@thunderid/react 1.7.0 → 1.9.0

package/dist/cjs/components/admin/GroupCreate/GroupCreate.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"GroupCreate.cjs","names":["GroupCreate: FC<GroupCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","useCreateGroup","BaseGroupCreate"],"sources":["../../../../../src/components/admin/GroupCreate/GroupCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage, Group} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseGroupCreate, {BaseGroupCreateProps, GroupCreateSubmission} from './BaseGroupCreate';\nimport useCreateGroup from '../../../hooks/management/groups/useCreateGroup';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type GroupCreateProps = Omit<BaseGroupCreateProps, 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created group.\n   */\n  onCreated?: (group: Group) => void;\n  /**\n   * Organization unit the group is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates a group through the management API.\n *\n * @example\n * ```tsx\n * <GroupCreate onCreated={(group) => navigate(`/groups/${group.id}`)} />\n * ```\n */\nconst GroupCreate: FC<GroupCreateProps> = ({onCreated, ouId, preferences, ...rest}: GroupCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const {error, isLoading, mutate} = useCreateGroup({onSuccess: onCreated});\n\n  const handleSubmit = ({description, name}: GroupCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId});\n    }\n  };\n\n  return (\n    <BaseGroupCreate\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.groups.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA6BA,MAAMA,eAAqC,EAAC,WAAW,MAAM,YAAa,GAAG,WAA0C;CACrH,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAM,EAAC,OAAO,WAAW,WAAUC,+BAAe,EAAC,WAAW,WAAU,CAAC;CAEzE,MAAM,gBAAgB,EAAC,aAAa,WAAuC;AACzE,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAa,CAAC;;AAIxD,QACE,2CAACC;EACC,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,4BAA4B,GAAG,EAAE,4BAA4B;EAEpG;EACb,GAAI;GACJ;;AAIN,0BAAe"}
+{"version":3,"file":"GroupCreate.cjs","names":["GroupCreate: FC<GroupCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceMutation","GroupQueryKeys","BaseGroupCreate"],"sources":["../../../../../src/components/admin/GroupCreate/GroupCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {CreateGroupRequest, Group, GroupQueryKeys, createGroup, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseGroupCreate, {BaseGroupCreateProps, GroupCreateSubmission} from './BaseGroupCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type GroupCreateProps = Omit<BaseGroupCreateProps, 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created group.\n   */\n  onCreated?: (group: Group) => void;\n  /**\n   * Organization unit the group is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates a group through the management API.\n *\n * @example\n * ```tsx\n * <GroupCreate onCreated={(group) => navigate(`/groups/${group.id}`)} />\n * ```\n */\nconst GroupCreate: FC<GroupCreateProps> = ({onCreated, ouId, preferences, ...rest}: GroupCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const {error, isLoading, mutate}: ResourceMutationResult<Group, CreateGroupRequest> = useResourceMutation(\n    (payload: CreateGroupRequest, fetcher) => createGroup({...endpoint, fetcher, payload}),\n    () => [[GroupQueryKeys.GROUPS], [GroupQueryKeys.MEMBERSHIPS]],\n    {onSuccess: onCreated},\n  );\n\n  const handleSubmit = ({description, name}: GroupCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId});\n    }\n  };\n\n  return (\n    <BaseGroupCreate\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.groups.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA8BA,MAAMA,eAAqC,EAAC,WAAW,MAAM,YAAa,GAAG,WAA0C;CACrH,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAMC,WAA+BC,sCAAsB,SAAS;CACpE,MAAM,EAAC,OAAO,WAAW,WAA6DC,qCACnF,SAA6B,iDAAwB;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,QAChF,CAAC,CAACC,mCAAe,OAAO,EAAE,CAACA,mCAAe,YAAY,CAAC,EAC7D,EAAC,WAAW,WAAU,CACvB;CAED,MAAM,gBAAgB,EAAC,aAAa,WAAuC;AACzE,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAa,CAAC;;AAIxD,QACE,2CAACC;EACC,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,4BAA4B,GAAG,EAAE,4BAA4B;EAEpG;EACb,GAAI;GACJ;;AAIN,0BAAe"}

package/dist/cjs/components/admin/GroupList/GroupList.cjs

@@ -1,6 +1,7 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useGetGroups = require('../../../hooks/management/groups/useGetGroups.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
 const require_BaseGroupList = require('./BaseGroupList.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -21,10 +22,16 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 const GroupList = ({ limit = 20, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const [offset, setOffset] = (0, react.useState)(0);
-	const { data, error, isLoading } = require_useGetGroups.default({
+	const endpoint = require_useManagementEndpoint.default("groups");
+	const { data, error, isLoading } = require_useResourceQuery.default([__thunderid_browser.GroupQueryKeys.GROUPS, {
 		limit,
 		offset
-	});
+	}], (fetcher) => (0, __thunderid_browser.getGroups)({
+		...endpoint,
+		fetcher,
+		limit,
+		offset
+	}));
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseGroupList.default, {
 		groups: data?.groups ?? [],
 		totalResults: data?.totalResults,

package/dist/cjs/components/admin/GroupList/GroupList.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"GroupList.cjs","names":["GroupList: FC<GroupListProps>","useTranslation","useGetGroups","BaseGroupList"],"sources":["../../../../../src/components/admin/GroupList/GroupList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseGroupList, {BaseGroupListProps} from './BaseGroupList';\nimport useGetGroups from '../../../hooks/management/groups/useGetGroups';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type GroupListProps = Omit<\n  BaseGroupListProps,\n  'error' | 'groups' | 'isLoading' | 'offset' | 'onPageChange' | 'totalResults'\n>;\n\n/**\n * Lists the groups the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <GroupList onSelect={(group) => setSelectedGroupId(group.id)} />\n * ```\n */\nconst GroupList: FC<GroupListProps> = ({limit = 20, preferences, ...rest}: GroupListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const {data, error, isLoading} = useGetGroups({limit, offset});\n\n  return (\n    <BaseGroupList\n      groups={data?.groups ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.groups.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsBA,MAAMA,aAAiC,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAwC;CAC1G,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAM,EAAC,MAAM,OAAO,cAAaC,6BAAa;EAAC;EAAO;EAAO,CAAC;AAE9D,QACE,2CAACC;EACC,QAAQ,MAAM,UAAU,EAAE;EAC1B,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,0BAA0B;EAC7D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,wBAAe"}
+{"version":3,"file":"GroupList.cjs","names":["GroupList: FC<GroupListProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","GroupQueryKeys","BaseGroupList"],"sources":["../../../../../src/components/admin/GroupList/GroupList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {GroupListResponse, GroupQueryKeys, getGroups, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseGroupList, {BaseGroupListProps} from './BaseGroupList';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type GroupListProps = Omit<\n  BaseGroupListProps,\n  'error' | 'groups' | 'isLoading' | 'offset' | 'onPageChange' | 'totalResults'\n>;\n\n/**\n * Lists the groups the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <GroupList onSelect={(group) => setSelectedGroupId(group.id)} />\n * ```\n */\nconst GroupList: FC<GroupListProps> = ({limit = 20, preferences, ...rest}: GroupListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const {data, error, isLoading}: ResourceQueryResult<GroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUPS, {limit, offset}],\n    (fetcher) => getGroups({...endpoint, fetcher, limit, offset}),\n  );\n\n  return (\n    <BaseGroupList\n      groups={data?.groups ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.groups.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuBA,MAAMA,aAAiC,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAwC;CAC1G,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAMC,WAA+BC,sCAAsB,SAAS;CACpE,MAAM,EAAC,MAAM,OAAO,cAAqDC,iCACvE,CAACC,mCAAe,QAAQ;EAAC;EAAO;EAAO,CAAC,GACvC,+CAAsB;EAAC,GAAG;EAAU;EAAS;EAAO;EAAO,CAAC,CAC9D;AAED,QACE,2CAACC;EACC,QAAQ,MAAM,UAAU,EAAE;EAC1B,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,0BAA0B;EAC7D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,wBAAe"}

package/dist/cjs/components/admin/GroupMembers/GroupMembers.cjs

@@ -1,10 +1,8 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useGetUsers = require('../../../hooks/management/users/useGetUsers.cjs');
-const require_useGetAgents = require('../../../hooks/management/agents/useGetAgents.cjs');
-const require_useGetGroupMembers = require('../../../hooks/management/groups/useGetGroupMembers.cjs');
-const require_useAddGroupMembers = require('../../../hooks/management/groups/useAddGroupMembers.cjs');
-const require_useRemoveGroupMembers = require('../../../hooks/management/groups/useRemoveGroupMembers.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
+const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
 const require_BaseGroupMembers = require('./BaseGroupMembers.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -15,6 +13,15 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 
 //#region src/components/admin/GroupMembers/GroupMembers.tsx
 /**
+* Query keys to refetch after a group's membership changes.
+*/
+const getMembershipInvalidatedKeys = ({ groupId }) => [
+	[__thunderid_browser.GroupQueryKeys.GROUP, groupId],
+	[__thunderid_browser.GroupQueryKeys.GROUP_MEMBERS, groupId],
+	[__thunderid_browser.GroupQueryKeys.MEMBERSHIPS],
+	[__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS]
+];
+/**
 * Lists the users and agents in a group, and lets the signed-in user add and remove them.
 *
 * @example
@@ -22,13 +29,44 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 * <GroupMembers groupId={groupId} />
 * ```
 */
-const GroupMembers = ({ editable = false, groupId, preferences,...rest }) => {
+const GroupMembers = ({ administrationMode, editable = false, groupId, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
-	const members = require_useGetGroupMembers.default(groupId, { limit: 100 });
-	const users = require_useGetUsers.default({ limit: 100 }, { enabled: editable });
-	const agents = require_useGetAgents.default({ limit: 100 }, { enabled: editable });
-	const add = require_useAddGroupMembers.default();
-	const remove = require_useRemoveGroupMembers.default();
+	const groupsEndpoint = require_useManagementEndpoint.default("groups");
+	const usersEndpoint = require_useManagementEndpoint.default("users");
+	const agentsEndpoint = require_useManagementEndpoint.default("agents");
+	const members = require_useResourceQuery.default([
+		__thunderid_browser.GroupQueryKeys.GROUP_MEMBERS,
+		groupId,
+		{ limit: 100 }
+	], (fetcher) => (0, __thunderid_browser.getGroupMembers)({
+		...groupsEndpoint,
+		fetcher,
+		groupId,
+		limit: 100
+	}), { enabled: Boolean(groupId) });
+	const users = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USERS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getUsers)({
+		...usersEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const agents = require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENTS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getAgents)({
+		...agentsEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const add = require_useResourceMutation.default(({ groupId: id, members: changes }, fetcher) => (0, __thunderid_browser.addGroupMembers)({
+		...groupsEndpoint,
+		fetcher,
+		groupId: id,
+		members: changes
+	}), getMembershipInvalidatedKeys);
+	const remove = require_useResourceMutation.default(({ groupId: id, members: changes }, fetcher) => (0, __thunderid_browser.removeGroupMembers)({
+		...groupsEndpoint,
+		administrationMode,
+		fetcher,
+		groupId: id,
+		members: changes
+	}), getMembershipInvalidatedKeys);
 	const candidates = (0, react.useMemo)(() => ({
 		agent: (agents.data?.agents ?? []).map((agent) => ({
 			id: agent.id,

package/dist/cjs/components/admin/GroupMembers/GroupMembers.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"GroupMembers.cjs","names":["GroupMembers: FC<GroupMembersProps>","useTranslation","useGetGroupMembers","useGetUsers","useGetAgents","useAddGroupMembers","useRemoveGroupMembers","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n  BasicAgent,\n  GroupMember,\n  ManagedUser,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useGetAgents from '../../../hooks/management/agents/useGetAgents';\nimport useAddGroupMembers from '../../../hooks/management/groups/useAddGroupMembers';\nimport useGetGroupMembers from '../../../hooks/management/groups/useGetGroupMembers';\nimport useRemoveGroupMembers from '../../../hooks/management/groups/useRemoveGroupMembers';\nimport useGetUsers from '../../../hooks/management/users/useGetUsers';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  editable = false,\n  groupId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const members = useGetGroupMembers(groupId, {limit: 100});\n  const users = useGetUsers({limit: 100}, {enabled: editable});\n  const agents = useGetAgents({limit: 100}, {enabled: editable});\n  const add = useAddGroupMembers();\n  const remove = useRemoveGroupMembers();\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, users.data],\n  );\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAwCA,MAAMA,gBAAuC,EAC3C,WAAW,OACX,SACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,UAAUC,mCAAmB,SAAS,EAAC,OAAO,KAAI,CAAC;CACzD,MAAM,QAAQC,4BAAY,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC5D,MAAM,SAASC,6BAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,MAAMC,oCAAoB;CAChC,MAAM,SAASC,uCAAuB;CAEtC,MAAMC,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD,CAAC,OAAO,MAAM,MAAM,KAAK,CAC1B;AAED,QACE,2CAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,yDAC2B,GAAG,QAAQ,OAAO,6BAA6B,sDAC/C,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}
+{"version":3,"file":"GroupMembers.cjs","names":["GroupQueryKeys","RoleQueryKeys","GroupMembers: FC<GroupMembersProps>","useTranslation","groupsEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","members: ResourceQueryResult<GroupMemberListResponse>","useResourceQuery","users: ResourceQueryResult<ManagedUserListResponse>","UserQueryKeys","agents: ResourceQueryResult<AgentListResponse>","AgentQueryKeys","add: ResourceMutationResult<Group, GroupMembersVariables>","useResourceMutation","remove: ResourceMutationResult<Group, GroupMembersVariables>","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupMember,\n  GroupMemberListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  ResourceQueryKey,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addGroupMembers,\n  getAgents,\n  getGroupMembers,\n  getUsers,\n  removeGroupMembers,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface GroupMembersVariables {\n  groupId: string;\n  members: Pick<GroupMember, 'id' | 'type'>[];\n}\n\n/**\n * Query keys to refetch after a group's membership changes.\n */\nconst getMembershipInvalidatedKeys = ({groupId}: GroupMembersVariables): ResourceQueryKey[] => [\n  [GroupQueryKeys.GROUP, groupId],\n  [GroupQueryKeys.GROUP_MEMBERS, groupId],\n  [GroupQueryKeys.MEMBERSHIPS],\n  [RoleQueryKeys.ROLE_ASSIGNMENTS],\n];\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * How a member is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  administrationMode,\n  editable = false,\n  groupId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const members: ResourceQueryResult<GroupMemberListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUP_MEMBERS, groupId, {limit: 100}],\n    (fetcher) => getGroupMembers({...groupsEndpoint, fetcher, groupId, limit: 100}),\n    {enabled: Boolean(groupId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const add: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      addGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n  const remove: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      removeGroupMembers({...groupsEndpoint, administrationMode, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, users.data],\n  );\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;AAyCA,MAAM,gCAAgC,EAAC,cAAwD;CAC7F,CAACA,mCAAe,OAAO,QAAQ;CAC/B,CAACA,mCAAe,eAAe,QAAQ;CACvC,CAACA,mCAAe,YAAY;CAC5B,CAACC,kCAAc,iBAAiB;CACjC;;;;;;;;;AA4BD,MAAMC,gBAAuC,EAC3C,oBACA,WAAW,OACX,SACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,iBAAqCC,sCAAsB,SAAS;CAC1E,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,UAAwDC,iCAC5D;EAACT,mCAAe;EAAe;EAAS,EAAC,OAAO,KAAI;EAAC,GACpD,qDAA4B;EAAC,GAAG;EAAgB;EAAS;EAAS,OAAO;EAAI,CAAC,EAC/E,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMU,QAAsDD,iCAC1D,CAACE,kCAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,8CAAqB;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDH,iCACrD,CAACI,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,MAA4DC,qCAC/D,EAAC,SAAS,IAAI,SAAS,WAAiC,qDACvC;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EAC9E,6BACD;CACD,MAAMC,SAA+DD,qCAClE,EAAC,SAAS,IAAI,SAAS,WAAiC,wDACpC;EAAC,GAAG;EAAgB;EAAoB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EACrG,6BACD;CAED,MAAME,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD,CAAC,OAAO,MAAM,MAAM,KAAK,CAC1B;AAED,QACE,2CAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,yDAC2B,GAAG,QAAQ,OAAO,6BAA6B,sDAC/C,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}

package/dist/cjs/components/admin/RoleAssignments/RoleAssignments.cjs

@@ -1,11 +1,8 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useGetUsers = require('../../../hooks/management/users/useGetUsers.cjs');
-const require_useGetAgents = require('../../../hooks/management/agents/useGetAgents.cjs');
-const require_useGetRoleAssignments = require('../../../hooks/management/roles/useGetRoleAssignments.cjs');
-const require_useAddRoleAssignments = require('../../../hooks/management/roles/useAddRoleAssignments.cjs');
-const require_useRemoveRoleAssignments = require('../../../hooks/management/roles/useRemoveRoleAssignments.cjs');
-const require_useGetGroups = require('../../../hooks/management/groups/useGetGroups.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
+const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
 const require_BaseRoleAssignments = require('./BaseRoleAssignments.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -24,18 +21,56 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 * <RoleAssignments roleId={roleId} />
 * ```
 */
-const RoleAssignments = ({ editable = false, filterable = true, preferences, roleId,...rest }) => {
+const RoleAssignments = ({ administrationMode, editable = false, filterable = true, preferences, roleId,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const [typeFilter, setTypeFilter] = (0, react.useState)(null);
-	const assignments = require_useGetRoleAssignments.default(roleId, {
+	const rolesEndpoint = require_useManagementEndpoint.default("roles");
+	const usersEndpoint = require_useManagementEndpoint.default("users");
+	const groupsEndpoint = require_useManagementEndpoint.default("groups");
+	const agentsEndpoint = require_useManagementEndpoint.default("agents");
+	const type = typeFilter ?? void 0;
+	const assignments = require_useResourceQuery.default([
+		__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS,
+		roleId,
+		{
+			limit: 100,
+			type
+		}
+	], (fetcher) => (0, __thunderid_browser.getRoleAssignments)({
+		...rolesEndpoint,
+		fetcher,
 		limit: 100,
-		type: typeFilter ?? void 0
-	});
-	const users = require_useGetUsers.default({ limit: 100 }, { enabled: editable });
-	const groups = require_useGetGroups.default({ limit: 100 }, { enabled: editable });
-	const agents = require_useGetAgents.default({ limit: 100 }, { enabled: editable });
-	const assign = require_useAddRoleAssignments.default();
-	const unassign = require_useRemoveRoleAssignments.default();
+		roleId,
+		type
+	}), { enabled: Boolean(roleId) });
+	const users = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USERS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getUsers)({
+		...usersEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const groups = require_useResourceQuery.default([__thunderid_browser.GroupQueryKeys.GROUPS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getGroups)({
+		...groupsEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const agents = require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENTS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getAgents)({
+		...agentsEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: editable });
+	const assign = require_useResourceMutation.default(({ assignments: changes, roleId: id }, fetcher) => (0, __thunderid_browser.addRoleAssignments)({
+		...rolesEndpoint,
+		assignments: changes,
+		fetcher,
+		roleId: id
+	}), () => [[__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS]]);
+	const unassign = require_useResourceMutation.default(({ assignments: changes, roleId: id }, fetcher) => (0, __thunderid_browser.removeRoleAssignments)({
+		...rolesEndpoint,
+		administrationMode,
+		assignments: changes,
+		fetcher,
+		roleId: id
+	}), () => [[__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS]]);
 	const candidates = (0, react.useMemo)(() => ({
 		agent: (agents.data?.agents ?? []).map((agent) => ({
 			id: agent.id,

package/dist/cjs/components/admin/RoleAssignments/RoleAssignments.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"RoleAssignments.cjs","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","useGetRoleAssignments","useGetUsers","useGetGroups","useGetAgents","useAddRoleAssignments","useRemoveRoleAssignments","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n  BasicAgent,\n  Group,\n  ManagedUser,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useGetAgents from '../../../hooks/management/agents/useGetAgents';\nimport useGetGroups from '../../../hooks/management/groups/useGetGroups';\nimport useAddRoleAssignments from '../../../hooks/management/roles/useAddRoleAssignments';\nimport useGetRoleAssignments from '../../../hooks/management/roles/useGetRoleAssignments';\nimport useRemoveRoleAssignments from '../../../hooks/management/roles/useRemoveRoleAssignments';\nimport useGetUsers from '../../../hooks/management/users/useGetUsers';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  editable = false,\n  filterable = true,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const assignments = useGetRoleAssignments(roleId, {limit: 100, type: typeFilter ?? undefined});\n  const users = useGetUsers({limit: 100}, {enabled: editable});\n  const groups = useGetGroups({limit: 100}, {enabled: editable});\n  const agents = useGetAgents({limit: 100}, {enabled: editable});\n  const assign = useAddRoleAssignments();\n  const unassign = useRemoveRoleAssignments();\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      group: (groups.data?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, groups.data, users.data],\n  );\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AA0DA,MAAMA,mBAA6C,EACjD,WAAW,OACX,aAAa,MACb,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,qCAAmD,KAAK;CAC3E,MAAM,cAAcC,sCAAsB,QAAQ;EAAC,OAAO;EAAK,MAAM,cAAc;EAAU,CAAC;CAC9F,MAAM,QAAQC,4BAAY,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC5D,MAAM,SAASC,6BAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,SAASC,6BAAa,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,UAAS,CAAC;CAC9D,MAAM,SAASC,uCAAuB;CACtC,MAAM,WAAWC,0CAA0B;CAE3C,MAAMC,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAkB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAC7F,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD;EAAC,OAAO;EAAM,OAAO;EAAM,MAAM;EAAK,CACvC;AAED,QACE,2CAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,yDAC2B,GAAG,YAAY,OAAO,gCAAgC,sDACtD,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}
+{"version":3,"file":"RoleAssignments.cjs","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","rolesEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","groupsEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","type: RoleAssigneeType | undefined","assignments: ResourceQueryResult<RoleAssignmentListResponse>","useResourceQuery","RoleQueryKeys","users: ResourceQueryResult<ManagedUserListResponse>","UserQueryKeys","groups: ResourceQueryResult<GroupListResponse>","GroupQueryKeys","agents: ResourceQueryResult<AgentListResponse>","AgentQueryKeys","assign: ResourceMutationResult<void, RoleAssignmentsVariables>","useResourceMutation","unassign: ResourceMutationResult<void, RoleAssignmentsVariables>","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n  RoleAssignmentListResponse,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addRoleAssignments,\n  getAgents,\n  getGroups,\n  getRoleAssignments,\n  getUsers,\n  removeRoleAssignments,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface RoleAssignmentsVariables {\n  assignments: RoleAssignmentInput[];\n  roleId: string;\n}\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * How an assignment is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  administrationMode,\n  editable = false,\n  filterable = true,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const rolesEndpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const type: RoleAssigneeType | undefined = typeFilter ?? undefined;\n  const assignments: ResourceQueryResult<RoleAssignmentListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, roleId, {limit: 100, type}],\n    (fetcher) => getRoleAssignments({...rolesEndpoint, fetcher, limit: 100, roleId, type}),\n    {enabled: Boolean(roleId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const groups: ResourceQueryResult<GroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUPS, {limit: 100}],\n    (fetcher) => getGroups({...groupsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const assign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      addRoleAssignments({...rolesEndpoint, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n  const unassign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      removeRoleAssignments({...rolesEndpoint, administrationMode, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      group: (groups.data?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, groups.data, users.data],\n  );\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiFA,MAAMA,mBAA6C,EACjD,oBACA,WAAW,OACX,aAAa,MACb,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,qCAAmD,KAAK;CAC3E,MAAMC,gBAAoCC,sCAAsB,QAAQ;CACxE,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,iBAAqCH,sCAAsB,SAAS;CAC1E,MAAMI,OAAqC,cAAc;CACzD,MAAMC,cAA+DC,iCACnE;EAACC,kCAAc;EAAkB;EAAQ;GAAC,OAAO;GAAK;GAAK;EAAC,GAC3D,wDAA+B;EAAC,GAAG;EAAe;EAAS,OAAO;EAAK;EAAQ;EAAK,CAAC,EACtF,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,QAAsDF,iCAC1D,CAACG,kCAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,8CAAqB;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDJ,iCACrD,CAACK,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDN,iCACrD,CAACO,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiEC,qCACpE,EAAC,aAAa,SAAS,QAAQ,MAA+B,wDAC1C;EAAC,GAAG;EAAe,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QAC7E,CAAC,CAACR,kCAAc,iBAAiB,CAAC,CACzC;CACD,MAAMS,WAAmED,qCACtE,EAAC,aAAa,SAAS,QAAQ,MAA+B,2DACvC;EAAC,GAAG;EAAe;EAAoB,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QACpG,CAAC,CAACR,kCAAc,iBAAiB,CAAC,CACzC;CAED,MAAMU,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAkB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAC7F,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD;EAAC,OAAO;EAAM,OAAO;EAAM,MAAM;EAAK,CACvC;AAED,QACE,2CAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,yDAC2B,GAAG,YAAY,OAAO,gCAAgC,sDACtD,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}

package/dist/cjs/components/admin/RoleCreate/RoleCreate.cjs

@@ -1,6 +1,7 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useCreateRole = require('../../../hooks/management/roles/useCreateRole.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
 const require_useDefaultOuId = require('../shared/useDefaultOuId.cjs');
 const require_BaseRoleCreate = require('./BaseRoleCreate.cjs');
 let __thunderid_browser = require("@thunderid/browser");
@@ -20,7 +21,12 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 const RoleCreate = ({ onCreated, ouId, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const resolvedOuId = require_useDefaultOuId.default(ouId);
-	const { error, isLoading, mutate } = require_useCreateRole.default({ onSuccess: onCreated });
+	const endpoint = require_useManagementEndpoint.default("roles");
+	const { error, isLoading, mutate } = require_useResourceMutation.default((payload, fetcher) => (0, __thunderid_browser.createRole)({
+		...endpoint,
+		fetcher,
+		payload
+	}), () => [[__thunderid_browser.RoleQueryKeys.ROLES], [__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS]], { onSuccess: onCreated });
 	const handleSubmit = ({ description, name }) => {
 		if (resolvedOuId) mutate({
 			description,

package/dist/cjs/components/admin/RoleCreate/RoleCreate.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"RoleCreate.cjs","names":["RoleCreate: FC<RoleCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","useCreateRole","BaseRoleCreate"],"sources":["../../../../../src/components/admin/RoleCreate/RoleCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage, Role} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRoleCreate, {BaseRoleCreateProps, RoleCreateSubmission} from './BaseRoleCreate';\nimport useCreateRole from '../../../hooks/management/roles/useCreateRole';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type RoleCreateProps = Omit<BaseRoleCreateProps, 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created role.\n   */\n  onCreated?: (role: Role) => void;\n  /**\n   * Organization unit the role is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates a role through the management API.\n *\n * @example\n * ```tsx\n * <RoleCreate onCreated={(role) => navigate(`/roles/${role.id}`)} />\n * ```\n */\nconst RoleCreate: FC<RoleCreateProps> = ({onCreated, ouId, preferences, ...rest}: RoleCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const {error, isLoading, mutate} = useCreateRole({onSuccess: onCreated});\n\n  const handleSubmit = ({description, name}: RoleCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId});\n    }\n  };\n\n  return (\n    <BaseRoleCreate\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.roles.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA6BA,MAAMA,cAAmC,EAAC,WAAW,MAAM,YAAa,GAAG,WAAyC;CAClH,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAM,EAAC,OAAO,WAAW,WAAUC,8BAAc,EAAC,WAAW,WAAU,CAAC;CAExE,MAAM,gBAAgB,EAAC,aAAa,WAAsC;AACxE,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAa,CAAC;;AAIxD,QACE,2CAACC;EACC,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,2BAA2B,GAAG,EAAE,4BAA4B;EAEnG;EACb,GAAI;GACJ;;AAIN,yBAAe"}
+{"version":3,"file":"RoleCreate.cjs","names":["RoleCreate: FC<RoleCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceMutation","RoleQueryKeys","BaseRoleCreate"],"sources":["../../../../../src/components/admin/RoleCreate/RoleCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {CreateRoleRequest, Role, RoleQueryKeys, createRole, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRoleCreate, {BaseRoleCreateProps, RoleCreateSubmission} from './BaseRoleCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useTranslation from '../../../hooks/useTranslation';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type RoleCreateProps = Omit<BaseRoleCreateProps, 'error' | 'isSubmitting' | 'onSubmit'> & {\n  /**\n   * Called with the created role.\n   */\n  onCreated?: (role: Role) => void;\n  /**\n   * Organization unit the role is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Creates a role through the management API.\n *\n * @example\n * ```tsx\n * <RoleCreate onCreated={(role) => navigate(`/roles/${role.id}`)} />\n * ```\n */\nconst RoleCreate: FC<RoleCreateProps> = ({onCreated, ouId, preferences, ...rest}: RoleCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const {error, isLoading, mutate}: ResourceMutationResult<Role, CreateRoleRequest> = useResourceMutation(\n    (payload: CreateRoleRequest, fetcher) => createRole({...endpoint, fetcher, payload}),\n    () => [[RoleQueryKeys.ROLES], [RoleQueryKeys.ROLE_ASSIGNMENTS]],\n    {onSuccess: onCreated},\n  );\n\n  const handleSubmit = ({description, name}: RoleCreateSubmission): void => {\n    if (resolvedOuId) {\n      void mutate({description, name, ouId: resolvedOuId});\n    }\n  };\n\n  return (\n    <BaseRoleCreate\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.roles.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA8BA,MAAMA,cAAmC,EAAC,WAAW,MAAM,YAAa,GAAG,WAAyC;CAClH,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAMC,WAA+BC,sCAAsB,QAAQ;CACnE,MAAM,EAAC,OAAO,WAAW,WAA2DC,qCACjF,SAA4B,gDAAuB;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,QAC9E,CAAC,CAACC,kCAAc,MAAM,EAAE,CAACA,kCAAc,iBAAiB,CAAC,EAC/D,EAAC,WAAW,WAAU,CACvB;CAED,MAAM,gBAAgB,EAAC,aAAa,WAAsC;AACxE,MAAI,aACF,CAAK,OAAO;GAAC;GAAa;GAAM,MAAM;GAAa,CAAC;;AAIxD,QACE,2CAACC;EACC,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,2BAA2B,GAAG,EAAE,4BAA4B;EAEnG;EACb,GAAI;GACJ;;AAIN,yBAAe"}

package/dist/cjs/components/admin/RoleList/RoleList.cjs

@@ -1,6 +1,7 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useGetRoles = require('../../../hooks/management/roles/useGetRoles.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
 const require_BaseRoleList = require('./BaseRoleList.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -21,10 +22,16 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 const RoleList = ({ limit = 20, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const [offset, setOffset] = (0, react.useState)(0);
-	const { data, error, isLoading } = require_useGetRoles.default({
+	const endpoint = require_useManagementEndpoint.default("roles");
+	const { data, error, isLoading } = require_useResourceQuery.default([__thunderid_browser.RoleQueryKeys.ROLES, {
 		limit,
 		offset
-	});
+	}], (fetcher) => (0, __thunderid_browser.getRoles)({
+		...endpoint,
+		fetcher,
+		limit,
+		offset
+	}));
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseRoleList.default, {
 		roles: data?.roles ?? [],
 		totalResults: data?.totalResults,

package/dist/cjs/components/admin/RoleList/RoleList.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"RoleList.cjs","names":["RoleList: FC<RoleListProps>","useTranslation","useGetRoles","BaseRoleList"],"sources":["../../../../../src/components/admin/RoleList/RoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseRoleList, {BaseRoleListProps} from './BaseRoleList';\nimport useGetRoles from '../../../hooks/management/roles/useGetRoles';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RoleListProps = Omit<\n  BaseRoleListProps,\n  'error' | 'isLoading' | 'offset' | 'onPageChange' | 'roles' | 'totalResults'\n>;\n\n/**\n * Lists the roles the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <RoleList onSelect={(role) => setSelectedRoleId(role.id)} />\n * ```\n */\nconst RoleList: FC<RoleListProps> = ({limit = 20, preferences, ...rest}: RoleListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const {data, error, isLoading} = useGetRoles({limit, offset});\n\n  return (\n    <BaseRoleList\n      roles={data?.roles ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.roles.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsBA,MAAMA,YAA+B,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAuC;CACvG,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAM,EAAC,MAAM,OAAO,cAAaC,4BAAY;EAAC;EAAO;EAAO,CAAC;AAE7D,QACE,2CAACC;EACC,OAAO,MAAM,SAAS,EAAE;EACxB,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,yBAAyB;EAC5D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,uBAAe"}
+{"version":3,"file":"RoleList.cjs","names":["RoleList: FC<RoleListProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","useResourceQuery","RoleQueryKeys","BaseRoleList"],"sources":["../../../../../src/components/admin/RoleList/RoleList.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {RoleListResponse, RoleQueryKeys, getRoles, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement, useState} from 'react';\nimport BaseRoleList, {BaseRoleListProps} from './BaseRoleList';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RoleListProps = Omit<\n  BaseRoleListProps,\n  'error' | 'isLoading' | 'offset' | 'onPageChange' | 'roles' | 'totalResults'\n>;\n\n/**\n * Lists the roles the signed-in user is allowed to see, a page at a time.\n *\n * @example\n * ```tsx\n * <RoleList onSelect={(role) => setSelectedRoleId(role.id)} />\n * ```\n */\nconst RoleList: FC<RoleListProps> = ({limit = 20, preferences, ...rest}: RoleListProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [offset, setOffset] = useState<number>(0);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const {data, error, isLoading}: ResourceQueryResult<RoleListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLES, {limit, offset}],\n    (fetcher) => getRoles({...endpoint, fetcher, limit, offset}),\n  );\n\n  return (\n    <BaseRoleList\n      roles={data?.roles ?? []}\n      totalResults={data?.totalResults}\n      isLoading={isLoading}\n      error={toManagementErrorMessage(t, error, 'admin.roles.list.error')}\n      limit={limit}\n      offset={offset}\n      onPageChange={setOffset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleList;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuBA,MAAMA,YAA+B,EAAC,QAAQ,IAAI,YAAa,GAAG,WAAuC;CACvG,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,QAAQ,iCAA8B,EAAE;CAC/C,MAAMC,WAA+BC,sCAAsB,QAAQ;CACnE,MAAM,EAAC,MAAM,OAAO,cAAoDC,iCACtE,CAACC,kCAAc,OAAO;EAAC;EAAO;EAAO,CAAC,GACrC,8CAAqB;EAAC,GAAG;EAAU;EAAS;EAAO;EAAO,CAAC,CAC7D;AAED,QACE,2CAACC;EACC,OAAO,MAAM,SAAS,EAAE;EACxB,cAAc,MAAM;EACT;EACX,yDAAgC,GAAG,OAAO,yBAAyB;EAC5D;EACC;EACR,cAAc;EACD;EACb,GAAI;GACJ;;AAIN,uBAAe"}

package/dist/cjs/components/admin/RolePermissions/RolePermissions.cjs

@@ -1,6 +1,7 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useGetRole = require('../../../hooks/management/roles/useGetRole.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
 const require_BaseRolePermissions = require('./BaseRolePermissions.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -18,7 +19,12 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 */
 const RolePermissions = ({ preferences, roleId,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
-	const role = require_useGetRole.default(roleId);
+	const endpoint = require_useManagementEndpoint.default("roles");
+	const role = require_useResourceQuery.default([__thunderid_browser.RoleQueryKeys.ROLE, roleId], (fetcher) => (0, __thunderid_browser.getRole)({
+		...endpoint,
+		fetcher,
+		roleId
+	}), { enabled: Boolean(roleId) });
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseRolePermissions.default, {
 		permissions: role.data?.permissions ?? [],
 		isLoading: role.isLoading,

package/dist/cjs/components/admin/RolePermissions/RolePermissions.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"RolePermissions.cjs","names":["RolePermissions: FC<RolePermissionsProps>","useTranslation","useGetRole","BaseRolePermissions"],"sources":["../../../../../src/components/admin/RolePermissions/RolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRolePermissions, {BaseRolePermissionsProps} from './BaseRolePermissions';\nimport useGetRole from '../../../hooks/management/roles/useGetRole';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RolePermissionsProps = Omit<BaseRolePermissionsProps, 'error' | 'isLoading' | 'permissions'> & {\n  roleId: string;\n};\n\n/**\n * Shows the permissions a role grants.\n *\n * @example\n * ```tsx\n * <RolePermissions roleId={roleId} />\n * ```\n */\nconst RolePermissions: FC<RolePermissionsProps> = ({\n  preferences,\n  roleId,\n  ...rest\n}: RolePermissionsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const role = useGetRole(roleId);\n\n  return (\n    <BaseRolePermissions\n      permissions={role.data?.permissions ?? []}\n      isLoading={role.isLoading}\n      error={toManagementErrorMessage(t, role.error, 'admin.roles.permissions.error')}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RolePermissions;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,MAAMA,mBAA6C,EACjD,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,OAAOC,2BAAW,OAAO;AAE/B,QACE,2CAACC;EACC,aAAa,KAAK,MAAM,eAAe,EAAE;EACzC,WAAW,KAAK;EAChB,yDAAgC,GAAG,KAAK,OAAO,gCAAgC;EAClE;EACb,GAAI;GACJ;;AAIN,8BAAe"}
+{"version":3,"file":"RolePermissions.cjs","names":["RolePermissions: FC<RolePermissionsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","role: ResourceQueryResult<Role>","useResourceQuery","RoleQueryKeys","BaseRolePermissions"],"sources":["../../../../../src/components/admin/RolePermissions/RolePermissions.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Role, RoleQueryKeys, getRole, toManagementErrorMessage} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseRolePermissions, {BaseRolePermissionsProps} from './BaseRolePermissions';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type RolePermissionsProps = Omit<BaseRolePermissionsProps, 'error' | 'isLoading' | 'permissions'> & {\n  roleId: string;\n};\n\n/**\n * Shows the permissions a role grants.\n *\n * @example\n * ```tsx\n * <RolePermissions roleId={roleId} />\n * ```\n */\nconst RolePermissions: FC<RolePermissionsProps> = ({\n  preferences,\n  roleId,\n  ...rest\n}: RolePermissionsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const role: ResourceQueryResult<Role> = useResourceQuery(\n    [RoleQueryKeys.ROLE, roleId],\n    (fetcher) => getRole({...endpoint, fetcher, roleId}),\n    {enabled: Boolean(roleId)},\n  );\n\n  return (\n    <BaseRolePermissions\n      permissions={role.data?.permissions ?? []}\n      isLoading={role.isLoading}\n      error={toManagementErrorMessage(t, role.error, 'admin.roles.permissions.error')}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RolePermissions;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAsBA,MAAMA,mBAA6C,EACjD,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,sCAAsB,QAAQ;CACnE,MAAMC,OAAkCC,iCACtC,CAACC,kCAAc,MAAM,OAAO,GAC3B,6CAAoB;EAAC,GAAG;EAAU;EAAS;EAAO,CAAC,EACpD,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;AAED,QACE,2CAACC;EACC,aAAa,KAAK,MAAM,eAAe,EAAE;EACzC,WAAW,KAAK;EAChB,yDAAgC,GAAG,KAAK,OAAO,gCAAgC;EAClE;EACb,GAAI;GACJ;;AAIN,8BAAe"}

package/dist/cjs/components/admin/UserCreate/UserCreate.cjs

@@ -1,9 +1,10 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_useCreateUser = require('../../../hooks/management/users/useCreateUser.cjs');
-const require_useGetUserTypes = require('../../../hooks/management/users/useGetUserTypes.cjs');
+const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
+const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
 const require_InviteUser = require('../../auth/InviteUser/InviteUser.cjs');
 const require_BaseUserCreate = require('./BaseUserCreate.cjs');
+const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
 const require_useDefaultOuId = require('../shared/useDefaultOuId.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -26,8 +27,18 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 const UserCreate = ({ inviteProps, mode = "api", onCreated, ouId, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const resolvedOuId = require_useDefaultOuId.default(ouId);
-	const { data: userTypes } = require_useGetUserTypes.default({ limit: 100 }, { enabled: mode === "api" });
-	const { error, isLoading, mutate } = require_useCreateUser.default({ onSuccess: onCreated });
+	const usersEndpoint = require_useManagementEndpoint.default("users");
+	const userTypesEndpoint = require_useManagementEndpoint.default("userTypes");
+	const { data: userTypes } = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USER_TYPES, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getUserTypes)({
+		...userTypesEndpoint,
+		fetcher,
+		limit: 100
+	}), { enabled: mode === "api" });
+	const { error, isLoading, mutate } = require_useResourceMutation.default((payload, fetcher) => (0, __thunderid_browser.createUser)({
+		...usersEndpoint,
+		fetcher,
+		payload
+	}), () => [[__thunderid_browser.UserQueryKeys.USERS]], { onSuccess: onCreated });
 	const options = (0, react.useMemo)(() => (userTypes?.types ?? []).map((userType) => ({
 		label: userType.displayName ?? userType.handle,
 		value: userType.handle

package/dist/cjs/components/admin/UserCreate/UserCreate.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"UserCreate.cjs","names":["UserCreate: FC<UserCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","useGetUserTypes","useCreateUser","options: SelectOption[]","InviteUser","BaseUserCreate"],"sources":["../../../../../src/components/admin/UserCreate/UserCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {toManagementErrorMessage, ManagedUser, ManagedUserType, SelectOption} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseUserCreate, {BaseUserCreateProps, UserCreateSubmission} from './BaseUserCreate';\nimport useCreateUser from '../../../hooks/management/users/useCreateUser';\nimport useGetUserTypes from '../../../hooks/management/users/useGetUserTypes';\nimport useTranslation from '../../../hooks/useTranslation';\nimport InviteUser, {InviteUserProps} from '../../auth/InviteUser/InviteUser';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type UserCreateProps = Omit<BaseUserCreateProps, 'error' | 'isSubmitting' | 'onSubmit' | 'userTypes'> & {\n  /**\n   * Props passed to `InviteUser` when `mode` is `invite`.\n   */\n  inviteProps?: InviteUserProps;\n  /**\n   * How the user is added.\n   * - `api` creates the user directly through the management API.\n   * - `invite` runs the invite user flow, which asks the person to finish setting up their account.\n   *   Only available where flows run.\n   * @default 'api'\n   */\n  mode?: 'api' | 'invite';\n  /**\n   * Called with the created user. Not called in `invite` mode, where the flow reports progress\n   * through `inviteProps.onFlowChange`.\n   */\n  onCreated?: (user: ManagedUser) => void;\n  /**\n   * Organization unit the user is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Adds a user, either directly through the management API or by inviting them through the invite\n * user flow.\n *\n * @example\n * ```tsx\n * <UserCreate onCreated={(user) => navigate(`/users/${user.id}`)} />\n * <UserCreate mode=\"invite\" />\n * ```\n */\nconst UserCreate: FC<UserCreateProps> = ({\n  inviteProps,\n  mode = 'api',\n  onCreated,\n  ouId,\n  preferences,\n  ...rest\n}: UserCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const {data: userTypes} = useGetUserTypes({limit: 100}, {enabled: mode === 'api'});\n  const {error, isLoading, mutate} = useCreateUser({onSuccess: onCreated});\n\n  const options: SelectOption[] = useMemo(\n    () =>\n      (userTypes?.types ?? []).map((userType: ManagedUserType) => ({\n        label: userType.displayName ?? userType.handle,\n        value: userType.handle,\n      })),\n    [userTypes],\n  );\n\n  if (mode === 'invite') {\n    return <InviteUser {...inviteProps} />;\n  }\n\n  const handleSubmit = ({attributes, type}: UserCreateSubmission): void => {\n    if (!resolvedOuId) {\n      return;\n    }\n\n    void mutate({attributes, ouId: resolvedOuId, type});\n  };\n\n  return (\n    <BaseUserCreate\n      userTypes={options}\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.users.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA8CA,MAAMA,cAAmC,EACvC,aACA,OAAO,OACP,WACA,MACA,YACA,GAAG,WACgC;CACnC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAM,EAAC,MAAM,cAAaC,gCAAgB,EAAC,OAAO,KAAI,EAAE,EAAC,SAAS,SAAS,OAAM,CAAC;CAClF,MAAM,EAAC,OAAO,WAAW,WAAUC,8BAAc,EAAC,WAAW,WAAU,CAAC;CAExE,MAAMC,oCAED,WAAW,SAAS,EAAE,EAAE,KAAK,cAA+B;EAC3D,OAAO,SAAS,eAAe,SAAS;EACxC,OAAO,SAAS;EACjB,EAAE,EACL,CAAC,UAAU,CACZ;AAED,KAAI,SAAS,SACX,QAAO,2CAACC,8BAAW,GAAI,cAAe;CAGxC,MAAM,gBAAgB,EAAC,YAAY,WAAsC;AACvE,MAAI,CAAC,aACH;AAGF,EAAK,OAAO;GAAC;GAAY,MAAM;GAAc;GAAK,CAAC;;AAGrD,QACE,2CAACC;EACC,WAAW;EACX,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,2BAA2B,GAAG,EAAE,4BAA4B;EAEnG;EACb,GAAI;GACJ;;AAIN,yBAAe"}
+{"version":3,"file":"UserCreate.cjs","names":["UserCreate: FC<UserCreateProps>","useTranslation","resolvedOuId: string | undefined","useDefaultOuId","usersEndpoint: ManagementEndpoint","useManagementEndpoint","userTypesEndpoint: ManagementEndpoint","useResourceQuery","UserQueryKeys","useResourceMutation","options: SelectOption[]","InviteUser","BaseUserCreate"],"sources":["../../../../../src/components/admin/UserCreate/UserCreate.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  CreateManagedUserRequest,\n  ManagedUser,\n  ManagedUserType,\n  ManagedUserTypeListResponse,\n  SelectOption,\n  UserQueryKeys,\n  createUser,\n  getUserTypes,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseUserCreate, {BaseUserCreateProps, UserCreateSubmission} from './BaseUserCreate';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport InviteUser, {InviteUserProps} from '../../auth/InviteUser/InviteUser';\nimport useDefaultOuId from '../shared/useDefaultOuId';\n\nexport type UserCreateProps = Omit<BaseUserCreateProps, 'error' | 'isSubmitting' | 'onSubmit' | 'userTypes'> & {\n  /**\n   * Props passed to `InviteUser` when `mode` is `invite`.\n   */\n  inviteProps?: InviteUserProps;\n  /**\n   * How the user is added.\n   * - `api` creates the user directly through the management API.\n   * - `invite` runs the invite user flow, which asks the person to finish setting up their account.\n   *   Only available where flows run.\n   * @default 'api'\n   */\n  mode?: 'api' | 'invite';\n  /**\n   * Called with the created user. Not called in `invite` mode, where the flow reports progress\n   * through `inviteProps.onFlowChange`.\n   */\n  onCreated?: (user: ManagedUser) => void;\n  /**\n   * Organization unit the user is created in. Defaults to the signed-in user's organization unit.\n   */\n  ouId?: string;\n};\n\n/**\n * Adds a user, either directly through the management API or by inviting them through the invite\n * user flow.\n *\n * @example\n * ```tsx\n * <UserCreate onCreated={(user) => navigate(`/users/${user.id}`)} />\n * <UserCreate mode=\"invite\" />\n * ```\n */\nconst UserCreate: FC<UserCreateProps> = ({\n  inviteProps,\n  mode = 'api',\n  onCreated,\n  ouId,\n  preferences,\n  ...rest\n}: UserCreateProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const resolvedOuId: string | undefined = useDefaultOuId(ouId);\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const userTypesEndpoint: ManagementEndpoint = useManagementEndpoint('userTypes');\n  const {data: userTypes}: ResourceQueryResult<ManagedUserTypeListResponse> = useResourceQuery(\n    [UserQueryKeys.USER_TYPES, {limit: 100}],\n    (fetcher) => getUserTypes({...userTypesEndpoint, fetcher, limit: 100}),\n    {enabled: mode === 'api'},\n  );\n  const {error, isLoading, mutate}: ResourceMutationResult<ManagedUser, CreateManagedUserRequest> = useResourceMutation(\n    (payload: CreateManagedUserRequest, fetcher) => createUser({...usersEndpoint, fetcher, payload}),\n    () => [[UserQueryKeys.USERS]],\n    {onSuccess: onCreated},\n  );\n\n  const options: SelectOption[] = useMemo(\n    () =>\n      (userTypes?.types ?? []).map((userType: ManagedUserType) => ({\n        label: userType.displayName ?? userType.handle,\n        value: userType.handle,\n      })),\n    [userTypes],\n  );\n\n  if (mode === 'invite') {\n    return <InviteUser {...inviteProps} />;\n  }\n\n  const handleSubmit = ({attributes, type}: UserCreateSubmission): void => {\n    if (!resolvedOuId) {\n      return;\n    }\n\n    void mutate({attributes, ouId: resolvedOuId, type});\n  };\n\n  return (\n    <BaseUserCreate\n      userTypes={options}\n      onSubmit={handleSubmit}\n      isSubmitting={isLoading}\n      error={\n        resolvedOuId ? toManagementErrorMessage(t, error, 'admin.users.create.error') : t('admin.common.errors.no_ou')\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserCreate;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAyDA,MAAMA,cAAmC,EACvC,aACA,OAAO,OACP,WACA,MACA,YACA,GAAG,WACgC;CACnC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,eAAmCC,+BAAe,KAAK;CAC7D,MAAMC,gBAAoCC,sCAAsB,QAAQ;CACxE,MAAMC,oBAAwCD,sCAAsB,YAAY;CAChF,MAAM,EAAC,MAAM,cAA+DE,iCAC1E,CAACC,kCAAc,YAAY,EAAC,OAAO,KAAI,CAAC,GACvC,kDAAyB;EAAC,GAAG;EAAmB;EAAS,OAAO;EAAI,CAAC,EACtE,EAAC,SAAS,SAAS,OAAM,CAC1B;CACD,MAAM,EAAC,OAAO,WAAW,WAAyEC,qCAC/F,SAAmC,gDAAuB;EAAC,GAAG;EAAe;EAAS;EAAQ,CAAC,QAC1F,CAAC,CAACD,kCAAc,MAAM,CAAC,EAC7B,EAAC,WAAW,WAAU,CACvB;CAED,MAAME,oCAED,WAAW,SAAS,EAAE,EAAE,KAAK,cAA+B;EAC3D,OAAO,SAAS,eAAe,SAAS;EACxC,OAAO,SAAS;EACjB,EAAE,EACL,CAAC,UAAU,CACZ;AAED,KAAI,SAAS,SACX,QAAO,2CAACC,8BAAW,GAAI,cAAe;CAGxC,MAAM,gBAAgB,EAAC,YAAY,WAAsC;AACvE,MAAI,CAAC,aACH;AAGF,EAAK,OAAO;GAAC;GAAY,MAAM;GAAc;GAAK,CAAC;;AAGrD,QACE,2CAACC;EACC,WAAW;EACX,UAAU;EACV,cAAc;EACd,OACE,iEAAwC,GAAG,OAAO,2BAA2B,GAAG,EAAE,4BAA4B;EAEnG;EACb,GAAI;GACJ;;AAIN,yBAAe"}

package/dist/cjs/components/admin/UserDetails/BaseUserDetails.cjs

@@ -7,6 +7,7 @@ const require_TextField = require('../../primitives/TextField/TextField.cjs');
 const require_Avatar = require('../../primitives/Avatar/Avatar.cjs');
 const require_useAdminPartStyles = require('../shared/useAdminPartStyles.cjs');
 const require_AdminSection = require('../shared/AdminSection.cjs');
+const require_AccountLifecycleParts = require('../shared/AccountLifecycleParts.cjs');
 const require_AdminParts = require('../shared/AdminParts.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -24,7 +25,7 @@ const stringify = (value) => {
 * Shows a user's attributes, type, organization unit and groups. Holds no data of its own: pass the
 * user and handle deletion.
 */
-const BaseUserDetails = ({ actions, children, className, error = null, groups = [], hiddenAttributes = ["password"], isDeleting = false, isLoading = false, isUpdating = false, onDelete, onUpdate, preferences, user }) => {
+const BaseUserDetails = ({ actions, children, className, error = null, groups = [], hiddenAttributes = ["password"], isDeleting = false, isLoading = false, isRunningLifecycleAction = false, isUpdating = false, lifecycleActions = [], onDelete, onLifecycleAction, onUpdate, preferences, user }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const styles = require_useAdminPartStyles.default();
 	const [draft, setDraft] = (0, react.useState)(null);
@@ -39,8 +40,11 @@ const BaseUserDetails = ({ actions, children, className, error = null, groups =
 				groups,
 				isDeleting,
 				isLoading,
+				isRunningLifecycleAction,
 				isUpdating,
+				lifecycleActions: onLifecycleAction && user ? lifecycleActions : [],
 				onDelete: isWritable ? onDelete : void 0,
+				onLifecycleAction: user ? onLifecycleAction : void 0,
 				onUpdate: isWritable ? onUpdate : void 0,
 				user
 			})
@@ -79,12 +83,22 @@ const BaseUserDetails = ({ actions, children, className, error = null, groups =
 		title: displayName,
 		description: t("admin.users.details.subtitle", { type: user.type }),
 		preferences,
-		actions: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [actions, onDelete && !user.isReadOnly && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ConfirmButton, {
-			confirmText: t("admin.users.details.delete.confirm", { name: displayName }),
-			isLoading: isDeleting,
-			onConfirm: onDelete,
-			children: t("admin.users.details.delete.action")
-		})] }),
+		actions: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+			actions,
+			onLifecycleAction && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AccountLifecycleParts.AccountLifecycleButtons, {
+				actions: lifecycleActions,
+				collectsOperatorNote: true,
+				isRunning: isRunningLifecycleAction,
+				name: displayName,
+				onAction: onLifecycleAction
+			}),
+			onDelete && !user.isReadOnly && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ConfirmButton, {
+				confirmText: t("admin.users.details.delete.confirm", { name: displayName }),
+				isLoading: isDeleting,
+				onConfirm: onDelete,
+				children: t("admin.users.details.delete.action")
+			})
+		] }),
 		children: [
 			error && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Alert.default, {
 				variant: "error",
@@ -93,13 +107,17 @@ const BaseUserDetails = ({ actions, children, className, error = null, groups =
 			}),
 			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: styles["row"],
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Avatar.Avatar, {
-					name: displayName,
-					size: 48
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-					className: styles["muted"],
-					children: user.ouHandle ?? user.ouId
-				})]
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Avatar.Avatar, {
+						name: displayName,
+						size: 48
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: styles["muted"],
+						children: user.ouHandle ?? user.ouId
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AccountLifecycleParts.AccessStatusBadge, { status: user.status?.value })
+				]
 			}),
 			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.Panel, {
 				title: t("admin.users.details.attributes"),