@thunderid/react 1.5.0 → 1.6.0

package/dist/cjs/components/admin/GroupList/GroupList.cjs

@@ -0,0 +1,44 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_useGetGroups = require('../../../hooks/management/groups/useGetGroups.cjs');
+const require_BaseGroupList = require('./BaseGroupList.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/GroupList/GroupList.tsx
+/**
+* Lists the groups the signed-in user is allowed to see, a page at a time.
+*
+* @example
+* ```tsx
+* <GroupList onSelect={(group) => setSelectedGroupId(group.id)} />
+* ```
+*/
+const GroupList = ({ limit = 20, preferences,...rest }) => {
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const [offset, setOffset] = (0, react.useState)(0);
+	const { data, error, isLoading } = require_useGetGroups.default({
+		limit,
+		offset
+	});
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseGroupList.default, {
+		groups: data?.groups ?? [],
+		totalResults: data?.totalResults,
+		isLoading,
+		error: (0, __thunderid_browser.toManagementErrorMessage)(t, error, "admin.groups.list.error"),
+		limit,
+		offset,
+		onPageChange: setOffset,
+		preferences,
+		...rest
+	});
+};
+var GroupList_default = GroupList;
+
+//#endregion
+exports.default = GroupList_default;
+//# sourceMappingURL=GroupList.cjs.map

package/dist/cjs/components/admin/GroupList/GroupList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupList.cjs","names":["GroupList: FC<GroupListProps>","useTranslation","useGetGroups","BaseGroupList"],"sources":["../../../../../src/components/admin/GroupList/GroupList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseGroupList, {BaseGroupListProps} from './BaseGroupList';\nimport useGetGroups from '../../../hooks/management/groups/useGetGroups';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type GroupListProps = Omit<\n  BaseGroupListProps,\n  'error' | 'groups' | 'isLoading' | 'offset' | 'onPageChange' | 'totalResults'\n>;\n\n/**\n * Lists the groups the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <GroupList onSelect={(group) => setSelectedGroupId(group.id)} />\n * ```\n */\nconst GroupList: FC<GroupListProps> = ({limit = 20, preferences, ...rest}: GroupListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const {data, error, isLoading} = useGetGroups({limit, offset});\n\n  return (\n    <BaseGroupList\n      groups={data?.groups ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.groups.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsBA,MAAMA,aAAiC,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAwC;CAC1G,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAM,EAAC,MAAM,OAAO,cAAaC,6BAAa;EAAC;EAAO;EAAO,CAAC;AAE9D,QACE,2CAACC;EACC,QAAQ,MAAM,UAAU,EAAE;EAC1B,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,0BAA0B;EAC7D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,wBAAe"}

package/dist/cjs/components/admin/GroupMembers/BaseGroupMembers.cjs

@@ -0,0 +1,87 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_Button = require('../../primitives/Button/Button.cjs');
+const require_DataTable = require('../../primitives/DataTable/DataTable.cjs');
+const require_AdminSection = require('../shared/AdminSection.cjs');
+const require_IdentityPicker = require('../shared/IdentityPicker.cjs');
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/GroupMembers/BaseGroupMembers.tsx
+/**
+* Lists the members of a group and lets the caller add and remove them. Holds no data of its own.
+*/
+const BaseGroupMembers = ({ candidates, children, className, description, error = null, isLoading = false, isMutating = false, members, onAdd, onRemove, preferences, title }) => {
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const columns = [{
+		header: t("admin.groups.members.columns.member"),
+		id: "member",
+		render: (member) => member.display ?? member.id
+	}, {
+		header: t("admin.groups.members.columns.type"),
+		id: "type",
+		render: (member) => t(`admin.common.identity_types.${member.type}`)
+	}];
+	if (onRemove) columns.push({
+		header: t("admin.common.columns.actions"),
+		id: "actions",
+		render: (member) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Button.default, {
+			variant: "text",
+			color: "error",
+			size: "small",
+			disabled: isMutating,
+			"aria-label": t("admin.groups.members.remove_label", { name: member.display ?? member.id }),
+			onClick: () => onRemove(member),
+			children: t("admin.common.actions.remove")
+		})
+	});
+	if (children) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+		className,
+		children: children({
+			candidates: onAdd ? candidates : void 0,
+			columns,
+			error,
+			isLoading,
+			isMutating,
+			members,
+			onAdd: candidates ? onAdd : void 0,
+			onRemove
+		})
+	});
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(require_AdminSection.default, {
+		block: "group-members",
+		className,
+		title: title ?? t("admin.groups.members.title"),
+		description,
+		headingLevel: 3,
+		preferences,
+		children: [onAdd && candidates && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_IdentityPicker.default, {
+			addLabel: t("admin.groups.members.add"),
+			candidates,
+			excludedIds: members.map((member) => member.id),
+			isSubmitting: isMutating,
+			onAdd,
+			types: [
+				"user",
+				"agent",
+				"group"
+			].filter((type) => candidates[type] !== void 0).map((type) => ({
+				label: t(`admin.common.identity_types.${type}`),
+				value: type
+			}))
+		}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_DataTable.default, {
+			caption: title?.length ? title : t("admin.groups.members.title"),
+			columns,
+			rows: members,
+			getRowId: (member) => `${member.type}:${member.id}`,
+			isLoading,
+			error,
+			emptyText: t("admin.groups.members.empty")
+		})]
+	});
+};
+var BaseGroupMembers_default = BaseGroupMembers;
+
+//#endregion
+exports.default = BaseGroupMembers_default;
+//# sourceMappingURL=BaseGroupMembers.cjs.map

package/dist/cjs/components/admin/GroupMembers/BaseGroupMembers.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseGroupMembers.cjs","names":["BaseGroupMembers: FC<BaseGroupMembersProps>","useTranslation","columns: DataTableColumn<GroupMember>[]","Button","AdminSection","IdentityPicker","DataTable"],"sources":["../../../../../src/components/admin/GroupMembers/BaseGroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {GroupMember, GroupMemberType, Preferences} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Button from '../../primitives/Button/Button';\nimport DataTable, {DataTableColumn} from '../../primitives/DataTable/DataTable';\nimport AdminSection from '../shared/AdminSection';\nimport IdentityPicker, {IdentityCandidate} from '../shared/IdentityPicker';\n\n/**\n * What {@link BaseGroupMembers} hands its `children` render function, so the members can be shown\n * with any UI, such as a third-party data grid.\n */\nexport interface BaseGroupMembersRenderProps {\n  /**\n   * The identities that can be added, keyed by member type. Undefined when adding is not allowed.\n   */\n  candidates?: Partial<Record<GroupMemberType, IdentityCandidate[]>>;\n  /**\n   * The columns the default table shows, including the remove action when removing is allowed.\n   */\n  columns: DataTableColumn<GroupMember>[];\n  error: string | null;\n  isLoading: boolean;\n  isMutating: boolean;\n  members: GroupMember[];\n  /**\n   * Adds a member. Undefined when adding is not allowed.\n   */\n  onAdd?: (member: Pick<GroupMember, 'id' | 'type'>) => void;\n  /**\n   * Removes a member. Undefined when removing is not allowed.\n   */\n  onRemove?: (member: GroupMember) => void;\n}\n\nexport interface BaseGroupMembersProps {\n  /**\n   * The identities that can be added, keyed by member type. Adding is hidden when omitted.\n   */\n  candidates?: Partial<Record<GroupMemberType, IdentityCandidate[]>>;\n  /**\n   * Renders custom UI in place of the default table and picker. Receives the members, the default\n   * columns, the candidates, the loading and error state, and the add and remove handlers.\n   */\n  children?: (props: BaseGroupMembersRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isLoading?: boolean;\n  isMutating?: boolean;\n  members: GroupMember[];\n  onAdd?: (member: Pick<GroupMember, 'id' | 'type'>) => void;\n  /**\n   * Removes a member. The remove action is hidden when omitted.\n   */\n  onRemove?: (member: GroupMember) => void;\n  preferences?: Preferences;\n  title?: string;\n}\n\n/**\n * Lists the members of a group and lets the caller add and remove them. Holds no data of its own.\n */\nconst BaseGroupMembers: FC<BaseGroupMembersProps> = ({\n  candidates,\n  children,\n  className,\n  description,\n  error = null,\n  isLoading = false,\n  isMutating = false,\n  members,\n  onAdd,\n  onRemove,\n  preferences,\n  title,\n}: BaseGroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n\n  const columns: DataTableColumn<GroupMember>[] = [\n    {\n      header: t('admin.groups.members.columns.member'),\n      id: 'member',\n      render: (member: GroupMember): ReactNode => member.display ?? member.id,\n    },\n    {\n      header: t('admin.groups.members.columns.type'),\n      id: 'type',\n      render: (member: GroupMember): ReactNode => t(`admin.common.identity_types.${member.type}`),\n    },\n  ];\n\n  if (onRemove) {\n    columns.push({\n      header: t('admin.common.columns.actions'),\n      id: 'actions',\n      render: (member: GroupMember): ReactNode => (\n        <Button\n          variant=\"text\"\n          color=\"error\"\n          size=\"small\"\n          disabled={isMutating}\n          aria-label={t('admin.groups.members.remove_label', {name: member.display ?? member.id})}\n          onClick={(): void => onRemove(member)}\n        >\n          {t('admin.common.actions.remove')}\n        </Button>\n      ),\n    });\n  }\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          candidates: onAdd ? candidates : undefined,\n          columns,\n          error,\n          isLoading,\n          isMutating,\n          members,\n          onAdd: candidates ? onAdd : undefined,\n          onRemove,\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"group-members\"\n      className={className}\n      title={title ?? t('admin.groups.members.title')}\n      description={description}\n      headingLevel={3}\n      preferences={preferences}\n    >\n      {onAdd && candidates && (\n        <IdentityPicker<GroupMemberType>\n          addLabel={t('admin.groups.members.add')}\n          candidates={candidates}\n          excludedIds={members.map((member: GroupMember) => member.id)}\n          isSubmitting={isMutating}\n          onAdd={onAdd}\n          types={(['user', 'agent', 'group'] as GroupMemberType[])\n            .filter((type: GroupMemberType) => candidates[type] !== undefined)\n            .map((type: GroupMemberType) => ({label: t(`admin.common.identity_types.${type}`), value: type}))}\n        />\n      )}\n      <DataTable\n        caption={title?.length ? title : t('admin.groups.members.title')}\n        columns={columns}\n        rows={members}\n        getRowId={(member: GroupMember): string => `${member.type}:${member.id}`}\n        isLoading={isLoading}\n        error={error}\n        emptyText={t('admin.groups.members.empty')}\n      />\n    </AdminSection>\n  );\n};\n\nexport default BaseGroupMembers;\n"],"mappings":";;;;;;;;;;;;;AAkEA,MAAMA,oBAA+C,EACnD,YACA,UACA,WACA,aACA,QAAQ,MACR,YAAY,OACZ,aAAa,OACb,SACA,OACA,UACA,aACA,YACyC;CACzC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAE7C,MAAMC,UAA0C,CAC9C;EACE,QAAQ,EAAE,sCAAsC;EAChD,IAAI;EACJ,SAAS,WAAmC,OAAO,WAAW,OAAO;EACtE,EACD;EACE,QAAQ,EAAE,oCAAoC;EAC9C,IAAI;EACJ,SAAS,WAAmC,EAAE,+BAA+B,OAAO,OAAO;EAC5F,CACF;AAED,KAAI,SACF,SAAQ,KAAK;EACX,QAAQ,EAAE,+BAA+B;EACzC,IAAI;EACJ,SAAS,WACP,2CAACC;GACC,SAAQ;GACR,OAAM;GACN,MAAK;GACL,UAAU;GACV,cAAY,EAAE,qCAAqC,EAAC,MAAM,OAAO,WAAW,OAAO,IAAG,CAAC;GACvF,eAAqB,SAAS,OAAO;aAEpC,EAAE,8BAA8B;IAC1B;EAEZ,CAAC;AAGJ,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR,YAAY,QAAQ,aAAa;GACjC;GACA;GACA;GACA;GACA;GACA,OAAO,aAAa,QAAQ;GAC5B;GACD,CAAC;GACE;AAIV,QACE,4CAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,6BAA6B;EAClC;EACb,cAAc;EACD;aAEZ,SAAS,cACR,2CAACC;GACC,UAAU,EAAE,2BAA2B;GAC3B;GACZ,aAAa,QAAQ,KAAK,WAAwB,OAAO,GAAG;GAC5D,cAAc;GACP;GACP,OAAQ;IAAC;IAAQ;IAAS;IAAQ,CAC/B,QAAQ,SAA0B,WAAW,UAAU,OAAU,CACjE,KAAK,UAA2B;IAAC,OAAO,EAAE,+BAA+B,OAAO;IAAE,OAAO;IAAK,EAAE;IACnG,EAEJ,2CAACC;GACC,SAAS,OAAO,SAAS,QAAQ,EAAE,6BAA6B;GACvD;GACT,MAAM;GACN,WAAW,WAAgC,GAAG,OAAO,KAAK,GAAG,OAAO;GACzD;GACJ;GACP,WAAW,EAAE,6BAA6B;IAC1C;GACW;;AAInB,+BAAe"}

package/dist/cjs/components/admin/GroupMembers/GroupMembers.cjs

@@ -0,0 +1,67 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_useGetUsers = require('../../../hooks/management/users/useGetUsers.cjs');
+const require_useGetAgents = require('../../../hooks/management/agents/useGetAgents.cjs');
+const require_useGetGroupMembers = require('../../../hooks/management/groups/useGetGroupMembers.cjs');
+const require_useAddGroupMembers = require('../../../hooks/management/groups/useAddGroupMembers.cjs');
+const require_useRemoveGroupMembers = require('../../../hooks/management/groups/useRemoveGroupMembers.cjs');
+const require_BaseGroupMembers = require('./BaseGroupMembers.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/GroupMembers/GroupMembers.tsx
+/**
+* Lists the users and agents in a group, and lets the signed-in user add and remove them.
+*
+* @example
+* ```tsx
+* <GroupMembers groupId={groupId} />
+* ```
+*/
+const GroupMembers = ({ editable = false, groupId, preferences,...rest }) => {
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const members = require_useGetGroupMembers.default(groupId, { limit: 100 });
+	const users = require_useGetUsers.default({ limit: 100 }, { enabled: editable });
+	const agents = require_useGetAgents.default({ limit: 100 }, { enabled: editable });
+	const add = require_useAddGroupMembers.default();
+	const remove = require_useRemoveGroupMembers.default();
+	const candidates = (0, react.useMemo)(() => ({
+		agent: (agents.data?.agents ?? []).map((agent) => ({
+			id: agent.id,
+			label: agent.name
+		})),
+		user: (users.data?.users ?? []).map((user) => ({
+			id: user.id,
+			label: (0, __thunderid_browser.resolveManagedIdentityName)(user)
+		}))
+	}), [agents.data, users.data]);
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseGroupMembers.default, {
+		members: members.data?.members ?? [],
+		isLoading: members.isLoading,
+		isMutating: add.isLoading || remove.isLoading,
+		error: (0, __thunderid_browser.toManagementErrorMessage)(t, members.error, "admin.groups.members.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, add.error ?? remove.error, "admin.groups.members.update_error"),
+		candidates: editable ? candidates : void 0,
+		onAdd: editable ? (member) => void add.mutate({
+			groupId,
+			members: [member]
+		}) : void 0,
+		onRemove: editable ? (member) => void remove.mutate({
+			groupId,
+			members: [{
+				id: member.id,
+				type: member.type
+			}]
+		}) : void 0,
+		preferences,
+		...rest
+	});
+};
+var GroupMembers_default = GroupMembers;
+
+//#endregion
+exports.default = GroupMembers_default;
+//# sourceMappingURL=GroupMembers.cjs.map

package/dist/cjs/components/admin/GroupMembers/GroupMembers.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupMembers.cjs","names":["GroupMembers: FC<GroupMembersProps>","useTranslation","useGetGroupMembers","useGetUsers","useGetAgents","useAddGroupMembers","useRemoveGroupMembers","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n  BasicAgent,\n  GroupMember,\n  ManagedUser,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useGetAgents from '../../../hooks/management/agents/useGetAgents';\nimport useAddGroupMembers from '../../../hooks/management/groups/useAddGroupMembers';\nimport useGetGroupMembers from '../../../hooks/management/groups/useGetGroupMembers';\nimport useRemoveGroupMembers from '../../../hooks/management/groups/useRemoveGroupMembers';\nimport useGetUsers from '../../../hooks/management/users/useGetUsers';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  editable = false,\n  groupId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const members = useGetGroupMembers(groupId, {limit: 100});\n  const users = useGetUsers({limit: 100}, {enabled: editable});\n  const agents = useGetAgents({limit: 100}, {enabled: editable});\n  const add = useAddGroupMembers();\n  const remove = useRemoveGroupMembers();\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, users.data],\n  );\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAwCA,MAAMA,gBAAuC,EAC3C,WAAW,OACX,SACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,UAAUC,mCAAmB,SAAS,EAAC,OAAO,KAAI,CAAC;CACzD,MAAM,QAAQC,4BAAY,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC5D,MAAM,SAASC,6BAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,MAAMC,oCAAoB;CAChC,MAAM,SAASC,uCAAuB;CAEtC,MAAMC,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD,CAAC,OAAO,MAAM,MAAM,KAAK,CAC1B;AAED,QACE,2CAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,yDAC2B,GAAG,QAAQ,OAAO,6BAA6B,sDAC/C,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}

package/dist/cjs/components/admin/RoleAssignments/BaseRoleAssignments.cjs

@@ -0,0 +1,116 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_Button = require('../../primitives/Button/Button.cjs');
+const require_Select = require('../../primitives/Select/Select.cjs');
+const require_DataTable = require('../../primitives/DataTable/DataTable.cjs');
+const require_AdminSection = require('../shared/AdminSection.cjs');
+const require_IdentityPicker = require('../shared/IdentityPicker.cjs');
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/RoleAssignments/BaseRoleAssignments.tsx
+/**
+* Lists the users, groups and agents a role is assigned to, and lets the caller assign and unassign
+* it. Holds no data of its own.
+*/
+const BaseRoleAssignments = ({ assignments, candidates, children, className, description, error = null, isLoading = false, isMutating = false, onAssign, onTypeFilterChange, onUnassign, preferences, title, typeFilter = null }) => {
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const columns = [{
+		header: t("admin.roles.assignments.columns.assignee"),
+		id: "assignee",
+		render: (assignment) => assignment.display ?? assignment.id
+	}, {
+		header: t("admin.roles.assignments.columns.type"),
+		id: "type",
+		render: (assignment) => t(`admin.common.identity_types.${assignment.type}`)
+	}];
+	if (onUnassign) columns.push({
+		header: t("admin.common.columns.actions"),
+		id: "actions",
+		render: (assignment) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Button.default, {
+			variant: "text",
+			color: "error",
+			size: "small",
+			disabled: isMutating,
+			"aria-label": t("admin.roles.assignments.remove_label", { name: assignment.display ?? assignment.id }),
+			onClick: () => onUnassign(assignment),
+			children: t("admin.common.actions.remove")
+		})
+	});
+	if (children) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+		className,
+		children: children({
+			assignments,
+			candidates: onAssign ? candidates : void 0,
+			columns,
+			error,
+			isLoading,
+			isMutating,
+			onAssign: candidates ? onAssign : void 0,
+			onTypeFilterChange,
+			onUnassign,
+			typeFilter
+		})
+	});
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(require_AdminSection.default, {
+		block: "role-assignments",
+		className,
+		title: title ?? t("admin.roles.assignments.title"),
+		description,
+		headingLevel: 3,
+		preferences,
+		children: [
+			onAssign && candidates && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_IdentityPicker.default, {
+				addLabel: t("admin.roles.assignments.add"),
+				candidates,
+				excludedIds: assignments.map((assignment) => assignment.id),
+				isSubmitting: isMutating,
+				onAdd: onAssign,
+				types: [
+					"user",
+					"group",
+					"agent",
+					"app"
+				].filter((type) => candidates[type] !== void 0).map((type) => ({
+					label: t(`admin.common.identity_types.${type}`),
+					value: type
+				}))
+			}),
+			onTypeFilterChange && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				style: { maxWidth: "16rem" },
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Select.default, {
+					label: t("admin.common.filters.type"),
+					name: "assigneeType",
+					value: typeFilter ?? "",
+					options: [{
+						label: t("admin.common.filters.all_types"),
+						value: ""
+					}, ...[
+						"user",
+						"group",
+						"agent",
+						"app"
+					].map((type) => ({
+						label: t(`admin.common.identity_types.${type}`),
+						value: type
+					}))],
+					onChange: (event) => onTypeFilterChange(event.target.value || null)
+				})
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_DataTable.default, {
+				caption: title?.length ? title : t("admin.roles.assignments.title"),
+				columns,
+				rows: assignments,
+				getRowId: (assignment) => `${assignment.type}:${assignment.id}`,
+				isLoading,
+				error,
+				emptyText: t("admin.roles.assignments.empty")
+			})
+		]
+	});
+};
+var BaseRoleAssignments_default = BaseRoleAssignments;
+
+//#endregion
+exports.default = BaseRoleAssignments_default;
+//# sourceMappingURL=BaseRoleAssignments.cjs.map

package/dist/cjs/components/admin/RoleAssignments/BaseRoleAssignments.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseRoleAssignments.cjs","names":["BaseRoleAssignments: FC<BaseRoleAssignmentsProps>","useTranslation","columns: DataTableColumn<RoleAssignment>[]","Button","AdminSection","IdentityPicker","Select","DataTable"],"sources":["../../../../../src/components/admin/RoleAssignments/BaseRoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Preferences, RoleAssigneeType, RoleAssignment, RoleAssignmentInput} from '@thunderid/browser';\nimport {ChangeEvent, FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Button from '../../primitives/Button/Button';\nimport DataTable, {DataTableColumn} from '../../primitives/DataTable/DataTable';\nimport Select from '../../primitives/Select/Select';\nimport AdminSection from '../shared/AdminSection';\nimport IdentityPicker, {IdentityCandidate} from '../shared/IdentityPicker';\n\n/**\n * What {@link BaseRoleAssignments} hands its `children` render function, so the assignments can be\n * shown with any UI, such as a third-party data grid.\n */\nexport interface BaseRoleAssignmentsRenderProps {\n  assignments: RoleAssignment[];\n  /**\n   * The identities the role can be assigned to, keyed by assignee type. Undefined when assigning is\n   * not allowed.\n   */\n  candidates?: Partial<Record<RoleAssigneeType, IdentityCandidate[]>>;\n  /**\n   * The columns the default table shows, including the remove action when unassigning is allowed.\n   */\n  columns: DataTableColumn<RoleAssignment>[];\n  error: string | null;\n  isLoading: boolean;\n  isMutating: boolean;\n  /**\n   * Assigns the role. Undefined when assigning is not allowed.\n   */\n  onAssign?: (assignment: RoleAssignmentInput) => void;\n  /**\n   * Shows only one assignee type, or every type with `null`. Undefined when the list cannot be filtered.\n   */\n  onTypeFilterChange?: (type: RoleAssigneeType | null) => void;\n  /**\n   * Removes an assignment. Undefined when unassigning is not allowed.\n   */\n  onUnassign?: (assignment: RoleAssignment) => void;\n  /**\n   * The assignee type the list is narrowed to, or `null` for every type.\n   */\n  typeFilter: RoleAssigneeType | null;\n}\n\nexport interface BaseRoleAssignmentsProps {\n  assignments: RoleAssignment[];\n  /**\n   * The identities the role can be assigned to, keyed by assignee type. Assigning is hidden when omitted.\n   */\n  candidates?: Partial<Record<RoleAssigneeType, IdentityCandidate[]>>;\n  /**\n   * Renders custom UI in place of the default table and picker. Receives the assignments, the\n   * default columns, the candidates, the loading and error state, and the assign and unassign\n   * handlers.\n   */\n  children?: (props: BaseRoleAssignmentsRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isLoading?: boolean;\n  isMutating?: boolean;\n  onAssign?: (assignment: RoleAssignmentInput) => void;\n  /**\n   * Narrows the list to one assignee type, on the server, or back to every type with `null`. The type\n   * filter shows only when set.\n   */\n  onTypeFilterChange?: (type: RoleAssigneeType | null) => void;\n  /**\n   * Removes an assignment. The remove action is hidden when omitted.\n   */\n  onUnassign?: (assignment: RoleAssignment) => void;\n  preferences?: Preferences;\n  title?: string;\n  /**\n   * The assignee type the list is narrowed to, or `null` for every type.\n   */\n  typeFilter?: RoleAssigneeType | null;\n}\n\n/**\n * Lists the users, groups and agents a role is assigned to, and lets the caller assign and unassign\n * it. Holds no data of its own.\n */\nconst BaseRoleAssignments: FC<BaseRoleAssignmentsProps> = ({\n  assignments,\n  candidates,\n  children,\n  className,\n  description,\n  error = null,\n  isLoading = false,\n  isMutating = false,\n  onAssign,\n  onTypeFilterChange,\n  onUnassign,\n  preferences,\n  title,\n  typeFilter = null,\n}: BaseRoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n\n  const columns: DataTableColumn<RoleAssignment>[] = [\n    {\n      header: t('admin.roles.assignments.columns.assignee'),\n      id: 'assignee',\n      render: (assignment: RoleAssignment): ReactNode => assignment.display ?? assignment.id,\n    },\n    {\n      header: t('admin.roles.assignments.columns.type'),\n      id: 'type',\n      render: (assignment: RoleAssignment): ReactNode => t(`admin.common.identity_types.${assignment.type}`),\n    },\n  ];\n\n  if (onUnassign) {\n    columns.push({\n      header: t('admin.common.columns.actions'),\n      id: 'actions',\n      render: (assignment: RoleAssignment): ReactNode => (\n        <Button\n          variant=\"text\"\n          color=\"error\"\n          size=\"small\"\n          disabled={isMutating}\n          aria-label={t('admin.roles.assignments.remove_label', {name: assignment.display ?? assignment.id})}\n          onClick={(): void => onUnassign(assignment)}\n        >\n          {t('admin.common.actions.remove')}\n        </Button>\n      ),\n    });\n  }\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          assignments,\n          candidates: onAssign ? candidates : undefined,\n          columns,\n          error,\n          isLoading,\n          isMutating,\n          onAssign: candidates ? onAssign : undefined,\n          onTypeFilterChange,\n          onUnassign,\n          typeFilter,\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"role-assignments\"\n      className={className}\n      title={title ?? t('admin.roles.assignments.title')}\n      description={description}\n      headingLevel={3}\n      preferences={preferences}\n    >\n      {onAssign && candidates && (\n        <IdentityPicker<RoleAssigneeType>\n          addLabel={t('admin.roles.assignments.add')}\n          candidates={candidates}\n          excludedIds={assignments.map((assignment: RoleAssignment) => assignment.id)}\n          isSubmitting={isMutating}\n          onAdd={onAssign}\n          types={(['user', 'group', 'agent', 'app'] as RoleAssigneeType[])\n            .filter((type: RoleAssigneeType) => candidates[type] !== undefined)\n            .map((type: RoleAssigneeType) => ({label: t(`admin.common.identity_types.${type}`), value: type}))}\n        />\n      )}\n      {onTypeFilterChange && (\n        <div style={{maxWidth: '16rem'}}>\n          <Select\n            label={t('admin.common.filters.type')}\n            name=\"assigneeType\"\n            value={typeFilter ?? ''}\n            options={[\n              {label: t('admin.common.filters.all_types'), value: ''},\n              ...(['user', 'group', 'agent', 'app'] as RoleAssigneeType[]).map((type: RoleAssigneeType) => ({\n                label: t(`admin.common.identity_types.${type}`),\n                value: type,\n              })),\n            ]}\n            onChange={(event: ChangeEvent<HTMLSelectElement>): void =>\n              onTypeFilterChange((event.target.value || null) as RoleAssigneeType | null)\n            }\n          />\n        </div>\n      )}\n      <DataTable\n        caption={title?.length ? title : t('admin.roles.assignments.title')}\n        columns={columns}\n        rows={assignments}\n        getRowId={(assignment: RoleAssignment): string => `${assignment.type}:${assignment.id}`}\n        isLoading={isLoading}\n        error={error}\n        emptyText={t('admin.roles.assignments.empty')}\n      />\n    </AdminSection>\n  );\n};\n\nexport default BaseRoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;AAuFA,MAAMA,uBAAqD,EACzD,aACA,YACA,UACA,WACA,aACA,QAAQ,MACR,YAAY,OACZ,aAAa,OACb,UACA,oBACA,YACA,aACA,OACA,aAAa,WAC+B;CAC5C,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAE7C,MAAMC,UAA6C,CACjD;EACE,QAAQ,EAAE,2CAA2C;EACrD,IAAI;EACJ,SAAS,eAA0C,WAAW,WAAW,WAAW;EACrF,EACD;EACE,QAAQ,EAAE,uCAAuC;EACjD,IAAI;EACJ,SAAS,eAA0C,EAAE,+BAA+B,WAAW,OAAO;EACvG,CACF;AAED,KAAI,WACF,SAAQ,KAAK;EACX,QAAQ,EAAE,+BAA+B;EACzC,IAAI;EACJ,SAAS,eACP,2CAACC;GACC,SAAQ;GACR,OAAM;GACN,MAAK;GACL,UAAU;GACV,cAAY,EAAE,wCAAwC,EAAC,MAAM,WAAW,WAAW,WAAW,IAAG,CAAC;GAClG,eAAqB,WAAW,WAAW;aAE1C,EAAE,8BAA8B;IAC1B;EAEZ,CAAC;AAGJ,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA,YAAY,WAAW,aAAa;GACpC;GACA;GACA;GACA;GACA,UAAU,aAAa,WAAW;GAClC;GACA;GACA;GACD,CAAC;GACE;AAIV,QACE,4CAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,gCAAgC;EACrC;EACb,cAAc;EACD;;GAEZ,YAAY,cACX,2CAACC;IACC,UAAU,EAAE,8BAA8B;IAC9B;IACZ,aAAa,YAAY,KAAK,eAA+B,WAAW,GAAG;IAC3E,cAAc;IACd,OAAO;IACP,OAAQ;KAAC;KAAQ;KAAS;KAAS;KAAM,CACtC,QAAQ,SAA2B,WAAW,UAAU,OAAU,CAClE,KAAK,UAA4B;KAAC,OAAO,EAAE,+BAA+B,OAAO;KAAE,OAAO;KAAK,EAAE;KACpG;GAEH,sBACC,2CAAC;IAAI,OAAO,EAAC,UAAU,SAAQ;cAC7B,2CAACC;KACC,OAAO,EAAE,4BAA4B;KACrC,MAAK;KACL,OAAO,cAAc;KACrB,SAAS,CACP;MAAC,OAAO,EAAE,iCAAiC;MAAE,OAAO;MAAG,EACvD,GAAI;MAAC;MAAQ;MAAS;MAAS;MAAM,CAAwB,KAAK,UAA4B;MAC5F,OAAO,EAAE,+BAA+B,OAAO;MAC/C,OAAO;MACR,EAAE,CACJ;KACD,WAAW,UACT,mBAAoB,MAAM,OAAO,SAAS,KAAiC;MAE7E;KACE;GAER,2CAACC;IACC,SAAS,OAAO,SAAS,QAAQ,EAAE,gCAAgC;IAC1D;IACT,MAAM;IACN,WAAW,eAAuC,GAAG,WAAW,KAAK,GAAG,WAAW;IACxE;IACJ;IACP,WAAW,EAAE,gCAAgC;KAC7C;;GACW;;AAInB,kCAAe"}

package/dist/cjs/components/admin/RoleAssignments/RoleAssignments.cjs

@@ -0,0 +1,84 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_useGetUsers = require('../../../hooks/management/users/useGetUsers.cjs');
+const require_useGetAgents = require('../../../hooks/management/agents/useGetAgents.cjs');
+const require_useGetRoleAssignments = require('../../../hooks/management/roles/useGetRoleAssignments.cjs');
+const require_useAddRoleAssignments = require('../../../hooks/management/roles/useAddRoleAssignments.cjs');
+const require_useRemoveRoleAssignments = require('../../../hooks/management/roles/useRemoveRoleAssignments.cjs');
+const require_useGetGroups = require('../../../hooks/management/groups/useGetGroups.cjs');
+const require_BaseRoleAssignments = require('./BaseRoleAssignments.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/RoleAssignments/RoleAssignments.tsx
+/**
+* Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or
+* remove it from them.
+*
+* @example
+* ```tsx
+* <RoleAssignments roleId={roleId} />
+* ```
+*/
+const RoleAssignments = ({ editable = false, filterable = true, preferences, roleId,...rest }) => {
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const [typeFilter, setTypeFilter] = (0, react.useState)(null);
+	const assignments = require_useGetRoleAssignments.default(roleId, {
+		limit: 100,
+		type: typeFilter ?? void 0
+	});
+	const users = require_useGetUsers.default({ limit: 100 }, { enabled: editable });
+	const groups = require_useGetGroups.default({ limit: 100 }, { enabled: editable });
+	const agents = require_useGetAgents.default({ limit: 100 }, { enabled: editable });
+	const assign = require_useAddRoleAssignments.default();
+	const unassign = require_useRemoveRoleAssignments.default();
+	const candidates = (0, react.useMemo)(() => ({
+		agent: (agents.data?.agents ?? []).map((agent) => ({
+			id: agent.id,
+			label: agent.name
+		})),
+		group: (groups.data?.groups ?? []).map((group) => ({
+			id: group.id,
+			label: group.name
+		})),
+		user: (users.data?.users ?? []).map((user) => ({
+			id: user.id,
+			label: (0, __thunderid_browser.resolveManagedIdentityName)(user)
+		}))
+	}), [
+		agents.data,
+		groups.data,
+		users.data
+	]);
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseRoleAssignments.default, {
+		assignments: assignments.data?.assignments ?? [],
+		isLoading: assignments.isLoading,
+		isMutating: assign.isLoading || unassign.isLoading,
+		error: (0, __thunderid_browser.toManagementErrorMessage)(t, assignments.error, "admin.roles.assignments.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, assign.error ?? unassign.error, "admin.roles.assignments.update_error"),
+		candidates: editable ? candidates : void 0,
+		onAssign: editable ? (assignment) => void assign.mutate({
+			assignments: [assignment],
+			roleId
+		}) : void 0,
+		onUnassign: editable ? (assignment) => void unassign.mutate({
+			assignments: [{
+				id: assignment.id,
+				type: assignment.type
+			}],
+			roleId
+		}) : void 0,
+		typeFilter,
+		onTypeFilterChange: filterable ? setTypeFilter : void 0,
+		preferences,
+		...rest
+	});
+};
+var RoleAssignments_default = RoleAssignments;
+
+//#endregion
+exports.default = RoleAssignments_default;
+//# sourceMappingURL=RoleAssignments.cjs.map

package/dist/cjs/components/admin/RoleAssignments/RoleAssignments.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"RoleAssignments.cjs","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","useGetRoleAssignments","useGetUsers","useGetGroups","useGetAgents","useAddRoleAssignments","useRemoveRoleAssignments","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n  BasicAgent,\n  Group,\n  ManagedUser,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useGetAgents from '../../../hooks/management/agents/useGetAgents';\nimport useGetGroups from '../../../hooks/management/groups/useGetGroups';\nimport useAddRoleAssignments from '../../../hooks/management/roles/useAddRoleAssignments';\nimport useGetRoleAssignments from '../../../hooks/management/roles/useGetRoleAssignments';\nimport useRemoveRoleAssignments from '../../../hooks/management/roles/useRemoveRoleAssignments';\nimport useGetUsers from '../../../hooks/management/users/useGetUsers';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  editable = false,\n  filterable = true,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const assignments = useGetRoleAssignments(roleId, {limit: 100, type: typeFilter ?? undefined});\n  const users = useGetUsers({limit: 100}, {enabled: editable});\n  const groups = useGetGroups({limit: 100}, {enabled: editable});\n  const agents = useGetAgents({limit: 100}, {enabled: editable});\n  const assign = useAddRoleAssignments();\n  const unassign = useRemoveRoleAssignments();\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      group: (groups.data?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, groups.data, users.data],\n  );\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA0DA,MAAMA,mBAA6C,EACjD,WAAW,OACX,aAAa,MACb,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,qCAAmD,KAAK;CAC3E,MAAM,cAAcC,sCAAsB,QAAQ;EAAC,OAAO;EAAK,MAAM,cAAc;EAAU,CAAC;CAC9F,MAAM,QAAQC,4BAAY,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC5D,MAAM,SAASC,6BAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,SAASC,6BAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,SAASC,uCAAuB;CACtC,MAAM,WAAWC,0CAA0B;CAE3C,MAAMC,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAkB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAC7F,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD;EAAC,OAAO;EAAM,OAAO;EAAM,MAAM;EAAK,CACvC;AAED,QACE,2CAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,yDAC2B,GAAG,YAAY,OAAO,gCAAgC,sDACtD,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}

package/dist/cjs/components/admin/RoleCreate/BaseRoleCreate.cjs

@@ -0,0 +1,103 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTheme = require('../../../contexts/Theme/useTheme.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_Button = require('../../primitives/Button/Button.cjs');
+const require_Alert = require('../../primitives/Alert/Alert.cjs');
+const require_TextField = require('../../primitives/TextField/TextField.cjs');
+const require_AdminSection_styles = require('../shared/AdminSection.styles.cjs');
+const require_AdminSection = require('../shared/AdminSection.cjs');
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/RoleCreate/BaseRoleCreate.tsx
+/**
+* A form that collects a new role's name and description. Holds no data of its own: handle the
+* submission.
+*/
+const BaseRoleCreate = ({ children, className, description, error = null, isSubmitting = false, onCancel, onSubmit, preferences, title }) => {
+	const { theme, colorScheme } = require_useTheme.default();
+	const styles = require_AdminSection_styles.default(theme, colorScheme);
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const [name, setName] = (0, react.useState)("");
+	const [roleDescription, setRoleDescription] = (0, react.useState)("");
+	const isValid = name.trim().length > 0;
+	const submit = () => {
+		if (isValid) onSubmit({
+			description: roleDescription.trim() || void 0,
+			name: name.trim()
+		});
+	};
+	const handleSubmit = (event) => {
+		event.preventDefault();
+		submit();
+	};
+	if (children) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+		className,
+		children: children({
+			error,
+			handleInputChange: (field, value) => field === "name" ? setName(value) : setRoleDescription(value),
+			handleSubmit: submit,
+			isSubmitting,
+			isValid,
+			onCancel,
+			values: {
+				description: roleDescription,
+				name
+			}
+		})
+	});
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminSection.default, {
+		block: "role-create",
+		className,
+		title: title ?? t("admin.roles.create.title"),
+		description,
+		preferences,
+		children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("form", {
+			className: styles["form"],
+			onSubmit: handleSubmit,
+			noValidate: true,
+			children: [
+				error && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Alert.default, {
+					variant: "error",
+					role: "alert",
+					children: error
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_TextField.default, {
+					name: "name",
+					label: t("admin.roles.create.fields.name"),
+					required: true,
+					value: name,
+					onChange: (event) => setName(event.target.value)
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_TextField.default, {
+					name: "description",
+					label: t("admin.roles.create.fields.description"),
+					value: roleDescription,
+					onChange: (event) => setRoleDescription(event.target.value)
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: styles["formActions"],
+					children: [onCancel && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Button.default, {
+						type: "button",
+						variant: "text",
+						onClick: onCancel,
+						disabled: isSubmitting,
+						children: t("admin.common.actions.cancel")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Button.default, {
+						type: "submit",
+						loading: isSubmitting,
+						disabled: !isValid || isSubmitting,
+						children: t("admin.roles.create.submit")
+					})]
+				})
+			]
+		})
+	});
+};
+var BaseRoleCreate_default = BaseRoleCreate;
+
+//#endregion
+exports.default = BaseRoleCreate_default;
+//# sourceMappingURL=BaseRoleCreate.cjs.map

package/dist/cjs/components/admin/RoleCreate/BaseRoleCreate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseRoleCreate.cjs","names":["BaseRoleCreate: FC<BaseRoleCreateProps>","useTheme","styles: Record<string, string>","useStyles","useTranslation","isValid: boolean","AdminSection","Alert","TextField","Button"],"sources":["../../../../../src/components/admin/RoleCreate/BaseRoleCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Preferences} from '@thunderid/browser';\nimport {ChangeEvent, FC, FormEvent, ReactElement, ReactNode, useState} from 'react';\nimport useTheme from '../../../contexts/Theme/useTheme';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport Button from '../../primitives/Button/Button';\nimport TextField from '../../primitives/TextField/TextField';\nimport AdminSection from '../shared/AdminSection';\nimport useStyles from '../shared/AdminSection.styles';\n\n/**\n * The role {@link BaseRoleCreate} submits. The organization unit is added by the caller.\n */\nexport interface RoleCreateSubmission {\n  description?: string;\n  name: string;\n}\n\n/**\n * What {@link BaseRoleCreate} hands its `children` render function, so the form can be built with any UI.\n */\nexport interface BaseRoleCreateRenderProps {\n  error: string | null;\n  /**\n   * Sets one field of the form.\n   */\n  handleInputChange: (field: 'description' | 'name', value: string) => void;\n  /**\n   * Submits the current values. Does nothing while they are not valid.\n   */\n  handleSubmit: () => void;\n  isSubmitting: boolean;\n  /**\n   * Whether the values can be submitted.\n   */\n  isValid: boolean;\n  onCancel?: () => void;\n  values: {description: string; name: string};\n}\n\nexport interface BaseRoleCreateProps {\n  /**\n   * Renders custom UI in place of the default form. Receives the values, their setters, the submit\n   * handler and the submission state.\n   */\n  children?: (props: BaseRoleCreateRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isSubmitting?: boolean;\n  onCancel?: () => void;\n  onSubmit: (role: RoleCreateSubmission) => void;\n  preferences?: Preferences;\n  title?: string;\n}\n\n/**\n * A form that collects a new role's name and description. Holds no data of its own: handle the\n * submission.\n */\nconst BaseRoleCreate: FC<BaseRoleCreateProps> = ({\n  children,\n  className,\n  description,\n  error = null,\n  isSubmitting = false,\n  onCancel,\n  onSubmit,\n  preferences,\n  title,\n}: BaseRoleCreateProps): ReactElement => {\n  const {theme, colorScheme} = useTheme();\n  const styles: Record<string, string> = useStyles(theme, colorScheme);\n  const {t} = useTranslation(preferences?.i18n);\n  const [name, setName] = useState<string>('');\n  const [roleDescription, setRoleDescription] = useState<string>('');\n\n  const isValid: boolean = name.trim().length > 0;\n\n  const submit = (): void => {\n    if (isValid) {\n      onSubmit({description: roleDescription.trim() || undefined, name: name.trim()});\n    }\n  };\n\n  const handleSubmit = (event: FormEvent<HTMLFormElement>): void => {\n    event.preventDefault();\n    submit();\n  };\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          error,\n          handleInputChange: (field: 'description' | 'name', value: string): void =>\n            field === 'name' ? setName(value) : setRoleDescription(value),\n          handleSubmit: submit,\n          isSubmitting,\n          isValid,\n          onCancel,\n          values: {description: roleDescription, name},\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"role-create\"\n      className={className}\n      title={title ?? t('admin.roles.create.title')}\n      description={description}\n      preferences={preferences}\n    >\n      <form className={styles['form']} onSubmit={handleSubmit} noValidate>\n        {error && (\n          <Alert variant=\"error\" role=\"alert\">\n            {error}\n          </Alert>\n        )}\n        <TextField\n          name=\"name\"\n          label={t('admin.roles.create.fields.name')}\n          required\n          value={name}\n          onChange={(event: ChangeEvent<HTMLInputElement>): void => setName(event.target.value)}\n        />\n        <TextField\n          name=\"description\"\n          label={t('admin.roles.create.fields.description')}\n          value={roleDescription}\n          onChange={(event: ChangeEvent<HTMLInputElement>): void => setRoleDescription(event.target.value)}\n        />\n        <div className={styles['formActions']}>\n          {onCancel && (\n            <Button type=\"button\" variant=\"text\" onClick={onCancel} disabled={isSubmitting}>\n              {t('admin.common.actions.cancel')}\n            </Button>\n          )}\n          <Button type=\"submit\" loading={isSubmitting} disabled={!isValid || isSubmitting}>\n            {t('admin.roles.create.submit')}\n          </Button>\n        </div>\n      </form>\n    </AdminSection>\n  );\n};\n\nexport default BaseRoleCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;AA+DA,MAAMA,kBAA2C,EAC/C,UACA,WACA,aACA,QAAQ,MACR,eAAe,OACf,UACA,UACA,aACA,YACuC;CACvC,MAAM,EAAC,OAAO,gBAAeC,0BAAU;CACvC,MAAMC,SAAiCC,oCAAU,OAAO,YAAY;CACpE,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,MAAM,+BAA4B,GAAG;CAC5C,MAAM,CAAC,iBAAiB,0CAAuC,GAAG;CAElE,MAAMC,UAAmB,KAAK,MAAM,CAAC,SAAS;CAE9C,MAAM,eAAqB;AACzB,MAAI,QACF,UAAS;GAAC,aAAa,gBAAgB,MAAM,IAAI;GAAW,MAAM,KAAK,MAAM;GAAC,CAAC;;CAInF,MAAM,gBAAgB,UAA4C;AAChE,QAAM,gBAAgB;AACtB,UAAQ;;AAGV,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA,oBAAoB,OAA+B,UACjD,UAAU,SAAS,QAAQ,MAAM,GAAG,mBAAmB,MAAM;GAC/D,cAAc;GACd;GACA;GACA;GACA,QAAQ;IAAC,aAAa;IAAiB;IAAK;GAC7C,CAAC;GACE;AAIV,QACE,2CAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,2BAA2B;EAChC;EACA;YAEb,4CAAC;GAAK,WAAW,OAAO;GAAS,UAAU;GAAc;;IACtD,SACC,2CAACC;KAAM,SAAQ;KAAQ,MAAK;eACzB;MACK;IAEV,2CAACC;KACC,MAAK;KACL,OAAO,EAAE,iCAAiC;KAC1C;KACA,OAAO;KACP,WAAW,UAA+C,QAAQ,MAAM,OAAO,MAAM;MACrF;IACF,2CAACA;KACC,MAAK;KACL,OAAO,EAAE,wCAAwC;KACjD,OAAO;KACP,WAAW,UAA+C,mBAAmB,MAAM,OAAO,MAAM;MAChG;IACF,4CAAC;KAAI,WAAW,OAAO;gBACpB,YACC,2CAACC;MAAO,MAAK;MAAS,SAAQ;MAAO,SAAS;MAAU,UAAU;gBAC/D,EAAE,8BAA8B;OAC1B,EAEX,2CAACA;MAAO,MAAK;MAAS,SAAS;MAAc,UAAU,CAAC,WAAW;gBAChE,EAAE,4BAA4B;OACxB;MACL;;IACD;GACM;;AAInB,6BAAe"}

package/dist/cjs/components/admin/RoleCreate/RoleCreate.cjs

@@ -0,0 +1,43 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_useCreateRole = require('../../../hooks/management/roles/useCreateRole.cjs');
+const require_useDefaultOuId = require('../shared/useDefaultOuId.cjs');
+const require_BaseRoleCreate = require('./BaseRoleCreate.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/RoleCreate/RoleCreate.tsx
+/**
+* Creates a role through the management API.
+*
+* @example
+* ```tsx
+* <RoleCreate onCreated={(role) => navigate(`/roles/${role.id}`)} />
+* ```
+*/
+const RoleCreate = ({ onCreated, ouId, preferences,...rest }) => {
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const resolvedOuId = require_useDefaultOuId.default(ouId);
+	const { error, isLoading, mutate } = require_useCreateRole.default({ onSuccess: onCreated });
+	const handleSubmit = ({ description, name }) => {
+		if (resolvedOuId) mutate({
+			description,
+			name,
+			ouId: resolvedOuId
+		});
+	};
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseRoleCreate.default, {
+		onSubmit: handleSubmit,
+		isSubmitting: isLoading,
+		error: resolvedOuId ? (0, __thunderid_browser.toManagementErrorMessage)(t, error, "admin.roles.create.error") : t("admin.common.errors.no_ou"),
+		preferences,
+		...rest
+	});
+};
+var RoleCreate_default = RoleCreate;
+
+//#endregion
+exports.default = RoleCreate_default;
+//# sourceMappingURL=RoleCreate.cjs.map