@thunderid/react 1.7.0 → 1.9.0

package/dist/cjs/utils/formatConsentDetailValue.cjs

@@ -0,0 +1,26 @@
+
+//#region src/utils/formatConsentDetailValue.ts
+/**
+* Formats an authorization detail field value for display. Strings are shown as-is, a list of
+* plain values comma-separated, and any other JSON value as JSON, compact unless `indent` is given.
+*
+* @param value - Field value.
+* @param indent - Spaces to indent structured JSON by, so it reads as a block rather than one long line.
+* @returns Display text.
+*
+* @example
+* ```typescript
+* formatConsentDetailValue(['initiate', 'status']) // returns 'initiate, status'
+* ```
+*/
+const formatConsentDetailValue = (value, indent) => {
+	if (value === null || value === void 0) return "";
+	if (typeof value === "string") return value;
+	if (Array.isArray(value) && value.every((item) => typeof item !== "object" || item === null)) return value.map((item) => String(item)).join(", ");
+	return JSON.stringify(value, null, indent);
+};
+var formatConsentDetailValue_default = formatConsentDetailValue;
+
+//#endregion
+exports.default = formatConsentDetailValue_default;
+//# sourceMappingURL=formatConsentDetailValue.cjs.map

package/dist/cjs/utils/formatConsentDetailValue.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatConsentDetailValue.cjs","names":[],"sources":["../../../src/utils/formatConsentDetailValue.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n/**\n * Formats an authorization detail field value for display. Strings are shown as-is, a list of\n * plain values comma-separated, and any other JSON value as JSON, compact unless `indent` is given.\n *\n * @param value - Field value.\n * @param indent - Spaces to indent structured JSON by, so it reads as a block rather than one long line.\n * @returns Display text.\n *\n * @example\n * ```typescript\n * formatConsentDetailValue(['initiate', 'status']) // returns 'initiate, status'\n * ```\n */\nconst formatConsentDetailValue = (value: unknown, indent?: number): string => {\n  if (value === null || value === undefined) return '';\n  if (typeof value === 'string') return value;\n  if (Array.isArray(value) && value.every((item: unknown) => typeof item !== 'object' || item === null)) {\n    return value.map((item: unknown) => String(item)).join(', ');\n  }\n  return JSON.stringify(value, null, indent);\n};\n\nexport default formatConsentDetailValue;\n"],"mappings":";;;;;;;;;;;;;;;AAgBA,MAAM,4BAA4B,OAAgB,WAA4B;AAC5E,KAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,KAAI,OAAO,UAAU,SAAU,QAAO;AACtC,KAAI,MAAM,QAAQ,MAAM,IAAI,MAAM,OAAO,SAAkB,OAAO,SAAS,YAAY,SAAS,KAAK,CACnG,QAAO,MAAM,KAAK,SAAkB,OAAO,KAAK,CAAC,CAAC,KAAK,KAAK;AAE9D,QAAO,KAAK,UAAU,OAAO,MAAM,OAAO;;AAG5C,uCAAe"}

package/dist/cjs/utils/getConsentDetailLayout.cjs

@@ -0,0 +1,44 @@
+const require_formatConsentDetailValue = require('./formatConsentDetailValue.cjs');
+const require_isConsentDetailStructured = require('./isConsentDetailStructured.cjs');
+
+//#region src/utils/getConsentDetailLayout.ts
+/**
+* Limits a consent screen applies to authorization detail content so that a long or large value never
+* crowds the layout. Text longer than a `*Chars` limit is clamped to its `*Lines` limit behind a toggle,
+* and a list longer than `listItems` shows that many items behind a toggle.
+*/
+const CONSENT_DETAIL_DISPLAY_LIMITS = Object.freeze({
+	inlineLabelChars: 32,
+	inlineValueChars: 32,
+	listItems: 8,
+	structuredLines: 8,
+	summaryChars: 160,
+	summaryLines: 3,
+	valueChars: 160,
+	valueLines: 4
+});
+/**
+* Chooses how a consent screen lays out one authorization detail field. A short label and a short value
+* sit side by side; a long label, a long value, a long list or a structured value is stacked, the label
+* above the value, so neither squeezes the other.
+*
+* @param row - Field to lay out.
+* @returns `inline` or `stacked`.
+*
+* @example
+* ```typescript
+* getConsentDetailLayout({label: 'Pay to', path: 'creditorName', value: 'Merchant A'}) // returns 'inline'
+* ```
+*/
+const getConsentDetailLayout = (row) => {
+	if ((row.label || row.path).length > CONSENT_DETAIL_DISPLAY_LIMITS.inlineLabelChars || require_isConsentDetailStructured.default(row.value)) return "stacked";
+	const items = Array.isArray(row.value) ? [...row.value] : [row.value];
+	if (row.modification === "addItems" && Array.isArray(row.options)) items.push(...row.options);
+	return require_formatConsentDetailValue.default(items).length > CONSENT_DETAIL_DISPLAY_LIMITS.inlineValueChars ? "stacked" : "inline";
+};
+var getConsentDetailLayout_default = getConsentDetailLayout;
+
+//#endregion
+exports.CONSENT_DETAIL_DISPLAY_LIMITS = CONSENT_DETAIL_DISPLAY_LIMITS;
+exports.default = getConsentDetailLayout_default;
+//# sourceMappingURL=getConsentDetailLayout.cjs.map

package/dist/cjs/utils/getConsentDetailLayout.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getConsentDetailLayout.cjs","names":["CONSENT_DETAIL_DISPLAY_LIMITS: Readonly<{\n  inlineLabelChars: number;\n  inlineValueChars: number;\n  listItems: number;\n  structuredLines: number;\n  summaryChars: number;\n  summaryLines: number;\n  valueChars: number;\n  valueLines: number;\n}>","isConsentDetailStructured","items: unknown[]","formatConsentDetailValue"],"sources":["../../../src/utils/getConsentDetailLayout.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {type ConsentDetailRow} from '@thunderid/browser';\nimport formatConsentDetailValue from './formatConsentDetailValue';\nimport isConsentDetailStructured from './isConsentDetailStructured';\n\n/**\n * Limits a consent screen applies to authorization detail content so that a long or large value never\n * crowds the layout. Text longer than a `*Chars` limit is clamped to its `*Lines` limit behind a toggle,\n * and a list longer than `listItems` shows that many items behind a toggle.\n */\nexport const CONSENT_DETAIL_DISPLAY_LIMITS: Readonly<{\n  inlineLabelChars: number;\n  inlineValueChars: number;\n  listItems: number;\n  structuredLines: number;\n  summaryChars: number;\n  summaryLines: number;\n  valueChars: number;\n  valueLines: number;\n}> = Object.freeze({\n  inlineLabelChars: 32,\n  inlineValueChars: 32,\n  listItems: 8,\n  structuredLines: 8,\n  summaryChars: 160,\n  summaryLines: 3,\n  valueChars: 160,\n  valueLines: 4,\n});\n\n/**\n * Chooses how a consent screen lays out one authorization detail field. A short label and a short value\n * sit side by side; a long label, a long value, a long list or a structured value is stacked, the label\n * above the value, so neither squeezes the other.\n *\n * @param row - Field to lay out.\n * @returns `inline` or `stacked`.\n *\n * @example\n * ```typescript\n * getConsentDetailLayout({label: 'Pay to', path: 'creditorName', value: 'Merchant A'}) // returns 'inline'\n * ```\n */\nconst getConsentDetailLayout = (row: ConsentDetailRow): 'inline' | 'stacked' => {\n  const label: string = row.label || row.path;\n  if (label.length > CONSENT_DETAIL_DISPLAY_LIMITS.inlineLabelChars || isConsentDetailStructured(row.value)) {\n    return 'stacked';\n  }\n\n  const items: unknown[] = Array.isArray(row.value) ? [...(row.value as unknown[])] : [row.value];\n  if (row.modification === 'addItems' && Array.isArray(row.options)) {\n    items.push(...row.options);\n  }\n  const text: string = formatConsentDetailValue(items);\n\n  return text.length > CONSENT_DETAIL_DISPLAY_LIMITS.inlineValueChars ? 'stacked' : 'inline';\n};\n\nexport default getConsentDetailLayout;\n"],"mappings":";;;;;;;;;AAYA,MAAaA,gCASR,OAAO,OAAO;CACjB,kBAAkB;CAClB,kBAAkB;CAClB,WAAW;CACX,iBAAiB;CACjB,cAAc;CACd,cAAc;CACd,YAAY;CACZ,YAAY;CACb,CAAC;;;;;;;;;;;;;;AAeF,MAAM,0BAA0B,QAAgD;AAE9E,MADsB,IAAI,SAAS,IAAI,MAC7B,SAAS,8BAA8B,oBAAoBC,0CAA0B,IAAI,MAAM,CACvG,QAAO;CAGT,MAAMC,QAAmB,MAAM,QAAQ,IAAI,MAAM,GAAG,CAAC,GAAI,IAAI,MAAoB,GAAG,CAAC,IAAI,MAAM;AAC/F,KAAI,IAAI,iBAAiB,cAAc,MAAM,QAAQ,IAAI,QAAQ,CAC/D,OAAM,KAAK,GAAG,IAAI,QAAQ;AAI5B,QAFqBC,yCAAyB,MAAM,CAExC,SAAS,8BAA8B,mBAAmB,YAAY;;AAGpF,qCAAe"}

package/dist/cjs/utils/getConsentDetailListDisplay.cjs

@@ -0,0 +1,30 @@
+const require_getConsentDetailLayout = require('./getConsentDetailLayout.cjs');
+
+//#region src/utils/getConsentDetailListDisplay.ts
+/**
+* Tells how many items of an authorization detail list a consent screen shows. A list longer than
+* `CONSENT_DETAIL_DISPLAY_LIMITS.listItems` shows that many items while collapsed, the rest behind a toggle.
+*
+* @param itemCount - Number of items in the list.
+* @param expanded - Whether the user expanded the list.
+* @returns The items to show and hide.
+*
+* @example
+* ```typescript
+* getConsentDetailListDisplay(10, false) // returns {hiddenCount: 2, isCollapsible: true, visibleCount: 8}
+* ```
+*/
+const getConsentDetailListDisplay = (itemCount, expanded) => {
+	const isCollapsible = itemCount > require_getConsentDetailLayout.CONSENT_DETAIL_DISPLAY_LIMITS.listItems;
+	const visibleCount = isCollapsible && !expanded ? require_getConsentDetailLayout.CONSENT_DETAIL_DISPLAY_LIMITS.listItems : itemCount;
+	return {
+		hiddenCount: itemCount - visibleCount,
+		isCollapsible,
+		visibleCount
+	};
+};
+var getConsentDetailListDisplay_default = getConsentDetailListDisplay;
+
+//#endregion
+exports.default = getConsentDetailListDisplay_default;
+//# sourceMappingURL=getConsentDetailListDisplay.cjs.map

package/dist/cjs/utils/getConsentDetailListDisplay.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getConsentDetailListDisplay.cjs","names":["isCollapsible: boolean","CONSENT_DETAIL_DISPLAY_LIMITS","visibleCount: number"],"sources":["../../../src/utils/getConsentDetailListDisplay.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {CONSENT_DETAIL_DISPLAY_LIMITS} from './getConsentDetailLayout';\n\n/**\n * How a consent screen shows a list of authorization detail items, given the\n * `CONSENT_DETAIL_DISPLAY_LIMITS.listItems` limit.\n *\n * @experimental This interface may change in future versions\n */\nexport interface ConsentDetailListDisplay {\n  /** Number of items hidden behind the toggle; `0` while expanded or when the list fits. */\n  hiddenCount: number;\n  /** Whether the list is longer than the limit, so it is shown behind a toggle. */\n  isCollapsible: boolean;\n  /** Number of items to show. */\n  visibleCount: number;\n}\n\n/**\n * Tells how many items of an authorization detail list a consent screen shows. A list longer than\n * `CONSENT_DETAIL_DISPLAY_LIMITS.listItems` shows that many items while collapsed, the rest behind a toggle.\n *\n * @param itemCount - Number of items in the list.\n * @param expanded - Whether the user expanded the list.\n * @returns The items to show and hide.\n *\n * @example\n * ```typescript\n * getConsentDetailListDisplay(10, false) // returns {hiddenCount: 2, isCollapsible: true, visibleCount: 8}\n * ```\n */\nconst getConsentDetailListDisplay = (itemCount: number, expanded: boolean): ConsentDetailListDisplay => {\n  const isCollapsible: boolean = itemCount > CONSENT_DETAIL_DISPLAY_LIMITS.listItems;\n  const visibleCount: number = isCollapsible && !expanded ? CONSENT_DETAIL_DISPLAY_LIMITS.listItems : itemCount;\n\n  return {hiddenCount: itemCount - visibleCount, isCollapsible, visibleCount};\n};\n\nexport default getConsentDetailListDisplay;\n"],"mappings":";;;;;;;;;;;;;;;;AAiCA,MAAM,+BAA+B,WAAmB,aAAgD;CACtG,MAAMA,gBAAyB,YAAYC,6DAA8B;CACzE,MAAMC,eAAuB,iBAAiB,CAAC,WAAWD,6DAA8B,YAAY;AAEpG,QAAO;EAAC,aAAa,YAAY;EAAc;EAAe;EAAa;;AAG7E,0CAAe"}

package/dist/cjs/utils/isConsentApprovalBlocked.cjs

@@ -0,0 +1,41 @@
+const require_rolldown_runtime = require('../_virtual/rolldown_runtime.cjs');
+const require_ConsentCheckboxList = require('../components/auth/flow/ConsentCheckboxList.cjs');
+let __thunderid_browser = require("@thunderid/browser");
+__thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
+
+//#region src/utils/isConsentApprovalBlocked.ts
+/**
+* Reports whether any field the user may modify on an authorization detail element shows text that cannot
+* be submitted. The element must not be approved while this holds, since its decision would not carry what
+* the user sees.
+*
+* @param purposeId - The identifier of the consent purpose the element belongs to.
+* @param element - The authorization detail element.
+* @param inputs - Form values, holding the invalid marker of each field under its invalid key.
+* @returns Whether a field of the element is invalid.
+*
+* @example
+* ```typescript
+* hasInvalidConsentModification('p1', element, {'__consent_invalid__p1__d-1__amount': 'true'}) // returns true
+* ```
+*/
+const hasInvalidConsentModification = (purposeId, element, inputs) => (element.rows ?? []).some((row) => Boolean(row.modification) && inputs[(0, __thunderid_browser.getConsentInvalidKey)(purposeId, element.name, row.path)] === "true");
+/**
+* Reports whether the consent cannot be approved yet: an authorization detail the user has not declined
+* shows, in a field the user may modify, text that cannot be submitted. Denying stays possible.
+*
+* @param purposes - The consent purposes on the screen.
+* @param formValues - Form values, holding each element's approval and each field's invalid marker.
+* @returns Whether approval must wait until the user corrects the field.
+*
+* @example
+* ```typescript
+* isConsentApprovalBlocked(purposes, {'__consent_invalid__p1__d-1__amount': 'true'}) // returns true
+* ```
+*/
+const isConsentApprovalBlocked = (purposes, formValues) => purposes.some((purpose) => (purpose.optional ?? []).some((element) => formValues[require_ConsentCheckboxList.getConsentOptionalKey(purpose.purposeId, element.name)] !== "false" && hasInvalidConsentModification(purpose.purposeId, element, formValues)));
+var isConsentApprovalBlocked_default = isConsentApprovalBlocked;
+
+//#endregion
+exports.default = isConsentApprovalBlocked_default;
+//# sourceMappingURL=isConsentApprovalBlocked.cjs.map

package/dist/cjs/utils/isConsentApprovalBlocked.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"isConsentApprovalBlocked.cjs","names":["getConsentOptionalKey"],"sources":["../../../src/utils/isConsentApprovalBlocked.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  type ConsentDetailRow,\n  type ConsentPurposeData,\n  getConsentInvalidKey,\n  type PromptElement,\n} from '@thunderid/browser';\nimport {getConsentOptionalKey} from '../components/auth/flow/ConsentCheckboxList';\n\n/**\n * Reports whether any field the user may modify on an authorization detail element shows text that cannot\n * be submitted. The element must not be approved while this holds, since its decision would not carry what\n * the user sees.\n *\n * @param purposeId - The identifier of the consent purpose the element belongs to.\n * @param element - The authorization detail element.\n * @param inputs - Form values, holding the invalid marker of each field under its invalid key.\n * @returns Whether a field of the element is invalid.\n *\n * @example\n * ```typescript\n * hasInvalidConsentModification('p1', element, {'__consent_invalid__p1__d-1__amount': 'true'}) // returns true\n * ```\n */\nconst hasInvalidConsentModification = (\n  purposeId: string,\n  element: PromptElement,\n  inputs: Record<string, unknown>,\n): boolean =>\n  (element.rows ?? []).some(\n    (row: ConsentDetailRow) =>\n      Boolean(row.modification) && inputs[getConsentInvalidKey(purposeId, element.name, row.path)] === 'true',\n  );\n\n/**\n * Reports whether the consent cannot be approved yet: an authorization detail the user has not declined\n * shows, in a field the user may modify, text that cannot be submitted. Denying stays possible.\n *\n * @param purposes - The consent purposes on the screen.\n * @param formValues - Form values, holding each element's approval and each field's invalid marker.\n * @returns Whether approval must wait until the user corrects the field.\n *\n * @example\n * ```typescript\n * isConsentApprovalBlocked(purposes, {'__consent_invalid__p1__d-1__amount': 'true'}) // returns true\n * ```\n */\nconst isConsentApprovalBlocked = (purposes: ConsentPurposeData[], formValues: Record<string, unknown>): boolean =>\n  purposes.some((purpose: ConsentPurposeData) =>\n    (purpose.optional ?? []).some(\n      (element: PromptElement) =>\n        formValues[getConsentOptionalKey(purpose.purposeId, element.name)] !== 'false' &&\n        hasInvalidConsentModification(purpose.purposeId, element, formValues),\n    ),\n  );\n\nexport default isConsentApprovalBlocked;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA0BA,MAAM,iCACJ,WACA,SACA,YAEC,QAAQ,QAAQ,EAAE,EAAE,MAClB,QACC,QAAQ,IAAI,aAAa,IAAI,qDAA4B,WAAW,QAAQ,MAAM,IAAI,KAAK,MAAM,OACpG;;;;;;;;;;;;;;AAeH,MAAM,4BAA4B,UAAgC,eAChE,SAAS,MAAM,aACZ,QAAQ,YAAY,EAAE,EAAE,MACtB,YACC,WAAWA,kDAAsB,QAAQ,WAAW,QAAQ,KAAK,MAAM,WACvE,8BAA8B,QAAQ,WAAW,SAAS,WAAW,CACxE,CACF;AAEH,uCAAe"}

package/dist/cjs/utils/isConsentDetailPlainList.cjs

@@ -0,0 +1,24 @@
+
+//#region src/utils/isConsentDetailPlainList.ts
+/**
+* Whether a field value is a list of plain values, strings, numbers or booleans, which a consent screen shows
+* as a list rather than as structured JSON.
+*
+* @param value - Field value.
+* @returns `true` when the value is a list of plain values.
+*
+* @example
+* ```typescript
+* isConsentDetailPlainList(['initiate', 'status']) // returns true
+* ```
+*/
+const isConsentDetailPlainList = (value) => Array.isArray(value) && value.every((item) => [
+	"string",
+	"number",
+	"boolean"
+].includes(typeof item));
+var isConsentDetailPlainList_default = isConsentDetailPlainList;
+
+//#endregion
+exports.default = isConsentDetailPlainList_default;
+//# sourceMappingURL=isConsentDetailPlainList.cjs.map

package/dist/cjs/utils/isConsentDetailPlainList.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"isConsentDetailPlainList.cjs","names":[],"sources":["../../../src/utils/isConsentDetailPlainList.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n/**\n * Whether a field value is a list of plain values, strings, numbers or booleans, which a consent screen shows\n * as a list rather than as structured JSON.\n *\n * @param value - Field value.\n * @returns `true` when the value is a list of plain values.\n *\n * @example\n * ```typescript\n * isConsentDetailPlainList(['initiate', 'status']) // returns true\n * ```\n */\nconst isConsentDetailPlainList = (value: unknown): value is (string | number | boolean)[] =>\n  Array.isArray(value) && value.every((item: unknown) => ['string', 'number', 'boolean'].includes(typeof item));\n\nexport default isConsentDetailPlainList;\n"],"mappings":";;;;;;;;;;;;;;AAeA,MAAM,4BAA4B,UAChC,MAAM,QAAQ,MAAM,IAAI,MAAM,OAAO,SAAkB;CAAC;CAAU;CAAU;CAAU,CAAC,SAAS,OAAO,KAAK,CAAC;AAE/G,uCAAe"}

package/dist/cjs/utils/isConsentDetailStructured.cjs

@@ -0,0 +1,15 @@
+
+//#region src/utils/isConsentDetailStructured.ts
+/**
+* Whether a field value is structured JSON, an object or a list holding objects, rather than a plain
+* value or a list of plain values.
+*
+* @param value - Field value.
+* @returns `true` when the value is shown as a formatted JSON block.
+*/
+const isConsentDetailStructured = (value) => typeof value === "object" && value !== null && !Array.isArray(value) || Array.isArray(value) && value.some((item) => typeof item === "object" && item !== null);
+var isConsentDetailStructured_default = isConsentDetailStructured;
+
+//#endregion
+exports.default = isConsentDetailStructured_default;
+//# sourceMappingURL=isConsentDetailStructured.cjs.map

package/dist/cjs/utils/isConsentDetailStructured.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"isConsentDetailStructured.cjs","names":[],"sources":["../../../src/utils/isConsentDetailStructured.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n/**\n * Whether a field value is structured JSON, an object or a list holding objects, rather than a plain\n * value or a list of plain values.\n *\n * @param value - Field value.\n * @returns `true` when the value is shown as a formatted JSON block.\n */\nconst isConsentDetailStructured = (value: unknown): boolean =>\n  (typeof value === 'object' && value !== null && !Array.isArray(value)) ||\n  (Array.isArray(value) && value.some((item: unknown) => typeof item === 'object' && item !== null));\n\nexport default isConsentDetailStructured;\n"],"mappings":";;;;;;;;;AAUA,MAAM,6BAA6B,UAChC,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM,IACpE,MAAM,QAAQ,MAAM,IAAI,MAAM,MAAM,SAAkB,OAAO,SAAS,YAAY,SAAS,KAAK;AAEnG,wCAAe"}

package/dist/cjs/utils/isConsentDetailTextClamped.cjs

@@ -0,0 +1,25 @@
+
+//#region src/utils/isConsentDetailTextClamped.ts
+/**
+* Whether authorization detail text is long enough to be clamped behind a toggle: longer than `maxChars`, or
+* spanning more than `maxLines` lines.
+*
+* @param text - Text to show.
+* @param maxChars - Number of characters above which the text is clamped, such as
+* `CONSENT_DETAIL_DISPLAY_LIMITS.valueChars`.
+* @param maxLines - Number of lines above which the text is clamped, such as
+* `CONSENT_DETAIL_DISPLAY_LIMITS.valueLines`.
+* @returns `true` when the text is clamped while collapsed.
+*
+* @example
+* ```typescript
+* isConsentDetailTextClamped('Merchant A', CONSENT_DETAIL_DISPLAY_LIMITS.valueChars, CONSENT_DETAIL_DISPLAY_LIMITS.valueLines)
+* // returns false
+* ```
+*/
+const isConsentDetailTextClamped = (text, maxChars, maxLines) => text.length > maxChars || text.split("\n").length > maxLines;
+var isConsentDetailTextClamped_default = isConsentDetailTextClamped;
+
+//#endregion
+exports.default = isConsentDetailTextClamped_default;
+//# sourceMappingURL=isConsentDetailTextClamped.cjs.map

package/dist/cjs/utils/isConsentDetailTextClamped.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"isConsentDetailTextClamped.cjs","names":[],"sources":["../../../src/utils/isConsentDetailTextClamped.ts"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\n/**\n * Whether authorization detail text is long enough to be clamped behind a toggle: longer than `maxChars`, or\n * spanning more than `maxLines` lines.\n *\n * @param text - Text to show.\n * @param maxChars - Number of characters above which the text is clamped, such as\n * `CONSENT_DETAIL_DISPLAY_LIMITS.valueChars`.\n * @param maxLines - Number of lines above which the text is clamped, such as\n * `CONSENT_DETAIL_DISPLAY_LIMITS.valueLines`.\n * @returns `true` when the text is clamped while collapsed.\n *\n * @example\n * ```typescript\n * isConsentDetailTextClamped('Merchant A', CONSENT_DETAIL_DISPLAY_LIMITS.valueChars, CONSENT_DETAIL_DISPLAY_LIMITS.valueLines)\n * // returns false\n * ```\n */\nconst isConsentDetailTextClamped = (text: string, maxChars: number, maxLines: number): boolean =>\n  text.length > maxChars || text.split('\\n').length > maxLines;\n\nexport default isConsentDetailTextClamped;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAoBA,MAAM,8BAA8B,MAAc,UAAkB,aAClE,KAAK,SAAS,YAAY,KAAK,MAAM,KAAK,CAAC,SAAS;AAEtD,yCAAe"}

package/dist/components/account/UserProfile/BaseUserProfile.js

@@ -5,9 +5,9 @@ import Button_default from "../../primitives/Button/Button.js";
 import Typography_default from "../../primitives/Typography/Typography.js";
 import Alert_default from "../../primitives/Alert/Alert.js";
 import Card_default from "../../primitives/Card/Card.js";
+import TextField_default from "../../primitives/TextField/TextField.js";
 import Checkbox_default from "../../primitives/Checkbox/Checkbox.js";
 import DatePicker_default from "../../primitives/DatePicker/DatePicker.js";
-import TextField_default from "../../primitives/TextField/TextField.js";
 import Divider_default from "../../primitives/Divider/Divider.js";
 import BaseUserProfile_styles_default from "./BaseUserProfile.styles.js";
 import getMappedUserProfileValue_default from "../../../utils/getMappedUserProfileValue.js";

package/dist/components/admin/AgentCreate/AgentCreate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AgentCreate.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/AgentCreate/AgentCreate.tsx"],"names":[],"mappings":"AAGA,OAAO,EAA2B,KAAK,EAA0B,MAAM,oBAAoB,CAAC;AAC5F,OAAO,EAAC,EAAE,EAAwB,MAAM,OAAO,CAAC;AAChD,OAAwB,EAAwB,oBAAoB,EAAC,MAAM,mBAAmB,CAAC;AAM/F,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,EAAE,YAAY,GAAG,OAAO,GAAG,cAAc,GAAG,UAAU,CAAC,GAAG;IAChH;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACnC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAuCrC,CAAC;AAEF,eAAe,WAAW,CAAC"}
+{"version":3,"file":"AgentCreate.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/AgentCreate/AgentCreate.tsx"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,EASN,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,EAAE,EAAwB,MAAM,OAAO,CAAC;AAChD,OAAwB,EAAwB,oBAAoB,EAAC,MAAM,mBAAmB,CAAC;AAO/F,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,EAAE,YAAY,GAAG,OAAO,GAAG,cAAc,GAAG,UAAU,CAAC,GAAG;IAChH;;OAEG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACnC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAgDrC,CAAC;AAEF,eAAe,WAAW,CAAC"}

package/dist/components/admin/AgentCreate/AgentCreate.js

@@ -1,9 +1,10 @@
 import useTranslation_default from "../../../hooks/useTranslation.js";
-import useCreateAgent_default from "../../../hooks/management/agents/useCreateAgent.js";
-import useGetAgentTypes_default from "../../../hooks/management/agents/useGetAgentTypes.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
+import useResourceMutation_default from "../../../hooks/management/useResourceMutation.js";
 import useDefaultOuId_default from "../shared/useDefaultOuId.js";
 import BaseAgentCreate_default from "./BaseAgentCreate.js";
-import { toManagementErrorMessage } from "@thunderid/browser";
+import { AgentQueryKeys, createAgent, getAgentTypes, toManagementErrorMessage } from "@thunderid/browser";
 import { useMemo } from "react";
 import { jsx } from "react/jsx-runtime";
 
@@ -19,8 +20,18 @@ import { jsx } from "react/jsx-runtime";
 const AgentCreate = ({ onCreated, ouId, owner, preferences,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
 	const resolvedOuId = useDefaultOuId_default(ouId);
-	const { data: agentTypes } = useGetAgentTypes_default({ limit: 100 });
-	const { error, isLoading, mutate } = useCreateAgent_default({ onSuccess: onCreated });
+	const agentsEndpoint = useManagementEndpoint_default("agents");
+	const agentTypesEndpoint = useManagementEndpoint_default("agentTypes");
+	const { data: agentTypes } = useResourceQuery_default([AgentQueryKeys.AGENT_TYPES, { limit: 100 }], (fetcher) => getAgentTypes({
+		...agentTypesEndpoint,
+		fetcher,
+		limit: 100
+	}));
+	const { error, isLoading, mutate } = useResourceMutation_default((payload, fetcher) => createAgent({
+		...agentsEndpoint,
+		fetcher,
+		payload
+	}), () => [[AgentQueryKeys.AGENTS]], { onSuccess: onCreated });
 	const options = useMemo(() => (agentTypes?.types ?? []).map((agentType) => ({
 		label: agentType.displayName,
 		value: agentType.handle

package/dist/components/admin/AgentCreate/AgentCreate.js.map

@@ -1 +1 @@
-{"version":3,"file":"AgentCreate.js","names":["AgentCreate: FC<AgentCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","useGetAgentTypes","useCreateAgent","options: SelectOption[]","BaseAgentCreate"],"sources":["../../../../src/components/admin/AgentCreate/AgentCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage, Agent, AgentType, SelectOption} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseAgentCreate, {AgentCreateSubmission, BaseAgentCreateProps} from './BaseAgentCreate';\nimport useCreateAgent from '../../../hooks/management/agents/useCreateAgent';\nimport useGetAgentTypes from '../../../hooks/management/agents/useGetAgentTypes';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type AgentCreateProps = Omit<BaseAgentCreateProps, 'agentTypes' | 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created agent.\n   */\n  onCreated?: (agent: Agent) => void;\n  /**\n   * Organization unit the agent is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n  /**\n   * The person responsible for the agent. Defaults to the server's choice, usually the creator.\n   */\n  owner?: string;\n};\n\n/**\n * Registers an agent through the management API.\n *\n * @example\n * ```tsx\n * <AgentCreate onCreated={(agent) => navigate(`/agents/${agent.id}`)} />\n * ```\n */\nconst AgentCreate: FC<AgentCreateProps> = ({\n  onCreated,\n  ouId,\n  owner,\n  preferences,\n  ...rest\n}: AgentCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const {data: agentTypes} = useGetAgentTypes({limit: 100});\n  const {error, isLoading, mutate} = useCreateAgent({onSuccess: onCreated});\n\n  const options: SelectOption[] = useMemo(\n    () =>\n      (agentTypes?.types ?? []).map((agentType: AgentType) => ({\n        label: agentType.displayName,\n        value: agentType.handle,\n      })),\n    [agentTypes],\n  );\n\n  const handleSubmit = ({description, name, type}: AgentCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId, owner, type});\n    }\n  };\n\n  return (\n    <BaseAgentCreate\n      agentTypes={options}\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.agents.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default AgentCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAkCA,MAAMA,eAAqC,EACzC,WACA,MACA,OACA,YACA,GAAG,WACiC;CACpC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,uBAAe,KAAK;CAC7D,MAAM,EAAC,MAAM,eAAcC,yBAAiB,EAAC,OAAO,KAAI,CAAC;CACzD,MAAM,EAAC,OAAO,WAAW,WAAUC,uBAAe,EAAC,WAAW,WAAU,CAAC;CAEzE,MAAMC,UAA0B,eAE3B,YAAY,SAAS,EAAE,EAAE,KAAK,eAA0B;EACvD,OAAO,UAAU;EACjB,OAAO,UAAU;EAClB,EAAE,EACL,CAAC,WAAW,CACb;CAED,MAAM,gBAAgB,EAAC,aAAa,MAAM,WAAuC;AAC/E,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAc;GAAO;GAAK,CAAC;;AAIrE,QACE,oBAACC;EACC,YAAY;EACZ,UAAU;EACV,cAAc;EACd,OACE,eAAe,yBAAyB,GAAG,OAAO,4BAA4B,GAAG,EAAE,4BAA4B;EAEpG;EACb,GAAI;GACJ;;AAIN,0BAAe"}
+{"version":3,"file":"AgentCreate.js","names":["AgentCreate: FC<AgentCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","agentsEndpoint: ManagementEndpoint","useManagementEndpoint","agentTypesEndpoint: ManagementEndpoint","useResourceQuery","useResourceMutation","options: SelectOption[]","BaseAgentCreate"],"sources":["../../../../src/components/admin/AgentCreate/AgentCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  Agent,\n  AgentQueryKeys,\n  AgentType,\n  AgentTypeListResponse,\n  CreateAgentRequest,\n  SelectOption,\n  createAgent,\n  getAgentTypes,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseAgentCreate, {AgentCreateSubmission, BaseAgentCreateProps} from './BaseAgentCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type AgentCreateProps = Omit<BaseAgentCreateProps, 'agentTypes' | 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created agent.\n   */\n  onCreated?: (agent: Agent) => void;\n  /**\n   * Organization unit the agent is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n  /**\n   * The person responsible for the agent. Defaults to the server's choice, usually the creator.\n   */\n  owner?: string;\n};\n\n/**\n * Registers an agent through the management API.\n *\n * @example\n * ```tsx\n * <AgentCreate onCreated={(agent) => navigate(`/agents/${agent.id}`)} />\n * ```\n */\nconst AgentCreate: FC<AgentCreateProps> = ({\n  onCreated,\n  ouId,\n  owner,\n  preferences,\n  ...rest\n}: AgentCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const agentTypesEndpoint: ManagementEndpoint = useManagementEndpoint('agentTypes');\n  const {data: agentTypes}: ResourceQueryResult<AgentTypeListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENT_TYPES, {limit: 100}],\n    (fetcher) => getAgentTypes({...agentTypesEndpoint, fetcher, limit: 100}),\n  );\n  const {error, isLoading, mutate}: ResourceMutationResult<Agent, CreateAgentRequest> = useResourceMutation(\n    (payload: CreateAgentRequest, fetcher) => createAgent({...agentsEndpoint, fetcher, payload}),\n    () => [[AgentQueryKeys.AGENTS]],\n    {onSuccess: onCreated},\n  );\n\n  const options: SelectOption[] = useMemo(\n    () =>\n      (agentTypes?.types ?? []).map((agentType: AgentType) => ({\n        label: agentType.displayName,\n        value: agentType.handle,\n      })),\n    [agentTypes],\n  );\n\n  const handleSubmit = ({description, name, type}: AgentCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId, owner, type});\n    }\n  };\n\n  return (\n    <BaseAgentCreate\n      agentTypes={options}\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.agents.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default AgentCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA6CA,MAAMA,eAAqC,EACzC,WACA,MACA,OACA,YACA,GAAG,WACiC;CACpC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,uBAAe,KAAK;CAC7D,MAAMC,iBAAqCC,8BAAsB,SAAS;CAC1E,MAAMC,qBAAyCD,8BAAsB,aAAa;CAClF,MAAM,EAAC,MAAM,eAA0DE,yBACrE,CAAC,eAAe,aAAa,EAAC,OAAO,KAAI,CAAC,GACzC,YAAY,cAAc;EAAC,GAAG;EAAoB;EAAS,OAAO;EAAI,CAAC,CACzE;CACD,MAAM,EAAC,OAAO,WAAW,WAA6DC,6BACnF,SAA6B,YAAY,YAAY;EAAC,GAAG;EAAgB;EAAS;EAAQ,CAAC,QACtF,CAAC,CAAC,eAAe,OAAO,CAAC,EAC/B,EAAC,WAAW,WAAU,CACvB;CAED,MAAMC,UAA0B,eAE3B,YAAY,SAAS,EAAE,EAAE,KAAK,eAA0B;EACvD,OAAO,UAAU;EACjB,OAAO,UAAU;EAClB,EAAE,EACL,CAAC,WAAW,CACb;CAED,MAAM,gBAAgB,EAAC,aAAa,MAAM,WAAuC;AAC/E,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAc;GAAO;GAAK,CAAC;;AAIrE,QACE,oBAACC;EACC,YAAY;EACZ,UAAU;EACV,cAAc;EACd,OACE,eAAe,yBAAyB,GAAG,OAAO,4BAA4B,GAAG,EAAE,4BAA4B;EAEpG;EACb,GAAI;GACJ;;AAIN,0BAAe"}

package/dist/components/admin/AgentDetails/AgentDetails.d.ts

@@ -1,12 +1,19 @@
 import { FC } from 'react';
 import { BaseAgentDetailsProps } from './BaseAgentDetails';
-export type AgentDetailsProps = Omit<BaseAgentDetailsProps, 'agent' | 'error' | 'groups' | 'isDeleting' | 'isLoading' | 'onDelete' | 'roles'> & {
+export type AgentDetailsProps = Omit<BaseAgentDetailsProps, 'agent' | 'error' | 'groups' | 'isDeleting' | 'isLoading' | 'isRunningLifecycleAction' | 'lifecycleActions' | 'onDelete' | 'onLifecycleAction' | 'roles'> & {
     agentId: string;
     /**
      * Whether the agent can be deleted from this view.
      * @default false
      */
     deletable?: boolean;
+    /**
+     * Whether the agent can be suspended, unsuspended and unlocked from this view. Each action runs through its
+     * administration flow and is offered only when the server configures that flow. Reading the configured
+     * flows needs a token that may read the server configuration.
+     * @default false
+     */
+    lifecycleActions?: boolean;
     /**
      * Called after the agent has been deleted.
      */

package/dist/components/admin/AgentDetails/AgentDetails.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AgentDetails.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/AgentDetails/AgentDetails.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AACvC,OAAyB,EAAC,qBAAqB,EAAC,MAAM,oBAAoB,CAAC;AAO3E,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAClC,qBAAqB,EACrB,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,YAAY,GAAG,WAAW,GAAG,UAAU,GAAG,OAAO,CACjF,GAAG;IACF,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;CACxB,CAAC;AAEF;;;;;;;;GAQG;AACH,QAAA,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CA6BvC,CAAC;AAEF,eAAe,YAAY,CAAC"}
+{"version":3,"file":"AgentDetails.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/AgentDetails/AgentDetails.tsx"],"names":[],"mappings":"AAgBA,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AACvC,OAAyB,EAAC,qBAAqB,EAAC,MAAM,oBAAoB,CAAC;AAO3E,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAClC,qBAAqB,EACnB,OAAO,GACP,OAAO,GACP,QAAQ,GACR,YAAY,GACZ,WAAW,GACX,0BAA0B,GAC1B,kBAAkB,GAClB,UAAU,GACV,mBAAmB,GACnB,OAAO,CACV,GAAG;IACF,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;CACxB,CAAC;AAEF;;;;;;;;GAQG;AACH,QAAA,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CA4DvC,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/components/admin/AgentDetails/AgentDetails.js

@@ -1,10 +1,10 @@
 import useTranslation_default from "../../../hooks/useTranslation.js";
-import useGetAgent_default from "../../../hooks/management/agents/useGetAgent.js";
-import useDeleteAgent_default from "../../../hooks/management/agents/useDeleteAgent.js";
-import useGetAgentGroups_default from "../../../hooks/management/agents/useGetAgentGroups.js";
-import useGetAgentRoles_default from "../../../hooks/management/agents/useGetAgentRoles.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
+import useResourceMutation_default from "../../../hooks/management/useResourceMutation.js";
+import useAccountLifecycle_default from "../../../hooks/management/useAccountLifecycle.js";
 import BaseAgentDetails_default from "./BaseAgentDetails.js";
-import { toManagementErrorMessage } from "@thunderid/browser";
+import { AgentQueryKeys, GroupQueryKeys, RoleQueryKeys, deleteAgent, getAgent, getAgentGroups, getAgentRoles, toManagementErrorMessage } from "@thunderid/browser";
 import { jsx } from "react/jsx-runtime";
 
 //#region src/components/admin/AgentDetails/AgentDetails.tsx
@@ -17,20 +17,59 @@ import { jsx } from "react/jsx-runtime";
 * <AgentDetails agentId={agentId} deletable onDeleted={() => navigate('/agents')} />
 * ```
 */
-const AgentDetails = ({ agentId, deletable = false, onDeleted, preferences,...rest }) => {
+const AgentDetails = ({ agentId, deletable = false, lifecycleActions = false, onDeleted, preferences,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
-	const agent = useGetAgent_default(agentId);
-	const groups = useGetAgentGroups_default(agentId, { limit: 100 });
-	const roles = useGetAgentRoles_default(agentId, { limit: 100 });
-	const deletion = useDeleteAgent_default({ onSuccess: onDeleted });
+	const endpoint = useManagementEndpoint_default("agents");
+	const agent = useResourceQuery_default([AgentQueryKeys.AGENT, agentId], (fetcher) => getAgent({
+		...endpoint,
+		agentId,
+		fetcher
+	}), { enabled: Boolean(agentId) });
+	const groups = useResourceQuery_default([
+		GroupQueryKeys.MEMBERSHIPS,
+		"agent",
+		agentId,
+		{ limit: 100 }
+	], (fetcher) => getAgentGroups({
+		...endpoint,
+		agentId,
+		fetcher,
+		limit: 100
+	}), { enabled: Boolean(agentId) });
+	const roles = useResourceQuery_default([
+		RoleQueryKeys.ROLE_ASSIGNMENTS,
+		"agent",
+		agentId,
+		{ limit: 100 }
+	], (fetcher) => getAgentRoles({
+		...endpoint,
+		agentId,
+		fetcher,
+		limit: 100
+	}), { enabled: Boolean(agentId) });
+	const deletion = useResourceMutation_default((id, fetcher) => deleteAgent({
+		...endpoint,
+		agentId: id,
+		fetcher
+	}), () => [[AgentQueryKeys.AGENTS]], { onSuccess: onDeleted });
+	const lifecycle = useAccountLifecycle_default({
+		enabled: lifecycleActions,
+		invalidatedKeys: [[AgentQueryKeys.AGENT, agentId], [AgentQueryKeys.AGENTS]],
+		kind: "agent",
+		status: agent.data?.status?.value,
+		subject: agentId
+	});
 	return /* @__PURE__ */ jsx(BaseAgentDetails_default, {
 		agent: agent.data,
 		groups: groups.data?.groups,
 		roles: roles.data?.roles,
 		isLoading: agent.isLoading,
-		error: toManagementErrorMessage(t, agent.error, "admin.agents.details.error") ?? toManagementErrorMessage(t, deletion.error, "admin.agents.details.delete.error"),
+		error: toManagementErrorMessage(t, agent.error, "admin.agents.details.error") ?? toManagementErrorMessage(t, deletion.error, "admin.agents.details.delete.error") ?? toManagementErrorMessage(t, lifecycle.error, "admin.common.lifecycle.error") ?? toManagementErrorMessage(t, lifecycle.loadError, "admin.common.lifecycle.load_error"),
 		isDeleting: deletion.isLoading,
 		onDelete: deletable ? () => void deletion.mutate(agentId) : void 0,
+		lifecycleActions: lifecycle.actions,
+		isRunningLifecycleAction: lifecycle.isRunning,
+		onLifecycleAction: lifecycleActions ? lifecycle.run : void 0,
 		preferences,
 		...rest
 	});

package/dist/components/admin/AgentDetails/AgentDetails.js.map

@@ -1 +1 @@
-{"version":3,"file":"AgentDetails.js","names":["AgentDetails: FC<AgentDetailsProps>","useTranslation","useGetAgent","useGetAgentGroups","useGetAgentRoles","useDeleteAgent","BaseAgentDetails"],"sources":["../../../../src/components/admin/AgentDetails/AgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseAgentDetails, {BaseAgentDetailsProps} from './BaseAgentDetails';\nimport useDeleteAgent from '../../../hooks/management/agents/useDeleteAgent';\nimport useGetAgent from '../../../hooks/management/agents/useGetAgent';\nimport useGetAgentGroups from '../../../hooks/management/agents/useGetAgentGroups';\nimport useGetAgentRoles from '../../../hooks/management/agents/useGetAgentRoles';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type AgentDetailsProps = Omit<\n  BaseAgentDetailsProps,\n  'agent' | 'error' | 'groups' | 'isDeleting' | 'isLoading' | 'onDelete' | 'roles'\n> & {\n  agentId: string;\n  /**\n   * Whether the agent can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Called after the agent has been deleted.\n   */\n  onDeleted?: () => void;\n};\n\n/**\n * Shows an agent with the groups and roles it holds, and optionally lets the signed-in user delete\n * it.\n *\n * @example\n * ```tsx\n * <AgentDetails agentId={agentId} deletable onDeleted={() => navigate('/agents')} />\n * ```\n */\nconst AgentDetails: FC<AgentDetailsProps> = ({\n  agentId,\n  deletable = false,\n  onDeleted,\n  preferences,\n  ...rest\n}: AgentDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const agent = useGetAgent(agentId);\n  const groups = useGetAgentGroups(agentId, {limit: 100});\n  const roles = useGetAgentRoles(agentId, {limit: 100});\n  const deletion = useDeleteAgent({onSuccess: onDeleted});\n\n  return (\n    <BaseAgentDetails\n      agent={agent.data}\n      groups={groups.data?.groups}\n      roles={roles.data?.roles}\n      isLoading={agent.isLoading}\n      error={\n        toManagementErrorMessage(t, agent.error, 'admin.agents.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.agents.details.delete.error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(agentId) : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default AgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAqCA,MAAMA,gBAAuC,EAC3C,SACA,YAAY,OACZ,WACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,QAAQC,oBAAY,QAAQ;CAClC,MAAM,SAASC,0BAAkB,SAAS,EAAC,OAAO,KAAI,CAAC;CACvD,MAAM,QAAQC,yBAAiB,SAAS,EAAC,OAAO,KAAI,CAAC;CACrD,MAAM,WAAWC,uBAAe,EAAC,WAAW,WAAU,CAAC;AAEvD,QACE,oBAACC;EACC,OAAO,MAAM;EACb,QAAQ,OAAO,MAAM;EACrB,OAAO,MAAM,MAAM;EACnB,WAAW,MAAM;EACjB,OACE,yBAAyB,GAAG,MAAM,OAAO,6BAA6B,IACtE,yBAAyB,GAAG,SAAS,OAAO,oCAAoC;EAElF,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,QAAQ,GAAG;EACrD;EACb,GAAI;GACJ;;AAIN,2BAAe"}
+{"version":3,"file":"AgentDetails.js","names":["AgentDetails: FC<AgentDetailsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","agent: ResourceQueryResult<Agent>","useResourceQuery","groups: ResourceQueryResult<MembershipGroupListResponse>","roles: ResourceQueryResult<AgentRoleListResponse>","deletion: ResourceMutationResult<void, string>","useResourceMutation","lifecycle: AccountLifecycleState","useAccountLifecycle","BaseAgentDetails"],"sources":["../../../../src/components/admin/AgentDetails/AgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  Agent,\n  AgentQueryKeys,\n  AgentRoleListResponse,\n  GroupQueryKeys,\n  MembershipGroupListResponse,\n  RoleQueryKeys,\n  deleteAgent,\n  getAgent,\n  getAgentGroups,\n  getAgentRoles,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseAgentDetails, {BaseAgentDetailsProps} from './BaseAgentDetails';\nimport useAccountLifecycle, {AccountLifecycleState} from '../../../hooks/management/useAccountLifecycle';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type AgentDetailsProps = Omit<\n  BaseAgentDetailsProps,\n  | 'agent'\n  | 'error'\n  | 'groups'\n  | 'isDeleting'\n  | 'isLoading'\n  | 'isRunningLifecycleAction'\n  | 'lifecycleActions'\n  | 'onDelete'\n  | 'onLifecycleAction'\n  | 'roles'\n> & {\n  agentId: string;\n  /**\n   * Whether the agent can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the agent can be suspended, unsuspended and unlocked from this view. Each action runs through its\n   * administration flow and is offered only when the server configures that flow. Reading the configured\n   * flows needs a token that may read the server configuration.\n   * @default false\n   */\n  lifecycleActions?: boolean;\n  /**\n   * Called after the agent has been deleted.\n   */\n  onDeleted?: () => void;\n};\n\n/**\n * Shows an agent with the groups and roles it holds, and optionally lets the signed-in user delete\n * it.\n *\n * @example\n * ```tsx\n * <AgentDetails agentId={agentId} deletable onDeleted={() => navigate('/agents')} />\n * ```\n */\nconst AgentDetails: FC<AgentDetailsProps> = ({\n  agentId,\n  deletable = false,\n  lifecycleActions = false,\n  onDeleted,\n  preferences,\n  ...rest\n}: AgentDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const agent: ResourceQueryResult<Agent> = useResourceQuery(\n    [AgentQueryKeys.AGENT, agentId],\n    (fetcher) => getAgent({...endpoint, agentId, fetcher}),\n    {enabled: Boolean(agentId)},\n  );\n  const groups: ResourceQueryResult<MembershipGroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.MEMBERSHIPS, 'agent', agentId, {limit: 100}],\n    (fetcher) => getAgentGroups({...endpoint, agentId, fetcher, limit: 100}),\n    {enabled: Boolean(agentId)},\n  );\n  const roles: ResourceQueryResult<AgentRoleListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, 'agent', agentId, {limit: 100}],\n    (fetcher) => getAgentRoles({...endpoint, agentId, fetcher, limit: 100}),\n    {enabled: Boolean(agentId)},\n  );\n  const deletion: ResourceMutationResult<void, string> = useResourceMutation(\n    (id: string, fetcher) => deleteAgent({...endpoint, agentId: id, fetcher}),\n    () => [[AgentQueryKeys.AGENTS]],\n    {onSuccess: onDeleted},\n  );\n\n  const lifecycle: AccountLifecycleState = useAccountLifecycle({\n    enabled: lifecycleActions,\n    invalidatedKeys: [[AgentQueryKeys.AGENT, agentId], [AgentQueryKeys.AGENTS]],\n    kind: 'agent',\n    status: agent.data?.status?.value,\n    subject: agentId,\n  });\n\n  return (\n    <BaseAgentDetails\n      agent={agent.data}\n      groups={groups.data?.groups}\n      roles={roles.data?.roles}\n      isLoading={agent.isLoading}\n      error={\n        toManagementErrorMessage(t, agent.error, 'admin.agents.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.agents.details.delete.error') ??\n        toManagementErrorMessage(t, lifecycle.error, 'admin.common.lifecycle.error') ??\n        toManagementErrorMessage(t, lifecycle.loadError, 'admin.common.lifecycle.load_error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(agentId) : undefined}\n      lifecycleActions={lifecycle.actions}\n      isRunningLifecycleAction={lifecycle.isRunning}\n      onLifecycleAction={lifecycleActions ? lifecycle.run : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default AgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAiEA,MAAMA,gBAAuC,EAC3C,SACA,YAAY,OACZ,mBAAmB,OACnB,WACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,8BAAsB,SAAS;CACpE,MAAMC,QAAoCC,yBACxC,CAAC,eAAe,OAAO,QAAQ,GAC9B,YAAY,SAAS;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,EACtD,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMC,SAA2DD,yBAC/D;EAAC,eAAe;EAAa;EAAS;EAAS,EAAC,OAAO,KAAI;EAAC,GAC3D,YAAY,eAAe;EAAC,GAAG;EAAU;EAAS;EAAS,OAAO;EAAI,CAAC,EACxE,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAME,QAAoDF,yBACxD;EAAC,cAAc;EAAkB;EAAS;EAAS,EAAC,OAAO,KAAI;EAAC,GAC/D,YAAY,cAAc;EAAC,GAAG;EAAU;EAAS;EAAS,OAAO;EAAI,CAAC,EACvE,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMG,WAAiDC,6BACpD,IAAY,YAAY,YAAY;EAAC,GAAG;EAAU,SAAS;EAAI;EAAQ,CAAC,QACnE,CAAC,CAAC,eAAe,OAAO,CAAC,EAC/B,EAAC,WAAW,WAAU,CACvB;CAED,MAAMC,YAAmCC,4BAAoB;EAC3D,SAAS;EACT,iBAAiB,CAAC,CAAC,eAAe,OAAO,QAAQ,EAAE,CAAC,eAAe,OAAO,CAAC;EAC3E,MAAM;EACN,QAAQ,MAAM,MAAM,QAAQ;EAC5B,SAAS;EACV,CAAC;AAEF,QACE,oBAACC;EACC,OAAO,MAAM;EACb,QAAQ,OAAO,MAAM;EACrB,OAAO,MAAM,MAAM;EACnB,WAAW,MAAM;EACjB,OACE,yBAAyB,GAAG,MAAM,OAAO,6BAA6B,IACtE,yBAAyB,GAAG,SAAS,OAAO,oCAAoC,IAChF,yBAAyB,GAAG,UAAU,OAAO,+BAA+B,IAC5E,yBAAyB,GAAG,UAAU,WAAW,oCAAoC;EAEvF,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,QAAQ,GAAG;EAClE,kBAAkB,UAAU;EAC5B,0BAA0B,UAAU;EACpC,mBAAmB,mBAAmB,UAAU,MAAM;EACzC;EACb,GAAI;GACJ;;AAIN,2BAAe"}

package/dist/components/admin/AgentDetails/BaseAgentDetails.d.ts

@@ -1,4 +1,4 @@
-import { Agent, MembershipGroup, Preferences } from '@thunderid/browser';
+import { AccountLifecycleAction, Agent, MembershipGroup, Preferences } from '@thunderid/browser';
 import { FC, ReactNode } from 'react';
 /**
  * What {@link BaseAgentDetails} hands its `children` render function, so the agent can be shown with any UI.
@@ -9,10 +9,19 @@ export interface BaseAgentDetailsRenderProps {
     groups: MembershipGroup[];
     isDeleting: boolean;
     isLoading: boolean;
+    isRunningLifecycleAction: boolean;
+    /**
+     * The account lifecycle actions offered for the agent. Empty when none is allowed.
+     */
+    lifecycleActions: AccountLifecycleAction[];
     /**
      * Deletes the agent. Undefined when deletion is not allowed, including for read-only agents.
      */
     onDelete?: () => void;
+    /**
+     * Runs an account lifecycle action, with the operator's note on a suspension. Undefined when none is allowed.
+     */
+    onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;
     roles: string[];
 }
 export interface BaseAgentDetailsProps {
@@ -34,10 +43,21 @@ export interface BaseAgentDetailsProps {
     groups?: MembershipGroup[];
     isDeleting?: boolean;
     isLoading?: boolean;
+    isRunningLifecycleAction?: boolean;
+    /**
+     * The account lifecycle actions to offer (suspend, unsuspend, unlock), shown only with `onLifecycleAction`. They change
+     * only runtime state, so they apply to read-only agents too.
+     */
+    lifecycleActions?: AccountLifecycleAction[];
     /**
      * Deletes the agent. The delete action is hidden when omitted.
      */
     onDelete?: () => void;
+    /**
+     * Runs an account lifecycle action. Suspending and unsuspending ask for confirmation first, and a
+     * suspension takes an optional operator note.
+     */
+    onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;
     preferences?: Preferences;
     /**
      * The names of the roles the agent holds, directly or through its groups.

package/dist/components/admin/AgentDetails/BaseAgentDetails.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BaseAgentDetails.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/AgentDetails/BaseAgentDetails.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAC,KAAK,EAAE,eAAe,EAAE,WAAW,EAAC,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAC,EAAE,EAAgB,SAAS,EAAC,MAAM,OAAO,CAAC;AASlD;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,2BAA2B,KAAK,SAAS,CAAC;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;OAEG;IACH,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;GAGG;AACH,QAAA,MAAM,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CA4G/C,CAAC;AAEF,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"BaseAgentDetails.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/AgentDetails/BaseAgentDetails.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAC,sBAAsB,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAC,MAAM,oBAAoB,CAAC;AAC/F,OAAO,EAAC,EAAE,EAAgB,SAAS,EAAC,MAAM,OAAO,CAAC;AAUlD;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,wBAAwB,EAAE,OAAO,CAAC;IAClC;;OAEG;IACH,gBAAgB,EAAE,sBAAsB,EAAE,CAAC;IAC3C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB;;OAEG;IACH,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,2BAA2B,KAAK,SAAS,CAAC;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;OAEG;IACH,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC5C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;GAGG;AACH,QAAA,MAAM,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CA+H/C,CAAC;AAEF,eAAe,gBAAgB,CAAC"}

package/dist/components/admin/AgentDetails/BaseAgentDetails.js

@@ -4,6 +4,7 @@ import Alert_default from "../../primitives/Alert/Alert.js";
 import CopyableText_default from "../../primitives/CopyableText/CopyableText.js";
 import useAdminPartStyles_default from "../shared/useAdminPartStyles.js";
 import AdminSection_default from "../shared/AdminSection.js";
+import { AccessStatusBadge, AccountLifecycleButtons } from "../shared/AccountLifecycleParts.js";
 import { ChipList, ConfirmButton, DetailList, Panel } from "../shared/AdminParts.js";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 
@@ -12,7 +13,7 @@ import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 * Shows an agent's type, owner, client and the groups and roles it holds. Holds no data of its own:
 * pass the agent and handle deletion.
 */
-const BaseAgentDetails = ({ actions, agent, children, className, error = null, groups = [], isDeleting = false, isLoading = false, onDelete, preferences, roles = [] }) => {
+const BaseAgentDetails = ({ actions, agent, children, className, error = null, groups = [], isDeleting = false, isLoading = false, isRunningLifecycleAction = false, lifecycleActions = [], onDelete, onLifecycleAction, preferences, roles = [] }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
 	const styles = useAdminPartStyles_default();
 	if (children) return /* @__PURE__ */ jsx("div", {
@@ -23,7 +24,10 @@ const BaseAgentDetails = ({ actions, agent, children, className, error = null, g
 			groups,
 			isDeleting,
 			isLoading,
+			isRunningLifecycleAction,
+			lifecycleActions: onLifecycleAction && agent ? lifecycleActions : [],
 			onDelete: agent && !agent.isReadOnly ? onDelete : void 0,
+			onLifecycleAction: agent ? onLifecycleAction : void 0,
 			roles
 		})
 	});
@@ -65,6 +69,10 @@ const BaseAgentDetails = ({ actions, agent, children, className, error = null, g
 			value: agent.ouHandle ?? agent.ouId
 		}
 	];
+	if (agent.status) details.push({
+		label: t("admin.common.columns.status"),
+		value: /* @__PURE__ */ jsx(AccessStatusBadge, { status: agent.status.value })
+	});
 	if (agent.clientId) details.push({
 		label: t("admin.agents.list.columns.client_id"),
 		value: /* @__PURE__ */ jsx(CopyableText_default, { value: agent.clientId })
@@ -75,12 +83,22 @@ const BaseAgentDetails = ({ actions, agent, children, className, error = null, g
 		title: agent.name,
 		description: agent.description,
 		preferences,
-		actions: /* @__PURE__ */ jsxs(Fragment, { children: [actions, onDelete && !agent.isReadOnly && /* @__PURE__ */ jsx(ConfirmButton, {
-			confirmText: t("admin.agents.details.delete.confirm", { name: agent.name }),
-			isLoading: isDeleting,
-			onConfirm: onDelete,
-			children: t("admin.agents.details.delete.action")
-		})] }),
+		actions: /* @__PURE__ */ jsxs(Fragment, { children: [
+			actions,
+			onLifecycleAction && /* @__PURE__ */ jsx(AccountLifecycleButtons, {
+				actions: lifecycleActions,
+				collectsOperatorNote: true,
+				isRunning: isRunningLifecycleAction,
+				name: agent.name,
+				onAction: onLifecycleAction
+			}),
+			onDelete && !agent.isReadOnly && /* @__PURE__ */ jsx(ConfirmButton, {
+				confirmText: t("admin.agents.details.delete.confirm", { name: agent.name }),
+				isLoading: isDeleting,
+				onConfirm: onDelete,
+				children: t("admin.agents.details.delete.action")
+			})
+		] }),
 		children: [
 			error && /* @__PURE__ */ jsx(Alert_default, {
 				variant: "error",