@thunderid/react 1.4.1 → 1.6.0

package/dist/cjs/hooks/management/roles/useGetRole.cjs

@@ -0,0 +1,30 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('../useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../useResourceQuery.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/hooks/management/roles/useGetRole.ts
+/**
+* Fetches a role with the permissions it grants.
+*
+* @param roleId - Identifier of the role. Fetching waits until it is defined.
+* @param options - Query options, including a per-hook `fetcher`.
+* @returns The query state.
+*/
+const useGetRole = (roleId, options) => {
+	const endpoint = require_useManagementEndpoint.default("roles");
+	return require_useResourceQuery.default([__thunderid_browser.RoleQueryKeys.ROLE, roleId], (fetcher) => (0, __thunderid_browser.getRole)({
+		...endpoint,
+		fetcher,
+		roleId
+	}), {
+		...options,
+		enabled: Boolean(roleId) && options?.enabled !== false
+	});
+};
+var useGetRole_default = useGetRole;
+
+//#endregion
+exports.default = useGetRole_default;
+//# sourceMappingURL=useGetRole.cjs.map

package/dist/cjs/hooks/management/roles/useGetRole.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGetRole.cjs","names":["endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","RoleQueryKeys"],"sources":["../../../../../src/hooks/management/roles/useGetRole.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Role, RoleQueryKeys, getRole} from '@thunderid/browser';\nimport useManagementEndpoint, {ManagementEndpoint} from '../useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryOptions, ResourceQueryResult} from '../useResourceQuery';\n\n/**\n * Fetches a role with the permissions it grants.\n *\n * @param roleId - Identifier of the role. Fetching waits until it is defined.\n * @param options - Query options, including a per-hook `fetcher`.\n * @returns The query state.\n */\nconst useGetRole = (roleId: string | undefined, options?: ResourceQueryOptions): ResourceQueryResult<Role> => {\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n\n  return useResourceQuery([RoleQueryKeys.ROLE, roleId], (fetcher) => getRole({...endpoint, fetcher, roleId: roleId!}), {\n    ...options,\n    enabled: Boolean(roleId) && options?.enabled !== false,\n  });\n};\n\nexport default useGetRole;\n"],"mappings":";;;;;;;;;;;;;;AAcA,MAAM,cAAc,QAA4B,YAA8D;CAC5G,MAAMA,WAA+BC,sCAAsB,QAAQ;AAEnE,QAAOC,iCAAiB,CAACC,kCAAc,MAAM,OAAO,GAAG,6CAAoB;EAAC,GAAG;EAAU;EAAiB;EAAQ,CAAC,EAAE;EACnH,GAAG;EACH,SAAS,QAAQ,OAAO,IAAI,SAAS,YAAY;EAClD,CAAC;;AAGJ,yBAAe"}

package/dist/cjs/hooks/management/roles/useGetRoleAssignments.cjs

@@ -0,0 +1,42 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('../useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../useResourceQuery.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/hooks/management/roles/useGetRoleAssignments.ts
+/**
+* Fetches a page of the users, groups, apps and agents a role is assigned to.
+*
+* @param roleId - Identifier of the role. Fetching waits until it is defined.
+* @param params - Pagination and assignee type parameters.
+* @param options - Query options, including a per-hook `fetcher`.
+* @returns The query state.
+*/
+const useGetRoleAssignments = (roleId, { limit, offset, type } = {}, options) => {
+	const endpoint = require_useManagementEndpoint.default("roles");
+	return require_useResourceQuery.default([
+		__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS,
+		roleId,
+		{
+			limit,
+			offset,
+			type
+		}
+	], (fetcher) => (0, __thunderid_browser.getRoleAssignments)({
+		...endpoint,
+		fetcher,
+		limit,
+		offset,
+		roleId,
+		type
+	}), {
+		...options,
+		enabled: Boolean(roleId) && options?.enabled !== false
+	});
+};
+var useGetRoleAssignments_default = useGetRoleAssignments;
+
+//#endregion
+exports.default = useGetRoleAssignments_default;
+//# sourceMappingURL=useGetRoleAssignments.cjs.map

package/dist/cjs/hooks/management/roles/useGetRoleAssignments.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGetRoleAssignments.cjs","names":["endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","RoleQueryKeys"],"sources":["../../../../../src/hooks/management/roles/useGetRoleAssignments.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {RoleAssigneeType, RoleAssignmentListResponse, RoleQueryKeys, getRoleAssignments} from '@thunderid/browser';\nimport useManagementEndpoint, {ManagementEndpoint} from '../useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryOptions, ResourceQueryResult} from '../useResourceQuery';\n\n/**\n * Parameters for {@link useGetRoleAssignments}.\n */\nexport interface UseGetRoleAssignmentsParams {\n  limit?: number;\n  offset?: number;\n  /**\n   * Only return assignees of this type. Returns every type when omitted.\n   */\n  type?: RoleAssigneeType;\n}\n\n/**\n * Fetches a page of the users, groups, apps and agents a role is assigned to.\n *\n * @param roleId - Identifier of the role. Fetching waits until it is defined.\n * @param params - Pagination and assignee type parameters.\n * @param options - Query options, including a per-hook `fetcher`.\n * @returns The query state.\n */\nconst useGetRoleAssignments = (\n  roleId: string | undefined,\n  {limit, offset, type}: UseGetRoleAssignmentsParams = {},\n  options?: ResourceQueryOptions,\n): ResourceQueryResult<RoleAssignmentListResponse> => {\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n\n  return useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, roleId, {limit, offset, type}],\n    (fetcher) => getRoleAssignments({...endpoint, fetcher, limit, offset, roleId: roleId!, type}),\n    {...options, enabled: Boolean(roleId) && options?.enabled !== false},\n  );\n};\n\nexport default useGetRoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;AA2BA,MAAM,yBACJ,QACA,EAAC,OAAO,QAAQ,SAAqC,EAAE,EACvD,YACoD;CACpD,MAAMA,WAA+BC,sCAAsB,QAAQ;AAEnE,QAAOC,iCACL;EAACC,kCAAc;EAAkB;EAAQ;GAAC;GAAO;GAAQ;GAAK;EAAC,GAC9D,wDAA+B;EAAC,GAAG;EAAU;EAAS;EAAO;EAAgB;EAAS;EAAK,CAAC,EAC7F;EAAC,GAAG;EAAS,SAAS,QAAQ,OAAO,IAAI,SAAS,YAAY;EAAM,CACrE;;AAGH,oCAAe"}

package/dist/cjs/hooks/management/roles/useGetRoles.cjs

@@ -0,0 +1,31 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('../useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../useResourceQuery.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/hooks/management/roles/useGetRoles.ts
+/**
+* Fetches a page of roles.
+*
+* @param params - Pagination parameters.
+* @param options - Query options, including a per-hook `fetcher`.
+* @returns The query state.
+*/
+const useGetRoles = ({ limit, offset } = {}, options) => {
+	const endpoint = require_useManagementEndpoint.default("roles");
+	return require_useResourceQuery.default([__thunderid_browser.RoleQueryKeys.ROLES, {
+		limit,
+		offset
+	}], (fetcher) => (0, __thunderid_browser.getRoles)({
+		...endpoint,
+		fetcher,
+		limit,
+		offset
+	}), options);
+};
+var useGetRoles_default = useGetRoles;
+
+//#endregion
+exports.default = useGetRoles_default;
+//# sourceMappingURL=useGetRoles.cjs.map

package/dist/cjs/hooks/management/roles/useGetRoles.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGetRoles.cjs","names":["endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","RoleQueryKeys"],"sources":["../../../../../src/hooks/management/roles/useGetRoles.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {RoleListResponse, RoleQueryKeys, getRoles} from '@thunderid/browser';\nimport useManagementEndpoint, {ManagementEndpoint} from '../useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryOptions, ResourceQueryResult} from '../useResourceQuery';\n\n/**\n * Parameters for {@link useGetRoles}.\n */\nexport interface UseGetRolesParams {\n  limit?: number;\n  offset?: number;\n}\n\n/**\n * Fetches a page of roles.\n *\n * @param params - Pagination parameters.\n * @param options - Query options, including a per-hook `fetcher`.\n * @returns The query state.\n */\nconst useGetRoles = (\n  {limit, offset}: UseGetRolesParams = {},\n  options?: ResourceQueryOptions,\n): ResourceQueryResult<RoleListResponse> => {\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n\n  return useResourceQuery(\n    [RoleQueryKeys.ROLES, {limit, offset}],\n    (fetcher) => getRoles({...endpoint, fetcher, limit, offset}),\n    options,\n  );\n};\n\nexport default useGetRoles;\n"],"mappings":";;;;;;;;;;;;;;AAsBA,MAAM,eACJ,EAAC,OAAO,WAA6B,EAAE,EACvC,YAC0C;CAC1C,MAAMA,WAA+BC,sCAAsB,QAAQ;AAEnE,QAAOC,iCACL,CAACC,kCAAc,OAAO;EAAC;EAAO;EAAO,CAAC,GACrC,8CAAqB;EAAC,GAAG;EAAU;EAAS;EAAO;EAAO,CAAC,EAC5D,QACD;;AAGH,0BAAe"}

package/dist/cjs/hooks/management/roles/useRemoveRoleAssignments.cjs

@@ -0,0 +1,27 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('../useManagementEndpoint.cjs');
+const require_useResourceMutation = require('../useResourceMutation.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/hooks/management/roles/useRemoveRoleAssignments.ts
+/**
+* Removes a role from users, groups, apps or agents, then refetches every mounted assignment list, including the roles listed for an agent.
+*
+* @param options - Mutation options, including `onSuccess`, `onError`, and a per-hook `fetcher`.
+* @returns The mutation state. Call `mutate({roleId, assignments})`.
+*/
+const useRemoveRoleAssignments = (options) => {
+	const endpoint = require_useManagementEndpoint.default("roles");
+	return require_useResourceMutation.default(({ roleId, assignments }, fetcher) => (0, __thunderid_browser.removeRoleAssignments)({
+		...endpoint,
+		assignments,
+		fetcher,
+		roleId
+	}), () => [[__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS]], options);
+};
+var useRemoveRoleAssignments_default = useRemoveRoleAssignments;
+
+//#endregion
+exports.default = useRemoveRoleAssignments_default;
+//# sourceMappingURL=useRemoveRoleAssignments.cjs.map

package/dist/cjs/hooks/management/roles/useRemoveRoleAssignments.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useRemoveRoleAssignments.cjs","names":["endpoint: ManagementEndpoint","useManagementEndpoint","useResourceMutation","RoleQueryKeys"],"sources":["../../../../../src/hooks/management/roles/useRemoveRoleAssignments.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {RoleQueryKeys, removeRoleAssignments} from '@thunderid/browser';\nimport {RoleAssignmentsVariables} from './useAddRoleAssignments';\nimport useManagementEndpoint, {ManagementEndpoint} from '../useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationOptions, ResourceMutationResult} from '../useResourceMutation';\n\n/**\n * Removes a role from users, groups, apps or agents, then refetches every mounted assignment list, including the roles listed for an agent.\n *\n * @param options - Mutation options, including `onSuccess`, `onError`, and a per-hook `fetcher`.\n * @returns The mutation state. Call `mutate({roleId, assignments})`.\n */\nconst useRemoveRoleAssignments = (\n  options?: ResourceMutationOptions<void, RoleAssignmentsVariables>,\n): ResourceMutationResult<void, RoleAssignmentsVariables> => {\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n\n  return useResourceMutation(\n    ({roleId, assignments}: RoleAssignmentsVariables, fetcher) =>\n      removeRoleAssignments({...endpoint, assignments, fetcher, roleId}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n    options,\n  );\n};\n\nexport default useRemoveRoleAssignments;\n"],"mappings":";;;;;;;;;;;;;AAcA,MAAM,4BACJ,YAC2D;CAC3D,MAAMA,WAA+BC,sCAAsB,QAAQ;AAEnE,QAAOC,qCACJ,EAAC,QAAQ,eAAwC,2DAC1B;EAAC,GAAG;EAAU;EAAa;EAAS;EAAO,CAAC,QAC9D,CAAC,CAACC,kCAAc,iBAAiB,CAAC,EACxC,QACD;;AAGH,uCAAe"}

package/dist/cjs/hooks/management/roles/useUpdateRole.cjs

@@ -0,0 +1,27 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('../useManagementEndpoint.cjs');
+const require_useResourceMutation = require('../useResourceMutation.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/hooks/management/roles/useUpdateRole.ts
+/**
+* Replaces a role's name, description and permissions, then refetches the role and any mounted role lists.
+*
+* @param options - Mutation options, including `onSuccess`, `onError`, and a per-hook `fetcher`.
+* @returns The mutation state. Call `mutate({roleId, data})` to update.
+*/
+const useUpdateRole = (options) => {
+	const endpoint = require_useManagementEndpoint.default("roles");
+	return require_useResourceMutation.default(({ roleId, data }, fetcher) => (0, __thunderid_browser.updateRole)({
+		...endpoint,
+		fetcher,
+		payload: data,
+		roleId
+	}), ({ roleId }) => [[__thunderid_browser.RoleQueryKeys.ROLE, roleId], [__thunderid_browser.RoleQueryKeys.ROLES]], options);
+};
+var useUpdateRole_default = useUpdateRole;
+
+//#endregion
+exports.default = useUpdateRole_default;
+//# sourceMappingURL=useUpdateRole.cjs.map

package/dist/cjs/hooks/management/roles/useUpdateRole.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useUpdateRole.cjs","names":["endpoint: ManagementEndpoint","useManagementEndpoint","useResourceMutation","RoleQueryKeys"],"sources":["../../../../../src/hooks/management/roles/useUpdateRole.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Role, RoleQueryKeys, UpdateRoleRequest, updateRole} from '@thunderid/browser';\nimport useManagementEndpoint, {ManagementEndpoint} from '../useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationOptions, ResourceMutationResult} from '../useResourceMutation';\n\n/**\n * Variables for {@link useUpdateRole}.\n */\nexport interface UpdateRoleVariables {\n  /**\n   * The role's new state.\n   */\n  data: UpdateRoleRequest;\n  /**\n   * Identifier of the role to update.\n   */\n  roleId: string;\n}\n\n/**\n * Replaces a role's name, description and permissions, then refetches the role and any mounted role lists.\n *\n * @param options - Mutation options, including `onSuccess`, `onError`, and a per-hook `fetcher`.\n * @returns The mutation state. Call `mutate({roleId, data})` to update.\n */\nconst useUpdateRole = (\n  options?: ResourceMutationOptions<Role, UpdateRoleVariables>,\n): ResourceMutationResult<Role, UpdateRoleVariables> => {\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n\n  return useResourceMutation(\n    ({roleId, data}: UpdateRoleVariables, fetcher) => updateRole({...endpoint, fetcher, payload: data, roleId}),\n    ({roleId}: UpdateRoleVariables) => [[RoleQueryKeys.ROLE, roleId], [RoleQueryKeys.ROLES]],\n    options,\n  );\n};\n\nexport default useUpdateRole;\n"],"mappings":";;;;;;;;;;;;;AA2BA,MAAM,iBACJ,YACsD;CACtD,MAAMA,WAA+BC,sCAAsB,QAAQ;AAEnE,QAAOC,qCACJ,EAAC,QAAQ,QAA4B,gDAAuB;EAAC,GAAG;EAAU;EAAS,SAAS;EAAM;EAAO,CAAC,GAC1G,EAAC,aAAiC,CAAC,CAACC,kCAAc,MAAM,OAAO,EAAE,CAACA,kCAAc,MAAM,CAAC,EACxF,QACD;;AAGH,4BAAe"}

package/dist/cjs/hooks/management/useFetchUserTypes.cjs

@@ -0,0 +1,34 @@
+const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('./useManagementEndpoint.cjs');
+const require_useResourceQuery = require('./useResourceQuery.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+
+//#region src/hooks/management/useFetchUserTypes.ts
+/**
+* A `FetchUserTypes` backed by the user type list, authenticated with the signed-in user's access token.
+* Its identity is stable across renders, since a picker resets its loaded pages when the loader changes.
+*/
+const useFetchUserTypes = () => {
+	const { baseUrl, url } = require_useManagementEndpoint.default("userTypes");
+	const fetcher = require_useResourceQuery.useResolvedFetcher();
+	return (0, react.useCallback)(async ({ limit, offset, signal }) => (0, __thunderid_browser.toUserTypeSelectPage)(await (0, __thunderid_browser.getUserTypes)({
+		baseUrl,
+		fetcher,
+		limit: Math.min(limit, __thunderid_browser.SelectConstants.MAX_PAGE_SIZE),
+		offset,
+		signal,
+		url
+	}), offset), [
+		baseUrl,
+		fetcher,
+		url
+	]);
+};
+var useFetchUserTypes_default = useFetchUserTypes;
+
+//#endregion
+exports.default = useFetchUserTypes_default;
+//# sourceMappingURL=useFetchUserTypes.cjs.map

package/dist/cjs/hooks/management/useFetchUserTypes.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useFetchUserTypes.cjs","names":["useManagementEndpoint","fetcher: ReturnType<typeof useResolvedFetcher>","useResolvedFetcher","SelectConstants"],"sources":["../../../../src/hooks/management/useFetchUserTypes.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {getUserTypes, SelectConstants, toUserTypeSelectPage} from '@thunderid/browser';\nimport type {FetchUserTypes, SelectPage, SelectPageRequest} from '@thunderid/browser';\nimport {useCallback} from 'react';\nimport useManagementEndpoint, {ManagementEndpoint} from './useManagementEndpoint';\nimport {useResolvedFetcher} from './useResourceQuery';\n\n/**\n * A `FetchUserTypes` backed by the user type list, authenticated with the signed-in user's access token.\n * Its identity is stable across renders, since a picker resets its loaded pages when the loader changes.\n */\nconst useFetchUserTypes = (): FetchUserTypes => {\n  const {baseUrl, url}: ManagementEndpoint = useManagementEndpoint('userTypes');\n  const fetcher: ReturnType<typeof useResolvedFetcher> = useResolvedFetcher();\n\n  return useCallback(\n    async ({limit, offset, signal}: SelectPageRequest): Promise<SelectPage> =>\n      toUserTypeSelectPage(\n        await getUserTypes({\n          baseUrl,\n          fetcher,\n          limit: Math.min(limit, SelectConstants.MAX_PAGE_SIZE),\n          offset,\n          signal,\n          url,\n        }),\n        offset,\n      ),\n    [baseUrl, fetcher, url],\n  );\n};\n\nexport default useFetchUserTypes;\n"],"mappings":";;;;;;;;;;;;;AAaA,MAAM,0BAA0C;CAC9C,MAAM,EAAC,SAAS,QAA2BA,sCAAsB,YAAY;CAC7E,MAAMC,UAAiDC,6CAAoB;AAE3E,+BACE,OAAO,EAAC,OAAO,QAAQ,2DAEnB,4CAAmB;EACjB;EACA;EACA,OAAO,KAAK,IAAI,OAAOC,oCAAgB,cAAc;EACrD;EACA;EACA;EACD,CAAC,EACF,OACD,EACH;EAAC;EAAS;EAAS;EAAI,CACxB;;AAGH,gCAAe"}

package/dist/cjs/hooks/management/useFetchUsers.cjs

@@ -0,0 +1,35 @@
+const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('./useManagementEndpoint.cjs');
+const require_useResourceQuery = require('./useResourceQuery.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+
+//#region src/hooks/management/useFetchUsers.ts
+/**
+* A `FetchUsers` backed by the user directory, authenticated with the signed-in user's access token.
+* Its identity is stable across renders, since a picker resets its loaded pages when the loader changes.
+*/
+const useFetchUsers = () => {
+	const { baseUrl, url } = require_useManagementEndpoint.default("users");
+	const fetcher = require_useResourceQuery.useResolvedFetcher();
+	return (0, react.useCallback)(async ({ filter, limit, offset, signal }) => (0, __thunderid_browser.toUserSelectPage)(await (0, __thunderid_browser.getUsers)({
+		baseUrl,
+		fetcher,
+		filter,
+		limit,
+		offset,
+		signal,
+		url
+	}), offset), [
+		baseUrl,
+		fetcher,
+		url
+	]);
+};
+var useFetchUsers_default = useFetchUsers;
+
+//#endregion
+exports.default = useFetchUsers_default;
+//# sourceMappingURL=useFetchUsers.cjs.map

package/dist/cjs/hooks/management/useFetchUsers.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useFetchUsers.cjs","names":["useManagementEndpoint","fetcher: ReturnType<typeof useResolvedFetcher>","useResolvedFetcher"],"sources":["../../../../src/hooks/management/useFetchUsers.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {getUsers, toUserSelectPage} from '@thunderid/browser';\nimport type {FetchUsers, SelectPage, SelectPageRequest} from '@thunderid/browser';\nimport {useCallback} from 'react';\nimport useManagementEndpoint, {ManagementEndpoint} from './useManagementEndpoint';\nimport {useResolvedFetcher} from './useResourceQuery';\n\n/**\n * A `FetchUsers` backed by the user directory, authenticated with the signed-in user's access token.\n * Its identity is stable across renders, since a picker resets its loaded pages when the loader changes.\n */\nconst useFetchUsers = (): FetchUsers => {\n  const {baseUrl, url}: ManagementEndpoint = useManagementEndpoint('users');\n  const fetcher: ReturnType<typeof useResolvedFetcher> = useResolvedFetcher();\n\n  return useCallback(\n    async ({filter, limit, offset, signal}: SelectPageRequest): Promise<SelectPage> =>\n      toUserSelectPage(await getUsers({baseUrl, fetcher, filter, limit, offset, signal, url}), offset),\n    [baseUrl, fetcher, url],\n  );\n};\n\nexport default useFetchUsers;\n"],"mappings":";;;;;;;;;;;;;AAaA,MAAM,sBAAkC;CACtC,MAAM,EAAC,SAAS,QAA2BA,sCAAsB,QAAQ;CACzE,MAAMC,UAAiDC,6CAAoB;AAE3E,+BACE,OAAO,EAAC,QAAQ,OAAO,QAAQ,uDACZ,wCAAe;EAAC;EAAS;EAAS;EAAQ;EAAO;EAAQ;EAAQ;EAAI,CAAC,EAAE,OAAO,EAClG;EAAC;EAAS;EAAS;EAAI,CACxB;;AAGH,4BAAe"}

package/dist/cjs/hooks/management/useGrantedPermissions.cjs

@@ -0,0 +1,46 @@
+const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.cjs');
+const require_useThunderID = require('../../contexts/ThunderID/useThunderID.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+
+//#region src/hooks/management/useGrantedPermissions.ts
+/**
+* Reads the permissions the signed-in user's access token grants, for example to hide a page the
+* user cannot use.
+*
+* @returns The granted permissions and a `can` check.
+*
+* @example
+* ```tsx
+* const {can} = useGrantedPermissions();
+* return can('system:group:view') ? <GroupList /> : null;
+* ```
+*/
+const useGrantedPermissions = () => {
+	const { getAccessToken, isSignedIn } = require_useThunderID.default();
+	const [granted, setGranted] = (0, react.useState)(null);
+	(0, react.useEffect)(() => {
+		if (!isSignedIn) return;
+		let active = true;
+		getAccessToken().then((token) => (0, __thunderid_browser.getTokenPermissions)(token)).catch(() => []).then((tokenPermissions) => {
+			if (active) setGranted(tokenPermissions);
+		});
+		return () => {
+			active = false;
+		};
+	}, [getAccessToken, isSignedIn]);
+	const permissions = (0, react.useMemo)(() => isSignedIn ? granted ?? [] : [], [granted, isSignedIn]);
+	const isLoading = isSignedIn && granted === null;
+	return {
+		can: (0, react.useCallback)((required) => (0, __thunderid_browser.hasPermission)(permissions, required), [permissions]),
+		isLoading,
+		permissions
+	};
+};
+var useGrantedPermissions_default = useGrantedPermissions;
+
+//#endregion
+exports.default = useGrantedPermissions_default;
+//# sourceMappingURL=useGrantedPermissions.cjs.map

package/dist/cjs/hooks/management/useGrantedPermissions.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGrantedPermissions.cjs","names":["useThunderID","permissions: string[]","isLoading: boolean"],"sources":["../../../../src/hooks/management/useGrantedPermissions.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {getTokenPermissions, hasPermission} from '@thunderid/browser';\nimport {useCallback, useEffect, useMemo, useState} from 'react';\nimport useThunderID from '../../contexts/ThunderID/useThunderID';\n\n/**\n * The permissions the signed-in user's access token grants.\n */\nexport interface GrantedPermissions {\n  /**\n   * Whether the granted permissions cover a required one. A permission covers everything under it,\n   * so `system:user` covers `system:user:view`. Use it to decide what to show; the server still\n   * checks every request.\n   */\n  can: (required: string) => boolean;\n  isLoading: boolean;\n  permissions: string[];\n}\n\n/**\n * Reads the permissions the signed-in user's access token grants, for example to hide a page the\n * user cannot use.\n *\n * @returns The granted permissions and a `can` check.\n *\n * @example\n * ```tsx\n * const {can} = useGrantedPermissions();\n * return can('system:group:view') ? <GroupList /> : null;\n * ```\n */\nconst useGrantedPermissions = (): GrantedPermissions => {\n  const {getAccessToken, isSignedIn} = useThunderID();\n  const [granted, setGranted] = useState<string[] | null>(null);\n\n  useEffect(() => {\n    if (!isSignedIn) {\n      return undefined;\n    }\n\n    let active = true;\n\n    void getAccessToken()\n      .then((token: string) => getTokenPermissions(token))\n      .catch((): string[] => [])\n      .then((tokenPermissions: string[]) => {\n        if (active) {\n          setGranted(tokenPermissions);\n        }\n      });\n\n    return (): void => {\n      active = false;\n    };\n  }, [getAccessToken, isSignedIn]);\n\n  const permissions: string[] = useMemo(() => (isSignedIn ? (granted ?? []) : []), [granted, isSignedIn]);\n  const isLoading: boolean = isSignedIn && granted === null;\n\n  const can: (required: string) => boolean = useCallback(\n    (required: string): boolean => hasPermission(permissions, required),\n    [permissions],\n  );\n\n  return {can, isLoading, permissions};\n};\n\nexport default useGrantedPermissions;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAiCA,MAAM,8BAAkD;CACtD,MAAM,EAAC,gBAAgB,eAAcA,8BAAc;CACnD,MAAM,CAAC,SAAS,kCAAwC,KAAK;AAE7D,4BAAgB;AACd,MAAI,CAAC,WACH;EAGF,IAAI,SAAS;AAEb,EAAK,gBAAgB,CAClB,MAAM,uDAAsC,MAAM,CAAC,CACnD,YAAsB,EAAE,CAAC,CACzB,MAAM,qBAA+B;AACpC,OAAI,OACF,YAAW,iBAAiB;IAE9B;AAEJ,eAAmB;AACjB,YAAS;;IAEV,CAAC,gBAAgB,WAAW,CAAC;CAEhC,MAAMC,uCAAuC,aAAc,WAAW,EAAE,GAAI,EAAE,EAAG,CAAC,SAAS,WAAW,CAAC;CACvG,MAAMC,YAAqB,cAAc,YAAY;AAOrD,QAAO;EAAC,6BAJL,oDAA4C,aAAa,SAAS,EACnE,CAAC,YAAY,CACd;EAEY;EAAW;EAAY;;AAGtC,oCAAe"}

package/dist/cjs/hooks/management/useInfiniteOptions.cjs

@@ -0,0 +1,129 @@
+const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+
+//#region src/hooks/management/useInfiniteOptions.ts
+const logger = (0, __thunderid_browser.createPackageComponentLogger)("@thunderid/react", "useInfiniteOptions");
+/**
+* Keeps the option list of a `Select` that loads more options when the user asks for them. It owns the cursor,
+* appends each batch without duplicates, and stops at the end of the data. Nothing is rendered, so it works with
+* any list component.
+*/
+const useInfiniteOptions = ({ initialOptions, load, onError }) => {
+	const [options, setOptions] = (0, react.useState)(() => (0, __thunderid_browser.normalizeSelectOptions)(initialOptions));
+	const [loading, setLoading] = (0, react.useState)(false);
+	const [error, setError] = (0, react.useState)(null);
+	const [hasMore, setHasMore] = (0, react.useState)(true);
+	const latest = (0, react.useRef)({
+		initialOptions,
+		load,
+		onError
+	});
+	const optionsRef = (0, react.useRef)(options);
+	const cursorRef = (0, react.useRef)(void 0);
+	const finishedRef = (0, react.useRef)(false);
+	const loadingRef = (0, react.useRef)(false);
+	const requestedRef = (0, react.useRef)(false);
+	const generationRef = (0, react.useRef)(0);
+	const controllerRef = (0, react.useRef)(null);
+	const nonListLoggedRef = (0, react.useRef)(false);
+	(0, react.useEffect)(() => {
+		latest.current = {
+			initialOptions,
+			load,
+			onError
+		};
+	});
+	const applyBatch = (0, react.useCallback)((batch) => {
+		const merged = (0, __thunderid_browser.mergeOptionsBatch)({
+			cursor: cursorRef.current,
+			options: optionsRef.current
+		}, batch);
+		if (merged.issue === "cursor-stuck") logger.warn("A load returned no new options and the same cursor; the list was treated as finished.");
+		else if (merged.issue === "not-a-list" && !nonListLoggedRef.current) {
+			nonListLoggedRef.current = true;
+			logger.warn("A load returned something other than a list of options; it was treated as an empty batch.");
+		}
+		const addedNothing = merged.options.length === optionsRef.current.length;
+		cursorRef.current = merged.cursor;
+		optionsRef.current = merged.options;
+		finishedRef.current = merged.finished;
+		setOptions(merged.options);
+		setHasMore(!merged.finished);
+		setError(null);
+		return addedNothing && !merged.finished;
+	}, []);
+	const startLoad = (0, react.useCallback)(async () => {
+		const generation = generationRef.current;
+		const controller = new AbortController();
+		controllerRef.current = controller;
+		loadingRef.current = true;
+		setLoading(true);
+		try {
+			await (0, __thunderid_browser.loadUntilOptionsGrow)(() => latest.current.load({
+				cursor: cursorRef.current,
+				options: optionsRef.current,
+				signal: controller.signal
+			}), applyBatch, () => generation === generationRef.current);
+		} catch (failure) {
+			if (generation === generationRef.current && !controller.signal.aborted) {
+				const failureError = (0, __thunderid_browser.toError)(failure);
+				setError(failureError);
+				try {
+					latest.current.onError?.(failureError);
+				} catch (callbackFailure) {
+					logger.error("The onError callback threw.", callbackFailure);
+				}
+			}
+		} finally {
+			if (generation === generationRef.current) {
+				controllerRef.current = null;
+				loadingRef.current = false;
+				setLoading(false);
+			}
+		}
+	}, [applyBatch]);
+	const onLoadMore = (0, react.useCallback)(() => {
+		if (loadingRef.current || finishedRef.current) return;
+		requestedRef.current = true;
+		startLoad();
+	}, [startLoad]);
+	const reset = (0, react.useCallback)(() => {
+		const shouldReload = requestedRef.current;
+		const initial = (0, __thunderid_browser.normalizeSelectOptions)(latest.current.initialOptions);
+		generationRef.current += 1;
+		controllerRef.current?.abort();
+		controllerRef.current = null;
+		cursorRef.current = void 0;
+		finishedRef.current = false;
+		loadingRef.current = false;
+		optionsRef.current = initial;
+		setOptions(initial);
+		setHasMore(true);
+		setError(null);
+		setLoading(false);
+		if (shouldReload) startLoad();
+	}, [startLoad]);
+	(0, react.useEffect)(() => () => {
+		generationRef.current += 1;
+		controllerRef.current?.abort();
+		controllerRef.current = null;
+		loadingRef.current = false;
+		setLoading(false);
+	}, []);
+	return {
+		error,
+		hasMore,
+		loading,
+		onLoadMore,
+		options,
+		reset
+	};
+};
+var useInfiniteOptions_default = useInfiniteOptions;
+
+//#endregion
+exports.default = useInfiniteOptions_default;
+//# sourceMappingURL=useInfiniteOptions.cjs.map

package/dist/cjs/hooks/management/useInfiniteOptions.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useInfiniteOptions.cjs","names":["logger: ReturnType<typeof createPackageComponentLogger>","merged: OptionsMergeResult<TCursor>","addedNothing: boolean","generation: number","controller: AbortController","failureError: Error","shouldReload: boolean","initial: SelectOption[]"],"sources":["../../../../src/hooks/management/useInfiniteOptions.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  createPackageComponentLogger,\n  loadUntilOptionsGrow,\n  mergeOptionsBatch,\n  normalizeSelectOptions,\n  toError,\n} from '@thunderid/browser';\nimport type {\n  OptionsMergeResult,\n  SelectOption,\n  SelectOptionInput,\n  SelectOptionsBatch,\n  SelectOptionsLoadContext,\n} from '@thunderid/browser';\nimport {useCallback, useEffect, useRef, useState} from 'react';\n\nconst logger: ReturnType<typeof createPackageComponentLogger> = createPackageComponentLogger(\n  '@thunderid/react',\n  'useInfiniteOptions',\n);\n\nexport type InfiniteOptionsLoadContext<TCursor = unknown> = SelectOptionsLoadContext<TCursor>;\n\nexport type InfiniteOptionsBatch<TCursor = unknown> = SelectOptionsBatch<TCursor>;\n\nexport interface UseInfiniteOptionsArgs<TCursor = unknown> {\n  /** Options shown before anything is loaded, and again after {@link UseInfiniteOptionsResult.reset}. */\n  initialOptions?: SelectOptionInput[];\n  /** Loads the next batch. Returning nothing counts as an empty batch. */\n  load: (context: InfiniteOptionsLoadContext<TCursor>) => Promise<InfiniteOptionsBatch<TCursor> | null | undefined>;\n  /** Called with the error of every failed load. A failed load never changes the options. */\n  onError?: (error: Error) => void;\n}\n\nexport interface UseInfiniteOptionsResult {\n  /** The error of the last load, cleared by the next successful one. */\n  error: Error | null;\n  /** Whether more batches may be available. */\n  hasMore: boolean;\n  loading: boolean;\n  /** Pass to `Select` while `hasMore` is true, so its load more option is listed only while there is more to load. Its identity is stable across renders. */\n  onLoadMore: () => void;\n  options: SelectOption[];\n  /** Back to `initialOptions`; reloads right away if loading had already started. */\n  reset: () => void;\n}\n\n/**\n * Keeps the option list of a `Select` that loads more options when the user asks for them. It owns the cursor,\n * appends each batch without duplicates, and stops at the end of the data. Nothing is rendered, so it works with\n * any list component.\n */\nconst useInfiniteOptions = <TCursor = unknown>({\n  initialOptions,\n  load,\n  onError,\n}: UseInfiniteOptionsArgs<TCursor>): UseInfiniteOptionsResult => {\n  const [options, setOptions] = useState<SelectOption[]>(() => normalizeSelectOptions(initialOptions));\n  const [loading, setLoading] = useState<boolean>(false);\n  const [error, setError] = useState<Error | null>(null);\n  const [hasMore, setHasMore] = useState<boolean>(true);\n\n  const latest = useRef({initialOptions, load, onError});\n  const optionsRef = useRef<SelectOption[]>(options);\n  const cursorRef = useRef<TCursor | undefined>(undefined);\n  const finishedRef = useRef<boolean>(false);\n  const loadingRef = useRef<boolean>(false);\n  const requestedRef = useRef<boolean>(false);\n  const generationRef = useRef<number>(0);\n  const controllerRef = useRef<AbortController | null>(null);\n  const nonListLoggedRef = useRef<boolean>(false);\n\n  useEffect(() => {\n    latest.current = {initialOptions, load, onError};\n  });\n\n  const applyBatch = useCallback((batch: SelectOptionsBatch<TCursor> | null | undefined): boolean => {\n    const merged: OptionsMergeResult<TCursor> = mergeOptionsBatch(\n      {cursor: cursorRef.current, options: optionsRef.current},\n      batch,\n    );\n\n    if (merged.issue === 'cursor-stuck') {\n      logger.warn('A load returned no new options and the same cursor; the list was treated as finished.');\n    } else if (merged.issue === 'not-a-list' && !nonListLoggedRef.current) {\n      nonListLoggedRef.current = true;\n      logger.warn('A load returned something other than a list of options; it was treated as an empty batch.');\n    }\n\n    const addedNothing: boolean = merged.options.length === optionsRef.current.length;\n\n    cursorRef.current = merged.cursor;\n    optionsRef.current = merged.options;\n    finishedRef.current = merged.finished;\n    setOptions(merged.options);\n    setHasMore(!merged.finished);\n    setError(null);\n\n    return addedNothing && !merged.finished;\n  }, []);\n\n  const startLoad = useCallback(async (): Promise<void> => {\n    const generation: number = generationRef.current;\n    const controller: AbortController = new AbortController();\n\n    controllerRef.current = controller;\n    loadingRef.current = true;\n    setLoading(true);\n\n    try {\n      await loadUntilOptionsGrow<SelectOptionsBatch<TCursor> | null | undefined>(\n        () =>\n          latest.current.load({\n            cursor: cursorRef.current,\n            options: optionsRef.current,\n            signal: controller.signal,\n          }),\n        applyBatch,\n        () => generation === generationRef.current,\n      );\n    } catch (failure) {\n      if (generation === generationRef.current && !controller.signal.aborted) {\n        const failureError: Error = toError(failure);\n\n        setError(failureError);\n        try {\n          latest.current.onError?.(failureError);\n        } catch (callbackFailure) {\n          logger.error('The onError callback threw.', callbackFailure);\n        }\n      }\n    } finally {\n      if (generation === generationRef.current) {\n        controllerRef.current = null;\n        loadingRef.current = false;\n        setLoading(false);\n      }\n    }\n  }, [applyBatch]);\n\n  const onLoadMore = useCallback((): void => {\n    if (loadingRef.current || finishedRef.current) {\n      return;\n    }\n\n    requestedRef.current = true;\n    void startLoad();\n  }, [startLoad]);\n\n  const reset = useCallback((): void => {\n    const shouldReload: boolean = requestedRef.current;\n    const initial: SelectOption[] = normalizeSelectOptions(latest.current.initialOptions);\n\n    generationRef.current += 1;\n    controllerRef.current?.abort();\n    controllerRef.current = null;\n    cursorRef.current = undefined;\n    finishedRef.current = false;\n    loadingRef.current = false;\n    optionsRef.current = initial;\n    setOptions(initial);\n    setHasMore(true);\n    setError(null);\n    setLoading(false);\n\n    if (shouldReload) {\n      void startLoad();\n    }\n  }, [startLoad]);\n\n  // Cleaning up abandons the running load, so the helper must not go on treating it as in progress. React\n  // runs a component's effects again after cleaning them up, and that second run needs to be able to load.\n  useEffect(\n    () => () => {\n      generationRef.current += 1;\n      controllerRef.current?.abort();\n      controllerRef.current = null;\n      loadingRef.current = false;\n      setLoading(false);\n    },\n    [],\n  );\n\n  return {error, hasMore, loading, onLoadMore, options, reset};\n};\n\nexport default useInfiniteOptions;\n"],"mappings":";;;;;;;AAmBA,MAAMA,+DACJ,oBACA,qBACD;;;;;;AAiCD,MAAM,sBAAyC,EAC7C,gBACA,MACA,cAC+D;CAC/D,MAAM,CAAC,SAAS,wFAAoE,eAAe,CAAC;CACpG,MAAM,CAAC,SAAS,kCAAgC,MAAM;CACtD,MAAM,CAAC,OAAO,gCAAmC,KAAK;CACtD,MAAM,CAAC,SAAS,kCAAgC,KAAK;CAErD,MAAM,2BAAgB;EAAC;EAAgB;EAAM;EAAQ,CAAC;CACtD,MAAM,+BAAoC,QAAQ;CAClD,MAAM,8BAAwC,OAAU;CACxD,MAAM,gCAA8B,MAAM;CAC1C,MAAM,+BAA6B,MAAM;CACzC,MAAM,iCAA+B,MAAM;CAC3C,MAAM,kCAA+B,EAAE;CACvC,MAAM,kCAA+C,KAAK;CAC1D,MAAM,qCAAmC,MAAM;AAE/C,4BAAgB;AACd,SAAO,UAAU;GAAC;GAAgB;GAAM;GAAQ;GAChD;CAEF,MAAM,qCAA0B,UAAmE;EACjG,MAAMC,oDACJ;GAAC,QAAQ,UAAU;GAAS,SAAS,WAAW;GAAQ,EACxD,MACD;AAED,MAAI,OAAO,UAAU,eACnB,QAAO,KAAK,wFAAwF;WAC3F,OAAO,UAAU,gBAAgB,CAAC,iBAAiB,SAAS;AACrE,oBAAiB,UAAU;AAC3B,UAAO,KAAK,4FAA4F;;EAG1G,MAAMC,eAAwB,OAAO,QAAQ,WAAW,WAAW,QAAQ;AAE3E,YAAU,UAAU,OAAO;AAC3B,aAAW,UAAU,OAAO;AAC5B,cAAY,UAAU,OAAO;AAC7B,aAAW,OAAO,QAAQ;AAC1B,aAAW,CAAC,OAAO,SAAS;AAC5B,WAAS,KAAK;AAEd,SAAO,gBAAgB,CAAC,OAAO;IAC9B,EAAE,CAAC;CAEN,MAAM,mCAAwB,YAA2B;EACvD,MAAMC,aAAqB,cAAc;EACzC,MAAMC,aAA8B,IAAI,iBAAiB;AAEzD,gBAAc,UAAU;AACxB,aAAW,UAAU;AACrB,aAAW,KAAK;AAEhB,MAAI;AACF,6DAEI,OAAO,QAAQ,KAAK;IAClB,QAAQ,UAAU;IAClB,SAAS,WAAW;IACpB,QAAQ,WAAW;IACpB,CAAC,EACJ,kBACM,eAAe,cAAc,QACpC;WACM,SAAS;AAChB,OAAI,eAAe,cAAc,WAAW,CAAC,WAAW,OAAO,SAAS;IACtE,MAAMC,gDAA8B,QAAQ;AAE5C,aAAS,aAAa;AACtB,QAAI;AACF,YAAO,QAAQ,UAAU,aAAa;aAC/B,iBAAiB;AACxB,YAAO,MAAM,+BAA+B,gBAAgB;;;YAGxD;AACR,OAAI,eAAe,cAAc,SAAS;AACxC,kBAAc,UAAU;AACxB,eAAW,UAAU;AACrB,eAAW,MAAM;;;IAGpB,CAAC,WAAW,CAAC;CAEhB,MAAM,0CAAqC;AACzC,MAAI,WAAW,WAAW,YAAY,QACpC;AAGF,eAAa,UAAU;AACvB,EAAK,WAAW;IACf,CAAC,UAAU,CAAC;CAEf,MAAM,qCAAgC;EACpC,MAAMC,eAAwB,aAAa;EAC3C,MAAMC,0DAAiD,OAAO,QAAQ,eAAe;AAErF,gBAAc,WAAW;AACzB,gBAAc,SAAS,OAAO;AAC9B,gBAAc,UAAU;AACxB,YAAU,UAAU;AACpB,cAAY,UAAU;AACtB,aAAW,UAAU;AACrB,aAAW,UAAU;AACrB,aAAW,QAAQ;AACnB,aAAW,KAAK;AAChB,WAAS,KAAK;AACd,aAAW,MAAM;AAEjB,MAAI,aACF,CAAK,WAAW;IAEjB,CAAC,UAAU,CAAC;AAIf,kCACc;AACV,gBAAc,WAAW;AACzB,gBAAc,SAAS,OAAO;AAC9B,gBAAc,UAAU;AACxB,aAAW,UAAU;AACrB,aAAW,MAAM;IAEnB,EAAE,CACH;AAED,QAAO;EAAC;EAAO;EAAS;EAAS;EAAY;EAAS;EAAM;;AAG9D,iCAAe"}

package/dist/cjs/hooks/management/useManagementEndpoint.cjs

@@ -0,0 +1,25 @@
+const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.cjs');
+const require_useThunderID = require('../../contexts/ThunderID/useThunderID.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/hooks/management/useManagementEndpoint.ts
+/**
+* Resolves where a management resource collection lives, honoring the provider's `endpoints`
+* override so the management API can run on a different host from the authorization server.
+*
+* @param key - The resource collection.
+* @returns The base URL and optional collection URL override.
+*/
+const useManagementEndpoint = (key) => {
+	const { baseUrl, endpoints } = require_useThunderID.default();
+	return {
+		baseUrl,
+		url: (0, __thunderid_browser.resolveResourceEndpoint)(key, { endpoints })
+	};
+};
+var useManagementEndpoint_default = useManagementEndpoint;
+
+//#endregion
+exports.default = useManagementEndpoint_default;
+//# sourceMappingURL=useManagementEndpoint.cjs.map

package/dist/cjs/hooks/management/useManagementEndpoint.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useManagementEndpoint.cjs","names":["useThunderID"],"sources":["../../../../src/hooks/management/useManagementEndpoint.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {ResourceEndpointKey, resolveResourceEndpoint} from '@thunderid/browser';\nimport useThunderID from '../../contexts/ThunderID/useThunderID';\n\n/**\n * The URL inputs a management API function needs.\n */\nexport interface ManagementEndpoint {\n  baseUrl: string | undefined;\n  /**\n   * The collection URL from `endpoints` when overridden, otherwise `undefined` so the API function\n   * falls back to `{baseUrl}/{collection}`.\n   */\n  url: string | undefined;\n}\n\n/**\n * Resolves where a management resource collection lives, honoring the provider's `endpoints`\n * override so the management API can run on a different host from the authorization server.\n *\n * @param key - The resource collection.\n * @returns The base URL and optional collection URL override.\n */\nconst useManagementEndpoint = (\n  key: Extract<\n    ResourceEndpointKey,\n    'agents' | 'agentTypes' | 'applications' | 'flows' | 'groups' | 'roles' | 'users' | 'userTypes'\n  >,\n): ManagementEndpoint => {\n  const {baseUrl, endpoints} = useThunderID();\n\n  return {baseUrl, url: resolveResourceEndpoint(key, {endpoints})};\n};\n\nexport default useManagementEndpoint;\n"],"mappings":";;;;;;;;;;;;;AAyBA,MAAM,yBACJ,QAIuB;CACvB,MAAM,EAAC,SAAS,cAAaA,8BAAc;AAE3C,QAAO;EAAC;EAAS,sDAA6B,KAAK,EAAC,WAAU,CAAC;EAAC;;AAGlE,oCAAe"}

package/dist/cjs/hooks/management/useResourceMutation.cjs

@@ -0,0 +1,73 @@
+const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.cjs');
+const require_useThunderID = require('../../contexts/ThunderID/useThunderID.cjs');
+const require_useResourceQuery = require('./useResourceQuery.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+
+//#region src/hooks/management/useResourceMutation.ts
+/**
+* Runs a management mutation and invalidates the queries whose data it changed. Depends on no data
+* fetching library.
+*
+* @param mutationFn - Performs the request with the resolved fetcher.
+* @param getInvalidatedKeys - Returns the query key prefixes to invalidate after a success.
+* @param options - Mutation options.
+* @returns The mutation state.
+*/
+const useResourceMutation = (mutationFn, getInvalidatedKeys, { fetcher, onError, onSuccess } = {}) => {
+	const { invalidator = __thunderid_browser.fallbackResourceInvalidator } = require_useThunderID.default();
+	const resolvedFetcher = require_useResourceQuery.useResolvedFetcher(fetcher);
+	const [data, setData] = (0, react.useState)(void 0);
+	const [error, setError] = (0, react.useState)(null);
+	const [isLoading, setIsLoading] = (0, react.useState)(false);
+	const callbacksRef = (0, react.useRef)({
+		getInvalidatedKeys,
+		mutationFn,
+		onError,
+		onSuccess
+	});
+	callbacksRef.current = {
+		getInvalidatedKeys,
+		mutationFn,
+		onError,
+		onSuccess
+	};
+	const mutateAsync = (0, react.useCallback)(async (variables) => {
+		setIsLoading(true);
+		setError(null);
+		try {
+			const result = await callbacksRef.current.mutationFn(variables, resolvedFetcher);
+			setData(result);
+			callbacksRef.current.getInvalidatedKeys(variables).forEach((key) => {
+				invalidator.invalidate(key);
+			});
+			callbacksRef.current.onSuccess?.(result, variables);
+			return result;
+		} catch (err) {
+			const mutationError = err instanceof Error ? err : new Error(String(err));
+			setError(mutationError);
+			callbacksRef.current.onError?.(mutationError, variables);
+			throw mutationError;
+		} finally {
+			setIsLoading(false);
+		}
+	}, [invalidator, resolvedFetcher]);
+	return {
+		data,
+		error,
+		isLoading,
+		mutate: (0, react.useCallback)((variables) => mutateAsync(variables).catch(() => void 0), [mutateAsync]),
+		mutateAsync,
+		reset: (0, react.useCallback)(() => {
+			setData(void 0);
+			setError(null);
+		}, [])
+	};
+};
+var useResourceMutation_default = useResourceMutation;
+
+//#endregion
+exports.default = useResourceMutation_default;
+//# sourceMappingURL=useResourceMutation.cjs.map

package/dist/cjs/hooks/management/useResourceMutation.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useResourceMutation.cjs","names":["fallbackResourceInvalidator","useThunderID","resolvedFetcher: ApiFetcher","useResolvedFetcher","callbacksRef: {\n    current: {\n      getInvalidatedKeys: typeof getInvalidatedKeys;\n      mutationFn: typeof mutationFn;\n      onError?: ResourceMutationOptions<TData, TVariables>['onError'];\n      onSuccess?: ResourceMutationOptions<TData, TVariables>['onSuccess'];\n    };\n  }","mutateAsync: (variables: TVariables) => Promise<TData>","result: TData","mutationError: Error"],"sources":["../../../../src/hooks/management/useResourceMutation.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {ResourceQueryKey, fallbackResourceInvalidator, ApiFetcher} from '@thunderid/browser';\nimport {useCallback, useRef, useState} from 'react';\nimport {useResolvedFetcher} from './useResourceQuery';\nimport useThunderID from '../../contexts/ThunderID/useThunderID';\n\n/**\n * Options accepted by every management mutation hook.\n */\nexport interface ResourceMutationOptions<TData, TVariables> {\n  /**\n   * Transport for this hook only. Takes precedence over `ThunderIDProvider`'s `http.fetcher`.\n   */\n  fetcher?: ApiFetcher;\n  /**\n   * Called when the mutation fails.\n   */\n  onError?: (error: Error, variables: TVariables) => void;\n  /**\n   * Called when the mutation succeeds, after the affected queries have been invalidated.\n   */\n  onSuccess?: (data: TData, variables: TVariables) => void;\n}\n\n/**\n * State returned by a management mutation hook.\n */\nexport interface ResourceMutationResult<TData, TVariables> {\n  data: TData | undefined;\n  error: Error | null;\n  isLoading: boolean;\n  /**\n   * Runs the mutation. Never rejects: read `error`, or use `onError`, to handle a failure.\n   */\n  mutate: (variables: TVariables) => Promise<TData | undefined>;\n  /**\n   * Runs the mutation and rejects if it fails.\n   */\n  mutateAsync: (variables: TVariables) => Promise<TData>;\n  /**\n   * Clears `data` and `error`.\n   */\n  reset: () => void;\n}\n\n/**\n * Runs a management mutation and invalidates the queries whose data it changed. Depends on no data\n * fetching library.\n *\n * @param mutationFn - Performs the request with the resolved fetcher.\n * @param getInvalidatedKeys - Returns the query key prefixes to invalidate after a success.\n * @param options - Mutation options.\n * @returns The mutation state.\n */\nconst useResourceMutation = <TData, TVariables>(\n  mutationFn: (variables: TVariables, fetcher: ApiFetcher) => Promise<TData>,\n  getInvalidatedKeys: (variables: TVariables) => ResourceQueryKey[],\n  {fetcher, onError, onSuccess}: ResourceMutationOptions<TData, TVariables> = {},\n): ResourceMutationResult<TData, TVariables> => {\n  const {invalidator = fallbackResourceInvalidator} = useThunderID();\n  const resolvedFetcher: ApiFetcher = useResolvedFetcher(fetcher);\n  const [data, setData] = useState<TData | undefined>(undefined);\n  const [error, setError] = useState<Error | null>(null);\n  const [isLoading, setIsLoading] = useState<boolean>(false);\n\n  const callbacksRef: {\n    current: {\n      getInvalidatedKeys: typeof getInvalidatedKeys;\n      mutationFn: typeof mutationFn;\n      onError?: ResourceMutationOptions<TData, TVariables>['onError'];\n      onSuccess?: ResourceMutationOptions<TData, TVariables>['onSuccess'];\n    };\n  } = useRef({getInvalidatedKeys, mutationFn, onError, onSuccess});\n  callbacksRef.current = {getInvalidatedKeys, mutationFn, onError, onSuccess};\n\n  const mutateAsync: (variables: TVariables) => Promise<TData> = useCallback(\n    async (variables: TVariables): Promise<TData> => {\n      setIsLoading(true);\n      setError(null);\n\n      try {\n        const result: TData = await callbacksRef.current.mutationFn(variables, resolvedFetcher);\n\n        setData(result);\n        callbacksRef.current.getInvalidatedKeys(variables).forEach((key: ResourceQueryKey) => {\n          invalidator.invalidate(key);\n        });\n        callbacksRef.current.onSuccess?.(result, variables);\n\n        return result;\n      } catch (err) {\n        const mutationError: Error = err instanceof Error ? err : new Error(String(err));\n\n        setError(mutationError);\n        callbacksRef.current.onError?.(mutationError, variables);\n\n        throw mutationError;\n      } finally {\n        setIsLoading(false);\n      }\n    },\n    [invalidator, resolvedFetcher],\n  );\n\n  const mutate: (variables: TVariables) => Promise<TData | undefined> = useCallback(\n    (variables: TVariables): Promise<TData | undefined> => mutateAsync(variables).catch((): undefined => undefined),\n    [mutateAsync],\n  );\n\n  const reset: () => void = useCallback((): void => {\n    setData(undefined);\n    setError(null);\n  }, []);\n\n  return {data, error, isLoading, mutate, mutateAsync, reset};\n};\n\nexport default useResourceMutation;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAwDA,MAAM,uBACJ,YACA,oBACA,EAAC,SAAS,SAAS,cAAyD,EAAE,KAChC;CAC9C,MAAM,EAAC,cAAcA,oDAA+BC,8BAAc;CAClE,MAAMC,kBAA8BC,4CAAmB,QAAQ;CAC/D,MAAM,CAAC,MAAM,+BAAuC,OAAU;CAC9D,MAAM,CAAC,OAAO,gCAAmC,KAAK;CACtD,MAAM,CAAC,WAAW,oCAAkC,MAAM;CAE1D,MAAMC,iCAOK;EAAC;EAAoB;EAAY;EAAS;EAAU,CAAC;AAChE,cAAa,UAAU;EAAC;EAAoB;EAAY;EAAS;EAAU;CAE3E,MAAMC,qCACJ,OAAO,cAA0C;AAC/C,eAAa,KAAK;AAClB,WAAS,KAAK;AAEd,MAAI;GACF,MAAMC,SAAgB,MAAM,aAAa,QAAQ,WAAW,WAAW,gBAAgB;AAEvF,WAAQ,OAAO;AACf,gBAAa,QAAQ,mBAAmB,UAAU,CAAC,SAAS,QAA0B;AACpF,gBAAY,WAAW,IAAI;KAC3B;AACF,gBAAa,QAAQ,YAAY,QAAQ,UAAU;AAEnD,UAAO;WACA,KAAK;GACZ,MAAMC,gBAAuB,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,IAAI,CAAC;AAEhF,YAAS,cAAc;AACvB,gBAAa,QAAQ,UAAU,eAAe,UAAU;AAExD,SAAM;YACE;AACR,gBAAa,MAAM;;IAGvB,CAAC,aAAa,gBAAgB,CAC/B;AAYD,QAAO;EAAC;EAAM;EAAO;EAAW,gCAT7B,cAAsD,YAAY,UAAU,CAAC,YAAuB,OAAU,EAC/G,CAAC,YAAY,CACd;EAOuC;EAAa,oCALH;AAChD,WAAQ,OAAU;AAClB,YAAS,KAAK;KACb,EAAE,CAAC;EAEqD;;AAG7D,kCAAe"}