getStorageManager: ThunderIDContextProps['getStorageManager']","storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>>","request: (...args: any[]) => Promise<any>","requestAll: (...args: any[]) => Promise<any>","exchangeToken: (exchangeConfig: any) => Promise<any>","signOut: (...args: any[]) => Promise<any>","recover: ThunderIDContextProps['recover']","signUp: (...args: any[]) => Promise<any>","clearSession: (...args: any[]) => Promise<any>","reInitialize: (reInitConfig: any) => Promise<any>","result: any","reinitializedConfig: ThunderIDReactConfig","value: any","ThunderIDContext","I18nProvider","FlowMetaProvider","ThemeProvider","FlowProvider","UserProvider","ComponentRendererProvider"],"sources":["../../../../src/contexts/ThunderID/ThunderIDProvider.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ResourceInvalidator,\n  createResourceInvalidator,\n  ThunderIDRuntimeError,\n  generateFlattenedUserProfile,\n  OIDCDiscoveryApiResponse,\n  SignInOptions,\n  User,\n  UserProfile,\n  IdToken,\n  extractUserClaimsFromIdToken,\n  EmbeddedSignInFlowResponse,\n  EmbeddedRecoveryFlowRequest,\n  EmbeddedRecoveryFlowResponse,\n  createPackageComponentLogger,\n  getVendorPrefix,\n  resolveResourceEndpoint,\n  AttributeSchema,\n  SPAUtils,\n} from '@thunderid/browser';\nimport {FC, RefObject, PropsWithChildren, ReactElement, useEffect, useMemo, useRef, useState, useCallback} from 'react';\nimport ThunderIDContext, {ThunderIDContextProps} from './ThunderIDContext';\nimport getUsersMe from '../../api/account/getUsersMe';\nimport getUsersMeMeta from '../../api/account/getUsersMeMeta';\nimport useBrowserUrl from '../../hooks/useBrowserUrl';\nimport {ThunderIDReactConfig} from '../../models/config';\nimport {configureEmotionNonce} from '../../styles/emotion';\nimport ThunderIDReactClient from '../../ThunderIDReactClient';\nimport ComponentRendererProvider from '../ComponentRenderer/ComponentRendererProvider';\nimport FlowProvider from '../Flow/FlowProvider';\nimport FlowMetaProvider from '../FlowMeta/FlowMetaProvider';\nimport I18nProvider from '../I18n/I18nProvider';\nimport ThemeProvider from '../Theme/ThemeProvider';\nimport UserProvider from '../User/UserProvider';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'ThunderIDProvider',\n);\n\n/**\n * Props interface of {@link ThunderIDProvider}\n */\nexport type ThunderIDProviderProps = ThunderIDReactConfig;\n\nconst ThunderIDProvider: FC<PropsWithChildren<ThunderIDProviderProps>> = ({\n  afterSignInUrl,\n  afterSignOutUrl,\n  baseUrl: initialBaseUrl,\n  clientId,\n  children,\n  extensions,\n  scopes,\n  preferences,\n  signInUrl,\n  signUpUrl,\n  organizationHandle,\n  applicationId,\n  signInOptions,\n  tokenRequest,\n  instanceId = 0,\n  organizationChain,\n  cspNonce,\n  vendor,\n  namespace,\n  http: httpOptions,\n  ...rest\n}: PropsWithChildren<ThunderIDProviderProps>): ReactElement => {\n  // Must run synchronously here, in the render body, before any descendant's css()/cx()/\n  // keyframes() calls execute during this same render pass - see the doc comment on\n  // `configureEmotionNonce` for why a `useEffect` would be too late.\n  configureEmotionNonce(cspNonce, vendor);\n\n  const reRenderCheckRef: RefObject<boolean> = useRef(false);\n  const client: ThunderIDReactClient = useMemo(() => new ThunderIDReactClient(instanceId), [instanceId]);\n  const invalidator: ResourceInvalidator = useMemo(() => createResourceInvalidator(), []);\n  const storageManagerRef: any = useRef<any>(null);\n  const {hasAuthParams, hasCalledForThisInstance} = useBrowserUrl();\n  const [user, setUser] = useState<User | null>(null);\n  const [isSignedInSync, setIsSignedInSync] = useState<boolean>(false);\n  const [isInitializedSync, setIsInitializedSync] = useState<boolean>(false);\n  const [isLoadingSync, setIsLoadingSync] = useState<boolean>(true);\n\n  const [userProfile, setUserProfile] = useState<UserProfile | null>(null);\n  const [userSchema, setUserSchema] = useState<Record<string, AttributeSchema> | null>(null);\n  const [baseUrl, setBaseUrl] = useState<string>(initialBaseUrl ?? '');\n  const [config, setConfig] = useState<ThunderIDReactConfig>({\n    afterSignInUrl: afterSignInUrl ?? window.location.origin,\n    afterSignOutUrl: afterSignOutUrl ?? window.location.origin,\n    applicationId,\n    baseUrl,\n    clientId,\n    organizationChain,\n    organizationHandle,\n    scopes,\n    signInOptions,\n    tokenRequest,\n    signInUrl,\n    signUpUrl,\n    vendor,\n    ...rest,\n  });\n\n  const [isUpdatingSession, setIsUpdatingSession] = useState<boolean>(false);\n  const [wellKnown, setWellKnown] = useState<OIDCDiscoveryApiResponse | null>(null);\n\n  // Holds the in-flight `updateSession()` promise so concurrent callers coalesce onto a single\n  // `/users/me` request instead of issuing one each.\n  const pendingSessionUpdateRef: RefObject<Promise<void> | null> = useRef<Promise<void> | null>(null);\n\n  useEffect(() => {\n    setBaseUrl(initialBaseUrl ?? '');\n  }, [initialBaseUrl]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      await client.initialize(config);\n      const initializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(initializedConfig);\n      setWellKnown(await client.getDiscoveryResponse());\n    })();\n  }, []);\n\n  async function performSessionUpdate(): Promise<void> {\n    try {\n      // Set flag to prevent loading state tracking from interfering\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      let resolvedBaseUrl: string = baseUrl;\n\n      const decodedToken: IdToken = await client.getDecodedIdToken();\n\n      // If there's a `user_org` claim in the ID token,\n      // Treat this login as a organization login.\n      if (decodedToken?.['user_org']) {\n        resolvedBaseUrl = `${(await client.getConfiguration()).baseUrl}/o`;\n        setBaseUrl(resolvedBaseUrl);\n      }\n\n      const shouldFetchProfile: boolean = preferences?.user?.fetchUserProfile !== false;\n      const claims: User = extractUserClaimsFromIdToken(decodedToken) as User;\n      let profileData = claims;\n      const currentSignInStatus: boolean = await client.isSignedIn();\n\n      if (currentSignInStatus && shouldFetchProfile) {\n        try {\n          const fetchedProfile = await getUsersMe({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMe', config),\n            instanceId,\n          });\n          profileData = {...claims, ...fetchedProfile};\n        } catch (err) {\n          logger.warn('Failed to fetch user profile from /users/me:', err);\n        }\n\n        try {\n          const metaRes = await getUsersMeMeta({\n            baseUrl: resolvedBaseUrl,\n            url: resolveResourceEndpoint('usersMeMeta', config),\n            instanceId,\n          });\n          if (metaRes?.schema) {\n            setUserSchema(metaRes.schema);\n          } else {\n            setUserSchema(null);\n          }\n        } catch (err) {\n          setUserSchema(null);\n          logger.warn('Failed to fetch user schema metadata from /users/me/meta:', err);\n        }\n      } else {\n        setUserSchema(null);\n      }\n\n      setUser(profileData);\n      setUserProfile({\n        flattenedProfile: generateFlattenedUserProfile(profileData, []),\n        profile: profileData,\n      });\n\n      // CRITICAL: Update sign-in status BEFORE setting loading to false\n      // This prevents the race condition where ProtectedRoute sees isLoading=false but isSignedIn=false\n      setIsSignedInSync(currentSignInStatus);\n    } catch (error) {\n      // TODO: Add an error log.\n    } finally {\n      // Clear the flag and set final loading state\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  }\n\n  /**\n   * Single-flight wrapper around {@link performSessionUpdate}.\n   *\n   * Concurrent callers share the in-flight request instead of each issuing their own `/users/me`.\n   * This is not a cache: once the request settles the ref is cleared, so a later caller (e.g.\n   * revalidation after a profile update) fetches again.\n   */\n  async function updateSession(): Promise<void> {\n    if (pendingSessionUpdateRef.current) {\n      return pendingSessionUpdateRef.current;\n    }\n\n    pendingSessionUpdateRef.current = performSessionUpdate().finally(() => {\n      pendingSessionUpdateRef.current = null;\n    });\n\n    return pendingSessionUpdateRef.current;\n  }\n\n  async function signIn(...args: any): Promise<User | EmbeddedSignInFlowResponse> {\n    // Check if this is a V2 embedded flow request BEFORE calling signIn\n    // This allows us to skip session checks entirely for V2 flows\n    const arg1: any = args[0];\n    const isV2FlowRequest: boolean =\n      typeof arg1 === 'object' && arg1 !== null && ('executionId' in arg1 || 'applicationId' in arg1);\n\n    try {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(true);\n        setIsLoadingSync(true);\n      }\n\n      return await client.signIn(...args);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signIn-Error',\n        'react',\n        'An error occurred while trying to sign in.',\n      );\n    } finally {\n      if (!isV2FlowRequest) {\n        setIsUpdatingSession(false);\n        setIsLoadingSync(client.isLoading());\n      }\n    }\n  }\n\n  /**\n   * Try signing in when the component is mounted.\n   */\n  useEffect(() => {\n    // React 18.x Strict.Mode has a new check for `Ensuring reusable state` to facilitate an upcoming react feature.\n    // https://reactjs.org/docs/strict-mode.html#ensuring-reusable-state\n    // This will remount all the useEffects to ensure that there are no unexpected side effects.\n    // When react remounts the signIn hook of the AuthProvider, it will cause a race condition. Hence, we have to\n    // prevent the re-render of this hook as suggested in the following discussion.\n    // https://github.com/reactwg/react-18/discussions/18#discussioncomment-795623\n    if (reRenderCheckRef.current) {\n      return;\n    }\n\n    reRenderCheckRef.current = true;\n\n    (async (): Promise<void> => {\n      // Sync session state whenever sign-in completes (both redirect and embedded V2 flows).\n      // Pass the user returned by the SDK's sign-in flow so users/me result is not discarded.\n      await client.on('sign-in', async () => {\n        await updateSession();\n      });\n\n      // A session that ends elsewhere, such as a sign-out in another app, signs this app out too.\n      await client.on('sign-out', () => {\n        setUser(null);\n        setUserProfile(null);\n        setIsSignedInSync(false);\n      });\n\n      // Start auto-refresh with a soft failure. This also covers the case where the access token\n      // expired while the refresh token is still valid — startAutoRefreshToken() calls\n      // refreshAccessToken() immediately when timeUntilRefresh <= 0 — so the sign-in check below\n      // sees the refreshed state.\n      try {\n        await client.startAutoRefreshToken();\n      } catch (error) {\n        logger.warn('Failed to schedule automatic token refresh.', error);\n      }\n\n      // User is already authenticated. Restore the session and skip the sign-in path.\n      if (await client.isSignedIn()) {\n        await updateSession();\n\n        return;\n      }\n\n      const currentUrl: URL = new URL(window.location.href);\n      const hasAuthParamsResult: boolean =\n        hasAuthParams(currentUrl, config.afterSignInUrl!) && hasCalledForThisInstance(currentUrl, instanceId ?? 0);\n\n      if (hasAuthParamsResult) {\n        try {\n          const urlParams: URLSearchParams = currentUrl.searchParams;\n          const code: string | null = urlParams.get('code');\n          const executionIdFromUrl: string | null = urlParams.get('executionId');\n          const storedExecutionId: string | null = sessionStorage.getItem(\n            `${getVendorPrefix(config.vendor)}_execution_id`,\n          );\n\n          // A silent sign-in response is handled even without a code: an error such as\n          // login_required must still be relayed from the iframe to the waiting parent.\n          if ((code || SPAUtils.isSilentStatePresentInURL()) && !executionIdFromUrl && !storedExecutionId) {\n            await signIn();\n          }\n        } catch (error) {\n          throw new ThunderIDRuntimeError(\n            `Sign in failed: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n            'thunderid-signIn-Error',\n            'react',\n            'An error occurred while trying to sign in.',\n          );\n        }\n      }\n    })();\n  }, []);\n\n  /**\n   * Check if the user is signed in and update the state accordingly.\n   * This will also set an interval to check for the sign-in status every second\n   * until the user is signed in.\n   */\n  useEffect(() => {\n    let interval: NodeJS.Timeout;\n\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isSignedIn();\n\n        setIsSignedInSync(status);\n\n        if (!status) {\n          interval = setInterval(async () => {\n            const newStatus: boolean = await client.isSignedIn();\n\n            if (newStatus) {\n              setIsSignedInSync(true);\n              clearInterval(interval);\n            }\n          }, 1000);\n        } else {\n          // TODO: Add a debug log to indicate that the user is already signed in.\n        }\n      } catch (error) {\n        setIsSignedInSync(false);\n      }\n    })();\n\n    return (): void => {\n      if (interval) {\n        clearInterval(interval);\n      }\n    };\n  }, [client]);\n\n  useEffect(() => {\n    (async (): Promise<void> => {\n      try {\n        const status: boolean = await client.isInitialized();\n\n        setIsInitializedSync(status);\n      } catch (error) {\n        setIsInitializedSync(false);\n      }\n    })();\n  }, [client]);\n\n  /**\n   * Track loading state changes from the ThunderID client\n   */\n  useEffect(() => {\n    const checkLoadingState = (): void => {\n      // Don't override loading state during critical session updates\n      if (isUpdatingSession) {\n        return;\n      }\n\n      // Don't set loading=false while auth params are in the URL and user isn't signed in yet.\n      // This prevents ProtectedRoute from redirecting before the sign-in effect processes the auth code.\n      const currentUrl: URL = new URL(window.location.href);\n      if (!isSignedInSync && hasAuthParams(currentUrl, config.afterSignInUrl!)) {\n        return;\n      }\n\n      setIsLoadingSync(client.isLoading());\n    };\n\n    // Initial check\n    checkLoadingState();\n\n    // Set up an interval to check for loading state changes\n    const interval: NodeJS.Timeout = setInterval(checkLoadingState, 100);\n\n    return (): void => {\n      clearInterval(interval);\n    };\n  }, [client, isLoadingSync, isSignedInSync, isUpdatingSession]);\n\n  const signInSilently = async (options?: SignInOptions): Promise<User | boolean> => {\n    try {\n      setIsUpdatingSession(true);\n      setIsLoadingSync(true);\n      return await client.signInSilently(options);\n    } catch (error) {\n      throw new ThunderIDRuntimeError(\n        `Error while signing in silently: ${error instanceof Error ? error.message : String(JSON.stringify(error))}`,\n        'thunderid-signInSilently-Error',\n        'react',\n        'An error occurred while trying to sign in silently.',\n      );\n    } finally {\n      setIsUpdatingSession(false);\n      setIsLoadingSync(client.isLoading());\n    }\n  };\n\n  const handleProfileUpdate = (payload: User): void => {\n    setUser(payload);\n    setUserProfile((prev: UserProfile | null) => ({\n      flattenedProfile: generateFlattenedUserProfile(payload),\n      profile: payload,\n    }));\n  };\n\n  const getDecodedIdToken: () => Promise<IdToken> = useCallback(\n    async (): Promise<IdToken> => client.getDecodedIdToken(),\n    [client],\n  );\n\n  const getIdToken: () => Promise<string> = useCallback(async (): Promise<string> => client.getIdToken(), [client]);\n\n  const getAccessToken: () => Promise<string> = useCallback(\n    async (): Promise<string> => client.getAccessToken(),\n    [client],\n  );\n\n  const getStorageManager: ThunderIDContextProps['getStorageManager'] = useCallback(async () => {\n    const storageManager: Awaited<ReturnType<ThunderIDContextProps['getStorageManager']>> =\n      storageManagerRef.current ?? (await client.getStorageManager());\n    if (storageManager) {\n      storageManagerRef.current = storageManager;\n    }\n    return storageManager;\n  }, [client]);\n\n  const request: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.request(...args),\n    [client],\n  );\n\n  const requestAll: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.requestAll(...args),\n    [client],\n  );\n\n  const exchangeToken: (exchangeConfig: any) => Promise<any> = useCallback(\n    async (exchangeConfig: any): Promise<any> => client.exchangeToken(exchangeConfig),\n    [client],\n  );\n\n  const signOut: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signOut(...args),\n    [client],\n  );\n\n  const recover: ThunderIDContextProps['recover'] = useCallback(\n    async (payload?: EmbeddedRecoveryFlowRequest): Promise<EmbeddedRecoveryFlowResponse> =>\n      (await client.recover(payload)) as EmbeddedRecoveryFlowResponse,\n    [client],\n  );\n\n  const signUp: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.signUp(...args),\n    [client],\n  );\n\n  const clearSession: (...args: any[]) => Promise<any> = useCallback(\n    async (...args: any[]): Promise<any> => client.clearSession(...args),\n    [client],\n  );\n\n  const reInitialize: (reInitConfig: any) => Promise<any> = useCallback(\n    async (reInitConfig: any): Promise<any> => {\n      const result: any = await client.reInitialize(reInitConfig);\n\n      // Refresh React state from the reinitialized client so the context (config.endpoints,\n      // baseUrl, discovery) reflects the new configuration instead of the pre-reinitialization state.\n      const reinitializedConfig: ThunderIDReactConfig = await client.getConfiguration();\n      setConfig(reinitializedConfig);\n      setBaseUrl(reinitializedConfig.baseUrl ?? '');\n      setWellKnown(await client.getDiscoveryResponse());\n\n      return result;\n    },\n    [client],\n  );\n\n  const value: any = useMemo(\n    () => ({\n      afterSignInUrl: config.afterSignInUrl,\n      applicationId: config.applicationId,\n      baseUrl,\n      endpoints: config.endpoints,\n      scopes: config.scopes,\n      clearSession,\n      clientId,\n      discovery: {\n        wellKnown,\n      },\n      exchangeToken,\n      getAccessToken,\n      getDecodedIdToken,\n      getIdToken,\n      getStorageManager,\n      http: {\n        fetcher: httpOptions?.fetcher,\n        request,\n        requestAll,\n      },\n      instanceId,\n      invalidator,\n      isInitialized: isInitializedSync,\n      isLoading: isLoadingSync,\n      isSignedIn: isSignedInSync,\n      organizationChain,\n      organizationHandle: config?.organizationHandle,\n      preferences,\n      reInitialize,\n      recover,\n      signIn,\n      signInOptions,\n      tokenRequest,\n      signInSilently,\n      signInUrl,\n      signOut,\n      signUp,\n      signUpUrl,\n      user,\n      userSchema,\n      vendor: getVendorPrefix(config.vendor),\n    }),\n    [\n      applicationId,\n      config?.organizationHandle,\n      config.vendor,\n      config.afterSignInUrl,\n      config.endpoints,\n      config.scopes,\n      signInUrl,\n      signUpUrl,\n      baseUrl,\n      clientId,\n      wellKnown,\n      isInitializedSync,\n      isLoadingSync,\n      isSignedInSync,\n      signIn,\n      signInSilently,\n      user,\n      userSchema,\n      client,\n      signInOptions,\n      tokenRequest,\n      getDecodedIdToken,\n      clearSession,\n      exchangeToken,\n      httpOptions?.fetcher,\n      getAccessToken,\n      getStorageManager,\n      instanceId,\n      invalidator,\n      organizationChain,\n      preferences,\n      recover,\n      reInitialize,\n      request,\n      requestAll,\n      signOut,\n      signUp,\n    ],\n  );\n\n  return (\n    <ThunderIDContext.Provider value={value}>\n      <I18nProvider preferences={preferences?.i18n} vendor={getVendorPrefix(config.vendor)}>\n        <FlowMetaProvider enabled={preferences?.resolveFromMeta !== false} namespace={namespace}>\n          <ThemeProvider\n            theme={{\n              ...preferences?.theme?.overrides,\n              direction: preferences?.theme?.direction,\n            }}\n          >\n            <FlowProvider>\n              <UserProvider profile={userProfile!} userSchema={userSchema} onUpdateProfile={handleProfileUpdate}>\n                <ComponentRendererProvider renderers={(extensions?.components?.renderers ?? {}) as any}>\n                  {children}\n                </ComponentRendererProvider>\n              </UserProvider>\n            </FlowProvider>\n          </ThemeProvider>\n        </FlowMetaProvider>\n      </I18nProvider>\n    </ThunderIDContext.Provider>\n  );\n};\n\nexport default ThunderIDProvider;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAsCA,MAAMA,+DACJ,oBACA,oBACD;AAOD,MAAMC,qBAAoE,EACxE,gBACA,iBACA,SAAS,gBACT,UACA,UACA,YACA,QACA,aACA,WACA,WACA,oBACA,eACA,eACA,cACA,aAAa,GACb,mBACA,UACA,QACA,WACA,MAAM,YACN,GAAG,WAC0D;AAI7D,uCAAsB,UAAU,OAAO;CAEvC,MAAMC,qCAA8C,MAAM;CAC1D,MAAMC,kCAA6C,IAAIC,qCAAqB,WAAW,EAAE,CAAC,WAAW,CAAC;CACtG,MAAMC,2FAA4E,EAAE,EAAE,CAAC;CACvF,MAAMC,sCAAqC,KAAK;CAChD,MAAM,EAAC,eAAe,6BAA4BC,+BAAe;CACjE,MAAM,CAAC,MAAM,+BAAiC,KAAK;CACnD,MAAM,CAAC,gBAAgB,yCAAuC,MAAM;CACpE,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,eAAe,wCAAsC,KAAK;CAEjE,MAAM,CAAC,aAAa,sCAA+C,KAAK;CACxE,MAAM,CAAC,YAAY,qCAAkE,KAAK;CAC1F,MAAM,CAAC,SAAS,kCAA+B,kBAAkB,GAAG;CACpE,MAAM,CAAC,QAAQ,iCAA4C;EACzD,gBAAgB,kBAAkB,OAAO,SAAS;EAClD,iBAAiB,mBAAmB,OAAO,SAAS;EACpD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,GAAG;EACJ,CAAC;CAEF,MAAM,CAAC,mBAAmB,4CAA0C,MAAM;CAC1E,MAAM,CAAC,WAAW,oCAA0D,KAAK;CAIjF,MAAMC,4CAAwF,KAAK;AAEnG,4BAAgB;AACd,aAAW,kBAAkB,GAAG;IAC/B,CAAC,eAAe,CAAC;AAEpB,4BAAgB;AACd,GAAC,YAA2B;AAC1B,SAAM,OAAO,WAAW,OAAO;AAE/B,aADgD,MAAM,OAAO,kBAAkB,CACnD;AAC5B,gBAAa,MAAM,OAAO,sBAAsB,CAAC;MAC/C;IACH,EAAE,CAAC;CAEN,eAAe,uBAAsC;AACnD,MAAI;AAEF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;GACtB,IAAIC,kBAA0B;GAE9B,MAAMC,eAAwB,MAAM,OAAO,mBAAmB;AAI9D,OAAI,eAAe,aAAa;AAC9B,sBAAkB,IAAI,MAAM,OAAO,kBAAkB,EAAE,QAAQ;AAC/D,eAAW,gBAAgB;;GAG7B,MAAMC,qBAA8B,aAAa,MAAM,qBAAqB;GAC5E,MAAMC,+DAA4C,aAAa;GAC/D,IAAI,cAAc;GAClB,MAAMC,sBAA+B,MAAM,OAAO,YAAY;AAE9D,OAAI,uBAAuB,oBAAoB;AAC7C,QAAI;KACF,MAAM,iBAAiB,MAAMC,2BAAW;MACtC,SAAS;MACT,sDAA6B,WAAW,OAAO;MAC/C;MACD,CAAC;AACF,mBAAc;MAAC,GAAG;MAAQ,GAAG;MAAe;aACrC,KAAK;AACZ,YAAO,KAAK,gDAAgD,IAAI;;AAGlE,QAAI;KACF,MAAM,UAAU,MAAMC,+BAAe;MACnC,SAAS;MACT,sDAA6B,eAAe,OAAO;MACnD;MACD,CAAC;AACF,SAAI,SAAS,OACX,eAAc,QAAQ,OAAO;SAE7B,eAAc,KAAK;aAEd,KAAK;AACZ,mBAAc,KAAK;AACnB,YAAO,KAAK,6DAA6D,IAAI;;SAG/E,eAAc,KAAK;AAGrB,WAAQ,YAAY;AACpB,kBAAe;IACb,wEAA+C,aAAa,EAAE,CAAC;IAC/D,SAAS;IACV,CAAC;AAIF,qBAAkB,oBAAoB;WAC/B,OAAO,WAEN;AAER,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;;;;;;;;CAWxC,eAAe,gBAA+B;AAC5C,MAAI,wBAAwB,QAC1B,QAAO,wBAAwB;AAGjC,0BAAwB,UAAU,sBAAsB,CAAC,cAAc;AACrE,2BAAwB,UAAU;IAClC;AAEF,SAAO,wBAAwB;;CAGjC,eAAe,OAAO,GAAG,MAAuD;EAG9E,MAAMC,OAAY,KAAK;EACvB,MAAMC,kBACJ,OAAO,SAAS,YAAY,SAAS,SAAS,iBAAiB,QAAQ,mBAAmB;AAE5F,MAAI;AACF,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,KAAK;AAC1B,qBAAiB,KAAK;;AAGxB,UAAO,MAAM,OAAO,OAAO,GAAG,KAAK;WAC5B,OAAO;AACd,SAAM,IAAIC,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;YACO;AACR,OAAI,CAAC,iBAAiB;AACpB,yBAAqB,MAAM;AAC3B,qBAAiB,OAAO,WAAW,CAAC;;;;;;;AAQ1C,4BAAgB;AAOd,MAAI,iBAAiB,QACnB;AAGF,mBAAiB,UAAU;AAE3B,GAAC,YAA2B;AAG1B,SAAM,OAAO,GAAG,WAAW,YAAY;AACrC,UAAM,eAAe;KACrB;AAGF,SAAM,OAAO,GAAG,kBAAkB;AAChC,YAAQ,KAAK;AACb,mBAAe,KAAK;AACpB,sBAAkB,MAAM;KACxB;AAMF,OAAI;AACF,UAAM,OAAO,uBAAuB;YAC7B,OAAO;AACd,WAAO,KAAK,+CAA+C,MAAM;;AAInE,OAAI,MAAM,OAAO,YAAY,EAAE;AAC7B,UAAM,eAAe;AAErB;;GAGF,MAAMC,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AAIrD,OAFE,cAAc,YAAY,OAAO,eAAgB,IAAI,yBAAyB,YAAY,cAAc,EAAE,CAG1G,KAAI;IACF,MAAMC,YAA6B,WAAW;IAC9C,MAAMC,OAAsB,UAAU,IAAI,OAAO;IACjD,MAAMC,qBAAoC,UAAU,IAAI,cAAc;IACtE,MAAMC,oBAAmC,eAAe,QACtD,4CAAmB,OAAO,OAAO,CAAC,eACnC;AAID,SAAK,QAAQC,6BAAS,2BAA2B,KAAK,CAAC,sBAAsB,CAAC,kBAC5E,OAAM,QAAQ;YAET,OAAO;AACd,UAAM,IAAIN,0CACR,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IACzF,0BACA,SACA,6CACD;;MAGH;IACH,EAAE,CAAC;;;;;;AAON,4BAAgB;EACd,IAAIO;AAEJ,GAAC,YAA2B;AAC1B,OAAI;IACF,MAAMC,SAAkB,MAAM,OAAO,YAAY;AAEjD,sBAAkB,OAAO;AAEzB,QAAI,CAAC,OACH,YAAW,YAAY,YAAY;AAGjC,SAF2B,MAAM,OAAO,YAAY,EAErC;AACb,wBAAkB,KAAK;AACvB,oBAAc,SAAS;;OAExB,IAAK;YAIH,OAAO;AACd,sBAAkB,MAAM;;MAExB;AAEJ,eAAmB;AACjB,OAAI,SACF,eAAc,SAAS;;IAG1B,CAAC,OAAO,CAAC;AAEZ,4BAAgB;AACd,GAAC,YAA2B;AAC1B,OAAI;AAGF,yBAFwB,MAAM,OAAO,eAAe,CAExB;YACrB,OAAO;AACd,yBAAqB,MAAM;;MAE3B;IACH,CAAC,OAAO,CAAC;;;;AAKZ,4BAAgB;EACd,MAAM,0BAAgC;AAEpC,OAAI,kBACF;GAKF,MAAMP,aAAkB,IAAI,IAAI,OAAO,SAAS,KAAK;AACrD,OAAI,CAAC,kBAAkB,cAAc,YAAY,OAAO,eAAgB,CACtE;AAGF,oBAAiB,OAAO,WAAW,CAAC;;AAItC,qBAAmB;EAGnB,MAAMM,WAA2B,YAAY,mBAAmB,IAAI;AAEpE,eAAmB;AACjB,iBAAc,SAAS;;IAExB;EAAC;EAAQ;EAAe;EAAgB;EAAkB,CAAC;CAE9D,MAAM,iBAAiB,OAAO,YAAqD;AACjF,MAAI;AACF,wBAAqB,KAAK;AAC1B,oBAAiB,KAAK;AACtB,UAAO,MAAM,OAAO,eAAe,QAAQ;WACpC,OAAO;AACd,SAAM,IAAIP,0CACR,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,MAAM,CAAC,IAC1G,kCACA,SACA,sDACD;YACO;AACR,wBAAqB,MAAM;AAC3B,oBAAiB,OAAO,WAAW,CAAC;;;CAIxC,MAAM,uBAAuB,YAAwB;AACnD,UAAQ,QAAQ;AAChB,kBAAgB,UAA8B;GAC5C,wEAA+C,QAAQ;GACvD,SAAS;GACV,EAAE;;CAGL,MAAMS,2CACJ,YAA8B,OAAO,mBAAmB,EACxD,CAAC,OAAO,CACT;CAED,MAAMC,oCAAgD,YAA6B,OAAO,YAAY,EAAE,CAAC,OAAO,CAAC;CAEjH,MAAMC,wCACJ,YAA6B,OAAO,gBAAgB,EACpD,CAAC,OAAO,CACT;CAED,MAAMC,2CAA4E,YAAY;EAC5F,MAAMC,iBACJ,kBAAkB,WAAY,MAAM,OAAO,mBAAmB;AAChE,MAAI,eACF,mBAAkB,UAAU;AAE9B,SAAO;IACN,CAAC,OAAO,CAAC;CAEZ,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,oCACJ,OAAO,GAAG,SAA8B,OAAO,WAAW,GAAG,KAAK,EAClE,CAAC,OAAO,CACT;CAED,MAAMC,uCACJ,OAAO,mBAAsC,OAAO,cAAc,eAAe,EACjF,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,GAAG,SAA8B,OAAO,QAAQ,GAAG,KAAK,EAC/D,CAAC,OAAO,CACT;CAED,MAAMC,iCACJ,OAAO,YACJ,MAAM,OAAO,QAAQ,QAAQ,EAChC,CAAC,OAAO,CACT;CAED,MAAMC,gCACJ,OAAO,GAAG,SAA8B,OAAO,OAAO,GAAG,KAAK,EAC9D,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,GAAG,SAA8B,OAAO,aAAa,GAAG,KAAK,EACpE,CAAC,OAAO,CACT;CAED,MAAMC,sCACJ,OAAO,iBAAoC;EACzC,MAAMC,SAAc,MAAM,OAAO,aAAa,aAAa;EAI3D,MAAMC,sBAA4C,MAAM,OAAO,kBAAkB;AACjF,YAAU,oBAAoB;AAC9B,aAAW,oBAAoB,WAAW,GAAG;AAC7C,eAAa,MAAM,OAAO,sBAAsB,CAAC;AAEjD,SAAO;IAET,CAAC,OAAO,CACT;CAED,MAAMC,kCACG;EACL,gBAAgB,OAAO;EACvB,eAAe,OAAO;EACtB;EACA,WAAW,OAAO;EAClB,QAAQ,OAAO;EACf;EACA;EACA,WAAW,EACT,WACD;EACD;EACA;EACA;EACA;EACA;EACA,MAAM;GACJ,SAAS,aAAa;GACtB;GACA;GACD;EACD;EACA;EACA,eAAe;EACf,WAAW;EACX,YAAY;EACZ;EACA,oBAAoB,QAAQ;EAC5B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,iDAAwB,OAAO,OAAO;EACvC,GACD;EACE;EACA,QAAQ;EACR,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,aAAa;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;AAED,QACE,2CAACC,iCAAiB;EAAgB;YAChC,2CAACC;GAAa,aAAa,aAAa;GAAM,iDAAwB,OAAO,OAAO;aAClF,2CAACC;IAAiB,SAAS,aAAa,oBAAoB;IAAkB;cAC5E,2CAACC;KACC,OAAO;MACL,GAAG,aAAa,OAAO;MACvB,WAAW,aAAa,OAAO;MAChC;eAED,2CAACC,0CACC,2CAACC;MAAa,SAAS;MAA0B;MAAY,iBAAiB;gBAC5E,2CAACC;OAA0B,WAAY,YAAY,YAAY,aAAa,EAAE;OAC3E;QACyB;OACf,GACF;MACD;KACC;IACN;GACW;;AAIhC,gCAAe"}

package/dist/cjs/hooks/auth/useFetchAuthFlows.cjs

@@ -0,0 +1,36 @@
+const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('../management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../management/useResourceQuery.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+
+//#region src/hooks/auth/useFetchAuthFlows.ts
+/**
+* A `FetchAuthFlows` backed by the flow list, restricted to authentication flows and authenticated with
+* the signed-in user's access token. Its identity is stable across renders, since a picker resets its
+* loaded pages when the loader changes.
+*/
+const useFetchAuthFlows = () => {
+	const { baseUrl, url } = require_useManagementEndpoint.default("flows");
+	const fetcher = require_useResourceQuery.useResolvedFetcher();
+	return (0, react.useCallback)(async ({ limit, offset, signal }) => (0, __thunderid_browser.toAuthFlowSelectPage)(await (0, __thunderid_browser.getFlows)({
+		baseUrl,
+		fetcher,
+		flowType: __thunderid_browser.AuthFlowSelectConstants.FLOW_TYPE,
+		limit: Math.min(limit, __thunderid_browser.SelectConstants.MAX_PAGE_SIZE),
+		offset,
+		signal,
+		url
+	}), offset), [
+		baseUrl,
+		fetcher,
+		url
+	]);
+};
+var useFetchAuthFlows_default = useFetchAuthFlows;
+
+//#endregion
+exports.default = useFetchAuthFlows_default;
+//# sourceMappingURL=useFetchAuthFlows.cjs.map

package/dist/cjs/hooks/auth/useFetchAuthFlows.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useFetchAuthFlows.cjs","names":["useManagementEndpoint","fetcher: ReturnType<typeof useResolvedFetcher>","useResolvedFetcher","AuthFlowSelectConstants","SelectConstants"],"sources":["../../../../src/hooks/auth/useFetchAuthFlows.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {AuthFlowSelectConstants, getFlows, SelectConstants, toAuthFlowSelectPage} from '@thunderid/browser';\nimport type {FetchAuthFlows, SelectPage, SelectPageRequest} from '@thunderid/browser';\nimport {useCallback} from 'react';\nimport useManagementEndpoint, {ManagementEndpoint} from '../management/useManagementEndpoint';\nimport {useResolvedFetcher} from '../management/useResourceQuery';\n\n/**\n * A `FetchAuthFlows` backed by the flow list, restricted to authentication flows and authenticated with\n * the signed-in user's access token. Its identity is stable across renders, since a picker resets its\n * loaded pages when the loader changes.\n */\nconst useFetchAuthFlows = (): FetchAuthFlows => {\n  const {baseUrl, url}: ManagementEndpoint = useManagementEndpoint('flows');\n  const fetcher: ReturnType<typeof useResolvedFetcher> = useResolvedFetcher();\n\n  return useCallback(\n    async ({limit, offset, signal}: SelectPageRequest): Promise<SelectPage> =>\n      toAuthFlowSelectPage(\n        await getFlows({\n          baseUrl,\n          fetcher,\n          flowType: AuthFlowSelectConstants.FLOW_TYPE,\n          limit: Math.min(limit, SelectConstants.MAX_PAGE_SIZE),\n          offset,\n          signal,\n          url,\n        }),\n        offset,\n      ),\n    [baseUrl, fetcher, url],\n  );\n};\n\nexport default useFetchAuthFlows;\n"],"mappings":";;;;;;;;;;;;;;AAcA,MAAM,0BAA0C;CAC9C,MAAM,EAAC,SAAS,QAA2BA,sCAAsB,QAAQ;CACzE,MAAMC,UAAiDC,6CAAoB;AAE3E,+BACE,OAAO,EAAC,OAAO,QAAQ,2DAEnB,wCAAe;EACb;EACA;EACA,UAAUC,4CAAwB;EAClC,OAAO,KAAK,IAAI,OAAOC,oCAAgB,cAAc;EACrD;EACA;EACA;EACD,CAAC,EACF,OACD,EACH;EAAC;EAAS;EAAS;EAAI,CACxB;;AAGH,gCAAe"}

package/dist/cjs/hooks/auth/useOAuthCallback.cjs

@@ -0,0 +1,86 @@
+const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.cjs');
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+
+//#region src/hooks/auth/useOAuthCallback.ts
+function cleanupUrlParams() {
+	if (typeof window === "undefined") return;
+	const url = new URL(window.location.href);
+	url.searchParams.delete("code");
+	url.searchParams.delete("nonce");
+	url.searchParams.delete("state");
+	url.searchParams.delete("error");
+	url.searchParams.delete("error_description");
+	window.history.replaceState({}, "", url.toString());
+}
+/**
+* Processes OAuth callbacks by detecting auth code in URL, resolving executionId, and submitting to server.
+* Used by SignIn, SignUp, and AcceptInvite components.
+*/
+function useOAuthCallback({ currentExecutionId, executionIdStorageKey = "thunderid_execution_id", isInitialized, isSubmitting = false, onComplete, onError, onFlowChange, onProcessingStart, onSubmit, processedRef, setExecutionId: setExecExecutionId, tokenValidationAttemptedRef }) {
+	const internalRef = (0, react.useRef)(false);
+	const oauthCodeProcessedRef = processedRef ?? internalRef;
+	(0, react.useEffect)(() => {
+		if (!isInitialized || isSubmitting) return;
+		const urlParams = new URLSearchParams(window.location.search);
+		const code = urlParams.get("code");
+		const nonce = urlParams.get("nonce");
+		const state = urlParams.get("state");
+		const executionIdFromUrl = urlParams.get("executionId");
+		const error = urlParams.get("error");
+		const errorDescription = urlParams.get("error_description");
+		if (error) {
+			oauthCodeProcessedRef.current = true;
+			if (tokenValidationAttemptedRef) tokenValidationAttemptedRef.current = true;
+			onError?.(new Error(errorDescription || error || "OAuth authentication failed"));
+			cleanupUrlParams();
+			return;
+		}
+		if (!code || oauthCodeProcessedRef.current) return;
+		if (tokenValidationAttemptedRef?.current) return;
+		const storedExecutionId = sessionStorage.getItem(executionIdStorageKey);
+		const executionIdToUse = currentExecutionId || storedExecutionId || executionIdFromUrl || state || null;
+		if (!executionIdToUse) {
+			oauthCodeProcessedRef.current = true;
+			onError?.(/* @__PURE__ */ new Error("Invalid flow. Missing executionId."));
+			cleanupUrlParams();
+			return;
+		}
+		oauthCodeProcessedRef.current = true;
+		if (tokenValidationAttemptedRef) tokenValidationAttemptedRef.current = true;
+		onProcessingStart?.();
+		if (!currentExecutionId && setExecExecutionId) setExecExecutionId(executionIdToUse);
+		(async () => {
+			try {
+				const response = await onSubmit({
+					executionId: executionIdToUse,
+					inputs: {
+						code,
+						...nonce && { nonce }
+					}
+				});
+				onFlowChange?.(response);
+				if (response?.flowStatus === "COMPLETE" || response?.status === "COMPLETE") onComplete?.();
+				if (response?.flowStatus === "ERROR" || response?.status === "ERROR") onError?.(response);
+				cleanupUrlParams();
+			} catch (err) {
+				onError?.(err);
+				cleanupUrlParams();
+			}
+		})();
+	}, [
+		isInitialized,
+		currentExecutionId,
+		isSubmitting,
+		onSubmit,
+		onComplete,
+		onError,
+		onFlowChange,
+		setExecExecutionId,
+		executionIdStorageKey
+	]);
+}
+
+//#endregion
+exports.useOAuthCallback = useOAuthCallback;
+//# sourceMappingURL=useOAuthCallback.cjs.map

package/dist/cjs/hooks/auth/useOAuthCallback.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useOAuthCallback.cjs","names":["url: URL","internalRef: any","oauthCodeProcessedRef: any","urlParams: URLSearchParams","code: string | null","nonce: string | null","state: string | null","executionIdFromUrl: string | null","error: string | null","errorDescription: string | null","storedExecutionId: string | null","executionIdToUse: string | null","response: any"],"sources":["../../../../src/hooks/auth/useOAuthCallback.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {useEffect, useRef, type RefObject} from 'react';\n\nexport interface UseOAuthCallbackOptions {\n  /**\n   * Current executionId from component state\n   */\n  currentExecutionId: string | null;\n\n  /**\n   * SessionStorage key for executionId (defaults to 'thunderid_execution_id')\n   */\n  executionIdStorageKey?: string;\n\n  /**\n   * Whether the component is initialized and ready to process OAuth callback\n   */\n  isInitialized: boolean;\n\n  /**\n   * Whether a submission is currently in progress\n   */\n  isSubmitting?: boolean;\n\n  /**\n   * Callback when OAuth flow completes successfully\n   */\n  onComplete?: () => void;\n\n  /**\n   * Callback when OAuth flow encounters an error\n   */\n  onError?: (error: any) => void;\n\n  /**\n   * Function to handle flow response after submission\n   */\n  onFlowChange?: (response: any) => void;\n\n  /**\n   * Callback to set loading state at the start of OAuth processing\n   */\n  onProcessingStart?: () => void;\n\n  /**\n   * Function to submit OAuth code to the server\n   */\n  onSubmit: (payload: OAuthCallbackPayload) => Promise<any>;\n\n  /**\n   * Optional external ref to track processed state. If provided, the component\n   * manages the ref (allowing resets on flow clear/retry). Otherwise hook manages internally.\n   */\n  processedRef?: RefObject<boolean>;\n\n  /**\n   * Additional handler for setting state (e.g., setExecutionId)\n   */\n  setExecutionId?: (executionId: string) => void;\n\n  /**\n   * Ref to mark that token validation was attempted (prevents duplicate validation)\n   * Used in AcceptInvite to coordinate between OAuth callback and token validation\n   */\n  tokenValidationAttemptedRef?: RefObject<boolean>;\n}\n\nexport interface OAuthCallbackPayload {\n  executionId: string;\n  inputs: {\n    code: string;\n    nonce?: string;\n  };\n}\n\nfunction cleanupUrlParams(): void {\n  if (typeof window === 'undefined') return;\n\n  const url: URL = new URL(window.location.href);\n  url.searchParams.delete('code');\n  url.searchParams.delete('nonce');\n  url.searchParams.delete('state');\n  url.searchParams.delete('error');\n  url.searchParams.delete('error_description');\n\n  window.history.replaceState({}, '', url.toString());\n}\n\n/**\n * Processes OAuth callbacks by detecting auth code in URL, resolving executionId, and submitting to server.\n * Used by SignIn, SignUp, and AcceptInvite components.\n */\nexport function useOAuthCallback({\n  currentExecutionId,\n  executionIdStorageKey = 'thunderid_execution_id',\n  isInitialized,\n  isSubmitting = false,\n  onComplete,\n  onError,\n  onFlowChange,\n  onProcessingStart,\n  onSubmit,\n  processedRef,\n  setExecutionId: setExecExecutionId,\n  tokenValidationAttemptedRef,\n}: UseOAuthCallbackOptions): void {\n  const internalRef: any = useRef(false);\n  const oauthCodeProcessedRef: any = processedRef ?? internalRef;\n\n  useEffect(() => {\n    if (!isInitialized || isSubmitting) {\n      return;\n    }\n\n    const urlParams: URLSearchParams = new URLSearchParams(window.location.search);\n    const code: string | null = urlParams.get('code');\n    const nonce: string | null = urlParams.get('nonce');\n    const state: string | null = urlParams.get('state');\n    const executionIdFromUrl: string | null = urlParams.get('executionId');\n    const error: string | null = urlParams.get('error');\n    const errorDescription: string | null = urlParams.get('error_description');\n\n    if (error) {\n      oauthCodeProcessedRef.current = true;\n      if (tokenValidationAttemptedRef) {\n        tokenValidationAttemptedRef.current = true;\n      }\n      onError?.(new Error(errorDescription || error || 'OAuth authentication failed'));\n      cleanupUrlParams();\n      return;\n    }\n\n    if (!code || oauthCodeProcessedRef.current) {\n      return;\n    }\n\n    if (tokenValidationAttemptedRef?.current) {\n      return;\n    }\n\n    const storedExecutionId: string | null = sessionStorage.getItem(executionIdStorageKey);\n    const executionIdToUse: string | null =\n      currentExecutionId || storedExecutionId || executionIdFromUrl || state || null;\n\n    if (!executionIdToUse) {\n      oauthCodeProcessedRef.current = true;\n      onError?.(new Error('Invalid flow. Missing executionId.'));\n      cleanupUrlParams();\n      return;\n    }\n\n    oauthCodeProcessedRef.current = true;\n\n    if (tokenValidationAttemptedRef) {\n      tokenValidationAttemptedRef.current = true;\n    }\n\n    onProcessingStart?.();\n\n    if (!currentExecutionId && setExecExecutionId) {\n      setExecExecutionId(executionIdToUse);\n    }\n\n    (async (): Promise<void> => {\n      try {\n        const payload: OAuthCallbackPayload = {\n          executionId: executionIdToUse,\n          inputs: {\n            code,\n            ...(nonce && {nonce}),\n          },\n        };\n\n        const response: any = await onSubmit(payload);\n\n        onFlowChange?.(response);\n\n        if (response?.flowStatus === 'COMPLETE' || response?.status === 'COMPLETE') {\n          onComplete?.();\n        }\n\n        if (response?.flowStatus === 'ERROR' || response?.status === 'ERROR') {\n          onError?.(response);\n        }\n\n        cleanupUrlParams();\n      } catch (err) {\n        onError?.(err);\n        cleanupUrlParams();\n      }\n    })();\n  }, [\n    isInitialized,\n    currentExecutionId,\n    isSubmitting,\n    onSubmit,\n    onComplete,\n    onError,\n    onFlowChange,\n    setExecExecutionId,\n    executionIdStorageKey,\n  ]);\n}\n"],"mappings":";;;;;AA6EA,SAAS,mBAAyB;AAChC,KAAI,OAAO,WAAW,YAAa;CAEnC,MAAMA,MAAW,IAAI,IAAI,OAAO,SAAS,KAAK;AAC9C,KAAI,aAAa,OAAO,OAAO;AAC/B,KAAI,aAAa,OAAO,QAAQ;AAChC,KAAI,aAAa,OAAO,QAAQ;AAChC,KAAI,aAAa,OAAO,QAAQ;AAChC,KAAI,aAAa,OAAO,oBAAoB;AAE5C,QAAO,QAAQ,aAAa,EAAE,EAAE,IAAI,IAAI,UAAU,CAAC;;;;;;AAOrD,SAAgB,iBAAiB,EAC/B,oBACA,wBAAwB,0BACxB,eACA,eAAe,OACf,YACA,SACA,cACA,mBACA,UACA,cACA,gBAAgB,oBAChB,+BACgC;CAChC,MAAMC,gCAA0B,MAAM;CACtC,MAAMC,wBAA6B,gBAAgB;AAEnD,4BAAgB;AACd,MAAI,CAAC,iBAAiB,aACpB;EAGF,MAAMC,YAA6B,IAAI,gBAAgB,OAAO,SAAS,OAAO;EAC9E,MAAMC,OAAsB,UAAU,IAAI,OAAO;EACjD,MAAMC,QAAuB,UAAU,IAAI,QAAQ;EACnD,MAAMC,QAAuB,UAAU,IAAI,QAAQ;EACnD,MAAMC,qBAAoC,UAAU,IAAI,cAAc;EACtE,MAAMC,QAAuB,UAAU,IAAI,QAAQ;EACnD,MAAMC,mBAAkC,UAAU,IAAI,oBAAoB;AAE1E,MAAI,OAAO;AACT,yBAAsB,UAAU;AAChC,OAAI,4BACF,6BAA4B,UAAU;AAExC,aAAU,IAAI,MAAM,oBAAoB,SAAS,8BAA8B,CAAC;AAChF,qBAAkB;AAClB;;AAGF,MAAI,CAAC,QAAQ,sBAAsB,QACjC;AAGF,MAAI,6BAA6B,QAC/B;EAGF,MAAMC,oBAAmC,eAAe,QAAQ,sBAAsB;EACtF,MAAMC,mBACJ,sBAAsB,qBAAqB,sBAAsB,SAAS;AAE5E,MAAI,CAAC,kBAAkB;AACrB,yBAAsB,UAAU;AAChC,6BAAU,IAAI,MAAM,qCAAqC,CAAC;AAC1D,qBAAkB;AAClB;;AAGF,wBAAsB,UAAU;AAEhC,MAAI,4BACF,6BAA4B,UAAU;AAGxC,uBAAqB;AAErB,MAAI,CAAC,sBAAsB,mBACzB,oBAAmB,iBAAiB;AAGtC,GAAC,YAA2B;AAC1B,OAAI;IASF,MAAMC,WAAgB,MAAM,SARU;KACpC,aAAa;KACb,QAAQ;MACN;MACA,GAAI,SAAS,EAAC,OAAM;MACrB;KACF,CAE4C;AAE7C,mBAAe,SAAS;AAExB,QAAI,UAAU,eAAe,cAAc,UAAU,WAAW,WAC9D,eAAc;AAGhB,QAAI,UAAU,eAAe,WAAW,UAAU,WAAW,QAC3D,WAAU,SAAS;AAGrB,sBAAkB;YACX,KAAK;AACZ,cAAU,IAAI;AACd,sBAAkB;;MAElB;IACH;EACD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC"}

package/dist/cjs/hooks/management/agents/useCreateAgent.cjs

@@ -0,0 +1,26 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('../useManagementEndpoint.cjs');
+const require_useResourceMutation = require('../useResourceMutation.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/hooks/management/agents/useCreateAgent.ts
+/**
+* Creates an agent, then refetches any mounted agent lists.
+*
+* @param options - Mutation options, including `onSuccess`, `onError`, and a per-hook `fetcher`.
+* @returns The mutation state. Call `mutate(payload)` to create.
+*/
+const useCreateAgent = (options) => {
+	const endpoint = require_useManagementEndpoint.default("agents");
+	return require_useResourceMutation.default((payload, fetcher) => (0, __thunderid_browser.createAgent)({
+		...endpoint,
+		fetcher,
+		payload
+	}), () => [[__thunderid_browser.AgentQueryKeys.AGENTS]], options);
+};
+var useCreateAgent_default = useCreateAgent;
+
+//#endregion
+exports.default = useCreateAgent_default;
+//# sourceMappingURL=useCreateAgent.cjs.map

package/dist/cjs/hooks/management/agents/useCreateAgent.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCreateAgent.cjs","names":["endpoint: ManagementEndpoint","useManagementEndpoint","useResourceMutation","AgentQueryKeys"],"sources":["../../../../../src/hooks/management/agents/useCreateAgent.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Agent, AgentQueryKeys, CreateAgentRequest, createAgent} from '@thunderid/browser';\nimport useManagementEndpoint, {ManagementEndpoint} from '../useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationOptions, ResourceMutationResult} from '../useResourceMutation';\n\n/**\n * Creates an agent, then refetches any mounted agent lists.\n *\n * @param options - Mutation options, including `onSuccess`, `onError`, and a per-hook `fetcher`.\n * @returns The mutation state. Call `mutate(payload)` to create.\n */\nconst useCreateAgent = (\n  options?: ResourceMutationOptions<Agent, CreateAgentRequest>,\n): ResourceMutationResult<Agent, CreateAgentRequest> => {\n  const endpoint: ManagementEndpoint = useManagementEndpoint('agents');\n\n  return useResourceMutation(\n    (payload: CreateAgentRequest, fetcher) => createAgent({...endpoint, fetcher, payload}),\n    () => [[AgentQueryKeys.AGENTS]],\n    options,\n  );\n};\n\nexport default useCreateAgent;\n"],"mappings":";;;;;;;;;;;;;AAaA,MAAM,kBACJ,YACsD;CACtD,MAAMA,WAA+BC,sCAAsB,SAAS;AAEpE,QAAOC,qCACJ,SAA6B,iDAAwB;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,QAChF,CAAC,CAACC,mCAAe,OAAO,CAAC,EAC/B,QACD;;AAGH,6BAAe"}

package/dist/cjs/hooks/management/agents/useDeleteAgent.cjs

@@ -0,0 +1,26 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('../useManagementEndpoint.cjs');
+const require_useResourceMutation = require('../useResourceMutation.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/hooks/management/agents/useDeleteAgent.ts
+/**
+* Deletes an agent, then refetches any mounted agent lists.
+*
+* @param options - Mutation options, including `onSuccess`, `onError`, and a per-hook `fetcher`.
+* @returns The mutation state. Call `mutate(agentId)` to delete.
+*/
+const useDeleteAgent = (options) => {
+	const endpoint = require_useManagementEndpoint.default("agents");
+	return require_useResourceMutation.default((agentId, fetcher) => (0, __thunderid_browser.deleteAgent)({
+		...endpoint,
+		agentId,
+		fetcher
+	}), () => [[__thunderid_browser.AgentQueryKeys.AGENTS]], options);
+};
+var useDeleteAgent_default = useDeleteAgent;
+
+//#endregion
+exports.default = useDeleteAgent_default;
+//# sourceMappingURL=useDeleteAgent.cjs.map

package/dist/cjs/hooks/management/agents/useDeleteAgent.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useDeleteAgent.cjs","names":["endpoint: ManagementEndpoint","useManagementEndpoint","useResourceMutation","AgentQueryKeys"],"sources":["../../../../../src/hooks/management/agents/useDeleteAgent.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {AgentQueryKeys, deleteAgent} from '@thunderid/browser';\nimport useManagementEndpoint, {ManagementEndpoint} from '../useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationOptions, ResourceMutationResult} from '../useResourceMutation';\n\n/**\n * Deletes an agent, then refetches any mounted agent lists.\n *\n * @param options - Mutation options, including `onSuccess`, `onError`, and a per-hook `fetcher`.\n * @returns The mutation state. Call `mutate(agentId)` to delete.\n */\nconst useDeleteAgent = (options?: ResourceMutationOptions<void, string>): ResourceMutationResult<void, string> => {\n  const endpoint: ManagementEndpoint = useManagementEndpoint('agents');\n\n  return useResourceMutation(\n    (agentId: string, fetcher) => deleteAgent({...endpoint, agentId, fetcher}),\n    () => [[AgentQueryKeys.AGENTS]],\n    options,\n  );\n};\n\nexport default useDeleteAgent;\n"],"mappings":";;;;;;;;;;;;;AAaA,MAAM,kBAAkB,YAA0F;CAChH,MAAMA,WAA+BC,sCAAsB,SAAS;AAEpE,QAAOC,qCACJ,SAAiB,iDAAwB;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,QACpE,CAAC,CAACC,mCAAe,OAAO,CAAC,EAC/B,QACD;;AAGH,6BAAe"}

package/dist/cjs/hooks/management/agents/useGetAgent.cjs

@@ -0,0 +1,30 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('../useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../useResourceQuery.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/hooks/management/agents/useGetAgent.ts
+/**
+* Fetches a single agent. Does nothing until `agentId` is set.
+*
+* @param agentId - Identifier of the agent.
+* @param options - Query options, including a per-hook `fetcher`.
+* @returns The query state.
+*/
+const useGetAgent = (agentId, options) => {
+	const endpoint = require_useManagementEndpoint.default("agents");
+	return require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENT, agentId], (fetcher) => (0, __thunderid_browser.getAgent)({
+		...endpoint,
+		agentId,
+		fetcher
+	}), {
+		...options,
+		enabled: Boolean(agentId) && options?.enabled !== false
+	});
+};
+var useGetAgent_default = useGetAgent;
+
+//#endregion
+exports.default = useGetAgent_default;
+//# sourceMappingURL=useGetAgent.cjs.map

package/dist/cjs/hooks/management/agents/useGetAgent.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGetAgent.cjs","names":["endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","AgentQueryKeys"],"sources":["../../../../../src/hooks/management/agents/useGetAgent.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Agent, AgentQueryKeys, getAgent} from '@thunderid/browser';\nimport useManagementEndpoint, {ManagementEndpoint} from '../useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryOptions, ResourceQueryResult} from '../useResourceQuery';\n\n/**\n * Fetches a single agent. Does nothing until `agentId` is set.\n *\n * @param agentId - Identifier of the agent.\n * @param options - Query options, including a per-hook `fetcher`.\n * @returns The query state.\n */\nconst useGetAgent = (agentId: string | undefined, options?: ResourceQueryOptions): ResourceQueryResult<Agent> => {\n  const endpoint: ManagementEndpoint = useManagementEndpoint('agents');\n\n  return useResourceQuery(\n    [AgentQueryKeys.AGENT, agentId],\n    (fetcher) => getAgent({...endpoint, agentId: agentId!, fetcher}),\n    {...options, enabled: Boolean(agentId) && options?.enabled !== false},\n  );\n};\n\nexport default useGetAgent;\n"],"mappings":";;;;;;;;;;;;;;AAcA,MAAM,eAAe,SAA6B,YAA+D;CAC/G,MAAMA,WAA+BC,sCAAsB,SAAS;AAEpE,QAAOC,iCACL,CAACC,mCAAe,OAAO,QAAQ,GAC9B,8CAAqB;EAAC,GAAG;EAAmB;EAAU;EAAQ,CAAC,EAChE;EAAC,GAAG;EAAS,SAAS,QAAQ,QAAQ,IAAI,SAAS,YAAY;EAAM,CACtE;;AAGH,0BAAe"}

package/dist/cjs/hooks/management/agents/useGetAgentGroups.cjs

@@ -0,0 +1,41 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('../useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../useResourceQuery.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/hooks/management/agents/useGetAgentGroups.ts
+/**
+* Fetches a page of the groups an agent belongs to.
+*
+* @param agentId - Identifier of the agent. Fetching waits until it is defined.
+* @param params - Pagination parameters.
+* @param options - Query options, including a per-hook `fetcher`.
+* @returns The query state.
+*/
+const useGetAgentGroups = (agentId, { limit, offset } = {}, options) => {
+	const endpoint = require_useManagementEndpoint.default("agents");
+	return require_useResourceQuery.default([
+		__thunderid_browser.GroupQueryKeys.MEMBERSHIPS,
+		"agent",
+		agentId,
+		{
+			limit,
+			offset
+		}
+	], (fetcher) => (0, __thunderid_browser.getAgentGroups)({
+		...endpoint,
+		fetcher,
+		limit,
+		offset,
+		agentId
+	}), {
+		...options,
+		enabled: Boolean(agentId) && options?.enabled !== false
+	});
+};
+var useGetAgentGroups_default = useGetAgentGroups;
+
+//#endregion
+exports.default = useGetAgentGroups_default;
+//# sourceMappingURL=useGetAgentGroups.cjs.map

package/dist/cjs/hooks/management/agents/useGetAgentGroups.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGetAgentGroups.cjs","names":["endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","GroupQueryKeys"],"sources":["../../../../../src/hooks/management/agents/useGetAgentGroups.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {GroupQueryKeys, MembershipGroupListResponse, getAgentGroups} from '@thunderid/browser';\nimport useManagementEndpoint, {ManagementEndpoint} from '../useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryOptions, ResourceQueryResult} from '../useResourceQuery';\n\n/**\n * Fetches a page of the groups an agent belongs to.\n *\n * @param agentId - Identifier of the agent. Fetching waits until it is defined.\n * @param params - Pagination parameters.\n * @param options - Query options, including a per-hook `fetcher`.\n * @returns The query state.\n */\nconst useGetAgentGroups = (\n  agentId: string | undefined,\n  {limit, offset}: {limit?: number; offset?: number} = {},\n  options?: ResourceQueryOptions,\n): ResourceQueryResult<MembershipGroupListResponse> => {\n  const endpoint: ManagementEndpoint = useManagementEndpoint('agents');\n\n  return useResourceQuery(\n    [GroupQueryKeys.MEMBERSHIPS, 'agent', agentId, {limit, offset}],\n    (fetcher) => getAgentGroups({...endpoint, fetcher, limit, offset, agentId: agentId!}),\n    {...options, enabled: Boolean(agentId) && options?.enabled !== false},\n  );\n};\n\nexport default useGetAgentGroups;\n"],"mappings":";;;;;;;;;;;;;;;AAeA,MAAM,qBACJ,SACA,EAAC,OAAO,WAA6C,EAAE,EACvD,YACqD;CACrD,MAAMA,WAA+BC,sCAAsB,SAAS;AAEpE,QAAOC,iCACL;EAACC,mCAAe;EAAa;EAAS;EAAS;GAAC;GAAO;GAAO;EAAC,GAC9D,oDAA2B;EAAC,GAAG;EAAU;EAAS;EAAO;EAAiB;EAAS,CAAC,EACrF;EAAC,GAAG;EAAS,SAAS,QAAQ,QAAQ,IAAI,SAAS,YAAY;EAAM,CACtE;;AAGH,gCAAe"}

package/dist/cjs/hooks/management/agents/useGetAgentRoles.cjs

@@ -0,0 +1,42 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('../useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../useResourceQuery.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/hooks/management/agents/useGetAgentRoles.ts
+/**
+* Fetches a page of the role names assigned to an agent, directly or through its groups. Refetches
+* whenever a role assignment or a group membership changes.
+*
+* @param agentId - Identifier of the agent. Fetching waits until it is defined.
+* @param params - Pagination parameters.
+* @param options - Query options, including a per-hook `fetcher`.
+* @returns The query state.
+*/
+const useGetAgentRoles = (agentId, { limit, offset } = {}, options) => {
+	const endpoint = require_useManagementEndpoint.default("agents");
+	return require_useResourceQuery.default([
+		__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS,
+		"agent",
+		agentId,
+		{
+			limit,
+			offset
+		}
+	], (fetcher) => (0, __thunderid_browser.getAgentRoles)({
+		...endpoint,
+		agentId,
+		fetcher,
+		limit,
+		offset
+	}), {
+		...options,
+		enabled: Boolean(agentId) && options?.enabled !== false
+	});
+};
+var useGetAgentRoles_default = useGetAgentRoles;
+
+//#endregion
+exports.default = useGetAgentRoles_default;
+//# sourceMappingURL=useGetAgentRoles.cjs.map

package/dist/cjs/hooks/management/agents/useGetAgentRoles.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGetAgentRoles.cjs","names":["endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","RoleQueryKeys"],"sources":["../../../../../src/hooks/management/agents/useGetAgentRoles.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {AgentRoleListResponse, RoleQueryKeys, getAgentRoles} from '@thunderid/browser';\nimport useManagementEndpoint, {ManagementEndpoint} from '../useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryOptions, ResourceQueryResult} from '../useResourceQuery';\n\n/**\n * Fetches a page of the role names assigned to an agent, directly or through its groups. Refetches\n * whenever a role assignment or a group membership changes.\n *\n * @param agentId - Identifier of the agent. Fetching waits until it is defined.\n * @param params - Pagination parameters.\n * @param options - Query options, including a per-hook `fetcher`.\n * @returns The query state.\n */\nconst useGetAgentRoles = (\n  agentId: string | undefined,\n  {limit, offset}: {limit?: number; offset?: number} = {},\n  options?: ResourceQueryOptions,\n): ResourceQueryResult<AgentRoleListResponse> => {\n  const endpoint: ManagementEndpoint = useManagementEndpoint('agents');\n\n  return useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, 'agent', agentId, {limit, offset}],\n    (fetcher) => getAgentRoles({...endpoint, agentId: agentId!, fetcher, limit, offset}),\n    {...options, enabled: Boolean(agentId) && options?.enabled !== false},\n  );\n};\n\nexport default useGetAgentRoles;\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,MAAM,oBACJ,SACA,EAAC,OAAO,WAA6C,EAAE,EACvD,YAC+C;CAC/C,MAAMA,WAA+BC,sCAAsB,SAAS;AAEpE,QAAOC,iCACL;EAACC,kCAAc;EAAkB;EAAS;EAAS;GAAC;GAAO;GAAO;EAAC,GAClE,mDAA0B;EAAC,GAAG;EAAmB;EAAU;EAAS;EAAO;EAAO,CAAC,EACpF;EAAC,GAAG;EAAS,SAAS,QAAQ,QAAQ,IAAI,SAAS,YAAY;EAAM,CACtE;;AAGH,+BAAe"}

package/dist/cjs/hooks/management/agents/useGetAgentTypes.cjs

@@ -0,0 +1,31 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('../useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../useResourceQuery.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/hooks/management/agents/useGetAgentTypes.ts
+/**
+* Fetches a page of agent types.
+*
+* @param params - Pagination parameters.
+* @param options - Query options, including a per-hook `fetcher`.
+* @returns The query state.
+*/
+const useGetAgentTypes = ({ limit, offset } = {}, options) => {
+	const endpoint = require_useManagementEndpoint.default("agentTypes");
+	return require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENT_TYPES, {
+		limit,
+		offset
+	}], (fetcher) => (0, __thunderid_browser.getAgentTypes)({
+		...endpoint,
+		fetcher,
+		limit,
+		offset
+	}), options);
+};
+var useGetAgentTypes_default = useGetAgentTypes;
+
+//#endregion
+exports.default = useGetAgentTypes_default;
+//# sourceMappingURL=useGetAgentTypes.cjs.map

package/dist/cjs/hooks/management/agents/useGetAgentTypes.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGetAgentTypes.cjs","names":["endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","AgentQueryKeys"],"sources":["../../../../../src/hooks/management/agents/useGetAgentTypes.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {AgentQueryKeys, AgentTypeListResponse, getAgentTypes} from '@thunderid/browser';\nimport useManagementEndpoint, {ManagementEndpoint} from '../useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryOptions, ResourceQueryResult} from '../useResourceQuery';\n\n/**\n * Fetches a page of agent types.\n *\n * @param params - Pagination parameters.\n * @param options - Query options, including a per-hook `fetcher`.\n * @returns The query state.\n */\nconst useGetAgentTypes = (\n  {limit, offset}: {limit?: number; offset?: number} = {},\n  options?: ResourceQueryOptions,\n): ResourceQueryResult<AgentTypeListResponse> => {\n  const endpoint: ManagementEndpoint = useManagementEndpoint('agentTypes');\n\n  return useResourceQuery(\n    [AgentQueryKeys.AGENT_TYPES, {limit, offset}],\n    (fetcher) => getAgentTypes({...endpoint, fetcher, limit, offset}),\n    options,\n  );\n};\n\nexport default useGetAgentTypes;\n"],"mappings":";;;;;;;;;;;;;;AAcA,MAAM,oBACJ,EAAC,OAAO,WAA6C,EAAE,EACvD,YAC+C;CAC/C,MAAMA,WAA+BC,sCAAsB,aAAa;AAExE,QAAOC,iCACL,CAACC,mCAAe,aAAa;EAAC;EAAO;EAAO,CAAC,GAC5C,mDAA0B;EAAC,GAAG;EAAU;EAAS;EAAO;EAAO,CAAC,EACjE,QACD;;AAGH,+BAAe"}

package/dist/cjs/hooks/management/agents/useGetAgents.cjs

@@ -0,0 +1,33 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('../useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../useResourceQuery.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/hooks/management/agents/useGetAgents.ts
+/**
+* Fetches a page of agents.
+*
+* @param params - Pagination and filter parameters.
+* @param options - Query options, including a per-hook `fetcher`.
+* @returns The query state.
+*/
+const useGetAgents = ({ filter, limit, offset } = {}, options) => {
+	const endpoint = require_useManagementEndpoint.default("agents");
+	return require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENTS, {
+		filter,
+		limit,
+		offset
+	}], (fetcher) => (0, __thunderid_browser.getAgents)({
+		...endpoint,
+		fetcher,
+		filter,
+		limit,
+		offset
+	}), options);
+};
+var useGetAgents_default = useGetAgents;
+
+//#endregion
+exports.default = useGetAgents_default;
+//# sourceMappingURL=useGetAgents.cjs.map

package/dist/cjs/hooks/management/agents/useGetAgents.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGetAgents.cjs","names":["endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","AgentQueryKeys"],"sources":["../../../../../src/hooks/management/agents/useGetAgents.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {AgentListResponse, AgentQueryKeys, getAgents} from '@thunderid/browser';\nimport useManagementEndpoint, {ManagementEndpoint} from '../useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryOptions, ResourceQueryResult} from '../useResourceQuery';\n\n/**\n * Parameters for {@link useGetAgents}.\n */\nexport interface UseGetAgentsParams {\n  /**\n   * Server-side filter on an agent attribute, for example `name eq \"Calendar Agent\"`.\n   */\n  filter?: string;\n  limit?: number;\n  offset?: number;\n}\n\n/**\n * Fetches a page of agents.\n *\n * @param params - Pagination and filter parameters.\n * @param options - Query options, including a per-hook `fetcher`.\n * @returns The query state.\n */\nconst useGetAgents = (\n  {filter, limit, offset}: UseGetAgentsParams = {},\n  options?: ResourceQueryOptions,\n): ResourceQueryResult<AgentListResponse> => {\n  const endpoint: ManagementEndpoint = useManagementEndpoint('agents');\n\n  return useResourceQuery(\n    [AgentQueryKeys.AGENTS, {filter, limit, offset}],\n    (fetcher) => getAgents({...endpoint, fetcher, filter, limit, offset}),\n    options,\n  );\n};\n\nexport default useGetAgents;\n"],"mappings":";;;;;;;;;;;;;;AA0BA,MAAM,gBACJ,EAAC,QAAQ,OAAO,WAA8B,EAAE,EAChD,YAC2C;CAC3C,MAAMA,WAA+BC,sCAAsB,SAAS;AAEpE,QAAOC,iCACL,CAACC,mCAAe,QAAQ;EAAC;EAAQ;EAAO;EAAO,CAAC,GAC/C,+CAAsB;EAAC,GAAG;EAAU;EAAS;EAAQ;EAAO;EAAO,CAAC,EACrE,QACD;;AAGH,2BAAe"}

package/dist/cjs/hooks/management/agents/useUpdateAgent.cjs

@@ -0,0 +1,27 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('../useManagementEndpoint.cjs');
+const require_useResourceMutation = require('../useResourceMutation.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/hooks/management/agents/useUpdateAgent.ts
+/**
+* Updates an agent, then refetches it and any mounted agent lists.
+*
+* @param options - Mutation options, including `onSuccess`, `onError`, and a per-hook `fetcher`.
+* @returns The mutation state. Call `mutate({agentId, data})` to update.
+*/
+const useUpdateAgent = (options) => {
+	const endpoint = require_useManagementEndpoint.default("agents");
+	return require_useResourceMutation.default(({ agentId, data }, fetcher) => (0, __thunderid_browser.updateAgent)({
+		...endpoint,
+		agentId,
+		fetcher,
+		payload: data
+	}), ({ agentId }) => [[__thunderid_browser.AgentQueryKeys.AGENT, agentId], [__thunderid_browser.AgentQueryKeys.AGENTS]], options);
+};
+var useUpdateAgent_default = useUpdateAgent;
+
+//#endregion
+exports.default = useUpdateAgent_default;
+//# sourceMappingURL=useUpdateAgent.cjs.map

package/dist/cjs/hooks/management/agents/useUpdateAgent.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useUpdateAgent.cjs","names":["endpoint: ManagementEndpoint","useManagementEndpoint","useResourceMutation","AgentQueryKeys"],"sources":["../../../../../src/hooks/management/agents/useUpdateAgent.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Agent, AgentQueryKeys, UpdateAgentRequest, updateAgent} from '@thunderid/browser';\nimport useManagementEndpoint, {ManagementEndpoint} from '../useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationOptions, ResourceMutationResult} from '../useResourceMutation';\n\n/**\n * Variables accepted by {@link useUpdateAgent}'s `mutate`.\n */\nexport interface UpdateAgentVariables {\n  agentId: string;\n  data: UpdateAgentRequest;\n}\n\n/**\n * Updates an agent, then refetches it and any mounted agent lists.\n *\n * @param options - Mutation options, including `onSuccess`, `onError`, and a per-hook `fetcher`.\n * @returns The mutation state. Call `mutate({agentId, data})` to update.\n */\nconst useUpdateAgent = (\n  options?: ResourceMutationOptions<Agent, UpdateAgentVariables>,\n): ResourceMutationResult<Agent, UpdateAgentVariables> => {\n  const endpoint: ManagementEndpoint = useManagementEndpoint('agents');\n\n  return useResourceMutation(\n    ({agentId, data}: UpdateAgentVariables, fetcher) => updateAgent({...endpoint, agentId, fetcher, payload: data}),\n    ({agentId}: UpdateAgentVariables) => [[AgentQueryKeys.AGENT, agentId], [AgentQueryKeys.AGENTS]],\n    options,\n  );\n};\n\nexport default useUpdateAgent;\n"],"mappings":";;;;;;;;;;;;;AAqBA,MAAM,kBACJ,YACwD;CACxD,MAAMA,WAA+BC,sCAAsB,SAAS;AAEpE,QAAOC,qCACJ,EAAC,SAAS,QAA6B,iDAAwB;EAAC,GAAG;EAAU;EAAS;EAAS,SAAS;EAAK,CAAC,GAC9G,EAAC,cAAmC,CAAC,CAACC,mCAAe,OAAO,QAAQ,EAAE,CAACA,mCAAe,OAAO,CAAC,EAC/F,QACD;;AAGH,6BAAe"}