@thunderid/react 1.6.0 → 1.8.0

package/dist/cjs/components/admin/ApplicationDetails/BaseApplicationDetails.cjs

@@ -0,0 +1,238 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_Spinner = require('../../primitives/Spinner/Spinner.cjs');
+const require_Button = require('../../primitives/Button/Button.cjs');
+const require_Alert = require('../../primitives/Alert/Alert.cjs');
+const require_CopyableText = require('../../primitives/CopyableText/CopyableText.cjs');
+const require_useAdminPartStyles = require('../shared/useAdminPartStyles.cjs');
+const require_AdminSection = require('../shared/AdminSection.cjs');
+const require_AdminParts = require('../shared/AdminParts.cjs');
+const require_ApplicationFormFields = require('../shared/ApplicationFormFields.cjs');
+const require_ClientSecretNotice = require('../shared/ClientSecretNotice.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/ApplicationDetails/BaseApplicationDetails.tsx
+const toFormValues = (application, oauth) => ({
+	description: application.description ?? "",
+	grantTypes: oauth?.grantTypes ?? [],
+	logoUrl: application.logoUrl ?? "",
+	name: application.name,
+	publicClient: Boolean(oauth?.publicClient),
+	redirectUris: (oauth?.redirectUris ?? []).join(", "),
+	url: application.url ?? ""
+});
+const toSubmission = (values) => ({
+	description: values.description.trim() || void 0,
+	grantTypes: values.grantTypes,
+	logoUrl: values.logoUrl.trim() || void 0,
+	name: values.name.trim(),
+	publicClient: values.publicClient,
+	redirectUris: (0, __thunderid_browser.parseRedirectUris)(values.redirectUris),
+	url: values.url.trim() || void 0
+});
+/**
+* Shows an application's general fields and OAuth configuration. Holds no data of its own: pass the
+* application and handle editing, deletion and client secret regeneration, each offered only when its
+* handler is set.
+*/
+const BaseApplicationDetails = ({ actions, application, children, className, clientSecret = null, error = null, isDeleting = false, isLoading = false, isRegeneratingSecret = false, isUpdating = false, onDelete, onRegenerateSecret, onSecretDismiss, onUpdate, preferences }) => {
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const styles = require_useAdminPartStyles.default();
+	const [draft, setDraft] = (0, react.useState)(null);
+	const oauthConfig = (0, __thunderid_browser.getApplicationOAuthConfig)(application);
+	const isWritable = Boolean(application) && !application?.isReadOnly;
+	const canRegenerate = isWritable && Boolean(oauthConfig) && !oauthConfig?.publicClient;
+	if (children) {
+		let oauth;
+		if (oauthConfig) {
+			const { clientSecret: storedSecret,...rest } = oauthConfig;
+			oauth = rest;
+		}
+		return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+			className,
+			children: children({
+				application,
+				clientSecret,
+				error,
+				isDeleting,
+				isLoading,
+				isRegeneratingSecret,
+				isUpdating,
+				oauth,
+				onDelete: isWritable ? onDelete : void 0,
+				onRegenerateSecret: canRegenerate ? onRegenerateSecret : void 0,
+				onSecretDismiss: clientSecret ? onSecretDismiss : void 0,
+				onUpdate: isWritable ? onUpdate : void 0
+			})
+		});
+	}
+	if (isLoading && !application) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminSection.default, {
+		block: "application-details",
+		className,
+		preferences,
+		children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+			className: styles["muted"],
+			role: "status",
+			children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Spinner.default, { size: "small" }),
+				" ",
+				t("admin.common.loading")
+			]
+		})
+	});
+	if (!application) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminSection.default, {
+		block: "application-details",
+		className,
+		preferences,
+		children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Alert.default, {
+			variant: "error",
+			role: "alert",
+			children: error ?? t("admin.common.errors.not_found")
+		})
+	});
+	const notSet = t("admin.applications.details.not_set");
+	const overview = [
+		{
+			label: t("admin.applications.list.columns.client_id"),
+			value: oauthConfig?.clientId ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_CopyableText.default, { value: oauthConfig.clientId }) : notSet
+		},
+		{
+			label: t("admin.applications.details.type"),
+			value: application.type ?? application.template ?? notSet
+		},
+		{
+			label: t("admin.common.columns.organization_unit"),
+			value: application.ouId ?? notSet
+		},
+		{
+			label: t("admin.applications.fields.url"),
+			value: application.url ?? notSet
+		},
+		{
+			label: t("admin.applications.fields.logo_url"),
+			value: application.logoUrl ?? notSet
+		}
+	];
+	const handleSave = (event) => {
+		event.preventDefault();
+		if (!draft) return;
+		const { publicClient,...submission } = toSubmission(draft);
+		onUpdate?.(submission);
+		setDraft(null);
+	};
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(require_AdminSection.default, {
+		block: "application-details",
+		className,
+		title: application.name,
+		description: application.description,
+		preferences,
+		actions: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [actions, onDelete && isWritable && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ConfirmButton, {
+			confirmText: t("admin.applications.details.delete.confirm", { name: application.name }),
+			isLoading: isDeleting,
+			onConfirm: onDelete,
+			children: t("admin.applications.details.delete.action")
+		})] }),
+		children: [error && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Alert.default, {
+			variant: "error",
+			role: "alert",
+			children: error
+		}), draft ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.Panel, {
+			title: t("admin.applications.details.edit.action"),
+			children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("form", {
+				className: styles["row"],
+				style: {
+					alignItems: "stretch",
+					flexDirection: "column"
+				},
+				onSubmit: handleSave,
+				noValidate: true,
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_ApplicationFormFields.default, {
+					preferences,
+					values: draft,
+					onInputChange: (field, value) => setDraft((previous) => previous && {
+						...previous,
+						[field]: value
+					}),
+					onGrantTypesChange: (grantTypes) => setDraft((previous) => previous && {
+						...previous,
+						grantTypes
+					})
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: styles["row"],
+					style: { justifyContent: "flex-end" },
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Button.default, {
+						type: "button",
+						variant: "text",
+						disabled: isUpdating,
+						onClick: () => setDraft(null),
+						children: t("admin.common.actions.cancel")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Button.default, {
+						type: "submit",
+						loading: isUpdating,
+						disabled: isUpdating || !(0, __thunderid_browser.isApplicationSubmissionValid)(toSubmission(draft)),
+						children: t("admin.applications.details.edit.save")
+					})]
+				})]
+			})
+		}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.Panel, {
+			title: t("admin.applications.details.overview"),
+			actions: onUpdate && isWritable ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Button.default, {
+				variant: "outline",
+				size: "small",
+				onClick: () => setDraft(toFormValues(application, oauthConfig)),
+				children: t("admin.applications.details.edit.action")
+			}) : void 0,
+			children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.DetailList, { items: overview })
+		}), oauthConfig && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(require_AdminParts.Panel, {
+			title: t("admin.applications.details.oauth"),
+			actions: onRegenerateSecret && canRegenerate && !clientSecret ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ConfirmButton, {
+				confirmText: t("admin.applications.details.secret.confirm", { name: application.name }),
+				isLoading: isRegeneratingSecret,
+				onConfirm: onRegenerateSecret,
+				children: t("admin.applications.details.secret.action")
+			}) : void 0,
+			children: [clientSecret && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_ClientSecretNotice.default, {
+				secret: clientSecret,
+				onDismiss: onSecretDismiss,
+				preferences
+			}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.DetailList, { items: [
+				{
+					label: t("admin.applications.fields.grant_types"),
+					value: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ChipList, {
+						label: t("admin.applications.fields.grant_types"),
+						emptyText: t("admin.applications.details.no_grant_types"),
+						items: (oauthConfig.grantTypes ?? []).map((grantType) => ({
+							id: grantType,
+							label: __thunderid_browser.APPLICATION_GRANT_TYPES.includes(grantType) ? t(`admin.applications.grant_types.${grantType}`) : grantType
+						}))
+					})
+				},
+				{
+					label: t("admin.applications.fields.redirect_uris"),
+					value: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ChipList, {
+						label: t("admin.applications.fields.redirect_uris"),
+						emptyText: t("admin.applications.details.no_redirect_uris"),
+						items: (oauthConfig.redirectUris ?? []).map((uri) => ({
+							id: uri,
+							label: uri
+						}))
+					})
+				},
+				{
+					label: t("admin.applications.details.public_client"),
+					value: oauthConfig.publicClient ? t("admin.applications.details.yes") : t("admin.applications.details.no")
+				}
+			] })]
+		})] })]
+	});
+};
+var BaseApplicationDetails_default = BaseApplicationDetails;
+
+//#endregion
+exports.default = BaseApplicationDetails_default;
+//# sourceMappingURL=BaseApplicationDetails.cjs.map

package/dist/cjs/components/admin/ApplicationDetails/BaseApplicationDetails.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseApplicationDetails.cjs","names":["BaseApplicationDetails: FC<BaseApplicationDetailsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","oauthConfig: OAuth2Config | undefined","isWritable: boolean","canRegenerate: boolean","oauth: Omit<OAuth2Config, 'clientSecret'> | undefined","AdminSection","Spinner","Alert","notSet: string","overview: DetailListItem[]","CopyableText","ConfirmButton","Panel","ApplicationFormFields","Button","DetailList","ClientSecretNotice","ChipList","APPLICATION_GRANT_TYPES"],"sources":["../../../../../src/components/admin/ApplicationDetails/BaseApplicationDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  Application,\n  APPLICATION_GRANT_TYPES,\n  ApplicationSubmission,\n  getApplicationOAuthConfig,\n  isApplicationSubmissionValid,\n  OAuth2Config,\n  parseRedirectUris,\n  Preferences,\n} from '@thunderid/browser';\nimport {FC, FormEvent, ReactElement, ReactNode, useState} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport Button from '../../primitives/Button/Button';\nimport CopyableText from '../../primitives/CopyableText/CopyableText';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport {ChipList, ConfirmButton, DetailList, DetailListItem, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport ApplicationFormFields, {ApplicationFormValues, ApplicationTextField} from '../shared/ApplicationFormFields';\nimport ClientSecretNotice from '../shared/ClientSecretNotice';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * The edited fields {@link BaseApplicationDetails} hands `onUpdate`. Whether the client is public does\n * not change.\n */\nexport type ApplicationUpdateSubmission = Omit<ApplicationSubmission, 'publicClient'>;\n\n/**\n * What {@link BaseApplicationDetails} hands its `children` render function, so the application can be\n * shown with any UI.\n */\nexport interface BaseApplicationDetailsRenderProps {\n  application?: Application;\n  /**\n   * The new client secret, to show once. `null` while there is none.\n   */\n  clientSecret: string | null;\n  error: string | null;\n  isDeleting: boolean;\n  isLoading: boolean;\n  isRegeneratingSecret: boolean;\n  isUpdating: boolean;\n  /**\n   * The application's OAuth configuration, without its client secret. Undefined when it has no OAuth client.\n   */\n  oauth?: Omit<OAuth2Config, 'clientSecret'>;\n  /**\n   * Deletes the application. Undefined when deletion is not allowed, including for read-only applications.\n   */\n  onDelete?: () => void;\n  /**\n   * Gives the application a new client secret. Undefined when not allowed, for read-only applications\n   * and for applications without a confidential OAuth client.\n   */\n  onRegenerateSecret?: () => void;\n  /**\n   * Hides the new client secret once it has been copied. Undefined while there is no secret.\n   */\n  onSecretDismiss?: () => void;\n  /**\n   * Saves edited fields. Undefined when editing is not allowed, including for read-only applications.\n   */\n  onUpdate?: (application: ApplicationUpdateSubmission) => void;\n}\n\nexport interface BaseApplicationDetailsProps {\n  /**\n   * Controls rendered next to the application's name.\n   */\n  actions?: ReactNode;\n  application?: Application;\n  /**\n   * Renders custom UI in place of the default view. Receives the application, its OAuth configuration,\n   * the loading and error state, the actions the app allows and the new client secret to show.\n   */\n  children?: (props: BaseApplicationDetailsRenderProps) => ReactNode;\n  className?: string;\n  /**\n   * A client secret just generated by `onRegenerateSecret`, shown once until `onSecretDismiss` clears it.\n   */\n  clientSecret?: string | null;\n  error?: string | null;\n  isDeleting?: boolean;\n  isLoading?: boolean;\n  isRegeneratingSecret?: boolean;\n  isUpdating?: boolean;\n  /**\n   * Deletes the application. The delete action is hidden when omitted.\n   */\n  onDelete?: () => void;\n  /**\n   * Gives the application a new client secret. The regenerate action is hidden when omitted, and for\n   * public clients, which have no secret.\n   */\n  onRegenerateSecret?: () => void;\n  /**\n   * Called when the user has copied the new client secret.\n   */\n  onSecretDismiss?: () => void;\n  /**\n   * Saves the edited general fields, redirect URIs and grant types. Editing is offered only when set.\n   */\n  onUpdate?: (application: ApplicationUpdateSubmission) => void;\n  preferences?: Preferences;\n}\n\nconst toFormValues = (application: Application, oauth?: OAuth2Config): ApplicationFormValues => ({\n  description: application.description ?? '',\n  grantTypes: oauth?.grantTypes ?? [],\n  logoUrl: application.logoUrl ?? '',\n  name: application.name,\n  publicClient: Boolean(oauth?.publicClient),\n  redirectUris: (oauth?.redirectUris ?? []).join(', '),\n  url: application.url ?? '',\n});\n\nconst toSubmission = (values: ApplicationFormValues): ApplicationSubmission => ({\n  description: values.description.trim() || undefined,\n  grantTypes: values.grantTypes,\n  logoUrl: values.logoUrl.trim() || undefined,\n  name: values.name.trim(),\n  publicClient: values.publicClient,\n  redirectUris: parseRedirectUris(values.redirectUris),\n  url: values.url.trim() || undefined,\n});\n\n/**\n * Shows an application's general fields and OAuth configuration. Holds no data of its own: pass the\n * application and handle editing, deletion and client secret regeneration, each offered only when its\n * handler is set.\n */\nconst BaseApplicationDetails: FC<BaseApplicationDetailsProps> = ({\n  actions,\n  application,\n  children,\n  className,\n  clientSecret = null,\n  error = null,\n  isDeleting = false,\n  isLoading = false,\n  isRegeneratingSecret = false,\n  isUpdating = false,\n  onDelete,\n  onRegenerateSecret,\n  onSecretDismiss,\n  onUpdate,\n  preferences,\n}: BaseApplicationDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n  const [draft, setDraft] = useState<ApplicationFormValues | null>(null);\n\n  const oauthConfig: OAuth2Config | undefined = getApplicationOAuthConfig(application);\n  const isWritable: boolean = Boolean(application) && !application?.isReadOnly;\n  const canRegenerate: boolean = isWritable && Boolean(oauthConfig) && !oauthConfig?.publicClient;\n\n  if (children) {\n    let oauth: Omit<OAuth2Config, 'clientSecret'> | undefined;\n\n    if (oauthConfig) {\n      const {clientSecret: storedSecret, ...rest}: OAuth2Config = oauthConfig;\n      void storedSecret;\n      oauth = rest;\n    }\n\n    return (\n      <div className={className}>\n        {children({\n          application,\n          clientSecret,\n          error,\n          isDeleting,\n          isLoading,\n          isRegeneratingSecret,\n          isUpdating,\n          oauth,\n          onDelete: isWritable ? onDelete : undefined,\n          onRegenerateSecret: canRegenerate ? onRegenerateSecret : undefined,\n          onSecretDismiss: clientSecret ? onSecretDismiss : undefined,\n          onUpdate: isWritable ? onUpdate : undefined,\n        })}\n      </div>\n    );\n  }\n\n  if (isLoading && !application) {\n    return (\n      <AdminSection block=\"application-details\" className={className} preferences={preferences}>\n        <span className={styles['muted']} role=\"status\">\n          <Spinner size=\"small\" /> {t('admin.common.loading')}\n        </span>\n      </AdminSection>\n    );\n  }\n\n  if (!application) {\n    return (\n      <AdminSection block=\"application-details\" className={className} preferences={preferences}>\n        <Alert variant=\"error\" role=\"alert\">\n          {error ?? t('admin.common.errors.not_found')}\n        </Alert>\n      </AdminSection>\n    );\n  }\n\n  const notSet: string = t('admin.applications.details.not_set');\n  const overview: DetailListItem[] = [\n    {\n      label: t('admin.applications.list.columns.client_id'),\n      value: oauthConfig?.clientId ? <CopyableText value={oauthConfig.clientId} /> : notSet,\n    },\n    {label: t('admin.applications.details.type'), value: application.type ?? application.template ?? notSet},\n    {label: t('admin.common.columns.organization_unit'), value: application.ouId ?? notSet},\n    {label: t('admin.applications.fields.url'), value: application.url ?? notSet},\n    {label: t('admin.applications.fields.logo_url'), value: application.logoUrl ?? notSet},\n  ];\n\n  const handleSave = (event: FormEvent<HTMLFormElement>): void => {\n    event.preventDefault();\n\n    if (!draft) {\n      return;\n    }\n\n    const {publicClient, ...submission}: ApplicationSubmission = toSubmission(draft);\n    void publicClient;\n    onUpdate?.(submission);\n    setDraft(null);\n  };\n\n  return (\n    <AdminSection\n      block=\"application-details\"\n      className={className}\n      title={application.name}\n      description={application.description}\n      preferences={preferences}\n      actions={\n        <>\n          {actions}\n          {onDelete && isWritable && (\n            <ConfirmButton\n              confirmText={t('admin.applications.details.delete.confirm', {name: application.name})}\n              isLoading={isDeleting}\n              onConfirm={onDelete}\n            >\n              {t('admin.applications.details.delete.action')}\n            </ConfirmButton>\n          )}\n        </>\n      }\n    >\n      {error && (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      )}\n      {draft ? (\n        <Panel title={t('admin.applications.details.edit.action')}>\n          <form\n            className={styles['row']}\n            style={{alignItems: 'stretch', flexDirection: 'column'}}\n            onSubmit={handleSave}\n            noValidate\n          >\n            <ApplicationFormFields\n              preferences={preferences}\n              values={draft}\n              onInputChange={(field: ApplicationTextField, value: string): void =>\n                setDraft((previous: ApplicationFormValues | null) => previous && {...previous, [field]: value})\n              }\n              onGrantTypesChange={(grantTypes: string[]): void =>\n                setDraft((previous: ApplicationFormValues | null) => previous && {...previous, grantTypes})\n              }\n            />\n            <div className={styles['row']} style={{justifyContent: 'flex-end'}}>\n              <Button type=\"button\" variant=\"text\" disabled={isUpdating} onClick={(): void => setDraft(null)}>\n                {t('admin.common.actions.cancel')}\n              </Button>\n              <Button\n                type=\"submit\"\n                loading={isUpdating}\n                disabled={isUpdating || !isApplicationSubmissionValid(toSubmission(draft))}\n              >\n                {t('admin.applications.details.edit.save')}\n              </Button>\n            </div>\n          </form>\n        </Panel>\n      ) : (\n        <>\n          <Panel\n            title={t('admin.applications.details.overview')}\n            actions={\n              onUpdate && isWritable ? (\n                <Button\n                  variant=\"outline\"\n                  size=\"small\"\n                  onClick={(): void => setDraft(toFormValues(application, oauthConfig))}\n                >\n                  {t('admin.applications.details.edit.action')}\n                </Button>\n              ) : undefined\n            }\n          >\n            <DetailList items={overview} />\n          </Panel>\n          {oauthConfig && (\n            <Panel\n              title={t('admin.applications.details.oauth')}\n              actions={\n                onRegenerateSecret && canRegenerate && !clientSecret ? (\n                  <ConfirmButton\n                    confirmText={t('admin.applications.details.secret.confirm', {name: application.name})}\n                    isLoading={isRegeneratingSecret}\n                    onConfirm={onRegenerateSecret}\n                  >\n                    {t('admin.applications.details.secret.action')}\n                  </ConfirmButton>\n                ) : undefined\n              }\n            >\n              {clientSecret && (\n                <ClientSecretNotice secret={clientSecret} onDismiss={onSecretDismiss} preferences={preferences} />\n              )}\n              <DetailList\n                items={[\n                  {\n                    label: t('admin.applications.fields.grant_types'),\n                    value: (\n                      <ChipList\n                        label={t('admin.applications.fields.grant_types')}\n                        emptyText={t('admin.applications.details.no_grant_types')}\n                        items={(oauthConfig.grantTypes ?? []).map((grantType: string) => ({\n                          id: grantType,\n                          label: APPLICATION_GRANT_TYPES.includes(grantType)\n                            ? t(`admin.applications.grant_types.${grantType}`)\n                            : grantType,\n                        }))}\n                      />\n                    ),\n                  },\n                  {\n                    label: t('admin.applications.fields.redirect_uris'),\n                    value: (\n                      <ChipList\n                        label={t('admin.applications.fields.redirect_uris')}\n                        emptyText={t('admin.applications.details.no_redirect_uris')}\n                        items={(oauthConfig.redirectUris ?? []).map((uri: string) => ({id: uri, label: uri}))}\n                      />\n                    ),\n                  },\n                  {\n                    label: t('admin.applications.details.public_client'),\n                    value: oauthConfig.publicClient\n                      ? t('admin.applications.details.yes')\n                      : t('admin.applications.details.no'),\n                  },\n                ]}\n              />\n            </Panel>\n          )}\n        </>\n      )}\n    </AdminSection>\n  );\n};\n\nexport default BaseApplicationDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA8GA,MAAM,gBAAgB,aAA0B,WAAiD;CAC/F,aAAa,YAAY,eAAe;CACxC,YAAY,OAAO,cAAc,EAAE;CACnC,SAAS,YAAY,WAAW;CAChC,MAAM,YAAY;CAClB,cAAc,QAAQ,OAAO,aAAa;CAC1C,eAAe,OAAO,gBAAgB,EAAE,EAAE,KAAK,KAAK;CACpD,KAAK,YAAY,OAAO;CACzB;AAED,MAAM,gBAAgB,YAA0D;CAC9E,aAAa,OAAO,YAAY,MAAM,IAAI;CAC1C,YAAY,OAAO;CACnB,SAAS,OAAO,QAAQ,MAAM,IAAI;CAClC,MAAM,OAAO,KAAK,MAAM;CACxB,cAAc,OAAO;CACrB,yDAAgC,OAAO,aAAa;CACpD,KAAK,OAAO,IAAI,MAAM,IAAI;CAC3B;;;;;;AAOD,MAAMA,0BAA2D,EAC/D,SACA,aACA,UACA,WACA,eAAe,MACf,QAAQ,MACR,aAAa,OACb,YAAY,OACZ,uBAAuB,OACvB,aAAa,OACb,UACA,oBACA,iBACA,UACA,kBAC+C;CAC/C,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,oCAAoB;CAC3D,MAAM,CAAC,OAAO,gCAAmD,KAAK;CAEtE,MAAMC,iEAAkE,YAAY;CACpF,MAAMC,aAAsB,QAAQ,YAAY,IAAI,CAAC,aAAa;CAClE,MAAMC,gBAAyB,cAAc,QAAQ,YAAY,IAAI,CAAC,aAAa;AAEnF,KAAI,UAAU;EACZ,IAAIC;AAEJ,MAAI,aAAa;GACf,MAAM,EAAC,cAAc,aAAc,GAAG,SAAsB;AAE5D,WAAQ;;AAGV,SACE,2CAAC;GAAe;aACb,SAAS;IACR;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,UAAU,aAAa,WAAW;IAClC,oBAAoB,gBAAgB,qBAAqB;IACzD,iBAAiB,eAAe,kBAAkB;IAClD,UAAU,aAAa,WAAW;IACnC,CAAC;IACE;;AAIV,KAAI,aAAa,CAAC,YAChB,QACE,2CAACC;EAAa,OAAM;EAAiC;EAAwB;YAC3E,4CAAC;GAAK,WAAW,OAAO;GAAU,MAAK;;IACrC,2CAACC,2BAAQ,MAAK,UAAU;;IAAE,EAAE,uBAAuB;;IAC9C;GACM;AAInB,KAAI,CAAC,YACH,QACE,2CAACD;EAAa,OAAM;EAAiC;EAAwB;YAC3E,2CAACE;GAAM,SAAQ;GAAQ,MAAK;aACzB,SAAS,EAAE,gCAAgC;IACtC;GACK;CAInB,MAAMC,SAAiB,EAAE,qCAAqC;CAC9D,MAAMC,WAA6B;EACjC;GACE,OAAO,EAAE,4CAA4C;GACrD,OAAO,aAAa,WAAW,2CAACC,gCAAa,OAAO,YAAY,WAAY,GAAG;GAChF;EACD;GAAC,OAAO,EAAE,kCAAkC;GAAE,OAAO,YAAY,QAAQ,YAAY,YAAY;GAAO;EACxG;GAAC,OAAO,EAAE,yCAAyC;GAAE,OAAO,YAAY,QAAQ;GAAO;EACvF;GAAC,OAAO,EAAE,gCAAgC;GAAE,OAAO,YAAY,OAAO;GAAO;EAC7E;GAAC,OAAO,EAAE,qCAAqC;GAAE,OAAO,YAAY,WAAW;GAAO;EACvF;CAED,MAAM,cAAc,UAA4C;AAC9D,QAAM,gBAAgB;AAEtB,MAAI,CAAC,MACH;EAGF,MAAM,EAAC,aAAc,GAAG,eAAqC,aAAa,MAAM;AAEhF,aAAW,WAAW;AACtB,WAAS,KAAK;;AAGhB,QACE,4CAACL;EACC,OAAM;EACK;EACX,OAAO,YAAY;EACnB,aAAa,YAAY;EACZ;EACb,SACE,qFACG,SACA,YAAY,cACX,2CAACM;GACC,aAAa,EAAE,6CAA6C,EAAC,MAAM,YAAY,MAAK,CAAC;GACrF,WAAW;GACX,WAAW;aAEV,EAAE,2CAA2C;IAChC,IAEjB;aAGJ,SACC,2CAACJ;GAAM,SAAQ;GAAQ,MAAK;aACzB;IACK,EAET,QACC,2CAACK;GAAM,OAAO,EAAE,yCAAyC;aACvD,4CAAC;IACC,WAAW,OAAO;IAClB,OAAO;KAAC,YAAY;KAAW,eAAe;KAAS;IACvD,UAAU;IACV;eAEA,2CAACC;KACc;KACb,QAAQ;KACR,gBAAgB,OAA6B,UAC3C,UAAU,aAA2C,YAAY;MAAC,GAAG;OAAW,QAAQ;MAAM,CAAC;KAEjG,qBAAqB,eACnB,UAAU,aAA2C,YAAY;MAAC,GAAG;MAAU;MAAW,CAAC;MAE7F,EACF,4CAAC;KAAI,WAAW,OAAO;KAAQ,OAAO,EAAC,gBAAgB,YAAW;gBAChE,2CAACC;MAAO,MAAK;MAAS,SAAQ;MAAO,UAAU;MAAY,eAAqB,SAAS,KAAK;gBAC3F,EAAE,8BAA8B;OAC1B,EACT,2CAACA;MACC,MAAK;MACL,SAAS;MACT,UAAU,cAAc,uDAA8B,aAAa,MAAM,CAAC;gBAEzE,EAAE,uCAAuC;OACnC;MACL;KACD;IACD,GAER,qFACE,2CAACF;GACC,OAAO,EAAE,sCAAsC;GAC/C,SACE,YAAY,aACV,2CAACE;IACC,SAAQ;IACR,MAAK;IACL,eAAqB,SAAS,aAAa,aAAa,YAAY,CAAC;cAEpE,EAAE,yCAAyC;KACrC,GACP;aAGN,2CAACC,iCAAW,OAAO,WAAY;IACzB,EACP,eACC,4CAACH;GACC,OAAO,EAAE,mCAAmC;GAC5C,SACE,sBAAsB,iBAAiB,CAAC,eACtC,2CAACD;IACC,aAAa,EAAE,6CAA6C,EAAC,MAAM,YAAY,MAAK,CAAC;IACrF,WAAW;IACX,WAAW;cAEV,EAAE,2CAA2C;KAChC,GACd;cAGL,gBACC,2CAACK;IAAmB,QAAQ;IAAc,WAAW;IAA8B;KAAe,EAEpG,2CAACD,iCACC,OAAO;IACL;KACE,OAAO,EAAE,wCAAwC;KACjD,OACE,2CAACE;MACC,OAAO,EAAE,wCAAwC;MACjD,WAAW,EAAE,4CAA4C;MACzD,QAAQ,YAAY,cAAc,EAAE,EAAE,KAAK,eAAuB;OAChE,IAAI;OACJ,OAAOC,4CAAwB,SAAS,UAAU,GAC9C,EAAE,kCAAkC,YAAY,GAChD;OACL,EAAE;OACH;KAEL;IACD;KACE,OAAO,EAAE,0CAA0C;KACnD,OACE,2CAACD;MACC,OAAO,EAAE,0CAA0C;MACnD,WAAW,EAAE,8CAA8C;MAC3D,QAAQ,YAAY,gBAAgB,EAAE,EAAE,KAAK,SAAiB;OAAC,IAAI;OAAK,OAAO;OAAI,EAAE;OACrF;KAEL;IACD;KACE,OAAO,EAAE,2CAA2C;KACpD,OAAO,YAAY,eACf,EAAE,iCAAiC,GACnC,EAAE,gCAAgC;KACvC;IACF,GACD;IACI,IAET;GAEQ;;AAInB,qCAAe"}

package/dist/cjs/components/admin/ApplicationList/ApplicationList.cjs

@@ -0,0 +1,55 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
+const require_BaseApplicationList = require('./BaseApplicationList.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/ApplicationList/ApplicationList.tsx
+/**
+* Lists the applications the signed-in user is allowed to see, a page at a time.
+*
+* The server guards applications with the root `system` permission, for reading and for changes alike;
+* it defines no application-specific permission. Gate the view and its actions on it with
+* `useGrantedPermissions().can('system')`.
+*
+* @example
+* ```tsx
+* <ApplicationList onSelect={(application) => setSelectedApplicationId(application.id)} />
+* ```
+*/
+const ApplicationList = ({ limit = 20, preferences,...rest }) => {
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const [offset, setOffset] = (0, react.useState)(0);
+	const endpoint = require_useManagementEndpoint.default("applications");
+	const { data, error, isLoading } = require_useResourceQuery.default([__thunderid_browser.ApplicationQueryKeys.APPLICATIONS, {
+		limit,
+		offset
+	}], (fetcher) => (0, __thunderid_browser.getApplications)({
+		...endpoint,
+		fetcher,
+		limit,
+		offset
+	}));
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseApplicationList.default, {
+		applications: data?.applications ?? [],
+		totalResults: data?.totalResults,
+		isLoading,
+		error: (0, __thunderid_browser.toManagementErrorMessage)(t, error, "admin.applications.list.error"),
+		limit,
+		offset,
+		onPageChange: setOffset,
+		preferences,
+		...rest
+	});
+};
+var ApplicationList_default = ApplicationList;
+
+//#endregion
+exports.default = ApplicationList_default;
+//# sourceMappingURL=ApplicationList.cjs.map

package/dist/cjs/components/admin/ApplicationList/ApplicationList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApplicationList.cjs","names":["ApplicationList: FC<ApplicationListProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","ApplicationQueryKeys","BaseApplicationList"],"sources":["../../../../../src/components/admin/ApplicationList/ApplicationList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ApplicationListResponse,\n  ApplicationQueryKeys,\n  getApplications,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseApplicationList, {BaseApplicationListProps} from './BaseApplicationList';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type ApplicationListProps = Omit<\n  BaseApplicationListProps,\n  'applications' | 'error' | 'isLoading' | 'offset' | 'onPageChange' | 'totalResults'\n>;\n\n/**\n * Lists the applications the signed-in user is allowed to see, a page at a time.\n *\n * The server guards applications with the root `system` permission, for reading and for changes alike;\n * it defines no application-specific permission. Gate the view and its actions on it with\n * `useGrantedPermissions().can('system')`.\n *\n * @example\n * ```tsx\n * <ApplicationList onSelect={(application) => setSelectedApplicationId(application.id)} />\n * ```\n */\nconst ApplicationList: FC<ApplicationListProps> = ({\n  limit = 20,\n  preferences,\n  ...rest\n}: ApplicationListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('applications');\n  const {data, error, isLoading}: ResourceQueryResult<ApplicationListResponse> = useResourceQuery(\n    [ApplicationQueryKeys.APPLICATIONS, {limit, offset}],\n    (fetcher) => getApplications({...endpoint, fetcher, limit, offset}),\n  );\n\n  return (\n    <BaseApplicationList\n      applications={data?.applications ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.applications.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default ApplicationList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,MAAMA,mBAA6C,EACjD,QAAQ,IACR,YACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAMC,WAA+BC,sCAAsB,eAAe;CAC1E,MAAM,EAAC,MAAM,OAAO,cAA2DC,iCAC7E,CAACC,yCAAqB,cAAc;EAAC;EAAO;EAAO,CAAC,GACnD,qDAA4B;EAAC,GAAG;EAAU;EAAS;EAAO;EAAO,CAAC,CACpE;AAED,QACE,2CAACC;EACC,cAAc,MAAM,gBAAgB,EAAE;EACtC,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,gCAAgC;EACnE;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,8BAAe"}

package/dist/cjs/components/admin/ApplicationList/BaseApplicationList.cjs

@@ -0,0 +1,95 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_DataTable = require('../../primitives/DataTable/DataTable.cjs');
+const require_AdminSection = require('../shared/AdminSection.cjs');
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/ApplicationList/BaseApplicationList.tsx
+/**
+* The translated access status of an application, or its raw value when the status is one this SDK
+* does not know.
+*/
+const getStatusLabel = (application, t) => {
+	const value = application.status?.value;
+	switch (value?.toUpperCase()) {
+		case "ACTIVE": return t("admin.applications.status.active");
+		case "SUSPENDED": return t("admin.applications.status.suspended");
+		default: return value ?? "";
+	}
+};
+/**
+* Lists applications with their client identifier, type and, when the server reports it, access status. Holds no data of its own: pass the page
+* of applications and handle selection and pagination.
+*/
+const BaseApplicationList = ({ actions, applications, children, className, description, error = null, isLoading = false, limit = 20, offset = 0, onPageChange, onSelect, preferences, selectedApplicationId, title, totalResults }) => {
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const columns = [
+		{
+			header: t("admin.applications.list.columns.name"),
+			id: "name",
+			render: (application) => application.name
+		},
+		{
+			header: t("admin.applications.list.columns.client_id"),
+			id: "clientId",
+			render: (application) => application.clientId ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", { children: application.clientId }) : null
+		},
+		{
+			header: t("admin.applications.list.columns.type"),
+			id: "type",
+			render: (application) => application.type ?? application.template ?? ""
+		},
+		...applications.some((application) => application.status?.value) ? [{
+			header: t("admin.applications.list.columns.status"),
+			id: "status",
+			render: (application) => getStatusLabel(application, t)
+		}] : []
+	];
+	if (children) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+		className,
+		children: children({
+			applications,
+			columns,
+			error,
+			isLoading,
+			limit,
+			offset,
+			onPageChange,
+			onSelect,
+			rows: applications,
+			selectedRowId: selectedApplicationId,
+			totalResults: totalResults ?? applications.length
+		})
+	});
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminSection.default, {
+		block: "application-list",
+		className,
+		title: title ?? t("admin.applications.list.title"),
+		description,
+		actions,
+		preferences,
+		children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_DataTable.default, {
+			caption: title?.length ? title : t("admin.applications.list.title"),
+			columns,
+			rows: applications,
+			getRowId: (application) => application.id,
+			isLoading,
+			error,
+			emptyText: t("admin.applications.list.empty"),
+			onRowClick: onSelect,
+			selectedRowId: selectedApplicationId,
+			pagination: onPageChange ? {
+				limit,
+				offset,
+				onChange: onPageChange,
+				total: totalResults ?? applications.length
+			} : void 0
+		})
+	});
+};
+var BaseApplicationList_default = BaseApplicationList;
+
+//#endregion
+exports.default = BaseApplicationList_default;
+//# sourceMappingURL=BaseApplicationList.cjs.map

package/dist/cjs/components/admin/ApplicationList/BaseApplicationList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseApplicationList.cjs","names":["value: string | undefined","BaseApplicationList: FC<BaseApplicationListProps>","useTranslation","columns: DataTableColumn<BasicApplication>[]","AdminSection","DataTable"],"sources":["../../../../../src/components/admin/ApplicationList/BaseApplicationList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {BasicApplication, Preferences} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport DataTable, {DataTableColumn} from '../../primitives/DataTable/DataTable';\nimport {AdminListRenderProps} from '../shared/AdminListRenderProps';\nimport AdminSection from '../shared/AdminSection';\n\n/**\n * What {@link BaseApplicationList} hands its `children` render function. `applications` and `rows` are\n * the same array.\n */\nexport type BaseApplicationListRenderProps = AdminListRenderProps<BasicApplication> & {\n  applications: BasicApplication[];\n};\n\nexport interface BaseApplicationListProps {\n  /**\n   * Controls rendered next to the title, such as a button that opens `ApplicationCreate`.\n   */\n  actions?: ReactNode;\n  applications: BasicApplication[];\n  /**\n   * Renders custom UI in place of the default table, for example a third-party data grid. Receives\n   * the applications, the default columns, the loading and error state, and the pagination and\n   * selection handlers.\n   */\n  children?: (props: BaseApplicationListRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isLoading?: boolean;\n  /**\n   * Page size.\n   * @default 20\n   */\n  limit?: number;\n  offset?: number;\n  /**\n   * Called with the offset of the page to show. Pagination is hidden when omitted.\n   */\n  onPageChange?: (offset: number) => void;\n  /**\n   * Called when an application is chosen. Rows are selectable only when set.\n   */\n  onSelect?: (application: BasicApplication) => void;\n  preferences?: Preferences;\n  selectedApplicationId?: string;\n  /**\n   * Heading of the list. Pass an empty string to hide it.\n   */\n  title?: string;\n  totalResults?: number;\n}\n\n/**\n * The translated access status of an application, or its raw value when the status is one this SDK\n * does not know.\n */\nconst getStatusLabel = (application: BasicApplication, t: (key: string) => string): string => {\n  const value: string | undefined = application.status?.value;\n\n  switch (value?.toUpperCase()) {\n    case 'ACTIVE':\n      return t('admin.applications.status.active');\n    case 'SUSPENDED':\n      return t('admin.applications.status.suspended');\n    default:\n      return value ?? '';\n  }\n};\n\n/**\n * Lists applications with their client identifier, type and, when the server reports it, access status. Holds no data of its own: pass the page\n * of applications and handle selection and pagination.\n */\nconst BaseApplicationList: FC<BaseApplicationListProps> = ({\n  actions,\n  applications,\n  children,\n  className,\n  description,\n  error = null,\n  isLoading = false,\n  limit = 20,\n  offset = 0,\n  onPageChange,\n  onSelect,\n  preferences,\n  selectedApplicationId,\n  title,\n  totalResults,\n}: BaseApplicationListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n\n  const columns: DataTableColumn<BasicApplication>[] = [\n    {\n      header: t('admin.applications.list.columns.name'),\n      id: 'name',\n      render: (application: BasicApplication): ReactNode => application.name,\n    },\n    {\n      header: t('admin.applications.list.columns.client_id'),\n      id: 'clientId',\n      render: (application: BasicApplication): ReactNode =>\n        application.clientId ? <code>{application.clientId}</code> : null,\n    },\n    {\n      header: t('admin.applications.list.columns.type'),\n      id: 'type',\n      render: (application: BasicApplication): ReactNode => application.type ?? application.template ?? '',\n    },\n    // A server that does not report the access status gets no empty status column.\n    ...(applications.some((application: BasicApplication) => application.status?.value)\n      ? [\n          {\n            header: t('admin.applications.list.columns.status'),\n            id: 'status',\n            render: (application: BasicApplication): ReactNode => getStatusLabel(application, t),\n          },\n        ]\n      : []),\n  ];\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          applications,\n          columns,\n          error,\n          isLoading,\n          limit,\n          offset,\n          onPageChange,\n          onSelect,\n          rows: applications,\n          selectedRowId: selectedApplicationId,\n          totalResults: totalResults ?? applications.length,\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"application-list\"\n      className={className}\n      title={title ?? t('admin.applications.list.title')}\n      description={description}\n      actions={actions}\n      preferences={preferences}\n    >\n      <DataTable\n        caption={title?.length ? title : t('admin.applications.list.title')}\n        columns={columns}\n        rows={applications}\n        getRowId={(application: BasicApplication): string => application.id}\n        isLoading={isLoading}\n        error={error}\n        emptyText={t('admin.applications.list.empty')}\n        onRowClick={onSelect}\n        selectedRowId={selectedApplicationId}\n        pagination={\n          onPageChange ? {limit, offset, onChange: onPageChange, total: totalResults ?? applications.length} : undefined\n        }\n      />\n    </AdminSection>\n  );\n};\n\nexport default BaseApplicationList;\n"],"mappings":";;;;;;;;;;;;AA6DA,MAAM,kBAAkB,aAA+B,MAAuC;CAC5F,MAAMA,QAA4B,YAAY,QAAQ;AAEtD,SAAQ,OAAO,aAAa,EAA5B;EACE,KAAK,SACH,QAAO,EAAE,mCAAmC;EAC9C,KAAK,YACH,QAAO,EAAE,sCAAsC;EACjD,QACE,QAAO,SAAS;;;;;;;AAQtB,MAAMC,uBAAqD,EACzD,SACA,cACA,UACA,WACA,aACA,QAAQ,MACR,YAAY,OACZ,QAAQ,IACR,SAAS,GACT,cACA,UACA,aACA,uBACA,OACA,mBAC4C;CAC5C,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAE7C,MAAMC,UAA+C;EACnD;GACE,QAAQ,EAAE,uCAAuC;GACjD,IAAI;GACJ,SAAS,gBAA6C,YAAY;GACnE;EACD;GACE,QAAQ,EAAE,4CAA4C;GACtD,IAAI;GACJ,SAAS,gBACP,YAAY,WAAW,2CAAC,oBAAM,YAAY,WAAgB,GAAG;GAChE;EACD;GACE,QAAQ,EAAE,uCAAuC;GACjD,IAAI;GACJ,SAAS,gBAA6C,YAAY,QAAQ,YAAY,YAAY;GACnG;EAED,GAAI,aAAa,MAAM,gBAAkC,YAAY,QAAQ,MAAM,GAC/E,CACE;GACE,QAAQ,EAAE,yCAAyC;GACnD,IAAI;GACJ,SAAS,gBAA6C,eAAe,aAAa,EAAE;GACrF,CACF,GACD,EAAE;EACP;AAED,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,MAAM;GACN,eAAe;GACf,cAAc,gBAAgB,aAAa;GAC5C,CAAC;GACE;AAIV,QACE,2CAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,gCAAgC;EACrC;EACJ;EACI;YAEb,2CAACC;GACC,SAAS,OAAO,SAAS,QAAQ,EAAE,gCAAgC;GAC1D;GACT,MAAM;GACN,WAAW,gBAA0C,YAAY;GACtD;GACJ;GACP,WAAW,EAAE,gCAAgC;GAC7C,YAAY;GACZ,eAAe;GACf,YACE,eAAe;IAAC;IAAO;IAAQ,UAAU;IAAc,OAAO,gBAAgB,aAAa;IAAO,GAAG;IAEvG;GACW;;AAInB,kCAAe"}

package/dist/cjs/components/admin/GroupCreate/GroupCreate.cjs

@@ -1,6 +1,7 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useCreateGroup = require('../../../hooks/management/groups/useCreateGroup.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
 const require_useDefaultOuId = require('../shared/useDefaultOuId.cjs');
 const require_BaseGroupCreate = require('./BaseGroupCreate.cjs');
 let __thunderid_browser = require("@thunderid/browser");
@@ -20,7 +21,12 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 const GroupCreate = ({ onCreated, ouId, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const resolvedOuId = require_useDefaultOuId.default(ouId);
-	const { error, isLoading, mutate } = require_useCreateGroup.default({ onSuccess: onCreated });
+	const endpoint = require_useManagementEndpoint.default("groups");
+	const { error, isLoading, mutate } = require_useResourceMutation.default((payload, fetcher) => (0, __thunderid_browser.createGroup)({
+		...endpoint,
+		fetcher,
+		payload
+	}), () => [[__thunderid_browser.GroupQueryKeys.GROUPS], [__thunderid_browser.GroupQueryKeys.MEMBERSHIPS]], { onSuccess: onCreated });
 	const handleSubmit = ({ description, name }) => {
 		if (resolvedOuId) mutate({
 			description,

package/dist/cjs/components/admin/GroupCreate/GroupCreate.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"GroupCreate.cjs","names":["GroupCreate: FC<GroupCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","useCreateGroup","BaseGroupCreate"],"sources":["../../../../../src/components/admin/GroupCreate/GroupCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage, Group} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseGroupCreate, {BaseGroupCreateProps, GroupCreateSubmission} from './BaseGroupCreate';\nimport useCreateGroup from '../../../hooks/management/groups/useCreateGroup';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type GroupCreateProps = Omit<BaseGroupCreateProps, 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created group.\n   */\n  onCreated?: (group: Group) => void;\n  /**\n   * Organization unit the group is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates a group through the management API.\n *\n * @example\n * ```tsx\n * <GroupCreate onCreated={(group) => navigate(`/groups/${group.id}`)} />\n * ```\n */\nconst GroupCreate: FC<GroupCreateProps> = ({onCreated, ouId, preferences, ...rest}: GroupCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const {error, isLoading, mutate} = useCreateGroup({onSuccess: onCreated});\n\n  const handleSubmit = ({description, name}: GroupCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId});\n    }\n  };\n\n  return (\n    <BaseGroupCreate\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.groups.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA6BA,MAAMA,eAAqC,EAAC,WAAW,MAAM,YAAa,GAAG,WAA0C;CACrH,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAM,EAAC,OAAO,WAAW,WAAUC,+BAAe,EAAC,WAAW,WAAU,CAAC;CAEzE,MAAM,gBAAgB,EAAC,aAAa,WAAuC;AACzE,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAa,CAAC;;AAIxD,QACE,2CAACC;EACC,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,4BAA4B,GAAG,EAAE,4BAA4B;EAEpG;EACb,GAAI;GACJ;;AAIN,0BAAe"}
+{"version":3,"file":"GroupCreate.cjs","names":["GroupCreate: FC<GroupCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceMutation","GroupQueryKeys","BaseGroupCreate"],"sources":["../../../../../src/components/admin/GroupCreate/GroupCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {CreateGroupRequest, Group, GroupQueryKeys, createGroup, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseGroupCreate, {BaseGroupCreateProps, GroupCreateSubmission} from './BaseGroupCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type GroupCreateProps = Omit<BaseGroupCreateProps, 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created group.\n   */\n  onCreated?: (group: Group) => void;\n  /**\n   * Organization unit the group is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates a group through the management API.\n *\n * @example\n * ```tsx\n * <GroupCreate onCreated={(group) => navigate(`/groups/${group.id}`)} />\n * ```\n */\nconst GroupCreate: FC<GroupCreateProps> = ({onCreated, ouId, preferences, ...rest}: GroupCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const {error, isLoading, mutate}: ResourceMutationResult<Group, CreateGroupRequest> = useResourceMutation(\n    (payload: CreateGroupRequest, fetcher) => createGroup({...endpoint, fetcher, payload}),\n    () => [[GroupQueryKeys.GROUPS], [GroupQueryKeys.MEMBERSHIPS]],\n    {onSuccess: onCreated},\n  );\n\n  const handleSubmit = ({description, name}: GroupCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId});\n    }\n  };\n\n  return (\n    <BaseGroupCreate\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.groups.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA8BA,MAAMA,eAAqC,EAAC,WAAW,MAAM,YAAa,GAAG,WAA0C;CACrH,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAMC,WAA+BC,sCAAsB,SAAS;CACpE,MAAM,EAAC,OAAO,WAAW,WAA6DC,qCACnF,SAA6B,iDAAwB;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,QAChF,CAAC,CAACC,mCAAe,OAAO,EAAE,CAACA,mCAAe,YAAY,CAAC,EAC7D,EAAC,WAAW,WAAU,CACvB;CAED,MAAM,gBAAgB,EAAC,aAAa,WAAuC;AACzE,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAa,CAAC;;AAIxD,QACE,2CAACC;EACC,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,4BAA4B,GAAG,EAAE,4BAA4B;EAEpG;EACb,GAAI;GACJ;;AAIN,0BAAe"}

package/dist/cjs/components/admin/GroupList/GroupList.cjs

@@ -1,6 +1,7 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useGetGroups = require('../../../hooks/management/groups/useGetGroups.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
 const require_BaseGroupList = require('./BaseGroupList.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -21,10 +22,16 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 const GroupList = ({ limit = 20, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const [offset, setOffset] = (0, react.useState)(0);
-	const { data, error, isLoading } = require_useGetGroups.default({
+	const endpoint = require_useManagementEndpoint.default("groups");
+	const { data, error, isLoading } = require_useResourceQuery.default([__thunderid_browser.GroupQueryKeys.GROUPS, {
 		limit,
 		offset
-	});
+	}], (fetcher) => (0, __thunderid_browser.getGroups)({
+		...endpoint,
+		fetcher,
+		limit,
+		offset
+	}));
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseGroupList.default, {
 		groups: data?.groups ?? [],
 		totalResults: data?.totalResults,

package/dist/cjs/components/admin/GroupList/GroupList.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"GroupList.cjs","names":["GroupList: FC<GroupListProps>","useTranslation","useGetGroups","BaseGroupList"],"sources":["../../../../../src/components/admin/GroupList/GroupList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseGroupList, {BaseGroupListProps} from './BaseGroupList';\nimport useGetGroups from '../../../hooks/management/groups/useGetGroups';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type GroupListProps = Omit<\n  BaseGroupListProps,\n  'error' | 'groups' | 'isLoading' | 'offset' | 'onPageChange' | 'totalResults'\n>;\n\n/**\n * Lists the groups the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <GroupList onSelect={(group) => setSelectedGroupId(group.id)} />\n * ```\n */\nconst GroupList: FC<GroupListProps> = ({limit = 20, preferences, ...rest}: GroupListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const {data, error, isLoading} = useGetGroups({limit, offset});\n\n  return (\n    <BaseGroupList\n      groups={data?.groups ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.groups.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsBA,MAAMA,aAAiC,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAwC;CAC1G,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAM,EAAC,MAAM,OAAO,cAAaC,6BAAa;EAAC;EAAO;EAAO,CAAC;AAE9D,QACE,2CAACC;EACC,QAAQ,MAAM,UAAU,EAAE;EAC1B,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,0BAA0B;EAC7D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,wBAAe"}
+{"version":3,"file":"GroupList.cjs","names":["GroupList: FC<GroupListProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","GroupQueryKeys","BaseGroupList"],"sources":["../../../../../src/components/admin/GroupList/GroupList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {GroupListResponse, GroupQueryKeys, getGroups, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseGroupList, {BaseGroupListProps} from './BaseGroupList';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type GroupListProps = Omit<\n  BaseGroupListProps,\n  'error' | 'groups' | 'isLoading' | 'offset' | 'onPageChange' | 'totalResults'\n>;\n\n/**\n * Lists the groups the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <GroupList onSelect={(group) => setSelectedGroupId(group.id)} />\n * ```\n */\nconst GroupList: FC<GroupListProps> = ({limit = 20, preferences, ...rest}: GroupListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const {data, error, isLoading}: ResourceQueryResult<GroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUPS, {limit, offset}],\n    (fetcher) => getGroups({...endpoint, fetcher, limit, offset}),\n  );\n\n  return (\n    <BaseGroupList\n      groups={data?.groups ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.groups.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuBA,MAAMA,aAAiC,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAwC;CAC1G,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAMC,WAA+BC,sCAAsB,SAAS;CACpE,MAAM,EAAC,MAAM,OAAO,cAAqDC,iCACvE,CAACC,mCAAe,QAAQ;EAAC;EAAO;EAAO,CAAC,GACvC,+CAAsB;EAAC,GAAG;EAAU;EAAS;EAAO;EAAO,CAAC,CAC9D;AAED,QACE,2CAACC;EACC,QAAQ,MAAM,UAAU,EAAE;EAC1B,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,0BAA0B;EAC7D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,wBAAe"}

package/dist/cjs/components/admin/GroupMembers/GroupMembers.cjs

@@ -1,10 +1,8 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useGetUsers = require('../../../hooks/management/users/useGetUsers.cjs');
-const require_useGetAgents = require('../../../hooks/management/agents/useGetAgents.cjs');
-const require_useGetGroupMembers = require('../../../hooks/management/groups/useGetGroupMembers.cjs');
-const require_useAddGroupMembers = require('../../../hooks/management/groups/useAddGroupMembers.cjs');
-const require_useRemoveGroupMembers = require('../../../hooks/management/groups/useRemoveGroupMembers.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
+const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
 const require_BaseGroupMembers = require('./BaseGroupMembers.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -15,6 +13,15 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
 //#region src/components/admin/GroupMembers/GroupMembers.tsx
 /**
+* Query keys to refetch after a group's membership changes.
+*/
+const getMembershipInvalidatedKeys = ({ groupId }) => [
+	[__thunderid_browser.GroupQueryKeys.GROUP, groupId],
+	[__thunderid_browser.GroupQueryKeys.GROUP_MEMBERS, groupId],
+	[__thunderid_browser.GroupQueryKeys.MEMBERSHIPS],
+	[__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS]
+];
+/**
 * Lists the users and agents in a group, and lets the signed-in user add and remove them.
 *
 * @example
@@ -24,11 +31,41 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 */
 const GroupMembers = ({ editable = false, groupId, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
-	const members = require_useGetGroupMembers.default(groupId, { limit: 100 });
-	const users = require_useGetUsers.default({ limit: 100 }, { enabled: editable });
-	const agents = require_useGetAgents.default({ limit: 100 }, { enabled: editable });
-	const add = require_useAddGroupMembers.default();
-	const remove = require_useRemoveGroupMembers.default();
+	const groupsEndpoint = require_useManagementEndpoint.default("groups");
+	const usersEndpoint = require_useManagementEndpoint.default("users");
+	const agentsEndpoint = require_useManagementEndpoint.default("agents");
+	const members = require_useResourceQuery.default([
+		__thunderid_browser.GroupQueryKeys.GROUP_MEMBERS,
+		groupId,
+		{ limit: 100 }
+	], (fetcher) => (0, __thunderid_browser.getGroupMembers)({
+		...groupsEndpoint,
+		fetcher,
+		groupId,
+		limit: 100
+	}), { enabled: Boolean(groupId) });
+	const users = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USERS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getUsers)({
+		...usersEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const agents = require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENTS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getAgents)({
+		...agentsEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const add = require_useResourceMutation.default(({ groupId: id, members: changes }, fetcher) => (0, __thunderid_browser.addGroupMembers)({
+		...groupsEndpoint,
+		fetcher,
+		groupId: id,
+		members: changes
+	}), getMembershipInvalidatedKeys);
+	const remove = require_useResourceMutation.default(({ groupId: id, members: changes }, fetcher) => (0, __thunderid_browser.removeGroupMembers)({
+		...groupsEndpoint,
+		fetcher,
+		groupId: id,
+		members: changes
+	}), getMembershipInvalidatedKeys);
 	const candidates = (0, react.useMemo)(() => ({
 		agent: (agents.data?.agents ?? []).map((agent) => ({
 			id: agent.id,