@thunderid/react 1.7.0 → 1.9.0

package/dist/cjs/components/account/UserProfile/BaseUserProfile.cjs

@@ -6,9 +6,9 @@ const require_Button = require('../../primitives/Button/Button.cjs');
 const require_Typography = require('../../primitives/Typography/Typography.cjs');
 const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_Card = require('../../primitives/Card/Card.cjs');
+const require_TextField = require('../../primitives/TextField/TextField.cjs');
 const require_Checkbox = require('../../primitives/Checkbox/Checkbox.cjs');
 const require_DatePicker = require('../../primitives/DatePicker/DatePicker.cjs');
-const require_TextField = require('../../primitives/TextField/TextField.cjs');
 const require_Divider = require('../../primitives/Divider/Divider.cjs');
 const require_BaseUserProfile_styles = require('./BaseUserProfile.styles.cjs');
 const require_getMappedUserProfileValue = require('../../../utils/getMappedUserProfileValue.cjs');

package/dist/cjs/components/admin/AgentCreate/AgentCreate.cjs

@@ -1,7 +1,8 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useCreateAgent = require('../../../hooks/management/agents/useCreateAgent.cjs');
-const require_useGetAgentTypes = require('../../../hooks/management/agents/useGetAgentTypes.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
+const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
 const require_useDefaultOuId = require('../shared/useDefaultOuId.cjs');
 const require_BaseAgentCreate = require('./BaseAgentCreate.cjs');
 let __thunderid_browser = require("@thunderid/browser");
@@ -23,8 +24,18 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 const AgentCreate = ({ onCreated, ouId, owner, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const resolvedOuId = require_useDefaultOuId.default(ouId);
-	const { data: agentTypes } = require_useGetAgentTypes.default({ limit: 100 });
-	const { error, isLoading, mutate } = require_useCreateAgent.default({ onSuccess: onCreated });
+	const agentsEndpoint = require_useManagementEndpoint.default("agents");
+	const agentTypesEndpoint = require_useManagementEndpoint.default("agentTypes");
+	const { data: agentTypes } = require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENT_TYPES, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getAgentTypes)({
+		...agentTypesEndpoint,
+		fetcher,
+		limit: 100
+	}));
+	const { error, isLoading, mutate } = require_useResourceMutation.default((payload, fetcher) => (0, __thunderid_browser.createAgent)({
+		...agentsEndpoint,
+		fetcher,
+		payload
+	}), () => [[__thunderid_browser.AgentQueryKeys.AGENTS]], { onSuccess: onCreated });
 	const options = (0, react.useMemo)(() => (agentTypes?.types ?? []).map((agentType) => ({
 		label: agentType.displayName,
 		value: agentType.handle

package/dist/cjs/components/admin/AgentCreate/AgentCreate.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"AgentCreate.cjs","names":["AgentCreate: FC<AgentCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","useGetAgentTypes","useCreateAgent","options: SelectOption[]","BaseAgentCreate"],"sources":["../../../../../src/components/admin/AgentCreate/AgentCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage, Agent, AgentType, SelectOption} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseAgentCreate, {AgentCreateSubmission, BaseAgentCreateProps} from './BaseAgentCreate';\nimport useCreateAgent from '../../../hooks/management/agents/useCreateAgent';\nimport useGetAgentTypes from '../../../hooks/management/agents/useGetAgentTypes';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type AgentCreateProps = Omit<BaseAgentCreateProps, 'agentTypes' | 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created agent.\n   */\n  onCreated?: (agent: Agent) => void;\n  /**\n   * Organization unit the agent is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n  /**\n   * The person responsible for the agent. Defaults to the server's choice, usually the creator.\n   */\n  owner?: string;\n};\n\n/**\n * Registers an agent through the management API.\n *\n * @example\n * ```tsx\n * <AgentCreate onCreated={(agent) => navigate(`/agents/${agent.id}`)} />\n * ```\n */\nconst AgentCreate: FC<AgentCreateProps> = ({\n  onCreated,\n  ouId,\n  owner,\n  preferences,\n  ...rest\n}: AgentCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const {data: agentTypes} = useGetAgentTypes({limit: 100});\n  const {error, isLoading, mutate} = useCreateAgent({onSuccess: onCreated});\n\n  const options: SelectOption[] = useMemo(\n    () =>\n      (agentTypes?.types ?? []).map((agentType: AgentType) => ({\n        label: agentType.displayName,\n        value: agentType.handle,\n      })),\n    [agentTypes],\n  );\n\n  const handleSubmit = ({description, name, type}: AgentCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId, owner, type});\n    }\n  };\n\n  return (\n    <BaseAgentCreate\n      agentTypes={options}\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.agents.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default AgentCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAkCA,MAAMA,eAAqC,EACzC,WACA,MACA,OACA,YACA,GAAG,WACiC;CACpC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAM,EAAC,MAAM,eAAcC,iCAAiB,EAAC,OAAO,KAAI,CAAC;CACzD,MAAM,EAAC,OAAO,WAAW,WAAUC,+BAAe,EAAC,WAAW,WAAU,CAAC;CAEzE,MAAMC,oCAED,YAAY,SAAS,EAAE,EAAE,KAAK,eAA0B;EACvD,OAAO,UAAU;EACjB,OAAO,UAAU;EAClB,EAAE,EACL,CAAC,WAAW,CACb;CAED,MAAM,gBAAgB,EAAC,aAAa,MAAM,WAAuC;AAC/E,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAc;GAAO;GAAK,CAAC;;AAIrE,QACE,2CAACC;EACC,YAAY;EACZ,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,4BAA4B,GAAG,EAAE,4BAA4B;EAEpG;EACb,GAAI;GACJ;;AAIN,0BAAe"}
+{"version":3,"file":"AgentCreate.cjs","names":["AgentCreate: FC<AgentCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","agentsEndpoint: ManagementEndpoint","useManagementEndpoint","agentTypesEndpoint: ManagementEndpoint","useResourceQuery","AgentQueryKeys","useResourceMutation","options: SelectOption[]","BaseAgentCreate"],"sources":["../../../../../src/components/admin/AgentCreate/AgentCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  Agent,\n  AgentQueryKeys,\n  AgentType,\n  AgentTypeListResponse,\n  CreateAgentRequest,\n  SelectOption,\n  createAgent,\n  getAgentTypes,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseAgentCreate, {AgentCreateSubmission, BaseAgentCreateProps} from './BaseAgentCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type AgentCreateProps = Omit<BaseAgentCreateProps, 'agentTypes' | 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created agent.\n   */\n  onCreated?: (agent: Agent) => void;\n  /**\n   * Organization unit the agent is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n  /**\n   * The person responsible for the agent. Defaults to the server's choice, usually the creator.\n   */\n  owner?: string;\n};\n\n/**\n * Registers an agent through the management API.\n *\n * @example\n * ```tsx\n * <AgentCreate onCreated={(agent) => navigate(`/agents/${agent.id}`)} />\n * ```\n */\nconst AgentCreate: FC<AgentCreateProps> = ({\n  onCreated,\n  ouId,\n  owner,\n  preferences,\n  ...rest\n}: AgentCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const agentTypesEndpoint: ManagementEndpoint = useManagementEndpoint('agentTypes');\n  const {data: agentTypes}: ResourceQueryResult<AgentTypeListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENT_TYPES, {limit: 100}],\n    (fetcher) => getAgentTypes({...agentTypesEndpoint, fetcher, limit: 100}),\n  );\n  const {error, isLoading, mutate}: ResourceMutationResult<Agent, CreateAgentRequest> = useResourceMutation(\n    (payload: CreateAgentRequest, fetcher) => createAgent({...agentsEndpoint, fetcher, payload}),\n    () => [[AgentQueryKeys.AGENTS]],\n    {onSuccess: onCreated},\n  );\n\n  const options: SelectOption[] = useMemo(\n    () =>\n      (agentTypes?.types ?? []).map((agentType: AgentType) => ({\n        label: agentType.displayName,\n        value: agentType.handle,\n      })),\n    [agentTypes],\n  );\n\n  const handleSubmit = ({description, name, type}: AgentCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId, owner, type});\n    }\n  };\n\n  return (\n    <BaseAgentCreate\n      agentTypes={options}\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.agents.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default AgentCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA6CA,MAAMA,eAAqC,EACzC,WACA,MACA,OACA,YACA,GAAG,WACiC;CACpC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAMC,iBAAqCC,sCAAsB,SAAS;CAC1E,MAAMC,qBAAyCD,sCAAsB,aAAa;CAClF,MAAM,EAAC,MAAM,eAA0DE,iCACrE,CAACC,mCAAe,aAAa,EAAC,OAAO,KAAI,CAAC,GACzC,mDAA0B;EAAC,GAAG;EAAoB;EAAS,OAAO;EAAI,CAAC,CACzE;CACD,MAAM,EAAC,OAAO,WAAW,WAA6DC,qCACnF,SAA6B,iDAAwB;EAAC,GAAG;EAAgB;EAAS;EAAQ,CAAC,QACtF,CAAC,CAACD,mCAAe,OAAO,CAAC,EAC/B,EAAC,WAAW,WAAU,CACvB;CAED,MAAME,oCAED,YAAY,SAAS,EAAE,EAAE,KAAK,eAA0B;EACvD,OAAO,UAAU;EACjB,OAAO,UAAU;EAClB,EAAE,EACL,CAAC,WAAW,CACb;CAED,MAAM,gBAAgB,EAAC,aAAa,MAAM,WAAuC;AAC/E,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAc;GAAO;GAAK,CAAC;;AAIrE,QACE,2CAACC;EACC,YAAY;EACZ,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,4BAA4B,GAAG,EAAE,4BAA4B;EAEpG;EACb,GAAI;GACJ;;AAIN,0BAAe"}

package/dist/cjs/components/admin/AgentDetails/AgentDetails.cjs

@@ -1,9 +1,9 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useGetAgent = require('../../../hooks/management/agents/useGetAgent.cjs');
-const require_useDeleteAgent = require('../../../hooks/management/agents/useDeleteAgent.cjs');
-const require_useGetAgentGroups = require('../../../hooks/management/agents/useGetAgentGroups.cjs');
-const require_useGetAgentRoles = require('../../../hooks/management/agents/useGetAgentRoles.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
+const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
+const require_useAccountLifecycle = require('../../../hooks/management/useAccountLifecycle.cjs');
 const require_BaseAgentDetails = require('./BaseAgentDetails.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -20,20 +20,59 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 * <AgentDetails agentId={agentId} deletable onDeleted={() => navigate('/agents')} />
 * ```
 */
-const AgentDetails = ({ agentId, deletable = false, onDeleted, preferences,...rest }) => {
+const AgentDetails = ({ agentId, deletable = false, lifecycleActions = false, onDeleted, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
-	const agent = require_useGetAgent.default(agentId);
-	const groups = require_useGetAgentGroups.default(agentId, { limit: 100 });
-	const roles = require_useGetAgentRoles.default(agentId, { limit: 100 });
-	const deletion = require_useDeleteAgent.default({ onSuccess: onDeleted });
+	const endpoint = require_useManagementEndpoint.default("agents");
+	const agent = require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENT, agentId], (fetcher) => (0, __thunderid_browser.getAgent)({
+		...endpoint,
+		agentId,
+		fetcher
+	}), { enabled: Boolean(agentId) });
+	const groups = require_useResourceQuery.default([
+		__thunderid_browser.GroupQueryKeys.MEMBERSHIPS,
+		"agent",
+		agentId,
+		{ limit: 100 }
+	], (fetcher) => (0, __thunderid_browser.getAgentGroups)({
+		...endpoint,
+		agentId,
+		fetcher,
+		limit: 100
+	}), { enabled: Boolean(agentId) });
+	const roles = require_useResourceQuery.default([
+		__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS,
+		"agent",
+		agentId,
+		{ limit: 100 }
+	], (fetcher) => (0, __thunderid_browser.getAgentRoles)({
+		...endpoint,
+		agentId,
+		fetcher,
+		limit: 100
+	}), { enabled: Boolean(agentId) });
+	const deletion = require_useResourceMutation.default((id, fetcher) => (0, __thunderid_browser.deleteAgent)({
+		...endpoint,
+		agentId: id,
+		fetcher
+	}), () => [[__thunderid_browser.AgentQueryKeys.AGENTS]], { onSuccess: onDeleted });
+	const lifecycle = require_useAccountLifecycle.default({
+		enabled: lifecycleActions,
+		invalidatedKeys: [[__thunderid_browser.AgentQueryKeys.AGENT, agentId], [__thunderid_browser.AgentQueryKeys.AGENTS]],
+		kind: "agent",
+		status: agent.data?.status?.value,
+		subject: agentId
+	});
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseAgentDetails.default, {
 		agent: agent.data,
 		groups: groups.data?.groups,
 		roles: roles.data?.roles,
 		isLoading: agent.isLoading,
-		error: (0, __thunderid_browser.toManagementErrorMessage)(t, agent.error, "admin.agents.details.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, deletion.error, "admin.agents.details.delete.error"),
+		error: (0, __thunderid_browser.toManagementErrorMessage)(t, agent.error, "admin.agents.details.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, deletion.error, "admin.agents.details.delete.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, lifecycle.error, "admin.common.lifecycle.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, lifecycle.loadError, "admin.common.lifecycle.load_error"),
 		isDeleting: deletion.isLoading,
 		onDelete: deletable ? () => void deletion.mutate(agentId) : void 0,
+		lifecycleActions: lifecycle.actions,
+		isRunningLifecycleAction: lifecycle.isRunning,
+		onLifecycleAction: lifecycleActions ? lifecycle.run : void 0,
 		preferences,
 		...rest
 	});

package/dist/cjs/components/admin/AgentDetails/AgentDetails.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"AgentDetails.cjs","names":["AgentDetails: FC<AgentDetailsProps>","useTranslation","useGetAgent","useGetAgentGroups","useGetAgentRoles","useDeleteAgent","BaseAgentDetails"],"sources":["../../../../../src/components/admin/AgentDetails/AgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseAgentDetails, {BaseAgentDetailsProps} from './BaseAgentDetails';\nimport useDeleteAgent from '../../../hooks/management/agents/useDeleteAgent';\nimport useGetAgent from '../../../hooks/management/agents/useGetAgent';\nimport useGetAgentGroups from '../../../hooks/management/agents/useGetAgentGroups';\nimport useGetAgentRoles from '../../../hooks/management/agents/useGetAgentRoles';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type AgentDetailsProps = Omit<\n  BaseAgentDetailsProps,\n  'agent' | 'error' | 'groups' | 'isDeleting' | 'isLoading' | 'onDelete' | 'roles'\n> & {\n  agentId: string;\n  /**\n   * Whether the agent can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Called after the agent has been deleted.\n   */\n  onDeleted?: () => void;\n};\n\n/**\n * Shows an agent with the groups and roles it holds, and optionally lets the signed-in user delete\n * it.\n *\n * @example\n * ```tsx\n * <AgentDetails agentId={agentId} deletable onDeleted={() => navigate('/agents')} />\n * ```\n */\nconst AgentDetails: FC<AgentDetailsProps> = ({\n  agentId,\n  deletable = false,\n  onDeleted,\n  preferences,\n  ...rest\n}: AgentDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const agent = useGetAgent(agentId);\n  const groups = useGetAgentGroups(agentId, {limit: 100});\n  const roles = useGetAgentRoles(agentId, {limit: 100});\n  const deletion = useDeleteAgent({onSuccess: onDeleted});\n\n  return (\n    <BaseAgentDetails\n      agent={agent.data}\n      groups={groups.data?.groups}\n      roles={roles.data?.roles}\n      isLoading={agent.isLoading}\n      error={\n        toManagementErrorMessage(t, agent.error, 'admin.agents.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.agents.details.delete.error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(agentId) : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default AgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAqCA,MAAMA,gBAAuC,EAC3C,SACA,YAAY,OACZ,WACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,QAAQC,4BAAY,QAAQ;CAClC,MAAM,SAASC,kCAAkB,SAAS,EAAC,OAAO,KAAI,CAAC;CACvD,MAAM,QAAQC,iCAAiB,SAAS,EAAC,OAAO,KAAI,CAAC;CACrD,MAAM,WAAWC,+BAAe,EAAC,WAAW,WAAU,CAAC;AAEvD,QACE,2CAACC;EACC,OAAO,MAAM;EACb,QAAQ,OAAO,MAAM;EACrB,OAAO,MAAM,MAAM;EACnB,WAAW,MAAM;EACjB,yDAC2B,GAAG,MAAM,OAAO,6BAA6B,sDAC7C,GAAG,SAAS,OAAO,oCAAoC;EAElF,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,QAAQ,GAAG;EACrD;EACb,GAAI;GACJ;;AAIN,2BAAe"}
+{"version":3,"file":"AgentDetails.cjs","names":["AgentDetails: FC<AgentDetailsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","agent: ResourceQueryResult<Agent>","useResourceQuery","AgentQueryKeys","groups: ResourceQueryResult<MembershipGroupListResponse>","GroupQueryKeys","roles: ResourceQueryResult<AgentRoleListResponse>","RoleQueryKeys","deletion: ResourceMutationResult<void, string>","useResourceMutation","lifecycle: AccountLifecycleState","useAccountLifecycle","BaseAgentDetails"],"sources":["../../../../../src/components/admin/AgentDetails/AgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  Agent,\n  AgentQueryKeys,\n  AgentRoleListResponse,\n  GroupQueryKeys,\n  MembershipGroupListResponse,\n  RoleQueryKeys,\n  deleteAgent,\n  getAgent,\n  getAgentGroups,\n  getAgentRoles,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseAgentDetails, {BaseAgentDetailsProps} from './BaseAgentDetails';\nimport useAccountLifecycle, {AccountLifecycleState} from '../../../hooks/management/useAccountLifecycle';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type AgentDetailsProps = Omit<\n  BaseAgentDetailsProps,\n  | 'agent'\n  | 'error'\n  | 'groups'\n  | 'isDeleting'\n  | 'isLoading'\n  | 'isRunningLifecycleAction'\n  | 'lifecycleActions'\n  | 'onDelete'\n  | 'onLifecycleAction'\n  | 'roles'\n> & {\n  agentId: string;\n  /**\n   * Whether the agent can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the agent can be suspended, unsuspended and unlocked from this view. Each action runs through its\n   * administration flow and is offered only when the server configures that flow. Reading the configured\n   * flows needs a token that may read the server configuration.\n   * @default false\n   */\n  lifecycleActions?: boolean;\n  /**\n   * Called after the agent has been deleted.\n   */\n  onDeleted?: () => void;\n};\n\n/**\n * Shows an agent with the groups and roles it holds, and optionally lets the signed-in user delete\n * it.\n *\n * @example\n * ```tsx\n * <AgentDetails agentId={agentId} deletable onDeleted={() => navigate('/agents')} />\n * ```\n */\nconst AgentDetails: FC<AgentDetailsProps> = ({\n  agentId,\n  deletable = false,\n  lifecycleActions = false,\n  onDeleted,\n  preferences,\n  ...rest\n}: AgentDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const agent: ResourceQueryResult<Agent> = useResourceQuery(\n    [AgentQueryKeys.AGENT, agentId],\n    (fetcher) => getAgent({...endpoint, agentId, fetcher}),\n    {enabled: Boolean(agentId)},\n  );\n  const groups: ResourceQueryResult<MembershipGroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.MEMBERSHIPS, 'agent', agentId, {limit: 100}],\n    (fetcher) => getAgentGroups({...endpoint, agentId, fetcher, limit: 100}),\n    {enabled: Boolean(agentId)},\n  );\n  const roles: ResourceQueryResult<AgentRoleListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, 'agent', agentId, {limit: 100}],\n    (fetcher) => getAgentRoles({...endpoint, agentId, fetcher, limit: 100}),\n    {enabled: Boolean(agentId)},\n  );\n  const deletion: ResourceMutationResult<void, string> = useResourceMutation(\n    (id: string, fetcher) => deleteAgent({...endpoint, agentId: id, fetcher}),\n    () => [[AgentQueryKeys.AGENTS]],\n    {onSuccess: onDeleted},\n  );\n\n  const lifecycle: AccountLifecycleState = useAccountLifecycle({\n    enabled: lifecycleActions,\n    invalidatedKeys: [[AgentQueryKeys.AGENT, agentId], [AgentQueryKeys.AGENTS]],\n    kind: 'agent',\n    status: agent.data?.status?.value,\n    subject: agentId,\n  });\n\n  return (\n    <BaseAgentDetails\n      agent={agent.data}\n      groups={groups.data?.groups}\n      roles={roles.data?.roles}\n      isLoading={agent.isLoading}\n      error={\n        toManagementErrorMessage(t, agent.error, 'admin.agents.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.agents.details.delete.error') ??\n        toManagementErrorMessage(t, lifecycle.error, 'admin.common.lifecycle.error') ??\n        toManagementErrorMessage(t, lifecycle.loadError, 'admin.common.lifecycle.load_error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(agentId) : undefined}\n      lifecycleActions={lifecycle.actions}\n      isRunningLifecycleAction={lifecycle.isRunning}\n      onLifecycleAction={lifecycleActions ? lifecycle.run : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default AgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAiEA,MAAMA,gBAAuC,EAC3C,SACA,YAAY,OACZ,mBAAmB,OACnB,WACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,sCAAsB,SAAS;CACpE,MAAMC,QAAoCC,iCACxC,CAACC,mCAAe,OAAO,QAAQ,GAC9B,8CAAqB;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,EACtD,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMC,SAA2DF,iCAC/D;EAACG,mCAAe;EAAa;EAAS;EAAS,EAAC,OAAO,KAAI;EAAC,GAC3D,oDAA2B;EAAC,GAAG;EAAU;EAAS;EAAS,OAAO;EAAI,CAAC,EACxE,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMC,QAAoDJ,iCACxD;EAACK,kCAAc;EAAkB;EAAS;EAAS,EAAC,OAAO,KAAI;EAAC,GAC/D,mDAA0B;EAAC,GAAG;EAAU;EAAS;EAAS,OAAO;EAAI,CAAC,EACvE,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMC,WAAiDC,qCACpD,IAAY,iDAAwB;EAAC,GAAG;EAAU,SAAS;EAAI;EAAQ,CAAC,QACnE,CAAC,CAACN,mCAAe,OAAO,CAAC,EAC/B,EAAC,WAAW,WAAU,CACvB;CAED,MAAMO,YAAmCC,oCAAoB;EAC3D,SAAS;EACT,iBAAiB,CAAC,CAACR,mCAAe,OAAO,QAAQ,EAAE,CAACA,mCAAe,OAAO,CAAC;EAC3E,MAAM;EACN,QAAQ,MAAM,MAAM,QAAQ;EAC5B,SAAS;EACV,CAAC;AAEF,QACE,2CAACS;EACC,OAAO,MAAM;EACb,QAAQ,OAAO,MAAM;EACrB,OAAO,MAAM,MAAM;EACnB,WAAW,MAAM;EACjB,yDAC2B,GAAG,MAAM,OAAO,6BAA6B,sDAC7C,GAAG,SAAS,OAAO,oCAAoC,sDACvD,GAAG,UAAU,OAAO,+BAA+B,sDACnD,GAAG,UAAU,WAAW,oCAAoC;EAEvF,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,QAAQ,GAAG;EAClE,kBAAkB,UAAU;EAC5B,0BAA0B,UAAU;EACpC,mBAAmB,mBAAmB,UAAU,MAAM;EACzC;EACb,GAAI;GACJ;;AAIN,2BAAe"}

package/dist/cjs/components/admin/AgentDetails/BaseAgentDetails.cjs

@@ -5,6 +5,7 @@ const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_CopyableText = require('../../primitives/CopyableText/CopyableText.cjs');
 const require_useAdminPartStyles = require('../shared/useAdminPartStyles.cjs');
 const require_AdminSection = require('../shared/AdminSection.cjs');
+const require_AccountLifecycleParts = require('../shared/AccountLifecycleParts.cjs');
 const require_AdminParts = require('../shared/AdminParts.cjs');
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
@@ -14,7 +15,7 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 * Shows an agent's type, owner, client and the groups and roles it holds. Holds no data of its own:
 * pass the agent and handle deletion.
 */
-const BaseAgentDetails = ({ actions, agent, children, className, error = null, groups = [], isDeleting = false, isLoading = false, onDelete, preferences, roles = [] }) => {
+const BaseAgentDetails = ({ actions, agent, children, className, error = null, groups = [], isDeleting = false, isLoading = false, isRunningLifecycleAction = false, lifecycleActions = [], onDelete, onLifecycleAction, preferences, roles = [] }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const styles = require_useAdminPartStyles.default();
 	if (children) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
@@ -25,7 +26,10 @@ const BaseAgentDetails = ({ actions, agent, children, className, error = null, g
 			groups,
 			isDeleting,
 			isLoading,
+			isRunningLifecycleAction,
+			lifecycleActions: onLifecycleAction && agent ? lifecycleActions : [],
 			onDelete: agent && !agent.isReadOnly ? onDelete : void 0,
+			onLifecycleAction: agent ? onLifecycleAction : void 0,
 			roles
 		})
 	});
@@ -67,6 +71,10 @@ const BaseAgentDetails = ({ actions, agent, children, className, error = null, g
 			value: agent.ouHandle ?? agent.ouId
 		}
 	];
+	if (agent.status) details.push({
+		label: t("admin.common.columns.status"),
+		value: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AccountLifecycleParts.AccessStatusBadge, { status: agent.status.value })
+	});
 	if (agent.clientId) details.push({
 		label: t("admin.agents.list.columns.client_id"),
 		value: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_CopyableText.default, { value: agent.clientId })
@@ -77,12 +85,22 @@ const BaseAgentDetails = ({ actions, agent, children, className, error = null, g
 		title: agent.name,
 		description: agent.description,
 		preferences,
-		actions: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [actions, onDelete && !agent.isReadOnly && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ConfirmButton, {
-			confirmText: t("admin.agents.details.delete.confirm", { name: agent.name }),
-			isLoading: isDeleting,
-			onConfirm: onDelete,
-			children: t("admin.agents.details.delete.action")
-		})] }),
+		actions: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+			actions,
+			onLifecycleAction && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AccountLifecycleParts.AccountLifecycleButtons, {
+				actions: lifecycleActions,
+				collectsOperatorNote: true,
+				isRunning: isRunningLifecycleAction,
+				name: agent.name,
+				onAction: onLifecycleAction
+			}),
+			onDelete && !agent.isReadOnly && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ConfirmButton, {
+				confirmText: t("admin.agents.details.delete.confirm", { name: agent.name }),
+				isLoading: isDeleting,
+				onConfirm: onDelete,
+				children: t("admin.agents.details.delete.action")
+			})
+		] }),
 		children: [
 			error && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Alert.default, {
 				variant: "error",

package/dist/cjs/components/admin/AgentDetails/BaseAgentDetails.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"BaseAgentDetails.cjs","names":["BaseAgentDetails: FC<BaseAgentDetailsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","AdminSection","Spinner","Alert","details: {label: string; value: ReactNode}[]","CopyableText","ConfirmButton","Panel","DetailList","ChipList"],"sources":["../../../../../src/components/admin/AgentDetails/BaseAgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Agent, MembershipGroup, Preferences} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport CopyableText from '../../primitives/CopyableText/CopyableText';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport {ChipList, ConfirmButton, DetailList, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * What {@link BaseAgentDetails} hands its `children` render function, so the agent can be shown with any UI.\n */\nexport interface BaseAgentDetailsRenderProps {\n  agent?: Agent;\n  error: string | null;\n  groups: MembershipGroup[];\n  isDeleting: boolean;\n  isLoading: boolean;\n  /**\n   * Deletes the agent. Undefined when deletion is not allowed, including for read-only agents.\n   */\n  onDelete?: () => void;\n  roles: string[];\n}\n\nexport interface BaseAgentDetailsProps {\n  /**\n   * Controls rendered next to the agent's name.\n   */\n  actions?: ReactNode;\n  agent?: Agent;\n  /**\n   * Renders custom UI in place of the default view. Receives the agent, its groups and roles, the\n   * loading and error state, and the delete handler.\n   */\n  children?: (props: BaseAgentDetailsRenderProps) => ReactNode;\n  className?: string;\n  error?: string | null;\n  /**\n   * The groups the agent belongs to.\n   */\n  groups?: MembershipGroup[];\n  isDeleting?: boolean;\n  isLoading?: boolean;\n  /**\n   * Deletes the agent. The delete action is hidden when omitted.\n   */\n  onDelete?: () => void;\n  preferences?: Preferences;\n  /**\n   * The names of the roles the agent holds, directly or through its groups.\n   */\n  roles?: string[];\n}\n\n/**\n * Shows an agent's type, owner, client and the groups and roles it holds. Holds no data of its own:\n * pass the agent and handle deletion.\n */\nconst BaseAgentDetails: FC<BaseAgentDetailsProps> = ({\n  actions,\n  agent,\n  children,\n  className,\n  error = null,\n  groups = [],\n  isDeleting = false,\n  isLoading = false,\n  onDelete,\n  preferences,\n  roles = [],\n}: BaseAgentDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          agent,\n          error,\n          groups,\n          isDeleting,\n          isLoading,\n          onDelete: agent && !agent.isReadOnly ? onDelete : undefined,\n          roles,\n        })}\n      </div>\n    );\n  }\n\n  if (isLoading && !agent) {\n    return (\n      <AdminSection block=\"agent-details\" className={className} preferences={preferences}>\n        <span className={styles['muted']} role=\"status\">\n          <Spinner size=\"small\" /> {t('admin.common.loading')}\n        </span>\n      </AdminSection>\n    );\n  }\n\n  if (!agent) {\n    return (\n      <AdminSection block=\"agent-details\" className={className} preferences={preferences}>\n        <Alert variant=\"error\" role=\"alert\">\n          {error ?? t('admin.common.errors.not_found')}\n        </Alert>\n      </AdminSection>\n    );\n  }\n\n  const details: {label: string; value: ReactNode}[] = [\n    {label: t('admin.agents.details.type'), value: agent.type},\n    {label: t('admin.agents.details.owner'), value: agent.owner ?? t('admin.agents.details.no_owner')},\n    {label: t('admin.common.columns.organization_unit'), value: agent.ouHandle ?? agent.ouId},\n  ];\n\n  if (agent.clientId) {\n    details.push({label: t('admin.agents.list.columns.client_id'), value: <CopyableText value={agent.clientId} />});\n  }\n\n  return (\n    <AdminSection\n      block=\"agent-details\"\n      className={className}\n      title={agent.name}\n      description={agent.description}\n      preferences={preferences}\n      actions={\n        <>\n          {actions}\n          {onDelete && !agent.isReadOnly && (\n            <ConfirmButton\n              confirmText={t('admin.agents.details.delete.confirm', {name: agent.name})}\n              isLoading={isDeleting}\n              onConfirm={onDelete}\n            >\n              {t('admin.agents.details.delete.action')}\n            </ConfirmButton>\n          )}\n        </>\n      }\n    >\n      {error && (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      )}\n      <Panel title={t('admin.agents.details.overview')}>\n        <DetailList items={details} />\n      </Panel>\n      <Panel title={t('admin.agents.details.groups')}>\n        <ChipList\n          label={t('admin.agents.details.groups')}\n          emptyText={t('admin.agents.details.no_groups')}\n          items={groups.map((group: MembershipGroup) => ({id: group.id, label: group.name}))}\n        />\n      </Panel>\n      <Panel title={t('admin.agents.details.roles')}>\n        <ChipList\n          label={t('admin.agents.details.roles')}\n          emptyText={t('admin.agents.details.no_roles')}\n          items={roles.map((role: string) => ({id: role, label: role}))}\n        />\n      </Panel>\n    </AdminSection>\n  );\n};\n\nexport default BaseAgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;AA+DA,MAAMA,oBAA+C,EACnD,SACA,OACA,UACA,WACA,QAAQ,MACR,SAAS,EAAE,EACX,aAAa,OACb,YAAY,OACZ,UACA,aACA,QAAQ,EAAE,OAC+B;CACzC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,oCAAoB;AAE3D,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA;GACA;GACA;GACA;GACA,UAAU,SAAS,CAAC,MAAM,aAAa,WAAW;GAClD;GACD,CAAC;GACE;AAIV,KAAI,aAAa,CAAC,MAChB,QACE,2CAACC;EAAa,OAAM;EAA2B;EAAwB;YACrE,4CAAC;GAAK,WAAW,OAAO;GAAU,MAAK;;IACrC,2CAACC,2BAAQ,MAAK,UAAU;;IAAE,EAAE,uBAAuB;;IAC9C;GACM;AAInB,KAAI,CAAC,MACH,QACE,2CAACD;EAAa,OAAM;EAA2B;EAAwB;YACrE,2CAACE;GAAM,SAAQ;GAAQ,MAAK;aACzB,SAAS,EAAE,gCAAgC;IACtC;GACK;CAInB,MAAMC,UAA+C;EACnD;GAAC,OAAO,EAAE,4BAA4B;GAAE,OAAO,MAAM;GAAK;EAC1D;GAAC,OAAO,EAAE,6BAA6B;GAAE,OAAO,MAAM,SAAS,EAAE,gCAAgC;GAAC;EAClG;GAAC,OAAO,EAAE,yCAAyC;GAAE,OAAO,MAAM,YAAY,MAAM;GAAK;EAC1F;AAED,KAAI,MAAM,SACR,SAAQ,KAAK;EAAC,OAAO,EAAE,sCAAsC;EAAE,OAAO,2CAACC,gCAAa,OAAO,MAAM,WAAY;EAAC,CAAC;AAGjH,QACE,4CAACJ;EACC,OAAM;EACK;EACX,OAAO,MAAM;EACb,aAAa,MAAM;EACN;EACb,SACE,qFACG,SACA,YAAY,CAAC,MAAM,cAClB,2CAACK;GACC,aAAa,EAAE,uCAAuC,EAAC,MAAM,MAAM,MAAK,CAAC;GACzE,WAAW;GACX,WAAW;aAEV,EAAE,qCAAqC;IAC1B,IAEjB;;GAGJ,SACC,2CAACH;IAAM,SAAQ;IAAQ,MAAK;cACzB;KACK;GAEV,2CAACI;IAAM,OAAO,EAAE,gCAAgC;cAC9C,2CAACC,iCAAW,OAAO,UAAW;KACxB;GACR,2CAACD;IAAM,OAAO,EAAE,8BAA8B;cAC5C,2CAACE;KACC,OAAO,EAAE,8BAA8B;KACvC,WAAW,EAAE,iCAAiC;KAC9C,OAAO,OAAO,KAAK,WAA4B;MAAC,IAAI,MAAM;MAAI,OAAO,MAAM;MAAK,EAAE;MAClF;KACI;GACR,2CAACF;IAAM,OAAO,EAAE,6BAA6B;cAC3C,2CAACE;KACC,OAAO,EAAE,6BAA6B;KACtC,WAAW,EAAE,gCAAgC;KAC7C,OAAO,MAAM,KAAK,UAAkB;MAAC,IAAI;MAAM,OAAO;MAAK,EAAE;MAC7D;KACI;;GACK;;AAInB,+BAAe"}
+{"version":3,"file":"BaseAgentDetails.cjs","names":["BaseAgentDetails: FC<BaseAgentDetailsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","AdminSection","Spinner","Alert","details: {label: string; value: ReactNode}[]","AccessStatusBadge","CopyableText","AccountLifecycleButtons","ConfirmButton","Panel","DetailList","ChipList"],"sources":["../../../../../src/components/admin/AgentDetails/BaseAgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {AccountLifecycleAction, Agent, MembershipGroup, Preferences} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport CopyableText from '../../primitives/CopyableText/CopyableText';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport {AccessStatusBadge, AccountLifecycleButtons} from '../shared/AccountLifecycleParts';\nimport {ChipList, ConfirmButton, DetailList, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * What {@link BaseAgentDetails} hands its `children` render function, so the agent can be shown with any UI.\n */\nexport interface BaseAgentDetailsRenderProps {\n  agent?: Agent;\n  error: string | null;\n  groups: MembershipGroup[];\n  isDeleting: boolean;\n  isLoading: boolean;\n  isRunningLifecycleAction: boolean;\n  /**\n   * The account lifecycle actions offered for the agent. Empty when none is allowed.\n   */\n  lifecycleActions: AccountLifecycleAction[];\n  /**\n   * Deletes the agent. Undefined when deletion is not allowed, including for read-only agents.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action, with the operator's note on a suspension. Undefined when none is allowed.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  roles: string[];\n}\n\nexport interface BaseAgentDetailsProps {\n  /**\n   * Controls rendered next to the agent's name.\n   */\n  actions?: ReactNode;\n  agent?: Agent;\n  /**\n   * Renders custom UI in place of the default view. Receives the agent, its groups and roles, the\n   * loading and error state, and the delete handler.\n   */\n  children?: (props: BaseAgentDetailsRenderProps) => ReactNode;\n  className?: string;\n  error?: string | null;\n  /**\n   * The groups the agent belongs to.\n   */\n  groups?: MembershipGroup[];\n  isDeleting?: boolean;\n  isLoading?: boolean;\n  isRunningLifecycleAction?: boolean;\n  /**\n   * The account lifecycle actions to offer (suspend, unsuspend, unlock), shown only with `onLifecycleAction`. They change\n   * only runtime state, so they apply to read-only agents too.\n   */\n  lifecycleActions?: AccountLifecycleAction[];\n  /**\n   * Deletes the agent. The delete action is hidden when omitted.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action. Suspending and unsuspending ask for confirmation first, and a\n   * suspension takes an optional operator note.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  preferences?: Preferences;\n  /**\n   * The names of the roles the agent holds, directly or through its groups.\n   */\n  roles?: string[];\n}\n\n/**\n * Shows an agent's type, owner, client and the groups and roles it holds. Holds no data of its own:\n * pass the agent and handle deletion.\n */\nconst BaseAgentDetails: FC<BaseAgentDetailsProps> = ({\n  actions,\n  agent,\n  children,\n  className,\n  error = null,\n  groups = [],\n  isDeleting = false,\n  isLoading = false,\n  isRunningLifecycleAction = false,\n  lifecycleActions = [],\n  onDelete,\n  onLifecycleAction,\n  preferences,\n  roles = [],\n}: BaseAgentDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          agent,\n          error,\n          groups,\n          isDeleting,\n          isLoading,\n          isRunningLifecycleAction,\n          lifecycleActions: onLifecycleAction && agent ? lifecycleActions : [],\n          onDelete: agent && !agent.isReadOnly ? onDelete : undefined,\n          onLifecycleAction: agent ? onLifecycleAction : undefined,\n          roles,\n        })}\n      </div>\n    );\n  }\n\n  if (isLoading && !agent) {\n    return (\n      <AdminSection block=\"agent-details\" className={className} preferences={preferences}>\n        <span className={styles['muted']} role=\"status\">\n          <Spinner size=\"small\" /> {t('admin.common.loading')}\n        </span>\n      </AdminSection>\n    );\n  }\n\n  if (!agent) {\n    return (\n      <AdminSection block=\"agent-details\" className={className} preferences={preferences}>\n        <Alert variant=\"error\" role=\"alert\">\n          {error ?? t('admin.common.errors.not_found')}\n        </Alert>\n      </AdminSection>\n    );\n  }\n\n  const details: {label: string; value: ReactNode}[] = [\n    {label: t('admin.agents.details.type'), value: agent.type},\n    {label: t('admin.agents.details.owner'), value: agent.owner ?? t('admin.agents.details.no_owner')},\n    {label: t('admin.common.columns.organization_unit'), value: agent.ouHandle ?? agent.ouId},\n  ];\n\n  if (agent.status) {\n    details.push({label: t('admin.common.columns.status'), value: <AccessStatusBadge status={agent.status.value} />});\n  }\n\n  if (agent.clientId) {\n    details.push({label: t('admin.agents.list.columns.client_id'), value: <CopyableText value={agent.clientId} />});\n  }\n\n  return (\n    <AdminSection\n      block=\"agent-details\"\n      className={className}\n      title={agent.name}\n      description={agent.description}\n      preferences={preferences}\n      actions={\n        <>\n          {actions}\n          {onLifecycleAction && (\n            <AccountLifecycleButtons\n              actions={lifecycleActions}\n              collectsOperatorNote\n              isRunning={isRunningLifecycleAction}\n              name={agent.name}\n              onAction={onLifecycleAction}\n            />\n          )}\n          {onDelete && !agent.isReadOnly && (\n            <ConfirmButton\n              confirmText={t('admin.agents.details.delete.confirm', {name: agent.name})}\n              isLoading={isDeleting}\n              onConfirm={onDelete}\n            >\n              {t('admin.agents.details.delete.action')}\n            </ConfirmButton>\n          )}\n        </>\n      }\n    >\n      {error && (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      )}\n      <Panel title={t('admin.agents.details.overview')}>\n        <DetailList items={details} />\n      </Panel>\n      <Panel title={t('admin.agents.details.groups')}>\n        <ChipList\n          label={t('admin.agents.details.groups')}\n          emptyText={t('admin.agents.details.no_groups')}\n          items={groups.map((group: MembershipGroup) => ({id: group.id, label: group.name}))}\n        />\n      </Panel>\n      <Panel title={t('admin.agents.details.roles')}>\n        <ChipList\n          label={t('admin.agents.details.roles')}\n          emptyText={t('admin.agents.details.no_roles')}\n          items={roles.map((role: string) => ({id: role, label: role}))}\n        />\n      </Panel>\n    </AdminSection>\n  );\n};\n\nexport default BaseAgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;AAoFA,MAAMA,oBAA+C,EACnD,SACA,OACA,UACA,WACA,QAAQ,MACR,SAAS,EAAE,EACX,aAAa,OACb,YAAY,OACZ,2BAA2B,OAC3B,mBAAmB,EAAE,EACrB,UACA,mBACA,aACA,QAAQ,EAAE,OAC+B;CACzC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,oCAAoB;AAE3D,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA;GACA;GACA;GACA;GACA;GACA,kBAAkB,qBAAqB,QAAQ,mBAAmB,EAAE;GACpE,UAAU,SAAS,CAAC,MAAM,aAAa,WAAW;GAClD,mBAAmB,QAAQ,oBAAoB;GAC/C;GACD,CAAC;GACE;AAIV,KAAI,aAAa,CAAC,MAChB,QACE,2CAACC;EAAa,OAAM;EAA2B;EAAwB;YACrE,4CAAC;GAAK,WAAW,OAAO;GAAU,MAAK;;IACrC,2CAACC,2BAAQ,MAAK,UAAU;;IAAE,EAAE,uBAAuB;;IAC9C;GACM;AAInB,KAAI,CAAC,MACH,QACE,2CAACD;EAAa,OAAM;EAA2B;EAAwB;YACrE,2CAACE;GAAM,SAAQ;GAAQ,MAAK;aACzB,SAAS,EAAE,gCAAgC;IACtC;GACK;CAInB,MAAMC,UAA+C;EACnD;GAAC,OAAO,EAAE,4BAA4B;GAAE,OAAO,MAAM;GAAK;EAC1D;GAAC,OAAO,EAAE,6BAA6B;GAAE,OAAO,MAAM,SAAS,EAAE,gCAAgC;GAAC;EAClG;GAAC,OAAO,EAAE,yCAAyC;GAAE,OAAO,MAAM,YAAY,MAAM;GAAK;EAC1F;AAED,KAAI,MAAM,OACR,SAAQ,KAAK;EAAC,OAAO,EAAE,8BAA8B;EAAE,OAAO,2CAACC,mDAAkB,QAAQ,MAAM,OAAO,QAAS;EAAC,CAAC;AAGnH,KAAI,MAAM,SACR,SAAQ,KAAK;EAAC,OAAO,EAAE,sCAAsC;EAAE,OAAO,2CAACC,gCAAa,OAAO,MAAM,WAAY;EAAC,CAAC;AAGjH,QACE,4CAACL;EACC,OAAM;EACK;EACX,OAAO,MAAM;EACb,aAAa,MAAM;EACN;EACb,SACE;GACG;GACA,qBACC,2CAACM;IACC,SAAS;IACT;IACA,WAAW;IACX,MAAM,MAAM;IACZ,UAAU;KACV;GAEH,YAAY,CAAC,MAAM,cAClB,2CAACC;IACC,aAAa,EAAE,uCAAuC,EAAC,MAAM,MAAM,MAAK,CAAC;IACzE,WAAW;IACX,WAAW;cAEV,EAAE,qCAAqC;KAC1B;MAEjB;;GAGJ,SACC,2CAACL;IAAM,SAAQ;IAAQ,MAAK;cACzB;KACK;GAEV,2CAACM;IAAM,OAAO,EAAE,gCAAgC;cAC9C,2CAACC,iCAAW,OAAO,UAAW;KACxB;GACR,2CAACD;IAAM,OAAO,EAAE,8BAA8B;cAC5C,2CAACE;KACC,OAAO,EAAE,8BAA8B;KACvC,WAAW,EAAE,iCAAiC;KAC9C,OAAO,OAAO,KAAK,WAA4B;MAAC,IAAI,MAAM;MAAI,OAAO,MAAM;MAAK,EAAE;MAClF;KACI;GACR,2CAACF;IAAM,OAAO,EAAE,6BAA6B;cAC3C,2CAACE;KACC,OAAO,EAAE,6BAA6B;KACtC,WAAW,EAAE,gCAAgC;KAC7C,OAAO,MAAM,KAAK,UAAkB;MAAC,IAAI;MAAM,OAAO;MAAK,EAAE;MAC7D;KACI;;GACK;;AAInB,+BAAe"}

package/dist/cjs/components/admin/AgentList/AgentList.cjs

@@ -1,6 +1,7 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useGetAgents = require('../../../hooks/management/agents/useGetAgents.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
 const require_BaseAgentList = require('./BaseAgentList.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -26,11 +27,19 @@ const AgentList = ({ limit = 20, preferences, searchable = true, searchAttribute
 		label: t("admin.agents.list.search.name"),
 		value: "name"
 	}];
-	const { data, error, isLoading } = require_useGetAgents.default({
-		filter: search ? (0, __thunderid_browser.toEqualityFilter)(search.attribute, search.value) : void 0,
+	const endpoint = require_useManagementEndpoint.default("agents");
+	const filter = search ? (0, __thunderid_browser.toEqualityFilter)(search.attribute, search.value) : void 0;
+	const { data, error, isLoading } = require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENTS, {
+		filter,
 		limit,
 		offset
-	});
+	}], (fetcher) => (0, __thunderid_browser.getAgents)({
+		...endpoint,
+		fetcher,
+		filter,
+		limit,
+		offset
+	}));
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseAgentList.default, {
 		agents: data?.agents ?? [],
 		totalResults: data?.totalResults,

package/dist/cjs/components/admin/AgentList/AgentList.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"AgentList.cjs","names":["AgentList: FC<AgentListProps>","useTranslation","attributes: SelectOption[]","useGetAgents","BaseAgentList"],"sources":["../../../../../src/components/admin/AgentList/AgentList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toEqualityFilter, toManagementErrorMessage, SelectOption} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseAgentList, {BaseAgentListProps} from './BaseAgentList';\nimport {AdminSearchValue} from '../shared/AdminSearch';\nimport useGetAgents from '../../../hooks/management/agents/useGetAgents';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type AgentListProps = Omit<\n  BaseAgentListProps,\n  'agents' | 'error' | 'isLoading' | 'offset' | 'onPageChange' | 'onSearch' | 'search' | 'totalResults'\n> & {\n  /**\n   * Whether to show the search form. Agents are searched by a custom attribute, by default `name`, and\n   * the server matches the whole value.\n   * @default true\n   */\n  searchable?: boolean;\n};\n\n/**\n * Lists the agents the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <AgentList onSelect={(agent) => setSelectedAgentId(agent.id)} />\n * ```\n */\nconst AgentList: FC<AgentListProps> = ({\n  limit = 20,\n  preferences,\n  searchable = true,\n  searchAttributes,\n  ...rest\n}: AgentListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const [search, setSearch] = useState<AdminSearchValue | null>(null);\n  const attributes: SelectOption[] = searchAttributes ?? [{label: t('admin.agents.list.search.name'), value: 'name'}];\n  const {data, error, isLoading} = useGetAgents({\n    filter: search ? toEqualityFilter(search.attribute, search.value) : undefined,\n    limit,\n    offset,\n  });\n\n  return (\n    <BaseAgentList\n      agents={data?.agents ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.agents.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      search={search}\n      searchAttributes={attributes}\n      onSearch={\n        searchable\n          ? (next: AdminSearchValue | null): void => {\n              setSearch(next);\n              setOffset(0);\n            }\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default AgentList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA8BA,MAAMA,aAAiC,EACrC,QAAQ,IACR,aACA,aAAa,MACb,iBACA,GAAG,WAC+B;CAClC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAM,CAAC,QAAQ,iCAA+C,KAAK;CACnE,MAAMC,aAA6B,oBAAoB,CAAC;EAAC,OAAO,EAAE,gCAAgC;EAAE,OAAO;EAAO,CAAC;CACnH,MAAM,EAAC,MAAM,OAAO,cAAaC,6BAAa;EAC5C,QAAQ,mDAA0B,OAAO,WAAW,OAAO,MAAM,GAAG;EACpE;EACA;EACD,CAAC;AAEF,QACE,2CAACC;EACC,QAAQ,MAAM,UAAU,EAAE;EAC1B,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,0BAA0B;EAC7D;EACC;EACR,cAAc;EACN;EACR,kBAAkB;EAClB,UACE,cACK,SAAwC;AACvC,aAAU,KAAK;AACf,aAAU,EAAE;MAEd;EAEO;EACb,GAAI;GACJ;;AAIN,wBAAe"}
+{"version":3,"file":"AgentList.cjs","names":["AgentList: FC<AgentListProps>","useTranslation","attributes: SelectOption[]","endpoint: ManagementEndpoint","useManagementEndpoint","filter: string | undefined","useResourceQuery","AgentQueryKeys","BaseAgentList"],"sources":["../../../../../src/components/admin/AgentList/AgentList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AgentListResponse,\n  AgentQueryKeys,\n  SelectOption,\n  getAgents,\n  toEqualityFilter,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseAgentList, {BaseAgentListProps} from './BaseAgentList';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {AdminSearchValue} from '../shared/AdminSearch';\n\nexport type AgentListProps = Omit<\n  BaseAgentListProps,\n  'agents' | 'error' | 'isLoading' | 'offset' | 'onPageChange' | 'onSearch' | 'search' | 'totalResults'\n> & {\n  /**\n   * Whether to show the search form. Agents are searched by a custom attribute, by default `name`, and\n   * the server matches the whole value.\n   * @default true\n   */\n  searchable?: boolean;\n};\n\n/**\n * Lists the agents the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <AgentList onSelect={(agent) => setSelectedAgentId(agent.id)} />\n * ```\n */\nconst AgentList: FC<AgentListProps> = ({\n  limit = 20,\n  preferences,\n  searchable = true,\n  searchAttributes,\n  ...rest\n}: AgentListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const [search, setSearch] = useState<AdminSearchValue | null>(null);\n  const attributes: SelectOption[] = searchAttributes ?? [{label: t('admin.agents.list.search.name'), value: 'name'}];\n  const endpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const filter: string | undefined = search ? toEqualityFilter(search.attribute, search.value) : undefined;\n  const {data, error, isLoading}: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {filter, limit, offset}],\n    (fetcher) => getAgents({...endpoint, fetcher, filter, limit, offset}),\n  );\n\n  return (\n    <BaseAgentList\n      agents={data?.agents ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.agents.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      search={search}\n      searchAttributes={attributes}\n      onSearch={\n        searchable\n          ? (next: AdminSearchValue | null): void => {\n              setSearch(next);\n              setOffset(0);\n            }\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default AgentList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAsCA,MAAMA,aAAiC,EACrC,QAAQ,IACR,aACA,aAAa,MACb,iBACA,GAAG,WAC+B;CAClC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAM,CAAC,QAAQ,iCAA+C,KAAK;CACnE,MAAMC,aAA6B,oBAAoB,CAAC;EAAC,OAAO,EAAE,gCAAgC;EAAE,OAAO;EAAO,CAAC;CACnH,MAAMC,WAA+BC,sCAAsB,SAAS;CACpE,MAAMC,SAA6B,mDAA0B,OAAO,WAAW,OAAO,MAAM,GAAG;CAC/F,MAAM,EAAC,MAAM,OAAO,cAAqDC,iCACvE,CAACC,mCAAe,QAAQ;EAAC;EAAQ;EAAO;EAAO,CAAC,GAC/C,+CAAsB;EAAC,GAAG;EAAU;EAAS;EAAQ;EAAO;EAAO,CAAC,CACtE;AAED,QACE,2CAACC;EACC,QAAQ,MAAM,UAAU,EAAE;EAC1B,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,0BAA0B;EAC7D;EACC;EACR,cAAc;EACN;EACR,kBAAkB;EAClB,UACE,cACK,SAAwC;AACvC,aAAU,KAAK;AACf,aAAU,EAAE;MAEd;EAEO;EACb,GAAI;GACJ;;AAIN,wBAAe"}

package/dist/cjs/components/admin/ApplicationCreate/ApplicationCreate.cjs

@@ -0,0 +1,70 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
+const require_useDefaultOuId = require('../shared/useDefaultOuId.cjs');
+const require_BaseApplicationCreate = require('./BaseApplicationCreate.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/ApplicationCreate/ApplicationCreate.tsx
+/**
+* Creates an application with an OAuth client through the management API, and shows its client
+* secret once when the server returns one.
+*
+* The server guards applications with the root `system` permission, for reading and for changes alike;
+* it defines no application-specific permission. Gate the view and its actions on it with
+* `useGrantedPermissions().can('system')`.
+*
+* @example
+* ```tsx
+* <ApplicationCreate onCreated={(application) => navigate(`/applications/${application.id}`)} />
+* ```
+*/
+const ApplicationCreate = ({ onCreated, ouId, preferences,...rest }) => {
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const resolvedOuId = require_useDefaultOuId.default(ouId);
+	const endpoint = require_useManagementEndpoint.default("applications");
+	const [created, setCreated] = (0, react.useState)(null);
+	const [formKey, setFormKey] = (0, react.useState)(0);
+	const { error, isLoading, mutate } = require_useResourceMutation.default((payload, fetcher) => (0, __thunderid_browser.createApplication)({
+		...endpoint,
+		fetcher,
+		payload
+	}), () => [[__thunderid_browser.ApplicationQueryKeys.APPLICATIONS]], { onSuccess: (application) => {
+		const secret = (0, __thunderid_browser.getApplicationClientSecret)(application);
+		if (secret) setCreated({
+			application,
+			secret
+		});
+		else onCreated?.(application);
+	} });
+	const handleSubmit = (submission) => {
+		if (resolvedOuId) mutate((0, __thunderid_browser.toCreateApplicationRequest)(submission, resolvedOuId));
+	};
+	const handleSecretDismiss = () => {
+		if (created) {
+			setCreated(null);
+			setFormKey((key) => key + 1);
+			onCreated?.(created.application);
+		}
+	};
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseApplicationCreate.default, {
+		onSubmit: handleSubmit,
+		isSubmitting: isLoading,
+		clientSecret: created?.secret ?? null,
+		onSecretDismiss: handleSecretDismiss,
+		error: resolvedOuId ? (0, __thunderid_browser.toManagementErrorMessage)(t, error, "admin.applications.create.error") : t("admin.common.errors.no_ou"),
+		preferences,
+		...rest
+	}, formKey);
+};
+var ApplicationCreate_default = ApplicationCreate;
+
+//#endregion
+exports.default = ApplicationCreate_default;
+//# sourceMappingURL=ApplicationCreate.cjs.map

package/dist/cjs/components/admin/ApplicationCreate/ApplicationCreate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApplicationCreate.cjs","names":["ApplicationCreate: FC<ApplicationCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceMutation","ApplicationQueryKeys","secret: string | undefined","BaseApplicationCreate"],"sources":["../../../../../src/components/admin/ApplicationCreate/ApplicationCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  Application,\n  ApplicationQueryKeys,\n  createApplication,\n  CreateApplicationRequest,\n  getApplicationClientSecret,\n  toCreateApplicationRequest,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseApplicationCreate, {ApplicationCreateSubmission, BaseApplicationCreateProps} from './BaseApplicationCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type ApplicationCreateProps = Omit<\n  BaseApplicationCreateProps,\n  'clientSecret' | 'error' | 'isSubmitting' | 'onSecretDismiss' | 'onSubmit'\n> & {\n  /**\n   * Called with the created application. When the server returned a client secret, it is called once\n   * the user has copied the secret, since the secret cannot be read again.\n   */\n  onCreated?: (application: Application) => void;\n  /**\n   * Organization unit the application is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates an application with an OAuth client through the management API, and shows its client\n * secret once when the server returns one.\n *\n * The server guards applications with the root `system` permission, for reading and for changes alike;\n * it defines no application-specific permission. Gate the view and its actions on it with\n * `useGrantedPermissions().can('system')`.\n *\n * @example\n * ```tsx\n * <ApplicationCreate onCreated={(application) => navigate(`/applications/${application.id}`)} />\n * ```\n */\nconst ApplicationCreate: FC<ApplicationCreateProps> = ({\n  onCreated,\n  ouId,\n  preferences,\n  ...rest\n}: ApplicationCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('applications');\n  const [created, setCreated] = useState<{application: Application; secret: string} | null>(null);\n  const [formKey, setFormKey] = useState<number>(0);\n  const {error, isLoading, mutate}: ResourceMutationResult<Application, CreateApplicationRequest> = useResourceMutation(\n    (payload: CreateApplicationRequest, fetcher) => createApplication({...endpoint, fetcher, payload}),\n    () => [[ApplicationQueryKeys.APPLICATIONS]],\n    {\n      onSuccess: (application: Application): void => {\n        const secret: string | undefined = getApplicationClientSecret(application);\n\n        if (secret) {\n          setCreated({application, secret});\n        } else {\n          onCreated?.(application);\n        }\n      },\n    },\n  );\n\n  const handleSubmit = (submission: ApplicationCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate(toCreateApplicationRequest(submission, resolvedOuId));\n    }\n  };\n\n  const handleSecretDismiss = (): void => {\n    if (created) {\n      setCreated(null);\n      setFormKey((key: number) => key + 1);\n      onCreated?.(created.application);\n    }\n  };\n\n  return (\n    <BaseApplicationCreate\n      key={formKey}\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      clientSecret={created?.secret ?? null}\n      onSecretDismiss={handleSecretDismiss}\n      error={\n        resolvedOuId\n          ? toManagementErrorMessage(t, error, 'admin.applications.create.error')\n          : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default ApplicationCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA+CA,MAAMA,qBAAiD,EACrD,WACA,MACA,YACA,GAAG,WACuC;CAC1C,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAMC,WAA+BC,sCAAsB,eAAe;CAC1E,MAAM,CAAC,SAAS,kCAA0E,KAAK;CAC/F,MAAM,CAAC,SAAS,kCAA+B,EAAE;CACjD,MAAM,EAAC,OAAO,WAAW,WAAyEC,qCAC/F,SAAmC,uDAA8B;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,QAC5F,CAAC,CAACC,yCAAqB,aAAa,CAAC,EAC3C,EACE,YAAY,gBAAmC;EAC7C,MAAMC,6DAAwD,YAAY;AAE1E,MAAI,OACF,YAAW;GAAC;GAAa;GAAO,CAAC;MAEjC,aAAY,YAAY;IAG7B,CACF;CAED,MAAM,gBAAgB,eAAkD;AACtE,MAAI,aACF,CAAK,2DAAkC,YAAY,aAAa,CAAC;;CAIrE,MAAM,4BAAkC;AACtC,MAAI,SAAS;AACX,cAAW,KAAK;AAChB,eAAY,QAAgB,MAAM,EAAE;AACpC,eAAY,QAAQ,YAAY;;;AAIpC,QACE,2CAACC;EAEC,UAAU;EACV,cAAc;EACd,cAAc,SAAS,UAAU;EACjC,iBAAiB;EACjB,OACE,iEAC6B,GAAG,OAAO,kCAAkC,GACrE,EAAE,4BAA4B;EAEvB;EACb,GAAI;IAXC,QAYL;;AAIN,gCAAe"}

package/dist/cjs/components/admin/ApplicationCreate/BaseApplicationCreate.cjs

@@ -0,0 +1,135 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTheme = require('../../../contexts/Theme/useTheme.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_Button = require('../../primitives/Button/Button.cjs');
+const require_Alert = require('../../primitives/Alert/Alert.cjs');
+const require_AdminSection_styles = require('../shared/AdminSection.styles.cjs');
+const require_AdminSection = require('../shared/AdminSection.cjs');
+const require_ApplicationFormFields = require('../shared/ApplicationFormFields.cjs');
+const require_ClientSecretNotice = require('../shared/ClientSecretNotice.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/ApplicationCreate/BaseApplicationCreate.tsx
+/**
+* A form that collects a new application's name, description, links and OAuth basics: redirect URIs,
+* grant types and whether the client is public. Holds no data of its own: handle the submission, and
+* pass back the client secret the server returned to show it once.
+*/
+const BaseApplicationCreate = ({ children, className, clientSecret = null, description, error = null, isSubmitting = false, onCancel, onSecretDismiss, onSubmit, preferences, title }) => {
+	const { theme, colorScheme } = require_useTheme.default();
+	const styles = require_AdminSection_styles.default(theme, colorScheme);
+	const { t } = require_useTranslation.default(preferences?.i18n);
+	const [values, setValues] = (0, react.useState)({
+		description: "",
+		grantTypes: [...__thunderid_browser.DEFAULT_APPLICATION_GRANT_TYPES],
+		logoUrl: "",
+		name: "",
+		publicClient: false,
+		redirectUris: "",
+		url: ""
+	});
+	const submission = {
+		description: values.description.trim() || void 0,
+		grantTypes: values.grantTypes,
+		logoUrl: values.logoUrl.trim() || void 0,
+		name: values.name.trim(),
+		publicClient: values.publicClient,
+		redirectUris: (0, __thunderid_browser.parseRedirectUris)(values.redirectUris),
+		url: values.url.trim() || void 0
+	};
+	const isValid = (0, __thunderid_browser.isApplicationSubmissionValid)(submission);
+	const setInput = (field, value) => setValues((previous) => ({
+		...previous,
+		[field]: value
+	}));
+	const setGrantTypes = (grantTypes) => setValues((previous) => ({
+		...previous,
+		grantTypes
+	}));
+	const setPublicClient = (publicClient) => setValues((previous) => ({
+		...previous,
+		publicClient
+	}));
+	const submit = () => {
+		if (isValid && !isSubmitting) onSubmit(submission);
+	};
+	const handleSubmit = (event) => {
+		event.preventDefault();
+		submit();
+	};
+	if (children) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+		className,
+		children: children({
+			clientSecret,
+			error,
+			grantTypeOptions: __thunderid_browser.APPLICATION_GRANT_TYPES.map((grantType) => ({
+				label: t(`admin.applications.grant_types.${grantType}`),
+				value: grantType
+			})),
+			handleGrantTypesChange: setGrantTypes,
+			handleInputChange: setInput,
+			handlePublicClientChange: setPublicClient,
+			handleSubmit: submit,
+			isSubmitting,
+			isValid,
+			onCancel,
+			onSecretDismiss: clientSecret ? onSecretDismiss : void 0,
+			values
+		})
+	});
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminSection.default, {
+		block: "application-create",
+		className,
+		title: title ?? t("admin.applications.create.title"),
+		description,
+		preferences,
+		children: clientSecret ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_ClientSecretNotice.default, {
+			secret: clientSecret,
+			onDismiss: onSecretDismiss,
+			preferences
+		}) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("form", {
+			className: styles["form"],
+			onSubmit: handleSubmit,
+			noValidate: true,
+			children: [
+				error && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Alert.default, {
+					variant: "error",
+					role: "alert",
+					children: error
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_ApplicationFormFields.default, {
+					preferences,
+					values,
+					onInputChange: setInput,
+					onGrantTypesChange: setGrantTypes,
+					onPublicClientChange: setPublicClient
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					className: styles["formActions"],
+					children: [onCancel && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Button.default, {
+						type: "button",
+						variant: "text",
+						onClick: onCancel,
+						disabled: isSubmitting,
+						children: t("admin.common.actions.cancel")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Button.default, {
+						type: "submit",
+						loading: isSubmitting,
+						disabled: !isValid || isSubmitting,
+						children: t("admin.applications.create.submit")
+					})]
+				})
+			]
+		})
+	});
+};
+var BaseApplicationCreate_default = BaseApplicationCreate;
+
+//#endregion
+exports.default = BaseApplicationCreate_default;
+//# sourceMappingURL=BaseApplicationCreate.cjs.map

package/dist/cjs/components/admin/ApplicationCreate/BaseApplicationCreate.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"BaseApplicationCreate.cjs","names":["BaseApplicationCreate: FC<BaseApplicationCreateProps>","useTheme","styles: Record<string, string>","useStyles","useTranslation","DEFAULT_APPLICATION_GRANT_TYPES","submission: ApplicationCreateSubmission","isValid: boolean","APPLICATION_GRANT_TYPES","AdminSection","ClientSecretNotice","Alert","ApplicationFormFields","Button"],"sources":["../../../../../src/components/admin/ApplicationCreate/BaseApplicationCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  APPLICATION_GRANT_TYPES,\n  ApplicationSubmission,\n  DEFAULT_APPLICATION_GRANT_TYPES,\n  isApplicationSubmissionValid,\n  parseRedirectUris,\n  Preferences,\n  SelectOption,\n} from '@thunderid/browser';\nimport {FC, FormEvent, ReactElement, ReactNode, useState} from 'react';\nimport useTheme from '../../../contexts/Theme/useTheme';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport Button from '../../primitives/Button/Button';\nimport AdminSection from '../shared/AdminSection';\nimport useStyles from '../shared/AdminSection.styles';\nimport ApplicationFormFields, {ApplicationFormValues, ApplicationTextField} from '../shared/ApplicationFormFields';\nimport ClientSecretNotice from '../shared/ClientSecretNotice';\n\n/**\n * The application {@link BaseApplicationCreate} submits. The organization unit is added by the caller.\n */\nexport type ApplicationCreateSubmission = ApplicationSubmission;\n\n/**\n * What {@link BaseApplicationCreate} hands its `children` render function, so the form can be built with any UI.\n */\nexport interface BaseApplicationCreateRenderProps {\n  /**\n   * The client secret of the application just created, to show once. `null` while there is none.\n   */\n  clientSecret: string | null;\n  error: string | null;\n  /**\n   * The grant types to choose from, with translated labels.\n   */\n  grantTypeOptions: SelectOption[];\n  /**\n   * Sets the chosen grant types.\n   */\n  handleGrantTypesChange: (grantTypes: string[]) => void;\n  /**\n   * Sets one text field of the form. `redirectUris` takes URIs separated by commas.\n   */\n  handleInputChange: (field: ApplicationTextField, value: string) => void;\n  /**\n   * Sets whether the client is public.\n   */\n  handlePublicClientChange: (publicClient: boolean) => void;\n  /**\n   * Submits the current values. Does nothing while they are not valid.\n   */\n  handleSubmit: () => void;\n  isSubmitting: boolean;\n  /**\n   * Whether the values can be submitted.\n   */\n  isValid: boolean;\n  onCancel?: () => void;\n  /**\n   * Hides the client secret once it has been copied. Undefined while there is no secret.\n   */\n  onSecretDismiss?: () => void;\n  values: ApplicationFormValues;\n}\n\nexport interface BaseApplicationCreateProps {\n  /**\n   * Renders custom UI in place of the default form. Receives the values, their setters, the grant\n   * types, the submit handler, the submission state and the client secret to show.\n   */\n  children?: (props: BaseApplicationCreateRenderProps) => ReactNode;\n  className?: string;\n  /**\n   * The client secret of the application just created. When set, the form gives way to the secret,\n   * which can be read only this once, until `onSecretDismiss` clears it.\n   */\n  clientSecret?: string | null;\n  description?: string;\n  error?: string | null;\n  isSubmitting?: boolean;\n  onCancel?: () => void;\n  /**\n   * Called when the user has copied the client secret.\n   */\n  onSecretDismiss?: () => void;\n  onSubmit: (application: ApplicationCreateSubmission) => void;\n  preferences?: Preferences;\n  title?: string;\n}\n\n/**\n * A form that collects a new application's name, description, links and OAuth basics: redirect URIs,\n * grant types and whether the client is public. Holds no data of its own: handle the submission, and\n * pass back the client secret the server returned to show it once.\n */\nconst BaseApplicationCreate: FC<BaseApplicationCreateProps> = ({\n  children,\n  className,\n  clientSecret = null,\n  description,\n  error = null,\n  isSubmitting = false,\n  onCancel,\n  onSecretDismiss,\n  onSubmit,\n  preferences,\n  title,\n}: BaseApplicationCreateProps): ReactElement => {\n  const {theme, colorScheme} = useTheme();\n  const styles: Record<string, string> = useStyles(theme, colorScheme);\n  const {t} = useTranslation(preferences?.i18n);\n  const [values, setValues] = useState<ApplicationFormValues>({\n    description: '',\n    grantTypes: [...DEFAULT_APPLICATION_GRANT_TYPES],\n    logoUrl: '',\n    name: '',\n    publicClient: false,\n    redirectUris: '',\n    url: '',\n  });\n\n  const submission: ApplicationCreateSubmission = {\n    description: values.description.trim() || undefined,\n    grantTypes: values.grantTypes,\n    logoUrl: values.logoUrl.trim() || undefined,\n    name: values.name.trim(),\n    publicClient: values.publicClient,\n    redirectUris: parseRedirectUris(values.redirectUris),\n    url: values.url.trim() || undefined,\n  };\n  const isValid: boolean = isApplicationSubmissionValid(submission);\n\n  const setInput = (field: ApplicationTextField, value: string): void =>\n    setValues((previous: ApplicationFormValues) => ({...previous, [field]: value}));\n  const setGrantTypes = (grantTypes: string[]): void =>\n    setValues((previous: ApplicationFormValues) => ({...previous, grantTypes}));\n  const setPublicClient = (publicClient: boolean): void =>\n    setValues((previous: ApplicationFormValues) => ({...previous, publicClient}));\n\n  const submit = (): void => {\n    if (isValid && !isSubmitting) {\n      onSubmit(submission);\n    }\n  };\n\n  const handleSubmit = (event: FormEvent<HTMLFormElement>): void => {\n    event.preventDefault();\n    submit();\n  };\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          clientSecret,\n          error,\n          grantTypeOptions: APPLICATION_GRANT_TYPES.map((grantType: string) => ({\n            label: t(`admin.applications.grant_types.${grantType}`),\n            value: grantType,\n          })),\n          handleGrantTypesChange: setGrantTypes,\n          handleInputChange: setInput,\n          handlePublicClientChange: setPublicClient,\n          handleSubmit: submit,\n          isSubmitting,\n          isValid,\n          onCancel,\n          onSecretDismiss: clientSecret ? onSecretDismiss : undefined,\n          values,\n        })}\n      </div>\n    );\n  }\n\n  return (\n    <AdminSection\n      block=\"application-create\"\n      className={className}\n      title={title ?? t('admin.applications.create.title')}\n      description={description}\n      preferences={preferences}\n    >\n      {clientSecret ? (\n        <ClientSecretNotice secret={clientSecret} onDismiss={onSecretDismiss} preferences={preferences} />\n      ) : (\n        <form className={styles['form']} onSubmit={handleSubmit} noValidate>\n          {error && (\n            <Alert variant=\"error\" role=\"alert\">\n              {error}\n            </Alert>\n          )}\n          <ApplicationFormFields\n            preferences={preferences}\n            values={values}\n            onInputChange={setInput}\n            onGrantTypesChange={setGrantTypes}\n            onPublicClientChange={setPublicClient}\n          />\n          <div className={styles['formActions']}>\n            {onCancel && (\n              <Button type=\"button\" variant=\"text\" onClick={onCancel} disabled={isSubmitting}>\n                {t('admin.common.actions.cancel')}\n              </Button>\n            )}\n            <Button type=\"submit\" loading={isSubmitting} disabled={!isValid || isSubmitting}>\n              {t('admin.applications.create.submit')}\n            </Button>\n          </div>\n        </form>\n      )}\n    </AdminSection>\n  );\n};\n\nexport default BaseApplicationCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAmGA,MAAMA,yBAAyD,EAC7D,UACA,WACA,eAAe,MACf,aACA,QAAQ,MACR,eAAe,OACf,UACA,iBACA,UACA,aACA,YAC8C;CAC9C,MAAM,EAAC,OAAO,gBAAeC,0BAAU;CACvC,MAAMC,SAAiCC,oCAAU,OAAO,YAAY;CACpE,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA6C;EAC1D,aAAa;EACb,YAAY,CAAC,GAAGC,oDAAgC;EAChD,SAAS;EACT,MAAM;EACN,cAAc;EACd,cAAc;EACd,KAAK;EACN,CAAC;CAEF,MAAMC,aAA0C;EAC9C,aAAa,OAAO,YAAY,MAAM,IAAI;EAC1C,YAAY,OAAO;EACnB,SAAS,OAAO,QAAQ,MAAM,IAAI;EAClC,MAAM,OAAO,KAAK,MAAM;EACxB,cAAc,OAAO;EACrB,yDAAgC,OAAO,aAAa;EACpD,KAAK,OAAO,IAAI,MAAM,IAAI;EAC3B;CACD,MAAMC,gEAAgD,WAAW;CAEjE,MAAM,YAAY,OAA6B,UAC7C,WAAW,cAAqC;EAAC,GAAG;GAAW,QAAQ;EAAM,EAAE;CACjF,MAAM,iBAAiB,eACrB,WAAW,cAAqC;EAAC,GAAG;EAAU;EAAW,EAAE;CAC7E,MAAM,mBAAmB,iBACvB,WAAW,cAAqC;EAAC,GAAG;EAAU;EAAa,EAAE;CAE/E,MAAM,eAAqB;AACzB,MAAI,WAAW,CAAC,aACd,UAAS,WAAW;;CAIxB,MAAM,gBAAgB,UAA4C;AAChE,QAAM,gBAAgB;AACtB,UAAQ;;AAGV,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA;GACA,kBAAkBC,4CAAwB,KAAK,eAAuB;IACpE,OAAO,EAAE,kCAAkC,YAAY;IACvD,OAAO;IACR,EAAE;GACH,wBAAwB;GACxB,mBAAmB;GACnB,0BAA0B;GAC1B,cAAc;GACd;GACA;GACA;GACA,iBAAiB,eAAe,kBAAkB;GAClD;GACD,CAAC;GACE;AAIV,QACE,2CAACC;EACC,OAAM;EACK;EACX,OAAO,SAAS,EAAE,kCAAkC;EACvC;EACA;YAEZ,eACC,2CAACC;GAAmB,QAAQ;GAAc,WAAW;GAA8B;IAAe,GAElG,4CAAC;GAAK,WAAW,OAAO;GAAS,UAAU;GAAc;;IACtD,SACC,2CAACC;KAAM,SAAQ;KAAQ,MAAK;eACzB;MACK;IAEV,2CAACC;KACc;KACL;KACR,eAAe;KACf,oBAAoB;KACpB,sBAAsB;MACtB;IACF,4CAAC;KAAI,WAAW,OAAO;gBACpB,YACC,2CAACC;MAAO,MAAK;MAAS,SAAQ;MAAO,SAAS;MAAU,UAAU;gBAC/D,EAAE,8BAA8B;OAC1B,EAEX,2CAACA;MAAO,MAAK;MAAS,SAAS;MAAc,UAAU,CAAC,WAAW;gBAChE,EAAE,mCAAmC;OAC/B;MACL;;IACD;GAEI;;AAInB,oCAAe"}