@thunderid/react 1.8.0 → 1.9.0

package/dist/cjs/components/account/UserProfile/BaseUserProfile.cjs

@@ -6,9 +6,9 @@ const require_Button = require('../../primitives/Button/Button.cjs');
 const require_Typography = require('../../primitives/Typography/Typography.cjs');
 const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_Card = require('../../primitives/Card/Card.cjs');
+const require_TextField = require('../../primitives/TextField/TextField.cjs');
 const require_Checkbox = require('../../primitives/Checkbox/Checkbox.cjs');
 const require_DatePicker = require('../../primitives/DatePicker/DatePicker.cjs');
-const require_TextField = require('../../primitives/TextField/TextField.cjs');
 const require_Divider = require('../../primitives/Divider/Divider.cjs');
 const require_BaseUserProfile_styles = require('./BaseUserProfile.styles.cjs');
 const require_getMappedUserProfileValue = require('../../../utils/getMappedUserProfileValue.cjs');

package/dist/cjs/components/admin/AgentDetails/AgentDetails.cjs

@@ -3,6 +3,7 @@ const require_useTranslation = require('../../../hooks/useTranslation.cjs');
 const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
 const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
 const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
+const require_useAccountLifecycle = require('../../../hooks/management/useAccountLifecycle.cjs');
 const require_BaseAgentDetails = require('./BaseAgentDetails.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -19,7 +20,7 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 * <AgentDetails agentId={agentId} deletable onDeleted={() => navigate('/agents')} />
 * ```
 */
-const AgentDetails = ({ agentId, deletable = false, onDeleted, preferences,...rest }) => {
+const AgentDetails = ({ agentId, deletable = false, lifecycleActions = false, onDeleted, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const endpoint = require_useManagementEndpoint.default("agents");
 	const agent = require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENT, agentId], (fetcher) => (0, __thunderid_browser.getAgent)({
@@ -54,14 +55,24 @@ const AgentDetails = ({ agentId, deletable = false, onDeleted, preferences,...re
 		agentId: id,
 		fetcher
 	}), () => [[__thunderid_browser.AgentQueryKeys.AGENTS]], { onSuccess: onDeleted });
+	const lifecycle = require_useAccountLifecycle.default({
+		enabled: lifecycleActions,
+		invalidatedKeys: [[__thunderid_browser.AgentQueryKeys.AGENT, agentId], [__thunderid_browser.AgentQueryKeys.AGENTS]],
+		kind: "agent",
+		status: agent.data?.status?.value,
+		subject: agentId
+	});
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseAgentDetails.default, {
 		agent: agent.data,
 		groups: groups.data?.groups,
 		roles: roles.data?.roles,
 		isLoading: agent.isLoading,
-		error: (0, __thunderid_browser.toManagementErrorMessage)(t, agent.error, "admin.agents.details.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, deletion.error, "admin.agents.details.delete.error"),
+		error: (0, __thunderid_browser.toManagementErrorMessage)(t, agent.error, "admin.agents.details.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, deletion.error, "admin.agents.details.delete.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, lifecycle.error, "admin.common.lifecycle.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, lifecycle.loadError, "admin.common.lifecycle.load_error"),
 		isDeleting: deletion.isLoading,
 		onDelete: deletable ? () => void deletion.mutate(agentId) : void 0,
+		lifecycleActions: lifecycle.actions,
+		isRunningLifecycleAction: lifecycle.isRunning,
+		onLifecycleAction: lifecycleActions ? lifecycle.run : void 0,
 		preferences,
 		...rest
 	});

package/dist/cjs/components/admin/AgentDetails/AgentDetails.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"AgentDetails.cjs","names":["AgentDetails: FC<AgentDetailsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","agent: ResourceQueryResult<Agent>","useResourceQuery","AgentQueryKeys","groups: ResourceQueryResult<MembershipGroupListResponse>","GroupQueryKeys","roles: ResourceQueryResult<AgentRoleListResponse>","RoleQueryKeys","deletion: ResourceMutationResult<void, string>","useResourceMutation","BaseAgentDetails"],"sources":["../../../../../src/components/admin/AgentDetails/AgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  Agent,\n  AgentQueryKeys,\n  AgentRoleListResponse,\n  GroupQueryKeys,\n  MembershipGroupListResponse,\n  RoleQueryKeys,\n  deleteAgent,\n  getAgent,\n  getAgentGroups,\n  getAgentRoles,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseAgentDetails, {BaseAgentDetailsProps} from './BaseAgentDetails';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type AgentDetailsProps = Omit<\n  BaseAgentDetailsProps,\n  'agent' | 'error' | 'groups' | 'isDeleting' | 'isLoading' | 'onDelete' | 'roles'\n> & {\n  agentId: string;\n  /**\n   * Whether the agent can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Called after the agent has been deleted.\n   */\n  onDeleted?: () => void;\n};\n\n/**\n * Shows an agent with the groups and roles it holds, and optionally lets the signed-in user delete\n * it.\n *\n * @example\n * ```tsx\n * <AgentDetails agentId={agentId} deletable onDeleted={() => navigate('/agents')} />\n * ```\n */\nconst AgentDetails: FC<AgentDetailsProps> = ({\n  agentId,\n  deletable = false,\n  onDeleted,\n  preferences,\n  ...rest\n}: AgentDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const agent: ResourceQueryResult<Agent> = useResourceQuery(\n    [AgentQueryKeys.AGENT, agentId],\n    (fetcher) => getAgent({...endpoint, agentId, fetcher}),\n    {enabled: Boolean(agentId)},\n  );\n  const groups: ResourceQueryResult<MembershipGroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.MEMBERSHIPS, 'agent', agentId, {limit: 100}],\n    (fetcher) => getAgentGroups({...endpoint, agentId, fetcher, limit: 100}),\n    {enabled: Boolean(agentId)},\n  );\n  const roles: ResourceQueryResult<AgentRoleListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, 'agent', agentId, {limit: 100}],\n    (fetcher) => getAgentRoles({...endpoint, agentId, fetcher, limit: 100}),\n    {enabled: Boolean(agentId)},\n  );\n  const deletion: ResourceMutationResult<void, string> = useResourceMutation(\n    (id: string, fetcher) => deleteAgent({...endpoint, agentId: id, fetcher}),\n    () => [[AgentQueryKeys.AGENTS]],\n    {onSuccess: onDeleted},\n  );\n\n  return (\n    <BaseAgentDetails\n      agent={agent.data}\n      groups={groups.data?.groups}\n      roles={roles.data?.roles}\n      isLoading={agent.isLoading}\n      error={\n        toManagementErrorMessage(t, agent.error, 'admin.agents.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.agents.details.delete.error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(agentId) : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default AgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAgDA,MAAMA,gBAAuC,EAC3C,SACA,YAAY,OACZ,WACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,sCAAsB,SAAS;CACpE,MAAMC,QAAoCC,iCACxC,CAACC,mCAAe,OAAO,QAAQ,GAC9B,8CAAqB;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,EACtD,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMC,SAA2DF,iCAC/D;EAACG,mCAAe;EAAa;EAAS;EAAS,EAAC,OAAO,KAAI;EAAC,GAC3D,oDAA2B;EAAC,GAAG;EAAU;EAAS;EAAS,OAAO;EAAI,CAAC,EACxE,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMC,QAAoDJ,iCACxD;EAACK,kCAAc;EAAkB;EAAS;EAAS,EAAC,OAAO,KAAI;EAAC,GAC/D,mDAA0B;EAAC,GAAG;EAAU;EAAS;EAAS,OAAO;EAAI,CAAC,EACvE,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMC,WAAiDC,qCACpD,IAAY,iDAAwB;EAAC,GAAG;EAAU,SAAS;EAAI;EAAQ,CAAC,QACnE,CAAC,CAACN,mCAAe,OAAO,CAAC,EAC/B,EAAC,WAAW,WAAU,CACvB;AAED,QACE,2CAACO;EACC,OAAO,MAAM;EACb,QAAQ,OAAO,MAAM;EACrB,OAAO,MAAM,MAAM;EACnB,WAAW,MAAM;EACjB,yDAC2B,GAAG,MAAM,OAAO,6BAA6B,sDAC7C,GAAG,SAAS,OAAO,oCAAoC;EAElF,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,QAAQ,GAAG;EACrD;EACb,GAAI;GACJ;;AAIN,2BAAe"}
+{"version":3,"file":"AgentDetails.cjs","names":["AgentDetails: FC<AgentDetailsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","agent: ResourceQueryResult<Agent>","useResourceQuery","AgentQueryKeys","groups: ResourceQueryResult<MembershipGroupListResponse>","GroupQueryKeys","roles: ResourceQueryResult<AgentRoleListResponse>","RoleQueryKeys","deletion: ResourceMutationResult<void, string>","useResourceMutation","lifecycle: AccountLifecycleState","useAccountLifecycle","BaseAgentDetails"],"sources":["../../../../../src/components/admin/AgentDetails/AgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  Agent,\n  AgentQueryKeys,\n  AgentRoleListResponse,\n  GroupQueryKeys,\n  MembershipGroupListResponse,\n  RoleQueryKeys,\n  deleteAgent,\n  getAgent,\n  getAgentGroups,\n  getAgentRoles,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseAgentDetails, {BaseAgentDetailsProps} from './BaseAgentDetails';\nimport useAccountLifecycle, {AccountLifecycleState} from '../../../hooks/management/useAccountLifecycle';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\nexport type AgentDetailsProps = Omit<\n  BaseAgentDetailsProps,\n  | 'agent'\n  | 'error'\n  | 'groups'\n  | 'isDeleting'\n  | 'isLoading'\n  | 'isRunningLifecycleAction'\n  | 'lifecycleActions'\n  | 'onDelete'\n  | 'onLifecycleAction'\n  | 'roles'\n> & {\n  agentId: string;\n  /**\n   * Whether the agent can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the agent can be suspended, unsuspended and unlocked from this view. Each action runs through its\n   * administration flow and is offered only when the server configures that flow. Reading the configured\n   * flows needs a token that may read the server configuration.\n   * @default false\n   */\n  lifecycleActions?: boolean;\n  /**\n   * Called after the agent has been deleted.\n   */\n  onDeleted?: () => void;\n};\n\n/**\n * Shows an agent with the groups and roles it holds, and optionally lets the signed-in user delete\n * it.\n *\n * @example\n * ```tsx\n * <AgentDetails agentId={agentId} deletable onDeleted={() => navigate('/agents')} />\n * ```\n */\nconst AgentDetails: FC<AgentDetailsProps> = ({\n  agentId,\n  deletable = false,\n  lifecycleActions = false,\n  onDeleted,\n  preferences,\n  ...rest\n}: AgentDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const agent: ResourceQueryResult<Agent> = useResourceQuery(\n    [AgentQueryKeys.AGENT, agentId],\n    (fetcher) => getAgent({...endpoint, agentId, fetcher}),\n    {enabled: Boolean(agentId)},\n  );\n  const groups: ResourceQueryResult<MembershipGroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.MEMBERSHIPS, 'agent', agentId, {limit: 100}],\n    (fetcher) => getAgentGroups({...endpoint, agentId, fetcher, limit: 100}),\n    {enabled: Boolean(agentId)},\n  );\n  const roles: ResourceQueryResult<AgentRoleListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, 'agent', agentId, {limit: 100}],\n    (fetcher) => getAgentRoles({...endpoint, agentId, fetcher, limit: 100}),\n    {enabled: Boolean(agentId)},\n  );\n  const deletion: ResourceMutationResult<void, string> = useResourceMutation(\n    (id: string, fetcher) => deleteAgent({...endpoint, agentId: id, fetcher}),\n    () => [[AgentQueryKeys.AGENTS]],\n    {onSuccess: onDeleted},\n  );\n\n  const lifecycle: AccountLifecycleState = useAccountLifecycle({\n    enabled: lifecycleActions,\n    invalidatedKeys: [[AgentQueryKeys.AGENT, agentId], [AgentQueryKeys.AGENTS]],\n    kind: 'agent',\n    status: agent.data?.status?.value,\n    subject: agentId,\n  });\n\n  return (\n    <BaseAgentDetails\n      agent={agent.data}\n      groups={groups.data?.groups}\n      roles={roles.data?.roles}\n      isLoading={agent.isLoading}\n      error={\n        toManagementErrorMessage(t, agent.error, 'admin.agents.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.agents.details.delete.error') ??\n        toManagementErrorMessage(t, lifecycle.error, 'admin.common.lifecycle.error') ??\n        toManagementErrorMessage(t, lifecycle.loadError, 'admin.common.lifecycle.load_error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(agentId) : undefined}\n      lifecycleActions={lifecycle.actions}\n      isRunningLifecycleAction={lifecycle.isRunning}\n      onLifecycleAction={lifecycleActions ? lifecycle.run : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default AgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAiEA,MAAMA,gBAAuC,EAC3C,SACA,YAAY,OACZ,mBAAmB,OACnB,WACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,sCAAsB,SAAS;CACpE,MAAMC,QAAoCC,iCACxC,CAACC,mCAAe,OAAO,QAAQ,GAC9B,8CAAqB;EAAC,GAAG;EAAU;EAAS;EAAQ,CAAC,EACtD,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMC,SAA2DF,iCAC/D;EAACG,mCAAe;EAAa;EAAS;EAAS,EAAC,OAAO,KAAI;EAAC,GAC3D,oDAA2B;EAAC,GAAG;EAAU;EAAS;EAAS,OAAO;EAAI,CAAC,EACxE,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMC,QAAoDJ,iCACxD;EAACK,kCAAc;EAAkB;EAAS;EAAS,EAAC,OAAO,KAAI;EAAC,GAC/D,mDAA0B;EAAC,GAAG;EAAU;EAAS;EAAS,OAAO;EAAI,CAAC,EACvE,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMC,WAAiDC,qCACpD,IAAY,iDAAwB;EAAC,GAAG;EAAU,SAAS;EAAI;EAAQ,CAAC,QACnE,CAAC,CAACN,mCAAe,OAAO,CAAC,EAC/B,EAAC,WAAW,WAAU,CACvB;CAED,MAAMO,YAAmCC,oCAAoB;EAC3D,SAAS;EACT,iBAAiB,CAAC,CAACR,mCAAe,OAAO,QAAQ,EAAE,CAACA,mCAAe,OAAO,CAAC;EAC3E,MAAM;EACN,QAAQ,MAAM,MAAM,QAAQ;EAC5B,SAAS;EACV,CAAC;AAEF,QACE,2CAACS;EACC,OAAO,MAAM;EACb,QAAQ,OAAO,MAAM;EACrB,OAAO,MAAM,MAAM;EACnB,WAAW,MAAM;EACjB,yDAC2B,GAAG,MAAM,OAAO,6BAA6B,sDAC7C,GAAG,SAAS,OAAO,oCAAoC,sDACvD,GAAG,UAAU,OAAO,+BAA+B,sDACnD,GAAG,UAAU,WAAW,oCAAoC;EAEvF,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,QAAQ,GAAG;EAClE,kBAAkB,UAAU;EAC5B,0BAA0B,UAAU;EACpC,mBAAmB,mBAAmB,UAAU,MAAM;EACzC;EACb,GAAI;GACJ;;AAIN,2BAAe"}

package/dist/cjs/components/admin/AgentDetails/BaseAgentDetails.cjs

@@ -5,6 +5,7 @@ const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_CopyableText = require('../../primitives/CopyableText/CopyableText.cjs');
 const require_useAdminPartStyles = require('../shared/useAdminPartStyles.cjs');
 const require_AdminSection = require('../shared/AdminSection.cjs');
+const require_AccountLifecycleParts = require('../shared/AccountLifecycleParts.cjs');
 const require_AdminParts = require('../shared/AdminParts.cjs');
 let react_jsx_runtime = require("react/jsx-runtime");
 react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
@@ -14,7 +15,7 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 * Shows an agent's type, owner, client and the groups and roles it holds. Holds no data of its own:
 * pass the agent and handle deletion.
 */
-const BaseAgentDetails = ({ actions, agent, children, className, error = null, groups = [], isDeleting = false, isLoading = false, onDelete, preferences, roles = [] }) => {
+const BaseAgentDetails = ({ actions, agent, children, className, error = null, groups = [], isDeleting = false, isLoading = false, isRunningLifecycleAction = false, lifecycleActions = [], onDelete, onLifecycleAction, preferences, roles = [] }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const styles = require_useAdminPartStyles.default();
 	if (children) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
@@ -25,7 +26,10 @@ const BaseAgentDetails = ({ actions, agent, children, className, error = null, g
 			groups,
 			isDeleting,
 			isLoading,
+			isRunningLifecycleAction,
+			lifecycleActions: onLifecycleAction && agent ? lifecycleActions : [],
 			onDelete: agent && !agent.isReadOnly ? onDelete : void 0,
+			onLifecycleAction: agent ? onLifecycleAction : void 0,
 			roles
 		})
 	});
@@ -67,6 +71,10 @@ const BaseAgentDetails = ({ actions, agent, children, className, error = null, g
 			value: agent.ouHandle ?? agent.ouId
 		}
 	];
+	if (agent.status) details.push({
+		label: t("admin.common.columns.status"),
+		value: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AccountLifecycleParts.AccessStatusBadge, { status: agent.status.value })
+	});
 	if (agent.clientId) details.push({
 		label: t("admin.agents.list.columns.client_id"),
 		value: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_CopyableText.default, { value: agent.clientId })
@@ -77,12 +85,22 @@ const BaseAgentDetails = ({ actions, agent, children, className, error = null, g
 		title: agent.name,
 		description: agent.description,
 		preferences,
-		actions: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [actions, onDelete && !agent.isReadOnly && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ConfirmButton, {
-			confirmText: t("admin.agents.details.delete.confirm", { name: agent.name }),
-			isLoading: isDeleting,
-			onConfirm: onDelete,
-			children: t("admin.agents.details.delete.action")
-		})] }),
+		actions: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+			actions,
+			onLifecycleAction && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AccountLifecycleParts.AccountLifecycleButtons, {
+				actions: lifecycleActions,
+				collectsOperatorNote: true,
+				isRunning: isRunningLifecycleAction,
+				name: agent.name,
+				onAction: onLifecycleAction
+			}),
+			onDelete && !agent.isReadOnly && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ConfirmButton, {
+				confirmText: t("admin.agents.details.delete.confirm", { name: agent.name }),
+				isLoading: isDeleting,
+				onConfirm: onDelete,
+				children: t("admin.agents.details.delete.action")
+			})
+		] }),
 		children: [
 			error && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Alert.default, {
 				variant: "error",

package/dist/cjs/components/admin/AgentDetails/BaseAgentDetails.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"BaseAgentDetails.cjs","names":["BaseAgentDetails: FC<BaseAgentDetailsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","AdminSection","Spinner","Alert","details: {label: string; value: ReactNode}[]","CopyableText","ConfirmButton","Panel","DetailList","ChipList"],"sources":["../../../../../src/components/admin/AgentDetails/BaseAgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Agent, MembershipGroup, Preferences} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport CopyableText from '../../primitives/CopyableText/CopyableText';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport {ChipList, ConfirmButton, DetailList, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * What {@link BaseAgentDetails} hands its `children` render function, so the agent can be shown with any UI.\n */\nexport interface BaseAgentDetailsRenderProps {\n  agent?: Agent;\n  error: string | null;\n  groups: MembershipGroup[];\n  isDeleting: boolean;\n  isLoading: boolean;\n  /**\n   * Deletes the agent. Undefined when deletion is not allowed, including for read-only agents.\n   */\n  onDelete?: () => void;\n  roles: string[];\n}\n\nexport interface BaseAgentDetailsProps {\n  /**\n   * Controls rendered next to the agent's name.\n   */\n  actions?: ReactNode;\n  agent?: Agent;\n  /**\n   * Renders custom UI in place of the default view. Receives the agent, its groups and roles, the\n   * loading and error state, and the delete handler.\n   */\n  children?: (props: BaseAgentDetailsRenderProps) => ReactNode;\n  className?: string;\n  error?: string | null;\n  /**\n   * The groups the agent belongs to.\n   */\n  groups?: MembershipGroup[];\n  isDeleting?: boolean;\n  isLoading?: boolean;\n  /**\n   * Deletes the agent. The delete action is hidden when omitted.\n   */\n  onDelete?: () => void;\n  preferences?: Preferences;\n  /**\n   * The names of the roles the agent holds, directly or through its groups.\n   */\n  roles?: string[];\n}\n\n/**\n * Shows an agent's type, owner, client and the groups and roles it holds. Holds no data of its own:\n * pass the agent and handle deletion.\n */\nconst BaseAgentDetails: FC<BaseAgentDetailsProps> = ({\n  actions,\n  agent,\n  children,\n  className,\n  error = null,\n  groups = [],\n  isDeleting = false,\n  isLoading = false,\n  onDelete,\n  preferences,\n  roles = [],\n}: BaseAgentDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          agent,\n          error,\n          groups,\n          isDeleting,\n          isLoading,\n          onDelete: agent && !agent.isReadOnly ? onDelete : undefined,\n          roles,\n        })}\n      </div>\n    );\n  }\n\n  if (isLoading && !agent) {\n    return (\n      <AdminSection block=\"agent-details\" className={className} preferences={preferences}>\n        <span className={styles['muted']} role=\"status\">\n          <Spinner size=\"small\" /> {t('admin.common.loading')}\n        </span>\n      </AdminSection>\n    );\n  }\n\n  if (!agent) {\n    return (\n      <AdminSection block=\"agent-details\" className={className} preferences={preferences}>\n        <Alert variant=\"error\" role=\"alert\">\n          {error ?? t('admin.common.errors.not_found')}\n        </Alert>\n      </AdminSection>\n    );\n  }\n\n  const details: {label: string; value: ReactNode}[] = [\n    {label: t('admin.agents.details.type'), value: agent.type},\n    {label: t('admin.agents.details.owner'), value: agent.owner ?? t('admin.agents.details.no_owner')},\n    {label: t('admin.common.columns.organization_unit'), value: agent.ouHandle ?? agent.ouId},\n  ];\n\n  if (agent.clientId) {\n    details.push({label: t('admin.agents.list.columns.client_id'), value: <CopyableText value={agent.clientId} />});\n  }\n\n  return (\n    <AdminSection\n      block=\"agent-details\"\n      className={className}\n      title={agent.name}\n      description={agent.description}\n      preferences={preferences}\n      actions={\n        <>\n          {actions}\n          {onDelete && !agent.isReadOnly && (\n            <ConfirmButton\n              confirmText={t('admin.agents.details.delete.confirm', {name: agent.name})}\n              isLoading={isDeleting}\n              onConfirm={onDelete}\n            >\n              {t('admin.agents.details.delete.action')}\n            </ConfirmButton>\n          )}\n        </>\n      }\n    >\n      {error && (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      )}\n      <Panel title={t('admin.agents.details.overview')}>\n        <DetailList items={details} />\n      </Panel>\n      <Panel title={t('admin.agents.details.groups')}>\n        <ChipList\n          label={t('admin.agents.details.groups')}\n          emptyText={t('admin.agents.details.no_groups')}\n          items={groups.map((group: MembershipGroup) => ({id: group.id, label: group.name}))}\n        />\n      </Panel>\n      <Panel title={t('admin.agents.details.roles')}>\n        <ChipList\n          label={t('admin.agents.details.roles')}\n          emptyText={t('admin.agents.details.no_roles')}\n          items={roles.map((role: string) => ({id: role, label: role}))}\n        />\n      </Panel>\n    </AdminSection>\n  );\n};\n\nexport default BaseAgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;AA+DA,MAAMA,oBAA+C,EACnD,SACA,OACA,UACA,WACA,QAAQ,MACR,SAAS,EAAE,EACX,aAAa,OACb,YAAY,OACZ,UACA,aACA,QAAQ,EAAE,OAC+B;CACzC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,oCAAoB;AAE3D,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA;GACA;GACA;GACA;GACA,UAAU,SAAS,CAAC,MAAM,aAAa,WAAW;GAClD;GACD,CAAC;GACE;AAIV,KAAI,aAAa,CAAC,MAChB,QACE,2CAACC;EAAa,OAAM;EAA2B;EAAwB;YACrE,4CAAC;GAAK,WAAW,OAAO;GAAU,MAAK;;IACrC,2CAACC,2BAAQ,MAAK,UAAU;;IAAE,EAAE,uBAAuB;;IAC9C;GACM;AAInB,KAAI,CAAC,MACH,QACE,2CAACD;EAAa,OAAM;EAA2B;EAAwB;YACrE,2CAACE;GAAM,SAAQ;GAAQ,MAAK;aACzB,SAAS,EAAE,gCAAgC;IACtC;GACK;CAInB,MAAMC,UAA+C;EACnD;GAAC,OAAO,EAAE,4BAA4B;GAAE,OAAO,MAAM;GAAK;EAC1D;GAAC,OAAO,EAAE,6BAA6B;GAAE,OAAO,MAAM,SAAS,EAAE,gCAAgC;GAAC;EAClG;GAAC,OAAO,EAAE,yCAAyC;GAAE,OAAO,MAAM,YAAY,MAAM;GAAK;EAC1F;AAED,KAAI,MAAM,SACR,SAAQ,KAAK;EAAC,OAAO,EAAE,sCAAsC;EAAE,OAAO,2CAACC,gCAAa,OAAO,MAAM,WAAY;EAAC,CAAC;AAGjH,QACE,4CAACJ;EACC,OAAM;EACK;EACX,OAAO,MAAM;EACb,aAAa,MAAM;EACN;EACb,SACE,qFACG,SACA,YAAY,CAAC,MAAM,cAClB,2CAACK;GACC,aAAa,EAAE,uCAAuC,EAAC,MAAM,MAAM,MAAK,CAAC;GACzE,WAAW;GACX,WAAW;aAEV,EAAE,qCAAqC;IAC1B,IAEjB;;GAGJ,SACC,2CAACH;IAAM,SAAQ;IAAQ,MAAK;cACzB;KACK;GAEV,2CAACI;IAAM,OAAO,EAAE,gCAAgC;cAC9C,2CAACC,iCAAW,OAAO,UAAW;KACxB;GACR,2CAACD;IAAM,OAAO,EAAE,8BAA8B;cAC5C,2CAACE;KACC,OAAO,EAAE,8BAA8B;KACvC,WAAW,EAAE,iCAAiC;KAC9C,OAAO,OAAO,KAAK,WAA4B;MAAC,IAAI,MAAM;MAAI,OAAO,MAAM;MAAK,EAAE;MAClF;KACI;GACR,2CAACF;IAAM,OAAO,EAAE,6BAA6B;cAC3C,2CAACE;KACC,OAAO,EAAE,6BAA6B;KACtC,WAAW,EAAE,gCAAgC;KAC7C,OAAO,MAAM,KAAK,UAAkB;MAAC,IAAI;MAAM,OAAO;MAAK,EAAE;MAC7D;KACI;;GACK;;AAInB,+BAAe"}
+{"version":3,"file":"BaseAgentDetails.cjs","names":["BaseAgentDetails: FC<BaseAgentDetailsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","AdminSection","Spinner","Alert","details: {label: string; value: ReactNode}[]","AccessStatusBadge","CopyableText","AccountLifecycleButtons","ConfirmButton","Panel","DetailList","ChipList"],"sources":["../../../../../src/components/admin/AgentDetails/BaseAgentDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {AccountLifecycleAction, Agent, MembershipGroup, Preferences} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport CopyableText from '../../primitives/CopyableText/CopyableText';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport {AccessStatusBadge, AccountLifecycleButtons} from '../shared/AccountLifecycleParts';\nimport {ChipList, ConfirmButton, DetailList, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * What {@link BaseAgentDetails} hands its `children` render function, so the agent can be shown with any UI.\n */\nexport interface BaseAgentDetailsRenderProps {\n  agent?: Agent;\n  error: string | null;\n  groups: MembershipGroup[];\n  isDeleting: boolean;\n  isLoading: boolean;\n  isRunningLifecycleAction: boolean;\n  /**\n   * The account lifecycle actions offered for the agent. Empty when none is allowed.\n   */\n  lifecycleActions: AccountLifecycleAction[];\n  /**\n   * Deletes the agent. Undefined when deletion is not allowed, including for read-only agents.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action, with the operator's note on a suspension. Undefined when none is allowed.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  roles: string[];\n}\n\nexport interface BaseAgentDetailsProps {\n  /**\n   * Controls rendered next to the agent's name.\n   */\n  actions?: ReactNode;\n  agent?: Agent;\n  /**\n   * Renders custom UI in place of the default view. Receives the agent, its groups and roles, the\n   * loading and error state, and the delete handler.\n   */\n  children?: (props: BaseAgentDetailsRenderProps) => ReactNode;\n  className?: string;\n  error?: string | null;\n  /**\n   * The groups the agent belongs to.\n   */\n  groups?: MembershipGroup[];\n  isDeleting?: boolean;\n  isLoading?: boolean;\n  isRunningLifecycleAction?: boolean;\n  /**\n   * The account lifecycle actions to offer (suspend, unsuspend, unlock), shown only with `onLifecycleAction`. They change\n   * only runtime state, so they apply to read-only agents too.\n   */\n  lifecycleActions?: AccountLifecycleAction[];\n  /**\n   * Deletes the agent. The delete action is hidden when omitted.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action. Suspending and unsuspending ask for confirmation first, and a\n   * suspension takes an optional operator note.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  preferences?: Preferences;\n  /**\n   * The names of the roles the agent holds, directly or through its groups.\n   */\n  roles?: string[];\n}\n\n/**\n * Shows an agent's type, owner, client and the groups and roles it holds. Holds no data of its own:\n * pass the agent and handle deletion.\n */\nconst BaseAgentDetails: FC<BaseAgentDetailsProps> = ({\n  actions,\n  agent,\n  children,\n  className,\n  error = null,\n  groups = [],\n  isDeleting = false,\n  isLoading = false,\n  isRunningLifecycleAction = false,\n  lifecycleActions = [],\n  onDelete,\n  onLifecycleAction,\n  preferences,\n  roles = [],\n}: BaseAgentDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n\n  if (children) {\n    return (\n      <div className={className}>\n        {children({\n          agent,\n          error,\n          groups,\n          isDeleting,\n          isLoading,\n          isRunningLifecycleAction,\n          lifecycleActions: onLifecycleAction && agent ? lifecycleActions : [],\n          onDelete: agent && !agent.isReadOnly ? onDelete : undefined,\n          onLifecycleAction: agent ? onLifecycleAction : undefined,\n          roles,\n        })}\n      </div>\n    );\n  }\n\n  if (isLoading && !agent) {\n    return (\n      <AdminSection block=\"agent-details\" className={className} preferences={preferences}>\n        <span className={styles['muted']} role=\"status\">\n          <Spinner size=\"small\" /> {t('admin.common.loading')}\n        </span>\n      </AdminSection>\n    );\n  }\n\n  if (!agent) {\n    return (\n      <AdminSection block=\"agent-details\" className={className} preferences={preferences}>\n        <Alert variant=\"error\" role=\"alert\">\n          {error ?? t('admin.common.errors.not_found')}\n        </Alert>\n      </AdminSection>\n    );\n  }\n\n  const details: {label: string; value: ReactNode}[] = [\n    {label: t('admin.agents.details.type'), value: agent.type},\n    {label: t('admin.agents.details.owner'), value: agent.owner ?? t('admin.agents.details.no_owner')},\n    {label: t('admin.common.columns.organization_unit'), value: agent.ouHandle ?? agent.ouId},\n  ];\n\n  if (agent.status) {\n    details.push({label: t('admin.common.columns.status'), value: <AccessStatusBadge status={agent.status.value} />});\n  }\n\n  if (agent.clientId) {\n    details.push({label: t('admin.agents.list.columns.client_id'), value: <CopyableText value={agent.clientId} />});\n  }\n\n  return (\n    <AdminSection\n      block=\"agent-details\"\n      className={className}\n      title={agent.name}\n      description={agent.description}\n      preferences={preferences}\n      actions={\n        <>\n          {actions}\n          {onLifecycleAction && (\n            <AccountLifecycleButtons\n              actions={lifecycleActions}\n              collectsOperatorNote\n              isRunning={isRunningLifecycleAction}\n              name={agent.name}\n              onAction={onLifecycleAction}\n            />\n          )}\n          {onDelete && !agent.isReadOnly && (\n            <ConfirmButton\n              confirmText={t('admin.agents.details.delete.confirm', {name: agent.name})}\n              isLoading={isDeleting}\n              onConfirm={onDelete}\n            >\n              {t('admin.agents.details.delete.action')}\n            </ConfirmButton>\n          )}\n        </>\n      }\n    >\n      {error && (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      )}\n      <Panel title={t('admin.agents.details.overview')}>\n        <DetailList items={details} />\n      </Panel>\n      <Panel title={t('admin.agents.details.groups')}>\n        <ChipList\n          label={t('admin.agents.details.groups')}\n          emptyText={t('admin.agents.details.no_groups')}\n          items={groups.map((group: MembershipGroup) => ({id: group.id, label: group.name}))}\n        />\n      </Panel>\n      <Panel title={t('admin.agents.details.roles')}>\n        <ChipList\n          label={t('admin.agents.details.roles')}\n          emptyText={t('admin.agents.details.no_roles')}\n          items={roles.map((role: string) => ({id: role, label: role}))}\n        />\n      </Panel>\n    </AdminSection>\n  );\n};\n\nexport default BaseAgentDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;AAoFA,MAAMA,oBAA+C,EACnD,SACA,OACA,UACA,WACA,QAAQ,MACR,SAAS,EAAE,EACX,aAAa,OACb,YAAY,OACZ,2BAA2B,OAC3B,mBAAmB,EAAE,EACrB,UACA,mBACA,aACA,QAAQ,EAAE,OAC+B;CACzC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,oCAAoB;AAE3D,KAAI,SACF,QACE,2CAAC;EAAe;YACb,SAAS;GACR;GACA;GACA;GACA;GACA;GACA;GACA,kBAAkB,qBAAqB,QAAQ,mBAAmB,EAAE;GACpE,UAAU,SAAS,CAAC,MAAM,aAAa,WAAW;GAClD,mBAAmB,QAAQ,oBAAoB;GAC/C;GACD,CAAC;GACE;AAIV,KAAI,aAAa,CAAC,MAChB,QACE,2CAACC;EAAa,OAAM;EAA2B;EAAwB;YACrE,4CAAC;GAAK,WAAW,OAAO;GAAU,MAAK;;IACrC,2CAACC,2BAAQ,MAAK,UAAU;;IAAE,EAAE,uBAAuB;;IAC9C;GACM;AAInB,KAAI,CAAC,MACH,QACE,2CAACD;EAAa,OAAM;EAA2B;EAAwB;YACrE,2CAACE;GAAM,SAAQ;GAAQ,MAAK;aACzB,SAAS,EAAE,gCAAgC;IACtC;GACK;CAInB,MAAMC,UAA+C;EACnD;GAAC,OAAO,EAAE,4BAA4B;GAAE,OAAO,MAAM;GAAK;EAC1D;GAAC,OAAO,EAAE,6BAA6B;GAAE,OAAO,MAAM,SAAS,EAAE,gCAAgC;GAAC;EAClG;GAAC,OAAO,EAAE,yCAAyC;GAAE,OAAO,MAAM,YAAY,MAAM;GAAK;EAC1F;AAED,KAAI,MAAM,OACR,SAAQ,KAAK;EAAC,OAAO,EAAE,8BAA8B;EAAE,OAAO,2CAACC,mDAAkB,QAAQ,MAAM,OAAO,QAAS;EAAC,CAAC;AAGnH,KAAI,MAAM,SACR,SAAQ,KAAK;EAAC,OAAO,EAAE,sCAAsC;EAAE,OAAO,2CAACC,gCAAa,OAAO,MAAM,WAAY;EAAC,CAAC;AAGjH,QACE,4CAACL;EACC,OAAM;EACK;EACX,OAAO,MAAM;EACb,aAAa,MAAM;EACN;EACb,SACE;GACG;GACA,qBACC,2CAACM;IACC,SAAS;IACT;IACA,WAAW;IACX,MAAM,MAAM;IACZ,UAAU;KACV;GAEH,YAAY,CAAC,MAAM,cAClB,2CAACC;IACC,aAAa,EAAE,uCAAuC,EAAC,MAAM,MAAM,MAAK,CAAC;IACzE,WAAW;IACX,WAAW;cAEV,EAAE,qCAAqC;KAC1B;MAEjB;;GAGJ,SACC,2CAACL;IAAM,SAAQ;IAAQ,MAAK;cACzB;KACK;GAEV,2CAACM;IAAM,OAAO,EAAE,gCAAgC;cAC9C,2CAACC,iCAAW,OAAO,UAAW;KACxB;GACR,2CAACD;IAAM,OAAO,EAAE,8BAA8B;cAC5C,2CAACE;KACC,OAAO,EAAE,8BAA8B;KACvC,WAAW,EAAE,iCAAiC;KAC9C,OAAO,OAAO,KAAK,WAA4B;MAAC,IAAI,MAAM;MAAI,OAAO,MAAM;MAAK,EAAE;MAClF;KACI;GACR,2CAACF;IAAM,OAAO,EAAE,6BAA6B;cAC3C,2CAACE;KACC,OAAO,EAAE,6BAA6B;KACtC,WAAW,EAAE,gCAAgC;KAC7C,OAAO,MAAM,KAAK,UAAkB;MAAC,IAAI;MAAM,OAAO;MAAK,EAAE;MAC7D;KACI;;GACK;;AAInB,+BAAe"}

package/dist/cjs/components/admin/ApplicationDetails/ApplicationDetails.cjs

@@ -3,6 +3,7 @@ const require_useTranslation = require('../../../hooks/useTranslation.cjs');
 const require_useManagementEndpoint = require('../../../hooks/management/useManagementEndpoint.cjs');
 const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
 const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
+const require_useAccountLifecycle = require('../../../hooks/management/useAccountLifecycle.cjs');
 const require_BaseApplicationDetails = require('./BaseApplicationDetails.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -32,7 +33,7 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 * />
 * ```
 */
-const ApplicationDetails = ({ applicationId, deletable = false, editable = false, onDeleted, preferences, secretRegenerable = false,...rest }) => {
+const ApplicationDetails = ({ administrationMode, applicationId, deletable = false, editable = false, lifecycleActions = false, onDeleted, preferences, secretRegenerable = false,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const endpoint = require_useManagementEndpoint.default("applications");
 	const application = require_useResourceQuery.default([__thunderid_browser.ApplicationQueryKeys.APPLICATION, applicationId], (fetcher) => (0, __thunderid_browser.getApplication)({
@@ -42,6 +43,7 @@ const ApplicationDetails = ({ applicationId, deletable = false, editable = false
 	}), { enabled: Boolean(applicationId) });
 	const deletion = require_useResourceMutation.default((id, fetcher) => (0, __thunderid_browser.deleteApplication)({
 		...endpoint,
+		administrationMode,
 		applicationId: id,
 		fetcher
 	}), () => [[__thunderid_browser.ApplicationQueryKeys.APPLICATIONS]], { onSuccess: onDeleted });
@@ -53,15 +55,26 @@ const ApplicationDetails = ({ applicationId, deletable = false, editable = false
 	}), ({ application: current }) => [[__thunderid_browser.ApplicationQueryKeys.APPLICATION, current.id], [__thunderid_browser.ApplicationQueryKeys.APPLICATIONS]]);
 	const regeneration = require_useResourceMutation.default((id, fetcher) => (0, __thunderid_browser.regenerateClientSecret)({
 		...endpoint,
+		administrationMode,
 		applicationId: id,
 		fetcher
 	}), (id) => [[__thunderid_browser.ApplicationQueryKeys.APPLICATION, id], [__thunderid_browser.ApplicationQueryKeys.APPLICATIONS]]);
+	const lifecycle = require_useAccountLifecycle.default({
+		enabled: lifecycleActions,
+		invalidatedKeys: [[__thunderid_browser.ApplicationQueryKeys.APPLICATION, applicationId], [__thunderid_browser.ApplicationQueryKeys.APPLICATIONS]],
+		kind: "application",
+		status: application.data?.status?.value,
+		subject: applicationId
+	});
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseApplicationDetails.default, {
 		application: application.data,
 		isLoading: application.isLoading,
-		error: (0, __thunderid_browser.toManagementErrorMessage)(t, application.error, "admin.applications.details.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, deletion.error, "admin.applications.details.delete.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, update.error, "admin.applications.details.edit.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, regeneration.error, "admin.applications.details.secret.error"),
+		error: (0, __thunderid_browser.toManagementErrorMessage)(t, application.error, "admin.applications.details.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, deletion.error, "admin.applications.details.delete.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, update.error, "admin.applications.details.edit.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, regeneration.error, "admin.applications.details.secret.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, lifecycle.error, "admin.common.lifecycle.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, lifecycle.loadError, "admin.common.lifecycle.load_error"),
 		isDeleting: deletion.isLoading,
 		onDelete: deletable ? () => void deletion.mutate(applicationId) : void 0,
+		lifecycleActions: lifecycle.actions,
+		isRunningLifecycleAction: lifecycle.isRunning,
+		onLifecycleAction: lifecycleActions ? lifecycle.run : void 0,
 		isUpdating: update.isLoading,
 		onUpdate: editable && application.data ? (changes) => void update.mutate({
 			application: application.data,

package/dist/cjs/components/admin/ApplicationDetails/ApplicationDetails.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ApplicationDetails.cjs","names":["ApplicationDetails: FC<ApplicationDetailsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","application: ResourceQueryResult<Application>","useResourceQuery","ApplicationQueryKeys","deletion: ResourceMutationResult<void, string>","useResourceMutation","update: ResourceMutationResult<Application, UpdateApplicationVariables>","regeneration: ResourceMutationResult<RegenerateClientSecretResult, string>","BaseApplicationDetails"],"sources":["../../../../../src/components/admin/ApplicationDetails/ApplicationDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  Application,\n  ApplicationQueryKeys,\n  deleteApplication,\n  getApplication,\n  regenerateClientSecret,\n  RegenerateClientSecretResult,\n  toManagementErrorMessage,\n  toUpdateApplicationRequest,\n  updateApplication,\n} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseApplicationDetails, {\n  ApplicationUpdateSubmission,\n  BaseApplicationDetailsProps,\n} from './BaseApplicationDetails';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\ninterface UpdateApplicationVariables {\n  application: Application;\n  changes: ApplicationUpdateSubmission;\n}\n\nexport type ApplicationDetailsProps = Omit<\n  BaseApplicationDetailsProps,\n  | 'application'\n  | 'clientSecret'\n  | 'error'\n  | 'isDeleting'\n  | 'isLoading'\n  | 'isRegeneratingSecret'\n  | 'isUpdating'\n  | 'onDelete'\n  | 'onRegenerateSecret'\n  | 'onSecretDismiss'\n  | 'onUpdate'\n> & {\n  applicationId: string;\n  /**\n   * Whether the application can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the application's general fields, redirect URIs and grant types can be edited from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Called after the application has been deleted.\n   */\n  onDeleted?: () => void;\n  /**\n   * Whether the application's client secret can be regenerated from this view. The new secret is shown\n   * once.\n   * @default false\n   */\n  secretRegenerable?: boolean;\n};\n\n/**\n * Shows an application and its OAuth configuration, and optionally lets the signed-in user edit it,\n * regenerate its client secret or delete it.\n *\n * The server guards applications with the root `system` permission, for reading and for changes alike;\n * it defines no application-specific permission. Gate the view and its actions on it with\n * `useGrantedPermissions().can('system')`.\n *\n * @example\n * ```tsx\n * const {can} = useGrantedPermissions();\n * const isAdmin = can('system');\n *\n * <ApplicationDetails\n *   applicationId={applicationId}\n *   editable={isAdmin}\n *   deletable={isAdmin}\n *   secretRegenerable={isAdmin}\n *   onDeleted={() => navigate('/applications')}\n * />\n * ```\n */\nconst ApplicationDetails: FC<ApplicationDetailsProps> = ({\n  applicationId,\n  deletable = false,\n  editable = false,\n  onDeleted,\n  preferences,\n  secretRegenerable = false,\n  ...rest\n}: ApplicationDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('applications');\n  const application: ResourceQueryResult<Application> = useResourceQuery(\n    [ApplicationQueryKeys.APPLICATION, applicationId],\n    (fetcher) => getApplication({...endpoint, applicationId, fetcher}),\n    {enabled: Boolean(applicationId)},\n  );\n  const deletion: ResourceMutationResult<void, string> = useResourceMutation(\n    (id: string, fetcher) => deleteApplication({...endpoint, applicationId: id, fetcher}),\n    () => [[ApplicationQueryKeys.APPLICATIONS]],\n    {onSuccess: onDeleted},\n  );\n  const update: ResourceMutationResult<Application, UpdateApplicationVariables> = useResourceMutation(\n    ({application: current, changes}: UpdateApplicationVariables, fetcher) =>\n      updateApplication({\n        ...endpoint,\n        applicationId: current.id,\n        fetcher,\n        payload: toUpdateApplicationRequest(current, changes),\n      }),\n    ({application: current}: UpdateApplicationVariables) => [\n      [ApplicationQueryKeys.APPLICATION, current.id],\n      [ApplicationQueryKeys.APPLICATIONS],\n    ],\n  );\n  const regeneration: ResourceMutationResult<RegenerateClientSecretResult, string> = useResourceMutation(\n    (id: string, fetcher) => regenerateClientSecret({...endpoint, applicationId: id, fetcher}),\n    (id: string) => [[ApplicationQueryKeys.APPLICATION, id], [ApplicationQueryKeys.APPLICATIONS]],\n  );\n\n  return (\n    <BaseApplicationDetails\n      application={application.data}\n      isLoading={application.isLoading}\n      error={\n        toManagementErrorMessage(t, application.error, 'admin.applications.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.applications.details.delete.error') ??\n        toManagementErrorMessage(t, update.error, 'admin.applications.details.edit.error') ??\n        toManagementErrorMessage(t, regeneration.error, 'admin.applications.details.secret.error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(applicationId) : undefined}\n      isUpdating={update.isLoading}\n      onUpdate={\n        editable && application.data\n          ? (changes: ApplicationUpdateSubmission): void =>\n              void update.mutate({application: application.data!, changes})\n          : undefined\n      }\n      isRegeneratingSecret={regeneration.isLoading}\n      onRegenerateSecret={secretRegenerable ? (): void => void regeneration.mutate(applicationId) : undefined}\n      clientSecret={regeneration.data?.clientSecret ?? null}\n      onSecretDismiss={regeneration.reset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default ApplicationDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwFA,MAAMA,sBAAmD,EACvD,eACA,YAAY,OACZ,WAAW,OACX,WACA,aACA,oBAAoB,MACpB,GAAG,WACwC;CAC3C,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,sCAAsB,eAAe;CAC1E,MAAMC,cAAgDC,iCACpD,CAACC,yCAAqB,aAAa,cAAc,GAChD,oDAA2B;EAAC,GAAG;EAAU;EAAe;EAAQ,CAAC,EAClE,EAAC,SAAS,QAAQ,cAAc,EAAC,CAClC;CACD,MAAMC,WAAiDC,qCACpD,IAAY,uDAA8B;EAAC,GAAG;EAAU,eAAe;EAAI;EAAQ,CAAC,QAC/E,CAAC,CAACF,yCAAqB,aAAa,CAAC,EAC3C,EAAC,WAAW,WAAU,CACvB;CACD,MAAMG,SAA0ED,qCAC7E,EAAC,aAAa,SAAS,WAAsC,uDAC1C;EAChB,GAAG;EACH,eAAe,QAAQ;EACvB;EACA,6DAAoC,SAAS,QAAQ;EACtD,CAAC,GACH,EAAC,aAAa,cAAyC,CACtD,CAACF,yCAAqB,aAAa,QAAQ,GAAG,EAC9C,CAACA,yCAAqB,aAAa,CACpC,CACF;CACD,MAAMI,eAA6EF,qCAChF,IAAY,4DAAmC;EAAC,GAAG;EAAU,eAAe;EAAI;EAAQ,CAAC,GACzF,OAAe,CAAC,CAACF,yCAAqB,aAAa,GAAG,EAAE,CAACA,yCAAqB,aAAa,CAAC,CAC9F;AAED,QACE,2CAACK;EACC,aAAa,YAAY;EACzB,WAAW,YAAY;EACvB,yDAC2B,GAAG,YAAY,OAAO,mCAAmC,sDACzD,GAAG,SAAS,OAAO,0CAA0C,sDAC7D,GAAG,OAAO,OAAO,wCAAwC,sDACzD,GAAG,aAAa,OAAO,0CAA0C;EAE5F,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,cAAc,GAAG;EACxE,YAAY,OAAO;EACnB,UACE,YAAY,YAAY,QACnB,YACC,KAAK,OAAO,OAAO;GAAC,aAAa,YAAY;GAAO;GAAQ,CAAC,GAC/D;EAEN,sBAAsB,aAAa;EACnC,oBAAoB,0BAAgC,KAAK,aAAa,OAAO,cAAc,GAAG;EAC9F,cAAc,aAAa,MAAM,gBAAgB;EACjD,iBAAiB,aAAa;EACjB;EACb,GAAI;GACJ;;AAIN,iCAAe"}
+{"version":3,"file":"ApplicationDetails.cjs","names":["ApplicationDetails: FC<ApplicationDetailsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","application: ResourceQueryResult<Application>","useResourceQuery","ApplicationQueryKeys","deletion: ResourceMutationResult<void, string>","useResourceMutation","update: ResourceMutationResult<Application, UpdateApplicationVariables>","regeneration: ResourceMutationResult<RegenerateClientSecretResult, string>","lifecycle: AccountLifecycleState","useAccountLifecycle","BaseApplicationDetails"],"sources":["../../../../../src/components/admin/ApplicationDetails/ApplicationDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  Application,\n  ApplicationQueryKeys,\n  deleteApplication,\n  getApplication,\n  regenerateClientSecret,\n  RegenerateClientSecretResult,\n  toManagementErrorMessage,\n  toUpdateApplicationRequest,\n  updateApplication,\n} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseApplicationDetails, {\n  ApplicationUpdateSubmission,\n  BaseApplicationDetailsProps,\n} from './BaseApplicationDetails';\nimport useAccountLifecycle, {AccountLifecycleState} from '../../../hooks/management/useAccountLifecycle';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\ninterface UpdateApplicationVariables {\n  application: Application;\n  changes: ApplicationUpdateSubmission;\n}\n\nexport type ApplicationDetailsProps = Omit<\n  BaseApplicationDetailsProps,\n  | 'application'\n  | 'clientSecret'\n  | 'error'\n  | 'isDeleting'\n  | 'isLoading'\n  | 'isRegeneratingSecret'\n  | 'isRunningLifecycleAction'\n  | 'isUpdating'\n  | 'lifecycleActions'\n  | 'onDelete'\n  | 'onLifecycleAction'\n  | 'onRegenerateSecret'\n  | 'onSecretDismiss'\n  | 'onUpdate'\n> & {\n  /**\n   * How the delete and the client secret regeneration run. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  applicationId: string;\n  /**\n   * Whether the application can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the application's general fields, redirect URIs and grant types can be edited from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether the application can be suspended and unsuspended from this view. Each action runs through its\n   * administration flow and is offered only when the server configures that flow. Reading the configured\n   * flows needs a token that may read the server configuration.\n   * @default false\n   */\n  lifecycleActions?: boolean;\n  /**\n   * Called after the application has been deleted.\n   */\n  onDeleted?: () => void;\n  /**\n   * Whether the application's client secret can be regenerated from this view. The new secret is shown\n   * once.\n   * @default false\n   */\n  secretRegenerable?: boolean;\n};\n\n/**\n * Shows an application and its OAuth configuration, and optionally lets the signed-in user edit it,\n * regenerate its client secret or delete it.\n *\n * The server guards applications with the root `system` permission, for reading and for changes alike;\n * it defines no application-specific permission. Gate the view and its actions on it with\n * `useGrantedPermissions().can('system')`.\n *\n * @example\n * ```tsx\n * const {can} = useGrantedPermissions();\n * const isAdmin = can('system');\n *\n * <ApplicationDetails\n *   applicationId={applicationId}\n *   editable={isAdmin}\n *   deletable={isAdmin}\n *   secretRegenerable={isAdmin}\n *   onDeleted={() => navigate('/applications')}\n * />\n * ```\n */\nconst ApplicationDetails: FC<ApplicationDetailsProps> = ({\n  administrationMode,\n  applicationId,\n  deletable = false,\n  editable = false,\n  lifecycleActions = false,\n  onDeleted,\n  preferences,\n  secretRegenerable = false,\n  ...rest\n}: ApplicationDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('applications');\n  const application: ResourceQueryResult<Application> = useResourceQuery(\n    [ApplicationQueryKeys.APPLICATION, applicationId],\n    (fetcher) => getApplication({...endpoint, applicationId, fetcher}),\n    {enabled: Boolean(applicationId)},\n  );\n  const deletion: ResourceMutationResult<void, string> = useResourceMutation(\n    (id: string, fetcher) => deleteApplication({...endpoint, administrationMode, applicationId: id, fetcher}),\n    () => [[ApplicationQueryKeys.APPLICATIONS]],\n    {onSuccess: onDeleted},\n  );\n  const update: ResourceMutationResult<Application, UpdateApplicationVariables> = useResourceMutation(\n    ({application: current, changes}: UpdateApplicationVariables, fetcher) =>\n      updateApplication({\n        ...endpoint,\n        applicationId: current.id,\n        fetcher,\n        payload: toUpdateApplicationRequest(current, changes),\n      }),\n    ({application: current}: UpdateApplicationVariables) => [\n      [ApplicationQueryKeys.APPLICATION, current.id],\n      [ApplicationQueryKeys.APPLICATIONS],\n    ],\n  );\n  const regeneration: ResourceMutationResult<RegenerateClientSecretResult, string> = useResourceMutation(\n    (id: string, fetcher) => regenerateClientSecret({...endpoint, administrationMode, applicationId: id, fetcher}),\n    (id: string) => [[ApplicationQueryKeys.APPLICATION, id], [ApplicationQueryKeys.APPLICATIONS]],\n  );\n\n  const lifecycle: AccountLifecycleState = useAccountLifecycle({\n    enabled: lifecycleActions,\n    invalidatedKeys: [[ApplicationQueryKeys.APPLICATION, applicationId], [ApplicationQueryKeys.APPLICATIONS]],\n    kind: 'application',\n    status: application.data?.status?.value,\n    subject: applicationId,\n  });\n\n  return (\n    <BaseApplicationDetails\n      application={application.data}\n      isLoading={application.isLoading}\n      error={\n        toManagementErrorMessage(t, application.error, 'admin.applications.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.applications.details.delete.error') ??\n        toManagementErrorMessage(t, update.error, 'admin.applications.details.edit.error') ??\n        toManagementErrorMessage(t, regeneration.error, 'admin.applications.details.secret.error') ??\n        toManagementErrorMessage(t, lifecycle.error, 'admin.common.lifecycle.error') ??\n        toManagementErrorMessage(t, lifecycle.loadError, 'admin.common.lifecycle.load_error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(applicationId) : undefined}\n      lifecycleActions={lifecycle.actions}\n      isRunningLifecycleAction={lifecycle.isRunning}\n      onLifecycleAction={lifecycleActions ? lifecycle.run : undefined}\n      isUpdating={update.isLoading}\n      onUpdate={\n        editable && application.data\n          ? (changes: ApplicationUpdateSubmission): void =>\n              void update.mutate({application: application.data!, changes})\n          : undefined\n      }\n      isRegeneratingSecret={regeneration.isLoading}\n      onRegenerateSecret={secretRegenerable ? (): void => void regeneration.mutate(applicationId) : undefined}\n      clientSecret={regeneration.data?.clientSecret ?? null}\n      onSecretDismiss={regeneration.reset}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default ApplicationDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0GA,MAAMA,sBAAmD,EACvD,oBACA,eACA,YAAY,OACZ,WAAW,OACX,mBAAmB,OACnB,WACA,aACA,oBAAoB,MACpB,GAAG,WACwC;CAC3C,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,sCAAsB,eAAe;CAC1E,MAAMC,cAAgDC,iCACpD,CAACC,yCAAqB,aAAa,cAAc,GAChD,oDAA2B;EAAC,GAAG;EAAU;EAAe;EAAQ,CAAC,EAClE,EAAC,SAAS,QAAQ,cAAc,EAAC,CAClC;CACD,MAAMC,WAAiDC,qCACpD,IAAY,uDAA8B;EAAC,GAAG;EAAU;EAAoB,eAAe;EAAI;EAAQ,CAAC,QACnG,CAAC,CAACF,yCAAqB,aAAa,CAAC,EAC3C,EAAC,WAAW,WAAU,CACvB;CACD,MAAMG,SAA0ED,qCAC7E,EAAC,aAAa,SAAS,WAAsC,uDAC1C;EAChB,GAAG;EACH,eAAe,QAAQ;EACvB;EACA,6DAAoC,SAAS,QAAQ;EACtD,CAAC,GACH,EAAC,aAAa,cAAyC,CACtD,CAACF,yCAAqB,aAAa,QAAQ,GAAG,EAC9C,CAACA,yCAAqB,aAAa,CACpC,CACF;CACD,MAAMI,eAA6EF,qCAChF,IAAY,4DAAmC;EAAC,GAAG;EAAU;EAAoB,eAAe;EAAI;EAAQ,CAAC,GAC7G,OAAe,CAAC,CAACF,yCAAqB,aAAa,GAAG,EAAE,CAACA,yCAAqB,aAAa,CAAC,CAC9F;CAED,MAAMK,YAAmCC,oCAAoB;EAC3D,SAAS;EACT,iBAAiB,CAAC,CAACN,yCAAqB,aAAa,cAAc,EAAE,CAACA,yCAAqB,aAAa,CAAC;EACzG,MAAM;EACN,QAAQ,YAAY,MAAM,QAAQ;EAClC,SAAS;EACV,CAAC;AAEF,QACE,2CAACO;EACC,aAAa,YAAY;EACzB,WAAW,YAAY;EACvB,yDAC2B,GAAG,YAAY,OAAO,mCAAmC,sDACzD,GAAG,SAAS,OAAO,0CAA0C,sDAC7D,GAAG,OAAO,OAAO,wCAAwC,sDACzD,GAAG,aAAa,OAAO,0CAA0C,sDACjE,GAAG,UAAU,OAAO,+BAA+B,sDACnD,GAAG,UAAU,WAAW,oCAAoC;EAEvF,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,cAAc,GAAG;EACxE,kBAAkB,UAAU;EAC5B,0BAA0B,UAAU;EACpC,mBAAmB,mBAAmB,UAAU,MAAM;EACtD,YAAY,OAAO;EACnB,UACE,YAAY,YAAY,QACnB,YACC,KAAK,OAAO,OAAO;GAAC,aAAa,YAAY;GAAO;GAAQ,CAAC,GAC/D;EAEN,sBAAsB,aAAa;EACnC,oBAAoB,0BAAgC,KAAK,aAAa,OAAO,cAAc,GAAG;EAC9F,cAAc,aAAa,MAAM,gBAAgB;EACjD,iBAAiB,aAAa;EACjB;EACb,GAAI;GACJ;;AAIN,iCAAe"}

package/dist/cjs/components/admin/ApplicationDetails/BaseApplicationDetails.cjs

@@ -6,6 +6,7 @@ const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_CopyableText = require('../../primitives/CopyableText/CopyableText.cjs');
 const require_useAdminPartStyles = require('../shared/useAdminPartStyles.cjs');
 const require_AdminSection = require('../shared/AdminSection.cjs');
+const require_AccountLifecycleParts = require('../shared/AccountLifecycleParts.cjs');
 const require_AdminParts = require('../shared/AdminParts.cjs');
 const require_ApplicationFormFields = require('../shared/ApplicationFormFields.cjs');
 const require_ClientSecretNotice = require('../shared/ClientSecretNotice.cjs');
@@ -40,7 +41,7 @@ const toSubmission = (values) => ({
 * application and handle editing, deletion and client secret regeneration, each offered only when its
 * handler is set.
 */
-const BaseApplicationDetails = ({ actions, application, children, className, clientSecret = null, error = null, isDeleting = false, isLoading = false, isRegeneratingSecret = false, isUpdating = false, onDelete, onRegenerateSecret, onSecretDismiss, onUpdate, preferences }) => {
+const BaseApplicationDetails = ({ actions, application, children, className, clientSecret = null, error = null, isDeleting = false, isLoading = false, isRegeneratingSecret = false, isRunningLifecycleAction = false, isUpdating = false, lifecycleActions = [], onDelete, onLifecycleAction, onRegenerateSecret, onSecretDismiss, onUpdate, preferences }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const styles = require_useAdminPartStyles.default();
 	const [draft, setDraft] = (0, react.useState)(null);
@@ -62,9 +63,12 @@ const BaseApplicationDetails = ({ actions, application, children, className, cli
 				isDeleting,
 				isLoading,
 				isRegeneratingSecret,
+				isRunningLifecycleAction,
 				isUpdating,
+				lifecycleActions: onLifecycleAction && application ? lifecycleActions : [],
 				oauth,
 				onDelete: isWritable ? onDelete : void 0,
+				onLifecycleAction: application ? onLifecycleAction : void 0,
 				onRegenerateSecret: canRegenerate ? onRegenerateSecret : void 0,
 				onSecretDismiss: clientSecret ? onSecretDismiss : void 0,
 				onUpdate: isWritable ? onUpdate : void 0
@@ -118,6 +122,10 @@ const BaseApplicationDetails = ({ actions, application, children, className, cli
 			value: application.logoUrl ?? notSet
 		}
 	];
+	if (application.status?.value) overview.push({
+		label: t("admin.common.columns.status"),
+		value: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AccountLifecycleParts.AccessStatusBadge, { status: application.status.value })
+	});
 	const handleSave = (event) => {
 		event.preventDefault();
 		if (!draft) return;
@@ -131,12 +139,21 @@ const BaseApplicationDetails = ({ actions, application, children, className, cli
 		title: application.name,
 		description: application.description,
 		preferences,
-		actions: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [actions, onDelete && isWritable && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ConfirmButton, {
-			confirmText: t("admin.applications.details.delete.confirm", { name: application.name }),
-			isLoading: isDeleting,
-			onConfirm: onDelete,
-			children: t("admin.applications.details.delete.action")
-		})] }),
+		actions: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+			actions,
+			onLifecycleAction && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AccountLifecycleParts.AccountLifecycleButtons, {
+				actions: lifecycleActions,
+				isRunning: isRunningLifecycleAction,
+				name: application.name,
+				onAction: onLifecycleAction
+			}),
+			onDelete && isWritable && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ConfirmButton, {
+				confirmText: t("admin.applications.details.delete.confirm", { name: application.name }),
+				isLoading: isDeleting,
+				onConfirm: onDelete,
+				children: t("admin.applications.details.delete.action")
+			})
+		] }),
 		children: [error && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Alert.default, {
 			variant: "error",
 			role: "alert",

package/dist/cjs/components/admin/ApplicationDetails/BaseApplicationDetails.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"BaseApplicationDetails.cjs","names":["BaseApplicationDetails: FC<BaseApplicationDetailsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","oauthConfig: OAuth2Config | undefined","isWritable: boolean","canRegenerate: boolean","oauth: Omit<OAuth2Config, 'clientSecret'> | undefined","AdminSection","Spinner","Alert","notSet: string","overview: DetailListItem[]","CopyableText","ConfirmButton","Panel","ApplicationFormFields","Button","DetailList","ClientSecretNotice","ChipList","APPLICATION_GRANT_TYPES"],"sources":["../../../../../src/components/admin/ApplicationDetails/BaseApplicationDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  Application,\n  APPLICATION_GRANT_TYPES,\n  ApplicationSubmission,\n  getApplicationOAuthConfig,\n  isApplicationSubmissionValid,\n  OAuth2Config,\n  parseRedirectUris,\n  Preferences,\n} from '@thunderid/browser';\nimport {FC, FormEvent, ReactElement, ReactNode, useState} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport Button from '../../primitives/Button/Button';\nimport CopyableText from '../../primitives/CopyableText/CopyableText';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport {ChipList, ConfirmButton, DetailList, DetailListItem, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport ApplicationFormFields, {ApplicationFormValues, ApplicationTextField} from '../shared/ApplicationFormFields';\nimport ClientSecretNotice from '../shared/ClientSecretNotice';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * The edited fields {@link BaseApplicationDetails} hands `onUpdate`. Whether the client is public does\n * not change.\n */\nexport type ApplicationUpdateSubmission = Omit<ApplicationSubmission, 'publicClient'>;\n\n/**\n * What {@link BaseApplicationDetails} hands its `children` render function, so the application can be\n * shown with any UI.\n */\nexport interface BaseApplicationDetailsRenderProps {\n  application?: Application;\n  /**\n   * The new client secret, to show once. `null` while there is none.\n   */\n  clientSecret: string | null;\n  error: string | null;\n  isDeleting: boolean;\n  isLoading: boolean;\n  isRegeneratingSecret: boolean;\n  isUpdating: boolean;\n  /**\n   * The application's OAuth configuration, without its client secret. Undefined when it has no OAuth client.\n   */\n  oauth?: Omit<OAuth2Config, 'clientSecret'>;\n  /**\n   * Deletes the application. Undefined when deletion is not allowed, including for read-only applications.\n   */\n  onDelete?: () => void;\n  /**\n   * Gives the application a new client secret. Undefined when not allowed, for read-only applications\n   * and for applications without a confidential OAuth client.\n   */\n  onRegenerateSecret?: () => void;\n  /**\n   * Hides the new client secret once it has been copied. Undefined while there is no secret.\n   */\n  onSecretDismiss?: () => void;\n  /**\n   * Saves edited fields. Undefined when editing is not allowed, including for read-only applications.\n   */\n  onUpdate?: (application: ApplicationUpdateSubmission) => void;\n}\n\nexport interface BaseApplicationDetailsProps {\n  /**\n   * Controls rendered next to the application's name.\n   */\n  actions?: ReactNode;\n  application?: Application;\n  /**\n   * Renders custom UI in place of the default view. Receives the application, its OAuth configuration,\n   * the loading and error state, the actions the app allows and the new client secret to show.\n   */\n  children?: (props: BaseApplicationDetailsRenderProps) => ReactNode;\n  className?: string;\n  /**\n   * A client secret just generated by `onRegenerateSecret`, shown once until `onSecretDismiss` clears it.\n   */\n  clientSecret?: string | null;\n  error?: string | null;\n  isDeleting?: boolean;\n  isLoading?: boolean;\n  isRegeneratingSecret?: boolean;\n  isUpdating?: boolean;\n  /**\n   * Deletes the application. The delete action is hidden when omitted.\n   */\n  onDelete?: () => void;\n  /**\n   * Gives the application a new client secret. The regenerate action is hidden when omitted, and for\n   * public clients, which have no secret.\n   */\n  onRegenerateSecret?: () => void;\n  /**\n   * Called when the user has copied the new client secret.\n   */\n  onSecretDismiss?: () => void;\n  /**\n   * Saves the edited general fields, redirect URIs and grant types. Editing is offered only when set.\n   */\n  onUpdate?: (application: ApplicationUpdateSubmission) => void;\n  preferences?: Preferences;\n}\n\nconst toFormValues = (application: Application, oauth?: OAuth2Config): ApplicationFormValues => ({\n  description: application.description ?? '',\n  grantTypes: oauth?.grantTypes ?? [],\n  logoUrl: application.logoUrl ?? '',\n  name: application.name,\n  publicClient: Boolean(oauth?.publicClient),\n  redirectUris: (oauth?.redirectUris ?? []).join(', '),\n  url: application.url ?? '',\n});\n\nconst toSubmission = (values: ApplicationFormValues): ApplicationSubmission => ({\n  description: values.description.trim() || undefined,\n  grantTypes: values.grantTypes,\n  logoUrl: values.logoUrl.trim() || undefined,\n  name: values.name.trim(),\n  publicClient: values.publicClient,\n  redirectUris: parseRedirectUris(values.redirectUris),\n  url: values.url.trim() || undefined,\n});\n\n/**\n * Shows an application's general fields and OAuth configuration. Holds no data of its own: pass the\n * application and handle editing, deletion and client secret regeneration, each offered only when its\n * handler is set.\n */\nconst BaseApplicationDetails: FC<BaseApplicationDetailsProps> = ({\n  actions,\n  application,\n  children,\n  className,\n  clientSecret = null,\n  error = null,\n  isDeleting = false,\n  isLoading = false,\n  isRegeneratingSecret = false,\n  isUpdating = false,\n  onDelete,\n  onRegenerateSecret,\n  onSecretDismiss,\n  onUpdate,\n  preferences,\n}: BaseApplicationDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n  const [draft, setDraft] = useState<ApplicationFormValues | null>(null);\n\n  const oauthConfig: OAuth2Config | undefined = getApplicationOAuthConfig(application);\n  const isWritable: boolean = Boolean(application) && !application?.isReadOnly;\n  const canRegenerate: boolean = isWritable && Boolean(oauthConfig) && !oauthConfig?.publicClient;\n\n  if (children) {\n    let oauth: Omit<OAuth2Config, 'clientSecret'> | undefined;\n\n    if (oauthConfig) {\n      const {clientSecret: storedSecret, ...rest}: OAuth2Config = oauthConfig;\n      void storedSecret;\n      oauth = rest;\n    }\n\n    return (\n      <div className={className}>\n        {children({\n          application,\n          clientSecret,\n          error,\n          isDeleting,\n          isLoading,\n          isRegeneratingSecret,\n          isUpdating,\n          oauth,\n          onDelete: isWritable ? onDelete : undefined,\n          onRegenerateSecret: canRegenerate ? onRegenerateSecret : undefined,\n          onSecretDismiss: clientSecret ? onSecretDismiss : undefined,\n          onUpdate: isWritable ? onUpdate : undefined,\n        })}\n      </div>\n    );\n  }\n\n  if (isLoading && !application) {\n    return (\n      <AdminSection block=\"application-details\" className={className} preferences={preferences}>\n        <span className={styles['muted']} role=\"status\">\n          <Spinner size=\"small\" /> {t('admin.common.loading')}\n        </span>\n      </AdminSection>\n    );\n  }\n\n  if (!application) {\n    return (\n      <AdminSection block=\"application-details\" className={className} preferences={preferences}>\n        <Alert variant=\"error\" role=\"alert\">\n          {error ?? t('admin.common.errors.not_found')}\n        </Alert>\n      </AdminSection>\n    );\n  }\n\n  const notSet: string = t('admin.applications.details.not_set');\n  const overview: DetailListItem[] = [\n    {\n      label: t('admin.applications.list.columns.client_id'),\n      value: oauthConfig?.clientId ? <CopyableText value={oauthConfig.clientId} /> : notSet,\n    },\n    {label: t('admin.applications.details.type'), value: application.type ?? application.template ?? notSet},\n    {label: t('admin.common.columns.organization_unit'), value: application.ouId ?? notSet},\n    {label: t('admin.applications.fields.url'), value: application.url ?? notSet},\n    {label: t('admin.applications.fields.logo_url'), value: application.logoUrl ?? notSet},\n  ];\n\n  const handleSave = (event: FormEvent<HTMLFormElement>): void => {\n    event.preventDefault();\n\n    if (!draft) {\n      return;\n    }\n\n    const {publicClient, ...submission}: ApplicationSubmission = toSubmission(draft);\n    void publicClient;\n    onUpdate?.(submission);\n    setDraft(null);\n  };\n\n  return (\n    <AdminSection\n      block=\"application-details\"\n      className={className}\n      title={application.name}\n      description={application.description}\n      preferences={preferences}\n      actions={\n        <>\n          {actions}\n          {onDelete && isWritable && (\n            <ConfirmButton\n              confirmText={t('admin.applications.details.delete.confirm', {name: application.name})}\n              isLoading={isDeleting}\n              onConfirm={onDelete}\n            >\n              {t('admin.applications.details.delete.action')}\n            </ConfirmButton>\n          )}\n        </>\n      }\n    >\n      {error && (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      )}\n      {draft ? (\n        <Panel title={t('admin.applications.details.edit.action')}>\n          <form\n            className={styles['row']}\n            style={{alignItems: 'stretch', flexDirection: 'column'}}\n            onSubmit={handleSave}\n            noValidate\n          >\n            <ApplicationFormFields\n              preferences={preferences}\n              values={draft}\n              onInputChange={(field: ApplicationTextField, value: string): void =>\n                setDraft((previous: ApplicationFormValues | null) => previous && {...previous, [field]: value})\n              }\n              onGrantTypesChange={(grantTypes: string[]): void =>\n                setDraft((previous: ApplicationFormValues | null) => previous && {...previous, grantTypes})\n              }\n            />\n            <div className={styles['row']} style={{justifyContent: 'flex-end'}}>\n              <Button type=\"button\" variant=\"text\" disabled={isUpdating} onClick={(): void => setDraft(null)}>\n                {t('admin.common.actions.cancel')}\n              </Button>\n              <Button\n                type=\"submit\"\n                loading={isUpdating}\n                disabled={isUpdating || !isApplicationSubmissionValid(toSubmission(draft))}\n              >\n                {t('admin.applications.details.edit.save')}\n              </Button>\n            </div>\n          </form>\n        </Panel>\n      ) : (\n        <>\n          <Panel\n            title={t('admin.applications.details.overview')}\n            actions={\n              onUpdate && isWritable ? (\n                <Button\n                  variant=\"outline\"\n                  size=\"small\"\n                  onClick={(): void => setDraft(toFormValues(application, oauthConfig))}\n                >\n                  {t('admin.applications.details.edit.action')}\n                </Button>\n              ) : undefined\n            }\n          >\n            <DetailList items={overview} />\n          </Panel>\n          {oauthConfig && (\n            <Panel\n              title={t('admin.applications.details.oauth')}\n              actions={\n                onRegenerateSecret && canRegenerate && !clientSecret ? (\n                  <ConfirmButton\n                    confirmText={t('admin.applications.details.secret.confirm', {name: application.name})}\n                    isLoading={isRegeneratingSecret}\n                    onConfirm={onRegenerateSecret}\n                  >\n                    {t('admin.applications.details.secret.action')}\n                  </ConfirmButton>\n                ) : undefined\n              }\n            >\n              {clientSecret && (\n                <ClientSecretNotice secret={clientSecret} onDismiss={onSecretDismiss} preferences={preferences} />\n              )}\n              <DetailList\n                items={[\n                  {\n                    label: t('admin.applications.fields.grant_types'),\n                    value: (\n                      <ChipList\n                        label={t('admin.applications.fields.grant_types')}\n                        emptyText={t('admin.applications.details.no_grant_types')}\n                        items={(oauthConfig.grantTypes ?? []).map((grantType: string) => ({\n                          id: grantType,\n                          label: APPLICATION_GRANT_TYPES.includes(grantType)\n                            ? t(`admin.applications.grant_types.${grantType}`)\n                            : grantType,\n                        }))}\n                      />\n                    ),\n                  },\n                  {\n                    label: t('admin.applications.fields.redirect_uris'),\n                    value: (\n                      <ChipList\n                        label={t('admin.applications.fields.redirect_uris')}\n                        emptyText={t('admin.applications.details.no_redirect_uris')}\n                        items={(oauthConfig.redirectUris ?? []).map((uri: string) => ({id: uri, label: uri}))}\n                      />\n                    ),\n                  },\n                  {\n                    label: t('admin.applications.details.public_client'),\n                    value: oauthConfig.publicClient\n                      ? t('admin.applications.details.yes')\n                      : t('admin.applications.details.no'),\n                  },\n                ]}\n              />\n            </Panel>\n          )}\n        </>\n      )}\n    </AdminSection>\n  );\n};\n\nexport default BaseApplicationDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA8GA,MAAM,gBAAgB,aAA0B,WAAiD;CAC/F,aAAa,YAAY,eAAe;CACxC,YAAY,OAAO,cAAc,EAAE;CACnC,SAAS,YAAY,WAAW;CAChC,MAAM,YAAY;CAClB,cAAc,QAAQ,OAAO,aAAa;CAC1C,eAAe,OAAO,gBAAgB,EAAE,EAAE,KAAK,KAAK;CACpD,KAAK,YAAY,OAAO;CACzB;AAED,MAAM,gBAAgB,YAA0D;CAC9E,aAAa,OAAO,YAAY,MAAM,IAAI;CAC1C,YAAY,OAAO;CACnB,SAAS,OAAO,QAAQ,MAAM,IAAI;CAClC,MAAM,OAAO,KAAK,MAAM;CACxB,cAAc,OAAO;CACrB,yDAAgC,OAAO,aAAa;CACpD,KAAK,OAAO,IAAI,MAAM,IAAI;CAC3B;;;;;;AAOD,MAAMA,0BAA2D,EAC/D,SACA,aACA,UACA,WACA,eAAe,MACf,QAAQ,MACR,aAAa,OACb,YAAY,OACZ,uBAAuB,OACvB,aAAa,OACb,UACA,oBACA,iBACA,UACA,kBAC+C;CAC/C,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,oCAAoB;CAC3D,MAAM,CAAC,OAAO,gCAAmD,KAAK;CAEtE,MAAMC,iEAAkE,YAAY;CACpF,MAAMC,aAAsB,QAAQ,YAAY,IAAI,CAAC,aAAa;CAClE,MAAMC,gBAAyB,cAAc,QAAQ,YAAY,IAAI,CAAC,aAAa;AAEnF,KAAI,UAAU;EACZ,IAAIC;AAEJ,MAAI,aAAa;GACf,MAAM,EAAC,cAAc,aAAc,GAAG,SAAsB;AAE5D,WAAQ;;AAGV,SACE,2CAAC;GAAe;aACb,SAAS;IACR;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,UAAU,aAAa,WAAW;IAClC,oBAAoB,gBAAgB,qBAAqB;IACzD,iBAAiB,eAAe,kBAAkB;IAClD,UAAU,aAAa,WAAW;IACnC,CAAC;IACE;;AAIV,KAAI,aAAa,CAAC,YAChB,QACE,2CAACC;EAAa,OAAM;EAAiC;EAAwB;YAC3E,4CAAC;GAAK,WAAW,OAAO;GAAU,MAAK;;IACrC,2CAACC,2BAAQ,MAAK,UAAU;;IAAE,EAAE,uBAAuB;;IAC9C;GACM;AAInB,KAAI,CAAC,YACH,QACE,2CAACD;EAAa,OAAM;EAAiC;EAAwB;YAC3E,2CAACE;GAAM,SAAQ;GAAQ,MAAK;aACzB,SAAS,EAAE,gCAAgC;IACtC;GACK;CAInB,MAAMC,SAAiB,EAAE,qCAAqC;CAC9D,MAAMC,WAA6B;EACjC;GACE,OAAO,EAAE,4CAA4C;GACrD,OAAO,aAAa,WAAW,2CAACC,gCAAa,OAAO,YAAY,WAAY,GAAG;GAChF;EACD;GAAC,OAAO,EAAE,kCAAkC;GAAE,OAAO,YAAY,QAAQ,YAAY,YAAY;GAAO;EACxG;GAAC,OAAO,EAAE,yCAAyC;GAAE,OAAO,YAAY,QAAQ;GAAO;EACvF;GAAC,OAAO,EAAE,gCAAgC;GAAE,OAAO,YAAY,OAAO;GAAO;EAC7E;GAAC,OAAO,EAAE,qCAAqC;GAAE,OAAO,YAAY,WAAW;GAAO;EACvF;CAED,MAAM,cAAc,UAA4C;AAC9D,QAAM,gBAAgB;AAEtB,MAAI,CAAC,MACH;EAGF,MAAM,EAAC,aAAc,GAAG,eAAqC,aAAa,MAAM;AAEhF,aAAW,WAAW;AACtB,WAAS,KAAK;;AAGhB,QACE,4CAACL;EACC,OAAM;EACK;EACX,OAAO,YAAY;EACnB,aAAa,YAAY;EACZ;EACb,SACE,qFACG,SACA,YAAY,cACX,2CAACM;GACC,aAAa,EAAE,6CAA6C,EAAC,MAAM,YAAY,MAAK,CAAC;GACrF,WAAW;GACX,WAAW;aAEV,EAAE,2CAA2C;IAChC,IAEjB;aAGJ,SACC,2CAACJ;GAAM,SAAQ;GAAQ,MAAK;aACzB;IACK,EAET,QACC,2CAACK;GAAM,OAAO,EAAE,yCAAyC;aACvD,4CAAC;IACC,WAAW,OAAO;IAClB,OAAO;KAAC,YAAY;KAAW,eAAe;KAAS;IACvD,UAAU;IACV;eAEA,2CAACC;KACc;KACb,QAAQ;KACR,gBAAgB,OAA6B,UAC3C,UAAU,aAA2C,YAAY;MAAC,GAAG;OAAW,QAAQ;MAAM,CAAC;KAEjG,qBAAqB,eACnB,UAAU,aAA2C,YAAY;MAAC,GAAG;MAAU;MAAW,CAAC;MAE7F,EACF,4CAAC;KAAI,WAAW,OAAO;KAAQ,OAAO,EAAC,gBAAgB,YAAW;gBAChE,2CAACC;MAAO,MAAK;MAAS,SAAQ;MAAO,UAAU;MAAY,eAAqB,SAAS,KAAK;gBAC3F,EAAE,8BAA8B;OAC1B,EACT,2CAACA;MACC,MAAK;MACL,SAAS;MACT,UAAU,cAAc,uDAA8B,aAAa,MAAM,CAAC;gBAEzE,EAAE,uCAAuC;OACnC;MACL;KACD;IACD,GAER,qFACE,2CAACF;GACC,OAAO,EAAE,sCAAsC;GAC/C,SACE,YAAY,aACV,2CAACE;IACC,SAAQ;IACR,MAAK;IACL,eAAqB,SAAS,aAAa,aAAa,YAAY,CAAC;cAEpE,EAAE,yCAAyC;KACrC,GACP;aAGN,2CAACC,iCAAW,OAAO,WAAY;IACzB,EACP,eACC,4CAACH;GACC,OAAO,EAAE,mCAAmC;GAC5C,SACE,sBAAsB,iBAAiB,CAAC,eACtC,2CAACD;IACC,aAAa,EAAE,6CAA6C,EAAC,MAAM,YAAY,MAAK,CAAC;IACrF,WAAW;IACX,WAAW;cAEV,EAAE,2CAA2C;KAChC,GACd;cAGL,gBACC,2CAACK;IAAmB,QAAQ;IAAc,WAAW;IAA8B;KAAe,EAEpG,2CAACD,iCACC,OAAO;IACL;KACE,OAAO,EAAE,wCAAwC;KACjD,OACE,2CAACE;MACC,OAAO,EAAE,wCAAwC;MACjD,WAAW,EAAE,4CAA4C;MACzD,QAAQ,YAAY,cAAc,EAAE,EAAE,KAAK,eAAuB;OAChE,IAAI;OACJ,OAAOC,4CAAwB,SAAS,UAAU,GAC9C,EAAE,kCAAkC,YAAY,GAChD;OACL,EAAE;OACH;KAEL;IACD;KACE,OAAO,EAAE,0CAA0C;KACnD,OACE,2CAACD;MACC,OAAO,EAAE,0CAA0C;MACnD,WAAW,EAAE,8CAA8C;MAC3D,QAAQ,YAAY,gBAAgB,EAAE,EAAE,KAAK,SAAiB;OAAC,IAAI;OAAK,OAAO;OAAI,EAAE;OACrF;KAEL;IACD;KACE,OAAO,EAAE,2CAA2C;KACpD,OAAO,YAAY,eACf,EAAE,iCAAiC,GACnC,EAAE,gCAAgC;KACvC;IACF,GACD;IACI,IAET;GAEQ;;AAInB,qCAAe"}
+{"version":3,"file":"BaseApplicationDetails.cjs","names":["BaseApplicationDetails: FC<BaseApplicationDetailsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","oauthConfig: OAuth2Config | undefined","isWritable: boolean","canRegenerate: boolean","oauth: Omit<OAuth2Config, 'clientSecret'> | undefined","AdminSection","Spinner","Alert","notSet: string","overview: DetailListItem[]","CopyableText","AccessStatusBadge","AccountLifecycleButtons","ConfirmButton","Panel","ApplicationFormFields","Button","DetailList","ClientSecretNotice","ChipList","APPLICATION_GRANT_TYPES"],"sources":["../../../../../src/components/admin/ApplicationDetails/BaseApplicationDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AccountLifecycleAction,\n  Application,\n  APPLICATION_GRANT_TYPES,\n  ApplicationSubmission,\n  getApplicationOAuthConfig,\n  isApplicationSubmissionValid,\n  OAuth2Config,\n  parseRedirectUris,\n  Preferences,\n} from '@thunderid/browser';\nimport {FC, FormEvent, ReactElement, ReactNode, useState} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport Button from '../../primitives/Button/Button';\nimport CopyableText from '../../primitives/CopyableText/CopyableText';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport {AccessStatusBadge, AccountLifecycleButtons} from '../shared/AccountLifecycleParts';\nimport {ChipList, ConfirmButton, DetailList, DetailListItem, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport ApplicationFormFields, {ApplicationFormValues, ApplicationTextField} from '../shared/ApplicationFormFields';\nimport ClientSecretNotice from '../shared/ClientSecretNotice';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * The edited fields {@link BaseApplicationDetails} hands `onUpdate`. Whether the client is public does\n * not change.\n */\nexport type ApplicationUpdateSubmission = Omit<ApplicationSubmission, 'publicClient'>;\n\n/**\n * What {@link BaseApplicationDetails} hands its `children` render function, so the application can be\n * shown with any UI.\n */\nexport interface BaseApplicationDetailsRenderProps {\n  application?: Application;\n  /**\n   * The new client secret, to show once. `null` while there is none.\n   */\n  clientSecret: string | null;\n  error: string | null;\n  isDeleting: boolean;\n  isLoading: boolean;\n  isRegeneratingSecret: boolean;\n  isRunningLifecycleAction: boolean;\n  isUpdating: boolean;\n  /**\n   * The account lifecycle actions offered for the application. Empty when none is allowed.\n   */\n  lifecycleActions: AccountLifecycleAction[];\n  /**\n   * The application's OAuth configuration, without its client secret. Undefined when it has no OAuth client.\n   */\n  oauth?: Omit<OAuth2Config, 'clientSecret'>;\n  /**\n   * Deletes the application. Undefined when deletion is not allowed, including for read-only applications.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action. Undefined when none is allowed.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  /**\n   * Gives the application a new client secret. Undefined when not allowed, for read-only applications\n   * and for applications without a confidential OAuth client.\n   */\n  onRegenerateSecret?: () => void;\n  /**\n   * Hides the new client secret once it has been copied. Undefined while there is no secret.\n   */\n  onSecretDismiss?: () => void;\n  /**\n   * Saves edited fields. Undefined when editing is not allowed, including for read-only applications.\n   */\n  onUpdate?: (application: ApplicationUpdateSubmission) => void;\n}\n\nexport interface BaseApplicationDetailsProps {\n  /**\n   * Controls rendered next to the application's name.\n   */\n  actions?: ReactNode;\n  application?: Application;\n  /**\n   * Renders custom UI in place of the default view. Receives the application, its OAuth configuration,\n   * the loading and error state, the actions the app allows and the new client secret to show.\n   */\n  children?: (props: BaseApplicationDetailsRenderProps) => ReactNode;\n  className?: string;\n  /**\n   * A client secret just generated by `onRegenerateSecret`, shown once until `onSecretDismiss` clears it.\n   */\n  clientSecret?: string | null;\n  error?: string | null;\n  isDeleting?: boolean;\n  isLoading?: boolean;\n  isRegeneratingSecret?: boolean;\n  isRunningLifecycleAction?: boolean;\n  isUpdating?: boolean;\n  /**\n   * The account lifecycle actions to offer (suspend, unsuspend; applications are never locked), shown only with `onLifecycleAction`. They change\n   * only runtime state, so they apply to read-only applications too.\n   */\n  lifecycleActions?: AccountLifecycleAction[];\n  /**\n   * Deletes the application. The delete action is hidden when omitted.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action. Suspending and unsuspending ask for confirmation first.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  /**\n   * Gives the application a new client secret. The regenerate action is hidden when omitted, and for\n   * public clients, which have no secret.\n   */\n  onRegenerateSecret?: () => void;\n  /**\n   * Called when the user has copied the new client secret.\n   */\n  onSecretDismiss?: () => void;\n  /**\n   * Saves the edited general fields, redirect URIs and grant types. Editing is offered only when set.\n   */\n  onUpdate?: (application: ApplicationUpdateSubmission) => void;\n  preferences?: Preferences;\n}\n\nconst toFormValues = (application: Application, oauth?: OAuth2Config): ApplicationFormValues => ({\n  description: application.description ?? '',\n  grantTypes: oauth?.grantTypes ?? [],\n  logoUrl: application.logoUrl ?? '',\n  name: application.name,\n  publicClient: Boolean(oauth?.publicClient),\n  redirectUris: (oauth?.redirectUris ?? []).join(', '),\n  url: application.url ?? '',\n});\n\nconst toSubmission = (values: ApplicationFormValues): ApplicationSubmission => ({\n  description: values.description.trim() || undefined,\n  grantTypes: values.grantTypes,\n  logoUrl: values.logoUrl.trim() || undefined,\n  name: values.name.trim(),\n  publicClient: values.publicClient,\n  redirectUris: parseRedirectUris(values.redirectUris),\n  url: values.url.trim() || undefined,\n});\n\n/**\n * Shows an application's general fields and OAuth configuration. Holds no data of its own: pass the\n * application and handle editing, deletion and client secret regeneration, each offered only when its\n * handler is set.\n */\nconst BaseApplicationDetails: FC<BaseApplicationDetailsProps> = ({\n  actions,\n  application,\n  children,\n  className,\n  clientSecret = null,\n  error = null,\n  isDeleting = false,\n  isLoading = false,\n  isRegeneratingSecret = false,\n  isRunningLifecycleAction = false,\n  isUpdating = false,\n  lifecycleActions = [],\n  onDelete,\n  onLifecycleAction,\n  onRegenerateSecret,\n  onSecretDismiss,\n  onUpdate,\n  preferences,\n}: BaseApplicationDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n  const [draft, setDraft] = useState<ApplicationFormValues | null>(null);\n\n  const oauthConfig: OAuth2Config | undefined = getApplicationOAuthConfig(application);\n  const isWritable: boolean = Boolean(application) && !application?.isReadOnly;\n  const canRegenerate: boolean = isWritable && Boolean(oauthConfig) && !oauthConfig?.publicClient;\n\n  if (children) {\n    let oauth: Omit<OAuth2Config, 'clientSecret'> | undefined;\n\n    if (oauthConfig) {\n      const {clientSecret: storedSecret, ...rest}: OAuth2Config = oauthConfig;\n      void storedSecret;\n      oauth = rest;\n    }\n\n    return (\n      <div className={className}>\n        {children({\n          application,\n          clientSecret,\n          error,\n          isDeleting,\n          isLoading,\n          isRegeneratingSecret,\n          isRunningLifecycleAction,\n          isUpdating,\n          lifecycleActions: onLifecycleAction && application ? lifecycleActions : [],\n          oauth,\n          onDelete: isWritable ? onDelete : undefined,\n          onLifecycleAction: application ? onLifecycleAction : undefined,\n          onRegenerateSecret: canRegenerate ? onRegenerateSecret : undefined,\n          onSecretDismiss: clientSecret ? onSecretDismiss : undefined,\n          onUpdate: isWritable ? onUpdate : undefined,\n        })}\n      </div>\n    );\n  }\n\n  if (isLoading && !application) {\n    return (\n      <AdminSection block=\"application-details\" className={className} preferences={preferences}>\n        <span className={styles['muted']} role=\"status\">\n          <Spinner size=\"small\" /> {t('admin.common.loading')}\n        </span>\n      </AdminSection>\n    );\n  }\n\n  if (!application) {\n    return (\n      <AdminSection block=\"application-details\" className={className} preferences={preferences}>\n        <Alert variant=\"error\" role=\"alert\">\n          {error ?? t('admin.common.errors.not_found')}\n        </Alert>\n      </AdminSection>\n    );\n  }\n\n  const notSet: string = t('admin.applications.details.not_set');\n  const overview: DetailListItem[] = [\n    {\n      label: t('admin.applications.list.columns.client_id'),\n      value: oauthConfig?.clientId ? <CopyableText value={oauthConfig.clientId} /> : notSet,\n    },\n    {label: t('admin.applications.details.type'), value: application.type ?? application.template ?? notSet},\n    {label: t('admin.common.columns.organization_unit'), value: application.ouId ?? notSet},\n    {label: t('admin.applications.fields.url'), value: application.url ?? notSet},\n    {label: t('admin.applications.fields.logo_url'), value: application.logoUrl ?? notSet},\n  ];\n\n  if (application.status?.value) {\n    overview.push({\n      label: t('admin.common.columns.status'),\n      value: <AccessStatusBadge status={application.status.value} />,\n    });\n  }\n\n  const handleSave = (event: FormEvent<HTMLFormElement>): void => {\n    event.preventDefault();\n\n    if (!draft) {\n      return;\n    }\n\n    const {publicClient, ...submission}: ApplicationSubmission = toSubmission(draft);\n    void publicClient;\n    onUpdate?.(submission);\n    setDraft(null);\n  };\n\n  return (\n    <AdminSection\n      block=\"application-details\"\n      className={className}\n      title={application.name}\n      description={application.description}\n      preferences={preferences}\n      actions={\n        <>\n          {actions}\n          {onLifecycleAction && (\n            <AccountLifecycleButtons\n              actions={lifecycleActions}\n              isRunning={isRunningLifecycleAction}\n              name={application.name}\n              onAction={onLifecycleAction}\n            />\n          )}\n          {onDelete && isWritable && (\n            <ConfirmButton\n              confirmText={t('admin.applications.details.delete.confirm', {name: application.name})}\n              isLoading={isDeleting}\n              onConfirm={onDelete}\n            >\n              {t('admin.applications.details.delete.action')}\n            </ConfirmButton>\n          )}\n        </>\n      }\n    >\n      {error && (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      )}\n      {draft ? (\n        <Panel title={t('admin.applications.details.edit.action')}>\n          <form\n            className={styles['row']}\n            style={{alignItems: 'stretch', flexDirection: 'column'}}\n            onSubmit={handleSave}\n            noValidate\n          >\n            <ApplicationFormFields\n              preferences={preferences}\n              values={draft}\n              onInputChange={(field: ApplicationTextField, value: string): void =>\n                setDraft((previous: ApplicationFormValues | null) => previous && {...previous, [field]: value})\n              }\n              onGrantTypesChange={(grantTypes: string[]): void =>\n                setDraft((previous: ApplicationFormValues | null) => previous && {...previous, grantTypes})\n              }\n            />\n            <div className={styles['row']} style={{justifyContent: 'flex-end'}}>\n              <Button type=\"button\" variant=\"text\" disabled={isUpdating} onClick={(): void => setDraft(null)}>\n                {t('admin.common.actions.cancel')}\n              </Button>\n              <Button\n                type=\"submit\"\n                loading={isUpdating}\n                disabled={isUpdating || !isApplicationSubmissionValid(toSubmission(draft))}\n              >\n                {t('admin.applications.details.edit.save')}\n              </Button>\n            </div>\n          </form>\n        </Panel>\n      ) : (\n        <>\n          <Panel\n            title={t('admin.applications.details.overview')}\n            actions={\n              onUpdate && isWritable ? (\n                <Button\n                  variant=\"outline\"\n                  size=\"small\"\n                  onClick={(): void => setDraft(toFormValues(application, oauthConfig))}\n                >\n                  {t('admin.applications.details.edit.action')}\n                </Button>\n              ) : undefined\n            }\n          >\n            <DetailList items={overview} />\n          </Panel>\n          {oauthConfig && (\n            <Panel\n              title={t('admin.applications.details.oauth')}\n              actions={\n                onRegenerateSecret && canRegenerate && !clientSecret ? (\n                  <ConfirmButton\n                    confirmText={t('admin.applications.details.secret.confirm', {name: application.name})}\n                    isLoading={isRegeneratingSecret}\n                    onConfirm={onRegenerateSecret}\n                  >\n                    {t('admin.applications.details.secret.action')}\n                  </ConfirmButton>\n                ) : undefined\n              }\n            >\n              {clientSecret && (\n                <ClientSecretNotice secret={clientSecret} onDismiss={onSecretDismiss} preferences={preferences} />\n              )}\n              <DetailList\n                items={[\n                  {\n                    label: t('admin.applications.fields.grant_types'),\n                    value: (\n                      <ChipList\n                        label={t('admin.applications.fields.grant_types')}\n                        emptyText={t('admin.applications.details.no_grant_types')}\n                        items={(oauthConfig.grantTypes ?? []).map((grantType: string) => ({\n                          id: grantType,\n                          label: APPLICATION_GRANT_TYPES.includes(grantType)\n                            ? t(`admin.applications.grant_types.${grantType}`)\n                            : grantType,\n                        }))}\n                      />\n                    ),\n                  },\n                  {\n                    label: t('admin.applications.fields.redirect_uris'),\n                    value: (\n                      <ChipList\n                        label={t('admin.applications.fields.redirect_uris')}\n                        emptyText={t('admin.applications.details.no_redirect_uris')}\n                        items={(oauthConfig.redirectUris ?? []).map((uri: string) => ({id: uri, label: uri}))}\n                      />\n                    ),\n                  },\n                  {\n                    label: t('admin.applications.details.public_client'),\n                    value: oauthConfig.publicClient\n                      ? t('admin.applications.details.yes')\n                      : t('admin.applications.details.no'),\n                  },\n                ]}\n              />\n            </Panel>\n          )}\n        </>\n      )}\n    </AdminSection>\n  );\n};\n\nexport default BaseApplicationDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAmIA,MAAM,gBAAgB,aAA0B,WAAiD;CAC/F,aAAa,YAAY,eAAe;CACxC,YAAY,OAAO,cAAc,EAAE;CACnC,SAAS,YAAY,WAAW;CAChC,MAAM,YAAY;CAClB,cAAc,QAAQ,OAAO,aAAa;CAC1C,eAAe,OAAO,gBAAgB,EAAE,EAAE,KAAK,KAAK;CACpD,KAAK,YAAY,OAAO;CACzB;AAED,MAAM,gBAAgB,YAA0D;CAC9E,aAAa,OAAO,YAAY,MAAM,IAAI;CAC1C,YAAY,OAAO;CACnB,SAAS,OAAO,QAAQ,MAAM,IAAI;CAClC,MAAM,OAAO,KAAK,MAAM;CACxB,cAAc,OAAO;CACrB,yDAAgC,OAAO,aAAa;CACpD,KAAK,OAAO,IAAI,MAAM,IAAI;CAC3B;;;;;;AAOD,MAAMA,0BAA2D,EAC/D,SACA,aACA,UACA,WACA,eAAe,MACf,QAAQ,MACR,aAAa,OACb,YAAY,OACZ,uBAAuB,OACvB,2BAA2B,OAC3B,aAAa,OACb,mBAAmB,EAAE,EACrB,UACA,mBACA,oBACA,iBACA,UACA,kBAC+C;CAC/C,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,oCAAoB;CAC3D,MAAM,CAAC,OAAO,gCAAmD,KAAK;CAEtE,MAAMC,iEAAkE,YAAY;CACpF,MAAMC,aAAsB,QAAQ,YAAY,IAAI,CAAC,aAAa;CAClE,MAAMC,gBAAyB,cAAc,QAAQ,YAAY,IAAI,CAAC,aAAa;AAEnF,KAAI,UAAU;EACZ,IAAIC;AAEJ,MAAI,aAAa;GACf,MAAM,EAAC,cAAc,aAAc,GAAG,SAAsB;AAE5D,WAAQ;;AAGV,SACE,2CAAC;GAAe;aACb,SAAS;IACR;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,kBAAkB,qBAAqB,cAAc,mBAAmB,EAAE;IAC1E;IACA,UAAU,aAAa,WAAW;IAClC,mBAAmB,cAAc,oBAAoB;IACrD,oBAAoB,gBAAgB,qBAAqB;IACzD,iBAAiB,eAAe,kBAAkB;IAClD,UAAU,aAAa,WAAW;IACnC,CAAC;IACE;;AAIV,KAAI,aAAa,CAAC,YAChB,QACE,2CAACC;EAAa,OAAM;EAAiC;EAAwB;YAC3E,4CAAC;GAAK,WAAW,OAAO;GAAU,MAAK;;IACrC,2CAACC,2BAAQ,MAAK,UAAU;;IAAE,EAAE,uBAAuB;;IAC9C;GACM;AAInB,KAAI,CAAC,YACH,QACE,2CAACD;EAAa,OAAM;EAAiC;EAAwB;YAC3E,2CAACE;GAAM,SAAQ;GAAQ,MAAK;aACzB,SAAS,EAAE,gCAAgC;IACtC;GACK;CAInB,MAAMC,SAAiB,EAAE,qCAAqC;CAC9D,MAAMC,WAA6B;EACjC;GACE,OAAO,EAAE,4CAA4C;GACrD,OAAO,aAAa,WAAW,2CAACC,gCAAa,OAAO,YAAY,WAAY,GAAG;GAChF;EACD;GAAC,OAAO,EAAE,kCAAkC;GAAE,OAAO,YAAY,QAAQ,YAAY,YAAY;GAAO;EACxG;GAAC,OAAO,EAAE,yCAAyC;GAAE,OAAO,YAAY,QAAQ;GAAO;EACvF;GAAC,OAAO,EAAE,gCAAgC;GAAE,OAAO,YAAY,OAAO;GAAO;EAC7E;GAAC,OAAO,EAAE,qCAAqC;GAAE,OAAO,YAAY,WAAW;GAAO;EACvF;AAED,KAAI,YAAY,QAAQ,MACtB,UAAS,KAAK;EACZ,OAAO,EAAE,8BAA8B;EACvC,OAAO,2CAACC,mDAAkB,QAAQ,YAAY,OAAO,QAAS;EAC/D,CAAC;CAGJ,MAAM,cAAc,UAA4C;AAC9D,QAAM,gBAAgB;AAEtB,MAAI,CAAC,MACH;EAGF,MAAM,EAAC,aAAc,GAAG,eAAqC,aAAa,MAAM;AAEhF,aAAW,WAAW;AACtB,WAAS,KAAK;;AAGhB,QACE,4CAACN;EACC,OAAM;EACK;EACX,OAAO,YAAY;EACnB,aAAa,YAAY;EACZ;EACb,SACE;GACG;GACA,qBACC,2CAACO;IACC,SAAS;IACT,WAAW;IACX,MAAM,YAAY;IAClB,UAAU;KACV;GAEH,YAAY,cACX,2CAACC;IACC,aAAa,EAAE,6CAA6C,EAAC,MAAM,YAAY,MAAK,CAAC;IACrF,WAAW;IACX,WAAW;cAEV,EAAE,2CAA2C;KAChC;MAEjB;aAGJ,SACC,2CAACN;GAAM,SAAQ;GAAQ,MAAK;aACzB;IACK,EAET,QACC,2CAACO;GAAM,OAAO,EAAE,yCAAyC;aACvD,4CAAC;IACC,WAAW,OAAO;IAClB,OAAO;KAAC,YAAY;KAAW,eAAe;KAAS;IACvD,UAAU;IACV;eAEA,2CAACC;KACc;KACb,QAAQ;KACR,gBAAgB,OAA6B,UAC3C,UAAU,aAA2C,YAAY;MAAC,GAAG;OAAW,QAAQ;MAAM,CAAC;KAEjG,qBAAqB,eACnB,UAAU,aAA2C,YAAY;MAAC,GAAG;MAAU;MAAW,CAAC;MAE7F,EACF,4CAAC;KAAI,WAAW,OAAO;KAAQ,OAAO,EAAC,gBAAgB,YAAW;gBAChE,2CAACC;MAAO,MAAK;MAAS,SAAQ;MAAO,UAAU;MAAY,eAAqB,SAAS,KAAK;gBAC3F,EAAE,8BAA8B;OAC1B,EACT,2CAACA;MACC,MAAK;MACL,SAAS;MACT,UAAU,cAAc,uDAA8B,aAAa,MAAM,CAAC;gBAEzE,EAAE,uCAAuC;OACnC;MACL;KACD;IACD,GAER,qFACE,2CAACF;GACC,OAAO,EAAE,sCAAsC;GAC/C,SACE,YAAY,aACV,2CAACE;IACC,SAAQ;IACR,MAAK;IACL,eAAqB,SAAS,aAAa,aAAa,YAAY,CAAC;cAEpE,EAAE,yCAAyC;KACrC,GACP;aAGN,2CAACC,iCAAW,OAAO,WAAY;IACzB,EACP,eACC,4CAACH;GACC,OAAO,EAAE,mCAAmC;GAC5C,SACE,sBAAsB,iBAAiB,CAAC,eACtC,2CAACD;IACC,aAAa,EAAE,6CAA6C,EAAC,MAAM,YAAY,MAAK,CAAC;IACrF,WAAW;IACX,WAAW;cAEV,EAAE,2CAA2C;KAChC,GACd;cAGL,gBACC,2CAACK;IAAmB,QAAQ;IAAc,WAAW;IAA8B;KAAe,EAEpG,2CAACD,iCACC,OAAO;IACL;KACE,OAAO,EAAE,wCAAwC;KACjD,OACE,2CAACE;MACC,OAAO,EAAE,wCAAwC;MACjD,WAAW,EAAE,4CAA4C;MACzD,QAAQ,YAAY,cAAc,EAAE,EAAE,KAAK,eAAuB;OAChE,IAAI;OACJ,OAAOC,4CAAwB,SAAS,UAAU,GAC9C,EAAE,kCAAkC,YAAY,GAChD;OACL,EAAE;OACH;KAEL;IACD;KACE,OAAO,EAAE,0CAA0C;KACnD,OACE,2CAACD;MACC,OAAO,EAAE,0CAA0C;MACnD,WAAW,EAAE,8CAA8C;MAC3D,QAAQ,YAAY,gBAAgB,EAAE,EAAE,KAAK,SAAiB;OAAC,IAAI;OAAK,OAAO;OAAI,EAAE;OACrF;KAEL;IACD;KACE,OAAO,EAAE,2CAA2C;KACpD,OAAO,YAAY,eACf,EAAE,iCAAiC,GACnC,EAAE,gCAAgC;KACvC;IACF,GACD;IACI,IAET;GAEQ;;AAInB,qCAAe"}

package/dist/cjs/components/admin/GroupMembers/GroupMembers.cjs

@@ -29,7 +29,7 @@ const getMembershipInvalidatedKeys = ({ groupId }) => [
 * <GroupMembers groupId={groupId} />
 * ```
 */
-const GroupMembers = ({ editable = false, groupId, preferences,...rest }) => {
+const GroupMembers = ({ administrationMode, editable = false, groupId, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const groupsEndpoint = require_useManagementEndpoint.default("groups");
 	const usersEndpoint = require_useManagementEndpoint.default("users");
@@ -62,6 +62,7 @@ const GroupMembers = ({ editable = false, groupId, preferences,...rest }) => {
 	}), getMembershipInvalidatedKeys);
 	const remove = require_useResourceMutation.default(({ groupId: id, members: changes }, fetcher) => (0, __thunderid_browser.removeGroupMembers)({
 		...groupsEndpoint,
+		administrationMode,
 		fetcher,
 		groupId: id,
 		members: changes

package/dist/cjs/components/admin/GroupMembers/GroupMembers.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"GroupMembers.cjs","names":["GroupQueryKeys","RoleQueryKeys","GroupMembers: FC<GroupMembersProps>","useTranslation","groupsEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","members: ResourceQueryResult<GroupMemberListResponse>","useResourceQuery","users: ResourceQueryResult<ManagedUserListResponse>","UserQueryKeys","agents: ResourceQueryResult<AgentListResponse>","AgentQueryKeys","add: ResourceMutationResult<Group, GroupMembersVariables>","useResourceMutation","remove: ResourceMutationResult<Group, GroupMembersVariables>","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupMember,\n  GroupMemberListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  ResourceQueryKey,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addGroupMembers,\n  getAgents,\n  getGroupMembers,\n  getUsers,\n  removeGroupMembers,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface GroupMembersVariables {\n  groupId: string;\n  members: Pick<GroupMember, 'id' | 'type'>[];\n}\n\n/**\n * Query keys to refetch after a group's membership changes.\n */\nconst getMembershipInvalidatedKeys = ({groupId}: GroupMembersVariables): ResourceQueryKey[] => [\n  [GroupQueryKeys.GROUP, groupId],\n  [GroupQueryKeys.GROUP_MEMBERS, groupId],\n  [GroupQueryKeys.MEMBERSHIPS],\n  [RoleQueryKeys.ROLE_ASSIGNMENTS],\n];\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  editable = false,\n  groupId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const members: ResourceQueryResult<GroupMemberListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUP_MEMBERS, groupId, {limit: 100}],\n    (fetcher) => getGroupMembers({...groupsEndpoint, fetcher, groupId, limit: 100}),\n    {enabled: Boolean(groupId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const add: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      addGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n  const remove: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      removeGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, users.data],\n  );\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;AAwCA,MAAM,gCAAgC,EAAC,cAAwD;CAC7F,CAACA,mCAAe,OAAO,QAAQ;CAC/B,CAACA,mCAAe,eAAe,QAAQ;CACvC,CAACA,mCAAe,YAAY;CAC5B,CAACC,kCAAc,iBAAiB;CACjC;;;;;;;;;AAsBD,MAAMC,gBAAuC,EAC3C,WAAW,OACX,SACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,iBAAqCC,sCAAsB,SAAS;CAC1E,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,UAAwDC,iCAC5D;EAACT,mCAAe;EAAe;EAAS,EAAC,OAAO,KAAI;EAAC,GACpD,qDAA4B;EAAC,GAAG;EAAgB;EAAS;EAAS,OAAO;EAAI,CAAC,EAC/E,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMU,QAAsDD,iCAC1D,CAACE,kCAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,8CAAqB;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDH,iCACrD,CAACI,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,MAA4DC,qCAC/D,EAAC,SAAS,IAAI,SAAS,WAAiC,qDACvC;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EAC9E,6BACD;CACD,MAAMC,SAA+DD,qCAClE,EAAC,SAAS,IAAI,SAAS,WAAiC,wDACpC;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EACjF,6BACD;CAED,MAAME,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD,CAAC,OAAO,MAAM,MAAM,KAAK,CAC1B;AAED,QACE,2CAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,yDAC2B,GAAG,QAAQ,OAAO,6BAA6B,sDAC/C,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}
+{"version":3,"file":"GroupMembers.cjs","names":["GroupQueryKeys","RoleQueryKeys","GroupMembers: FC<GroupMembersProps>","useTranslation","groupsEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","members: ResourceQueryResult<GroupMemberListResponse>","useResourceQuery","users: ResourceQueryResult<ManagedUserListResponse>","UserQueryKeys","agents: ResourceQueryResult<AgentListResponse>","AgentQueryKeys","add: ResourceMutationResult<Group, GroupMembersVariables>","useResourceMutation","remove: ResourceMutationResult<Group, GroupMembersVariables>","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupMember,\n  GroupMemberListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  ResourceQueryKey,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addGroupMembers,\n  getAgents,\n  getGroupMembers,\n  getUsers,\n  removeGroupMembers,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface GroupMembersVariables {\n  groupId: string;\n  members: Pick<GroupMember, 'id' | 'type'>[];\n}\n\n/**\n * Query keys to refetch after a group's membership changes.\n */\nconst getMembershipInvalidatedKeys = ({groupId}: GroupMembersVariables): ResourceQueryKey[] => [\n  [GroupQueryKeys.GROUP, groupId],\n  [GroupQueryKeys.GROUP_MEMBERS, groupId],\n  [GroupQueryKeys.MEMBERSHIPS],\n  [RoleQueryKeys.ROLE_ASSIGNMENTS],\n];\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * How a member is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  administrationMode,\n  editable = false,\n  groupId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const members: ResourceQueryResult<GroupMemberListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUP_MEMBERS, groupId, {limit: 100}],\n    (fetcher) => getGroupMembers({...groupsEndpoint, fetcher, groupId, limit: 100}),\n    {enabled: Boolean(groupId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const add: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      addGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n  const remove: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      removeGroupMembers({...groupsEndpoint, administrationMode, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, users.data],\n  );\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;AAyCA,MAAM,gCAAgC,EAAC,cAAwD;CAC7F,CAACA,mCAAe,OAAO,QAAQ;CAC/B,CAACA,mCAAe,eAAe,QAAQ;CACvC,CAACA,mCAAe,YAAY;CAC5B,CAACC,kCAAc,iBAAiB;CACjC;;;;;;;;;AA4BD,MAAMC,gBAAuC,EAC3C,oBACA,WAAW,OACX,SACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,iBAAqCC,sCAAsB,SAAS;CAC1E,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,UAAwDC,iCAC5D;EAACT,mCAAe;EAAe;EAAS,EAAC,OAAO,KAAI;EAAC,GACpD,qDAA4B;EAAC,GAAG;EAAgB;EAAS;EAAS,OAAO;EAAI,CAAC,EAC/E,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMU,QAAsDD,iCAC1D,CAACE,kCAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,8CAAqB;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDH,iCACrD,CAACI,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,MAA4DC,qCAC/D,EAAC,SAAS,IAAI,SAAS,WAAiC,qDACvC;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EAC9E,6BACD;CACD,MAAMC,SAA+DD,qCAClE,EAAC,SAAS,IAAI,SAAS,WAAiC,wDACpC;EAAC,GAAG;EAAgB;EAAoB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EACrG,6BACD;CAED,MAAME,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD,CAAC,OAAO,MAAM,MAAM,KAAK,CAC1B;AAED,QACE,2CAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,yDAC2B,GAAG,QAAQ,OAAO,6BAA6B,sDAC/C,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}

package/dist/cjs/components/admin/RoleAssignments/RoleAssignments.cjs

@@ -21,7 +21,7 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 * <RoleAssignments roleId={roleId} />
 * ```
 */
-const RoleAssignments = ({ editable = false, filterable = true, preferences, roleId,...rest }) => {
+const RoleAssignments = ({ administrationMode, editable = false, filterable = true, preferences, roleId,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const [typeFilter, setTypeFilter] = (0, react.useState)(null);
 	const rolesEndpoint = require_useManagementEndpoint.default("roles");
@@ -66,6 +66,7 @@ const RoleAssignments = ({ editable = false, filterable = true, preferences, rol
 	}), () => [[__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS]]);
 	const unassign = require_useResourceMutation.default(({ assignments: changes, roleId: id }, fetcher) => (0, __thunderid_browser.removeRoleAssignments)({
 		...rolesEndpoint,
+		administrationMode,
 		assignments: changes,
 		fetcher,
 		roleId: id

package/dist/cjs/components/admin/RoleAssignments/RoleAssignments.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"RoleAssignments.cjs","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","rolesEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","groupsEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","type: RoleAssigneeType | undefined","assignments: ResourceQueryResult<RoleAssignmentListResponse>","useResourceQuery","RoleQueryKeys","users: ResourceQueryResult<ManagedUserListResponse>","UserQueryKeys","groups: ResourceQueryResult<GroupListResponse>","GroupQueryKeys","agents: ResourceQueryResult<AgentListResponse>","AgentQueryKeys","assign: ResourceMutationResult<void, RoleAssignmentsVariables>","useResourceMutation","unassign: ResourceMutationResult<void, RoleAssignmentsVariables>","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n  RoleAssignmentListResponse,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addRoleAssignments,\n  getAgents,\n  getGroups,\n  getRoleAssignments,\n  getUsers,\n  removeRoleAssignments,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface RoleAssignmentsVariables {\n  assignments: RoleAssignmentInput[];\n  roleId: string;\n}\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  editable = false,\n  filterable = true,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const rolesEndpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const type: RoleAssigneeType | undefined = typeFilter ?? undefined;\n  const assignments: ResourceQueryResult<RoleAssignmentListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, roleId, {limit: 100, type}],\n    (fetcher) => getRoleAssignments({...rolesEndpoint, fetcher, limit: 100, roleId, type}),\n    {enabled: Boolean(roleId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const groups: ResourceQueryResult<GroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUPS, {limit: 100}],\n    (fetcher) => getGroups({...groupsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const assign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      addRoleAssignments({...rolesEndpoint, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n  const unassign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      removeRoleAssignments({...rolesEndpoint, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      group: (groups.data?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, groups.data, users.data],\n  );\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA0EA,MAAMA,mBAA6C,EACjD,WAAW,OACX,aAAa,MACb,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,qCAAmD,KAAK;CAC3E,MAAMC,gBAAoCC,sCAAsB,QAAQ;CACxE,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,iBAAqCH,sCAAsB,SAAS;CAC1E,MAAMI,OAAqC,cAAc;CACzD,MAAMC,cAA+DC,iCACnE;EAACC,kCAAc;EAAkB;EAAQ;GAAC,OAAO;GAAK;GAAK;EAAC,GAC3D,wDAA+B;EAAC,GAAG;EAAe;EAAS,OAAO;EAAK;EAAQ;EAAK,CAAC,EACtF,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,QAAsDF,iCAC1D,CAACG,kCAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,8CAAqB;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDJ,iCACrD,CAACK,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDN,iCACrD,CAACO,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiEC,qCACpE,EAAC,aAAa,SAAS,QAAQ,MAA+B,wDAC1C;EAAC,GAAG;EAAe,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QAC7E,CAAC,CAACR,kCAAc,iBAAiB,CAAC,CACzC;CACD,MAAMS,WAAmED,qCACtE,EAAC,aAAa,SAAS,QAAQ,MAA+B,2DACvC;EAAC,GAAG;EAAe,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QAChF,CAAC,CAACR,kCAAc,iBAAiB,CAAC,CACzC;CAED,MAAMU,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAkB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAC7F,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD;EAAC,OAAO;EAAM,OAAO;EAAM,MAAM;EAAK,CACvC;AAED,QACE,2CAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,yDAC2B,GAAG,YAAY,OAAO,gCAAgC,sDACtD,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}
+{"version":3,"file":"RoleAssignments.cjs","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","rolesEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","groupsEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","type: RoleAssigneeType | undefined","assignments: ResourceQueryResult<RoleAssignmentListResponse>","useResourceQuery","RoleQueryKeys","users: ResourceQueryResult<ManagedUserListResponse>","UserQueryKeys","groups: ResourceQueryResult<GroupListResponse>","GroupQueryKeys","agents: ResourceQueryResult<AgentListResponse>","AgentQueryKeys","assign: ResourceMutationResult<void, RoleAssignmentsVariables>","useResourceMutation","unassign: ResourceMutationResult<void, RoleAssignmentsVariables>","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n  RoleAssignmentListResponse,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addRoleAssignments,\n  getAgents,\n  getGroups,\n  getRoleAssignments,\n  getUsers,\n  removeRoleAssignments,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface RoleAssignmentsVariables {\n  assignments: RoleAssignmentInput[];\n  roleId: string;\n}\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * How an assignment is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  administrationMode,\n  editable = false,\n  filterable = true,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const rolesEndpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const type: RoleAssigneeType | undefined = typeFilter ?? undefined;\n  const assignments: ResourceQueryResult<RoleAssignmentListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, roleId, {limit: 100, type}],\n    (fetcher) => getRoleAssignments({...rolesEndpoint, fetcher, limit: 100, roleId, type}),\n    {enabled: Boolean(roleId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const groups: ResourceQueryResult<GroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUPS, {limit: 100}],\n    (fetcher) => getGroups({...groupsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const assign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      addRoleAssignments({...rolesEndpoint, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n  const unassign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      removeRoleAssignments({...rolesEndpoint, administrationMode, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: agent.name})),\n      group: (groups.data?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, groups.data, users.data],\n  );\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiFA,MAAMA,mBAA6C,EACjD,oBACA,WAAW,OACX,aAAa,MACb,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,qCAAmD,KAAK;CAC3E,MAAMC,gBAAoCC,sCAAsB,QAAQ;CACxE,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,iBAAqCH,sCAAsB,SAAS;CAC1E,MAAMI,OAAqC,cAAc;CACzD,MAAMC,cAA+DC,iCACnE;EAACC,kCAAc;EAAkB;EAAQ;GAAC,OAAO;GAAK;GAAK;EAAC,GAC3D,wDAA+B;EAAC,GAAG;EAAe;EAAS,OAAO;EAAK;EAAQ;EAAK,CAAC,EACtF,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,QAAsDF,iCAC1D,CAACG,kCAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,8CAAqB;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDJ,iCACrD,CAACK,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDN,iCACrD,CAACO,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiEC,qCACpE,EAAC,aAAa,SAAS,QAAQ,MAA+B,wDAC1C;EAAC,GAAG;EAAe,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QAC7E,CAAC,CAACR,kCAAc,iBAAiB,CAAC,CACzC;CACD,MAAMS,WAAmED,qCACtE,EAAC,aAAa,SAAS,QAAQ,MAA+B,2DACvC;EAAC,GAAG;EAAe;EAAoB,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QACpG,CAAC,CAACR,kCAAc,iBAAiB,CAAC,CACzC;CAED,MAAMU,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAClG,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAkB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAC7F,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD;EAAC,OAAO;EAAM,OAAO;EAAM,MAAM;EAAK,CACvC;AAED,QACE,2CAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,yDAC2B,GAAG,YAAY,OAAO,gCAAgC,sDACtD,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}