@thunderid/react 1.6.0 → 1.8.0

package/dist/cjs/components/admin/shared/ClientSecretNotice.cjs

@@ -0,0 +1,49 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_Button = require('../../primitives/Button/Button.cjs');
+const require_Alert = require('../../primitives/Alert/Alert.cjs');
+const require_CopyableText = require('../../primitives/CopyableText/CopyableText.cjs');
+const require_useAdminPartStyles = require('./useAdminPartStyles.cjs');
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/shared/ClientSecretNotice.tsx
+/**
+* Shows a client secret the one time it can be read, masked until revealed, with a copy button.
+*/
+const ClientSecretNotice = ({ onDismiss, preferences, secret }) => {
+	const styles = require_useAdminPartStyles.default();
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		className: styles["row"],
+		style: {
+			alignItems: "stretch",
+			flexDirection: "column"
+		},
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Alert.default, {
+				variant: "warning",
+				role: "status",
+				children: t("admin.applications.secret.notice")
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_CopyableText.default, {
+				label: t("admin.applications.secret.title"),
+				value: secret,
+				masked: true
+			}),
+			onDismiss && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: styles["row"],
+				style: { justifyContent: "flex-end" },
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Button.default, {
+					onClick: onDismiss,
+					children: t("admin.applications.secret.done")
+				})
+			})
+		]
+	});
+};
+var ClientSecretNotice_default = ClientSecretNotice;
+
+//#endregion
+exports.default = ClientSecretNotice_default;
+//# sourceMappingURL=ClientSecretNotice.cjs.map

package/dist/cjs/components/admin/shared/ClientSecretNotice.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClientSecretNotice.cjs","names":["ClientSecretNotice: FC<ClientSecretNoticeProps>","styles: Record<string, string>","useAdminPartStyles","useTranslation","Alert","CopyableText","Button"],"sources":["../../../../../src/components/admin/shared/ClientSecretNotice.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Preferences} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport useAdminPartStyles from './useAdminPartStyles';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport Button from '../../primitives/Button/Button';\nimport CopyableText from '../../primitives/CopyableText/CopyableText';\n\nexport interface ClientSecretNoticeProps {\n  /**\n   * Called once the secret has been copied, after which it cannot be read again.\n   */\n  onDismiss?: () => void;\n  preferences?: Preferences;\n  secret: string;\n}\n\n/**\n * Shows a client secret the one time it can be read, masked until revealed, with a copy button.\n */\nconst ClientSecretNotice: FC<ClientSecretNoticeProps> = ({\n  onDismiss,\n  preferences,\n  secret,\n}: ClientSecretNoticeProps): ReactElement => {\n  const styles: Record<string, string> = useAdminPartStyles();\n  const {t} = useTranslation(preferences?.i18n);\n\n  return (\n    <div className={styles['row']} style={{alignItems: 'stretch', flexDirection: 'column'}}>\n      <Alert variant=\"warning\" role=\"status\">\n        {t('admin.applications.secret.notice')}\n      </Alert>\n      <CopyableText label={t('admin.applications.secret.title')} value={secret} masked />\n      {onDismiss && (\n        <div className={styles['row']} style={{justifyContent: 'flex-end'}}>\n          <Button onClick={onDismiss}>{t('admin.applications.secret.done')}</Button>\n        </div>\n      )}\n    </div>\n  );\n};\n\nexport default ClientSecretNotice;\n"],"mappings":";;;;;;;;;;;;;AAuBA,MAAMA,sBAAmD,EACvD,WACA,aACA,aAC2C;CAC3C,MAAMC,SAAiCC,oCAAoB;CAC3D,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;AAE7C,QACE,4CAAC;EAAI,WAAW,OAAO;EAAQ,OAAO;GAAC,YAAY;GAAW,eAAe;GAAS;;GACpF,2CAACC;IAAM,SAAQ;IAAU,MAAK;cAC3B,EAAE,mCAAmC;KAChC;GACR,2CAACC;IAAa,OAAO,EAAE,kCAAkC;IAAE,OAAO;IAAQ;KAAS;GAClF,aACC,2CAAC;IAAI,WAAW,OAAO;IAAQ,OAAO,EAAC,gBAAgB,YAAW;cAChE,2CAACC;KAAO,SAAS;eAAY,EAAE,iCAAiC;MAAU;KACtE;;GAEJ;;AAIV,iCAAe"}

package/dist/cjs/components/auth/InviteUser/InviteUser.cjs

@@ -1,7 +1,7 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useThunderID = require('../../../contexts/ThunderID/useThunderID.cjs');
-const require_useFetchUsers = require('../../../hooks/management/useFetchUsers.cjs');
 const require_useFetchAuthFlows = require('../../../hooks/auth/useFetchAuthFlows.cjs');
+const require_useFetchUsers = require('../../../hooks/management/useFetchUsers.cjs');
 const require_useFetchUserTypes = require('../../../hooks/management/useFetchUserTypes.cjs');
 const require_BaseInviteUser = require('./BaseInviteUser.cjs');
 let __thunderid_browser = require("@thunderid/browser");

package/dist/cjs/components/auth/flow/Consent.cjs

@@ -5,10 +5,18 @@ const require_Typography = require('../../primitives/Typography/Typography.cjs')
 const require_Toggle = require('../../primitives/Toggle/Toggle.cjs');
 const require_ConsentCheckboxList = require('./ConsentCheckboxList.cjs');
 const require_Tooltip = require('../../primitives/Tooltip/Tooltip.cjs');
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
 //#region src/components/auth/flow/Consent.tsx
+const isObject = (value) => typeof value === "object" && value !== null;
+/**
+* Keep only well-formed prompt elements (non-null objects with a string `name`).
+* @param value Raw `essential`/`optional` value from the consent payload
+*/
+const toPromptElements = (value) => Array.isArray(value) ? value.filter((element) => isObject(element) && typeof element["name"] === "string") : [];
 /**
 * Consent component renders the list of purposes and their associated attributes (essential and optional)
 * based on the data provided by the backend. It allows users to toggle optional attributes while essential
@@ -41,21 +49,26 @@ const Consent = ({ consentData, formValues, onInputChange, children, t }) => {
 		display: "flex",
 		gap: "4px"
 	});
-	/** Resolve i18n keys */
-	const resolve = (text) => {
-		if (!text || !t) return text || "";
-		return t(text);
-	};
-	const essentialInfo = resolve(`consent.essential_claims.info`);
-	const optionalInfo = resolve(`consent.optional_claims.info`);
-	const permissionInfo = resolve(`consent.authorize_scope.info`);
 	/**
-	* Falls back to default config values if essential/optional
-	* keys cannot be resolved via translation files .
+	* Resolve an i18n key, falling back to the given value when no translation is found.
+	* `t` returns the key itself for missing translations, so that case is treated as "not found".
+	* @param key Translation key
+	* @param fallback Value to use when the key cannot be resolved
 	*/
-	const essentialLabel = resolve(`consent.essential_claims`) || "Essential Attributes";
-	const optionalLabel = resolve(`consent.optional_claims`) || "Optional Attributes";
-	const permissionLabel = resolve(`consent.authorize_scope`) || "Permissions";
+	const resolve = (key, fallback = "") => {
+		const translated = t?.(key);
+		return translated && translated !== key ? translated : fallback;
+	};
+	const essentialInfo = resolve("consent.essential_claims.info");
+	const optionalInfo = resolve("consent.optional_claims.info");
+	const essentialPermissionInfo = resolve("consent.essential_scope.info");
+	const optionalPermissionInfo = resolve("consent.optional_scope.info");
+	const essentialLabel = resolve("consent.essential_claims", "Essential Attributes");
+	const optionalLabel = resolve("consent.optional_claims", "Optional Attributes");
+	const essentialPermissionLabel = resolve("consent.essential_scope", "Essential Permissions");
+	const optionalPermissionLabel = resolve("consent.optional_scope", "Optional Permissions");
+	const toggleAllAttributesLabel = resolve("consent.optional_claims.toggle_all", "Toggle all optional attributes");
+	const toggleAllPermissionsLabel = resolve("consent.optional_scope.toggle_all", "Toggle all optional permissions");
 	/**
 	* Method to check whether master toggle button is checked or not
 	* @param purpose Purpose object
@@ -63,7 +76,7 @@ const Consent = ({ consentData, formValues, onInputChange, children, t }) => {
 	*/
 	const handleChange = (purpose, checked) => {
 		const checkValue = checked ? "true" : "false";
-		purpose.optional.map((opt) => {
+		purpose.optional.forEach((opt) => {
 			onInputChange(require_ConsentCheckboxList.getConsentOptionalKey(purpose.purposeId, opt.name), checkValue);
 		});
 	};
@@ -77,14 +90,38 @@ const Consent = ({ consentData, formValues, onInputChange, children, t }) => {
 			return formValues[require_ConsentCheckboxList.getConsentOptionalKey(purpose.purposeId, opt.name)] === "true";
 		});
 	};
-	if (!consentData) return null;
-	let purposes = [];
-	try {
-		const parsed = typeof consentData === "string" ? JSON.parse(consentData) : consentData;
-		purposes = Array.isArray(parsed) ? parsed : parsed.purposes || [];
-	} catch (e) {
-		return null;
-	}
+	/**
+	* Renders a section title with an optional info tooltip.
+	* @param label Section title
+	* @param info Tooltip text; the tooltip is omitted when empty
+	*/
+	const renderSectionTitle = (label, info) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Typography.default, {
+		variant: "subtitle2",
+		fontWeight: "bold",
+		children: label
+	}), info && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Tooltip.default, {
+		helperText: info,
+		children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Info.default, {
+			width: "1rem",
+			height: "1rem"
+		})
+	})] });
+	const purposes = (0, react.useMemo)(() => {
+		if (!consentData) return [];
+		let parsed;
+		try {
+			parsed = typeof consentData === "string" ? JSON.parse(consentData) : consentData;
+		} catch (e) {
+			return [];
+		}
+		const rawPurposes = Array.isArray(parsed) ? parsed : parsed?.purposes;
+		if (!Array.isArray(rawPurposes)) return [];
+		return rawPurposes.filter((purpose) => isObject(purpose) && typeof purpose["purposeId"] === "string").map((purpose) => ({
+			...purpose,
+			essential: toPromptElements(purpose["essential"]),
+			optional: toPromptElements(purpose["optional"])
+		})).sort((a, b) => Number(b.type === "permissions") - Number(a.type === "permissions"));
+	}, [consentData]);
 	if (purposes.length === 0) return null;
 	if (children) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(react_jsx_runtime.Fragment, { children: children({
 		formValues,
@@ -93,62 +130,45 @@ const Consent = ({ consentData, formValues, onInputChange, children, t }) => {
 	}) });
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
 		className: purposesContainerClass,
-		children: purposes.map((purpose, purposeIndex) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-			className: purposeItemClass,
-			children: [purpose.essential && purpose.essential.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: sectionClass,
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-					className: sectionHeaderClass,
-					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Typography.default, {
-						variant: "subtitle2",
-						fontWeight: "bold",
-						children: essentialLabel
-					}), essentialInfo !== "" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Tooltip.default, {
-						helperText: essentialInfo,
-						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Info.default, {
-							width: "1rem",
-							height: "1rem"
-						})
+		children: purposes.map((purpose, purposeIndex) => {
+			const isPermission = purpose.type === "permissions";
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: purposeItemClass,
+				children: [purpose.essential?.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: sectionClass,
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+						className: sectionHeaderClass,
+						children: renderSectionTitle(isPermission ? essentialPermissionLabel : essentialLabel, isPermission ? essentialPermissionInfo : essentialInfo)
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_ConsentCheckboxList.default, {
+						variant: "ESSENTIAL",
+						purpose,
+						formValues,
+						onInputChange,
+						t
 					})]
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_ConsentCheckboxList.default, {
-					variant: "ESSENTIAL",
-					purpose,
-					formValues,
-					onInputChange,
-					t
-				})]
-			}), purpose.optional && purpose.optional.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-				className: sectionClass,
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-					className: optionalSectionHeaderClass,
+				}), purpose.optional?.length > 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: sectionClass,
 					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						className: optionalSectionLabelClass,
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Typography.default, {
-							variant: "subtitle2",
-							fontWeight: "bold",
-							children: purpose.type === "permissions" ? permissionLabel : optionalLabel
-						}), Boolean(purpose.type === "permissions" ? permissionInfo : optionalInfo) && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Tooltip.default, {
-							helperText: purpose.type === "permissions" ? permissionInfo : optionalInfo,
-							children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Info.default, {
-								width: "1rem",
-								height: "1rem"
-							})
+						className: optionalSectionHeaderClass,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							className: optionalSectionLabelClass,
+							children: renderSectionTitle(isPermission ? optionalPermissionLabel : optionalLabel, isPermission ? optionalPermissionInfo : optionalInfo)
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Toggle.default, {
+							id: `consent_opt_${purpose.purposeId}_all`,
+							checked: checkOptValue(purpose),
+							"aria-label": isPermission ? toggleAllPermissionsLabel : toggleAllAttributesLabel,
+							onChange: (e) => handleChange(purpose, e.target.checked)
 						})]
-					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Toggle.default, {
-						id: `consent_opt_${purpose.purposeId}_all`,
-						checked: checkOptValue(purpose),
-						"aria-label": "Toggle all optional attributes",
-						onChange: (e) => handleChange(purpose, e.target.checked)
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_ConsentCheckboxList.default, {
+						variant: "OPTIONAL",
+						purpose,
+						formValues,
+						onInputChange,
+						t
 					})]
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_ConsentCheckboxList.default, {
-					variant: "OPTIONAL",
-					purpose,
-					formValues,
-					onInputChange,
-					t
 				})]
-			})]
-		}, purpose.purposeId || purposeIndex))
+			}, purpose.purposeId || purposeIndex);
+		})
 	});
 };
 var Consent_default = Consent;

package/dist/cjs/components/auth/flow/Consent.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"Consent.cjs","names":["Consent: FC<ConsentProps>","purposesContainerClass: string","css","purposeItemClass: string","sectionClass: string","sectionHeaderClass: string","optionalSectionHeaderClass: string","optionalSectionLabelClass: string","getConsentOptionalKey","purposes: ConsentPurposeData[]","parsed: ConsentPurposeData[] | {purposes: ConsentPurposeData[]}","Typography","Tooltip","Info","ConsentCheckboxList","Toggle"],"sources":["../../../../../src/components/auth/flow/Consent.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {type ConsentPurposeData, PromptElement} from '@thunderid/browser';\nimport {type ChangeEvent, FC, ReactNode} from 'react';\nimport ConsentCheckboxList, {getConsentOptionalKey} from './ConsentCheckboxList';\nimport Typography from '../../primitives/Typography/Typography';\nimport Toggle from '../../primitives/Toggle/Toggle';\nimport {Info} from '../../primitives/Icons';\nimport Tooltip from '../../primitives/Tooltip/Tooltip';\nimport {UseTranslation} from '../../../hooks/useTranslation';\nimport {css} from '../../../styles/emotion';\n\n/**\n * Backward-compatible consent purpose type exported by @thunderid/react.\n *\n * Some consumers import this name directly; keep it as an alias to the v2 model.\n */\nexport type ConsentPurpose = ConsentPurposeData;\n\n/**\n * Render props exposed by Consent when using the render-prop pattern.\n */\nexport interface ConsentRenderProps {\n  /** Current form values - used to read optional checkbox state. */\n  formValues: Record<string, string>;\n  /** Callback invoked when a user toggles an optional attribute. */\n  onInputChange: (name: string, value: string) => void;\n  /** The resolved list of consent purposes parsed from `consentData`. */\n  purposes: ConsentPurposeData[];\n}\n\n/**\n * Props for the Consent component.\n */\nexport interface ConsentProps {\n  /**\n   * Render-props callback. When provided, the default consent UI is replaced with\n   * whatever JSX the callback returns. The parsed `purposes` list is injected so\n   * consumers do not need to re-parse `consentData` themselves.\n   *\n   * @example\n   * ```tsx\n   * <Consent consentData={raw} formValues={formInputs} onInputChange={onChange} t={t}>\n   *   {({ purposes, formValues, onInputChange, t }) => (\n   *     <div>\n   *       {purposes.map(p => <MyConsentSection key={p.purposeId} purpose={p} />)}\n   *     </div>\n   *   )}\n   * </Consent>\n   * ```\n   */\n  children?: (props: ConsentRenderProps) => ReactNode;\n  /**\n   * The raw JSON string returned by the backend in `additionalData.consentPrompt`.\n   */\n  consentData?: string | ConsentPurposeData[] | {purposes: ConsentPurposeData[]};\n  /**\n   * Current form values - used to read optional checkbox state.\n   */\n  formValues: Record<string, string>;\n  /**\n   * Callback invoked when a user toggles an optional attribute.\n   */\n  onInputChange: (name: string, value: string) => void;\n\n  /**\n   * translation data\n   */\n  t?: UseTranslation['t'];\n}\n\n/**\n * Consent component renders the list of purposes and their associated attributes (essential and optional)\n * based on the data provided by the backend. It allows users to toggle optional attributes while essential\n * attributes are displayed as read-only.\n */\nconst Consent: FC<ConsentProps> = ({consentData, formValues, onInputChange, children, t}: ConsentProps) => {\n  // Computed per render (not at module scope): a CSP nonce configured on <ThunderIDProvider>\n  // isn't known until the provider renders, and Emotion needs it applied before any style\n  // insertion happens. These are static, so Emotion's own cache dedupes the repeat calls to a\n  // no-op after the first render — this isn't a real per-render cost.\n  const purposesContainerClass: string = css({\n    display: 'flex',\n    flexDirection: 'column',\n    gap: '1rem',\n    marginTop: '0.25rem',\n  });\n  const purposeItemClass: string = css({paddingBottom: '1rem'});\n  const sectionClass: string = css({marginTop: '0.5rem'});\n  const sectionHeaderClass: string = css({alignItems: 'center', display: 'flex', gap: '4px', marginBottom: '10px'});\n  const optionalSectionHeaderClass: string = css({\n    alignItems: 'center',\n    display: 'flex',\n    justifyContent: 'space-between',\n    marginBottom: '10px',\n    paddingRight: '4px',\n  });\n  const optionalSectionLabelClass: string = css({alignItems: 'center', display: 'flex', gap: '4px'});\n\n  /** Resolve i18n keys */\n  const resolve = (text: string | undefined): string => {\n    if (!text || !t) {\n      return text || '';\n    }\n    return t(text);\n  };\n\n  const essentialInfo = resolve(`consent.essential_claims.info`);\n  const optionalInfo = resolve(`consent.optional_claims.info`);\n  const permissionInfo = resolve(`consent.authorize_scope.info`);\n  /**\n   * Falls back to default config values if essential/optional\n   * keys cannot be resolved via translation files .\n   */\n  const essentialLabel = resolve(`consent.essential_claims`) || 'Essential Attributes';\n  const optionalLabel = resolve(`consent.optional_claims`) || 'Optional Attributes';\n  const permissionLabel = resolve(`consent.authorize_scope`) || 'Permissions';\n\n  /**\n   * Method to check whether master toggle button is checked or not\n   * @param purpose Purpose object\n   * @param checked boolean variable to check, whether toggle is checked or unchecked\n   */\n  const handleChange = (purpose: ConsentPurposeData, checked: boolean): void => {\n    const checkValue = checked ? 'true' : 'false';\n    purpose.optional.map((opt: PromptElement) => {\n      const key: string = getConsentOptionalKey(purpose.purposeId, opt.name);\n      onInputChange(key, checkValue);\n    });\n  };\n\n  /**\n   * Check all optional claims are selected or not\n   * @param purpose Purpose object\n   * @returns boolean value to denote all optional claims are selected\n   */\n  const checkOptValue = (purpose: ConsentPurposeData): boolean => {\n    return purpose.optional.every((opt: PromptElement) => {\n      const key: string = getConsentOptionalKey(purpose.purposeId, opt.name);\n      return formValues[key] === 'true';\n    });\n  };\n\n  if (!consentData) return null;\n\n  let purposes: ConsentPurposeData[] = [];\n\n  try {\n    const parsed: ConsentPurposeData[] | {purposes: ConsentPurposeData[]} =\n      typeof consentData === 'string' ? JSON.parse(consentData) : consentData;\n\n    purposes = Array.isArray(parsed) ? parsed : parsed.purposes || [];\n  } catch (e) {\n    // Failed to parse consent prompt data\n    return null;\n  }\n\n  if (purposes.length === 0) return null;\n\n  if (children) {\n    return <>{children({formValues, onInputChange, purposes: purposes})}</>;\n  }\n\n  return (\n    <div className={purposesContainerClass}>\n      {purposes.map((purpose: ConsentPurposeData, purposeIndex: number) => (\n        <div key={purpose.purposeId || purposeIndex} className={purposeItemClass}>\n          {/* TODO: Uncomment when the backend supports multiple purposes for a application */}\n          {/* <Typography variant=\"h6\" fontWeight={600} gutterBottom color=\"inherit\">\n            {purpose.purposeName}\n          </Typography>\n          <Typography variant=\"body2\" color=\"inherit\" style={{marginBottom: '1rem', opacity: 0.85}}>\n            {purpose.description}\n          </Typography> */}\n\n          {purpose.essential && purpose.essential.length > 0 && (\n            <div className={sectionClass}>\n              <div className={sectionHeaderClass}>\n                <Typography variant=\"subtitle2\" fontWeight=\"bold\">\n                  {essentialLabel}\n                </Typography>\n                {essentialInfo !== '' && (\n                  <Tooltip helperText={essentialInfo}>\n                    <Info width=\"1rem\" height=\"1rem\" />\n                  </Tooltip>\n                )}\n              </div>\n              <ConsentCheckboxList\n                variant=\"ESSENTIAL\"\n                purpose={purpose}\n                formValues={formValues}\n                onInputChange={onInputChange}\n                t={t}\n              />\n            </div>\n          )}\n\n          {purpose.optional && purpose.optional.length > 0 && (\n            <div className={sectionClass}>\n              <div className={optionalSectionHeaderClass}>\n                <div className={optionalSectionLabelClass}>\n                  <Typography variant=\"subtitle2\" fontWeight=\"bold\">\n                    {purpose.type === 'permissions' ? permissionLabel : optionalLabel}\n                  </Typography>\n                  {/* Show tooltip for optional claims/permissions according to their type */}\n                  {Boolean(purpose.type === 'permissions' ? permissionInfo : optionalInfo) && (\n                    <Tooltip helperText={purpose.type === 'permissions' ? permissionInfo : optionalInfo}>\n                      <Info width=\"1rem\" height=\"1rem\" />\n                    </Tooltip>\n                  )}\n                </div>\n                <Toggle\n                  id={`consent_opt_${purpose.purposeId}_all`}\n                  checked={checkOptValue(purpose)}\n                  aria-label=\"Toggle all optional attributes\"\n                  onChange={(e: ChangeEvent<HTMLInputElement>): void => handleChange(purpose, e.target.checked)}\n                />\n              </div>\n              <ConsentCheckboxList\n                variant=\"OPTIONAL\"\n                purpose={purpose}\n                formValues={formValues}\n                onInputChange={onInputChange}\n                t={t}\n              />\n            </div>\n          )}\n        </div>\n      ))}\n    </div>\n  );\n};\n\nexport default Consent;\n"],"mappings":";;;;;;;;;;;;;;;;AA6EA,MAAMA,WAA6B,EAAC,aAAa,YAAY,eAAe,UAAU,QAAqB;CAKzG,MAAMC,yBAAiCC,oBAAI;EACzC,SAAS;EACT,eAAe;EACf,KAAK;EACL,WAAW;EACZ,CAAC;CACF,MAAMC,mBAA2BD,oBAAI,EAAC,eAAe,QAAO,CAAC;CAC7D,MAAME,eAAuBF,oBAAI,EAAC,WAAW,UAAS,CAAC;CACvD,MAAMG,qBAA6BH,oBAAI;EAAC,YAAY;EAAU,SAAS;EAAQ,KAAK;EAAO,cAAc;EAAO,CAAC;CACjH,MAAMI,6BAAqCJ,oBAAI;EAC7C,YAAY;EACZ,SAAS;EACT,gBAAgB;EAChB,cAAc;EACd,cAAc;EACf,CAAC;CACF,MAAMK,4BAAoCL,oBAAI;EAAC,YAAY;EAAU,SAAS;EAAQ,KAAK;EAAM,CAAC;;CAGlG,MAAM,WAAW,SAAqC;AACpD,MAAI,CAAC,QAAQ,CAAC,EACZ,QAAO,QAAQ;AAEjB,SAAO,EAAE,KAAK;;CAGhB,MAAM,gBAAgB,QAAQ,gCAAgC;CAC9D,MAAM,eAAe,QAAQ,+BAA+B;CAC5D,MAAM,iBAAiB,QAAQ,+BAA+B;;;;;CAK9D,MAAM,iBAAiB,QAAQ,2BAA2B,IAAI;CAC9D,MAAM,gBAAgB,QAAQ,0BAA0B,IAAI;CAC5D,MAAM,kBAAkB,QAAQ,0BAA0B,IAAI;;;;;;CAO9D,MAAM,gBAAgB,SAA6B,YAA2B;EAC5E,MAAM,aAAa,UAAU,SAAS;AACtC,UAAQ,SAAS,KAAK,QAAuB;AAE3C,iBADoBM,kDAAsB,QAAQ,WAAW,IAAI,KAAK,EACnD,WAAW;IAC9B;;;;;;;CAQJ,MAAM,iBAAiB,YAAyC;AAC9D,SAAO,QAAQ,SAAS,OAAO,QAAuB;AAEpD,UAAO,WADaA,kDAAsB,QAAQ,WAAW,IAAI,KAAK,MAC3C;IAC3B;;AAGJ,KAAI,CAAC,YAAa,QAAO;CAEzB,IAAIC,WAAiC,EAAE;AAEvC,KAAI;EACF,MAAMC,SACJ,OAAO,gBAAgB,WAAW,KAAK,MAAM,YAAY,GAAG;AAE9D,aAAW,MAAM,QAAQ,OAAO,GAAG,SAAS,OAAO,YAAY,EAAE;UAC1D,GAAG;AAEV,SAAO;;AAGT,KAAI,SAAS,WAAW,EAAG,QAAO;AAElC,KAAI,SACF,QAAO,mFAAG,SAAS;EAAC;EAAY;EAAyB;EAAS,CAAC,GAAI;AAGzE,QACE,2CAAC;EAAI,WAAW;YACb,SAAS,KAAK,SAA6B,iBAC1C,4CAAC;GAA4C,WAAW;cASrD,QAAQ,aAAa,QAAQ,UAAU,SAAS,KAC/C,4CAAC;IAAI,WAAW;eACd,4CAAC;KAAI,WAAW;gBACd,2CAACC;MAAW,SAAQ;MAAY,YAAW;gBACxC;OACU,EACZ,kBAAkB,MACjB,2CAACC;MAAQ,YAAY;gBACnB,2CAACC;OAAK,OAAM;OAAO,QAAO;QAAS;OAC3B;MAER,EACN,2CAACC;KACC,SAAQ;KACC;KACG;KACG;KACZ;MACH;KACE,EAGP,QAAQ,YAAY,QAAQ,SAAS,SAAS,KAC7C,4CAAC;IAAI,WAAW;eACd,4CAAC;KAAI,WAAW;gBACd,4CAAC;MAAI,WAAW;iBACd,2CAACH;OAAW,SAAQ;OAAY,YAAW;iBACxC,QAAQ,SAAS,gBAAgB,kBAAkB;QACzC,EAEZ,QAAQ,QAAQ,SAAS,gBAAgB,iBAAiB,aAAa,IACtE,2CAACC;OAAQ,YAAY,QAAQ,SAAS,gBAAgB,iBAAiB;iBACrE,2CAACC;QAAK,OAAM;QAAO,QAAO;SAAS;QAC3B;OAER,EACN,2CAACE;MACC,IAAI,eAAe,QAAQ,UAAU;MACrC,SAAS,cAAc,QAAQ;MAC/B,cAAW;MACX,WAAW,MAA2C,aAAa,SAAS,EAAE,OAAO,QAAQ;OAC7F;MACE,EACN,2CAACD;KACC,SAAQ;KACC;KACG;KACG;KACZ;MACH;KACE;KA3DA,QAAQ,aAAa,aA6DzB,CACN;GACE;;AAIV,sBAAe"}
+{"version":3,"file":"Consent.cjs","names":["Consent: FC<ConsentProps>","purposesContainerClass: string","css","purposeItemClass: string","sectionClass: string","sectionHeaderClass: string","optionalSectionHeaderClass: string","optionalSectionLabelClass: string","translated: string | undefined","getConsentOptionalKey","Typography","Tooltip","Info","purposes: ConsentPurposeData[]","parsed: unknown","rawPurposes: unknown","isPermission: boolean","ConsentCheckboxList","Toggle"],"sources":["../../../../../src/components/auth/flow/Consent.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {type ConsentPurposeData, PromptElement} from '@thunderid/browser';\nimport {type ChangeEvent, FC, ReactNode, useMemo} from 'react';\nimport ConsentCheckboxList, {getConsentOptionalKey} from './ConsentCheckboxList';\nimport Typography from '../../primitives/Typography/Typography';\nimport Toggle from '../../primitives/Toggle/Toggle';\nimport {Info} from '../../primitives/Icons';\nimport Tooltip from '../../primitives/Tooltip/Tooltip';\nimport {UseTranslation} from '../../../hooks/useTranslation';\nimport {css} from '../../../styles/emotion';\n\n/**\n * Backward-compatible consent purpose type exported by @thunderid/react.\n *\n * Some consumers import this name directly; keep it as an alias to the v2 model.\n */\nexport type ConsentPurpose = ConsentPurposeData;\n\n/**\n * Render props exposed by Consent when using the render-prop pattern.\n */\nexport interface ConsentRenderProps {\n  /** Current form values - used to read optional checkbox state. */\n  formValues: Record<string, string>;\n  /** Callback invoked when a user toggles an optional attribute. */\n  onInputChange: (name: string, value: string) => void;\n  /** The resolved list of consent purposes parsed from `consentData`. */\n  purposes: ConsentPurposeData[];\n}\n\n/**\n * Props for the Consent component.\n */\nexport interface ConsentProps {\n  /**\n   * Render-props callback. When provided, the default consent UI is replaced with\n   * whatever JSX the callback returns. The parsed `purposes` list is injected so\n   * consumers do not need to re-parse `consentData` themselves.\n   *\n   * @example\n   * ```tsx\n   * <Consent consentData={raw} formValues={formInputs} onInputChange={onChange} t={t}>\n   *   {({ purposes, formValues, onInputChange, t }) => (\n   *     <div>\n   *       {purposes.map(p => <MyConsentSection key={p.purposeId} purpose={p} />)}\n   *     </div>\n   *   )}\n   * </Consent>\n   * ```\n   */\n  children?: (props: ConsentRenderProps) => ReactNode;\n  /**\n   * The raw JSON string returned by the backend in `additionalData.consentPrompt`.\n   */\n  consentData?: string | ConsentPurposeData[] | {purposes: ConsentPurposeData[]};\n  /**\n   * Current form values - used to read optional checkbox state.\n   */\n  formValues: Record<string, string>;\n  /**\n   * Callback invoked when a user toggles an optional attribute.\n   */\n  onInputChange: (name: string, value: string) => void;\n\n  /**\n   * translation data\n   */\n  t?: UseTranslation['t'];\n}\n\nconst isObject = (value: unknown): value is Record<string, unknown> => typeof value === 'object' && value !== null;\n\n/**\n * Keep only well-formed prompt elements (non-null objects with a string `name`).\n * @param value Raw `essential`/`optional` value from the consent payload\n */\nconst toPromptElements = (value: unknown): PromptElement[] =>\n  Array.isArray(value)\n    ? (value.filter(\n        (element: unknown) => isObject(element) && typeof element['name'] === 'string',\n      ) as unknown as PromptElement[])\n    : [];\n\n/**\n * Consent component renders the list of purposes and their associated attributes (essential and optional)\n * based on the data provided by the backend. It allows users to toggle optional attributes while essential\n * attributes are displayed as read-only.\n */\nconst Consent: FC<ConsentProps> = ({consentData, formValues, onInputChange, children, t}: ConsentProps) => {\n  // Computed per render (not at module scope): a CSP nonce configured on <ThunderIDProvider>\n  // isn't known until the provider renders, and Emotion needs it applied before any style\n  // insertion happens. These are static, so Emotion's own cache dedupes the repeat calls to a\n  // no-op after the first render — this isn't a real per-render cost.\n  const purposesContainerClass: string = css({\n    display: 'flex',\n    flexDirection: 'column',\n    gap: '1rem',\n    marginTop: '0.25rem',\n  });\n  const purposeItemClass: string = css({paddingBottom: '1rem'});\n  const sectionClass: string = css({marginTop: '0.5rem'});\n  const sectionHeaderClass: string = css({alignItems: 'center', display: 'flex', gap: '4px', marginBottom: '10px'});\n  const optionalSectionHeaderClass: string = css({\n    alignItems: 'center',\n    display: 'flex',\n    justifyContent: 'space-between',\n    marginBottom: '10px',\n    paddingRight: '4px',\n  });\n  const optionalSectionLabelClass: string = css({alignItems: 'center', display: 'flex', gap: '4px'});\n\n  /**\n   * Resolve an i18n key, falling back to the given value when no translation is found.\n   * `t` returns the key itself for missing translations, so that case is treated as \"not found\".\n   * @param key Translation key\n   * @param fallback Value to use when the key cannot be resolved\n   */\n  const resolve = (key: string, fallback = ''): string => {\n    const translated: string | undefined = t?.(key);\n    return translated && translated !== key ? translated : fallback;\n  };\n\n  const essentialInfo = resolve('consent.essential_claims.info');\n  const optionalInfo = resolve('consent.optional_claims.info');\n  const essentialPermissionInfo = resolve('consent.essential_scope.info');\n  const optionalPermissionInfo = resolve('consent.optional_scope.info');\n  const essentialLabel = resolve('consent.essential_claims', 'Essential Attributes');\n  const optionalLabel = resolve('consent.optional_claims', 'Optional Attributes');\n  const essentialPermissionLabel = resolve('consent.essential_scope', 'Essential Permissions');\n  const optionalPermissionLabel = resolve('consent.optional_scope', 'Optional Permissions');\n  const toggleAllAttributesLabel = resolve('consent.optional_claims.toggle_all', 'Toggle all optional attributes');\n  const toggleAllPermissionsLabel = resolve('consent.optional_scope.toggle_all', 'Toggle all optional permissions');\n\n  /**\n   * Method to check whether master toggle button is checked or not\n   * @param purpose Purpose object\n   * @param checked boolean variable to check, whether toggle is checked or unchecked\n   */\n  const handleChange = (purpose: ConsentPurposeData, checked: boolean): void => {\n    const checkValue = checked ? 'true' : 'false';\n    purpose.optional.forEach((opt: PromptElement) => {\n      const key: string = getConsentOptionalKey(purpose.purposeId, opt.name);\n      onInputChange(key, checkValue);\n    });\n  };\n\n  /**\n   * Check all optional claims are selected or not\n   * @param purpose Purpose object\n   * @returns boolean value to denote all optional claims are selected\n   */\n  const checkOptValue = (purpose: ConsentPurposeData): boolean => {\n    return purpose.optional.every((opt: PromptElement) => {\n      const key: string = getConsentOptionalKey(purpose.purposeId, opt.name);\n      return formValues[key] === 'true';\n    });\n  };\n\n  /**\n   * Renders a section title with an optional info tooltip.\n   * @param label Section title\n   * @param info Tooltip text; the tooltip is omitted when empty\n   */\n  const renderSectionTitle = (label: string, info: string): ReactNode => (\n    <>\n      <Typography variant=\"subtitle2\" fontWeight=\"bold\">\n        {label}\n      </Typography>\n      {info && (\n        <Tooltip helperText={info}>\n          <Info width=\"1rem\" height=\"1rem\" />\n        </Tooltip>\n      )}\n    </>\n  );\n\n  // Parse, validate and order the purposes once per `consentData` change rather than on every render\n  // (e.g. each `formValues` update). Must run before any early return to respect the rules of hooks.\n  const purposes: ConsentPurposeData[] = useMemo((): ConsentPurposeData[] => {\n    if (!consentData) return [];\n\n    let parsed: unknown;\n\n    try {\n      parsed = typeof consentData === 'string' ? JSON.parse(consentData) : consentData;\n    } catch (e) {\n      // Failed to parse consent prompt data\n      return [];\n    }\n\n    const rawPurposes: unknown = Array.isArray(parsed) ? parsed : (parsed as {purposes?: unknown})?.purposes;\n\n    if (!Array.isArray(rawPurposes)) return [];\n\n    // `JSON.parse` doesn't validate the shape, so drop malformed purposes and elements here\n    // instead of letting the sort or the render read properties off `null`. Purposes without a\n    // `purposeId` are omitted too, since it keys the optional-element form values and they would collide.\n    const normalized: ConsentPurposeData[] = rawPurposes\n      .filter(\n        (purpose: unknown): purpose is Record<string, unknown> =>\n          isObject(purpose) && typeof purpose['purposeId'] === 'string',\n      )\n      .map(\n        (purpose: Record<string, unknown>): ConsentPurposeData => ({\n          ...(purpose as unknown as ConsentPurposeData),\n          essential: toPromptElements(purpose['essential']),\n          optional: toPromptElements(purpose['optional']),\n        }),\n      );\n\n    // Order purposes so that permissions come first and attributes come last.\n    // `normalized` is already a copy, so sorting doesn't mutate the caller's data; Array.prototype.sort\n    // is stable, so purposes of the same type keep their original order.\n    return normalized.sort(\n      (a: ConsentPurposeData, b: ConsentPurposeData) =>\n        Number(b.type === 'permissions') - Number(a.type === 'permissions'),\n    );\n  }, [consentData]);\n\n  if (purposes.length === 0) return null;\n\n  if (children) {\n    return <>{children({formValues, onInputChange, purposes: purposes})}</>;\n  }\n\n  return (\n    <div className={purposesContainerClass}>\n      {purposes.map((purpose: ConsentPurposeData, purposeIndex: number) => {\n        // Pick section labels/tooltips according to the purpose type (permissions vs attributes)\n        const isPermission: boolean = purpose.type === 'permissions';\n\n        return (\n          <div key={purpose.purposeId || purposeIndex} className={purposeItemClass}>\n            {/* TODO: Uncomment when the backend supports multiple purposes for a application */}\n            {/* <Typography variant=\"h6\" fontWeight={600} gutterBottom color=\"inherit\">\n            {purpose.purposeName}\n          </Typography>\n          <Typography variant=\"body2\" color=\"inherit\" style={{marginBottom: '1rem', opacity: 0.85}}>\n            {purpose.description}\n          </Typography> */}\n\n            {purpose.essential?.length > 0 && (\n              <div className={sectionClass}>\n                <div className={sectionHeaderClass}>\n                  {renderSectionTitle(\n                    isPermission ? essentialPermissionLabel : essentialLabel,\n                    isPermission ? essentialPermissionInfo : essentialInfo,\n                  )}\n                </div>\n                <ConsentCheckboxList\n                  variant=\"ESSENTIAL\"\n                  purpose={purpose}\n                  formValues={formValues}\n                  onInputChange={onInputChange}\n                  t={t}\n                />\n              </div>\n            )}\n\n            {purpose.optional?.length > 0 && (\n              <div className={sectionClass}>\n                <div className={optionalSectionHeaderClass}>\n                  <div className={optionalSectionLabelClass}>\n                    {renderSectionTitle(\n                      isPermission ? optionalPermissionLabel : optionalLabel,\n                      isPermission ? optionalPermissionInfo : optionalInfo,\n                    )}\n                  </div>\n                  <Toggle\n                    id={`consent_opt_${purpose.purposeId}_all`}\n                    checked={checkOptValue(purpose)}\n                    aria-label={isPermission ? toggleAllPermissionsLabel : toggleAllAttributesLabel}\n                    onChange={(e: ChangeEvent<HTMLInputElement>): void => handleChange(purpose, e.target.checked)}\n                  />\n                </div>\n                <ConsentCheckboxList\n                  variant=\"OPTIONAL\"\n                  purpose={purpose}\n                  formValues={formValues}\n                  onInputChange={onInputChange}\n                  t={t}\n                />\n              </div>\n            )}\n          </div>\n        );\n      })}\n    </div>\n  );\n};\n\nexport default Consent;\n"],"mappings":";;;;;;;;;;;;;AAwEA,MAAM,YAAY,UAAqD,OAAO,UAAU,YAAY,UAAU;;;;;AAM9G,MAAM,oBAAoB,UACxB,MAAM,QAAQ,MAAM,GACf,MAAM,QACJ,YAAqB,SAAS,QAAQ,IAAI,OAAO,QAAQ,YAAY,SACvE,GACD,EAAE;;;;;;AAOR,MAAMA,WAA6B,EAAC,aAAa,YAAY,eAAe,UAAU,QAAqB;CAKzG,MAAMC,yBAAiCC,oBAAI;EACzC,SAAS;EACT,eAAe;EACf,KAAK;EACL,WAAW;EACZ,CAAC;CACF,MAAMC,mBAA2BD,oBAAI,EAAC,eAAe,QAAO,CAAC;CAC7D,MAAME,eAAuBF,oBAAI,EAAC,WAAW,UAAS,CAAC;CACvD,MAAMG,qBAA6BH,oBAAI;EAAC,YAAY;EAAU,SAAS;EAAQ,KAAK;EAAO,cAAc;EAAO,CAAC;CACjH,MAAMI,6BAAqCJ,oBAAI;EAC7C,YAAY;EACZ,SAAS;EACT,gBAAgB;EAChB,cAAc;EACd,cAAc;EACf,CAAC;CACF,MAAMK,4BAAoCL,oBAAI;EAAC,YAAY;EAAU,SAAS;EAAQ,KAAK;EAAM,CAAC;;;;;;;CAQlG,MAAM,WAAW,KAAa,WAAW,OAAe;EACtD,MAAMM,aAAiC,IAAI,IAAI;AAC/C,SAAO,cAAc,eAAe,MAAM,aAAa;;CAGzD,MAAM,gBAAgB,QAAQ,gCAAgC;CAC9D,MAAM,eAAe,QAAQ,+BAA+B;CAC5D,MAAM,0BAA0B,QAAQ,+BAA+B;CACvE,MAAM,yBAAyB,QAAQ,8BAA8B;CACrE,MAAM,iBAAiB,QAAQ,4BAA4B,uBAAuB;CAClF,MAAM,gBAAgB,QAAQ,2BAA2B,sBAAsB;CAC/E,MAAM,2BAA2B,QAAQ,2BAA2B,wBAAwB;CAC5F,MAAM,0BAA0B,QAAQ,0BAA0B,uBAAuB;CACzF,MAAM,2BAA2B,QAAQ,sCAAsC,iCAAiC;CAChH,MAAM,4BAA4B,QAAQ,qCAAqC,kCAAkC;;;;;;CAOjH,MAAM,gBAAgB,SAA6B,YAA2B;EAC5E,MAAM,aAAa,UAAU,SAAS;AACtC,UAAQ,SAAS,SAAS,QAAuB;AAE/C,iBADoBC,kDAAsB,QAAQ,WAAW,IAAI,KAAK,EACnD,WAAW;IAC9B;;;;;;;CAQJ,MAAM,iBAAiB,YAAyC;AAC9D,SAAO,QAAQ,SAAS,OAAO,QAAuB;AAEpD,UAAO,WADaA,kDAAsB,QAAQ,WAAW,IAAI,KAAK,MAC3C;IAC3B;;;;;;;CAQJ,MAAM,sBAAsB,OAAe,SACzC,qFACE,2CAACC;EAAW,SAAQ;EAAY,YAAW;YACxC;GACU,EACZ,QACC,2CAACC;EAAQ,YAAY;YACnB,2CAACC;GAAK,OAAM;GAAO,QAAO;IAAS;GAC3B,IAEX;CAKL,MAAMC,oCAAqE;AACzE,MAAI,CAAC,YAAa,QAAO,EAAE;EAE3B,IAAIC;AAEJ,MAAI;AACF,YAAS,OAAO,gBAAgB,WAAW,KAAK,MAAM,YAAY,GAAG;WAC9D,GAAG;AAEV,UAAO,EAAE;;EAGX,MAAMC,cAAuB,MAAM,QAAQ,OAAO,GAAG,SAAU,QAAiC;AAEhG,MAAI,CAAC,MAAM,QAAQ,YAAY,CAAE,QAAO,EAAE;AAqB1C,SAhByC,YACtC,QACE,YACC,SAAS,QAAQ,IAAI,OAAO,QAAQ,iBAAiB,SACxD,CACA,KACE,aAA0D;GACzD,GAAI;GACJ,WAAW,iBAAiB,QAAQ,aAAa;GACjD,UAAU,iBAAiB,QAAQ,YAAY;GAChD,EACF,CAKe,MACf,GAAuB,MACtB,OAAO,EAAE,SAAS,cAAc,GAAG,OAAO,EAAE,SAAS,cAAc,CACtE;IACA,CAAC,YAAY,CAAC;AAEjB,KAAI,SAAS,WAAW,EAAG,QAAO;AAElC,KAAI,SACF,QAAO,mFAAG,SAAS;EAAC;EAAY;EAAyB;EAAS,CAAC,GAAI;AAGzE,QACE,2CAAC;EAAI,WAAW;YACb,SAAS,KAAK,SAA6B,iBAAyB;GAEnE,MAAMC,eAAwB,QAAQ,SAAS;AAE/C,UACE,4CAAC;IAA4C,WAAW;eASrD,QAAQ,WAAW,SAAS,KAC3B,4CAAC;KAAI,WAAW;gBACd,2CAAC;MAAI,WAAW;gBACb,mBACC,eAAe,2BAA2B,gBAC1C,eAAe,0BAA0B,cAC1C;OACG,EACN,2CAACC;MACC,SAAQ;MACC;MACG;MACG;MACZ;OACH;MACE,EAGP,QAAQ,UAAU,SAAS,KAC1B,4CAAC;KAAI,WAAW;gBACd,4CAAC;MAAI,WAAW;iBACd,2CAAC;OAAI,WAAW;iBACb,mBACC,eAAe,0BAA0B,eACzC,eAAe,yBAAyB,aACzC;QACG,EACN,2CAACC;OACC,IAAI,eAAe,QAAQ,UAAU;OACrC,SAAS,cAAc,QAAQ;OAC/B,cAAY,eAAe,4BAA4B;OACvD,WAAW,MAA2C,aAAa,SAAS,EAAE,OAAO,QAAQ;QAC7F;OACE,EACN,2CAACD;MACC,SAAQ;MACC;MACG;MACG;MACZ;OACH;MACE;MAlDA,QAAQ,aAAa,aAoDzB;IAER;GACE;;AAIV,sBAAe"}

package/dist/cjs/hooks/management/useManagementEndpoint.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"useManagementEndpoint.cjs","names":["useThunderID"],"sources":["../../../../src/hooks/management/useManagementEndpoint.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {ResourceEndpointKey, resolveResourceEndpoint} from '@thunderid/browser';\nimport useThunderID from '../../contexts/ThunderID/useThunderID';\n\n/**\n * The URL inputs a management API function needs.\n */\nexport interface ManagementEndpoint {\n  baseUrl: string | undefined;\n  /**\n   * The collection URL from `endpoints` when overridden, otherwise `undefined` so the API function\n   * falls back to `{baseUrl}/{collection}`.\n   */\n  url: string | undefined;\n}\n\n/**\n * Resolves where a management resource collection lives, honoring the provider's `endpoints`\n * override so the management API can run on a different host from the authorization server.\n *\n * @param key - The resource collection.\n * @returns The base URL and optional collection URL override.\n */\nconst useManagementEndpoint = (\n  key: Extract<\n    ResourceEndpointKey,\n    'agents' | 'agentTypes' | 'applications' | 'flows' | 'groups' | 'roles' | 'users' | 'userTypes'\n  >,\n): ManagementEndpoint => {\n  const {baseUrl, endpoints} = useThunderID();\n\n  return {baseUrl, url: resolveResourceEndpoint(key, {endpoints})};\n};\n\nexport default useManagementEndpoint;\n"],"mappings":";;;;;;;;;;;;;AAyBA,MAAM,yBACJ,QAIuB;CACvB,MAAM,EAAC,SAAS,cAAaA,8BAAc;AAE3C,QAAO;EAAC;EAAS,sDAA6B,KAAK,EAAC,WAAU,CAAC;EAAC;;AAGlE,oCAAe"}
+{"version":3,"file":"useManagementEndpoint.cjs","names":["useThunderID"],"sources":["../../../../src/hooks/management/useManagementEndpoint.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {ResourceEndpointKey, resolveResourceEndpoint} from '@thunderid/browser';\nimport useThunderID from '../../contexts/ThunderID/useThunderID';\n\n/**\n * The URL inputs a management API function needs.\n */\nexport interface ManagementEndpoint {\n  baseUrl: string | undefined;\n  /**\n   * The collection URL from `endpoints` when overridden, otherwise `undefined` so the API function\n   * falls back to `{baseUrl}/{collection}`.\n   */\n  url: string | undefined;\n}\n\n/**\n * The management collections an app can call through the SDK's API functions.\n */\nexport type ManagementCollection = Extract<\n  ResourceEndpointKey,\n  | 'agents'\n  | 'agentTypes'\n  | 'applications'\n  | 'configurationVersions'\n  | 'connections'\n  | 'design'\n  | 'export'\n  | 'flows'\n  | 'gateways'\n  | 'groups'\n  | 'i18n'\n  | 'import'\n  | 'notificationTemplates'\n  | 'organizationUnits'\n  | 'resourceServers'\n  | 'roles'\n  | 'secrets'\n  | 'serverConfig'\n  | 'users'\n  | 'userTypes'\n  | 'variables'\n>;\n\n/**\n * Resolves where a management resource collection lives, honoring the provider's `endpoints`\n * override so the management API can run on a different host from the authorization server.\n *\n * @param key - The resource collection.\n * @returns The base URL and optional collection URL override.\n */\nconst useManagementEndpoint = (key: ManagementCollection): ManagementEndpoint => {\n  const {baseUrl, endpoints} = useThunderID();\n\n  return {baseUrl, url: resolveResourceEndpoint(key, {endpoints})};\n};\n\nexport default useManagementEndpoint;\n"],"mappings":";;;;;;;;;;;;;AAqDA,MAAM,yBAAyB,QAAkD;CAC/E,MAAM,EAAC,SAAS,cAAaA,8BAAc;AAE3C,QAAO;EAAC;EAAS,sDAA6B,KAAK,EAAC,WAAU,CAAC;EAAC;;AAGlE,oCAAe"}

package/dist/cjs/hooks/management/useManagementRequestConfig.cjs

@@ -0,0 +1,41 @@
+const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.cjs');
+const require_useManagementEndpoint = require('./useManagementEndpoint.cjs');
+const require_useResourceQuery = require('./useResourceQuery.cjs');
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+
+//#region src/hooks/management/useManagementRequestConfig.ts
+/**
+* Returns the request config the SDK's management API functions take for a collection: the server URL,
+* the collection URL when `endpoints` overrides it, and a fetcher that sends the signed-in user's access
+* token (`ThunderIDProvider`'s `http.fetcher` when set).
+*
+* Use it to call the API functions from an app's own data layer, such as TanStack Query:
+*
+* @example
+* ```tsx
+* const config = useManagementRequestConfig('groups');
+* const groups = useQuery({
+*   queryKey: [GroupQueryKeys.GROUPS, {limit, offset}],
+*   queryFn: () => getGroups({...config, limit, offset}),
+* });
+* ```
+*/
+const useManagementRequestConfig = (collection) => {
+	const { baseUrl, url } = require_useManagementEndpoint.default(collection);
+	const fetcher = require_useResourceQuery.useResolvedFetcher();
+	return (0, react.useMemo)(() => ({
+		baseUrl,
+		fetcher,
+		url
+	}), [
+		baseUrl,
+		fetcher,
+		url
+	]);
+};
+var useManagementRequestConfig_default = useManagementRequestConfig;
+
+//#endregion
+exports.default = useManagementRequestConfig_default;
+//# sourceMappingURL=useManagementRequestConfig.cjs.map

package/dist/cjs/hooks/management/useManagementRequestConfig.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useManagementRequestConfig.cjs","names":["useManagementEndpoint","fetcher: ApiFetcher","useResolvedFetcher"],"sources":["../../../../src/hooks/management/useManagementRequestConfig.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {ApiFetcher, ManagementRequestConfig} from '@thunderid/browser';\nimport {useMemo} from 'react';\nimport useManagementEndpoint, {ManagementCollection, ManagementEndpoint} from './useManagementEndpoint';\nimport {useResolvedFetcher} from './useResourceQuery';\n\nexport type {ManagementCollection};\n\n/**\n * Returns the request config the SDK's management API functions take for a collection: the server URL,\n * the collection URL when `endpoints` overrides it, and a fetcher that sends the signed-in user's access\n * token (`ThunderIDProvider`'s `http.fetcher` when set).\n *\n * Use it to call the API functions from an app's own data layer, such as TanStack Query:\n *\n * @example\n * ```tsx\n * const config = useManagementRequestConfig('groups');\n * const groups = useQuery({\n *   queryKey: [GroupQueryKeys.GROUPS, {limit, offset}],\n *   queryFn: () => getGroups({...config, limit, offset}),\n * });\n * ```\n */\nconst useManagementRequestConfig = (collection: ManagementCollection): ManagementRequestConfig => {\n  const {baseUrl, url}: ManagementEndpoint = useManagementEndpoint(collection);\n  const fetcher: ApiFetcher = useResolvedFetcher();\n\n  return useMemo(() => ({baseUrl, fetcher, url}), [baseUrl, fetcher, url]);\n};\n\nexport default useManagementRequestConfig;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA0BA,MAAM,8BAA8B,eAA8D;CAChG,MAAM,EAAC,SAAS,QAA2BA,sCAAsB,WAAW;CAC5E,MAAMC,UAAsBC,6CAAoB;AAEhD,kCAAsB;EAAC;EAAS;EAAS;EAAI,GAAG;EAAC;EAAS;EAAS;EAAI,CAAC;;AAG1E,yCAAe"}