@thunderid/react 1.6.0 → 1.8.0

package/dist/cjs/components/admin/GroupMembers/GroupMembers.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"GroupMembers.cjs","names":["GroupMembers: FC<GroupMembersProps>","useTranslation","useGetGroupMembers","useGetUsers","useGetAgents","useAddGroupMembers","useRemoveGroupMembers","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n  BasicAgent,\n  GroupMember,\n  ManagedUser,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useGetAgents from '../../../hooks/management/agents/useGetAgents';\nimport useAddGroupMembers from '../../../hooks/management/groups/useAddGroupMembers';\nimport useGetGroupMembers from '../../../hooks/management/groups/useGetGroupMembers';\nimport useRemoveGroupMembers from '../../../hooks/management/groups/useRemoveGroupMembers';\nimport useGetUsers from '../../../hooks/management/users/useGetUsers';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  editable = false,\n  groupId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const members = useGetGroupMembers(groupId, {limit: 100});\n  const users = useGetUsers({limit: 100}, {enabled: editable});\n  const agents = useGetAgents({limit: 100}, {enabled: editable});\n  const add = useAddGroupMembers();\n  const remove = useRemoveGroupMembers();\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, users.data],\n  );\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAwCA,MAAMA,gBAAuC,EAC3C,WAAW,OACX,SACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,UAAUC,mCAAmB,SAAS,EAAC,OAAO,KAAI,CAAC;CACzD,MAAM,QAAQC,4BAAY,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC5D,MAAM,SAASC,6BAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,MAAMC,oCAAoB;CAChC,MAAM,SAASC,uCAAuB;CAEtC,MAAMC,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD,CAAC,OAAO,MAAM,MAAM,KAAK,CAC1B;AAED,QACE,2CAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,yDAC2B,GAAG,QAAQ,OAAO,6BAA6B,sDAC/C,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}
+{"version":3,"file":"GroupMembers.cjs","names":["GroupQueryKeys","RoleQueryKeys","GroupMembers: FC<GroupMembersProps>","useTranslation","groupsEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","members: ResourceQueryResult<GroupMemberListResponse>","useResourceQuery","users: ResourceQueryResult<ManagedUserListResponse>","UserQueryKeys","agents: ResourceQueryResult<AgentListResponse>","AgentQueryKeys","add: ResourceMutationResult<Group, GroupMembersVariables>","useResourceMutation","remove: ResourceMutationResult<Group, GroupMembersVariables>","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupMember,\n  GroupMemberListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  ResourceQueryKey,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addGroupMembers,\n  getAgents,\n  getGroupMembers,\n  getUsers,\n  removeGroupMembers,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface GroupMembersVariables {\n  groupId: string;\n  members: Pick<GroupMember, 'id' | 'type'>[];\n}\n\n/**\n * Query keys to refetch after a group's membership changes.\n */\nconst getMembershipInvalidatedKeys = ({groupId}: GroupMembersVariables): ResourceQueryKey[] => [\n  [GroupQueryKeys.GROUP, groupId],\n  [GroupQueryKeys.GROUP_MEMBERS, groupId],\n  [GroupQueryKeys.MEMBERSHIPS],\n  [RoleQueryKeys.ROLE_ASSIGNMENTS],\n];\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  editable = false,\n  groupId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const members: ResourceQueryResult<GroupMemberListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUP_MEMBERS, groupId, {limit: 100}],\n    (fetcher) => getGroupMembers({...groupsEndpoint, fetcher, groupId, limit: 100}),\n    {enabled: Boolean(groupId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const add: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      addGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n  const remove: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      removeGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, users.data],\n  );\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;AAwCA,MAAM,gCAAgC,EAAC,cAAwD;CAC7F,CAACA,mCAAe,OAAO,QAAQ;CAC/B,CAACA,mCAAe,eAAe,QAAQ;CACvC,CAACA,mCAAe,YAAY;CAC5B,CAACC,kCAAc,iBAAiB;CACjC;;;;;;;;;AAsBD,MAAMC,gBAAuC,EAC3C,WAAW,OACX,SACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,iBAAqCC,sCAAsB,SAAS;CAC1E,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,UAAwDC,iCAC5D;EAACT,mCAAe;EAAe;EAAS,EAAC,OAAO,KAAI;EAAC,GACpD,qDAA4B;EAAC,GAAG;EAAgB;EAAS;EAAS,OAAO;EAAI,CAAC,EAC/E,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMU,QAAsDD,iCAC1D,CAACE,kCAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,8CAAqB;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDH,iCACrD,CAACI,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,MAA4DC,qCAC/D,EAAC,SAAS,IAAI,SAAS,WAAiC,qDACvC;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EAC9E,6BACD;CACD,MAAMC,SAA+DD,qCAClE,EAAC,SAAS,IAAI,SAAS,WAAiC,wDACpC;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EACjF,6BACD;CAED,MAAME,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD,CAAC,OAAO,MAAM,MAAM,KAAK,CAC1B;AAED,QACE,2CAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,yDAC2B,GAAG,QAAQ,OAAO,6BAA6B,sDAC/C,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}

package/dist/cjs/components/admin/RoleAssignments/RoleAssignments.cjs

@@ -1,11 +1,8 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useGetUsers = require('../../../hooks/management/users/useGetUsers.cjs');
-const require_useGetAgents = require('../../../hooks/management/agents/useGetAgents.cjs');
-const require_useGetRoleAssignments = require('../../../hooks/management/roles/useGetRoleAssignments.cjs');
-const require_useAddRoleAssignments = require('../../../hooks/management/roles/useAddRoleAssignments.cjs');
-const require_useRemoveRoleAssignments = require('../../../hooks/management/roles/useRemoveRoleAssignments.cjs');
-const require_useGetGroups = require('../../../hooks/management/groups/useGetGroups.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
+const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
 const require_BaseRoleAssignments = require('./BaseRoleAssignments.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -27,15 +24,52 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 const RoleAssignments = ({ editable = false, filterable = true, preferences, roleId,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const [typeFilter, setTypeFilter] = (0, react.useState)(null);
-	const assignments = require_useGetRoleAssignments.default(roleId, {
+	const rolesEndpoint = require_useManagementEndpoint.default("roles");
+	const usersEndpoint = require_useManagementEndpoint.default("users");
+	const groupsEndpoint = require_useManagementEndpoint.default("groups");
+	const agentsEndpoint = require_useManagementEndpoint.default("agents");
+	const type = typeFilter ?? void 0;
+	const assignments = require_useResourceQuery.default([
+		__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS,
+		roleId,
+		{
+			limit: 100,
+			type
+		}
+	], (fetcher) => (0, __thunderid_browser.getRoleAssignments)({
+		...rolesEndpoint,
+		fetcher,
 		limit: 100,
-		type: typeFilter ?? void 0
-	});
-	const users = require_useGetUsers.default({ limit: 100 }, { enabled: editable });
-	const groups = require_useGetGroups.default({ limit: 100 }, { enabled: editable });
-	const agents = require_useGetAgents.default({ limit: 100 }, { enabled: editable });
-	const assign = require_useAddRoleAssignments.default();
-	const unassign = require_useRemoveRoleAssignments.default();
+		roleId,
+		type
+	}), { enabled: Boolean(roleId) });
+	const users = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USERS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getUsers)({
+		...usersEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const groups = require_useResourceQuery.default([__thunderid_browser.GroupQueryKeys.GROUPS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getGroups)({
+		...groupsEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const agents = require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENTS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getAgents)({
+		...agentsEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const assign = require_useResourceMutation.default(({ assignments: changes, roleId: id }, fetcher) => (0, __thunderid_browser.addRoleAssignments)({
+		...rolesEndpoint,
+		assignments: changes,
+		fetcher,
+		roleId: id
+	}), () => [[__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS]]);
+	const unassign = require_useResourceMutation.default(({ assignments: changes, roleId: id }, fetcher) => (0, __thunderid_browser.removeRoleAssignments)({
+		...rolesEndpoint,
+		assignments: changes,
+		fetcher,
+		roleId: id
+	}), () => [[__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS]]);
 	const candidates = (0, react.useMemo)(() => ({
 		agent: (agents.data?.agents ?? []).map((agent) => ({
 			id: agent.id,

package/dist/cjs/components/admin/RoleAssignments/RoleAssignments.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"RoleAssignments.cjs","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","useGetRoleAssignments","useGetUsers","useGetGroups","useGetAgents","useAddRoleAssignments","useRemoveRoleAssignments","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n  BasicAgent,\n  Group,\n  ManagedUser,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useGetAgents from '../../../hooks/management/agents/useGetAgents';\nimport useGetGroups from '../../../hooks/management/groups/useGetGroups';\nimport useAddRoleAssignments from '../../../hooks/management/roles/useAddRoleAssignments';\nimport useGetRoleAssignments from '../../../hooks/management/roles/useGetRoleAssignments';\nimport useRemoveRoleAssignments from '../../../hooks/management/roles/useRemoveRoleAssignments';\nimport useGetUsers from '../../../hooks/management/users/useGetUsers';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  editable = false,\n  filterable = true,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const assignments = useGetRoleAssignments(roleId, {limit: 100, type: typeFilter ?? undefined});\n  const users = useGetUsers({limit: 100}, {enabled: editable});\n  const groups = useGetGroups({limit: 100}, {enabled: editable});\n  const agents = useGetAgents({limit: 100}, {enabled: editable});\n  const assign = useAddRoleAssignments();\n  const unassign = useRemoveRoleAssignments();\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      group: (groups.data?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, groups.data, users.data],\n  );\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA0DA,MAAMA,mBAA6C,EACjD,WAAW,OACX,aAAa,MACb,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,qCAAmD,KAAK;CAC3E,MAAM,cAAcC,sCAAsB,QAAQ;EAAC,OAAO;EAAK,MAAM,cAAc;EAAU,CAAC;CAC9F,MAAM,QAAQC,4BAAY,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC5D,MAAM,SAASC,6BAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,SAASC,6BAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,SAASC,uCAAuB;CACtC,MAAM,WAAWC,0CAA0B;CAE3C,MAAMC,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAkB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAC7F,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD;EAAC,OAAO;EAAM,OAAO;EAAM,MAAM;EAAK,CACvC;AAED,QACE,2CAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,yDAC2B,GAAG,YAAY,OAAO,gCAAgC,sDACtD,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}
+{"version":3,"file":"RoleAssignments.cjs","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","rolesEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","groupsEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","type: RoleAssigneeType | undefined","assignments: ResourceQueryResult<RoleAssignmentListResponse>","useResourceQuery","RoleQueryKeys","users: ResourceQueryResult<ManagedUserListResponse>","UserQueryKeys","groups: ResourceQueryResult<GroupListResponse>","GroupQueryKeys","agents: ResourceQueryResult<AgentListResponse>","AgentQueryKeys","assign: ResourceMutationResult<void, RoleAssignmentsVariables>","useResourceMutation","unassign: ResourceMutationResult<void, RoleAssignmentsVariables>","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n  RoleAssignmentListResponse,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addRoleAssignments,\n  getAgents,\n  getGroups,\n  getRoleAssignments,\n  getUsers,\n  removeRoleAssignments,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface RoleAssignmentsVariables {\n  assignments: RoleAssignmentInput[];\n  roleId: string;\n}\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  editable = false,\n  filterable = true,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const rolesEndpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const type: RoleAssigneeType | undefined = typeFilter ?? undefined;\n  const assignments: ResourceQueryResult<RoleAssignmentListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, roleId, {limit: 100, type}],\n    (fetcher) => getRoleAssignments({...rolesEndpoint, fetcher, limit: 100, roleId, type}),\n    {enabled: Boolean(roleId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const groups: ResourceQueryResult<GroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUPS, {limit: 100}],\n    (fetcher) => getGroups({...groupsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const assign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      addRoleAssignments({...rolesEndpoint, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n  const unassign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      removeRoleAssignments({...rolesEndpoint, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      group: (groups.data?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, groups.data, users.data],\n  );\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA0EA,MAAMA,mBAA6C,EACjD,WAAW,OACX,aAAa,MACb,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,qCAAmD,KAAK;CAC3E,MAAMC,gBAAoCC,sCAAsB,QAAQ;CACxE,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,iBAAqCH,sCAAsB,SAAS;CAC1E,MAAMI,OAAqC,cAAc;CACzD,MAAMC,cAA+DC,iCACnE;EAACC,kCAAc;EAAkB;EAAQ;GAAC,OAAO;GAAK;GAAK;EAAC,GAC3D,wDAA+B;EAAC,GAAG;EAAe;EAAS,OAAO;EAAK;EAAQ;EAAK,CAAC,EACtF,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,QAAsDF,iCAC1D,CAACG,kCAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,8CAAqB;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDJ,iCACrD,CAACK,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDN,iCACrD,CAACO,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiEC,qCACpE,EAAC,aAAa,SAAS,QAAQ,MAA+B,wDAC1C;EAAC,GAAG;EAAe,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QAC7E,CAAC,CAACR,kCAAc,iBAAiB,CAAC,CACzC;CACD,MAAMS,WAAmED,qCACtE,EAAC,aAAa,SAAS,QAAQ,MAA+B,2DACvC;EAAC,GAAG;EAAe,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QAChF,CAAC,CAACR,kCAAc,iBAAiB,CAAC,CACzC;CAED,MAAMU,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAkB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAC7F,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD;EAAC,OAAO;EAAM,OAAO;EAAM,MAAM;EAAK,CACvC;AAED,QACE,2CAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,yDAC2B,GAAG,YAAY,OAAO,gCAAgC,sDACtD,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}

package/dist/cjs/components/admin/RoleCreate/RoleCreate.cjs

@@ -1,6 +1,7 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useCreateRole = require('../../../hooks/management/roles/useCreateRole.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
 const require_useDefaultOuId = require('../shared/useDefaultOuId.cjs');
 const require_BaseRoleCreate = require('./BaseRoleCreate.cjs');
 let __thunderid_browser = require("@thunderid/browser");
@@ -20,7 +21,12 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 const RoleCreate = ({ onCreated, ouId, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const resolvedOuId = require_useDefaultOuId.default(ouId);
-	const { error, isLoading, mutate } = require_useCreateRole.default({ onSuccess: onCreated });
+	const endpoint = require_useManagementEndpoint.default("roles");
+	const { error, isLoading, mutate } = require_useResourceMutation.default((payload, fetcher) => (0, __thunderid_browser.createRole)({
+		...endpoint,
+		fetcher,
+		payload
+	}), () => [[__thunderid_browser.RoleQueryKeys.ROLES], [__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS]], { onSuccess: onCreated });
 	const handleSubmit = ({ description, name }) => {
 		if (resolvedOuId) mutate({
 			description,

package/dist/cjs/components/admin/RoleCreate/RoleCreate.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"RoleCreate.cjs","names":["RoleCreate: FC<RoleCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","useCreateRole","BaseRoleCreate"],"sources":["../../../../../src/components/admin/RoleCreate/RoleCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage, Role} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRoleCreate, {BaseRoleCreateProps, RoleCreateSubmission} from './BaseRoleCreate';\nimport useCreateRole from '../../../hooks/management/roles/useCreateRole';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type RoleCreateProps = Omit<BaseRoleCreateProps, 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created role.\n   */\n  onCreated?: (role: Role) => void;\n  /**\n   * Organization unit the role is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates a role through the management API.\n *\n * @example\n * ```tsx\n * <RoleCreate onCreated={(role) => navigate(`/roles/${role.id}`)} />\n * ```\n */\nconst RoleCreate: FC<RoleCreateProps> = ({onCreated, ouId, preferences, ...rest}: RoleCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const {error, isLoading, mutate} = useCreateRole({onSuccess: onCreated});\n\n  const handleSubmit = ({description, name}: RoleCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId});\n    }\n  };\n\n  return (\n    <BaseRoleCreate\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.roles.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA6BA,MAAMA,cAAmC,EAAC,WAAW,MAAM,YAAa,GAAG,WAAyC;CAClH,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAM,EAAC,OAAO,WAAW,WAAUC,8BAAc,EAAC,WAAW,WAAU,CAAC;CAExE,MAAM,gBAAgB,EAAC,aAAa,WAAsC;AACxE,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAa,CAAC;;AAIxD,QACE,2CAACC;EACC,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,2BAA2B,GAAG,EAAE,4BAA4B;EAEnG;EACb,GAAI;GACJ;;AAIN,yBAAe"}
+{"version":3,"file":"RoleCreate.cjs","names":["RoleCreate: FC<RoleCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceMutation","RoleQueryKeys","BaseRoleCreate"],"sources":["../../../../../src/components/admin/RoleCreate/RoleCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {CreateRoleRequest, Role, RoleQueryKeys, createRole, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRoleCreate, {BaseRoleCreateProps, RoleCreateSubmission} from './BaseRoleCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type RoleCreateProps = Omit<BaseRoleCreateProps, 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created role.\n   */\n  onCreated?: (role: Role) => void;\n  /**\n   * Organization unit the role is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates a role through the management API.\n *\n * @example\n * ```tsx\n * <RoleCreate onCreated={(role) => navigate(`/roles/${role.id}`)} />\n * ```\n */\nconst RoleCreate: FC<RoleCreateProps> = ({onCreated, ouId, preferences, ...rest}: RoleCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const {error, isLoading, mutate}: ResourceMutationResult<Role, CreateRoleRequest> = useResourceMutation(\n    (payload: CreateRoleRequest, fetcher) => createRole({...endpoint, fetcher, payload}),\n    () => [[RoleQueryKeys.ROLES], [RoleQueryKeys.ROLE_ASSIGNMENTS]],\n    {onSuccess: onCreated},\n  );\n\n  const handleSubmit = ({description, name}: RoleCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId});\n    }\n  };\n\n  return (\n    <BaseRoleCreate\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.roles.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA8BA,MAAMA,cAAmC,EAAC,WAAW,MAAM,YAAa,GAAG,WAAyC;CAClH,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAMC,WAA+BC,sCAAsB,QAAQ;CACnE,MAAM,EAAC,OAAO,WAAW,WAA2DC,qCACjF,SAA4B,gDAAuB;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,QAC9E,CAAC,CAACC,kCAAc,MAAM,EAAE,CAACA,kCAAc,iBAAiB,CAAC,EAC/D,EAAC,WAAW,WAAU,CACvB;CAED,MAAM,gBAAgB,EAAC,aAAa,WAAsC;AACxE,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAa,CAAC;;AAIxD,QACE,2CAACC;EACC,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,2BAA2B,GAAG,EAAE,4BAA4B;EAEnG;EACb,GAAI;GACJ;;AAIN,yBAAe"}

package/dist/cjs/components/admin/RoleList/RoleList.cjs

@@ -1,6 +1,7 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useGetRoles = require('../../../hooks/management/roles/useGetRoles.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
 const require_BaseRoleList = require('./BaseRoleList.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -21,10 +22,16 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 const RoleList = ({ limit = 20, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const [offset, setOffset] = (0, react.useState)(0);
-	const { data, error, isLoading } = require_useGetRoles.default({
+	const endpoint = require_useManagementEndpoint.default("roles");
+	const { data, error, isLoading } = require_useResourceQuery.default([__thunderid_browser.RoleQueryKeys.ROLES, {
 		limit,
 		offset
-	});
+	}], (fetcher) => (0, __thunderid_browser.getRoles)({
+		...endpoint,
+		fetcher,
+		limit,
+		offset
+	}));
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseRoleList.default, {
 		roles: data?.roles ?? [],
 		totalResults: data?.totalResults,

package/dist/cjs/components/admin/RoleList/RoleList.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"RoleList.cjs","names":["RoleList: FC<RoleListProps>","useTranslation","useGetRoles","BaseRoleList"],"sources":["../../../../../src/components/admin/RoleList/RoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseRoleList, {BaseRoleListProps} from './BaseRoleList';\nimport useGetRoles from '../../../hooks/management/roles/useGetRoles';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RoleListProps = Omit<\n  BaseRoleListProps,\n  'error' | 'isLoading' | 'offset' | 'onPageChange' | 'roles' | 'totalResults'\n>;\n\n/**\n * Lists the roles the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <RoleList onSelect={(role) => setSelectedRoleId(role.id)} />\n * ```\n */\nconst RoleList: FC<RoleListProps> = ({limit = 20, preferences, ...rest}: RoleListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const {data, error, isLoading} = useGetRoles({limit, offset});\n\n  return (\n    <BaseRoleList\n      roles={data?.roles ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.roles.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsBA,MAAMA,YAA+B,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAuC;CACvG,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAM,EAAC,MAAM,OAAO,cAAaC,4BAAY;EAAC;EAAO;EAAO,CAAC;AAE7D,QACE,2CAACC;EACC,OAAO,MAAM,SAAS,EAAE;EACxB,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,yBAAyB;EAC5D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,uBAAe"}
+{"version":3,"file":"RoleList.cjs","names":["RoleList: FC<RoleListProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","RoleQueryKeys","BaseRoleList"],"sources":["../../../../../src/components/admin/RoleList/RoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {RoleListResponse, RoleQueryKeys, getRoles, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseRoleList, {BaseRoleListProps} from './BaseRoleList';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RoleListProps = Omit<\n  BaseRoleListProps,\n  'error' | 'isLoading' | 'offset' | 'onPageChange' | 'roles' | 'totalResults'\n>;\n\n/**\n * Lists the roles the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <RoleList onSelect={(role) => setSelectedRoleId(role.id)} />\n * ```\n */\nconst RoleList: FC<RoleListProps> = ({limit = 20, preferences, ...rest}: RoleListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const {data, error, isLoading}: ResourceQueryResult<RoleListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLES, {limit, offset}],\n    (fetcher) => getRoles({...endpoint, fetcher, limit, offset}),\n  );\n\n  return (\n    <BaseRoleList\n      roles={data?.roles ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.roles.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuBA,MAAMA,YAA+B,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAuC;CACvG,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAMC,WAA+BC,sCAAsB,QAAQ;CACnE,MAAM,EAAC,MAAM,OAAO,cAAoDC,iCACtE,CAACC,kCAAc,OAAO;EAAC;EAAO;EAAO,CAAC,GACrC,8CAAqB;EAAC,GAAG;EAAU;EAAS;EAAO;EAAO,CAAC,CAC7D;AAED,QACE,2CAACC;EACC,OAAO,MAAM,SAAS,EAAE;EACxB,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,yBAAyB;EAC5D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,uBAAe"}

package/dist/cjs/components/admin/RolePermissions/RolePermissions.cjs

@@ -1,6 +1,7 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useGetRole = require('../../../hooks/management/roles/useGetRole.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
 const require_BaseRolePermissions = require('./BaseRolePermissions.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -18,7 +19,12 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 */
 const RolePermissions = ({ preferences, roleId,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
-	const role = require_useGetRole.default(roleId);
+	const endpoint = require_useManagementEndpoint.default("roles");
+	const role = require_useResourceQuery.default([__thunderid_browser.RoleQueryKeys.ROLE, roleId], (fetcher) => (0, __thunderid_browser.getRole)({
+		...endpoint,
+		fetcher,
+		roleId
+	}), { enabled: Boolean(roleId) });
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseRolePermissions.default, {
 		permissions: role.data?.permissions ?? [],
 		isLoading: role.isLoading,

package/dist/cjs/components/admin/RolePermissions/RolePermissions.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"RolePermissions.cjs","names":["RolePermissions: FC<RolePermissionsProps>","useTranslation","useGetRole","BaseRolePermissions"],"sources":["../../../../../src/components/admin/RolePermissions/RolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRolePermissions, {BaseRolePermissionsProps} from './BaseRolePermissions';\nimport useGetRole from '../../../hooks/management/roles/useGetRole';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RolePermissionsProps = Omit<BaseRolePermissionsProps, 'error' | 'isLoading' | 'permissions'> & {\n  roleId: string;\n};\n\n/**\n * Shows the permissions a role grants.\n *\n * @example\n * ```tsx\n * <RolePermissions roleId={roleId} />\n * ```\n */\nconst RolePermissions: FC<RolePermissionsProps> = ({\n  preferences,\n  roleId,\n  ...rest\n}: RolePermissionsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const role = useGetRole(roleId);\n\n  return (\n    <BaseRolePermissions\n      permissions={role.data?.permissions ?? []}\n      isLoading={role.isLoading}\n      error={toManagementErrorMessage(t, role.error, 'admin.roles.permissions.error')}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RolePermissions;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,mBAA6C,EACjD,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,OAAOC,2BAAW,OAAO;AAE/B,QACE,2CAACC;EACC,aAAa,KAAK,MAAM,eAAe,EAAE;EACzC,WAAW,KAAK;EAChB,yDAAgC,GAAG,KAAK,OAAO,gCAAgC;EAClE;EACb,GAAI;GACJ;;AAIN,8BAAe"}
+{"version":3,"file":"RolePermissions.cjs","names":["RolePermissions: FC<RolePermissionsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","role: ResourceQueryResult<Role>","useResourceQuery","RoleQueryKeys","BaseRolePermissions"],"sources":["../../../../../src/components/admin/RolePermissions/RolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Role, RoleQueryKeys, getRole, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRolePermissions, {BaseRolePermissionsProps} from './BaseRolePermissions';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RolePermissionsProps = Omit<BaseRolePermissionsProps, 'error' | 'isLoading' | 'permissions'> & {\n  roleId: string;\n};\n\n/**\n * Shows the permissions a role grants.\n *\n * @example\n * ```tsx\n * <RolePermissions roleId={roleId} />\n * ```\n */\nconst RolePermissions: FC<RolePermissionsProps> = ({\n  preferences,\n  roleId,\n  ...rest\n}: RolePermissionsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const role: ResourceQueryResult<Role> = useResourceQuery(\n    [RoleQueryKeys.ROLE, roleId],\n    (fetcher) => getRole({...endpoint, fetcher, roleId}),\n    {enabled: Boolean(roleId)},\n  );\n\n  return (\n    <BaseRolePermissions\n      permissions={role.data?.permissions ?? []}\n      isLoading={role.isLoading}\n      error={toManagementErrorMessage(t, role.error, 'admin.roles.permissions.error')}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RolePermissions;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAsBA,MAAMA,mBAA6C,EACjD,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,sCAAsB,QAAQ;CACnE,MAAMC,OAAkCC,iCACtC,CAACC,kCAAc,MAAM,OAAO,GAC3B,6CAAoB;EAAC,GAAG;EAAU;EAAS;EAAO,CAAC,EACpD,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;AAED,QACE,2CAACC;EACC,aAAa,KAAK,MAAM,eAAe,EAAE;EACzC,WAAW,KAAK;EAChB,yDAAgC,GAAG,KAAK,OAAO,gCAAgC;EAClE;EACb,GAAI;GACJ;;AAIN,8BAAe"}

package/dist/cjs/components/admin/UserCreate/UserCreate.cjs

@@ -1,9 +1,10 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useCreateUser = require('../../../hooks/management/users/useCreateUser.cjs');
-const require_useGetUserTypes = require('../../../hooks/management/users/useGetUserTypes.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
 const require_InviteUser = require('../../auth/InviteUser/InviteUser.cjs');
 const require_BaseUserCreate = require('./BaseUserCreate.cjs');
+const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
 const require_useDefaultOuId = require('../shared/useDefaultOuId.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -26,8 +27,18 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 const UserCreate = ({ inviteProps, mode = "api", onCreated, ouId, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const resolvedOuId = require_useDefaultOuId.default(ouId);
-	const { data: userTypes } = require_useGetUserTypes.default({ limit: 100 }, { enabled: mode === "api" });
-	const { error, isLoading, mutate } = require_useCreateUser.default({ onSuccess: onCreated });
+	const usersEndpoint = require_useManagementEndpoint.default("users");
+	const userTypesEndpoint = require_useManagementEndpoint.default("userTypes");
+	const { data: userTypes } = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USER_TYPES, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getUserTypes)({
+		...userTypesEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: mode === "api" });
+	const { error, isLoading, mutate } = require_useResourceMutation.default((payload, fetcher) => (0, __thunderid_browser.createUser)({
+		...usersEndpoint,
+		fetcher,
+		payload
+	}), () => [[__thunderid_browser.UserQueryKeys.USERS]], { onSuccess: onCreated });
 	const options = (0, react.useMemo)(() => (userTypes?.types ?? []).map((userType) => ({
 		label: userType.displayName ?? userType.handle,
 		value: userType.handle

package/dist/cjs/components/admin/UserCreate/UserCreate.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"UserCreate.cjs","names":["UserCreate: FC<UserCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","useGetUserTypes","useCreateUser","options: SelectOption[]","InviteUser","BaseUserCreate"],"sources":["../../../../../src/components/admin/UserCreate/UserCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage, ManagedUser, ManagedUserType, SelectOption} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseUserCreate, {BaseUserCreateProps, UserCreateSubmission} from './BaseUserCreate';\nimport useCreateUser from '../../../hooks/management/users/useCreateUser';\nimport useGetUserTypes from '../../../hooks/management/users/useGetUserTypes';\nimport useTranslation from '../../../hooks/useTranslation';\nimport InviteUser, {InviteUserProps} from '../../auth/InviteUser/InviteUser';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type UserCreateProps = Omit<BaseUserCreateProps, 'error' | 'isSubmitting' | 'onSubmit' | 'userTypes'> & {\n  /**\n   * Props passed to `InviteUser` when `mode` is `invite`.\n   */\n  inviteProps?: InviteUserProps;\n  /**\n   * How the user is added.\n   * - `api` creates the user directly through the management API.\n   * - `invite` runs the invite user flow, which asks the person to finish setting up their account.\n   *   Only available where flows run.\n   * @default 'api'\n   */\n  mode?: 'api' | 'invite';\n  /**\n   * Called with the created user. Not called in `invite` mode, where the flow reports progress\n   * through `inviteProps.onFlowChange`.\n   */\n  onCreated?: (user: ManagedUser) => void;\n  /**\n   * Organization unit the user is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Adds a user, either directly through the management API or by inviting them through the invite\n * user flow.\n *\n * @example\n * ```tsx\n * <UserCreate onCreated={(user) => navigate(`/users/${user.id}`)} />\n * <UserCreate mode=\"invite\" />\n * ```\n */\nconst UserCreate: FC<UserCreateProps> = ({\n  inviteProps,\n  mode = 'api',\n  onCreated,\n  ouId,\n  preferences,\n  ...rest\n}: UserCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const {data: userTypes} = useGetUserTypes({limit: 100}, {enabled: mode === 'api'});\n  const {error, isLoading, mutate} = useCreateUser({onSuccess: onCreated});\n\n  const options: SelectOption[] = useMemo(\n    () =>\n      (userTypes?.types ?? []).map((userType: ManagedUserType) => ({\n        label: userType.displayName ?? userType.handle,\n        value: userType.handle,\n      })),\n    [userTypes],\n  );\n\n  if (mode === 'invite') {\n    return <InviteUser {...inviteProps} />;\n  }\n\n  const handleSubmit = ({attributes, type}: UserCreateSubmission): void => {\n    if (!resolvedOuId) {\n      return;\n    }\n\n    void mutate({attributes, ouId: resolvedOuId, type});\n  };\n\n  return (\n    <BaseUserCreate\n      userTypes={options}\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.users.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA8CA,MAAMA,cAAmC,EACvC,aACA,OAAO,OACP,WACA,MACA,YACA,GAAG,WACgC;CACnC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAM,EAAC,MAAM,cAAaC,gCAAgB,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,SAAS,OAAM,CAAC;CAClF,MAAM,EAAC,OAAO,WAAW,WAAUC,8BAAc,EAAC,WAAW,WAAU,CAAC;CAExE,MAAMC,oCAED,WAAW,SAAS,EAAE,EAAE,KAAK,cAA+B;EAC3D,OAAO,SAAS,eAAe,SAAS;EACxC,OAAO,SAAS;EACjB,EAAE,EACL,CAAC,UAAU,CACZ;AAED,KAAI,SAAS,SACX,QAAO,2CAACC,8BAAW,GAAI,cAAe;CAGxC,MAAM,gBAAgB,EAAC,YAAY,WAAsC;AACvE,MAAI,CAAC,aACH;AAGF,EAAK,OAAO;GAAC;GAAY,MAAM;GAAc;GAAK,CAAC;;AAGrD,QACE,2CAACC;EACC,WAAW;EACX,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,2BAA2B,GAAG,EAAE,4BAA4B;EAEnG;EACb,GAAI;GACJ;;AAIN,yBAAe"}
+{"version":3,"file":"UserCreate.cjs","names":["UserCreate: FC<UserCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","usersEndpoint: ManagementEndpoint","useManagementEndpoint","userTypesEndpoint: ManagementEndpoint","useResourceQuery","UserQueryKeys","useResourceMutation","options: SelectOption[]","InviteUser","BaseUserCreate"],"sources":["../../../../../src/components/admin/UserCreate/UserCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  CreateManagedUserRequest,\n  ManagedUser,\n  ManagedUserType,\n  ManagedUserTypeListResponse,\n  SelectOption,\n  UserQueryKeys,\n  createUser,\n  getUserTypes,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseUserCreate, {BaseUserCreateProps, UserCreateSubmission} from './BaseUserCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport InviteUser, {InviteUserProps} from '../../auth/InviteUser/InviteUser';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type UserCreateProps = Omit<BaseUserCreateProps, 'error' | 'isSubmitting' | 'onSubmit' | 'userTypes'> & {\n  /**\n   * Props passed to `InviteUser` when `mode` is `invite`.\n   */\n  inviteProps?: InviteUserProps;\n  /**\n   * How the user is added.\n   * - `api` creates the user directly through the management API.\n   * - `invite` runs the invite user flow, which asks the person to finish setting up their account.\n   *   Only available where flows run.\n   * @default 'api'\n   */\n  mode?: 'api' | 'invite';\n  /**\n   * Called with the created user. Not called in `invite` mode, where the flow reports progress\n   * through `inviteProps.onFlowChange`.\n   */\n  onCreated?: (user: ManagedUser) => void;\n  /**\n   * Organization unit the user is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Adds a user, either directly through the management API or by inviting them through the invite\n * user flow.\n *\n * @example\n * ```tsx\n * <UserCreate onCreated={(user) => navigate(`/users/${user.id}`)} />\n * <UserCreate mode=\"invite\" />\n * ```\n */\nconst UserCreate: FC<UserCreateProps> = ({\n  inviteProps,\n  mode = 'api',\n  onCreated,\n  ouId,\n  preferences,\n  ...rest\n}: UserCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const userTypesEndpoint: ManagementEndpoint = useManagementEndpoint('userTypes');\n  const {data: userTypes}: ResourceQueryResult<ManagedUserTypeListResponse> = useResourceQuery(\n    [UserQueryKeys.USER_TYPES, {limit: 100}],\n    (fetcher) => getUserTypes({...userTypesEndpoint, fetcher, limit: 100}),\n    {enabled: mode === 'api'},\n  );\n  const {error, isLoading, mutate}: ResourceMutationResult<ManagedUser, CreateManagedUserRequest> = useResourceMutation(\n    (payload: CreateManagedUserRequest, fetcher) => createUser({...usersEndpoint, fetcher, payload}),\n    () => [[UserQueryKeys.USERS]],\n    {onSuccess: onCreated},\n  );\n\n  const options: SelectOption[] = useMemo(\n    () =>\n      (userTypes?.types ?? []).map((userType: ManagedUserType) => ({\n        label: userType.displayName ?? userType.handle,\n        value: userType.handle,\n      })),\n    [userTypes],\n  );\n\n  if (mode === 'invite') {\n    return <InviteUser {...inviteProps} />;\n  }\n\n  const handleSubmit = ({attributes, type}: UserCreateSubmission): void => {\n    if (!resolvedOuId) {\n      return;\n    }\n\n    void mutate({attributes, ouId: resolvedOuId, type});\n  };\n\n  return (\n    <BaseUserCreate\n      userTypes={options}\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.users.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAyDA,MAAMA,cAAmC,EACvC,aACA,OAAO,OACP,WACA,MACA,YACA,GAAG,WACgC;CACnC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAMC,gBAAoCC,sCAAsB,QAAQ;CACxE,MAAMC,oBAAwCD,sCAAsB,YAAY;CAChF,MAAM,EAAC,MAAM,cAA+DE,iCAC1E,CAACC,kCAAc,YAAY,EAAC,OAAO,KAAI,CAAC,GACvC,kDAAyB;EAAC,GAAG;EAAmB;EAAS,OAAO;EAAI,CAAC,EACtE,EAAC,SAAS,SAAS,OAAM,CAC1B;CACD,MAAM,EAAC,OAAO,WAAW,WAAyEC,qCAC/F,SAAmC,gDAAuB;EAAC,GAAG;EAAe;EAAS;EAAQ,CAAC,QAC1F,CAAC,CAACD,kCAAc,MAAM,CAAC,EAC7B,EAAC,WAAW,WAAU,CACvB;CAED,MAAME,oCAED,WAAW,SAAS,EAAE,EAAE,KAAK,cAA+B;EAC3D,OAAO,SAAS,eAAe,SAAS;EACxC,OAAO,SAAS;EACjB,EAAE,EACL,CAAC,UAAU,CACZ;AAED,KAAI,SAAS,SACX,QAAO,2CAACC,8BAAW,GAAI,cAAe;CAGxC,MAAM,gBAAgB,EAAC,YAAY,WAAsC;AACvE,MAAI,CAAC,aACH;AAGF,EAAK,OAAO;GAAC;GAAY,MAAM;GAAc;GAAK,CAAC;;AAGrD,QACE,2CAACC;EACC,WAAW;EACX,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,2BAA2B,GAAG,EAAE,4BAA4B;EAEnG;EACb,GAAI;GACJ;;AAIN,yBAAe"}

package/dist/cjs/components/admin/UserDetails/UserDetails.cjs

@@ -1,9 +1,8 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useGetUser = require('../../../hooks/management/users/useGetUser.cjs');
-const require_useUpdateUser = require('../../../hooks/management/users/useUpdateUser.cjs');
-const require_useDeleteUser = require('../../../hooks/management/users/useDeleteUser.cjs');
-const require_useGetUserGroups = require('../../../hooks/management/users/useGetUserGroups.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
+const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
 const require_BaseUserDetails = require('./BaseUserDetails.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -21,10 +20,34 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 */
 const UserDetails = ({ deletable = false, editable = false, onDeleted, preferences, userId,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
-	const user = require_useGetUser.default(userId);
-	const groups = require_useGetUserGroups.default(userId, { limit: 100 });
-	const deletion = require_useDeleteUser.default({ onSuccess: onDeleted });
-	const update = require_useUpdateUser.default();
+	const endpoint = require_useManagementEndpoint.default("users");
+	const user = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USER, userId], (fetcher) => (0, __thunderid_browser.getUser)({
+		...endpoint,
+		fetcher,
+		userId
+	}), { enabled: Boolean(userId) });
+	const groups = require_useResourceQuery.default([
+		__thunderid_browser.GroupQueryKeys.MEMBERSHIPS,
+		"user",
+		userId,
+		{ limit: 100 }
+	], (fetcher) => (0, __thunderid_browser.getUserGroups)({
+		...endpoint,
+		fetcher,
+		limit: 100,
+		userId
+	}), { enabled: Boolean(userId) });
+	const deletion = require_useResourceMutation.default((id, fetcher) => (0, __thunderid_browser.deleteUser)({
+		...endpoint,
+		fetcher,
+		userId: id
+	}), () => [[__thunderid_browser.UserQueryKeys.USERS]], { onSuccess: onDeleted });
+	const update = require_useResourceMutation.default(({ data, userId: id }, fetcher) => (0, __thunderid_browser.updateUser)({
+		...endpoint,
+		fetcher,
+		payload: data,
+		userId: id
+	}), ({ userId: id }) => [[__thunderid_browser.UserQueryKeys.USER, id], [__thunderid_browser.UserQueryKeys.USERS]]);
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseUserDetails.default, {
 		user: user.data,
 		groups: groups.data?.groups,

package/dist/cjs/components/admin/UserDetails/UserDetails.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"UserDetails.cjs","names":["UserDetails: FC<UserDetailsProps>","useTranslation","useGetUser","useGetUserGroups","useDeleteUser","useUpdateUser","BaseUserDetails"],"sources":["../../../../../src/components/admin/UserDetails/UserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseUserDetails, {BaseUserDetailsProps} from './BaseUserDetails';\nimport useDeleteUser from '../../../hooks/management/users/useDeleteUser';\nimport useGetUser from '../../../hooks/management/users/useGetUser';\nimport useGetUserGroups from '../../../hooks/management/users/useGetUserGroups';\nimport useUpdateUser from '../../../hooks/management/users/useUpdateUser';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type UserDetailsProps = Omit<\n  BaseUserDetailsProps,\n  'error' | 'groups' | 'isDeleting' | 'isLoading' | 'isUpdating' | 'onDelete' | 'onUpdate' | 'user'\n> & {\n  /**\n   * Whether the user can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the user's text attributes can be edited from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Called after the user has been deleted.\n   */\n  onDeleted?: () => void;\n  userId: string;\n};\n\n/**\n * Shows a user and the groups they belong to, and optionally lets the signed-in user delete them.\n *\n * @example\n * ```tsx\n * <UserDetails userId={userId} deletable onDeleted={() => navigate('/users')} />\n * ```\n */\nconst UserDetails: FC<UserDetailsProps> = ({\n  deletable = false,\n  editable = false,\n  onDeleted,\n  preferences,\n  userId,\n  ...rest\n}: UserDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const user = useGetUser(userId);\n  const groups = useGetUserGroups(userId, {limit: 100});\n  const deletion = useDeleteUser({onSuccess: onDeleted});\n  const update = useUpdateUser();\n\n  return (\n    <BaseUserDetails\n      user={user.data}\n      groups={groups.data?.groups}\n      isLoading={user.isLoading}\n      error={\n        toManagementErrorMessage(t, user.error, 'admin.users.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.users.details.delete.error') ??\n        toManagementErrorMessage(t, update.error, 'admin.users.details.edit.error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(userId) : undefined}\n      isUpdating={update.isLoading}\n      onUpdate={\n        editable && user.data\n          ? (attributes: Record<string, unknown>): void =>\n              void update.mutate({data: {attributes, ouId: user.data!.ouId, type: user.data!.type}, userId})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAyCA,MAAMA,eAAqC,EACzC,YAAY,OACZ,WAAW,OACX,WACA,aACA,OACA,GAAG,WACiC;CACpC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,OAAOC,2BAAW,OAAO;CAC/B,MAAM,SAASC,iCAAiB,QAAQ,EAAC,OAAO,KAAI,CAAC;CACrD,MAAM,WAAWC,8BAAc,EAAC,WAAW,WAAU,CAAC;CACtD,MAAM,SAASC,+BAAe;AAE9B,QACE,2CAACC;EACC,MAAM,KAAK;EACX,QAAQ,OAAO,MAAM;EACrB,WAAW,KAAK;EAChB,yDAC2B,GAAG,KAAK,OAAO,4BAA4B,sDAC3C,GAAG,SAAS,OAAO,mCAAmC,sDACtD,GAAG,OAAO,OAAO,iCAAiC;EAE7E,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,OAAO,GAAG;EACjE,YAAY,OAAO;EACnB,UACE,YAAY,KAAK,QACZ,eACC,KAAK,OAAO,OAAO;GAAC,MAAM;IAAC;IAAY,MAAM,KAAK,KAAM;IAAM,MAAM,KAAK,KAAM;IAAK;GAAE;GAAO,CAAC,GAChG;EAEO;EACb,GAAI;GACJ;;AAIN,0BAAe"}
+{"version":3,"file":"UserDetails.cjs","names":["UserDetails: FC<UserDetailsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","user: ResourceQueryResult<ManagedUser>","useResourceQuery","UserQueryKeys","groups: ResourceQueryResult<MembershipGroupListResponse>","GroupQueryKeys","deletion: ResourceMutationResult<void, string>","useResourceMutation","update: ResourceMutationResult<ManagedUser, UpdateUserVariables>","BaseUserDetails"],"sources":["../../../../../src/components/admin/UserDetails/UserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  GroupQueryKeys,\n  ManagedUser,\n  MembershipGroupListResponse,\n  UpdateManagedUserRequest,\n  UserQueryKeys,\n  deleteUser,\n  getUser,\n  getUserGroups,\n  toManagementErrorMessage,\n  updateUser,\n} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseUserDetails, {BaseUserDetailsProps} from './BaseUserDetails';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\ninterface UpdateUserVariables {\n  data: UpdateManagedUserRequest;\n  userId: string;\n}\n\nexport type UserDetailsProps = Omit<\n  BaseUserDetailsProps,\n  'error' | 'groups' | 'isDeleting' | 'isLoading' | 'isUpdating' | 'onDelete' | 'onUpdate' | 'user'\n> & {\n  /**\n   * Whether the user can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the user's text attributes can be edited from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Called after the user has been deleted.\n   */\n  onDeleted?: () => void;\n  userId: string;\n};\n\n/**\n * Shows a user and the groups they belong to, and optionally lets the signed-in user delete them.\n *\n * @example\n * ```tsx\n * <UserDetails userId={userId} deletable onDeleted={() => navigate('/users')} />\n * ```\n */\nconst UserDetails: FC<UserDetailsProps> = ({\n  deletable = false,\n  editable = false,\n  onDeleted,\n  preferences,\n  userId,\n  ...rest\n}: UserDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const user: ResourceQueryResult<ManagedUser> = useResourceQuery(\n    [UserQueryKeys.USER, userId],\n    (fetcher) => getUser({...endpoint, fetcher, userId}),\n    {enabled: Boolean(userId)},\n  );\n  const groups: ResourceQueryResult<MembershipGroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.MEMBERSHIPS, 'user', userId, {limit: 100}],\n    (fetcher) => getUserGroups({...endpoint, fetcher, limit: 100, userId}),\n    {enabled: Boolean(userId)},\n  );\n  const deletion: ResourceMutationResult<void, string> = useResourceMutation(\n    (id: string, fetcher) => deleteUser({...endpoint, fetcher, userId: id}),\n    () => [[UserQueryKeys.USERS]],\n    {onSuccess: onDeleted},\n  );\n  const update: ResourceMutationResult<ManagedUser, UpdateUserVariables> = useResourceMutation(\n    ({data, userId: id}: UpdateUserVariables, fetcher) => updateUser({...endpoint, fetcher, payload: data, userId: id}),\n    ({userId: id}: UpdateUserVariables) => [[UserQueryKeys.USER, id], [UserQueryKeys.USERS]],\n  );\n\n  return (\n    <BaseUserDetails\n      user={user.data}\n      groups={groups.data?.groups}\n      isLoading={user.isLoading}\n      error={\n        toManagementErrorMessage(t, user.error, 'admin.users.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.users.details.delete.error') ??\n        toManagementErrorMessage(t, update.error, 'admin.users.details.edit.error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(userId) : undefined}\n      isUpdating={update.isLoading}\n      onUpdate={\n        editable && user.data\n          ? (attributes: Record<string, unknown>): void =>\n              void update.mutate({data: {attributes, ouId: user.data!.ouId, type: user.data!.type}, userId})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAwDA,MAAMA,eAAqC,EACzC,YAAY,OACZ,WAAW,OACX,WACA,aACA,OACA,GAAG,WACiC;CACpC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,sCAAsB,QAAQ;CACnE,MAAMC,OAAyCC,iCAC7C,CAACC,kCAAc,MAAM,OAAO,GAC3B,6CAAoB;EAAC,GAAG;EAAU;EAAS;EAAO,CAAC,EACpD,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,SAA2DF,iCAC/D;EAACG,mCAAe;EAAa;EAAQ;EAAQ,EAAC,OAAO,KAAI;EAAC,GACzD,mDAA0B;EAAC,GAAG;EAAU;EAAS,OAAO;EAAK;EAAO,CAAC,EACtE,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,WAAiDC,qCACpD,IAAY,gDAAuB;EAAC,GAAG;EAAU;EAAS,QAAQ;EAAG,CAAC,QACjE,CAAC,CAACJ,kCAAc,MAAM,CAAC,EAC7B,EAAC,WAAW,WAAU,CACvB;CACD,MAAMK,SAAmED,qCACtE,EAAC,MAAM,QAAQ,MAA0B,gDAAuB;EAAC,GAAG;EAAU;EAAS,SAAS;EAAM,QAAQ;EAAG,CAAC,GAClH,EAAC,QAAQ,SAA6B,CAAC,CAACJ,kCAAc,MAAM,GAAG,EAAE,CAACA,kCAAc,MAAM,CAAC,CACzF;AAED,QACE,2CAACM;EACC,MAAM,KAAK;EACX,QAAQ,OAAO,MAAM;EACrB,WAAW,KAAK;EAChB,yDAC2B,GAAG,KAAK,OAAO,4BAA4B,sDAC3C,GAAG,SAAS,OAAO,mCAAmC,sDACtD,GAAG,OAAO,OAAO,iCAAiC;EAE7E,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,OAAO,GAAG;EACjE,YAAY,OAAO;EACnB,UACE,YAAY,KAAK,QACZ,eACC,KAAK,OAAO,OAAO;GAAC,MAAM;IAAC;IAAY,MAAM,KAAK,KAAM;IAAM,MAAM,KAAK,KAAM;IAAK;GAAE;GAAO,CAAC,GAChG;EAEO;EACb,GAAI;GACJ;;AAIN,0BAAe"}

package/dist/cjs/components/admin/UserList/UserList.cjs

@@ -1,6 +1,7 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useGetUsers = require('../../../hooks/management/users/useGetUsers.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
 const require_BaseUserList = require('./BaseUserList.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -29,11 +30,19 @@ const UserList = ({ filter, limit = 20, preferences, searchable = true, searchAt
 		label: t("admin.users.list.search.email"),
 		value: "email"
 	}];
-	const { data, error, isLoading } = require_useGetUsers.default({
-		filter: filter ?? (search ? (0, __thunderid_browser.toEqualityFilter)(search.attribute, search.value) : void 0),
+	const endpoint = require_useManagementEndpoint.default("users");
+	const queryFilter = filter ?? (search ? (0, __thunderid_browser.toEqualityFilter)(search.attribute, search.value) : void 0);
+	const { data, error, isLoading } = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USERS, {
+		filter: queryFilter,
 		limit,
 		offset
-	});
+	}], (fetcher) => (0, __thunderid_browser.getUsers)({
+		...endpoint,
+		fetcher,
+		filter: queryFilter,
+		limit,
+		offset
+	}));
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseUserList.default, {
 		users: data?.users ?? [],
 		totalResults: data?.totalResults,

package/dist/cjs/components/admin/UserList/UserList.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"UserList.cjs","names":["UserList: FC<UserListProps>","useTranslation","attributes: SelectOption[]","useGetUsers","BaseUserList"],"sources":["../../../../../src/components/admin/UserList/UserList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toEqualityFilter, toManagementErrorMessage, SelectOption} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseUserList, {BaseUserListProps} from './BaseUserList';\nimport {AdminSearchValue} from '../shared/AdminSearch';\nimport useGetUsers from '../../../hooks/management/users/useGetUsers';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type UserListProps = Omit<\n  BaseUserListProps,\n  'error' | 'isLoading' | 'offset' | 'onPageChange' | 'onSearch' | 'search' | 'totalResults' | 'users'\n> & {\n  /**\n   * Server-side filter expression, for example `username eq \"ada\"`. Hides the search form, since the\n   * server takes one expression.\n   */\n  filter?: string;\n  /**\n   * Whether to show the search form. The server matches the whole value of the chosen attribute.\n   * @default true\n   */\n  searchable?: boolean;\n};\n\n/**\n * Lists the users the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <UserList onSelect={(user) => setSelectedUserId(user.id)} />\n * ```\n */\nconst UserList: FC<UserListProps> = ({\n  filter,\n  limit = 20,\n  preferences,\n  searchable = true,\n  searchAttributes,\n  ...rest\n}: UserListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const [search, setSearch] = useState<AdminSearchValue | null>(null);\n  const attributes: SelectOption[] = searchAttributes ?? [\n    {label: t('admin.users.list.search.username'), value: 'username'},\n    {label: t('admin.users.list.search.email'), value: 'email'},\n  ];\n  const {data, error, isLoading} = useGetUsers({\n    filter: filter ?? (search ? toEqualityFilter(search.attribute, search.value) : undefined),\n    limit,\n    offset,\n  });\n\n  return (\n    <BaseUserList\n      users={data?.users ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.users.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      search={search}\n      searchAttributes={attributes}\n      onSearch={\n        searchable && !filter\n          ? (next: AdminSearchValue | null): void => {\n              setSearch(next);\n              setOffset(0);\n            }\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAkCA,MAAMA,YAA+B,EACnC,QACA,QAAQ,IACR,aACA,aAAa,MACb,iBACA,GAAG,WAC8B;CACjC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAM,CAAC,QAAQ,iCAA+C,KAAK;CACnE,MAAMC,aAA6B,oBAAoB,CACrD;EAAC,OAAO,EAAE,mCAAmC;EAAE,OAAO;EAAW,EACjE;EAAC,OAAO,EAAE,gCAAgC;EAAE,OAAO;EAAQ,CAC5D;CACD,MAAM,EAAC,MAAM,OAAO,cAAaC,4BAAY;EAC3C,QAAQ,WAAW,mDAA0B,OAAO,WAAW,OAAO,MAAM,GAAG;EAC/E;EACA;EACD,CAAC;AAEF,QACE,2CAACC;EACC,OAAO,MAAM,SAAS,EAAE;EACxB,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,yBAAyB;EAC5D;EACC;EACR,cAAc;EACN;EACR,kBAAkB;EAClB,UACE,cAAc,CAAC,UACV,SAAwC;AACvC,aAAU,KAAK;AACf,aAAU,EAAE;MAEd;EAEO;EACb,GAAI;GACJ;;AAIN,uBAAe"}
+{"version":3,"file":"UserList.cjs","names":["UserList: FC<UserListProps>","useTranslation","attributes: SelectOption[]","endpoint: ManagementEndpoint","useManagementEndpoint","queryFilter: string | undefined","useResourceQuery","UserQueryKeys","BaseUserList"],"sources":["../../../../../src/components/admin/UserList/UserList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ManagedUserListResponse,\n  SelectOption,\n  UserQueryKeys,\n  getUsers,\n  toEqualityFilter,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseUserList, {BaseUserListProps} from './BaseUserList';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {AdminSearchValue} from '../shared/AdminSearch';\n\nexport type UserListProps = Omit<\n  BaseUserListProps,\n  'error' | 'isLoading' | 'offset' | 'onPageChange' | 'onSearch' | 'search' | 'totalResults' | 'users'\n> & {\n  /**\n   * Server-side filter expression, for example `username eq \"ada\"`. Hides the search form, since the\n   * server takes one expression.\n   */\n  filter?: string;\n  /**\n   * Whether to show the search form. The server matches the whole value of the chosen attribute.\n   * @default true\n   */\n  searchable?: boolean;\n};\n\n/**\n * Lists the users the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <UserList onSelect={(user) => setSelectedUserId(user.id)} />\n * ```\n */\nconst UserList: FC<UserListProps> = ({\n  filter,\n  limit = 20,\n  preferences,\n  searchable = true,\n  searchAttributes,\n  ...rest\n}: UserListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const [search, setSearch] = useState<AdminSearchValue | null>(null);\n  const attributes: SelectOption[] = searchAttributes ?? [\n    {label: t('admin.users.list.search.username'), value: 'username'},\n    {label: t('admin.users.list.search.email'), value: 'email'},\n  ];\n  const endpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const queryFilter: string | undefined =\n    filter ?? (search ? toEqualityFilter(search.attribute, search.value) : undefined);\n  const {data, error, isLoading}: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {filter: queryFilter, limit, offset}],\n    (fetcher) => getUsers({...endpoint, fetcher, filter: queryFilter, limit, offset}),\n  );\n\n  return (\n    <BaseUserList\n      users={data?.users ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.users.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      search={search}\n      searchAttributes={attributes}\n      onSearch={\n        searchable && !filter\n          ? (next: AdminSearchValue | null): void => {\n              setSearch(next);\n              setOffset(0);\n            }\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA0CA,MAAMA,YAA+B,EACnC,QACA,QAAQ,IACR,aACA,aAAa,MACb,iBACA,GAAG,WAC8B;CACjC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAM,CAAC,QAAQ,iCAA+C,KAAK;CACnE,MAAMC,aAA6B,oBAAoB,CACrD;EAAC,OAAO,EAAE,mCAAmC;EAAE,OAAO;EAAW,EACjE;EAAC,OAAO,EAAE,gCAAgC;EAAE,OAAO;EAAQ,CAC5D;CACD,MAAMC,WAA+BC,sCAAsB,QAAQ;CACnE,MAAMC,cACJ,WAAW,mDAA0B,OAAO,WAAW,OAAO,MAAM,GAAG;CACzE,MAAM,EAAC,MAAM,OAAO,cAA2DC,iCAC7E,CAACC,kCAAc,OAAO;EAAC,QAAQ;EAAa;EAAO;EAAO,CAAC,GAC1D,8CAAqB;EAAC,GAAG;EAAU;EAAS,QAAQ;EAAa;EAAO;EAAO,CAAC,CAClF;AAED,QACE,2CAACC;EACC,OAAO,MAAM,SAAS,EAAE;EACxB,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,yBAAyB;EAC5D;EACC;EACR,cAAc;EACN;EACR,kBAAkB;EAClB,UACE,cAAc,CAAC,UACV,SAAwC;AACvC,aAAU,KAAK;AACf,aAAU,EAAE;MAEd;EAEO;EACb,GAAI;GACJ;;AAIN,uBAAe"}

package/dist/cjs/components/admin/shared/ApplicationFormFields.cjs

@@ -0,0 +1,62 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_Checkbox = require('../../primitives/Checkbox/Checkbox.cjs');
+const require_TextField = require('../../primitives/TextField/TextField.cjs');
+const require_useAdminPartStyles = require('./useAdminPartStyles.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/shared/ApplicationFormFields.tsx
+/**
+* The general fields and OAuth basics of an application, shared by the create form and the edit form.
+*/
+const ApplicationFormFields = ({ onGrantTypesChange, onInputChange, onPublicClientChange, preferences, values }) => {
+	const styles = require_useAdminPartStyles.default();
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const text = (field, label, extra = {}) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_TextField.default, {
+		name: field,
+		label,
+		value: values[field],
+		autoComplete: "off",
+		onChange: (event) => onInputChange(field, event.target.value),
+		...extra
+	});
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+		text("name", t("admin.applications.fields.name"), { required: true }),
+		text("description", t("admin.applications.fields.description")),
+		text("url", t("admin.applications.fields.url")),
+		text("logoUrl", t("admin.applications.fields.logo_url")),
+		text("redirectUris", t("admin.applications.fields.redirect_uris"), { helperText: t("admin.applications.fields.redirect_uris_hint") }),
+		/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("fieldset", {
+			className: styles["row"],
+			style: {
+				border: 0,
+				flexWrap: "wrap",
+				margin: 0,
+				padding: 0
+			},
+			children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("legend", {
+				className: styles["muted"],
+				children: t("admin.applications.fields.grant_types")
+			}), __thunderid_browser.APPLICATION_GRANT_TYPES.map((grantType) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Checkbox.default, {
+				name: `grantType-${grantType}`,
+				label: t(`admin.applications.grant_types.${grantType}`),
+				checked: values.grantTypes.includes(grantType),
+				onChange: (event) => onGrantTypesChange(event.target.checked ? [...values.grantTypes, grantType] : values.grantTypes.filter((value) => value !== grantType))
+			}, grantType))]
+		}),
+		onPublicClientChange && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Checkbox.default, {
+			name: "publicClient",
+			label: t("admin.applications.fields.public_client"),
+			checked: values.publicClient,
+			onChange: (event) => onPublicClientChange(event.target.checked)
+		})
+	] });
+};
+var ApplicationFormFields_default = ApplicationFormFields;
+
+//#endregion
+exports.default = ApplicationFormFields_default;
+//# sourceMappingURL=ApplicationFormFields.cjs.map

package/dist/cjs/components/admin/shared/ApplicationFormFields.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApplicationFormFields.cjs","names":["ApplicationFormFields: FC<ApplicationFormFieldsProps>","styles: Record<string, string>","useAdminPartStyles","useTranslation","TextField","APPLICATION_GRANT_TYPES","Checkbox"],"sources":["../../../../../src/components/admin/shared/ApplicationFormFields.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {APPLICATION_GRANT_TYPES, Preferences} from '@thunderid/browser';\nimport {ChangeEvent, FC, ReactElement} from 'react';\nimport useAdminPartStyles from './useAdminPartStyles';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Checkbox from '../../primitives/Checkbox/Checkbox';\nimport TextField from '../../primitives/TextField/TextField';\n\n/**\n * The text fields of the application forms.\n */\nexport type ApplicationTextField = 'description' | 'logoUrl' | 'name' | 'redirectUris' | 'url';\n\n/**\n * The values of the application forms. `redirectUris` is the text of the field, URIs separated by\n * commas.\n */\nexport interface ApplicationFormValues {\n  description: string;\n  grantTypes: string[];\n  logoUrl: string;\n  name: string;\n  publicClient: boolean;\n  redirectUris: string;\n  url: string;\n}\n\nexport interface ApplicationFormFieldsProps {\n  onGrantTypesChange: (grantTypes: string[]) => void;\n  onInputChange: (field: ApplicationTextField, value: string) => void;\n  /**\n   * Shows the public client choice. Omit it where the client type cannot change.\n   */\n  onPublicClientChange?: (publicClient: boolean) => void;\n  preferences?: Preferences;\n  values: ApplicationFormValues;\n}\n\n/**\n * The general fields and OAuth basics of an application, shared by the create form and the edit form.\n */\nconst ApplicationFormFields: FC<ApplicationFormFieldsProps> = ({\n  onGrantTypesChange,\n  onInputChange,\n  onPublicClientChange,\n  preferences,\n  values,\n}: ApplicationFormFieldsProps): ReactElement => {\n  const styles: Record<string, string> = useAdminPartStyles();\n  const {t} = useTranslation(preferences?.i18n);\n\n  const text = (field: ApplicationTextField, label: string, extra: {helperText?: string; required?: boolean} = {}) => (\n    <TextField\n      name={field}\n      label={label}\n      value={values[field]}\n      autoComplete=\"off\"\n      onChange={(event: ChangeEvent<HTMLInputElement>): void => onInputChange(field, event.target.value)}\n      {...extra}\n    />\n  );\n\n  return (\n    <>\n      {text('name', t('admin.applications.fields.name'), {required: true})}\n      {text('description', t('admin.applications.fields.description'))}\n      {text('url', t('admin.applications.fields.url'))}\n      {text('logoUrl', t('admin.applications.fields.logo_url'))}\n      {text('redirectUris', t('admin.applications.fields.redirect_uris'), {\n        helperText: t('admin.applications.fields.redirect_uris_hint'),\n      })}\n      <fieldset className={styles['row']} style={{border: 0, flexWrap: 'wrap', margin: 0, padding: 0}}>\n        <legend className={styles['muted']}>{t('admin.applications.fields.grant_types')}</legend>\n        {APPLICATION_GRANT_TYPES.map((grantType: string) => (\n          <Checkbox\n            key={grantType}\n            name={`grantType-${grantType}`}\n            label={t(`admin.applications.grant_types.${grantType}`)}\n            checked={values.grantTypes.includes(grantType)}\n            onChange={(event: ChangeEvent<HTMLInputElement>): void =>\n              onGrantTypesChange(\n                event.target.checked\n                  ? [...values.grantTypes, grantType]\n                  : values.grantTypes.filter((value: string) => value !== grantType),\n              )\n            }\n          />\n        ))}\n      </fieldset>\n      {onPublicClientChange && (\n        <Checkbox\n          name=\"publicClient\"\n          label={t('admin.applications.fields.public_client')}\n          checked={values.publicClient}\n          onChange={(event: ChangeEvent<HTMLInputElement>): void => onPublicClientChange(event.target.checked)}\n        />\n      )}\n    </>\n  );\n};\n\nexport default ApplicationFormFields;\n"],"mappings":";;;;;;;;;;;;;;AA2CA,MAAMA,yBAAyD,EAC7D,oBACA,eACA,sBACA,aACA,aAC8C;CAC9C,MAAMC,SAAiCC,oCAAoB;CAC3D,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAE7C,MAAM,QAAQ,OAA6B,OAAe,QAAmD,EAAE,KAC7G,2CAACC;EACC,MAAM;EACC;EACP,OAAO,OAAO;EACd,cAAa;EACb,WAAW,UAA+C,cAAc,OAAO,MAAM,OAAO,MAAM;EAClG,GAAI;GACJ;AAGJ,QACE;EACG,KAAK,QAAQ,EAAE,iCAAiC,EAAE,EAAC,UAAU,MAAK,CAAC;EACnE,KAAK,eAAe,EAAE,wCAAwC,CAAC;EAC/D,KAAK,OAAO,EAAE,gCAAgC,CAAC;EAC/C,KAAK,WAAW,EAAE,qCAAqC,CAAC;EACxD,KAAK,gBAAgB,EAAE,0CAA0C,EAAE,EAClE,YAAY,EAAE,+CAA+C,EAC9D,CAAC;EACF,4CAAC;GAAS,WAAW,OAAO;GAAQ,OAAO;IAAC,QAAQ;IAAG,UAAU;IAAQ,QAAQ;IAAG,SAAS;IAAE;cAC7F,2CAAC;IAAO,WAAW,OAAO;cAAW,EAAE,wCAAwC;KAAU,EACxFC,4CAAwB,KAAK,cAC5B,2CAACC;IAEC,MAAM,aAAa;IACnB,OAAO,EAAE,kCAAkC,YAAY;IACvD,SAAS,OAAO,WAAW,SAAS,UAAU;IAC9C,WAAW,UACT,mBACE,MAAM,OAAO,UACT,CAAC,GAAG,OAAO,YAAY,UAAU,GACjC,OAAO,WAAW,QAAQ,UAAkB,UAAU,UAAU,CACrE;MATE,UAWL,CACF;IACO;EACV,wBACC,2CAACA;GACC,MAAK;GACL,OAAO,EAAE,0CAA0C;GACnD,SAAS,OAAO;GAChB,WAAW,UAA+C,qBAAqB,MAAM,OAAO,QAAQ;IACpG;KAEH;;AAIP,oCAAe"}