@thunderid/react 1.6.0 → 1.8.0

package/dist/components/admin/ApplicationList/BaseApplicationList.js

@@ -0,0 +1,93 @@
+import useTranslation_default from "../../../hooks/useTranslation.js";
+import DataTable_default from "../../primitives/DataTable/DataTable.js";
+import AdminSection_default from "../shared/AdminSection.js";
+import { jsx } from "react/jsx-runtime";
+
+//#region src/components/admin/ApplicationList/BaseApplicationList.tsx
+/**
+* The translated access status of an application, or its raw value when the status is one this SDK
+* does not know.
+*/
+const getStatusLabel = (application, t) => {
+	const value = application.status?.value;
+	switch (value?.toUpperCase()) {
+		case "ACTIVE": return t("admin.applications.status.active");
+		case "SUSPENDED": return t("admin.applications.status.suspended");
+		default: return value ?? "";
+	}
+};
+/**
+* Lists applications with their client identifier, type and, when the server reports it, access status. Holds no data of its own: pass the page
+* of applications and handle selection and pagination.
+*/
+const BaseApplicationList = ({ actions, applications, children, className, description, error = null, isLoading = false, limit = 20, offset = 0, onPageChange, onSelect, preferences, selectedApplicationId, title, totalResults }) => {
+	const { t } = useTranslation_default(preferences?.i18n);
+	const columns = [
+		{
+			header: t("admin.applications.list.columns.name"),
+			id: "name",
+			render: (application) => application.name
+		},
+		{
+			header: t("admin.applications.list.columns.client_id"),
+			id: "clientId",
+			render: (application) => application.clientId ? /* @__PURE__ */ jsx("code", { children: application.clientId }) : null
+		},
+		{
+			header: t("admin.applications.list.columns.type"),
+			id: "type",
+			render: (application) => application.type ?? application.template ?? ""
+		},
+		...applications.some((application) => application.status?.value) ? [{
+			header: t("admin.applications.list.columns.status"),
+			id: "status",
+			render: (application) => getStatusLabel(application, t)
+		}] : []
+	];
+	if (children) return /* @__PURE__ */ jsx("div", {
+		className,
+		children: children({
+			applications,
+			columns,
+			error,
+			isLoading,
+			limit,
+			offset,
+			onPageChange,
+			onSelect,
+			rows: applications,
+			selectedRowId: selectedApplicationId,
+			totalResults: totalResults ?? applications.length
+		})
+	});
+	return /* @__PURE__ */ jsx(AdminSection_default, {
+		block: "application-list",
+		className,
+		title: title ?? t("admin.applications.list.title"),
+		description,
+		actions,
+		preferences,
+		children: /* @__PURE__ */ jsx(DataTable_default, {
+			caption: title?.length ? title : t("admin.applications.list.title"),
+			columns,
+			rows: applications,
+			getRowId: (application) => application.id,
+			isLoading,
+			error,
+			emptyText: t("admin.applications.list.empty"),
+			onRowClick: onSelect,
+			selectedRowId: selectedApplicationId,
+			pagination: onPageChange ? {
+				limit,
+				offset,
+				onChange: onPageChange,
+				total: totalResults ?? applications.length
+			} : void 0
+		})
+	});
+};
+var BaseApplicationList_default = BaseApplicationList;
+
+//#endregion
+export { BaseApplicationList_default as default };
+//# sourceMappingURL=BaseApplicationList.js.map

package/dist/components/admin/ApplicationList/BaseApplicationList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseApplicationList.js","names":["value: string | undefined","BaseApplicationList: FC<BaseApplicationListProps>","useTranslation","columns: DataTableColumn<BasicApplication>[]","AdminSection","DataTable"],"sources":["../../../../src/components/admin/ApplicationList/BaseApplicationList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {BasicApplication, Preferences} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport DataTable, {DataTableColumn} from '../../primitives/DataTable/DataTable';\nimport {AdminListRenderProps} from '../shared/AdminListRenderProps';\nimport AdminSection from '../shared/AdminSection';\n\n/**\n * What {@link BaseApplicationList} hands its `children` render function. `applications` and `rows` are\n * the same array.\n */\nexport type BaseApplicationListRenderProps = AdminListRenderProps<BasicApplication> & {\n  applications: BasicApplication[];\n};\n\nexport interface BaseApplicationListProps {\n  /**\n   * Controls rendered next to the title, such as a button that opens `ApplicationCreate`.\n   */\n  actions?: ReactNode;\n  applications: BasicApplication[];\n  /**\n   * Renders custom UI in place of the default table, for example a third-party data grid. Receives\n   * the applications, the default columns, the loading and error state, and the pagination and\n   * selection handlers.\n   */\n  children?: (props: BaseApplicationListRenderProps) => ReactNode;\n  className?: string;\n  description?: string;\n  error?: string | null;\n  isLoading?: boolean;\n  /**\n   * Page size.\n   * @default 20\n   */\n  limit?: number;\n  offset?: number;\n  /**\n   * Called with the offset of the page to show. Pagination is hidden when omitted.\n   */\n  onPageChange?: (offset: number) => void;\n  /**\n   * Called when an application is chosen. Rows are selectable only when set.\n   */\n  onSelect?: (application: BasicApplication) => void;\n  preferences?: Preferences;\n  selectedApplicationId?: string;\n  /**\n   * Heading of the list. Pass an empty string to hide it.\n   */\n  title?: string;\n  totalResults?: number;\n}\n\n/**\n * The translated access status of an application, or its raw value when the status is one this SDK\n * does not know.\n */\nconst getStatusLabel = (application: BasicApplication, t: (key: string) => string): string => {\n  const value: string | undefined = application.status?.value;\n\n  switch (value?.toUpperCase()) {\n    case 'ACTIVE':\n      return t('admin.applications.status.active');\n    case 'SUSPENDED':\n      return t('admin.applications.status.suspended');\n    default:\n      return value ?? '';\n  }\n};\n\n/**\n * Lists applications with their client identifier, type and, when the server reports it, access status. Holds no data of its own: pass the page\n * of applications and handle selection and pagination.\n */\nconst BaseApplicationList: FC<BaseApplicationListProps> = ({\n  actions,\n  applications,\n  children,\n  className,\n  description,\n  error = null,\n  isLoading = false,\n  limit = 20,\n  offset = 0,\n  onPageChange,\n  onSelect,\n  preferences,\n  selectedApplicationId,\n  title,\n  totalResults,\n}: BaseApplicationListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n\n  const columns: DataTableColumn<BasicApplication>[] = [\n    {\n      header: t('admin.applications.list.columns.name'),\n      id: 'name',\n      render: (application: BasicApplication): ReactNode => application.name,\n    },\n    {\n      header: t('admin.applications.list.columns.client_id'),\n      id: 'clientId',\n      render: (application: BasicApplication): ReactNode =>\n        application.clientId ? <code>{application.clientId}</code> : null,\n    },\n    {\n      header: t('admin.applications.list.columns.type'),\n      id: 'type',\n      render: (application: BasicApplication): ReactNode => application.type ?? application.template ?? '',\n    },\n    // A server that does not report the access status gets no empty status column.\n    ...(applications.some((application: BasicApplication) => application.status?.value)\n      ? [\n          {\n            header: t('admin.applications.list.columns.status'),\n            id: 'status',\n            render: (application: BasicApplication): ReactNode => getStatusLabel(application, t),\n          },\n        ]\n      : []),\n  ];\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          applications,\n          columns,\n          error,\n          isLoading,\n          limit,\n          offset,\n          onPageChange,\n          onSelect,\n          rows: applications,\n          selectedRowId: selectedApplicationId,\n          totalResults: totalResults ?? applications.length,\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"application-list\"\n      className={className}\n      title={title ?? t('admin.applications.list.title')}\n      description={description}\n      actions={actions}\n      preferences={preferences}\n    >\n      <DataTable\n        caption={title?.length ? title : t('admin.applications.list.title')}\n        columns={columns}\n        rows={applications}\n        getRowId={(application: BasicApplication): string => application.id}\n        isLoading={isLoading}\n        error={error}\n        emptyText={t('admin.applications.list.empty')}\n        onRowClick={onSelect}\n        selectedRowId={selectedApplicationId}\n        pagination={\n          onPageChange ? {limit, offset, onChange: onPageChange, total: totalResults ?? applications.length} : undefined\n        }\n      />\n    </AdminSection>\n  );\n};\n\nexport default BaseApplicationList;\n"],"mappings":";;;;;;;;;;AA6DA,MAAM,kBAAkB,aAA+B,MAAuC;CAC5F,MAAMA,QAA4B,YAAY,QAAQ;AAEtD,SAAQ,OAAO,aAAa,EAA5B;EACE,KAAK,SACH,QAAO,EAAE,mCAAmC;EAC9C,KAAK,YACH,QAAO,EAAE,sCAAsC;EACjD,QACE,QAAO,SAAS;;;;;;;AAQtB,MAAMC,uBAAqD,EACzD,SACA,cACA,UACA,WACA,aACA,QAAQ,MACR,YAAY,OACZ,QAAQ,IACR,SAAS,GACT,cACA,UACA,aACA,uBACA,OACA,mBAC4C;CAC5C,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAE7C,MAAMC,UAA+C;EACnD;GACE,QAAQ,EAAE,uCAAuC;GACjD,IAAI;GACJ,SAAS,gBAA6C,YAAY;GACnE;EACD;GACE,QAAQ,EAAE,4CAA4C;GACtD,IAAI;GACJ,SAAS,gBACP,YAAY,WAAW,oBAAC,oBAAM,YAAY,WAAgB,GAAG;GAChE;EACD;GACE,QAAQ,EAAE,uCAAuC;GACjD,IAAI;GACJ,SAAS,gBAA6C,YAAY,QAAQ,YAAY,YAAY;GACnG;EAED,GAAI,aAAa,MAAM,gBAAkC,YAAY,QAAQ,MAAM,GAC/E,CACE;GACE,QAAQ,EAAE,yCAAyC;GACnD,IAAI;GACJ,SAAS,gBAA6C,eAAe,aAAa,EAAE;GACrF,CACF,GACD,EAAE;EACP;AAED,KAAI,SACF,QACE,oBAAC;EAAe;YACb,SAAS;GACR;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,MAAM;GACN,eAAe;GACf,cAAc,gBAAgB,aAAa;GAC5C,CAAC;GACE;AAIV,QACE,oBAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,gCAAgC;EACrC;EACJ;EACI;YAEb,oBAACC;GACC,SAAS,OAAO,SAAS,QAAQ,EAAE,gCAAgC;GAC1D;GACT,MAAM;GACN,WAAW,gBAA0C,YAAY;GACtD;GACJ;GACP,WAAW,EAAE,gCAAgC;GAC7C,YAAY;GACZ,eAAe;GACf,YACE,eAAe;IAAC;IAAO;IAAQ,UAAU;IAAc,OAAO,gBAAgB,aAAa;IAAO,GAAG;IAEvG;GACW;;AAInB,kCAAe"}

package/dist/components/admin/GroupCreate/GroupCreate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GroupCreate.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/GroupCreate/GroupCreate.tsx"],"names":[],"mappings":"AAGA,OAAO,EAA2B,KAAK,EAAC,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AACvC,OAAwB,EAAC,oBAAoB,EAAwB,MAAM,mBAAmB,CAAC;AAK/F,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,EAAE,OAAO,GAAG,cAAc,GAAG,UAAU,CAAC,GAAG;IACjG;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACnC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAsBrC,CAAC;AAEF,eAAe,WAAW,CAAC"}
+{"version":3,"file":"GroupCreate.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/GroupCreate/GroupCreate.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAqB,KAAK,EAAwD,MAAM,oBAAoB,CAAC;AACpH,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AACvC,OAAwB,EAAC,oBAAoB,EAAwB,MAAM,mBAAmB,CAAC;AAM/F,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,EAAE,OAAO,GAAG,cAAc,GAAG,UAAU,CAAC,GAAG;IACjG;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACnC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CA2BrC,CAAC;AAEF,eAAe,WAAW,CAAC"}

package/dist/components/admin/GroupCreate/GroupCreate.js

@@ -1,8 +1,9 @@
 import useTranslation_default from "../../../hooks/useTranslation.js";
-import useCreateGroup_default from "../../../hooks/management/groups/useCreateGroup.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceMutation_default from "../../../hooks/management/useResourceMutation.js";
 import useDefaultOuId_default from "../shared/useDefaultOuId.js";
 import BaseGroupCreate_default from "./BaseGroupCreate.js";
-import { toManagementErrorMessage } from "@thunderid/browser";
+import { GroupQueryKeys, createGroup, toManagementErrorMessage } from "@thunderid/browser";
 import { jsx } from "react/jsx-runtime";
 
 //#region src/components/admin/GroupCreate/GroupCreate.tsx
@@ -17,7 +18,12 @@ import { jsx } from "react/jsx-runtime";
 const GroupCreate = ({ onCreated, ouId, preferences,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
 	const resolvedOuId = useDefaultOuId_default(ouId);
-	const { error, isLoading, mutate } = useCreateGroup_default({ onSuccess: onCreated });
+	const endpoint = useManagementEndpoint_default("groups");
+	const { error, isLoading, mutate } = useResourceMutation_default((payload, fetcher) => createGroup({
+		...endpoint,
+		fetcher,
+		payload
+	}), () => [[GroupQueryKeys.GROUPS], [GroupQueryKeys.MEMBERSHIPS]], { onSuccess: onCreated });
 	const handleSubmit = ({ description, name }) => {
 		if (resolvedOuId) mutate({
 			description,

package/dist/components/admin/GroupCreate/GroupCreate.js.map

@@ -1 +1 @@
-{"version":3,"file":"GroupCreate.js","names":["GroupCreate: FC<GroupCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","useCreateGroup","BaseGroupCreate"],"sources":["../../../../src/components/admin/GroupCreate/GroupCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage, Group} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseGroupCreate, {BaseGroupCreateProps, GroupCreateSubmission} from './BaseGroupCreate';\nimport useCreateGroup from '../../../hooks/management/groups/useCreateGroup';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type GroupCreateProps = Omit<BaseGroupCreateProps, 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created group.\n   */\n  onCreated?: (group: Group) => void;\n  /**\n   * Organization unit the group is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates a group through the management API.\n *\n * @example\n * ```tsx\n * <GroupCreate onCreated={(group) => navigate(`/groups/${group.id}`)} />\n * ```\n */\nconst GroupCreate: FC<GroupCreateProps> = ({onCreated, ouId, preferences, ...rest}: GroupCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const {error, isLoading, mutate} = useCreateGroup({onSuccess: onCreated});\n\n  const handleSubmit = ({description, name}: GroupCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId});\n    }\n  };\n\n  return (\n    <BaseGroupCreate\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.groups.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupCreate;\n"],"mappings":";;;;;;;;;;;;;;;;AA6BA,MAAMA,eAAqC,EAAC,WAAW,MAAM,YAAa,GAAG,WAA0C;CACrH,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,uBAAe,KAAK;CAC7D,MAAM,EAAC,OAAO,WAAW,WAAUC,uBAAe,EAAC,WAAW,WAAU,CAAC;CAEzE,MAAM,gBAAgB,EAAC,aAAa,WAAuC;AACzE,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAa,CAAC;;AAIxD,QACE,oBAACC;EACC,UAAU;EACV,cAAc;EACd,OACE,eAAe,yBAAyB,GAAG,OAAO,4BAA4B,GAAG,EAAE,4BAA4B;EAEpG;EACb,GAAI;GACJ;;AAIN,0BAAe"}
+{"version":3,"file":"GroupCreate.js","names":["GroupCreate: FC<GroupCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceMutation","BaseGroupCreate"],"sources":["../../../../src/components/admin/GroupCreate/GroupCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {CreateGroupRequest, Group, GroupQueryKeys, createGroup, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseGroupCreate, {BaseGroupCreateProps, GroupCreateSubmission} from './BaseGroupCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type GroupCreateProps = Omit<BaseGroupCreateProps, 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created group.\n   */\n  onCreated?: (group: Group) => void;\n  /**\n   * Organization unit the group is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates a group through the management API.\n *\n * @example\n * ```tsx\n * <GroupCreate onCreated={(group) => navigate(`/groups/${group.id}`)} />\n * ```\n */\nconst GroupCreate: FC<GroupCreateProps> = ({onCreated, ouId, preferences, ...rest}: GroupCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const {error, isLoading, mutate}: ResourceMutationResult<Group, CreateGroupRequest> = useResourceMutation(\n    (payload: CreateGroupRequest, fetcher) => createGroup({...endpoint, fetcher, payload}),\n    () => [[GroupQueryKeys.GROUPS], [GroupQueryKeys.MEMBERSHIPS]],\n    {onSuccess: onCreated},\n  );\n\n  const handleSubmit = ({description, name}: GroupCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId});\n    }\n  };\n\n  return (\n    <BaseGroupCreate\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.groups.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;AA8BA,MAAMA,eAAqC,EAAC,WAAW,MAAM,YAAa,GAAG,WAA0C;CACrH,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,uBAAe,KAAK;CAC7D,MAAMC,WAA+BC,8BAAsB,SAAS;CACpE,MAAM,EAAC,OAAO,WAAW,WAA6DC,6BACnF,SAA6B,YAAY,YAAY;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,QAChF,CAAC,CAAC,eAAe,OAAO,EAAE,CAAC,eAAe,YAAY,CAAC,EAC7D,EAAC,WAAW,WAAU,CACvB;CAED,MAAM,gBAAgB,EAAC,aAAa,WAAuC;AACzE,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAa,CAAC;;AAIxD,QACE,oBAACC;EACC,UAAU;EACV,cAAc;EACd,OACE,eAAe,yBAAyB,GAAG,OAAO,4BAA4B,GAAG,EAAE,4BAA4B;EAEpG;EACb,GAAI;GACJ;;AAIN,0BAAe"}

package/dist/components/admin/GroupList/GroupList.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GroupList.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/GroupList/GroupList.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAC,EAAE,EAAyB,MAAM,OAAO,CAAC;AACjD,OAAsB,EAAC,kBAAkB,EAAC,MAAM,iBAAiB,CAAC;AAIlE,MAAM,MAAM,cAAc,GAAG,IAAI,CAC/B,kBAAkB,EAClB,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,cAAc,GAAG,cAAc,CAC9E,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,SAAS,EAAE,EAAE,CAAC,cAAc,CAkBjC,CAAC;AAEF,eAAe,SAAS,CAAC"}
+{"version":3,"file":"GroupList.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/GroupList/GroupList.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAC,EAAE,EAAyB,MAAM,OAAO,CAAC;AACjD,OAAsB,EAAC,kBAAkB,EAAC,MAAM,iBAAiB,CAAC;AAKlE,MAAM,MAAM,cAAc,GAAG,IAAI,CAC/B,kBAAkB,EAClB,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,cAAc,GAAG,cAAc,CAC9E,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,SAAS,EAAE,EAAE,CAAC,cAAc,CAsBjC,CAAC;AAEF,eAAe,SAAS,CAAC"}

package/dist/components/admin/GroupList/GroupList.js

@@ -1,7 +1,8 @@
 import useTranslation_default from "../../../hooks/useTranslation.js";
-import useGetGroups_default from "../../../hooks/management/groups/useGetGroups.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
 import BaseGroupList_default from "./BaseGroupList.js";
-import { toManagementErrorMessage } from "@thunderid/browser";
+import { GroupQueryKeys, getGroups, toManagementErrorMessage } from "@thunderid/browser";
 import { useState } from "react";
 import { jsx } from "react/jsx-runtime";
 
@@ -17,10 +18,16 @@ import { jsx } from "react/jsx-runtime";
 const GroupList = ({ limit = 20, preferences,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
 	const [offset, setOffset] = useState(0);
-	const { data, error, isLoading } = useGetGroups_default({
+	const endpoint = useManagementEndpoint_default("groups");
+	const { data, error, isLoading } = useResourceQuery_default([GroupQueryKeys.GROUPS, {
 		limit,
 		offset
-	});
+	}], (fetcher) => getGroups({
+		...endpoint,
+		fetcher,
+		limit,
+		offset
+	}));
 	return /* @__PURE__ */ jsx(BaseGroupList_default, {
 		groups: data?.groups ?? [],
 		totalResults: data?.totalResults,

package/dist/components/admin/GroupList/GroupList.js.map

@@ -1 +1 @@
-{"version":3,"file":"GroupList.js","names":["GroupList: FC<GroupListProps>","useTranslation","useGetGroups","BaseGroupList"],"sources":["../../../../src/components/admin/GroupList/GroupList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseGroupList, {BaseGroupListProps} from './BaseGroupList';\nimport useGetGroups from '../../../hooks/management/groups/useGetGroups';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type GroupListProps = Omit<\n  BaseGroupListProps,\n  'error' | 'groups' | 'isLoading' | 'offset' | 'onPageChange' | 'totalResults'\n>;\n\n/**\n * Lists the groups the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <GroupList onSelect={(group) => setSelectedGroupId(group.id)} />\n * ```\n */\nconst GroupList: FC<GroupListProps> = ({limit = 20, preferences, ...rest}: GroupListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const {data, error, isLoading} = useGetGroups({limit, offset});\n\n  return (\n    <BaseGroupList\n      groups={data?.groups ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.groups.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupList;\n"],"mappings":";;;;;;;;;;;;;;;;AAsBA,MAAMA,aAAiC,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAwC;CAC1G,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,aAAa,SAAiB,EAAE;CAC/C,MAAM,EAAC,MAAM,OAAO,cAAaC,qBAAa;EAAC;EAAO;EAAO,CAAC;AAE9D,QACE,oBAACC;EACC,QAAQ,MAAM,UAAU,EAAE;EAC1B,cAAc,MAAM;EACT;EACX,OAAO,yBAAyB,GAAG,OAAO,0BAA0B;EAC7D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,wBAAe"}
+{"version":3,"file":"GroupList.js","names":["GroupList: FC<GroupListProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","BaseGroupList"],"sources":["../../../../src/components/admin/GroupList/GroupList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {GroupListResponse, GroupQueryKeys, getGroups, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseGroupList, {BaseGroupListProps} from './BaseGroupList';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type GroupListProps = Omit<\n  BaseGroupListProps,\n  'error' | 'groups' | 'isLoading' | 'offset' | 'onPageChange' | 'totalResults'\n>;\n\n/**\n * Lists the groups the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <GroupList onSelect={(group) => setSelectedGroupId(group.id)} />\n * ```\n */\nconst GroupList: FC<GroupListProps> = ({limit = 20, preferences, ...rest}: GroupListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const {data, error, isLoading}: ResourceQueryResult<GroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUPS, {limit, offset}],\n    (fetcher) => getGroups({...endpoint, fetcher, limit, offset}),\n  );\n\n  return (\n    <BaseGroupList\n      groups={data?.groups ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.groups.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupList;\n"],"mappings":";;;;;;;;;;;;;;;;;AAuBA,MAAMA,aAAiC,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAwC;CAC1G,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,aAAa,SAAiB,EAAE;CAC/C,MAAMC,WAA+BC,8BAAsB,SAAS;CACpE,MAAM,EAAC,MAAM,OAAO,cAAqDC,yBACvE,CAAC,eAAe,QAAQ;EAAC;EAAO;EAAO,CAAC,GACvC,YAAY,UAAU;EAAC,GAAG;EAAU;EAAS;EAAO;EAAO,CAAC,CAC9D;AAED,QACE,oBAACC;EACC,QAAQ,MAAM,UAAU,EAAE;EAC1B,cAAc,MAAM;EACT;EACX,OAAO,yBAAyB,GAAG,OAAO,0BAA0B;EAC7D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,wBAAe"}

package/dist/components/admin/GroupMembers/GroupMembers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GroupMembers.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"names":[],"mappings":"AAUA,OAAO,EAAC,EAAE,EAAwB,MAAM,OAAO,CAAC;AAChD,OAAyB,EAAC,qBAAqB,EAAC,MAAM,oBAAoB,CAAC;AAS3E,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAClC,qBAAqB,EACrB,YAAY,GAAG,OAAO,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,CACvF,GAAG;IACF;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAgDvC,CAAC;AAEF,eAAe,YAAY,CAAC"}
+{"version":3,"file":"GroupMembers.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"names":[],"mappings":"AAwBA,OAAO,EAAC,EAAE,EAAwB,MAAM,OAAO,CAAC;AAChD,OAAyB,EAAC,qBAAqB,EAAC,MAAM,oBAAoB,CAAC;AAsB3E,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAClC,qBAAqB,EACrB,YAAY,GAAG,OAAO,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,CACvF,GAAG;IACF;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAuEvC,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/components/admin/GroupMembers/GroupMembers.js

@@ -1,16 +1,23 @@
 import useTranslation_default from "../../../hooks/useTranslation.js";
-import useGetUsers_default from "../../../hooks/management/users/useGetUsers.js";
-import useGetAgents_default from "../../../hooks/management/agents/useGetAgents.js";
-import useGetGroupMembers_default from "../../../hooks/management/groups/useGetGroupMembers.js";
-import useAddGroupMembers_default from "../../../hooks/management/groups/useAddGroupMembers.js";
-import useRemoveGroupMembers_default from "../../../hooks/management/groups/useRemoveGroupMembers.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
+import useResourceMutation_default from "../../../hooks/management/useResourceMutation.js";
 import BaseGroupMembers_default from "./BaseGroupMembers.js";
-import { resolveManagedIdentityName, toManagementErrorMessage } from "@thunderid/browser";
+import { AgentQueryKeys, GroupQueryKeys, RoleQueryKeys, UserQueryKeys, addGroupMembers, getAgents, getGroupMembers, getUsers, removeGroupMembers, resolveManagedIdentityName, toManagementErrorMessage } from "@thunderid/browser";
 import { useMemo } from "react";
 import { jsx } from "react/jsx-runtime";
 
 //#region src/components/admin/GroupMembers/GroupMembers.tsx
 /**
+* Query keys to refetch after a group's membership changes.
+*/
+const getMembershipInvalidatedKeys = ({ groupId }) => [
+	[GroupQueryKeys.GROUP, groupId],
+	[GroupQueryKeys.GROUP_MEMBERS, groupId],
+	[GroupQueryKeys.MEMBERSHIPS],
+	[RoleQueryKeys.ROLE_ASSIGNMENTS]
+];
+/**
 * Lists the users and agents in a group, and lets the signed-in user add and remove them.
 *
 * @example
@@ -20,11 +27,41 @@ import { jsx } from "react/jsx-runtime";
 */
 const GroupMembers = ({ editable = false, groupId, preferences,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
-	const members = useGetGroupMembers_default(groupId, { limit: 100 });
-	const users = useGetUsers_default({ limit: 100 }, { enabled: editable });
-	const agents = useGetAgents_default({ limit: 100 }, { enabled: editable });
-	const add = useAddGroupMembers_default();
-	const remove = useRemoveGroupMembers_default();
+	const groupsEndpoint = useManagementEndpoint_default("groups");
+	const usersEndpoint = useManagementEndpoint_default("users");
+	const agentsEndpoint = useManagementEndpoint_default("agents");
+	const members = useResourceQuery_default([
+		GroupQueryKeys.GROUP_MEMBERS,
+		groupId,
+		{ limit: 100 }
+	], (fetcher) => getGroupMembers({
+		...groupsEndpoint,
+		fetcher,
+		groupId,
+		limit: 100
+	}), { enabled: Boolean(groupId) });
+	const users = useResourceQuery_default([UserQueryKeys.USERS, { limit: 100 }], (fetcher) => getUsers({
+		...usersEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const agents = useResourceQuery_default([AgentQueryKeys.AGENTS, { limit: 100 }], (fetcher) => getAgents({
+		...agentsEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const add = useResourceMutation_default(({ groupId: id, members: changes }, fetcher) => addGroupMembers({
+		...groupsEndpoint,
+		fetcher,
+		groupId: id,
+		members: changes
+	}), getMembershipInvalidatedKeys);
+	const remove = useResourceMutation_default(({ groupId: id, members: changes }, fetcher) => removeGroupMembers({
+		...groupsEndpoint,
+		fetcher,
+		groupId: id,
+		members: changes
+	}), getMembershipInvalidatedKeys);
 	const candidates = useMemo(() => ({
 		agent: (agents.data?.agents ?? []).map((agent) => ({
 			id: agent.id,

package/dist/components/admin/GroupMembers/GroupMembers.js.map

@@ -1 +1 @@
-{"version":3,"file":"GroupMembers.js","names":["GroupMembers: FC<GroupMembersProps>","useTranslation","useGetGroupMembers","useGetUsers","useGetAgents","useAddGroupMembers","useRemoveGroupMembers","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n  BasicAgent,\n  GroupMember,\n  ManagedUser,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useGetAgents from '../../../hooks/management/agents/useGetAgents';\nimport useAddGroupMembers from '../../../hooks/management/groups/useAddGroupMembers';\nimport useGetGroupMembers from '../../../hooks/management/groups/useGetGroupMembers';\nimport useRemoveGroupMembers from '../../../hooks/management/groups/useRemoveGroupMembers';\nimport useGetUsers from '../../../hooks/management/users/useGetUsers';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  editable = false,\n  groupId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const members = useGetGroupMembers(groupId, {limit: 100});\n  const users = useGetUsers({limit: 100}, {enabled: editable});\n  const agents = useGetAgents({limit: 100}, {enabled: editable});\n  const add = useAddGroupMembers();\n  const remove = useRemoveGroupMembers();\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, users.data],\n  );\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAwCA,MAAMA,gBAAuC,EAC3C,WAAW,OACX,SACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,UAAUC,2BAAmB,SAAS,EAAC,OAAO,KAAI,CAAC;CACzD,MAAM,QAAQC,oBAAY,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC5D,MAAM,SAASC,qBAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,MAAMC,4BAAoB;CAChC,MAAM,SAASC,+BAAuB;CAEtC,MAAMC,aAAqE,eAClE;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,OAAO,2BAA2B,KAAK;GACxC,EAAE;EACJ,GACD,CAAC,OAAO,MAAM,MAAM,KAAK,CAC1B;AAED,QACE,oBAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,OACE,yBAAyB,GAAG,QAAQ,OAAO,6BAA6B,IACxE,yBAAyB,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}
+{"version":3,"file":"GroupMembers.js","names":["GroupMembers: FC<GroupMembersProps>","useTranslation","groupsEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","members: ResourceQueryResult<GroupMemberListResponse>","useResourceQuery","users: ResourceQueryResult<ManagedUserListResponse>","agents: ResourceQueryResult<AgentListResponse>","add: ResourceMutationResult<Group, GroupMembersVariables>","useResourceMutation","remove: ResourceMutationResult<Group, GroupMembersVariables>","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupMember,\n  GroupMemberListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  ResourceQueryKey,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addGroupMembers,\n  getAgents,\n  getGroupMembers,\n  getUsers,\n  removeGroupMembers,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface GroupMembersVariables {\n  groupId: string;\n  members: Pick<GroupMember, 'id' | 'type'>[];\n}\n\n/**\n * Query keys to refetch after a group's membership changes.\n */\nconst getMembershipInvalidatedKeys = ({groupId}: GroupMembersVariables): ResourceQueryKey[] => [\n  [GroupQueryKeys.GROUP, groupId],\n  [GroupQueryKeys.GROUP_MEMBERS, groupId],\n  [GroupQueryKeys.MEMBERSHIPS],\n  [RoleQueryKeys.ROLE_ASSIGNMENTS],\n];\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  editable = false,\n  groupId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const members: ResourceQueryResult<GroupMemberListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUP_MEMBERS, groupId, {limit: 100}],\n    (fetcher) => getGroupMembers({...groupsEndpoint, fetcher, groupId, limit: 100}),\n    {enabled: Boolean(groupId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const add: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      addGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n  const remove: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      removeGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, users.data],\n  );\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;AAwCA,MAAM,gCAAgC,EAAC,cAAwD;CAC7F,CAAC,eAAe,OAAO,QAAQ;CAC/B,CAAC,eAAe,eAAe,QAAQ;CACvC,CAAC,eAAe,YAAY;CAC5B,CAAC,cAAc,iBAAiB;CACjC;;;;;;;;;AAsBD,MAAMA,gBAAuC,EAC3C,WAAW,OACX,SACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,iBAAqCC,8BAAsB,SAAS;CAC1E,MAAMC,gBAAoCD,8BAAsB,QAAQ;CACxE,MAAME,iBAAqCF,8BAAsB,SAAS;CAC1E,MAAMG,UAAwDC,yBAC5D;EAAC,eAAe;EAAe;EAAS,EAAC,OAAO,KAAI;EAAC,GACpD,YAAY,gBAAgB;EAAC,GAAG;EAAgB;EAAS;EAAS,OAAO;EAAI,CAAC,EAC/E,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMC,QAAsDD,yBAC1D,CAAC,cAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,YAAY,SAAS;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAME,SAAiDF,yBACrD,CAAC,eAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,YAAY,UAAU;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMG,MAA4DC,6BAC/D,EAAC,SAAS,IAAI,SAAS,WAAiC,YACvD,gBAAgB;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EAC9E,6BACD;CACD,MAAMC,SAA+DD,6BAClE,EAAC,SAAS,IAAI,SAAS,WAAiC,YACvD,mBAAmB;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EACjF,6BACD;CAED,MAAME,aAAqE,eAClE;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,OAAO,2BAA2B,KAAK;GACxC,EAAE;EACJ,GACD,CAAC,OAAO,MAAM,MAAM,KAAK,CAC1B;AAED,QACE,oBAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,OACE,yBAAyB,GAAG,QAAQ,OAAO,6BAA6B,IACxE,yBAAyB,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}

package/dist/components/admin/RoleAssignments/RoleAssignments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RoleAssignments.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"names":[],"mappings":"AAaA,OAAO,EAAC,EAAE,EAAkC,MAAM,OAAO,CAAC;AAC1D,OAA4B,EAAC,wBAAwB,EAAC,MAAM,uBAAuB,CAAC;AAUpF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,wBAAwB,EACtB,aAAa,GACb,YAAY,GACZ,OAAO,GACP,WAAW,GACX,YAAY,GACZ,UAAU,GACV,oBAAoB,GACpB,YAAY,GACZ,YAAY,CACf,GAAG;IACF;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;;GAQG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAuD7C,CAAC;AAEF,eAAe,eAAe,CAAC"}
+{"version":3,"file":"RoleAssignments.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"names":[],"mappings":"AA2BA,OAAO,EAAC,EAAE,EAAkC,MAAM,OAAO,CAAC;AAC1D,OAA4B,EAAC,wBAAwB,EAAC,MAAM,uBAAuB,CAAC;AAYpF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,wBAAwB,EACtB,aAAa,GACb,YAAY,GACZ,OAAO,GACP,WAAW,GACX,YAAY,GACZ,UAAU,GACV,oBAAoB,GACpB,YAAY,GACZ,YAAY,CACf,GAAG;IACF;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;;GAQG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAoF7C,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/components/admin/RoleAssignments/RoleAssignments.js

@@ -1,12 +1,9 @@
 import useTranslation_default from "../../../hooks/useTranslation.js";
-import useGetUsers_default from "../../../hooks/management/users/useGetUsers.js";
-import useGetAgents_default from "../../../hooks/management/agents/useGetAgents.js";
-import useGetRoleAssignments_default from "../../../hooks/management/roles/useGetRoleAssignments.js";
-import useAddRoleAssignments_default from "../../../hooks/management/roles/useAddRoleAssignments.js";
-import useRemoveRoleAssignments_default from "../../../hooks/management/roles/useRemoveRoleAssignments.js";
-import useGetGroups_default from "../../../hooks/management/groups/useGetGroups.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
+import useResourceMutation_default from "../../../hooks/management/useResourceMutation.js";
 import BaseRoleAssignments_default from "./BaseRoleAssignments.js";
-import { resolveManagedIdentityName, toManagementErrorMessage } from "@thunderid/browser";
+import { AgentQueryKeys, GroupQueryKeys, RoleQueryKeys, UserQueryKeys, addRoleAssignments, getAgents, getGroups, getRoleAssignments, getUsers, removeRoleAssignments, resolveManagedIdentityName, toManagementErrorMessage } from "@thunderid/browser";
 import { useMemo, useState } from "react";
 import { jsx } from "react/jsx-runtime";
 
@@ -23,15 +20,52 @@ import { jsx } from "react/jsx-runtime";
 const RoleAssignments = ({ editable = false, filterable = true, preferences, roleId,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
 	const [typeFilter, setTypeFilter] = useState(null);
-	const assignments = useGetRoleAssignments_default(roleId, {
+	const rolesEndpoint = useManagementEndpoint_default("roles");
+	const usersEndpoint = useManagementEndpoint_default("users");
+	const groupsEndpoint = useManagementEndpoint_default("groups");
+	const agentsEndpoint = useManagementEndpoint_default("agents");
+	const type = typeFilter ?? void 0;
+	const assignments = useResourceQuery_default([
+		RoleQueryKeys.ROLE_ASSIGNMENTS,
+		roleId,
+		{
+			limit: 100,
+			type
+		}
+	], (fetcher) => getRoleAssignments({
+		...rolesEndpoint,
+		fetcher,
 		limit: 100,
-		type: typeFilter ?? void 0
-	});
-	const users = useGetUsers_default({ limit: 100 }, { enabled: editable });
-	const groups = useGetGroups_default({ limit: 100 }, { enabled: editable });
-	const agents = useGetAgents_default({ limit: 100 }, { enabled: editable });
-	const assign = useAddRoleAssignments_default();
-	const unassign = useRemoveRoleAssignments_default();
+		roleId,
+		type
+	}), { enabled: Boolean(roleId) });
+	const users = useResourceQuery_default([UserQueryKeys.USERS, { limit: 100 }], (fetcher) => getUsers({
+		...usersEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const groups = useResourceQuery_default([GroupQueryKeys.GROUPS, { limit: 100 }], (fetcher) => getGroups({
+		...groupsEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const agents = useResourceQuery_default([AgentQueryKeys.AGENTS, { limit: 100 }], (fetcher) => getAgents({
+		...agentsEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const assign = useResourceMutation_default(({ assignments: changes, roleId: id }, fetcher) => addRoleAssignments({
+		...rolesEndpoint,
+		assignments: changes,
+		fetcher,
+		roleId: id
+	}), () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]]);
+	const unassign = useResourceMutation_default(({ assignments: changes, roleId: id }, fetcher) => removeRoleAssignments({
+		...rolesEndpoint,
+		assignments: changes,
+		fetcher,
+		roleId: id
+	}), () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]]);
 	const candidates = useMemo(() => ({
 		agent: (agents.data?.agents ?? []).map((agent) => ({
 			id: agent.id,

package/dist/components/admin/RoleAssignments/RoleAssignments.js.map

@@ -1 +1 @@
-{"version":3,"file":"RoleAssignments.js","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","useGetRoleAssignments","useGetUsers","useGetGroups","useGetAgents","useAddRoleAssignments","useRemoveRoleAssignments","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n  BasicAgent,\n  Group,\n  ManagedUser,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useGetAgents from '../../../hooks/management/agents/useGetAgents';\nimport useGetGroups from '../../../hooks/management/groups/useGetGroups';\nimport useAddRoleAssignments from '../../../hooks/management/roles/useAddRoleAssignments';\nimport useGetRoleAssignments from '../../../hooks/management/roles/useGetRoleAssignments';\nimport useRemoveRoleAssignments from '../../../hooks/management/roles/useRemoveRoleAssignments';\nimport useGetUsers from '../../../hooks/management/users/useGetUsers';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  editable = false,\n  filterable = true,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const assignments = useGetRoleAssignments(roleId, {limit: 100, type: typeFilter ?? undefined});\n  const users = useGetUsers({limit: 100}, {enabled: editable});\n  const groups = useGetGroups({limit: 100}, {enabled: editable});\n  const agents = useGetAgents({limit: 100}, {enabled: editable});\n  const assign = useAddRoleAssignments();\n  const unassign = useRemoveRoleAssignments();\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      group: (groups.data?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, groups.data, users.data],\n  );\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA0DA,MAAMA,mBAA6C,EACjD,WAAW,OACX,aAAa,MACb,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,iBAAiB,SAAkC,KAAK;CAC3E,MAAM,cAAcC,8BAAsB,QAAQ;EAAC,OAAO;EAAK,MAAM,cAAc;EAAU,CAAC;CAC9F,MAAM,QAAQC,oBAAY,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC5D,MAAM,SAASC,qBAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,SAASC,qBAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,SAASC,+BAAuB;CACtC,MAAM,WAAWC,kCAA0B;CAE3C,MAAMC,aAA+E,eAC5E;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAkB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAC7F,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,OAAO,2BAA2B,KAAK;GACxC,EAAE;EACJ,GACD;EAAC,OAAO;EAAM,OAAO;EAAM,MAAM;EAAK,CACvC;AAED,QACE,oBAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,OACE,yBAAyB,GAAG,YAAY,OAAO,gCAAgC,IAC/E,yBAAyB,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}
+{"version":3,"file":"RoleAssignments.js","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","rolesEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","groupsEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","type: RoleAssigneeType | undefined","assignments: ResourceQueryResult<RoleAssignmentListResponse>","useResourceQuery","users: ResourceQueryResult<ManagedUserListResponse>","groups: ResourceQueryResult<GroupListResponse>","agents: ResourceQueryResult<AgentListResponse>","assign: ResourceMutationResult<void, RoleAssignmentsVariables>","useResourceMutation","unassign: ResourceMutationResult<void, RoleAssignmentsVariables>","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n  RoleAssignmentListResponse,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addRoleAssignments,\n  getAgents,\n  getGroups,\n  getRoleAssignments,\n  getUsers,\n  removeRoleAssignments,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface RoleAssignmentsVariables {\n  assignments: RoleAssignmentInput[];\n  roleId: string;\n}\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  editable = false,\n  filterable = true,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const rolesEndpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const type: RoleAssigneeType | undefined = typeFilter ?? undefined;\n  const assignments: ResourceQueryResult<RoleAssignmentListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, roleId, {limit: 100, type}],\n    (fetcher) => getRoleAssignments({...rolesEndpoint, fetcher, limit: 100, roleId, type}),\n    {enabled: Boolean(roleId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const groups: ResourceQueryResult<GroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUPS, {limit: 100}],\n    (fetcher) => getGroups({...groupsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const assign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      addRoleAssignments({...rolesEndpoint, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n  const unassign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      removeRoleAssignments({...rolesEndpoint, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      group: (groups.data?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, groups.data, users.data],\n  );\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA0EA,MAAMA,mBAA6C,EACjD,WAAW,OACX,aAAa,MACb,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,iBAAiB,SAAkC,KAAK;CAC3E,MAAMC,gBAAoCC,8BAAsB,QAAQ;CACxE,MAAMC,gBAAoCD,8BAAsB,QAAQ;CACxE,MAAME,iBAAqCF,8BAAsB,SAAS;CAC1E,MAAMG,iBAAqCH,8BAAsB,SAAS;CAC1E,MAAMI,OAAqC,cAAc;CACzD,MAAMC,cAA+DC,yBACnE;EAAC,cAAc;EAAkB;EAAQ;GAAC,OAAO;GAAK;GAAK;EAAC,GAC3D,YAAY,mBAAmB;EAAC,GAAG;EAAe;EAAS,OAAO;EAAK;EAAQ;EAAK,CAAC,EACtF,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,QAAsDD,yBAC1D,CAAC,cAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,YAAY,SAAS;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAME,SAAiDF,yBACrD,CAAC,eAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,YAAY,UAAU;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMG,SAAiDH,yBACrD,CAAC,eAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,YAAY,UAAU;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMI,SAAiEC,6BACpE,EAAC,aAAa,SAAS,QAAQ,MAA+B,YAC7D,mBAAmB;EAAC,GAAG;EAAe,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QAC7E,CAAC,CAAC,cAAc,iBAAiB,CAAC,CACzC;CACD,MAAMC,WAAmED,6BACtE,EAAC,aAAa,SAAS,QAAQ,MAA+B,YAC7D,sBAAsB;EAAC,GAAG;EAAe,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QAChF,CAAC,CAAC,cAAc,iBAAiB,CAAC,CACzC;CAED,MAAME,aAA+E,eAC5E;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAkB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAC7F,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,OAAO,2BAA2B,KAAK;GACxC,EAAE;EACJ,GACD;EAAC,OAAO;EAAM,OAAO;EAAM,MAAM;EAAK,CACvC;AAED,QACE,oBAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,OACE,yBAAyB,GAAG,YAAY,OAAO,gCAAgC,IAC/E,yBAAyB,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}

package/dist/components/admin/RoleCreate/RoleCreate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RoleCreate.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RoleCreate/RoleCreate.tsx"],"names":[],"mappings":"AAGA,OAAO,EAA2B,IAAI,EAAC,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AACvC,OAAuB,EAAC,mBAAmB,EAAuB,MAAM,kBAAkB,CAAC;AAK3F,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,EAAE,OAAO,GAAG,cAAc,GAAG,UAAU,CAAC,GAAG;IAC/F;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;IACjC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,UAAU,EAAE,EAAE,CAAC,eAAe,CAsBnC,CAAC;AAEF,eAAe,UAAU,CAAC"}
+{"version":3,"file":"RoleCreate.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RoleCreate/RoleCreate.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAoB,IAAI,EAAsD,MAAM,oBAAoB,CAAC;AAChH,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AACvC,OAAuB,EAAC,mBAAmB,EAAuB,MAAM,kBAAkB,CAAC;AAM3F,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,EAAE,OAAO,GAAG,cAAc,GAAG,UAAU,CAAC,GAAG;IAC/F;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;IACjC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,UAAU,EAAE,EAAE,CAAC,eAAe,CA2BnC,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/components/admin/RoleCreate/RoleCreate.js

@@ -1,8 +1,9 @@
 import useTranslation_default from "../../../hooks/useTranslation.js";
-import useCreateRole_default from "../../../hooks/management/roles/useCreateRole.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceMutation_default from "../../../hooks/management/useResourceMutation.js";
 import useDefaultOuId_default from "../shared/useDefaultOuId.js";
 import BaseRoleCreate_default from "./BaseRoleCreate.js";
-import { toManagementErrorMessage } from "@thunderid/browser";
+import { RoleQueryKeys, createRole, toManagementErrorMessage } from "@thunderid/browser";
 import { jsx } from "react/jsx-runtime";
 
 //#region src/components/admin/RoleCreate/RoleCreate.tsx
@@ -17,7 +18,12 @@ import { jsx } from "react/jsx-runtime";
 const RoleCreate = ({ onCreated, ouId, preferences,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
 	const resolvedOuId = useDefaultOuId_default(ouId);
-	const { error, isLoading, mutate } = useCreateRole_default({ onSuccess: onCreated });
+	const endpoint = useManagementEndpoint_default("roles");
+	const { error, isLoading, mutate } = useResourceMutation_default((payload, fetcher) => createRole({
+		...endpoint,
+		fetcher,
+		payload
+	}), () => [[RoleQueryKeys.ROLES], [RoleQueryKeys.ROLE_ASSIGNMENTS]], { onSuccess: onCreated });
 	const handleSubmit = ({ description, name }) => {
 		if (resolvedOuId) mutate({
 			description,

package/dist/components/admin/RoleCreate/RoleCreate.js.map

@@ -1 +1 @@
-{"version":3,"file":"RoleCreate.js","names":["RoleCreate: FC<RoleCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","useCreateRole","BaseRoleCreate"],"sources":["../../../../src/components/admin/RoleCreate/RoleCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage, Role} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRoleCreate, {BaseRoleCreateProps, RoleCreateSubmission} from './BaseRoleCreate';\nimport useCreateRole from '../../../hooks/management/roles/useCreateRole';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type RoleCreateProps = Omit<BaseRoleCreateProps, 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created role.\n   */\n  onCreated?: (role: Role) => void;\n  /**\n   * Organization unit the role is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates a role through the management API.\n *\n * @example\n * ```tsx\n * <RoleCreate onCreated={(role) => navigate(`/roles/${role.id}`)} />\n * ```\n */\nconst RoleCreate: FC<RoleCreateProps> = ({onCreated, ouId, preferences, ...rest}: RoleCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const {error, isLoading, mutate} = useCreateRole({onSuccess: onCreated});\n\n  const handleSubmit = ({description, name}: RoleCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId});\n    }\n  };\n\n  return (\n    <BaseRoleCreate\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.roles.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleCreate;\n"],"mappings":";;;;;;;;;;;;;;;;AA6BA,MAAMA,cAAmC,EAAC,WAAW,MAAM,YAAa,GAAG,WAAyC;CAClH,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,uBAAe,KAAK;CAC7D,MAAM,EAAC,OAAO,WAAW,WAAUC,sBAAc,EAAC,WAAW,WAAU,CAAC;CAExE,MAAM,gBAAgB,EAAC,aAAa,WAAsC;AACxE,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAa,CAAC;;AAIxD,QACE,oBAACC;EACC,UAAU;EACV,cAAc;EACd,OACE,eAAe,yBAAyB,GAAG,OAAO,2BAA2B,GAAG,EAAE,4BAA4B;EAEnG;EACb,GAAI;GACJ;;AAIN,yBAAe"}
+{"version":3,"file":"RoleCreate.js","names":["RoleCreate: FC<RoleCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceMutation","BaseRoleCreate"],"sources":["../../../../src/components/admin/RoleCreate/RoleCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {CreateRoleRequest, Role, RoleQueryKeys, createRole, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRoleCreate, {BaseRoleCreateProps, RoleCreateSubmission} from './BaseRoleCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type RoleCreateProps = Omit<BaseRoleCreateProps, 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created role.\n   */\n  onCreated?: (role: Role) => void;\n  /**\n   * Organization unit the role is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates a role through the management API.\n *\n * @example\n * ```tsx\n * <RoleCreate onCreated={(role) => navigate(`/roles/${role.id}`)} />\n * ```\n */\nconst RoleCreate: FC<RoleCreateProps> = ({onCreated, ouId, preferences, ...rest}: RoleCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const {error, isLoading, mutate}: ResourceMutationResult<Role, CreateRoleRequest> = useResourceMutation(\n    (payload: CreateRoleRequest, fetcher) => createRole({...endpoint, fetcher, payload}),\n    () => [[RoleQueryKeys.ROLES], [RoleQueryKeys.ROLE_ASSIGNMENTS]],\n    {onSuccess: onCreated},\n  );\n\n  const handleSubmit = ({description, name}: RoleCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId});\n    }\n  };\n\n  return (\n    <BaseRoleCreate\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.roles.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;AA8BA,MAAMA,cAAmC,EAAC,WAAW,MAAM,YAAa,GAAG,WAAyC;CAClH,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,uBAAe,KAAK;CAC7D,MAAMC,WAA+BC,8BAAsB,QAAQ;CACnE,MAAM,EAAC,OAAO,WAAW,WAA2DC,6BACjF,SAA4B,YAAY,WAAW;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,QAC9E,CAAC,CAAC,cAAc,MAAM,EAAE,CAAC,cAAc,iBAAiB,CAAC,EAC/D,EAAC,WAAW,WAAU,CACvB;CAED,MAAM,gBAAgB,EAAC,aAAa,WAAsC;AACxE,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAa,CAAC;;AAIxD,QACE,oBAACC;EACC,UAAU;EACV,cAAc;EACd,OACE,eAAe,yBAAyB,GAAG,OAAO,2BAA2B,GAAG,EAAE,4BAA4B;EAEnG;EACb,GAAI;GACJ;;AAIN,yBAAe"}

package/dist/components/admin/RoleList/RoleList.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RoleList.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RoleList/RoleList.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAC,EAAE,EAAyB,MAAM,OAAO,CAAC;AACjD,OAAqB,EAAC,iBAAiB,EAAC,MAAM,gBAAgB,CAAC;AAI/D,MAAM,MAAM,aAAa,GAAG,IAAI,CAC9B,iBAAiB,EACjB,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,GAAG,cAAc,CAC7E,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CAkB/B,CAAC;AAEF,eAAe,QAAQ,CAAC"}
+{"version":3,"file":"RoleList.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RoleList/RoleList.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAC,EAAE,EAAyB,MAAM,OAAO,CAAC;AACjD,OAAqB,EAAC,iBAAiB,EAAC,MAAM,gBAAgB,CAAC;AAK/D,MAAM,MAAM,aAAa,GAAG,IAAI,CAC9B,iBAAiB,EACjB,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,GAAG,cAAc,CAC7E,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CAsB/B,CAAC;AAEF,eAAe,QAAQ,CAAC"}

package/dist/components/admin/RoleList/RoleList.js

@@ -1,7 +1,8 @@
 import useTranslation_default from "../../../hooks/useTranslation.js";
-import useGetRoles_default from "../../../hooks/management/roles/useGetRoles.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
 import BaseRoleList_default from "./BaseRoleList.js";
-import { toManagementErrorMessage } from "@thunderid/browser";
+import { RoleQueryKeys, getRoles, toManagementErrorMessage } from "@thunderid/browser";
 import { useState } from "react";
 import { jsx } from "react/jsx-runtime";
 
@@ -17,10 +18,16 @@ import { jsx } from "react/jsx-runtime";
 const RoleList = ({ limit = 20, preferences,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
 	const [offset, setOffset] = useState(0);
-	const { data, error, isLoading } = useGetRoles_default({
+	const endpoint = useManagementEndpoint_default("roles");
+	const { data, error, isLoading } = useResourceQuery_default([RoleQueryKeys.ROLES, {
 		limit,
 		offset
-	});
+	}], (fetcher) => getRoles({
+		...endpoint,
+		fetcher,
+		limit,
+		offset
+	}));
 	return /* @__PURE__ */ jsx(BaseRoleList_default, {
 		roles: data?.roles ?? [],
 		totalResults: data?.totalResults,

package/dist/components/admin/RoleList/RoleList.js.map

@@ -1 +1 @@
-{"version":3,"file":"RoleList.js","names":["RoleList: FC<RoleListProps>","useTranslation","useGetRoles","BaseRoleList"],"sources":["../../../../src/components/admin/RoleList/RoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseRoleList, {BaseRoleListProps} from './BaseRoleList';\nimport useGetRoles from '../../../hooks/management/roles/useGetRoles';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RoleListProps = Omit<\n  BaseRoleListProps,\n  'error' | 'isLoading' | 'offset' | 'onPageChange' | 'roles' | 'totalResults'\n>;\n\n/**\n * Lists the roles the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <RoleList onSelect={(role) => setSelectedRoleId(role.id)} />\n * ```\n */\nconst RoleList: FC<RoleListProps> = ({limit = 20, preferences, ...rest}: RoleListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const {data, error, isLoading} = useGetRoles({limit, offset});\n\n  return (\n    <BaseRoleList\n      roles={data?.roles ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.roles.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleList;\n"],"mappings":";;;;;;;;;;;;;;;;AAsBA,MAAMA,YAA+B,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAuC;CACvG,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,aAAa,SAAiB,EAAE;CAC/C,MAAM,EAAC,MAAM,OAAO,cAAaC,oBAAY;EAAC;EAAO;EAAO,CAAC;AAE7D,QACE,oBAACC;EACC,OAAO,MAAM,SAAS,EAAE;EACxB,cAAc,MAAM;EACT;EACX,OAAO,yBAAyB,GAAG,OAAO,yBAAyB;EAC5D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,uBAAe"}
+{"version":3,"file":"RoleList.js","names":["RoleList: FC<RoleListProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","BaseRoleList"],"sources":["../../../../src/components/admin/RoleList/RoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {RoleListResponse, RoleQueryKeys, getRoles, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseRoleList, {BaseRoleListProps} from './BaseRoleList';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RoleListProps = Omit<\n  BaseRoleListProps,\n  'error' | 'isLoading' | 'offset' | 'onPageChange' | 'roles' | 'totalResults'\n>;\n\n/**\n * Lists the roles the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <RoleList onSelect={(role) => setSelectedRoleId(role.id)} />\n * ```\n */\nconst RoleList: FC<RoleListProps> = ({limit = 20, preferences, ...rest}: RoleListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const {data, error, isLoading}: ResourceQueryResult<RoleListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLES, {limit, offset}],\n    (fetcher) => getRoles({...endpoint, fetcher, limit, offset}),\n  );\n\n  return (\n    <BaseRoleList\n      roles={data?.roles ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.roles.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleList;\n"],"mappings":";;;;;;;;;;;;;;;;;AAuBA,MAAMA,YAA+B,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAuC;CACvG,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,aAAa,SAAiB,EAAE;CAC/C,MAAMC,WAA+BC,8BAAsB,QAAQ;CACnE,MAAM,EAAC,MAAM,OAAO,cAAoDC,yBACtE,CAAC,cAAc,OAAO;EAAC;EAAO;EAAO,CAAC,GACrC,YAAY,SAAS;EAAC,GAAG;EAAU;EAAS;EAAO;EAAO,CAAC,CAC7D;AAED,QACE,oBAACC;EACC,OAAO,MAAM,SAAS,EAAE;EACxB,cAAc,MAAM;EACT;EACX,OAAO,yBAAyB,GAAG,OAAO,yBAAyB;EAC5D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,uBAAe"}

package/dist/components/admin/RolePermissions/RolePermissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RolePermissions.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RolePermissions/RolePermissions.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AACvC,OAA4B,EAAC,wBAAwB,EAAC,MAAM,uBAAuB,CAAC;AAIpF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,wBAAwB,EAAE,OAAO,GAAG,WAAW,GAAG,aAAa,CAAC,GAAG;IACzG,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAiB7C,CAAC;AAEF,eAAe,eAAe,CAAC"}
+{"version":3,"file":"RolePermissions.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RolePermissions/RolePermissions.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AACvC,OAA4B,EAAC,wBAAwB,EAAC,MAAM,uBAAuB,CAAC;AAKpF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,wBAAwB,EAAE,OAAO,GAAG,WAAW,GAAG,aAAa,CAAC,GAAG;IACzG,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAsB7C,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/components/admin/RolePermissions/RolePermissions.js

@@ -1,7 +1,8 @@
 import useTranslation_default from "../../../hooks/useTranslation.js";
-import useGetRole_default from "../../../hooks/management/roles/useGetRole.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
 import BaseRolePermissions_default from "./BaseRolePermissions.js";
-import { toManagementErrorMessage } from "@thunderid/browser";
+import { RoleQueryKeys, getRole, toManagementErrorMessage } from "@thunderid/browser";
 import { jsx } from "react/jsx-runtime";
 
 //#region src/components/admin/RolePermissions/RolePermissions.tsx
@@ -15,7 +16,12 @@ import { jsx } from "react/jsx-runtime";
 */
 const RolePermissions = ({ preferences, roleId,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
-	const role = useGetRole_default(roleId);
+	const endpoint = useManagementEndpoint_default("roles");
+	const role = useResourceQuery_default([RoleQueryKeys.ROLE, roleId], (fetcher) => getRole({
+		...endpoint,
+		fetcher,
+		roleId
+	}), { enabled: Boolean(roleId) });
 	return /* @__PURE__ */ jsx(BaseRolePermissions_default, {
 		permissions: role.data?.permissions ?? [],
 		isLoading: role.isLoading,