@thunderid/react 1.4.1 → 1.6.0

package/dist/components/admin/GroupMembers/BaseGroupMembers.js

@@ -0,0 +1,85 @@
+import useTranslation_default from "../../../hooks/useTranslation.js";
+import Button_default from "../../primitives/Button/Button.js";
+import DataTable_default from "../../primitives/DataTable/DataTable.js";
+import AdminSection_default from "../shared/AdminSection.js";
+import IdentityPicker_default from "../shared/IdentityPicker.js";
+import { jsx, jsxs } from "react/jsx-runtime";
+
+//#region src/components/admin/GroupMembers/BaseGroupMembers.tsx
+/**
+* Lists the members of a group and lets the caller add and remove them. Holds no data of its own.
+*/
+const BaseGroupMembers = ({ candidates, children, className, description, error = null, isLoading = false, isMutating = false, members, onAdd, onRemove, preferences, title }) => {
+	const { t } = useTranslation_default(preferences?.i18n);
+	const columns = [{
+		header: t("admin.groups.members.columns.member"),
+		id: "member",
+		render: (member) => member.display ?? member.id
+	}, {
+		header: t("admin.groups.members.columns.type"),
+		id: "type",
+		render: (member) => t(`admin.common.identity_types.${member.type}`)
+	}];
+	if (onRemove) columns.push({
+		header: t("admin.common.columns.actions"),
+		id: "actions",
+		render: (member) => /* @__PURE__ */ jsx(Button_default, {
+			variant: "text",
+			color: "error",
+			size: "small",
+			disabled: isMutating,
+			"aria-label": t("admin.groups.members.remove_label", { name: member.display ?? member.id }),
+			onClick: () => onRemove(member),
+			children: t("admin.common.actions.remove")
+		})
+	});
+	if (children) return /* @__PURE__ */ jsx("div", {
+		className,
+		children: children({
+			candidates: onAdd ? candidates : void 0,
+			columns,
+			error,
+			isLoading,
+			isMutating,
+			members,
+			onAdd: candidates ? onAdd : void 0,
+			onRemove
+		})
+	});
+	return /* @__PURE__ */ jsxs(AdminSection_default, {
+		block: "group-members",
+		className,
+		title: title ?? t("admin.groups.members.title"),
+		description,
+		headingLevel: 3,
+		preferences,
+		children: [onAdd && candidates && /* @__PURE__ */ jsx(IdentityPicker_default, {
+			addLabel: t("admin.groups.members.add"),
+			candidates,
+			excludedIds: members.map((member) => member.id),
+			isSubmitting: isMutating,
+			onAdd,
+			types: [
+				"user",
+				"agent",
+				"group"
+			].filter((type) => candidates[type] !== void 0).map((type) => ({
+				label: t(`admin.common.identity_types.${type}`),
+				value: type
+			}))
+		}), /* @__PURE__ */ jsx(DataTable_default, {
+			caption: title?.length ? title : t("admin.groups.members.title"),
+			columns,
+			rows: members,
+			getRowId: (member) => `${member.type}:${member.id}`,
+			isLoading,
+			error,
+			emptyText: t("admin.groups.members.empty")
+		})]
+	});
+};
+var BaseGroupMembers_default = BaseGroupMembers;
+
+//#endregion
+export { BaseGroupMembers_default as default };
+//# sourceMappingURL=BaseGroupMembers.js.map

package/dist/components/admin/GroupMembers/BaseGroupMembers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseGroupMembers.js","names":["BaseGroupMembers: FC<BaseGroupMembersProps>","useTranslation","columns: DataTableColumn<GroupMember>[]","Button","AdminSection","IdentityPicker","DataTable"],"sources":["../../../../src/components/admin/GroupMembers/BaseGroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {GroupMember, GroupMemberType, Preferences} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Button from '../../primitives/Button/Button';\nimport DataTable, {DataTableColumn} from '../../primitives/DataTable/DataTable';\nimport AdminSection from '../shared/AdminSection';\nimport IdentityPicker, {IdentityCandidate} from '../shared/IdentityPicker';\n\n/**\n * What {@link BaseGroupMembers} hands its `children` render function, so the members can be shown\n * with any UI, such as a third-party data grid.\n */\nexport interface BaseGroupMembersRenderProps {\n  /**\n   * The identities that can be added, keyed by member type. Undefined when adding is not allowed.\n   */\n  candidates?: Partial<Record<GroupMemberType, IdentityCandidate[]>>;\n  /**\n   * The columns the default table shows, including the remove action when removing is allowed.\n   */\n  columns: DataTableColumn<GroupMember>[];\n  error: string | null;\n  isLoading: boolean;\n  isMutating: boolean;\n  members: GroupMember[];\n  /**\n   * Adds a member. Undefined when adding is not allowed.\n   */\n  onAdd?: (member: Pick<GroupMember, 'id' | 'type'>) => void;\n  /**\n   * Removes a member. Undefined when removing is not allowed.\n   */\n  onRemove?: (member: GroupMember) => void;\n}\n\nexport interface BaseGroupMembersProps {\n  /**\n   * The identities that can be added, keyed by member type. Adding is hidden when omitted.\n   */\n  candidates?: Partial<Record<GroupMemberType, IdentityCandidate[]>>;\n  /**\n   * Renders custom UI in place of the default table and picker. Receives the members, the default\n   * columns, the candidates, the loading and error state, and the add and remove handlers.\n   */\n  children?: (props: BaseGroupMembersRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isLoading?: boolean;\n  isMutating?: boolean;\n  members: GroupMember[];\n  onAdd?: (member: Pick<GroupMember, 'id' | 'type'>) => void;\n  /**\n   * Removes a member. The remove action is hidden when omitted.\n   */\n  onRemove?: (member: GroupMember) => void;\n  preferences?: Preferences;\n  title?: string;\n}\n\n/**\n * Lists the members of a group and lets the caller add and remove them. Holds no data of its own.\n */\nconst BaseGroupMembers: FC<BaseGroupMembersProps> = ({\n  candidates,\n  children,\n  className,\n  description,\n  error = null,\n  isLoading = false,\n  isMutating = false,\n  members,\n  onAdd,\n  onRemove,\n  preferences,\n  title,\n}: BaseGroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n\n  const columns: DataTableColumn<GroupMember>[] = [\n    {\n      header: t('admin.groups.members.columns.member'),\n      id: 'member',\n      render: (member: GroupMember): ReactNode => member.display ?? member.id,\n    },\n    {\n      header: t('admin.groups.members.columns.type'),\n      id: 'type',\n      render: (member: GroupMember): ReactNode => t(`admin.common.identity_types.${member.type}`),\n    },\n  ];\n\n  if (onRemove) {\n    columns.push({\n      header: t('admin.common.columns.actions'),\n      id: 'actions',\n      render: (member: GroupMember): ReactNode => (\n        <Button\n          variant=\"text\"\n          color=\"error\"\n          size=\"small\"\n          disabled={isMutating}\n          aria-label={t('admin.groups.members.remove_label', {name: member.display ?? member.id})}\n          onClick={(): void => onRemove(member)}\n        >\n          {t('admin.common.actions.remove')}\n        </Button>\n      ),\n    });\n  }\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          candidates: onAdd ? candidates : undefined,\n          columns,\n          error,\n          isLoading,\n          isMutating,\n          members,\n          onAdd: candidates ? onAdd : undefined,\n          onRemove,\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"group-members\"\n      className={className}\n      title={title ?? t('admin.groups.members.title')}\n      description={description}\n      headingLevel={3}\n      preferences={preferences}\n    >\n      {onAdd && candidates && (\n        <IdentityPicker<GroupMemberType>\n          addLabel={t('admin.groups.members.add')}\n          candidates={candidates}\n          excludedIds={members.map((member: GroupMember) => member.id)}\n          isSubmitting={isMutating}\n          onAdd={onAdd}\n          types={(['user', 'agent', 'group'] as GroupMemberType[])\n            .filter((type: GroupMemberType) => candidates[type] !== undefined)\n            .map((type: GroupMemberType) => ({label: t(`admin.common.identity_types.${type}`), value: type}))}\n        />\n      )}\n      <DataTable\n        caption={title?.length ? title : t('admin.groups.members.title')}\n        columns={columns}\n        rows={members}\n        getRowId={(member: GroupMember): string => `${member.type}:${member.id}`}\n        isLoading={isLoading}\n        error={error}\n        emptyText={t('admin.groups.members.empty')}\n      />\n    </AdminSection>\n  );\n};\n\nexport default BaseGroupMembers;\n"],"mappings":";;;;;;;;;;;AAkEA,MAAMA,oBAA+C,EACnD,YACA,UACA,WACA,aACA,QAAQ,MACR,YAAY,OACZ,aAAa,OACb,SACA,OACA,UACA,aACA,YACyC;CACzC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAE7C,MAAMC,UAA0C,CAC9C;EACE,QAAQ,EAAE,sCAAsC;EAChD,IAAI;EACJ,SAAS,WAAmC,OAAO,WAAW,OAAO;EACtE,EACD;EACE,QAAQ,EAAE,oCAAoC;EAC9C,IAAI;EACJ,SAAS,WAAmC,EAAE,+BAA+B,OAAO,OAAO;EAC5F,CACF;AAED,KAAI,SACF,SAAQ,KAAK;EACX,QAAQ,EAAE,+BAA+B;EACzC,IAAI;EACJ,SAAS,WACP,oBAACC;GACC,SAAQ;GACR,OAAM;GACN,MAAK;GACL,UAAU;GACV,cAAY,EAAE,qCAAqC,EAAC,MAAM,OAAO,WAAW,OAAO,IAAG,CAAC;GACvF,eAAqB,SAAS,OAAO;aAEpC,EAAE,8BAA8B;IAC1B;EAEZ,CAAC;AAGJ,KAAI,SACF,QACE,oBAAC;EAAe;YACb,SAAS;GACR,YAAY,QAAQ,aAAa;GACjC;GACA;GACA;GACA;GACA;GACA,OAAO,aAAa,QAAQ;GAC5B;GACD,CAAC;GACE;AAIV,QACE,qBAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,6BAA6B;EAClC;EACb,cAAc;EACD;aAEZ,SAAS,cACR,oBAACC;GACC,UAAU,EAAE,2BAA2B;GAC3B;GACZ,aAAa,QAAQ,KAAK,WAAwB,OAAO,GAAG;GAC5D,cAAc;GACP;GACP,OAAQ;IAAC;IAAQ;IAAS;IAAQ,CAC/B,QAAQ,SAA0B,WAAW,UAAU,OAAU,CACjE,KAAK,UAA2B;IAAC,OAAO,EAAE,+BAA+B,OAAO;IAAE,OAAO;IAAK,EAAE;IACnG,EAEJ,oBAACC;GACC,SAAS,OAAO,SAAS,QAAQ,EAAE,6BAA6B;GACvD;GACT,MAAM;GACN,WAAW,WAAgC,GAAG,OAAO,KAAK,GAAG,OAAO;GACzD;GACJ;GACP,WAAW,EAAE,6BAA6B;IAC1C;GACW;;AAInB,+BAAe"}

package/dist/components/admin/GroupMembers/GroupMembers.d.ts

@@ -0,0 +1,21 @@
+import { FC } from 'react';
+import { BaseGroupMembersProps } from './BaseGroupMembers';
+export type GroupMembersProps = Omit<BaseGroupMembersProps, 'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'> & {
+    /**
+     * Whether members can be added and removed from this view.
+     * @default false
+     */
+    editable?: boolean;
+    groupId: string;
+};
+/**
+ * Lists the users and agents in a group, and lets the signed-in user add and remove them.
+ *
+ * @example
+ * ```tsx
+ * <GroupMembers groupId={groupId} />
+ * ```
+ */
+declare const GroupMembers: FC<GroupMembersProps>;
+export default GroupMembers;
+//# sourceMappingURL=GroupMembers.d.ts.map

package/dist/components/admin/GroupMembers/GroupMembers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupMembers.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"names":[],"mappings":"AAUA,OAAO,EAAC,EAAE,EAAwB,MAAM,OAAO,CAAC;AAChD,OAAyB,EAAC,qBAAqB,EAAC,MAAM,oBAAoB,CAAC;AAS3E,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAClC,qBAAqB,EACrB,YAAY,GAAG,OAAO,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,CACvF,GAAG;IACF;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAgDvC,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/components/admin/GroupMembers/GroupMembers.js

@@ -0,0 +1,63 @@
+import useTranslation_default from "../../../hooks/useTranslation.js";
+import useGetUsers_default from "../../../hooks/management/users/useGetUsers.js";
+import useGetAgents_default from "../../../hooks/management/agents/useGetAgents.js";
+import useGetGroupMembers_default from "../../../hooks/management/groups/useGetGroupMembers.js";
+import useAddGroupMembers_default from "../../../hooks/management/groups/useAddGroupMembers.js";
+import useRemoveGroupMembers_default from "../../../hooks/management/groups/useRemoveGroupMembers.js";
+import BaseGroupMembers_default from "./BaseGroupMembers.js";
+import { resolveManagedIdentityName, toManagementErrorMessage } from "@thunderid/browser";
+import { useMemo } from "react";
+import { jsx } from "react/jsx-runtime";
+
+//#region src/components/admin/GroupMembers/GroupMembers.tsx
+/**
+* Lists the users and agents in a group, and lets the signed-in user add and remove them.
+*
+* @example
+* ```tsx
+* <GroupMembers groupId={groupId} />
+* ```
+*/
+const GroupMembers = ({ editable = false, groupId, preferences,...rest }) => {
+	const { t } = useTranslation_default(preferences?.i18n);
+	const members = useGetGroupMembers_default(groupId, { limit: 100 });
+	const users = useGetUsers_default({ limit: 100 }, { enabled: editable });
+	const agents = useGetAgents_default({ limit: 100 }, { enabled: editable });
+	const add = useAddGroupMembers_default();
+	const remove = useRemoveGroupMembers_default();
+	const candidates = useMemo(() => ({
+		agent: (agents.data?.agents ?? []).map((agent) => ({
+			id: agent.id,
+			label: agent.name
+		})),
+		user: (users.data?.users ?? []).map((user) => ({
+			id: user.id,
+			label: resolveManagedIdentityName(user)
+		}))
+	}), [agents.data, users.data]);
+	return /* @__PURE__ */ jsx(BaseGroupMembers_default, {
+		members: members.data?.members ?? [],
+		isLoading: members.isLoading,
+		isMutating: add.isLoading || remove.isLoading,
+		error: toManagementErrorMessage(t, members.error, "admin.groups.members.error") ?? toManagementErrorMessage(t, add.error ?? remove.error, "admin.groups.members.update_error"),
+		candidates: editable ? candidates : void 0,
+		onAdd: editable ? (member) => void add.mutate({
+			groupId,
+			members: [member]
+		}) : void 0,
+		onRemove: editable ? (member) => void remove.mutate({
+			groupId,
+			members: [{
+				id: member.id,
+				type: member.type
+			}]
+		}) : void 0,
+		preferences,
+		...rest
+	});
+};
+var GroupMembers_default = GroupMembers;
+
+//#endregion
+export { GroupMembers_default as default };
+//# sourceMappingURL=GroupMembers.js.map

package/dist/components/admin/GroupMembers/GroupMembers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupMembers.js","names":["GroupMembers: FC<GroupMembersProps>","useTranslation","useGetGroupMembers","useGetUsers","useGetAgents","useAddGroupMembers","useRemoveGroupMembers","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n  BasicAgent,\n  GroupMember,\n  ManagedUser,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useGetAgents from '../../../hooks/management/agents/useGetAgents';\nimport useAddGroupMembers from '../../../hooks/management/groups/useAddGroupMembers';\nimport useGetGroupMembers from '../../../hooks/management/groups/useGetGroupMembers';\nimport useRemoveGroupMembers from '../../../hooks/management/groups/useRemoveGroupMembers';\nimport useGetUsers from '../../../hooks/management/users/useGetUsers';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  editable = false,\n  groupId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const members = useGetGroupMembers(groupId, {limit: 100});\n  const users = useGetUsers({limit: 100}, {enabled: editable});\n  const agents = useGetAgents({limit: 100}, {enabled: editable});\n  const add = useAddGroupMembers();\n  const remove = useRemoveGroupMembers();\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, users.data],\n  );\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAwCA,MAAMA,gBAAuC,EAC3C,WAAW,OACX,SACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,UAAUC,2BAAmB,SAAS,EAAC,OAAO,KAAI,CAAC;CACzD,MAAM,QAAQC,oBAAY,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC5D,MAAM,SAASC,qBAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,MAAMC,4BAAoB;CAChC,MAAM,SAASC,+BAAuB;CAEtC,MAAMC,aAAqE,eAClE;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,OAAO,2BAA2B,KAAK;GACxC,EAAE;EACJ,GACD,CAAC,OAAO,MAAM,MAAM,KAAK,CAC1B;AAED,QACE,oBAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,OACE,yBAAyB,GAAG,QAAQ,OAAO,6BAA6B,IACxE,yBAAyB,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}

package/dist/components/admin/RoleAssignments/BaseRoleAssignments.d.ts

@@ -0,0 +1,80 @@
+import { Preferences, RoleAssigneeType, RoleAssignment, RoleAssignmentInput } from '@thunderid/browser';
+import { FC, ReactNode } from 'react';
+import { DataTableColumn } from '../../primitives/DataTable/DataTable';
+import { IdentityCandidate } from '../shared/IdentityPicker';
+/**
+ * What {@link BaseRoleAssignments} hands its `children` render function, so the assignments can be
+ * shown with any UI, such as a third-party data grid.
+ */
+export interface BaseRoleAssignmentsRenderProps {
+    assignments: RoleAssignment[];
+    /**
+     * The identities the role can be assigned to, keyed by assignee type. Undefined when assigning is
+     * not allowed.
+     */
+    candidates?: Partial<Record<RoleAssigneeType, IdentityCandidate[]>>;
+    /**
+     * The columns the default table shows, including the remove action when unassigning is allowed.
+     */
+    columns: DataTableColumn<RoleAssignment>[];
+    error: string | null;
+    isLoading: boolean;
+    isMutating: boolean;
+    /**
+     * Assigns the role. Undefined when assigning is not allowed.
+     */
+    onAssign?: (assignment: RoleAssignmentInput) => void;
+    /**
+     * Shows only one assignee type, or every type with `null`. Undefined when the list cannot be filtered.
+     */
+    onTypeFilterChange?: (type: RoleAssigneeType | null) => void;
+    /**
+     * Removes an assignment. Undefined when unassigning is not allowed.
+     */
+    onUnassign?: (assignment: RoleAssignment) => void;
+    /**
+     * The assignee type the list is narrowed to, or `null` for every type.
+     */
+    typeFilter: RoleAssigneeType | null;
+}
+export interface BaseRoleAssignmentsProps {
+    assignments: RoleAssignment[];
+    /**
+     * The identities the role can be assigned to, keyed by assignee type. Assigning is hidden when omitted.
+     */
+    candidates?: Partial<Record<RoleAssigneeType, IdentityCandidate[]>>;
+    /**
+     * Renders custom UI in place of the default table and picker. Receives the assignments, the
+     * default columns, the candidates, the loading and error state, and the assign and unassign
+     * handlers.
+     */
+    children?: (props: BaseRoleAssignmentsRenderProps) => ReactNode;
+    className?: string;
+    description?: string;
+    error?: string | null;
+    isLoading?: boolean;
+    isMutating?: boolean;
+    onAssign?: (assignment: RoleAssignmentInput) => void;
+    /**
+     * Narrows the list to one assignee type, on the server, or back to every type with `null`. The type
+     * filter shows only when set.
+     */
+    onTypeFilterChange?: (type: RoleAssigneeType | null) => void;
+    /**
+     * Removes an assignment. The remove action is hidden when omitted.
+     */
+    onUnassign?: (assignment: RoleAssignment) => void;
+    preferences?: Preferences;
+    title?: string;
+    /**
+     * The assignee type the list is narrowed to, or `null` for every type.
+     */
+    typeFilter?: RoleAssigneeType | null;
+}
+/**
+ * Lists the users, groups and agents a role is assigned to, and lets the caller assign and unassign
+ * it. Holds no data of its own.
+ */
+declare const BaseRoleAssignments: FC<BaseRoleAssignmentsProps>;
+export default BaseRoleAssignments;
+//# sourceMappingURL=BaseRoleAssignments.d.ts.map

package/dist/components/admin/RoleAssignments/BaseRoleAssignments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseRoleAssignments.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RoleAssignments/BaseRoleAssignments.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAC,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,mBAAmB,EAAC,MAAM,oBAAoB,CAAC;AACtG,OAAO,EAAc,EAAE,EAAgB,SAAS,EAAC,MAAM,OAAO,CAAC;AAG/D,OAAkB,EAAC,eAAe,EAAC,MAAM,sCAAsC,CAAC;AAGhF,OAAuB,EAAC,iBAAiB,EAAC,MAAM,0BAA0B,CAAC;AAE3E;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;IACpE;;OAEG;IACH,OAAO,EAAE,eAAe,CAAC,cAAc,CAAC,EAAE,CAAC;IAC3C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB;;OAEG;IACH,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,mBAAmB,KAAK,IAAI,CAAC;IACrD;;OAEG;IACH,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,KAAK,IAAI,CAAC;IAC7D;;OAEG;IACH,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,KAAK,IAAI,CAAC;IAClD;;OAEG;IACH,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B;;OAEG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;IACpE;;;;OAIG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,8BAA8B,KAAK,SAAS,CAAC;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,mBAAmB,KAAK,IAAI,CAAC;IACrD;;;OAGG;IACH,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,KAAK,IAAI,CAAC;IAC7D;;OAEG;IACH,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,KAAK,IAAI,CAAC;IAClD,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,UAAU,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;CACtC;AAED;;;GAGG;AACH,QAAA,MAAM,mBAAmB,EAAE,EAAE,CAAC,wBAAwB,CAwHrD,CAAC;AAEF,eAAe,mBAAmB,CAAC"}

package/dist/components/admin/RoleAssignments/BaseRoleAssignments.js

@@ -0,0 +1,114 @@
+import useTranslation_default from "../../../hooks/useTranslation.js";
+import Button_default from "../../primitives/Button/Button.js";
+import Select_default from "../../primitives/Select/Select.js";
+import DataTable_default from "../../primitives/DataTable/DataTable.js";
+import AdminSection_default from "../shared/AdminSection.js";
+import IdentityPicker_default from "../shared/IdentityPicker.js";
+import { jsx, jsxs } from "react/jsx-runtime";
+
+//#region src/components/admin/RoleAssignments/BaseRoleAssignments.tsx
+/**
+* Lists the users, groups and agents a role is assigned to, and lets the caller assign and unassign
+* it. Holds no data of its own.
+*/
+const BaseRoleAssignments = ({ assignments, candidates, children, className, description, error = null, isLoading = false, isMutating = false, onAssign, onTypeFilterChange, onUnassign, preferences, title, typeFilter = null }) => {
+	const { t } = useTranslation_default(preferences?.i18n);
+	const columns = [{
+		header: t("admin.roles.assignments.columns.assignee"),
+		id: "assignee",
+		render: (assignment) => assignment.display ?? assignment.id
+	}, {
+		header: t("admin.roles.assignments.columns.type"),
+		id: "type",
+		render: (assignment) => t(`admin.common.identity_types.${assignment.type}`)
+	}];
+	if (onUnassign) columns.push({
+		header: t("admin.common.columns.actions"),
+		id: "actions",
+		render: (assignment) => /* @__PURE__ */ jsx(Button_default, {
+			variant: "text",
+			color: "error",
+			size: "small",
+			disabled: isMutating,
+			"aria-label": t("admin.roles.assignments.remove_label", { name: assignment.display ?? assignment.id }),
+			onClick: () => onUnassign(assignment),
+			children: t("admin.common.actions.remove")
+		})
+	});
+	if (children) return /* @__PURE__ */ jsx("div", {
+		className,
+		children: children({
+			assignments,
+			candidates: onAssign ? candidates : void 0,
+			columns,
+			error,
+			isLoading,
+			isMutating,
+			onAssign: candidates ? onAssign : void 0,
+			onTypeFilterChange,
+			onUnassign,
+			typeFilter
+		})
+	});
+	return /* @__PURE__ */ jsxs(AdminSection_default, {
+		block: "role-assignments",
+		className,
+		title: title ?? t("admin.roles.assignments.title"),
+		description,
+		headingLevel: 3,
+		preferences,
+		children: [
+			onAssign && candidates && /* @__PURE__ */ jsx(IdentityPicker_default, {
+				addLabel: t("admin.roles.assignments.add"),
+				candidates,
+				excludedIds: assignments.map((assignment) => assignment.id),
+				isSubmitting: isMutating,
+				onAdd: onAssign,
+				types: [
+					"user",
+					"group",
+					"agent",
+					"app"
+				].filter((type) => candidates[type] !== void 0).map((type) => ({
+					label: t(`admin.common.identity_types.${type}`),
+					value: type
+				}))
+			}),
+			onTypeFilterChange && /* @__PURE__ */ jsx("div", {
+				style: { maxWidth: "16rem" },
+				children: /* @__PURE__ */ jsx(Select_default, {
+					label: t("admin.common.filters.type"),
+					name: "assigneeType",
+					value: typeFilter ?? "",
+					options: [{
+						label: t("admin.common.filters.all_types"),
+						value: ""
+					}, ...[
+						"user",
+						"group",
+						"agent",
+						"app"
+					].map((type) => ({
+						label: t(`admin.common.identity_types.${type}`),
+						value: type
+					}))],
+					onChange: (event) => onTypeFilterChange(event.target.value || null)
+				})
+			}),
+			/* @__PURE__ */ jsx(DataTable_default, {
+				caption: title?.length ? title : t("admin.roles.assignments.title"),
+				columns,
+				rows: assignments,
+				getRowId: (assignment) => `${assignment.type}:${assignment.id}`,
+				isLoading,
+				error,
+				emptyText: t("admin.roles.assignments.empty")
+			})
+		]
+	});
+};
+var BaseRoleAssignments_default = BaseRoleAssignments;
+
+//#endregion
+export { BaseRoleAssignments_default as default };
+//# sourceMappingURL=BaseRoleAssignments.js.map

package/dist/components/admin/RoleAssignments/BaseRoleAssignments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseRoleAssignments.js","names":["BaseRoleAssignments: FC<BaseRoleAssignmentsProps>","useTranslation","columns: DataTableColumn<RoleAssignment>[]","Button","AdminSection","IdentityPicker","Select","DataTable"],"sources":["../../../../src/components/admin/RoleAssignments/BaseRoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Preferences, RoleAssigneeType, RoleAssignment, RoleAssignmentInput} from '@thunderid/browser';\nimport {ChangeEvent, FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Button from '../../primitives/Button/Button';\nimport DataTable, {DataTableColumn} from '../../primitives/DataTable/DataTable';\nimport Select from '../../primitives/Select/Select';\nimport AdminSection from '../shared/AdminSection';\nimport IdentityPicker, {IdentityCandidate} from '../shared/IdentityPicker';\n\n/**\n * What {@link BaseRoleAssignments} hands its `children` render function, so the assignments can be\n * shown with any UI, such as a third-party data grid.\n */\nexport interface BaseRoleAssignmentsRenderProps {\n  assignments: RoleAssignment[];\n  /**\n   * The identities the role can be assigned to, keyed by assignee type. Undefined when assigning is\n   * not allowed.\n   */\n  candidates?: Partial<Record<RoleAssigneeType, IdentityCandidate[]>>;\n  /**\n   * The columns the default table shows, including the remove action when unassigning is allowed.\n   */\n  columns: DataTableColumn<RoleAssignment>[];\n  error: string | null;\n  isLoading: boolean;\n  isMutating: boolean;\n  /**\n   * Assigns the role. Undefined when assigning is not allowed.\n   */\n  onAssign?: (assignment: RoleAssignmentInput) => void;\n  /**\n   * Shows only one assignee type, or every type with `null`. Undefined when the list cannot be filtered.\n   */\n  onTypeFilterChange?: (type: RoleAssigneeType | null) => void;\n  /**\n   * Removes an assignment. Undefined when unassigning is not allowed.\n   */\n  onUnassign?: (assignment: RoleAssignment) => void;\n  /**\n   * The assignee type the list is narrowed to, or `null` for every type.\n   */\n  typeFilter: RoleAssigneeType | null;\n}\n\nexport interface BaseRoleAssignmentsProps {\n  assignments: RoleAssignment[];\n  /**\n   * The identities the role can be assigned to, keyed by assignee type. Assigning is hidden when omitted.\n   */\n  candidates?: Partial<Record<RoleAssigneeType, IdentityCandidate[]>>;\n  /**\n   * Renders custom UI in place of the default table and picker. Receives the assignments, the\n   * default columns, the candidates, the loading and error state, and the assign and unassign\n   * handlers.\n   */\n  children?: (props: BaseRoleAssignmentsRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isLoading?: boolean;\n  isMutating?: boolean;\n  onAssign?: (assignment: RoleAssignmentInput) => void;\n  /**\n   * Narrows the list to one assignee type, on the server, or back to every type with `null`. The type\n   * filter shows only when set.\n   */\n  onTypeFilterChange?: (type: RoleAssigneeType | null) => void;\n  /**\n   * Removes an assignment. The remove action is hidden when omitted.\n   */\n  onUnassign?: (assignment: RoleAssignment) => void;\n  preferences?: Preferences;\n  title?: string;\n  /**\n   * The assignee type the list is narrowed to, or `null` for every type.\n   */\n  typeFilter?: RoleAssigneeType | null;\n}\n\n/**\n * Lists the users, groups and agents a role is assigned to, and lets the caller assign and unassign\n * it. Holds no data of its own.\n */\nconst BaseRoleAssignments: FC<BaseRoleAssignmentsProps> = ({\n  assignments,\n  candidates,\n  children,\n  className,\n  description,\n  error = null,\n  isLoading = false,\n  isMutating = false,\n  onAssign,\n  onTypeFilterChange,\n  onUnassign,\n  preferences,\n  title,\n  typeFilter = null,\n}: BaseRoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n\n  const columns: DataTableColumn<RoleAssignment>[] = [\n    {\n      header: t('admin.roles.assignments.columns.assignee'),\n      id: 'assignee',\n      render: (assignment: RoleAssignment): ReactNode => assignment.display ?? assignment.id,\n    },\n    {\n      header: t('admin.roles.assignments.columns.type'),\n      id: 'type',\n      render: (assignment: RoleAssignment): ReactNode => t(`admin.common.identity_types.${assignment.type}`),\n    },\n  ];\n\n  if (onUnassign) {\n    columns.push({\n      header: t('admin.common.columns.actions'),\n      id: 'actions',\n      render: (assignment: RoleAssignment): ReactNode => (\n        <Button\n          variant=\"text\"\n          color=\"error\"\n          size=\"small\"\n          disabled={isMutating}\n          aria-label={t('admin.roles.assignments.remove_label', {name: assignment.display ?? assignment.id})}\n          onClick={(): void => onUnassign(assignment)}\n        >\n          {t('admin.common.actions.remove')}\n        </Button>\n      ),\n    });\n  }\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          assignments,\n          candidates: onAssign ? candidates : undefined,\n          columns,\n          error,\n          isLoading,\n          isMutating,\n          onAssign: candidates ? onAssign : undefined,\n          onTypeFilterChange,\n          onUnassign,\n          typeFilter,\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"role-assignments\"\n      className={className}\n      title={title ?? t('admin.roles.assignments.title')}\n      description={description}\n      headingLevel={3}\n      preferences={preferences}\n    >\n      {onAssign && candidates && (\n        <IdentityPicker<RoleAssigneeType>\n          addLabel={t('admin.roles.assignments.add')}\n          candidates={candidates}\n          excludedIds={assignments.map((assignment: RoleAssignment) => assignment.id)}\n          isSubmitting={isMutating}\n          onAdd={onAssign}\n          types={(['user', 'group', 'agent', 'app'] as RoleAssigneeType[])\n            .filter((type: RoleAssigneeType) => candidates[type] !== undefined)\n            .map((type: RoleAssigneeType) => ({label: t(`admin.common.identity_types.${type}`), value: type}))}\n        />\n      )}\n      {onTypeFilterChange && (\n        <div style={{maxWidth: '16rem'}}>\n          <Select\n            label={t('admin.common.filters.type')}\n            name=\"assigneeType\"\n            value={typeFilter ?? ''}\n            options={[\n              {label: t('admin.common.filters.all_types'), value: ''},\n              ...(['user', 'group', 'agent', 'app'] as RoleAssigneeType[]).map((type: RoleAssigneeType) => ({\n                label: t(`admin.common.identity_types.${type}`),\n                value: type,\n              })),\n            ]}\n            onChange={(event: ChangeEvent<HTMLSelectElement>): void =>\n              onTypeFilterChange((event.target.value || null) as RoleAssigneeType | null)\n            }\n          />\n        </div>\n      )}\n      <DataTable\n        caption={title?.length ? title : t('admin.roles.assignments.title')}\n        columns={columns}\n        rows={assignments}\n        getRowId={(assignment: RoleAssignment): string => `${assignment.type}:${assignment.id}`}\n        isLoading={isLoading}\n        error={error}\n        emptyText={t('admin.roles.assignments.empty')}\n      />\n    </AdminSection>\n  );\n};\n\nexport default BaseRoleAssignments;\n"],"mappings":";;;;;;;;;;;;;AAuFA,MAAMA,uBAAqD,EACzD,aACA,YACA,UACA,WACA,aACA,QAAQ,MACR,YAAY,OACZ,aAAa,OACb,UACA,oBACA,YACA,aACA,OACA,aAAa,WAC+B;CAC5C,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAE7C,MAAMC,UAA6C,CACjD;EACE,QAAQ,EAAE,2CAA2C;EACrD,IAAI;EACJ,SAAS,eAA0C,WAAW,WAAW,WAAW;EACrF,EACD;EACE,QAAQ,EAAE,uCAAuC;EACjD,IAAI;EACJ,SAAS,eAA0C,EAAE,+BAA+B,WAAW,OAAO;EACvG,CACF;AAED,KAAI,WACF,SAAQ,KAAK;EACX,QAAQ,EAAE,+BAA+B;EACzC,IAAI;EACJ,SAAS,eACP,oBAACC;GACC,SAAQ;GACR,OAAM;GACN,MAAK;GACL,UAAU;GACV,cAAY,EAAE,wCAAwC,EAAC,MAAM,WAAW,WAAW,WAAW,IAAG,CAAC;GAClG,eAAqB,WAAW,WAAW;aAE1C,EAAE,8BAA8B;IAC1B;EAEZ,CAAC;AAGJ,KAAI,SACF,QACE,oBAAC;EAAe;YACb,SAAS;GACR;GACA,YAAY,WAAW,aAAa;GACpC;GACA;GACA;GACA;GACA,UAAU,aAAa,WAAW;GAClC;GACA;GACA;GACD,CAAC;GACE;AAIV,QACE,qBAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,gCAAgC;EACrC;EACb,cAAc;EACD;;GAEZ,YAAY,cACX,oBAACC;IACC,UAAU,EAAE,8BAA8B;IAC9B;IACZ,aAAa,YAAY,KAAK,eAA+B,WAAW,GAAG;IAC3E,cAAc;IACd,OAAO;IACP,OAAQ;KAAC;KAAQ;KAAS;KAAS;KAAM,CACtC,QAAQ,SAA2B,WAAW,UAAU,OAAU,CAClE,KAAK,UAA4B;KAAC,OAAO,EAAE,+BAA+B,OAAO;KAAE,OAAO;KAAK,EAAE;KACpG;GAEH,sBACC,oBAAC;IAAI,OAAO,EAAC,UAAU,SAAQ;cAC7B,oBAACC;KACC,OAAO,EAAE,4BAA4B;KACrC,MAAK;KACL,OAAO,cAAc;KACrB,SAAS,CACP;MAAC,OAAO,EAAE,iCAAiC;MAAE,OAAO;MAAG,EACvD,GAAI;MAAC;MAAQ;MAAS;MAAS;MAAM,CAAwB,KAAK,UAA4B;MAC5F,OAAO,EAAE,+BAA+B,OAAO;MAC/C,OAAO;MACR,EAAE,CACJ;KACD,WAAW,UACT,mBAAoB,MAAM,OAAO,SAAS,KAAiC;MAE7E;KACE;GAER,oBAACC;IACC,SAAS,OAAO,SAAS,QAAQ,EAAE,gCAAgC;IAC1D;IACT,MAAM;IACN,WAAW,eAAuC,GAAG,WAAW,KAAK,GAAG,WAAW;IACxE;IACJ;IACP,WAAW,EAAE,gCAAgC;KAC7C;;GACW;;AAInB,kCAAe"}

package/dist/components/admin/RoleAssignments/RoleAssignments.d.ts

@@ -0,0 +1,27 @@
+import { FC } from 'react';
+import { BaseRoleAssignmentsProps } from './BaseRoleAssignments';
+export type RoleAssignmentsProps = Omit<BaseRoleAssignmentsProps, 'assignments' | 'candidates' | 'error' | 'isLoading' | 'isMutating' | 'onAssign' | 'onTypeFilterChange' | 'onUnassign' | 'typeFilter'> & {
+    /**
+     * Whether assignments can be added and removed from this view.
+     * @default false
+     */
+    editable?: boolean;
+    /**
+     * Whether to show the assignee type filter, which narrows the list on the server.
+     * @default true
+     */
+    filterable?: boolean;
+    roleId: string;
+};
+/**
+ * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or
+ * remove it from them.
+ *
+ * @example
+ * ```tsx
+ * <RoleAssignments roleId={roleId} />
+ * ```
+ */
+declare const RoleAssignments: FC<RoleAssignmentsProps>;
+export default RoleAssignments;
+//# sourceMappingURL=RoleAssignments.d.ts.map

package/dist/components/admin/RoleAssignments/RoleAssignments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleAssignments.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"names":[],"mappings":"AAaA,OAAO,EAAC,EAAE,EAAkC,MAAM,OAAO,CAAC;AAC1D,OAA4B,EAAC,wBAAwB,EAAC,MAAM,uBAAuB,CAAC;AAUpF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,wBAAwB,EACtB,aAAa,GACb,YAAY,GACZ,OAAO,GACP,WAAW,GACX,YAAY,GACZ,UAAU,GACV,oBAAoB,GACpB,YAAY,GACZ,YAAY,CACf,GAAG;IACF;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;;GAQG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAuD7C,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/components/admin/RoleAssignments/RoleAssignments.js

@@ -0,0 +1,80 @@
+import useTranslation_default from "../../../hooks/useTranslation.js";
+import useGetUsers_default from "../../../hooks/management/users/useGetUsers.js";
+import useGetAgents_default from "../../../hooks/management/agents/useGetAgents.js";
+import useGetRoleAssignments_default from "../../../hooks/management/roles/useGetRoleAssignments.js";
+import useAddRoleAssignments_default from "../../../hooks/management/roles/useAddRoleAssignments.js";
+import useRemoveRoleAssignments_default from "../../../hooks/management/roles/useRemoveRoleAssignments.js";
+import useGetGroups_default from "../../../hooks/management/groups/useGetGroups.js";
+import BaseRoleAssignments_default from "./BaseRoleAssignments.js";
+import { resolveManagedIdentityName, toManagementErrorMessage } from "@thunderid/browser";
+import { useMemo, useState } from "react";
+import { jsx } from "react/jsx-runtime";
+
+//#region src/components/admin/RoleAssignments/RoleAssignments.tsx
+/**
+* Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or
+* remove it from them.
+*
+* @example
+* ```tsx
+* <RoleAssignments roleId={roleId} />
+* ```
+*/
+const RoleAssignments = ({ editable = false, filterable = true, preferences, roleId,...rest }) => {
+	const { t } = useTranslation_default(preferences?.i18n);
+	const [typeFilter, setTypeFilter] = useState(null);
+	const assignments = useGetRoleAssignments_default(roleId, {
+		limit: 100,
+		type: typeFilter ?? void 0
+	});
+	const users = useGetUsers_default({ limit: 100 }, { enabled: editable });
+	const groups = useGetGroups_default({ limit: 100 }, { enabled: editable });
+	const agents = useGetAgents_default({ limit: 100 }, { enabled: editable });
+	const assign = useAddRoleAssignments_default();
+	const unassign = useRemoveRoleAssignments_default();
+	const candidates = useMemo(() => ({
+		agent: (agents.data?.agents ?? []).map((agent) => ({
+			id: agent.id,
+			label: agent.name
+		})),
+		group: (groups.data?.groups ?? []).map((group) => ({
+			id: group.id,
+			label: group.name
+		})),
+		user: (users.data?.users ?? []).map((user) => ({
+			id: user.id,
+			label: resolveManagedIdentityName(user)
+		}))
+	}), [
+		agents.data,
+		groups.data,
+		users.data
+	]);
+	return /* @__PURE__ */ jsx(BaseRoleAssignments_default, {
+		assignments: assignments.data?.assignments ?? [],
+		isLoading: assignments.isLoading,
+		isMutating: assign.isLoading || unassign.isLoading,
+		error: toManagementErrorMessage(t, assignments.error, "admin.roles.assignments.error") ?? toManagementErrorMessage(t, assign.error ?? unassign.error, "admin.roles.assignments.update_error"),
+		candidates: editable ? candidates : void 0,
+		onAssign: editable ? (assignment) => void assign.mutate({
+			assignments: [assignment],
+			roleId
+		}) : void 0,
+		onUnassign: editable ? (assignment) => void unassign.mutate({
+			assignments: [{
+				id: assignment.id,
+				type: assignment.type
+			}],
+			roleId
+		}) : void 0,
+		typeFilter,
+		onTypeFilterChange: filterable ? setTypeFilter : void 0,
+		preferences,
+		...rest
+	});
+};
+var RoleAssignments_default = RoleAssignments;
+
+//#endregion
+export { RoleAssignments_default as default };
+//# sourceMappingURL=RoleAssignments.js.map

package/dist/components/admin/RoleAssignments/RoleAssignments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleAssignments.js","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","useGetRoleAssignments","useGetUsers","useGetGroups","useGetAgents","useAddRoleAssignments","useRemoveRoleAssignments","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n  BasicAgent,\n  Group,\n  ManagedUser,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useGetAgents from '../../../hooks/management/agents/useGetAgents';\nimport useGetGroups from '../../../hooks/management/groups/useGetGroups';\nimport useAddRoleAssignments from '../../../hooks/management/roles/useAddRoleAssignments';\nimport useGetRoleAssignments from '../../../hooks/management/roles/useGetRoleAssignments';\nimport useRemoveRoleAssignments from '../../../hooks/management/roles/useRemoveRoleAssignments';\nimport useGetUsers from '../../../hooks/management/users/useGetUsers';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  editable = false,\n  filterable = true,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const assignments = useGetRoleAssignments(roleId, {limit: 100, type: typeFilter ?? undefined});\n  const users = useGetUsers({limit: 100}, {enabled: editable});\n  const groups = useGetGroups({limit: 100}, {enabled: editable});\n  const agents = useGetAgents({limit: 100}, {enabled: editable});\n  const assign = useAddRoleAssignments();\n  const unassign = useRemoveRoleAssignments();\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      group: (groups.data?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, groups.data, users.data],\n  );\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA0DA,MAAMA,mBAA6C,EACjD,WAAW,OACX,aAAa,MACb,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,iBAAiB,SAAkC,KAAK;CAC3E,MAAM,cAAcC,8BAAsB,QAAQ;EAAC,OAAO;EAAK,MAAM,cAAc;EAAU,CAAC;CAC9F,MAAM,QAAQC,oBAAY,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC5D,MAAM,SAASC,qBAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,SAASC,qBAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,SAASC,+BAAuB;CACtC,MAAM,WAAWC,kCAA0B;CAE3C,MAAMC,aAA+E,eAC5E;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAkB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAC7F,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,OAAO,2BAA2B,KAAK;GACxC,EAAE;EACJ,GACD;EAAC,OAAO;EAAM,OAAO;EAAM,MAAM;EAAK,CACvC;AAED,QACE,oBAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,OACE,yBAAyB,GAAG,YAAY,OAAO,gCAAgC,IAC/E,yBAAyB,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}

package/dist/components/admin/RoleCreate/BaseRoleCreate.d.ts

@@ -0,0 +1,55 @@
+import { Preferences } from '@thunderid/browser';
+import { FC, ReactNode } from 'react';
+/**
+ * The role {@link BaseRoleCreate} submits. The organization unit is added by the caller.
+ */
+export interface RoleCreateSubmission {
+    description?: string;
+    name: string;
+}
+/**
+ * What {@link BaseRoleCreate} hands its `children` render function, so the form can be built with any UI.
+ */
+export interface BaseRoleCreateRenderProps {
+    error: string | null;
+    /**
+     * Sets one field of the form.
+     */
+    handleInputChange: (field: 'description' | 'name', value: string) => void;
+    /**
+     * Submits the current values. Does nothing while they are not valid.
+     */
+    handleSubmit: () => void;
+    isSubmitting: boolean;
+    /**
+     * Whether the values can be submitted.
+     */
+    isValid: boolean;
+    onCancel?: () => void;
+    values: {
+        description: string;
+        name: string;
+    };
+}
+export interface BaseRoleCreateProps {
+    /**
+     * Renders custom UI in place of the default form. Receives the values, their setters, the submit
+     * handler and the submission state.
+     */
+    children?: (props: BaseRoleCreateRenderProps) => ReactNode;
+    className?: string;
+    description?: string;
+    error?: string | null;
+    isSubmitting?: boolean;
+    onCancel?: () => void;
+    onSubmit: (role: RoleCreateSubmission) => void;
+    preferences?: Preferences;
+    title?: string;
+}
+/**
+ * A form that collects a new role's name and description. Holds no data of its own: handle the
+ * submission.
+ */
+declare const BaseRoleCreate: FC<BaseRoleCreateProps>;
+export default BaseRoleCreate;
+//# sourceMappingURL=BaseRoleCreate.d.ts.map

package/dist/components/admin/RoleCreate/BaseRoleCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseRoleCreate.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RoleCreate/BaseRoleCreate.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAC,WAAW,EAAC,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAc,EAAE,EAA2B,SAAS,EAAW,MAAM,OAAO,CAAC;AASpF;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;OAEG;IACH,iBAAiB,EAAE,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1E;;OAEG;IACH,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;IACtB;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,MAAM,EAAE;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAC,CAAC;CAC7C;AAED,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,yBAAyB,KAAK,SAAS,CAAC;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,QAAQ,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAC/C,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,QAAA,MAAM,cAAc,EAAE,EAAE,CAAC,mBAAmB,CAuF3C,CAAC;AAEF,eAAe,cAAc,CAAC"}