@thunderid/react 1.7.0 → 1.9.0

package/dist/components/admin/RolePermissions/RolePermissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RolePermissions.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RolePermissions/RolePermissions.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AACvC,OAA4B,EAAC,wBAAwB,EAAC,MAAM,uBAAuB,CAAC;AAIpF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,wBAAwB,EAAE,OAAO,GAAG,WAAW,GAAG,aAAa,CAAC,GAAG;IACzG,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAiB7C,CAAC;AAEF,eAAe,eAAe,CAAC"}
+{"version":3,"file":"RolePermissions.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RolePermissions/RolePermissions.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AACvC,OAA4B,EAAC,wBAAwB,EAAC,MAAM,uBAAuB,CAAC;AAKpF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,wBAAwB,EAAE,OAAO,GAAG,WAAW,GAAG,aAAa,CAAC,GAAG;IACzG,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAsB7C,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/components/admin/RolePermissions/RolePermissions.js

@@ -1,7 +1,8 @@
 import useTranslation_default from "../../../hooks/useTranslation.js";
-import useGetRole_default from "../../../hooks/management/roles/useGetRole.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
 import BaseRolePermissions_default from "./BaseRolePermissions.js";
-import { toManagementErrorMessage } from "@thunderid/browser";
+import { RoleQueryKeys, getRole, toManagementErrorMessage } from "@thunderid/browser";
 import { jsx } from "react/jsx-runtime";
 
 //#region src/components/admin/RolePermissions/RolePermissions.tsx
@@ -15,7 +16,12 @@ import { jsx } from "react/jsx-runtime";
 */
 const RolePermissions = ({ preferences, roleId,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
-	const role = useGetRole_default(roleId);
+	const endpoint = useManagementEndpoint_default("roles");
+	const role = useResourceQuery_default([RoleQueryKeys.ROLE, roleId], (fetcher) => getRole({
+		...endpoint,
+		fetcher,
+		roleId
+	}), { enabled: Boolean(roleId) });
 	return /* @__PURE__ */ jsx(BaseRolePermissions_default, {
 		permissions: role.data?.permissions ?? [],
 		isLoading: role.isLoading,

package/dist/components/admin/RolePermissions/RolePermissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"RolePermissions.js","names":["RolePermissions: FC<RolePermissionsProps>","useTranslation","useGetRole","BaseRolePermissions"],"sources":["../../../../src/components/admin/RolePermissions/RolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRolePermissions, {BaseRolePermissionsProps} from './BaseRolePermissions';\nimport useGetRole from '../../../hooks/management/roles/useGetRole';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RolePermissionsProps = Omit<BaseRolePermissionsProps, 'error' | 'isLoading' | 'permissions'> & {\n  roleId: string;\n};\n\n/**\n * Shows the permissions a role grants.\n *\n * @example\n * ```tsx\n * <RolePermissions roleId={roleId} />\n * ```\n */\nconst RolePermissions: FC<RolePermissionsProps> = ({\n  preferences,\n  roleId,\n  ...rest\n}: RolePermissionsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const role = useGetRole(roleId);\n\n  return (\n    <BaseRolePermissions\n      permissions={role.data?.permissions ?? []}\n      isLoading={role.isLoading}\n      error={toManagementErrorMessage(t, role.error, 'admin.roles.permissions.error')}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RolePermissions;\n"],"mappings":";;;;;;;;;;;;;;;AAqBA,MAAMA,mBAA6C,EACjD,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,OAAOC,mBAAW,OAAO;AAE/B,QACE,oBAACC;EACC,aAAa,KAAK,MAAM,eAAe,EAAE;EACzC,WAAW,KAAK;EAChB,OAAO,yBAAyB,GAAG,KAAK,OAAO,gCAAgC;EAClE;EACb,GAAI;GACJ;;AAIN,8BAAe"}
+{"version":3,"file":"RolePermissions.js","names":["RolePermissions: FC<RolePermissionsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","role: ResourceQueryResult<Role>","useResourceQuery","BaseRolePermissions"],"sources":["../../../../src/components/admin/RolePermissions/RolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Role, RoleQueryKeys, getRole, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRolePermissions, {BaseRolePermissionsProps} from './BaseRolePermissions';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RolePermissionsProps = Omit<BaseRolePermissionsProps, 'error' | 'isLoading' | 'permissions'> & {\n  roleId: string;\n};\n\n/**\n * Shows the permissions a role grants.\n *\n * @example\n * ```tsx\n * <RolePermissions roleId={roleId} />\n * ```\n */\nconst RolePermissions: FC<RolePermissionsProps> = ({\n  preferences,\n  roleId,\n  ...rest\n}: RolePermissionsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const role: ResourceQueryResult<Role> = useResourceQuery(\n    [RoleQueryKeys.ROLE, roleId],\n    (fetcher) => getRole({...endpoint, fetcher, roleId}),\n    {enabled: Boolean(roleId)},\n  );\n\n  return (\n    <BaseRolePermissions\n      permissions={role.data?.permissions ?? []}\n      isLoading={role.isLoading}\n      error={toManagementErrorMessage(t, role.error, 'admin.roles.permissions.error')}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RolePermissions;\n"],"mappings":";;;;;;;;;;;;;;;;AAsBA,MAAMA,mBAA6C,EACjD,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,8BAAsB,QAAQ;CACnE,MAAMC,OAAkCC,yBACtC,CAAC,cAAc,MAAM,OAAO,GAC3B,YAAY,QAAQ;EAAC,GAAG;EAAU;EAAS;EAAO,CAAC,EACpD,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;AAED,QACE,oBAACC;EACC,aAAa,KAAK,MAAM,eAAe,EAAE;EACzC,WAAW,KAAK;EAChB,OAAO,yBAAyB,GAAG,KAAK,OAAO,gCAAgC;EAClE;EACb,GAAI;GACJ;;AAIN,8BAAe"}

package/dist/components/admin/UserCreate/UserCreate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UserCreate.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/UserCreate/UserCreate.tsx"],"names":[],"mappings":"AAGA,OAAO,EAA2B,WAAW,EAAgC,MAAM,oBAAoB,CAAC;AACxG,OAAO,EAAC,EAAE,EAAwB,MAAM,OAAO,CAAC;AAChD,OAAuB,EAAC,mBAAmB,EAAuB,MAAM,kBAAkB,CAAC;AAI3F,OAAmB,EAAC,eAAe,EAAC,MAAM,kCAAkC,CAAC;AAG7E,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,EAAE,OAAO,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,CAAC,GAAG;IAC7G;;OAEG;IACH,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IACxC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;;;;;;GASG;AACH,QAAA,MAAM,UAAU,EAAE,EAAE,CAAC,eAAe,CA8CnC,CAAC;AAEF,eAAe,UAAU,CAAC"}
+{"version":3,"file":"UserCreate.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/UserCreate/UserCreate.tsx"],"names":[],"mappings":"AAGA,OAAO,EAEL,WAAW,EAQZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,EAAE,EAAwB,MAAM,OAAO,CAAC;AAChD,OAAuB,EAAC,mBAAmB,EAAuB,MAAM,kBAAkB,CAAC;AAK3F,OAAmB,EAAC,eAAe,EAAC,MAAM,kCAAkC,CAAC;AAG7E,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,EAAE,OAAO,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,CAAC,GAAG;IAC7G;;OAEG;IACH,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IACxC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;;;;;;GASG;AACH,QAAA,MAAM,UAAU,EAAE,EAAE,CAAC,eAAe,CAwDnC,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/components/admin/UserCreate/UserCreate.js

@@ -1,10 +1,11 @@
 import useTranslation_default from "../../../hooks/useTranslation.js";
-import useCreateUser_default from "../../../hooks/management/users/useCreateUser.js";
-import useGetUserTypes_default from "../../../hooks/management/users/useGetUserTypes.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
 import InviteUser_default from "../../auth/InviteUser/InviteUser.js";
 import BaseUserCreate_default from "./BaseUserCreate.js";
+import useResourceMutation_default from "../../../hooks/management/useResourceMutation.js";
 import useDefaultOuId_default from "../shared/useDefaultOuId.js";
-import { toManagementErrorMessage } from "@thunderid/browser";
+import { UserQueryKeys, createUser, getUserTypes, toManagementErrorMessage } from "@thunderid/browser";
 import { useMemo } from "react";
 import { jsx } from "react/jsx-runtime";
 
@@ -22,8 +23,18 @@ import { jsx } from "react/jsx-runtime";
 const UserCreate = ({ inviteProps, mode = "api", onCreated, ouId, preferences,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
 	const resolvedOuId = useDefaultOuId_default(ouId);
-	const { data: userTypes } = useGetUserTypes_default({ limit: 100 }, { enabled: mode === "api" });
-	const { error, isLoading, mutate } = useCreateUser_default({ onSuccess: onCreated });
+	const usersEndpoint = useManagementEndpoint_default("users");
+	const userTypesEndpoint = useManagementEndpoint_default("userTypes");
+	const { data: userTypes } = useResourceQuery_default([UserQueryKeys.USER_TYPES, { limit: 100 }], (fetcher) => getUserTypes({
+		...userTypesEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: mode === "api" });
+	const { error, isLoading, mutate } = useResourceMutation_default((payload, fetcher) => createUser({
+		...usersEndpoint,
+		fetcher,
+		payload
+	}), () => [[UserQueryKeys.USERS]], { onSuccess: onCreated });
 	const options = useMemo(() => (userTypes?.types ?? []).map((userType) => ({
 		label: userType.displayName ?? userType.handle,
 		value: userType.handle

package/dist/components/admin/UserCreate/UserCreate.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserCreate.js","names":["UserCreate: FC<UserCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","useGetUserTypes","useCreateUser","options: SelectOption[]","InviteUser","BaseUserCreate"],"sources":["../../../../src/components/admin/UserCreate/UserCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage, ManagedUser, ManagedUserType, SelectOption} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseUserCreate, {BaseUserCreateProps, UserCreateSubmission} from './BaseUserCreate';\nimport useCreateUser from '../../../hooks/management/users/useCreateUser';\nimport useGetUserTypes from '../../../hooks/management/users/useGetUserTypes';\nimport useTranslation from '../../../hooks/useTranslation';\nimport InviteUser, {InviteUserProps} from '../../auth/InviteUser/InviteUser';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type UserCreateProps = Omit<BaseUserCreateProps, 'error' | 'isSubmitting' | 'onSubmit' | 'userTypes'> & {\n  /**\n   * Props passed to `InviteUser` when `mode` is `invite`.\n   */\n  inviteProps?: InviteUserProps;\n  /**\n   * How the user is added.\n   * - `api` creates the user directly through the management API.\n   * - `invite` runs the invite user flow, which asks the person to finish setting up their account.\n   *   Only available where flows run.\n   * @default 'api'\n   */\n  mode?: 'api' | 'invite';\n  /**\n   * Called with the created user. Not called in `invite` mode, where the flow reports progress\n   * through `inviteProps.onFlowChange`.\n   */\n  onCreated?: (user: ManagedUser) => void;\n  /**\n   * Organization unit the user is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Adds a user, either directly through the management API or by inviting them through the invite\n * user flow.\n *\n * @example\n * ```tsx\n * <UserCreate onCreated={(user) => navigate(`/users/${user.id}`)} />\n * <UserCreate mode=\"invite\" />\n * ```\n */\nconst UserCreate: FC<UserCreateProps> = ({\n  inviteProps,\n  mode = 'api',\n  onCreated,\n  ouId,\n  preferences,\n  ...rest\n}: UserCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const {data: userTypes} = useGetUserTypes({limit: 100}, {enabled: mode === 'api'});\n  const {error, isLoading, mutate} = useCreateUser({onSuccess: onCreated});\n\n  const options: SelectOption[] = useMemo(\n    () =>\n      (userTypes?.types ?? []).map((userType: ManagedUserType) => ({\n        label: userType.displayName ?? userType.handle,\n        value: userType.handle,\n      })),\n    [userTypes],\n  );\n\n  if (mode === 'invite') {\n    return <InviteUser {...inviteProps} />;\n  }\n\n  const handleSubmit = ({attributes, type}: UserCreateSubmission): void => {\n    if (!resolvedOuId) {\n      return;\n    }\n\n    void mutate({attributes, ouId: resolvedOuId, type});\n  };\n\n  return (\n    <BaseUserCreate\n      userTypes={options}\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.users.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA8CA,MAAMA,cAAmC,EACvC,aACA,OAAO,OACP,WACA,MACA,YACA,GAAG,WACgC;CACnC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,uBAAe,KAAK;CAC7D,MAAM,EAAC,MAAM,cAAaC,wBAAgB,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,SAAS,OAAM,CAAC;CAClF,MAAM,EAAC,OAAO,WAAW,WAAUC,sBAAc,EAAC,WAAW,WAAU,CAAC;CAExE,MAAMC,UAA0B,eAE3B,WAAW,SAAS,EAAE,EAAE,KAAK,cAA+B;EAC3D,OAAO,SAAS,eAAe,SAAS;EACxC,OAAO,SAAS;EACjB,EAAE,EACL,CAAC,UAAU,CACZ;AAED,KAAI,SAAS,SACX,QAAO,oBAACC,sBAAW,GAAI,cAAe;CAGxC,MAAM,gBAAgB,EAAC,YAAY,WAAsC;AACvE,MAAI,CAAC,aACH;AAGF,EAAK,OAAO;GAAC;GAAY,MAAM;GAAc;GAAK,CAAC;;AAGrD,QACE,oBAACC;EACC,WAAW;EACX,UAAU;EACV,cAAc;EACd,OACE,eAAe,yBAAyB,GAAG,OAAO,2BAA2B,GAAG,EAAE,4BAA4B;EAEnG;EACb,GAAI;GACJ;;AAIN,yBAAe"}
+{"version":3,"file":"UserCreate.js","names":["UserCreate: FC<UserCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","usersEndpoint: ManagementEndpoint","useManagementEndpoint","userTypesEndpoint: ManagementEndpoint","useResourceQuery","useResourceMutation","options: SelectOption[]","InviteUser","BaseUserCreate"],"sources":["../../../../src/components/admin/UserCreate/UserCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  CreateManagedUserRequest,\n  ManagedUser,\n  ManagedUserType,\n  ManagedUserTypeListResponse,\n  SelectOption,\n  UserQueryKeys,\n  createUser,\n  getUserTypes,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseUserCreate, {BaseUserCreateProps, UserCreateSubmission} from './BaseUserCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport InviteUser, {InviteUserProps} from '../../auth/InviteUser/InviteUser';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type UserCreateProps = Omit<BaseUserCreateProps, 'error' | 'isSubmitting' | 'onSubmit' | 'userTypes'> & {\n  /**\n   * Props passed to `InviteUser` when `mode` is `invite`.\n   */\n  inviteProps?: InviteUserProps;\n  /**\n   * How the user is added.\n   * - `api` creates the user directly through the management API.\n   * - `invite` runs the invite user flow, which asks the person to finish setting up their account.\n   *   Only available where flows run.\n   * @default 'api'\n   */\n  mode?: 'api' | 'invite';\n  /**\n   * Called with the created user. Not called in `invite` mode, where the flow reports progress\n   * through `inviteProps.onFlowChange`.\n   */\n  onCreated?: (user: ManagedUser) => void;\n  /**\n   * Organization unit the user is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Adds a user, either directly through the management API or by inviting them through the invite\n * user flow.\n *\n * @example\n * ```tsx\n * <UserCreate onCreated={(user) => navigate(`/users/${user.id}`)} />\n * <UserCreate mode=\"invite\" />\n * ```\n */\nconst UserCreate: FC<UserCreateProps> = ({\n  inviteProps,\n  mode = 'api',\n  onCreated,\n  ouId,\n  preferences,\n  ...rest\n}: UserCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const userTypesEndpoint: ManagementEndpoint = useManagementEndpoint('userTypes');\n  const {data: userTypes}: ResourceQueryResult<ManagedUserTypeListResponse> = useResourceQuery(\n    [UserQueryKeys.USER_TYPES, {limit: 100}],\n    (fetcher) => getUserTypes({...userTypesEndpoint, fetcher, limit: 100}),\n    {enabled: mode === 'api'},\n  );\n  const {error, isLoading, mutate}: ResourceMutationResult<ManagedUser, CreateManagedUserRequest> = useResourceMutation(\n    (payload: CreateManagedUserRequest, fetcher) => createUser({...usersEndpoint, fetcher, payload}),\n    () => [[UserQueryKeys.USERS]],\n    {onSuccess: onCreated},\n  );\n\n  const options: SelectOption[] = useMemo(\n    () =>\n      (userTypes?.types ?? []).map((userType: ManagedUserType) => ({\n        label: userType.displayName ?? userType.handle,\n        value: userType.handle,\n      })),\n    [userTypes],\n  );\n\n  if (mode === 'invite') {\n    return <InviteUser {...inviteProps} />;\n  }\n\n  const handleSubmit = ({attributes, type}: UserCreateSubmission): void => {\n    if (!resolvedOuId) {\n      return;\n    }\n\n    void mutate({attributes, ouId: resolvedOuId, type});\n  };\n\n  return (\n    <BaseUserCreate\n      userTypes={options}\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.users.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAyDA,MAAMA,cAAmC,EACvC,aACA,OAAO,OACP,WACA,MACA,YACA,GAAG,WACgC;CACnC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,uBAAe,KAAK;CAC7D,MAAMC,gBAAoCC,8BAAsB,QAAQ;CACxE,MAAMC,oBAAwCD,8BAAsB,YAAY;CAChF,MAAM,EAAC,MAAM,cAA+DE,yBAC1E,CAAC,cAAc,YAAY,EAAC,OAAO,KAAI,CAAC,GACvC,YAAY,aAAa;EAAC,GAAG;EAAmB;EAAS,OAAO;EAAI,CAAC,EACtE,EAAC,SAAS,SAAS,OAAM,CAC1B;CACD,MAAM,EAAC,OAAO,WAAW,WAAyEC,6BAC/F,SAAmC,YAAY,WAAW;EAAC,GAAG;EAAe;EAAS;EAAQ,CAAC,QAC1F,CAAC,CAAC,cAAc,MAAM,CAAC,EAC7B,EAAC,WAAW,WAAU,CACvB;CAED,MAAMC,UAA0B,eAE3B,WAAW,SAAS,EAAE,EAAE,KAAK,cAA+B;EAC3D,OAAO,SAAS,eAAe,SAAS;EACxC,OAAO,SAAS;EACjB,EAAE,EACL,CAAC,UAAU,CACZ;AAED,KAAI,SAAS,SACX,QAAO,oBAACC,sBAAW,GAAI,cAAe;CAGxC,MAAM,gBAAgB,EAAC,YAAY,WAAsC;AACvE,MAAI,CAAC,aACH;AAGF,EAAK,OAAO;GAAC;GAAY,MAAM;GAAc;GAAK,CAAC;;AAGrD,QACE,oBAACC;EACC,WAAW;EACX,UAAU;EACV,cAAc;EACd,OACE,eAAe,yBAAyB,GAAG,OAAO,2BAA2B,GAAG,EAAE,4BAA4B;EAEnG;EACb,GAAI;GACJ;;AAIN,yBAAe"}

package/dist/components/admin/UserDetails/BaseUserDetails.d.ts

@@ -1,4 +1,4 @@
-import { ManagedUser, MembershipGroup, Preferences } from '@thunderid/browser';
+import { AccountLifecycleAction, ManagedUser, MembershipGroup, Preferences } from '@thunderid/browser';
 import { FC, ReactNode } from 'react';
 /**
  * What {@link BaseUserDetails} hands its `children` render function, so the user can be shown with any UI.
@@ -16,11 +16,21 @@ export interface BaseUserDetailsRenderProps {
     groups: MembershipGroup[];
     isDeleting: boolean;
     isLoading: boolean;
+    isRunningLifecycleAction: boolean;
     isUpdating: boolean;
+    /**
+     * The account lifecycle actions offered for the user. Empty when none is allowed.
+     */
+    lifecycleActions: AccountLifecycleAction[];
     /**
      * Deletes the user. Undefined when deletion is not allowed, including for read-only users.
      */
     onDelete?: () => void;
+    /**
+     * Runs an account lifecycle action, with the operator's note on a suspension. Undefined when none is
+     * allowed.
+     */
+    onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;
     /**
      * Saves the given attributes. Undefined when editing is not allowed, including for read-only users.
      */
@@ -50,11 +60,22 @@ export interface BaseUserDetailsProps {
     hiddenAttributes?: string[];
     isDeleting?: boolean;
     isLoading?: boolean;
+    isRunningLifecycleAction?: boolean;
     isUpdating?: boolean;
+    /**
+     * The account lifecycle actions to offer (suspend, unsuspend, unlock), shown only with
+     * `onLifecycleAction`. They change only runtime state, so they apply to read-only users too.
+     */
+    lifecycleActions?: AccountLifecycleAction[];
     /**
      * Deletes the user. The delete action is hidden when omitted.
      */
     onDelete?: () => void;
+    /**
+     * Runs an account lifecycle action. Suspending and unsuspending ask for confirmation first, and a
+     * suspension takes an optional operator note.
+     */
+    onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;
     /**
      * Saves edited attributes. Text attributes become editable only when set. Receives every
      * attribute, edited or not.

package/dist/components/admin/UserDetails/BaseUserDetails.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BaseUserDetails.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/UserDetails/BaseUserDetails.tsx"],"names":[],"mappings":"AAGA,OAAO,EAA6B,WAAW,EAAE,eAAe,EAAE,WAAW,EAAC,MAAM,oBAAoB,CAAC;AACzG,OAAO,EAAc,EAAE,EAAgB,SAAS,EAAW,MAAM,OAAO,CAAC;AAWzE;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB;;OAEG;IACH,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACzD,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,0BAA0B,KAAK,SAAS,CAAC;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;OAEG;IACH,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACzD,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAUD;;;GAGG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAqK7C,CAAC;AAEF,eAAe,eAAe,CAAC"}
+{"version":3,"file":"BaseUserDetails.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/UserDetails/BaseUserDetails.tsx"],"names":[],"mappings":"AAGA,OAAO,EACL,sBAAsB,EAEtB,WAAW,EACX,eAAe,EACf,WAAW,EACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAc,EAAE,EAAgB,SAAS,EAAW,MAAM,OAAO,CAAC;AAYzE;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,wBAAwB,EAAE,OAAO,CAAC;IAClC,UAAU,EAAE,OAAO,CAAC;IACpB;;OAEG;IACH,gBAAgB,EAAE,sBAAsB,EAAE,CAAC;IAC3C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF;;OAEG;IACH,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACzD,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,0BAA0B,KAAK,SAAS,CAAC;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;OAEG;IACH,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC5C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpF;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACzD,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAUD;;;GAGG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAqL7C,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/components/admin/UserDetails/BaseUserDetails.js

@@ -6,6 +6,7 @@ import TextField_default from "../../primitives/TextField/TextField.js";
 import { Avatar } from "../../primitives/Avatar/Avatar.js";
 import useAdminPartStyles_default from "../shared/useAdminPartStyles.js";
 import AdminSection_default from "../shared/AdminSection.js";
+import { AccessStatusBadge, AccountLifecycleButtons } from "../shared/AccountLifecycleParts.js";
 import { ChipList, ConfirmButton, DetailList, Panel } from "../shared/AdminParts.js";
 import { resolveManagedIdentityName } from "@thunderid/browser";
 import { useState } from "react";
@@ -20,7 +21,7 @@ const stringify = (value) => {
 * Shows a user's attributes, type, organization unit and groups. Holds no data of its own: pass the
 * user and handle deletion.
 */
-const BaseUserDetails = ({ actions, children, className, error = null, groups = [], hiddenAttributes = ["password"], isDeleting = false, isLoading = false, isUpdating = false, onDelete, onUpdate, preferences, user }) => {
+const BaseUserDetails = ({ actions, children, className, error = null, groups = [], hiddenAttributes = ["password"], isDeleting = false, isLoading = false, isRunningLifecycleAction = false, isUpdating = false, lifecycleActions = [], onDelete, onLifecycleAction, onUpdate, preferences, user }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
 	const styles = useAdminPartStyles_default();
 	const [draft, setDraft] = useState(null);
@@ -35,8 +36,11 @@ const BaseUserDetails = ({ actions, children, className, error = null, groups =
 				groups,
 				isDeleting,
 				isLoading,
+				isRunningLifecycleAction,
 				isUpdating,
+				lifecycleActions: onLifecycleAction && user ? lifecycleActions : [],
 				onDelete: isWritable ? onDelete : void 0,
+				onLifecycleAction: user ? onLifecycleAction : void 0,
 				onUpdate: isWritable ? onUpdate : void 0,
 				user
 			})
@@ -75,12 +79,22 @@ const BaseUserDetails = ({ actions, children, className, error = null, groups =
 		title: displayName,
 		description: t("admin.users.details.subtitle", { type: user.type }),
 		preferences,
-		actions: /* @__PURE__ */ jsxs(Fragment$1, { children: [actions, onDelete && !user.isReadOnly && /* @__PURE__ */ jsx(ConfirmButton, {
-			confirmText: t("admin.users.details.delete.confirm", { name: displayName }),
-			isLoading: isDeleting,
-			onConfirm: onDelete,
-			children: t("admin.users.details.delete.action")
-		})] }),
+		actions: /* @__PURE__ */ jsxs(Fragment$1, { children: [
+			actions,
+			onLifecycleAction && /* @__PURE__ */ jsx(AccountLifecycleButtons, {
+				actions: lifecycleActions,
+				collectsOperatorNote: true,
+				isRunning: isRunningLifecycleAction,
+				name: displayName,
+				onAction: onLifecycleAction
+			}),
+			onDelete && !user.isReadOnly && /* @__PURE__ */ jsx(ConfirmButton, {
+				confirmText: t("admin.users.details.delete.confirm", { name: displayName }),
+				isLoading: isDeleting,
+				onConfirm: onDelete,
+				children: t("admin.users.details.delete.action")
+			})
+		] }),
 		children: [
 			error && /* @__PURE__ */ jsx(Alert_default, {
 				variant: "error",
@@ -89,13 +103,17 @@ const BaseUserDetails = ({ actions, children, className, error = null, groups =
 			}),
 			/* @__PURE__ */ jsxs("div", {
 				className: styles["row"],
-				children: [/* @__PURE__ */ jsx(Avatar, {
-					name: displayName,
-					size: 48
-				}), /* @__PURE__ */ jsx("span", {
-					className: styles["muted"],
-					children: user.ouHandle ?? user.ouId
-				})]
+				children: [
+					/* @__PURE__ */ jsx(Avatar, {
+						name: displayName,
+						size: 48
+					}),
+					/* @__PURE__ */ jsx("span", {
+						className: styles["muted"],
+						children: user.ouHandle ?? user.ouId
+					}),
+					/* @__PURE__ */ jsx(AccessStatusBadge, { status: user.status?.value })
+				]
 			}),
 			/* @__PURE__ */ jsx(Panel, {
 				title: t("admin.users.details.attributes"),

package/dist/components/admin/UserDetails/BaseUserDetails.js.map

@@ -1 +1 @@
-{"version":3,"file":"BaseUserDetails.js","names":["BaseUserDetails: FC<BaseUserDetailsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","isWritable: boolean","AdminSection","Spinner","Alert","displayName: string","attributes: [string, unknown][]","editableAttributes: [string, string][]","Button","TextField"],"sources":["../../../../src/components/admin/UserDetails/BaseUserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {resolveManagedIdentityName, ManagedUser, MembershipGroup, Preferences} from '@thunderid/browser';\nimport {ChangeEvent, FC, ReactElement, ReactNode, useState} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport {Avatar} from '../../primitives/Avatar/Avatar';\nimport Button from '../../primitives/Button/Button';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport TextField from '../../primitives/TextField/TextField';\nimport {ChipList, ConfirmButton, DetailList, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * What {@link BaseUserDetails} hands its `children` render function, so the user can be shown with any UI.\n */\nexport interface BaseUserDetailsRenderProps {\n  /**\n   * The user's attributes, without the hidden ones.\n   */\n  attributes: Record<string, unknown>;\n  /**\n   * The user's display name, or an empty string while there is no user.\n   */\n  displayName: string;\n  error: string | null;\n  groups: MembershipGroup[];\n  isDeleting: boolean;\n  isLoading: boolean;\n  isUpdating: boolean;\n  /**\n   * Deletes the user. Undefined when deletion is not allowed, including for read-only users.\n   */\n  onDelete?: () => void;\n  /**\n   * Saves the given attributes. Undefined when editing is not allowed, including for read-only users.\n   */\n  onUpdate?: (attributes: Record<string, unknown>) => void;\n  user?: ManagedUser;\n}\n\nexport interface BaseUserDetailsProps {\n  /**\n   * Controls rendered next to the user's name.\n   */\n  actions?: ReactNode;\n  /**\n   * Renders custom UI in place of the default view. Receives the user, their visible attributes and\n   * groups, the loading and error state, and the delete and update handlers.\n   */\n  children?: (props: BaseUserDetailsRenderProps) => ReactNode;\n  className?: string;\n  error?: string | null;\n  /**\n   * The groups the user belongs to.\n   */\n  groups?: MembershipGroup[];\n  /**\n   * Attribute names that are never shown, such as credentials.\n   * @default ['password']\n   */\n  hiddenAttributes?: string[];\n  isDeleting?: boolean;\n  isLoading?: boolean;\n  isUpdating?: boolean;\n  /**\n   * Deletes the user. The delete action is hidden when omitted.\n   */\n  onDelete?: () => void;\n  /**\n   * Saves edited attributes. Text attributes become editable only when set. Receives every\n   * attribute, edited or not.\n   */\n  onUpdate?: (attributes: Record<string, unknown>) => void;\n  preferences?: Preferences;\n  user?: ManagedUser;\n}\n\nconst stringify = (value: unknown): string => {\n  if (value === null || value === undefined) {\n    return '';\n  }\n\n  return typeof value === 'object' ? JSON.stringify(value) : String(value as string | number | boolean);\n};\n\n/**\n * Shows a user's attributes, type, organization unit and groups. Holds no data of its own: pass the\n * user and handle deletion.\n */\nconst BaseUserDetails: FC<BaseUserDetailsProps> = ({\n  actions,\n  children,\n  className,\n  error = null,\n  groups = [],\n  hiddenAttributes = ['password'],\n  isDeleting = false,\n  isLoading = false,\n  isUpdating = false,\n  onDelete,\n  onUpdate,\n  preferences,\n  user,\n}: BaseUserDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n  const [draft, setDraft] = useState<Record<string, string> | null>(null);\n\n  if (children) {\n    const isWritable: boolean = Boolean(user) && !user?.isReadOnly;\n\n    return (\n      <div className={className}>\n        {children({\n          attributes: Object.fromEntries(\n            Object.entries(user?.attributes ?? {}).filter(\n              ([name]: [string, unknown]) => !hiddenAttributes.includes(name),\n            ),\n          ),\n          displayName: user ? resolveManagedIdentityName(user) : '',\n          error,\n          groups,\n          isDeleting,\n          isLoading,\n          isUpdating,\n          onDelete: isWritable ? onDelete : undefined,\n          onUpdate: isWritable ? onUpdate : undefined,\n          user,\n        })}\n      </div>\n    );\n  }\n\n  if (isLoading && !user) {\n    return (\n      <AdminSection block=\"user-details\" className={className} preferences={preferences}>\n        <span className={styles['muted']} role=\"status\">\n          <Spinner size=\"small\" /> {t('admin.common.loading')}\n        </span>\n      </AdminSection>\n    );\n  }\n\n  if (!user) {\n    return (\n      <AdminSection block=\"user-details\" className={className} preferences={preferences}>\n        <Alert variant=\"error\" role=\"alert\">\n          {error ?? t('admin.common.errors.not_found')}\n        </Alert>\n      </AdminSection>\n    );\n  }\n\n  const displayName: string = resolveManagedIdentityName(user);\n  const attributes: [string, unknown][] = Object.entries(user.attributes ?? {}).filter(\n    ([name]: [string, unknown]) => !hiddenAttributes.includes(name),\n  );\n  const editableAttributes: [string, string][] = attributes.filter(\n    (entry: [string, unknown]): entry is [string, string] => typeof entry[1] === 'string',\n  );\n\n  return (\n    <AdminSection\n      block=\"user-details\"\n      className={className}\n      title={displayName}\n      description={t('admin.users.details.subtitle', {type: user.type})}\n      preferences={preferences}\n      actions={\n        <>\n          {actions}\n          {onDelete && !user.isReadOnly && (\n            <ConfirmButton\n              confirmText={t('admin.users.details.delete.confirm', {name: displayName})}\n              isLoading={isDeleting}\n              onConfirm={onDelete}\n            >\n              {t('admin.users.details.delete.action')}\n            </ConfirmButton>\n          )}\n        </>\n      }\n    >\n      {error && (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      )}\n      <div className={styles['row']}>\n        <Avatar name={displayName} size={48} />\n        <span className={styles['muted']}>{user.ouHandle ?? user.ouId}</span>\n      </div>\n      <Panel\n        title={t('admin.users.details.attributes')}\n        actions={\n          onUpdate && !user.isReadOnly && !draft && editableAttributes.length > 0 ? (\n            <Button\n              variant=\"outline\"\n              size=\"small\"\n              onClick={(): void => setDraft(Object.fromEntries(editableAttributes))}\n            >\n              {t('admin.users.details.edit.action')}\n            </Button>\n          ) : undefined\n        }\n      >\n        {draft ? (\n          <form\n            className={styles['row']}\n            style={{alignItems: 'stretch', flexDirection: 'column'}}\n            onSubmit={(event): void => {\n              event.preventDefault();\n              onUpdate?.({...(user.attributes ?? {}), ...draft});\n              setDraft(null);\n            }}\n          >\n            {Object.keys(draft).map((name: string) => (\n              <TextField\n                key={name}\n                name={name}\n                label={name}\n                aria-label={name}\n                value={draft[name]}\n                onChange={(event: ChangeEvent<HTMLInputElement>): void =>\n                  setDraft((previous: Record<string, string> | null) => ({...previous, [name]: event.target.value}))\n                }\n              />\n            ))}\n            <div className={styles['row']} style={{justifyContent: 'flex-end'}}>\n              <Button type=\"button\" variant=\"text\" disabled={isUpdating} onClick={(): void => setDraft(null)}>\n                {t('admin.common.actions.cancel')}\n              </Button>\n              <Button type=\"submit\" loading={isUpdating} disabled={isUpdating}>\n                {t('admin.users.details.edit.save')}\n              </Button>\n            </div>\n          </form>\n        ) : attributes.length > 0 ? (\n          <DetailList\n            items={attributes.map(([name, value]: [string, unknown]) => ({label: name, value: stringify(value)}))}\n          />\n        ) : (\n          <span className={styles['muted']}>{t('admin.users.details.no_attributes')}</span>\n        )}\n      </Panel>\n      <Panel title={t('admin.users.details.groups')}>\n        <ChipList\n          label={t('admin.users.details.groups')}\n          emptyText={t('admin.users.details.no_groups')}\n          items={groups.map((group: MembershipGroup) => ({id: group.id, label: group.name}))}\n        />\n      </Panel>\n    </AdminSection>\n  );\n};\n\nexport default BaseUserDetails;\n"],"mappings":";;;;;;;;;;;;;;AAgFA,MAAM,aAAa,UAA2B;AAC5C,KAAI,UAAU,QAAQ,UAAU,OAC9B,QAAO;AAGT,QAAO,OAAO,UAAU,WAAW,KAAK,UAAU,MAAM,GAAG,OAAO,MAAmC;;;;;;AAOvG,MAAMA,mBAA6C,EACjD,SACA,UACA,WACA,QAAQ,MACR,SAAS,EAAE,EACX,mBAAmB,CAAC,WAAW,EAC/B,aAAa,OACb,YAAY,OACZ,aAAa,OACb,UACA,UACA,aACA,WACwC;CACxC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,4BAAoB;CAC3D,MAAM,CAAC,OAAO,YAAY,SAAwC,KAAK;AAEvE,KAAI,UAAU;EACZ,MAAMC,aAAsB,QAAQ,KAAK,IAAI,CAAC,MAAM;AAEpD,SACE,oBAAC;GAAe;aACb,SAAS;IACR,YAAY,OAAO,YACjB,OAAO,QAAQ,MAAM,cAAc,EAAE,CAAC,CAAC,QACpC,CAAC,UAA6B,CAAC,iBAAiB,SAAS,KAAK,CAChE,CACF;IACD,aAAa,OAAO,2BAA2B,KAAK,GAAG;IACvD;IACA;IACA;IACA;IACA;IACA,UAAU,aAAa,WAAW;IAClC,UAAU,aAAa,WAAW;IAClC;IACD,CAAC;IACE;;AAIV,KAAI,aAAa,CAAC,KAChB,QACE,oBAACC;EAAa,OAAM;EAA0B;EAAwB;YACpE,qBAAC;GAAK,WAAW,OAAO;GAAU,MAAK;;IACrC,oBAACC,mBAAQ,MAAK,UAAU;;IAAE,EAAE,uBAAuB;;IAC9C;GACM;AAInB,KAAI,CAAC,KACH,QACE,oBAACD;EAAa,OAAM;EAA0B;EAAwB;YACpE,oBAACE;GAAM,SAAQ;GAAQ,MAAK;aACzB,SAAS,EAAE,gCAAgC;IACtC;GACK;CAInB,MAAMC,cAAsB,2BAA2B,KAAK;CAC5D,MAAMC,aAAkC,OAAO,QAAQ,KAAK,cAAc,EAAE,CAAC,CAAC,QAC3E,CAAC,UAA6B,CAAC,iBAAiB,SAAS,KAAK,CAChE;CACD,MAAMC,qBAAyC,WAAW,QACvD,UAAwD,OAAO,MAAM,OAAO,SAC9E;AAED,QACE,qBAACL;EACC,OAAM;EACK;EACX,OAAO;EACP,aAAa,EAAE,gCAAgC,EAAC,MAAM,KAAK,MAAK,CAAC;EACpD;EACb,SACE,8CACG,SACA,YAAY,CAAC,KAAK,cACjB,oBAAC;GACC,aAAa,EAAE,sCAAsC,EAAC,MAAM,aAAY,CAAC;GACzE,WAAW;GACX,WAAW;aAEV,EAAE,oCAAoC;IACzB,IAEjB;;GAGJ,SACC,oBAACE;IAAM,SAAQ;IAAQ,MAAK;cACzB;KACK;GAEV,qBAAC;IAAI,WAAW,OAAO;eACrB,oBAAC;KAAO,MAAM;KAAa,MAAM;MAAM,EACvC,oBAAC;KAAK,WAAW,OAAO;eAAW,KAAK,YAAY,KAAK;MAAY;KACjE;GACN,oBAAC;IACC,OAAO,EAAE,iCAAiC;IAC1C,SACE,YAAY,CAAC,KAAK,cAAc,CAAC,SAAS,mBAAmB,SAAS,IACpE,oBAACI;KACC,SAAQ;KACR,MAAK;KACL,eAAqB,SAAS,OAAO,YAAY,mBAAmB,CAAC;eAEpE,EAAE,kCAAkC;MAC9B,GACP;cAGL,QACC,qBAAC;KACC,WAAW,OAAO;KAClB,OAAO;MAAC,YAAY;MAAW,eAAe;MAAS;KACvD,WAAW,UAAgB;AACzB,YAAM,gBAAgB;AACtB,iBAAW;OAAC,GAAI,KAAK,cAAc,EAAE;OAAG,GAAG;OAAM,CAAC;AAClD,eAAS,KAAK;;gBAGf,OAAO,KAAK,MAAM,CAAC,KAAK,SACvB,oBAACC;MAEO;MACN,OAAO;MACP,cAAY;MACZ,OAAO,MAAM;MACb,WAAW,UACT,UAAU,cAA6C;OAAC,GAAG;QAAW,OAAO,MAAM,OAAO;OAAM,EAAE;QAN/F,KAQL,CACF,EACF,qBAAC;MAAI,WAAW,OAAO;MAAQ,OAAO,EAAC,gBAAgB,YAAW;iBAChE,oBAACD;OAAO,MAAK;OAAS,SAAQ;OAAO,UAAU;OAAY,eAAqB,SAAS,KAAK;iBAC3F,EAAE,8BAA8B;QAC1B,EACT,oBAACA;OAAO,MAAK;OAAS,SAAS;OAAY,UAAU;iBAClD,EAAE,gCAAgC;QAC5B;OACL;MACD,GACL,WAAW,SAAS,IACtB,oBAAC,cACC,OAAO,WAAW,KAAK,CAAC,MAAM,YAA+B;KAAC,OAAO;KAAM,OAAO,UAAU,MAAM;KAAC,EAAE,GACrG,GAEF,oBAAC;KAAK,WAAW,OAAO;eAAW,EAAE,oCAAoC;MAAQ;KAE7E;GACR,oBAAC;IAAM,OAAO,EAAE,6BAA6B;cAC3C,oBAAC;KACC,OAAO,EAAE,6BAA6B;KACtC,WAAW,EAAE,gCAAgC;KAC7C,OAAO,OAAO,KAAK,WAA4B;MAAC,IAAI,MAAM;MAAI,OAAO,MAAM;MAAK,EAAE;MAClF;KACI;;GACK;;AAInB,8BAAe"}
+{"version":3,"file":"BaseUserDetails.js","names":["BaseUserDetails: FC<BaseUserDetailsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","isWritable: boolean","AdminSection","Spinner","Alert","displayName: string","attributes: [string, unknown][]","editableAttributes: [string, string][]","Button","TextField"],"sources":["../../../../src/components/admin/UserDetails/BaseUserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AccountLifecycleAction,\n  resolveManagedIdentityName,\n  ManagedUser,\n  MembershipGroup,\n  Preferences,\n} from '@thunderid/browser';\nimport {ChangeEvent, FC, ReactElement, ReactNode, useState} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport {Avatar} from '../../primitives/Avatar/Avatar';\nimport Button from '../../primitives/Button/Button';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport TextField from '../../primitives/TextField/TextField';\nimport {AccessStatusBadge, AccountLifecycleButtons} from '../shared/AccountLifecycleParts';\nimport {ChipList, ConfirmButton, DetailList, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * What {@link BaseUserDetails} hands its `children` render function, so the user can be shown with any UI.\n */\nexport interface BaseUserDetailsRenderProps {\n  /**\n   * The user's attributes, without the hidden ones.\n   */\n  attributes: Record<string, unknown>;\n  /**\n   * The user's display name, or an empty string while there is no user.\n   */\n  displayName: string;\n  error: string | null;\n  groups: MembershipGroup[];\n  isDeleting: boolean;\n  isLoading: boolean;\n  isRunningLifecycleAction: boolean;\n  isUpdating: boolean;\n  /**\n   * The account lifecycle actions offered for the user. Empty when none is allowed.\n   */\n  lifecycleActions: AccountLifecycleAction[];\n  /**\n   * Deletes the user. Undefined when deletion is not allowed, including for read-only users.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action, with the operator's note on a suspension. Undefined when none is\n   * allowed.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  /**\n   * Saves the given attributes. Undefined when editing is not allowed, including for read-only users.\n   */\n  onUpdate?: (attributes: Record<string, unknown>) => void;\n  user?: ManagedUser;\n}\n\nexport interface BaseUserDetailsProps {\n  /**\n   * Controls rendered next to the user's name.\n   */\n  actions?: ReactNode;\n  /**\n   * Renders custom UI in place of the default view. Receives the user, their visible attributes and\n   * groups, the loading and error state, and the delete and update handlers.\n   */\n  children?: (props: BaseUserDetailsRenderProps) => ReactNode;\n  className?: string;\n  error?: string | null;\n  /**\n   * The groups the user belongs to.\n   */\n  groups?: MembershipGroup[];\n  /**\n   * Attribute names that are never shown, such as credentials.\n   * @default ['password']\n   */\n  hiddenAttributes?: string[];\n  isDeleting?: boolean;\n  isLoading?: boolean;\n  isRunningLifecycleAction?: boolean;\n  isUpdating?: boolean;\n  /**\n   * The account lifecycle actions to offer (suspend, unsuspend, unlock), shown only with\n   * `onLifecycleAction`. They change only runtime state, so they apply to read-only users too.\n   */\n  lifecycleActions?: AccountLifecycleAction[];\n  /**\n   * Deletes the user. The delete action is hidden when omitted.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action. Suspending and unsuspending ask for confirmation first, and a\n   * suspension takes an optional operator note.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  /**\n   * Saves edited attributes. Text attributes become editable only when set. Receives every\n   * attribute, edited or not.\n   */\n  onUpdate?: (attributes: Record<string, unknown>) => void;\n  preferences?: Preferences;\n  user?: ManagedUser;\n}\n\nconst stringify = (value: unknown): string => {\n  if (value === null || value === undefined) {\n    return '';\n  }\n\n  return typeof value === 'object' ? JSON.stringify(value) : String(value as string | number | boolean);\n};\n\n/**\n * Shows a user's attributes, type, organization unit and groups. Holds no data of its own: pass the\n * user and handle deletion.\n */\nconst BaseUserDetails: FC<BaseUserDetailsProps> = ({\n  actions,\n  children,\n  className,\n  error = null,\n  groups = [],\n  hiddenAttributes = ['password'],\n  isDeleting = false,\n  isLoading = false,\n  isRunningLifecycleAction = false,\n  isUpdating = false,\n  lifecycleActions = [],\n  onDelete,\n  onLifecycleAction,\n  onUpdate,\n  preferences,\n  user,\n}: BaseUserDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n  const [draft, setDraft] = useState<Record<string, string> | null>(null);\n\n  if (children) {\n    const isWritable: boolean = Boolean(user) && !user?.isReadOnly;\n\n    return (\n      <div className={className}>\n        {children({\n          attributes: Object.fromEntries(\n            Object.entries(user?.attributes ?? {}).filter(\n              ([name]: [string, unknown]) => !hiddenAttributes.includes(name),\n            ),\n          ),\n          displayName: user ? resolveManagedIdentityName(user) : '',\n          error,\n          groups,\n          isDeleting,\n          isLoading,\n          isRunningLifecycleAction,\n          isUpdating,\n          lifecycleActions: onLifecycleAction && user ? lifecycleActions : [],\n          onDelete: isWritable ? onDelete : undefined,\n          onLifecycleAction: user ? onLifecycleAction : undefined,\n          onUpdate: isWritable ? onUpdate : undefined,\n          user,\n        })}\n      </div>\n    );\n  }\n\n  if (isLoading && !user) {\n    return (\n      <AdminSection block=\"user-details\" className={className} preferences={preferences}>\n        <span className={styles['muted']} role=\"status\">\n          <Spinner size=\"small\" /> {t('admin.common.loading')}\n        </span>\n      </AdminSection>\n    );\n  }\n\n  if (!user) {\n    return (\n      <AdminSection block=\"user-details\" className={className} preferences={preferences}>\n        <Alert variant=\"error\" role=\"alert\">\n          {error ?? t('admin.common.errors.not_found')}\n        </Alert>\n      </AdminSection>\n    );\n  }\n\n  const displayName: string = resolveManagedIdentityName(user);\n  const attributes: [string, unknown][] = Object.entries(user.attributes ?? {}).filter(\n    ([name]: [string, unknown]) => !hiddenAttributes.includes(name),\n  );\n  const editableAttributes: [string, string][] = attributes.filter(\n    (entry: [string, unknown]): entry is [string, string] => typeof entry[1] === 'string',\n  );\n\n  return (\n    <AdminSection\n      block=\"user-details\"\n      className={className}\n      title={displayName}\n      description={t('admin.users.details.subtitle', {type: user.type})}\n      preferences={preferences}\n      actions={\n        <>\n          {actions}\n          {onLifecycleAction && (\n            <AccountLifecycleButtons\n              actions={lifecycleActions}\n              collectsOperatorNote\n              isRunning={isRunningLifecycleAction}\n              name={displayName}\n              onAction={onLifecycleAction}\n            />\n          )}\n          {onDelete && !user.isReadOnly && (\n            <ConfirmButton\n              confirmText={t('admin.users.details.delete.confirm', {name: displayName})}\n              isLoading={isDeleting}\n              onConfirm={onDelete}\n            >\n              {t('admin.users.details.delete.action')}\n            </ConfirmButton>\n          )}\n        </>\n      }\n    >\n      {error && (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      )}\n      <div className={styles['row']}>\n        <Avatar name={displayName} size={48} />\n        <span className={styles['muted']}>{user.ouHandle ?? user.ouId}</span>\n        <AccessStatusBadge status={user.status?.value} />\n      </div>\n      <Panel\n        title={t('admin.users.details.attributes')}\n        actions={\n          onUpdate && !user.isReadOnly && !draft && editableAttributes.length > 0 ? (\n            <Button\n              variant=\"outline\"\n              size=\"small\"\n              onClick={(): void => setDraft(Object.fromEntries(editableAttributes))}\n            >\n              {t('admin.users.details.edit.action')}\n            </Button>\n          ) : undefined\n        }\n      >\n        {draft ? (\n          <form\n            className={styles['row']}\n            style={{alignItems: 'stretch', flexDirection: 'column'}}\n            onSubmit={(event): void => {\n              event.preventDefault();\n              onUpdate?.({...(user.attributes ?? {}), ...draft});\n              setDraft(null);\n            }}\n          >\n            {Object.keys(draft).map((name: string) => (\n              <TextField\n                key={name}\n                name={name}\n                label={name}\n                aria-label={name}\n                value={draft[name]}\n                onChange={(event: ChangeEvent<HTMLInputElement>): void =>\n                  setDraft((previous: Record<string, string> | null) => ({...previous, [name]: event.target.value}))\n                }\n              />\n            ))}\n            <div className={styles['row']} style={{justifyContent: 'flex-end'}}>\n              <Button type=\"button\" variant=\"text\" disabled={isUpdating} onClick={(): void => setDraft(null)}>\n                {t('admin.common.actions.cancel')}\n              </Button>\n              <Button type=\"submit\" loading={isUpdating} disabled={isUpdating}>\n                {t('admin.users.details.edit.save')}\n              </Button>\n            </div>\n          </form>\n        ) : attributes.length > 0 ? (\n          <DetailList\n            items={attributes.map(([name, value]: [string, unknown]) => ({label: name, value: stringify(value)}))}\n          />\n        ) : (\n          <span className={styles['muted']}>{t('admin.users.details.no_attributes')}</span>\n        )}\n      </Panel>\n      <Panel title={t('admin.users.details.groups')}>\n        <ChipList\n          label={t('admin.users.details.groups')}\n          emptyText={t('admin.users.details.no_groups')}\n          items={groups.map((group: MembershipGroup) => ({id: group.id, label: group.name}))}\n        />\n      </Panel>\n    </AdminSection>\n  );\n};\n\nexport default BaseUserDetails;\n"],"mappings":";;;;;;;;;;;;;;;AA4GA,MAAM,aAAa,UAA2B;AAC5C,KAAI,UAAU,QAAQ,UAAU,OAC9B,QAAO;AAGT,QAAO,OAAO,UAAU,WAAW,KAAK,UAAU,MAAM,GAAG,OAAO,MAAmC;;;;;;AAOvG,MAAMA,mBAA6C,EACjD,SACA,UACA,WACA,QAAQ,MACR,SAAS,EAAE,EACX,mBAAmB,CAAC,WAAW,EAC/B,aAAa,OACb,YAAY,OACZ,2BAA2B,OAC3B,aAAa,OACb,mBAAmB,EAAE,EACrB,UACA,mBACA,UACA,aACA,WACwC;CACxC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,4BAAoB;CAC3D,MAAM,CAAC,OAAO,YAAY,SAAwC,KAAK;AAEvE,KAAI,UAAU;EACZ,MAAMC,aAAsB,QAAQ,KAAK,IAAI,CAAC,MAAM;AAEpD,SACE,oBAAC;GAAe;aACb,SAAS;IACR,YAAY,OAAO,YACjB,OAAO,QAAQ,MAAM,cAAc,EAAE,CAAC,CAAC,QACpC,CAAC,UAA6B,CAAC,iBAAiB,SAAS,KAAK,CAChE,CACF;IACD,aAAa,OAAO,2BAA2B,KAAK,GAAG;IACvD;IACA;IACA;IACA;IACA;IACA;IACA,kBAAkB,qBAAqB,OAAO,mBAAmB,EAAE;IACnE,UAAU,aAAa,WAAW;IAClC,mBAAmB,OAAO,oBAAoB;IAC9C,UAAU,aAAa,WAAW;IAClC;IACD,CAAC;IACE;;AAIV,KAAI,aAAa,CAAC,KAChB,QACE,oBAACC;EAAa,OAAM;EAA0B;EAAwB;YACpE,qBAAC;GAAK,WAAW,OAAO;GAAU,MAAK;;IACrC,oBAACC,mBAAQ,MAAK,UAAU;;IAAE,EAAE,uBAAuB;;IAC9C;GACM;AAInB,KAAI,CAAC,KACH,QACE,oBAACD;EAAa,OAAM;EAA0B;EAAwB;YACpE,oBAACE;GAAM,SAAQ;GAAQ,MAAK;aACzB,SAAS,EAAE,gCAAgC;IACtC;GACK;CAInB,MAAMC,cAAsB,2BAA2B,KAAK;CAC5D,MAAMC,aAAkC,OAAO,QAAQ,KAAK,cAAc,EAAE,CAAC,CAAC,QAC3E,CAAC,UAA6B,CAAC,iBAAiB,SAAS,KAAK,CAChE;CACD,MAAMC,qBAAyC,WAAW,QACvD,UAAwD,OAAO,MAAM,OAAO,SAC9E;AAED,QACE,qBAACL;EACC,OAAM;EACK;EACX,OAAO;EACP,aAAa,EAAE,gCAAgC,EAAC,MAAM,KAAK,MAAK,CAAC;EACpD;EACb,SACE;GACG;GACA,qBACC,oBAAC;IACC,SAAS;IACT;IACA,WAAW;IACX,MAAM;IACN,UAAU;KACV;GAEH,YAAY,CAAC,KAAK,cACjB,oBAAC;IACC,aAAa,EAAE,sCAAsC,EAAC,MAAM,aAAY,CAAC;IACzE,WAAW;IACX,WAAW;cAEV,EAAE,oCAAoC;KACzB;MAEjB;;GAGJ,SACC,oBAACE;IAAM,SAAQ;IAAQ,MAAK;cACzB;KACK;GAEV,qBAAC;IAAI,WAAW,OAAO;;KACrB,oBAAC;MAAO,MAAM;MAAa,MAAM;OAAM;KACvC,oBAAC;MAAK,WAAW,OAAO;gBAAW,KAAK,YAAY,KAAK;OAAY;KACrE,oBAAC,qBAAkB,QAAQ,KAAK,QAAQ,QAAS;;KAC7C;GACN,oBAAC;IACC,OAAO,EAAE,iCAAiC;IAC1C,SACE,YAAY,CAAC,KAAK,cAAc,CAAC,SAAS,mBAAmB,SAAS,IACpE,oBAACI;KACC,SAAQ;KACR,MAAK;KACL,eAAqB,SAAS,OAAO,YAAY,mBAAmB,CAAC;eAEpE,EAAE,kCAAkC;MAC9B,GACP;cAGL,QACC,qBAAC;KACC,WAAW,OAAO;KAClB,OAAO;MAAC,YAAY;MAAW,eAAe;MAAS;KACvD,WAAW,UAAgB;AACzB,YAAM,gBAAgB;AACtB,iBAAW;OAAC,GAAI,KAAK,cAAc,EAAE;OAAG,GAAG;OAAM,CAAC;AAClD,eAAS,KAAK;;gBAGf,OAAO,KAAK,MAAM,CAAC,KAAK,SACvB,oBAACC;MAEO;MACN,OAAO;MACP,cAAY;MACZ,OAAO,MAAM;MACb,WAAW,UACT,UAAU,cAA6C;OAAC,GAAG;QAAW,OAAO,MAAM,OAAO;OAAM,EAAE;QAN/F,KAQL,CACF,EACF,qBAAC;MAAI,WAAW,OAAO;MAAQ,OAAO,EAAC,gBAAgB,YAAW;iBAChE,oBAACD;OAAO,MAAK;OAAS,SAAQ;OAAO,UAAU;OAAY,eAAqB,SAAS,KAAK;iBAC3F,EAAE,8BAA8B;QAC1B,EACT,oBAACA;OAAO,MAAK;OAAS,SAAS;OAAY,UAAU;iBAClD,EAAE,gCAAgC;QAC5B;OACL;MACD,GACL,WAAW,SAAS,IACtB,oBAAC,cACC,OAAO,WAAW,KAAK,CAAC,MAAM,YAA+B;KAAC,OAAO;KAAM,OAAO,UAAU,MAAM;KAAC,EAAE,GACrG,GAEF,oBAAC;KAAK,WAAW,OAAO;eAAW,EAAE,oCAAoC;MAAQ;KAE7E;GACR,oBAAC;IAAM,OAAO,EAAE,6BAA6B;cAC3C,oBAAC;KACC,OAAO,EAAE,6BAA6B;KACtC,WAAW,EAAE,gCAAgC;KAC7C,OAAO,OAAO,KAAK,WAA4B;MAAC,IAAI,MAAM;MAAI,OAAO,MAAM;MAAK,EAAE;MAClF;KACI;;GACK;;AAInB,8BAAe"}

package/dist/components/admin/UserDetails/UserDetails.d.ts

@@ -1,6 +1,13 @@
+import { AdministrationMode } from '@thunderid/browser';
 import { FC } from 'react';
 import { BaseUserDetailsProps } from './BaseUserDetails';
-export type UserDetailsProps = Omit<BaseUserDetailsProps, 'error' | 'groups' | 'isDeleting' | 'isLoading' | 'isUpdating' | 'onDelete' | 'onUpdate' | 'user'> & {
+export type UserDetailsProps = Omit<BaseUserDetailsProps, 'error' | 'groups' | 'isDeleting' | 'isLoading' | 'isRunningLifecycleAction' | 'isUpdating' | 'lifecycleActions' | 'onDelete' | 'onLifecycleAction' | 'onUpdate' | 'user'> & {
+    /**
+     * How the delete runs. `flow` runs the user deletion flow the server configures, which revokes the
+     * user's grants and ends their sessions before the record goes. It needs `baseUrl`.
+     * @default 'native'
+     */
+    administrationMode?: AdministrationMode;
     /**
      * Whether the user can be deleted from this view.
      * @default false
@@ -11,6 +18,13 @@ export type UserDetailsProps = Omit<BaseUserDetailsProps, 'error' | 'groups' | '
      * @default false
      */
     editable?: boolean;
+    /**
+     * Whether the user can be suspended, unsuspended and unlocked from this view. Each action runs
+     * through its administration flow and is offered only when the server configures that flow. Reading
+     * the configured flows needs a token that may read the server configuration.
+     * @default false
+     */
+    lifecycleActions?: boolean;
     /**
      * Called after the user has been deleted.
      */

package/dist/components/admin/UserDetails/UserDetails.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UserDetails.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/UserDetails/UserDetails.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AACvC,OAAwB,EAAC,oBAAoB,EAAC,MAAM,mBAAmB,CAAC;AAOxE,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,oBAAoB,EACpB,OAAO,GAAG,QAAQ,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAClG,GAAG;IACF;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAqCrC,CAAC;AAEF,eAAe,WAAW,CAAC"}
+{"version":3,"file":"UserDetails.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/UserDetails/UserDetails.tsx"],"names":[],"mappings":"AAGA,OAAO,EACL,kBAAkB,EAWnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,EAAE,EAAe,MAAM,OAAO,CAAC;AACvC,OAAwB,EAAC,oBAAoB,EAAC,MAAM,mBAAmB,CAAC;AAYxE,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,oBAAoB,EAClB,OAAO,GACP,QAAQ,GACR,YAAY,GACZ,WAAW,GACX,0BAA0B,GAC1B,YAAY,GACZ,kBAAkB,GAClB,UAAU,GACV,mBAAmB,GACnB,UAAU,GACV,MAAM,CACT,GAAG;IACF;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAoErC,CAAC;AAEF,eAAe,WAAW,CAAC"}

package/dist/components/admin/UserDetails/UserDetails.js

@@ -1,10 +1,10 @@
 import useTranslation_default from "../../../hooks/useTranslation.js";
-import useGetUser_default from "../../../hooks/management/users/useGetUser.js";
-import useUpdateUser_default from "../../../hooks/management/users/useUpdateUser.js";
-import useDeleteUser_default from "../../../hooks/management/users/useDeleteUser.js";
-import useGetUserGroups_default from "../../../hooks/management/users/useGetUserGroups.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
+import useResourceMutation_default from "../../../hooks/management/useResourceMutation.js";
 import BaseUserDetails_default from "./BaseUserDetails.js";
-import { toManagementErrorMessage } from "@thunderid/browser";
+import useAccountLifecycle_default from "../../../hooks/management/useAccountLifecycle.js";
+import { GroupQueryKeys, UserQueryKeys, deleteUser, getUser, getUserGroups, toManagementErrorMessage, updateUser } from "@thunderid/browser";
 import { jsx } from "react/jsx-runtime";
 
 //#region src/components/admin/UserDetails/UserDetails.tsx
@@ -16,19 +16,54 @@ import { jsx } from "react/jsx-runtime";
 * <UserDetails userId={userId} deletable onDeleted={() => navigate('/users')} />
 * ```
 */
-const UserDetails = ({ deletable = false, editable = false, onDeleted, preferences, userId,...rest }) => {
+const UserDetails = ({ administrationMode, deletable = false, editable = false, lifecycleActions = false, onDeleted, preferences, userId,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
-	const user = useGetUser_default(userId);
-	const groups = useGetUserGroups_default(userId, { limit: 100 });
-	const deletion = useDeleteUser_default({ onSuccess: onDeleted });
-	const update = useUpdateUser_default();
+	const endpoint = useManagementEndpoint_default("users");
+	const user = useResourceQuery_default([UserQueryKeys.USER, userId], (fetcher) => getUser({
+		...endpoint,
+		fetcher,
+		userId
+	}), { enabled: Boolean(userId) });
+	const groups = useResourceQuery_default([
+		GroupQueryKeys.MEMBERSHIPS,
+		"user",
+		userId,
+		{ limit: 100 }
+	], (fetcher) => getUserGroups({
+		...endpoint,
+		fetcher,
+		limit: 100,
+		userId
+	}), { enabled: Boolean(userId) });
+	const deletion = useResourceMutation_default((id, fetcher) => deleteUser({
+		...endpoint,
+		administrationMode,
+		fetcher,
+		userId: id
+	}), () => [[UserQueryKeys.USERS]], { onSuccess: onDeleted });
+	const update = useResourceMutation_default(({ data, userId: id }, fetcher) => updateUser({
+		...endpoint,
+		fetcher,
+		payload: data,
+		userId: id
+	}), ({ userId: id }) => [[UserQueryKeys.USER, id], [UserQueryKeys.USERS]]);
+	const lifecycle = useAccountLifecycle_default({
+		enabled: lifecycleActions,
+		invalidatedKeys: [[UserQueryKeys.USER, userId], [UserQueryKeys.USERS]],
+		kind: "user",
+		status: user.data?.status?.value,
+		subject: userId
+	});
 	return /* @__PURE__ */ jsx(BaseUserDetails_default, {
 		user: user.data,
 		groups: groups.data?.groups,
 		isLoading: user.isLoading,
-		error: toManagementErrorMessage(t, user.error, "admin.users.details.error") ?? toManagementErrorMessage(t, deletion.error, "admin.users.details.delete.error") ?? toManagementErrorMessage(t, update.error, "admin.users.details.edit.error"),
+		error: toManagementErrorMessage(t, user.error, "admin.users.details.error") ?? toManagementErrorMessage(t, deletion.error, "admin.users.details.delete.error") ?? toManagementErrorMessage(t, update.error, "admin.users.details.edit.error") ?? toManagementErrorMessage(t, lifecycle.error, "admin.common.lifecycle.error") ?? toManagementErrorMessage(t, lifecycle.loadError, "admin.common.lifecycle.load_error"),
 		isDeleting: deletion.isLoading,
 		onDelete: deletable ? () => void deletion.mutate(userId) : void 0,
+		lifecycleActions: lifecycle.actions,
+		isRunningLifecycleAction: lifecycle.isRunning,
+		onLifecycleAction: lifecycleActions ? lifecycle.run : void 0,
 		isUpdating: update.isLoading,
 		onUpdate: editable && user.data ? (attributes) => void update.mutate({
 			data: {

package/dist/components/admin/UserDetails/UserDetails.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserDetails.js","names":["UserDetails: FC<UserDetailsProps>","useTranslation","useGetUser","useGetUserGroups","useDeleteUser","useUpdateUser","BaseUserDetails"],"sources":["../../../../src/components/admin/UserDetails/UserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseUserDetails, {BaseUserDetailsProps} from './BaseUserDetails';\nimport useDeleteUser from '../../../hooks/management/users/useDeleteUser';\nimport useGetUser from '../../../hooks/management/users/useGetUser';\nimport useGetUserGroups from '../../../hooks/management/users/useGetUserGroups';\nimport useUpdateUser from '../../../hooks/management/users/useUpdateUser';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type UserDetailsProps = Omit<\n  BaseUserDetailsProps,\n  'error' | 'groups' | 'isDeleting' | 'isLoading' | 'isUpdating' | 'onDelete' | 'onUpdate' | 'user'\n> & {\n  /**\n   * Whether the user can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the user's text attributes can be edited from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Called after the user has been deleted.\n   */\n  onDeleted?: () => void;\n  userId: string;\n};\n\n/**\n * Shows a user and the groups they belong to, and optionally lets the signed-in user delete them.\n *\n * @example\n * ```tsx\n * <UserDetails userId={userId} deletable onDeleted={() => navigate('/users')} />\n * ```\n */\nconst UserDetails: FC<UserDetailsProps> = ({\n  deletable = false,\n  editable = false,\n  onDeleted,\n  preferences,\n  userId,\n  ...rest\n}: UserDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const user = useGetUser(userId);\n  const groups = useGetUserGroups(userId, {limit: 100});\n  const deletion = useDeleteUser({onSuccess: onDeleted});\n  const update = useUpdateUser();\n\n  return (\n    <BaseUserDetails\n      user={user.data}\n      groups={groups.data?.groups}\n      isLoading={user.isLoading}\n      error={\n        toManagementErrorMessage(t, user.error, 'admin.users.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.users.details.delete.error') ??\n        toManagementErrorMessage(t, update.error, 'admin.users.details.edit.error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(userId) : undefined}\n      isUpdating={update.isLoading}\n      onUpdate={\n        editable && user.data\n          ? (attributes: Record<string, unknown>): void =>\n              void update.mutate({data: {attributes, ouId: user.data!.ouId, type: user.data!.type}, userId})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAyCA,MAAMA,eAAqC,EACzC,YAAY,OACZ,WAAW,OACX,WACA,aACA,OACA,GAAG,WACiC;CACpC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,OAAOC,mBAAW,OAAO;CAC/B,MAAM,SAASC,yBAAiB,QAAQ,EAAC,OAAO,KAAI,CAAC;CACrD,MAAM,WAAWC,sBAAc,EAAC,WAAW,WAAU,CAAC;CACtD,MAAM,SAASC,uBAAe;AAE9B,QACE,oBAACC;EACC,MAAM,KAAK;EACX,QAAQ,OAAO,MAAM;EACrB,WAAW,KAAK;EAChB,OACE,yBAAyB,GAAG,KAAK,OAAO,4BAA4B,IACpE,yBAAyB,GAAG,SAAS,OAAO,mCAAmC,IAC/E,yBAAyB,GAAG,OAAO,OAAO,iCAAiC;EAE7E,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,OAAO,GAAG;EACjE,YAAY,OAAO;EACnB,UACE,YAAY,KAAK,QACZ,eACC,KAAK,OAAO,OAAO;GAAC,MAAM;IAAC;IAAY,MAAM,KAAK,KAAM;IAAM,MAAM,KAAK,KAAM;IAAK;GAAE;GAAO,CAAC,GAChG;EAEO;EACb,GAAI;GACJ;;AAIN,0BAAe"}
+{"version":3,"file":"UserDetails.js","names":["UserDetails: FC<UserDetailsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","user: ResourceQueryResult<ManagedUser>","useResourceQuery","groups: ResourceQueryResult<MembershipGroupListResponse>","deletion: ResourceMutationResult<void, string>","useResourceMutation","update: ResourceMutationResult<ManagedUser, UpdateUserVariables>","lifecycle: AccountLifecycleState","useAccountLifecycle","BaseUserDetails"],"sources":["../../../../src/components/admin/UserDetails/UserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  GroupQueryKeys,\n  ManagedUser,\n  MembershipGroupListResponse,\n  UpdateManagedUserRequest,\n  UserQueryKeys,\n  deleteUser,\n  getUser,\n  getUserGroups,\n  toManagementErrorMessage,\n  updateUser,\n} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseUserDetails, {BaseUserDetailsProps} from './BaseUserDetails';\nimport useAccountLifecycle, {AccountLifecycleState} from '../../../hooks/management/useAccountLifecycle';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\ninterface UpdateUserVariables {\n  data: UpdateManagedUserRequest;\n  userId: string;\n}\n\nexport type UserDetailsProps = Omit<\n  BaseUserDetailsProps,\n  | 'error'\n  | 'groups'\n  | 'isDeleting'\n  | 'isLoading'\n  | 'isRunningLifecycleAction'\n  | 'isUpdating'\n  | 'lifecycleActions'\n  | 'onDelete'\n  | 'onLifecycleAction'\n  | 'onUpdate'\n  | 'user'\n> & {\n  /**\n   * How the delete runs. `flow` runs the user deletion flow the server configures, which revokes the\n   * user's grants and ends their sessions before the record goes. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether the user can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the user's text attributes can be edited from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether the user can be suspended, unsuspended and unlocked from this view. Each action runs\n   * through its administration flow and is offered only when the server configures that flow. Reading\n   * the configured flows needs a token that may read the server configuration.\n   * @default false\n   */\n  lifecycleActions?: boolean;\n  /**\n   * Called after the user has been deleted.\n   */\n  onDeleted?: () => void;\n  userId: string;\n};\n\n/**\n * Shows a user and the groups they belong to, and optionally lets the signed-in user delete them.\n *\n * @example\n * ```tsx\n * <UserDetails userId={userId} deletable onDeleted={() => navigate('/users')} />\n * ```\n */\nconst UserDetails: FC<UserDetailsProps> = ({\n  administrationMode,\n  deletable = false,\n  editable = false,\n  lifecycleActions = false,\n  onDeleted,\n  preferences,\n  userId,\n  ...rest\n}: UserDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const user: ResourceQueryResult<ManagedUser> = useResourceQuery(\n    [UserQueryKeys.USER, userId],\n    (fetcher) => getUser({...endpoint, fetcher, userId}),\n    {enabled: Boolean(userId)},\n  );\n  const groups: ResourceQueryResult<MembershipGroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.MEMBERSHIPS, 'user', userId, {limit: 100}],\n    (fetcher) => getUserGroups({...endpoint, fetcher, limit: 100, userId}),\n    {enabled: Boolean(userId)},\n  );\n  const deletion: ResourceMutationResult<void, string> = useResourceMutation(\n    (id: string, fetcher) => deleteUser({...endpoint, administrationMode, fetcher, userId: id}),\n    () => [[UserQueryKeys.USERS]],\n    {onSuccess: onDeleted},\n  );\n  const update: ResourceMutationResult<ManagedUser, UpdateUserVariables> = useResourceMutation(\n    ({data, userId: id}: UpdateUserVariables, fetcher) => updateUser({...endpoint, fetcher, payload: data, userId: id}),\n    ({userId: id}: UpdateUserVariables) => [[UserQueryKeys.USER, id], [UserQueryKeys.USERS]],\n  );\n\n  const lifecycle: AccountLifecycleState = useAccountLifecycle({\n    enabled: lifecycleActions,\n    invalidatedKeys: [[UserQueryKeys.USER, userId], [UserQueryKeys.USERS]],\n    kind: 'user',\n    status: user.data?.status?.value,\n    subject: userId,\n  });\n\n  return (\n    <BaseUserDetails\n      user={user.data}\n      groups={groups.data?.groups}\n      isLoading={user.isLoading}\n      error={\n        toManagementErrorMessage(t, user.error, 'admin.users.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.users.details.delete.error') ??\n        toManagementErrorMessage(t, update.error, 'admin.users.details.edit.error') ??\n        toManagementErrorMessage(t, lifecycle.error, 'admin.common.lifecycle.error') ??\n        toManagementErrorMessage(t, lifecycle.loadError, 'admin.common.lifecycle.load_error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(userId) : undefined}\n      lifecycleActions={lifecycle.actions}\n      isRunningLifecycleAction={lifecycle.isRunning}\n      onLifecycleAction={lifecycleActions ? lifecycle.run : undefined}\n      isUpdating={update.isLoading}\n      onUpdate={\n        editable && user.data\n          ? (attributes: Record<string, unknown>): void =>\n              void update.mutate({data: {attributes, ouId: user.data!.ouId, type: user.data!.type}, userId})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAiFA,MAAMA,eAAqC,EACzC,oBACA,YAAY,OACZ,WAAW,OACX,mBAAmB,OACnB,WACA,aACA,OACA,GAAG,WACiC;CACpC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,8BAAsB,QAAQ;CACnE,MAAMC,OAAyCC,yBAC7C,CAAC,cAAc,MAAM,OAAO,GAC3B,YAAY,QAAQ;EAAC,GAAG;EAAU;EAAS;EAAO,CAAC,EACpD,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,SAA2DD,yBAC/D;EAAC,eAAe;EAAa;EAAQ;EAAQ,EAAC,OAAO,KAAI;EAAC,GACzD,YAAY,cAAc;EAAC,GAAG;EAAU;EAAS,OAAO;EAAK;EAAO,CAAC,EACtE,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAME,WAAiDC,6BACpD,IAAY,YAAY,WAAW;EAAC,GAAG;EAAU;EAAoB;EAAS,QAAQ;EAAG,CAAC,QACrF,CAAC,CAAC,cAAc,MAAM,CAAC,EAC7B,EAAC,WAAW,WAAU,CACvB;CACD,MAAMC,SAAmED,6BACtE,EAAC,MAAM,QAAQ,MAA0B,YAAY,WAAW;EAAC,GAAG;EAAU;EAAS,SAAS;EAAM,QAAQ;EAAG,CAAC,GAClH,EAAC,QAAQ,SAA6B,CAAC,CAAC,cAAc,MAAM,GAAG,EAAE,CAAC,cAAc,MAAM,CAAC,CACzF;CAED,MAAME,YAAmCC,4BAAoB;EAC3D,SAAS;EACT,iBAAiB,CAAC,CAAC,cAAc,MAAM,OAAO,EAAE,CAAC,cAAc,MAAM,CAAC;EACtE,MAAM;EACN,QAAQ,KAAK,MAAM,QAAQ;EAC3B,SAAS;EACV,CAAC;AAEF,QACE,oBAACC;EACC,MAAM,KAAK;EACX,QAAQ,OAAO,MAAM;EACrB,WAAW,KAAK;EAChB,OACE,yBAAyB,GAAG,KAAK,OAAO,4BAA4B,IACpE,yBAAyB,GAAG,SAAS,OAAO,mCAAmC,IAC/E,yBAAyB,GAAG,OAAO,OAAO,iCAAiC,IAC3E,yBAAyB,GAAG,UAAU,OAAO,+BAA+B,IAC5E,yBAAyB,GAAG,UAAU,WAAW,oCAAoC;EAEvF,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,OAAO,GAAG;EACjE,kBAAkB,UAAU;EAC5B,0BAA0B,UAAU;EACpC,mBAAmB,mBAAmB,UAAU,MAAM;EACtD,YAAY,OAAO;EACnB,UACE,YAAY,KAAK,QACZ,eACC,KAAK,OAAO,OAAO;GAAC,MAAM;IAAC;IAAY,MAAM,KAAK,KAAM;IAAM,MAAM,KAAK,KAAM;IAAK;GAAE;GAAO,CAAC,GAChG;EAEO;EACb,GAAI;GACJ;;AAIN,0BAAe"}

package/dist/components/admin/UserList/UserList.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UserList.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/UserList/UserList.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAC,EAAE,EAAyB,MAAM,OAAO,CAAC;AACjD,OAAqB,EAAC,iBAAiB,EAAC,MAAM,gBAAgB,CAAC;AAK/D,MAAM,MAAM,aAAa,GAAG,IAAI,CAC9B,iBAAiB,EACjB,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,cAAc,GAAG,UAAU,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,CACrG,GAAG;IACF;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CA4C/B,CAAC;AAEF,eAAe,QAAQ,CAAC"}
+{"version":3,"file":"UserList.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/UserList/UserList.tsx"],"names":[],"mappings":"AAWA,OAAO,EAAC,EAAE,EAAyB,MAAM,OAAO,CAAC;AACjD,OAAqB,EAAC,iBAAiB,EAAC,MAAM,gBAAgB,CAAC;AAM/D,MAAM,MAAM,aAAa,GAAG,IAAI,CAC9B,iBAAiB,EACjB,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,cAAc,GAAG,UAAU,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,CACrG,GAAG;IACF;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,QAAQ,EAAE,EAAE,CAAC,aAAa,CA8C/B,CAAC;AAEF,eAAe,QAAQ,CAAC"}

package/dist/components/admin/UserList/UserList.js

@@ -1,7 +1,8 @@
 import useTranslation_default from "../../../hooks/useTranslation.js";
-import useGetUsers_default from "../../../hooks/management/users/useGetUsers.js";
+import useManagementEndpoint_default from "../../../hooks/management/useManagementEndpoint.js";
+import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
 import BaseUserList_default from "./BaseUserList.js";
-import { toEqualityFilter, toManagementErrorMessage } from "@thunderid/browser";
+import { UserQueryKeys, getUsers, toEqualityFilter, toManagementErrorMessage } from "@thunderid/browser";
 import { useState } from "react";
 import { jsx } from "react/jsx-runtime";
 
@@ -25,11 +26,19 @@ const UserList = ({ filter, limit = 20, preferences, searchable = true, searchAt
 		label: t("admin.users.list.search.email"),
 		value: "email"
 	}];
-	const { data, error, isLoading } = useGetUsers_default({
-		filter: filter ?? (search ? toEqualityFilter(search.attribute, search.value) : void 0),
+	const endpoint = useManagementEndpoint_default("users");
+	const queryFilter = filter ?? (search ? toEqualityFilter(search.attribute, search.value) : void 0);
+	const { data, error, isLoading } = useResourceQuery_default([UserQueryKeys.USERS, {
+		filter: queryFilter,
 		limit,
 		offset
-	});
+	}], (fetcher) => getUsers({
+		...endpoint,
+		fetcher,
+		filter: queryFilter,
+		limit,
+		offset
+	}));
 	return /* @__PURE__ */ jsx(BaseUserList_default, {
 		users: data?.users ?? [],
 		totalResults: data?.totalResults,

package/dist/components/admin/UserList/UserList.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserList.js","names":["UserList: FC<UserListProps>","useTranslation","attributes: SelectOption[]","useGetUsers","BaseUserList"],"sources":["../../../../src/components/admin/UserList/UserList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toEqualityFilter, toManagementErrorMessage, SelectOption} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseUserList, {BaseUserListProps} from './BaseUserList';\nimport {AdminSearchValue} from '../shared/AdminSearch';\nimport useGetUsers from '../../../hooks/management/users/useGetUsers';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type UserListProps = Omit<\n  BaseUserListProps,\n  'error' | 'isLoading' | 'offset' | 'onPageChange' | 'onSearch' | 'search' | 'totalResults' | 'users'\n> & {\n  /**\n   * Server-side filter expression, for example `username eq \"ada\"`. Hides the search form, since the\n   * server takes one expression.\n   */\n  filter?: string;\n  /**\n   * Whether to show the search form. The server matches the whole value of the chosen attribute.\n   * @default true\n   */\n  searchable?: boolean;\n};\n\n/**\n * Lists the users the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <UserList onSelect={(user) => setSelectedUserId(user.id)} />\n * ```\n */\nconst UserList: FC<UserListProps> = ({\n  filter,\n  limit = 20,\n  preferences,\n  searchable = true,\n  searchAttributes,\n  ...rest\n}: UserListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const [search, setSearch] = useState<AdminSearchValue | null>(null);\n  const attributes: SelectOption[] = searchAttributes ?? [\n    {label: t('admin.users.list.search.username'), value: 'username'},\n    {label: t('admin.users.list.search.email'), value: 'email'},\n  ];\n  const {data, error, isLoading} = useGetUsers({\n    filter: filter ?? (search ? toEqualityFilter(search.attribute, search.value) : undefined),\n    limit,\n    offset,\n  });\n\n  return (\n    <BaseUserList\n      users={data?.users ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.users.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      search={search}\n      searchAttributes={attributes}\n      onSearch={\n        searchable && !filter\n          ? (next: AdminSearchValue | null): void => {\n              setSearch(next);\n              setOffset(0);\n            }\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserList;\n"],"mappings":";;;;;;;;;;;;;;;;AAkCA,MAAMA,YAA+B,EACnC,QACA,QAAQ,IACR,aACA,aAAa,MACb,iBACA,GAAG,WAC8B;CACjC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,aAAa,SAAiB,EAAE;CAC/C,MAAM,CAAC,QAAQ,aAAa,SAAkC,KAAK;CACnE,MAAMC,aAA6B,oBAAoB,CACrD;EAAC,OAAO,EAAE,mCAAmC;EAAE,OAAO;EAAW,EACjE;EAAC,OAAO,EAAE,gCAAgC;EAAE,OAAO;EAAQ,CAC5D;CACD,MAAM,EAAC,MAAM,OAAO,cAAaC,oBAAY;EAC3C,QAAQ,WAAW,SAAS,iBAAiB,OAAO,WAAW,OAAO,MAAM,GAAG;EAC/E;EACA;EACD,CAAC;AAEF,QACE,oBAACC;EACC,OAAO,MAAM,SAAS,EAAE;EACxB,cAAc,MAAM;EACT;EACX,OAAO,yBAAyB,GAAG,OAAO,yBAAyB;EAC5D;EACC;EACR,cAAc;EACN;EACR,kBAAkB;EAClB,UACE,cAAc,CAAC,UACV,SAAwC;AACvC,aAAU,KAAK;AACf,aAAU,EAAE;MAEd;EAEO;EACb,GAAI;GACJ;;AAIN,uBAAe"}
+{"version":3,"file":"UserList.js","names":["UserList: FC<UserListProps>","useTranslation","attributes: SelectOption[]","endpoint: ManagementEndpoint","useManagementEndpoint","queryFilter: string | undefined","useResourceQuery","BaseUserList"],"sources":["../../../../src/components/admin/UserList/UserList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ManagedUserListResponse,\n  SelectOption,\n  UserQueryKeys,\n  getUsers,\n  toEqualityFilter,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseUserList, {BaseUserListProps} from './BaseUserList';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {AdminSearchValue} from '../shared/AdminSearch';\n\nexport type UserListProps = Omit<\n  BaseUserListProps,\n  'error' | 'isLoading' | 'offset' | 'onPageChange' | 'onSearch' | 'search' | 'totalResults' | 'users'\n> & {\n  /**\n   * Server-side filter expression, for example `username eq \"ada\"`. Hides the search form, since the\n   * server takes one expression.\n   */\n  filter?: string;\n  /**\n   * Whether to show the search form. The server matches the whole value of the chosen attribute.\n   * @default true\n   */\n  searchable?: boolean;\n};\n\n/**\n * Lists the users the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <UserList onSelect={(user) => setSelectedUserId(user.id)} />\n * ```\n */\nconst UserList: FC<UserListProps> = ({\n  filter,\n  limit = 20,\n  preferences,\n  searchable = true,\n  searchAttributes,\n  ...rest\n}: UserListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const [search, setSearch] = useState<AdminSearchValue | null>(null);\n  const attributes: SelectOption[] = searchAttributes ?? [\n    {label: t('admin.users.list.search.username'), value: 'username'},\n    {label: t('admin.users.list.search.email'), value: 'email'},\n  ];\n  const endpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const queryFilter: string | undefined =\n    filter ?? (search ? toEqualityFilter(search.attribute, search.value) : undefined);\n  const {data, error, isLoading}: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {filter: queryFilter, limit, offset}],\n    (fetcher) => getUsers({...endpoint, fetcher, filter: queryFilter, limit, offset}),\n  );\n\n  return (\n    <BaseUserList\n      users={data?.users ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.users.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      search={search}\n      searchAttributes={attributes}\n      onSearch={\n        searchable && !filter\n          ? (next: AdminSearchValue | null): void => {\n              setSearch(next);\n              setOffset(0);\n            }\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserList;\n"],"mappings":";;;;;;;;;;;;;;;;;AA0CA,MAAMA,YAA+B,EACnC,QACA,QAAQ,IACR,aACA,aAAa,MACb,iBACA,GAAG,WAC8B;CACjC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,aAAa,SAAiB,EAAE;CAC/C,MAAM,CAAC,QAAQ,aAAa,SAAkC,KAAK;CACnE,MAAMC,aAA6B,oBAAoB,CACrD;EAAC,OAAO,EAAE,mCAAmC;EAAE,OAAO;EAAW,EACjE;EAAC,OAAO,EAAE,gCAAgC;EAAE,OAAO;EAAQ,CAC5D;CACD,MAAMC,WAA+BC,8BAAsB,QAAQ;CACnE,MAAMC,cACJ,WAAW,SAAS,iBAAiB,OAAO,WAAW,OAAO,MAAM,GAAG;CACzE,MAAM,EAAC,MAAM,OAAO,cAA2DC,yBAC7E,CAAC,cAAc,OAAO;EAAC,QAAQ;EAAa;EAAO;EAAO,CAAC,GAC1D,YAAY,SAAS;EAAC,GAAG;EAAU;EAAS,QAAQ;EAAa;EAAO;EAAO,CAAC,CAClF;AAED,QACE,oBAACC;EACC,OAAO,MAAM,SAAS,EAAE;EACxB,cAAc,MAAM;EACT;EACX,OAAO,yBAAyB,GAAG,OAAO,yBAAyB;EAC5D;EACC;EACR,cAAc;EACN;EACR,kBAAkB;EAClB,UACE,cAAc,CAAC,UACV,SAAwC;AACvC,aAAU,KAAK;AACf,aAAU,EAAE;MAEd;EAEO;EACb,GAAI;GACJ;;AAIN,uBAAe"}

package/dist/components/admin/shared/AccountLifecycleParts.d.ts

@@ -0,0 +1,32 @@
+import { AccessStatusValue, AccountLifecycleAction } from '@thunderid/browser';
+import { FC } from 'react';
+export interface AccessStatusBadgeProps {
+    status?: AccessStatusValue;
+}
+/**
+ * The translated access status of an identity, or its raw value when the status is one this SDK does
+ * not know. Renders nothing when the server reports no status.
+ */
+export declare const AccessStatusBadge: FC<AccessStatusBadgeProps>;
+export interface AccountLifecycleButtonsProps {
+    /**
+     * The actions to offer, most expected first.
+     */
+    actions: AccountLifecycleAction[];
+    /**
+     * Whether a suspension asks for an optional operator note. The note is recorded by the flow.
+     */
+    collectsOperatorNote?: boolean;
+    isRunning?: boolean;
+    /**
+     * Name of the identity, already resolved, used in the confirmation question.
+     */
+    name: string;
+    onAction: (action: AccountLifecycleAction, operatorNote?: string) => void;
+}
+/**
+ * One button per account lifecycle action. Suspending and unsuspending ask for confirmation inline;
+ * unlocking is remedial and runs straight away.
+ */
+export declare const AccountLifecycleButtons: FC<AccountLifecycleButtonsProps>;
+//# sourceMappingURL=AccountLifecycleParts.d.ts.map

package/dist/components/admin/shared/AccountLifecycleParts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountLifecycleParts.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/shared/AccountLifecycleParts.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAC,iBAAiB,EAAE,sBAAsB,EAAC,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAc,EAAE,EAAyB,MAAM,OAAO,CAAC;AAW9D,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,EAAE,CAAC,sBAAsB,CAiBxD,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C;;OAEG;IACH,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAClC;;OAEG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,CAAC,MAAM,EAAE,sBAAsB,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3E;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,EAAE,CAAC,4BAA4B,CAkFpE,CAAC"}