@thunderid/react 1.8.0 → 1.9.0

package/dist/cjs/components/admin/UserDetails/BaseUserDetails.cjs

@@ -7,6 +7,7 @@ const require_TextField = require('../../primitives/TextField/TextField.cjs');
 const require_Avatar = require('../../primitives/Avatar/Avatar.cjs');
 const require_useAdminPartStyles = require('../shared/useAdminPartStyles.cjs');
 const require_AdminSection = require('../shared/AdminSection.cjs');
+const require_AccountLifecycleParts = require('../shared/AccountLifecycleParts.cjs');
 const require_AdminParts = require('../shared/AdminParts.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
@@ -24,7 +25,7 @@ const stringify = (value) => {
 * Shows a user's attributes, type, organization unit and groups. Holds no data of its own: pass the
 * user and handle deletion.
 */
-const BaseUserDetails = ({ actions, children, className, error = null, groups = [], hiddenAttributes = ["password"], isDeleting = false, isLoading = false, isUpdating = false, onDelete, onUpdate, preferences, user }) => {
+const BaseUserDetails = ({ actions, children, className, error = null, groups = [], hiddenAttributes = ["password"], isDeleting = false, isLoading = false, isRunningLifecycleAction = false, isUpdating = false, lifecycleActions = [], onDelete, onLifecycleAction, onUpdate, preferences, user }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const styles = require_useAdminPartStyles.default();
 	const [draft, setDraft] = (0, react.useState)(null);
@@ -39,8 +40,11 @@ const BaseUserDetails = ({ actions, children, className, error = null, groups =
 				groups,
 				isDeleting,
 				isLoading,
+				isRunningLifecycleAction,
 				isUpdating,
+				lifecycleActions: onLifecycleAction && user ? lifecycleActions : [],
 				onDelete: isWritable ? onDelete : void 0,
+				onLifecycleAction: user ? onLifecycleAction : void 0,
 				onUpdate: isWritable ? onUpdate : void 0,
 				user
 			})
@@ -79,12 +83,22 @@ const BaseUserDetails = ({ actions, children, className, error = null, groups =
 		title: displayName,
 		description: t("admin.users.details.subtitle", { type: user.type }),
 		preferences,
-		actions: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [actions, onDelete && !user.isReadOnly && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ConfirmButton, {
-			confirmText: t("admin.users.details.delete.confirm", { name: displayName }),
-			isLoading: isDeleting,
-			onConfirm: onDelete,
-			children: t("admin.users.details.delete.action")
-		})] }),
+		actions: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+			actions,
+			onLifecycleAction && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AccountLifecycleParts.AccountLifecycleButtons, {
+				actions: lifecycleActions,
+				collectsOperatorNote: true,
+				isRunning: isRunningLifecycleAction,
+				name: displayName,
+				onAction: onLifecycleAction
+			}),
+			onDelete && !user.isReadOnly && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.ConfirmButton, {
+				confirmText: t("admin.users.details.delete.confirm", { name: displayName }),
+				isLoading: isDeleting,
+				onConfirm: onDelete,
+				children: t("admin.users.details.delete.action")
+			})
+		] }),
 		children: [
 			error && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Alert.default, {
 				variant: "error",
@@ -93,13 +107,17 @@ const BaseUserDetails = ({ actions, children, className, error = null, groups =
 			}),
 			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: styles["row"],
-				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Avatar.Avatar, {
-					name: displayName,
-					size: 48
-				}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-					className: styles["muted"],
-					children: user.ouHandle ?? user.ouId
-				})]
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Avatar.Avatar, {
+						name: displayName,
+						size: 48
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						className: styles["muted"],
+						children: user.ouHandle ?? user.ouId
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AccountLifecycleParts.AccessStatusBadge, { status: user.status?.value })
+				]
 			}),
 			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_AdminParts.Panel, {
 				title: t("admin.users.details.attributes"),

package/dist/cjs/components/admin/UserDetails/BaseUserDetails.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"BaseUserDetails.cjs","names":["BaseUserDetails: FC<BaseUserDetailsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","isWritable: boolean","AdminSection","Spinner","Alert","displayName: string","attributes: [string, unknown][]","editableAttributes: [string, string][]","ConfirmButton","Avatar","Panel","Button","TextField","DetailList","ChipList"],"sources":["../../../../../src/components/admin/UserDetails/BaseUserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {resolveManagedIdentityName, ManagedUser, MembershipGroup, Preferences} from '@thunderid/browser';\nimport {ChangeEvent, FC, ReactElement, ReactNode, useState} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport {Avatar} from '../../primitives/Avatar/Avatar';\nimport Button from '../../primitives/Button/Button';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport TextField from '../../primitives/TextField/TextField';\nimport {ChipList, ConfirmButton, DetailList, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * What {@link BaseUserDetails} hands its `children` render function, so the user can be shown with any UI.\n */\nexport interface BaseUserDetailsRenderProps {\n  /**\n   * The user's attributes, without the hidden ones.\n   */\n  attributes: Record<string, unknown>;\n  /**\n   * The user's display name, or an empty string while there is no user.\n   */\n  displayName: string;\n  error: string | null;\n  groups: MembershipGroup[];\n  isDeleting: boolean;\n  isLoading: boolean;\n  isUpdating: boolean;\n  /**\n   * Deletes the user. Undefined when deletion is not allowed, including for read-only users.\n   */\n  onDelete?: () => void;\n  /**\n   * Saves the given attributes. Undefined when editing is not allowed, including for read-only users.\n   */\n  onUpdate?: (attributes: Record<string, unknown>) => void;\n  user?: ManagedUser;\n}\n\nexport interface BaseUserDetailsProps {\n  /**\n   * Controls rendered next to the user's name.\n   */\n  actions?: ReactNode;\n  /**\n   * Renders custom UI in place of the default view. Receives the user, their visible attributes and\n   * groups, the loading and error state, and the delete and update handlers.\n   */\n  children?: (props: BaseUserDetailsRenderProps) => ReactNode;\n  className?: string;\n  error?: string | null;\n  /**\n   * The groups the user belongs to.\n   */\n  groups?: MembershipGroup[];\n  /**\n   * Attribute names that are never shown, such as credentials.\n   * @default ['password']\n   */\n  hiddenAttributes?: string[];\n  isDeleting?: boolean;\n  isLoading?: boolean;\n  isUpdating?: boolean;\n  /**\n   * Deletes the user. The delete action is hidden when omitted.\n   */\n  onDelete?: () => void;\n  /**\n   * Saves edited attributes. Text attributes become editable only when set. Receives every\n   * attribute, edited or not.\n   */\n  onUpdate?: (attributes: Record<string, unknown>) => void;\n  preferences?: Preferences;\n  user?: ManagedUser;\n}\n\nconst stringify = (value: unknown): string => {\n  if (value === null || value === undefined) {\n    return '';\n  }\n\n  return typeof value === 'object' ? JSON.stringify(value) : String(value as string | number | boolean);\n};\n\n/**\n * Shows a user's attributes, type, organization unit and groups. Holds no data of its own: pass the\n * user and handle deletion.\n */\nconst BaseUserDetails: FC<BaseUserDetailsProps> = ({\n  actions,\n  children,\n  className,\n  error = null,\n  groups = [],\n  hiddenAttributes = ['password'],\n  isDeleting = false,\n  isLoading = false,\n  isUpdating = false,\n  onDelete,\n  onUpdate,\n  preferences,\n  user,\n}: BaseUserDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n  const [draft, setDraft] = useState<Record<string, string> | null>(null);\n\n  if (children) {\n    const isWritable: boolean = Boolean(user) && !user?.isReadOnly;\n\n    return (\n      <div className={className}>\n        {children({\n          attributes: Object.fromEntries(\n            Object.entries(user?.attributes ?? {}).filter(\n              ([name]: [string, unknown]) => !hiddenAttributes.includes(name),\n            ),\n          ),\n          displayName: user ? resolveManagedIdentityName(user) : '',\n          error,\n          groups,\n          isDeleting,\n          isLoading,\n          isUpdating,\n          onDelete: isWritable ? onDelete : undefined,\n          onUpdate: isWritable ? onUpdate : undefined,\n          user,\n        })}\n      </div>\n    );\n  }\n\n  if (isLoading && !user) {\n    return (\n      <AdminSection block=\"user-details\" className={className} preferences={preferences}>\n        <span className={styles['muted']} role=\"status\">\n          <Spinner size=\"small\" /> {t('admin.common.loading')}\n        </span>\n      </AdminSection>\n    );\n  }\n\n  if (!user) {\n    return (\n      <AdminSection block=\"user-details\" className={className} preferences={preferences}>\n        <Alert variant=\"error\" role=\"alert\">\n          {error ?? t('admin.common.errors.not_found')}\n        </Alert>\n      </AdminSection>\n    );\n  }\n\n  const displayName: string = resolveManagedIdentityName(user);\n  const attributes: [string, unknown][] = Object.entries(user.attributes ?? {}).filter(\n    ([name]: [string, unknown]) => !hiddenAttributes.includes(name),\n  );\n  const editableAttributes: [string, string][] = attributes.filter(\n    (entry: [string, unknown]): entry is [string, string] => typeof entry[1] === 'string',\n  );\n\n  return (\n    <AdminSection\n      block=\"user-details\"\n      className={className}\n      title={displayName}\n      description={t('admin.users.details.subtitle', {type: user.type})}\n      preferences={preferences}\n      actions={\n        <>\n          {actions}\n          {onDelete && !user.isReadOnly && (\n            <ConfirmButton\n              confirmText={t('admin.users.details.delete.confirm', {name: displayName})}\n              isLoading={isDeleting}\n              onConfirm={onDelete}\n            >\n              {t('admin.users.details.delete.action')}\n            </ConfirmButton>\n          )}\n        </>\n      }\n    >\n      {error && (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      )}\n      <div className={styles['row']}>\n        <Avatar name={displayName} size={48} />\n        <span className={styles['muted']}>{user.ouHandle ?? user.ouId}</span>\n      </div>\n      <Panel\n        title={t('admin.users.details.attributes')}\n        actions={\n          onUpdate && !user.isReadOnly && !draft && editableAttributes.length > 0 ? (\n            <Button\n              variant=\"outline\"\n              size=\"small\"\n              onClick={(): void => setDraft(Object.fromEntries(editableAttributes))}\n            >\n              {t('admin.users.details.edit.action')}\n            </Button>\n          ) : undefined\n        }\n      >\n        {draft ? (\n          <form\n            className={styles['row']}\n            style={{alignItems: 'stretch', flexDirection: 'column'}}\n            onSubmit={(event): void => {\n              event.preventDefault();\n              onUpdate?.({...(user.attributes ?? {}), ...draft});\n              setDraft(null);\n            }}\n          >\n            {Object.keys(draft).map((name: string) => (\n              <TextField\n                key={name}\n                name={name}\n                label={name}\n                aria-label={name}\n                value={draft[name]}\n                onChange={(event: ChangeEvent<HTMLInputElement>): void =>\n                  setDraft((previous: Record<string, string> | null) => ({...previous, [name]: event.target.value}))\n                }\n              />\n            ))}\n            <div className={styles['row']} style={{justifyContent: 'flex-end'}}>\n              <Button type=\"button\" variant=\"text\" disabled={isUpdating} onClick={(): void => setDraft(null)}>\n                {t('admin.common.actions.cancel')}\n              </Button>\n              <Button type=\"submit\" loading={isUpdating} disabled={isUpdating}>\n                {t('admin.users.details.edit.save')}\n              </Button>\n            </div>\n          </form>\n        ) : attributes.length > 0 ? (\n          <DetailList\n            items={attributes.map(([name, value]: [string, unknown]) => ({label: name, value: stringify(value)}))}\n          />\n        ) : (\n          <span className={styles['muted']}>{t('admin.users.details.no_attributes')}</span>\n        )}\n      </Panel>\n      <Panel title={t('admin.users.details.groups')}>\n        <ChipList\n          label={t('admin.users.details.groups')}\n          emptyText={t('admin.users.details.no_groups')}\n          items={groups.map((group: MembershipGroup) => ({id: group.id, label: group.name}))}\n        />\n      </Panel>\n    </AdminSection>\n  );\n};\n\nexport default BaseUserDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAgFA,MAAM,aAAa,UAA2B;AAC5C,KAAI,UAAU,QAAQ,UAAU,OAC9B,QAAO;AAGT,QAAO,OAAO,UAAU,WAAW,KAAK,UAAU,MAAM,GAAG,OAAO,MAAmC;;;;;;AAOvG,MAAMA,mBAA6C,EACjD,SACA,UACA,WACA,QAAQ,MACR,SAAS,EAAE,EACX,mBAAmB,CAAC,WAAW,EAC/B,aAAa,OACb,YAAY,OACZ,aAAa,OACb,UACA,UACA,aACA,WACwC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,oCAAoB;CAC3D,MAAM,CAAC,OAAO,gCAAoD,KAAK;AAEvE,KAAI,UAAU;EACZ,MAAMC,aAAsB,QAAQ,KAAK,IAAI,CAAC,MAAM;AAEpD,SACE,2CAAC;GAAe;aACb,SAAS;IACR,YAAY,OAAO,YACjB,OAAO,QAAQ,MAAM,cAAc,EAAE,CAAC,CAAC,QACpC,CAAC,UAA6B,CAAC,iBAAiB,SAAS,KAAK,CAChE,CACF;IACD,aAAa,2DAAkC,KAAK,GAAG;IACvD;IACA;IACA;IACA;IACA;IACA,UAAU,aAAa,WAAW;IAClC,UAAU,aAAa,WAAW;IAClC;IACD,CAAC;IACE;;AAIV,KAAI,aAAa,CAAC,KAChB,QACE,2CAACC;EAAa,OAAM;EAA0B;EAAwB;YACpE,4CAAC;GAAK,WAAW,OAAO;GAAU,MAAK;;IACrC,2CAACC,2BAAQ,MAAK,UAAU;;IAAE,EAAE,uBAAuB;;IAC9C;GACM;AAInB,KAAI,CAAC,KACH,QACE,2CAACD;EAAa,OAAM;EAA0B;EAAwB;YACpE,2CAACE;GAAM,SAAQ;GAAQ,MAAK;aACzB,SAAS,EAAE,gCAAgC;IACtC;GACK;CAInB,MAAMC,kEAAiD,KAAK;CAC5D,MAAMC,aAAkC,OAAO,QAAQ,KAAK,cAAc,EAAE,CAAC,CAAC,QAC3E,CAAC,UAA6B,CAAC,iBAAiB,SAAS,KAAK,CAChE;CACD,MAAMC,qBAAyC,WAAW,QACvD,UAAwD,OAAO,MAAM,OAAO,SAC9E;AAED,QACE,4CAACL;EACC,OAAM;EACK;EACX,OAAO;EACP,aAAa,EAAE,gCAAgC,EAAC,MAAM,KAAK,MAAK,CAAC;EACpD;EACb,SACE,qFACG,SACA,YAAY,CAAC,KAAK,cACjB,2CAACM;GACC,aAAa,EAAE,sCAAsC,EAAC,MAAM,aAAY,CAAC;GACzE,WAAW;GACX,WAAW;aAEV,EAAE,oCAAoC;IACzB,IAEjB;;GAGJ,SACC,2CAACJ;IAAM,SAAQ;IAAQ,MAAK;cACzB;KACK;GAEV,4CAAC;IAAI,WAAW,OAAO;eACrB,2CAACK;KAAO,MAAM;KAAa,MAAM;MAAM,EACvC,2CAAC;KAAK,WAAW,OAAO;eAAW,KAAK,YAAY,KAAK;MAAY;KACjE;GACN,2CAACC;IACC,OAAO,EAAE,iCAAiC;IAC1C,SACE,YAAY,CAAC,KAAK,cAAc,CAAC,SAAS,mBAAmB,SAAS,IACpE,2CAACC;KACC,SAAQ;KACR,MAAK;KACL,eAAqB,SAAS,OAAO,YAAY,mBAAmB,CAAC;eAEpE,EAAE,kCAAkC;MAC9B,GACP;cAGL,QACC,4CAAC;KACC,WAAW,OAAO;KAClB,OAAO;MAAC,YAAY;MAAW,eAAe;MAAS;KACvD,WAAW,UAAgB;AACzB,YAAM,gBAAgB;AACtB,iBAAW;OAAC,GAAI,KAAK,cAAc,EAAE;OAAG,GAAG;OAAM,CAAC;AAClD,eAAS,KAAK;;gBAGf,OAAO,KAAK,MAAM,CAAC,KAAK,SACvB,2CAACC;MAEO;MACN,OAAO;MACP,cAAY;MACZ,OAAO,MAAM;MACb,WAAW,UACT,UAAU,cAA6C;OAAC,GAAG;QAAW,OAAO,MAAM,OAAO;OAAM,EAAE;QAN/F,KAQL,CACF,EACF,4CAAC;MAAI,WAAW,OAAO;MAAQ,OAAO,EAAC,gBAAgB,YAAW;iBAChE,2CAACD;OAAO,MAAK;OAAS,SAAQ;OAAO,UAAU;OAAY,eAAqB,SAAS,KAAK;iBAC3F,EAAE,8BAA8B;QAC1B,EACT,2CAACA;OAAO,MAAK;OAAS,SAAS;OAAY,UAAU;iBAClD,EAAE,gCAAgC;QAC5B;OACL;MACD,GACL,WAAW,SAAS,IACtB,2CAACE,iCACC,OAAO,WAAW,KAAK,CAAC,MAAM,YAA+B;KAAC,OAAO;KAAM,OAAO,UAAU,MAAM;KAAC,EAAE,GACrG,GAEF,2CAAC;KAAK,WAAW,OAAO;eAAW,EAAE,oCAAoC;MAAQ;KAE7E;GACR,2CAACH;IAAM,OAAO,EAAE,6BAA6B;cAC3C,2CAACI;KACC,OAAO,EAAE,6BAA6B;KACtC,WAAW,EAAE,gCAAgC;KAC7C,OAAO,OAAO,KAAK,WAA4B;MAAC,IAAI,MAAM;MAAI,OAAO,MAAM;MAAK,EAAE;MAClF;KACI;;GACK;;AAInB,8BAAe"}
+{"version":3,"file":"BaseUserDetails.cjs","names":["BaseUserDetails: FC<BaseUserDetailsProps>","useTranslation","styles: Record<string, string>","useAdminPartStyles","isWritable: boolean","AdminSection","Spinner","Alert","displayName: string","attributes: [string, unknown][]","editableAttributes: [string, string][]","AccountLifecycleButtons","ConfirmButton","Avatar","AccessStatusBadge","Panel","Button","TextField","DetailList","ChipList"],"sources":["../../../../../src/components/admin/UserDetails/BaseUserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AccountLifecycleAction,\n  resolveManagedIdentityName,\n  ManagedUser,\n  MembershipGroup,\n  Preferences,\n} from '@thunderid/browser';\nimport {ChangeEvent, FC, ReactElement, ReactNode, useState} from 'react';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Alert from '../../primitives/Alert/Alert';\nimport {Avatar} from '../../primitives/Avatar/Avatar';\nimport Button from '../../primitives/Button/Button';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport TextField from '../../primitives/TextField/TextField';\nimport {AccessStatusBadge, AccountLifecycleButtons} from '../shared/AccountLifecycleParts';\nimport {ChipList, ConfirmButton, DetailList, Panel} from '../shared/AdminParts';\nimport AdminSection from '../shared/AdminSection';\nimport useAdminPartStyles from '../shared/useAdminPartStyles';\n\n/**\n * What {@link BaseUserDetails} hands its `children` render function, so the user can be shown with any UI.\n */\nexport interface BaseUserDetailsRenderProps {\n  /**\n   * The user's attributes, without the hidden ones.\n   */\n  attributes: Record<string, unknown>;\n  /**\n   * The user's display name, or an empty string while there is no user.\n   */\n  displayName: string;\n  error: string | null;\n  groups: MembershipGroup[];\n  isDeleting: boolean;\n  isLoading: boolean;\n  isRunningLifecycleAction: boolean;\n  isUpdating: boolean;\n  /**\n   * The account lifecycle actions offered for the user. Empty when none is allowed.\n   */\n  lifecycleActions: AccountLifecycleAction[];\n  /**\n   * Deletes the user. Undefined when deletion is not allowed, including for read-only users.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action, with the operator's note on a suspension. Undefined when none is\n   * allowed.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  /**\n   * Saves the given attributes. Undefined when editing is not allowed, including for read-only users.\n   */\n  onUpdate?: (attributes: Record<string, unknown>) => void;\n  user?: ManagedUser;\n}\n\nexport interface BaseUserDetailsProps {\n  /**\n   * Controls rendered next to the user's name.\n   */\n  actions?: ReactNode;\n  /**\n   * Renders custom UI in place of the default view. Receives the user, their visible attributes and\n   * groups, the loading and error state, and the delete and update handlers.\n   */\n  children?: (props: BaseUserDetailsRenderProps) => ReactNode;\n  className?: string;\n  error?: string | null;\n  /**\n   * The groups the user belongs to.\n   */\n  groups?: MembershipGroup[];\n  /**\n   * Attribute names that are never shown, such as credentials.\n   * @default ['password']\n   */\n  hiddenAttributes?: string[];\n  isDeleting?: boolean;\n  isLoading?: boolean;\n  isRunningLifecycleAction?: boolean;\n  isUpdating?: boolean;\n  /**\n   * The account lifecycle actions to offer (suspend, unsuspend, unlock), shown only with\n   * `onLifecycleAction`. They change only runtime state, so they apply to read-only users too.\n   */\n  lifecycleActions?: AccountLifecycleAction[];\n  /**\n   * Deletes the user. The delete action is hidden when omitted.\n   */\n  onDelete?: () => void;\n  /**\n   * Runs an account lifecycle action. Suspending and unsuspending ask for confirmation first, and a\n   * suspension takes an optional operator note.\n   */\n  onLifecycleAction?: (action: AccountLifecycleAction, operatorNote?: string) => void;\n  /**\n   * Saves edited attributes. Text attributes become editable only when set. Receives every\n   * attribute, edited or not.\n   */\n  onUpdate?: (attributes: Record<string, unknown>) => void;\n  preferences?: Preferences;\n  user?: ManagedUser;\n}\n\nconst stringify = (value: unknown): string => {\n  if (value === null || value === undefined) {\n    return '';\n  }\n\n  return typeof value === 'object' ? JSON.stringify(value) : String(value as string | number | boolean);\n};\n\n/**\n * Shows a user's attributes, type, organization unit and groups. Holds no data of its own: pass the\n * user and handle deletion.\n */\nconst BaseUserDetails: FC<BaseUserDetailsProps> = ({\n  actions,\n  children,\n  className,\n  error = null,\n  groups = [],\n  hiddenAttributes = ['password'],\n  isDeleting = false,\n  isLoading = false,\n  isRunningLifecycleAction = false,\n  isUpdating = false,\n  lifecycleActions = [],\n  onDelete,\n  onLifecycleAction,\n  onUpdate,\n  preferences,\n  user,\n}: BaseUserDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const styles: Record<string, string> = useAdminPartStyles();\n  const [draft, setDraft] = useState<Record<string, string> | null>(null);\n\n  if (children) {\n    const isWritable: boolean = Boolean(user) && !user?.isReadOnly;\n\n    return (\n      <div className={className}>\n        {children({\n          attributes: Object.fromEntries(\n            Object.entries(user?.attributes ?? {}).filter(\n              ([name]: [string, unknown]) => !hiddenAttributes.includes(name),\n            ),\n          ),\n          displayName: user ? resolveManagedIdentityName(user) : '',\n          error,\n          groups,\n          isDeleting,\n          isLoading,\n          isRunningLifecycleAction,\n          isUpdating,\n          lifecycleActions: onLifecycleAction && user ? lifecycleActions : [],\n          onDelete: isWritable ? onDelete : undefined,\n          onLifecycleAction: user ? onLifecycleAction : undefined,\n          onUpdate: isWritable ? onUpdate : undefined,\n          user,\n        })}\n      </div>\n    );\n  }\n\n  if (isLoading && !user) {\n    return (\n      <AdminSection block=\"user-details\" className={className} preferences={preferences}>\n        <span className={styles['muted']} role=\"status\">\n          <Spinner size=\"small\" /> {t('admin.common.loading')}\n        </span>\n      </AdminSection>\n    );\n  }\n\n  if (!user) {\n    return (\n      <AdminSection block=\"user-details\" className={className} preferences={preferences}>\n        <Alert variant=\"error\" role=\"alert\">\n          {error ?? t('admin.common.errors.not_found')}\n        </Alert>\n      </AdminSection>\n    );\n  }\n\n  const displayName: string = resolveManagedIdentityName(user);\n  const attributes: [string, unknown][] = Object.entries(user.attributes ?? {}).filter(\n    ([name]: [string, unknown]) => !hiddenAttributes.includes(name),\n  );\n  const editableAttributes: [string, string][] = attributes.filter(\n    (entry: [string, unknown]): entry is [string, string] => typeof entry[1] === 'string',\n  );\n\n  return (\n    <AdminSection\n      block=\"user-details\"\n      className={className}\n      title={displayName}\n      description={t('admin.users.details.subtitle', {type: user.type})}\n      preferences={preferences}\n      actions={\n        <>\n          {actions}\n          {onLifecycleAction && (\n            <AccountLifecycleButtons\n              actions={lifecycleActions}\n              collectsOperatorNote\n              isRunning={isRunningLifecycleAction}\n              name={displayName}\n              onAction={onLifecycleAction}\n            />\n          )}\n          {onDelete && !user.isReadOnly && (\n            <ConfirmButton\n              confirmText={t('admin.users.details.delete.confirm', {name: displayName})}\n              isLoading={isDeleting}\n              onConfirm={onDelete}\n            >\n              {t('admin.users.details.delete.action')}\n            </ConfirmButton>\n          )}\n        </>\n      }\n    >\n      {error && (\n        <Alert variant=\"error\" role=\"alert\">\n          {error}\n        </Alert>\n      )}\n      <div className={styles['row']}>\n        <Avatar name={displayName} size={48} />\n        <span className={styles['muted']}>{user.ouHandle ?? user.ouId}</span>\n        <AccessStatusBadge status={user.status?.value} />\n      </div>\n      <Panel\n        title={t('admin.users.details.attributes')}\n        actions={\n          onUpdate && !user.isReadOnly && !draft && editableAttributes.length > 0 ? (\n            <Button\n              variant=\"outline\"\n              size=\"small\"\n              onClick={(): void => setDraft(Object.fromEntries(editableAttributes))}\n            >\n              {t('admin.users.details.edit.action')}\n            </Button>\n          ) : undefined\n        }\n      >\n        {draft ? (\n          <form\n            className={styles['row']}\n            style={{alignItems: 'stretch', flexDirection: 'column'}}\n            onSubmit={(event): void => {\n              event.preventDefault();\n              onUpdate?.({...(user.attributes ?? {}), ...draft});\n              setDraft(null);\n            }}\n          >\n            {Object.keys(draft).map((name: string) => (\n              <TextField\n                key={name}\n                name={name}\n                label={name}\n                aria-label={name}\n                value={draft[name]}\n                onChange={(event: ChangeEvent<HTMLInputElement>): void =>\n                  setDraft((previous: Record<string, string> | null) => ({...previous, [name]: event.target.value}))\n                }\n              />\n            ))}\n            <div className={styles['row']} style={{justifyContent: 'flex-end'}}>\n              <Button type=\"button\" variant=\"text\" disabled={isUpdating} onClick={(): void => setDraft(null)}>\n                {t('admin.common.actions.cancel')}\n              </Button>\n              <Button type=\"submit\" loading={isUpdating} disabled={isUpdating}>\n                {t('admin.users.details.edit.save')}\n              </Button>\n            </div>\n          </form>\n        ) : attributes.length > 0 ? (\n          <DetailList\n            items={attributes.map(([name, value]: [string, unknown]) => ({label: name, value: stringify(value)}))}\n          />\n        ) : (\n          <span className={styles['muted']}>{t('admin.users.details.no_attributes')}</span>\n        )}\n      </Panel>\n      <Panel title={t('admin.users.details.groups')}>\n        <ChipList\n          label={t('admin.users.details.groups')}\n          emptyText={t('admin.users.details.no_groups')}\n          items={groups.map((group: MembershipGroup) => ({id: group.id, label: group.name}))}\n        />\n      </Panel>\n    </AdminSection>\n  );\n};\n\nexport default BaseUserDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA4GA,MAAM,aAAa,UAA2B;AAC5C,KAAI,UAAU,QAAQ,UAAU,OAC9B,QAAO;AAGT,QAAO,OAAO,UAAU,WAAW,KAAK,UAAU,MAAM,GAAG,OAAO,MAAmC;;;;;;AAOvG,MAAMA,mBAA6C,EACjD,SACA,UACA,WACA,QAAQ,MACR,SAAS,EAAE,EACX,mBAAmB,CAAC,WAAW,EAC/B,aAAa,OACb,YAAY,OACZ,2BAA2B,OAC3B,aAAa,OACb,mBAAmB,EAAE,EACrB,UACA,mBACA,UACA,aACA,WACwC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,SAAiCC,oCAAoB;CAC3D,MAAM,CAAC,OAAO,gCAAoD,KAAK;AAEvE,KAAI,UAAU;EACZ,MAAMC,aAAsB,QAAQ,KAAK,IAAI,CAAC,MAAM;AAEpD,SACE,2CAAC;GAAe;aACb,SAAS;IACR,YAAY,OAAO,YACjB,OAAO,QAAQ,MAAM,cAAc,EAAE,CAAC,CAAC,QACpC,CAAC,UAA6B,CAAC,iBAAiB,SAAS,KAAK,CAChE,CACF;IACD,aAAa,2DAAkC,KAAK,GAAG;IACvD;IACA;IACA;IACA;IACA;IACA;IACA,kBAAkB,qBAAqB,OAAO,mBAAmB,EAAE;IACnE,UAAU,aAAa,WAAW;IAClC,mBAAmB,OAAO,oBAAoB;IAC9C,UAAU,aAAa,WAAW;IAClC;IACD,CAAC;IACE;;AAIV,KAAI,aAAa,CAAC,KAChB,QACE,2CAACC;EAAa,OAAM;EAA0B;EAAwB;YACpE,4CAAC;GAAK,WAAW,OAAO;GAAU,MAAK;;IACrC,2CAACC,2BAAQ,MAAK,UAAU;;IAAE,EAAE,uBAAuB;;IAC9C;GACM;AAInB,KAAI,CAAC,KACH,QACE,2CAACD;EAAa,OAAM;EAA0B;EAAwB;YACpE,2CAACE;GAAM,SAAQ;GAAQ,MAAK;aACzB,SAAS,EAAE,gCAAgC;IACtC;GACK;CAInB,MAAMC,kEAAiD,KAAK;CAC5D,MAAMC,aAAkC,OAAO,QAAQ,KAAK,cAAc,EAAE,CAAC,CAAC,QAC3E,CAAC,UAA6B,CAAC,iBAAiB,SAAS,KAAK,CAChE;CACD,MAAMC,qBAAyC,WAAW,QACvD,UAAwD,OAAO,MAAM,OAAO,SAC9E;AAED,QACE,4CAACL;EACC,OAAM;EACK;EACX,OAAO;EACP,aAAa,EAAE,gCAAgC,EAAC,MAAM,KAAK,MAAK,CAAC;EACpD;EACb,SACE;GACG;GACA,qBACC,2CAACM;IACC,SAAS;IACT;IACA,WAAW;IACX,MAAM;IACN,UAAU;KACV;GAEH,YAAY,CAAC,KAAK,cACjB,2CAACC;IACC,aAAa,EAAE,sCAAsC,EAAC,MAAM,aAAY,CAAC;IACzE,WAAW;IACX,WAAW;cAEV,EAAE,oCAAoC;KACzB;MAEjB;;GAGJ,SACC,2CAACL;IAAM,SAAQ;IAAQ,MAAK;cACzB;KACK;GAEV,4CAAC;IAAI,WAAW,OAAO;;KACrB,2CAACM;MAAO,MAAM;MAAa,MAAM;OAAM;KACvC,2CAAC;MAAK,WAAW,OAAO;gBAAW,KAAK,YAAY,KAAK;OAAY;KACrE,2CAACC,mDAAkB,QAAQ,KAAK,QAAQ,QAAS;;KAC7C;GACN,2CAACC;IACC,OAAO,EAAE,iCAAiC;IAC1C,SACE,YAAY,CAAC,KAAK,cAAc,CAAC,SAAS,mBAAmB,SAAS,IACpE,2CAACC;KACC,SAAQ;KACR,MAAK;KACL,eAAqB,SAAS,OAAO,YAAY,mBAAmB,CAAC;eAEpE,EAAE,kCAAkC;MAC9B,GACP;cAGL,QACC,4CAAC;KACC,WAAW,OAAO;KAClB,OAAO;MAAC,YAAY;MAAW,eAAe;MAAS;KACvD,WAAW,UAAgB;AACzB,YAAM,gBAAgB;AACtB,iBAAW;OAAC,GAAI,KAAK,cAAc,EAAE;OAAG,GAAG;OAAM,CAAC;AAClD,eAAS,KAAK;;gBAGf,OAAO,KAAK,MAAM,CAAC,KAAK,SACvB,2CAACC;MAEO;MACN,OAAO;MACP,cAAY;MACZ,OAAO,MAAM;MACb,WAAW,UACT,UAAU,cAA6C;OAAC,GAAG;QAAW,OAAO,MAAM,OAAO;OAAM,EAAE;QAN/F,KAQL,CACF,EACF,4CAAC;MAAI,WAAW,OAAO;MAAQ,OAAO,EAAC,gBAAgB,YAAW;iBAChE,2CAACD;OAAO,MAAK;OAAS,SAAQ;OAAO,UAAU;OAAY,eAAqB,SAAS,KAAK;iBAC3F,EAAE,8BAA8B;QAC1B,EACT,2CAACA;OAAO,MAAK;OAAS,SAAS;OAAY,UAAU;iBAClD,EAAE,gCAAgC;QAC5B;OACL;MACD,GACL,WAAW,SAAS,IACtB,2CAACE,iCACC,OAAO,WAAW,KAAK,CAAC,MAAM,YAA+B;KAAC,OAAO;KAAM,OAAO,UAAU,MAAM;KAAC,EAAE,GACrG,GAEF,2CAAC;KAAK,WAAW,OAAO;eAAW,EAAE,oCAAoC;MAAQ;KAE7E;GACR,2CAACH;IAAM,OAAO,EAAE,6BAA6B;cAC3C,2CAACI;KACC,OAAO,EAAE,6BAA6B;KACtC,WAAW,EAAE,gCAAgC;KAC7C,OAAO,OAAO,KAAK,WAA4B;MAAC,IAAI,MAAM;MAAI,OAAO,MAAM;MAAK,EAAE;MAClF;KACI;;GACK;;AAInB,8BAAe"}

package/dist/cjs/components/admin/UserDetails/UserDetails.cjs

@@ -4,6 +4,7 @@ const require_useManagementEndpoint = require('../../../hooks/management/useMana
 const require_useResourceQuery = require('../../../hooks/management/useResourceQuery.cjs');
 const require_useResourceMutation = require('../../../hooks/management/useResourceMutation.cjs');
 const require_BaseUserDetails = require('./BaseUserDetails.cjs');
+const require_useAccountLifecycle = require('../../../hooks/management/useAccountLifecycle.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);
 let react_jsx_runtime = require("react/jsx-runtime");
@@ -18,7 +19,7 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 * <UserDetails userId={userId} deletable onDeleted={() => navigate('/users')} />
 * ```
 */
-const UserDetails = ({ deletable = false, editable = false, onDeleted, preferences, userId,...rest }) => {
+const UserDetails = ({ administrationMode, deletable = false, editable = false, lifecycleActions = false, onDeleted, preferences, userId,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const endpoint = require_useManagementEndpoint.default("users");
 	const user = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USER, userId], (fetcher) => (0, __thunderid_browser.getUser)({
@@ -39,6 +40,7 @@ const UserDetails = ({ deletable = false, editable = false, onDeleted, preferenc
 	}), { enabled: Boolean(userId) });
 	const deletion = require_useResourceMutation.default((id, fetcher) => (0, __thunderid_browser.deleteUser)({
 		...endpoint,
+		administrationMode,
 		fetcher,
 		userId: id
 	}), () => [[__thunderid_browser.UserQueryKeys.USERS]], { onSuccess: onDeleted });
@@ -48,13 +50,23 @@ const UserDetails = ({ deletable = false, editable = false, onDeleted, preferenc
 		payload: data,
 		userId: id
 	}), ({ userId: id }) => [[__thunderid_browser.UserQueryKeys.USER, id], [__thunderid_browser.UserQueryKeys.USERS]]);
+	const lifecycle = require_useAccountLifecycle.default({
+		enabled: lifecycleActions,
+		invalidatedKeys: [[__thunderid_browser.UserQueryKeys.USER, userId], [__thunderid_browser.UserQueryKeys.USERS]],
+		kind: "user",
+		status: user.data?.status?.value,
+		subject: userId
+	});
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseUserDetails.default, {
 		user: user.data,
 		groups: groups.data?.groups,
 		isLoading: user.isLoading,
-		error: (0, __thunderid_browser.toManagementErrorMessage)(t, user.error, "admin.users.details.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, deletion.error, "admin.users.details.delete.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, update.error, "admin.users.details.edit.error"),
+		error: (0, __thunderid_browser.toManagementErrorMessage)(t, user.error, "admin.users.details.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, deletion.error, "admin.users.details.delete.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, update.error, "admin.users.details.edit.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, lifecycle.error, "admin.common.lifecycle.error") ?? (0, __thunderid_browser.toManagementErrorMessage)(t, lifecycle.loadError, "admin.common.lifecycle.load_error"),
 		isDeleting: deletion.isLoading,
 		onDelete: deletable ? () => void deletion.mutate(userId) : void 0,
+		lifecycleActions: lifecycle.actions,
+		isRunningLifecycleAction: lifecycle.isRunning,
+		onLifecycleAction: lifecycleActions ? lifecycle.run : void 0,
 		isUpdating: update.isLoading,
 		onUpdate: editable && user.data ? (attributes) => void update.mutate({
 			data: {

package/dist/cjs/components/admin/UserDetails/UserDetails.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"UserDetails.cjs","names":["UserDetails: FC<UserDetailsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","user: ResourceQueryResult<ManagedUser>","useResourceQuery","UserQueryKeys","groups: ResourceQueryResult<MembershipGroupListResponse>","GroupQueryKeys","deletion: ResourceMutationResult<void, string>","useResourceMutation","update: ResourceMutationResult<ManagedUser, UpdateUserVariables>","BaseUserDetails"],"sources":["../../../../../src/components/admin/UserDetails/UserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  GroupQueryKeys,\n  ManagedUser,\n  MembershipGroupListResponse,\n  UpdateManagedUserRequest,\n  UserQueryKeys,\n  deleteUser,\n  getUser,\n  getUserGroups,\n  toManagementErrorMessage,\n  updateUser,\n} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseUserDetails, {BaseUserDetailsProps} from './BaseUserDetails';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\ninterface UpdateUserVariables {\n  data: UpdateManagedUserRequest;\n  userId: string;\n}\n\nexport type UserDetailsProps = Omit<\n  BaseUserDetailsProps,\n  'error' | 'groups' | 'isDeleting' | 'isLoading' | 'isUpdating' | 'onDelete' | 'onUpdate' | 'user'\n> & {\n  /**\n   * Whether the user can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the user's text attributes can be edited from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Called after the user has been deleted.\n   */\n  onDeleted?: () => void;\n  userId: string;\n};\n\n/**\n * Shows a user and the groups they belong to, and optionally lets the signed-in user delete them.\n *\n * @example\n * ```tsx\n * <UserDetails userId={userId} deletable onDeleted={() => navigate('/users')} />\n * ```\n */\nconst UserDetails: FC<UserDetailsProps> = ({\n  deletable = false,\n  editable = false,\n  onDeleted,\n  preferences,\n  userId,\n  ...rest\n}: UserDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const user: ResourceQueryResult<ManagedUser> = useResourceQuery(\n    [UserQueryKeys.USER, userId],\n    (fetcher) => getUser({...endpoint, fetcher, userId}),\n    {enabled: Boolean(userId)},\n  );\n  const groups: ResourceQueryResult<MembershipGroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.MEMBERSHIPS, 'user', userId, {limit: 100}],\n    (fetcher) => getUserGroups({...endpoint, fetcher, limit: 100, userId}),\n    {enabled: Boolean(userId)},\n  );\n  const deletion: ResourceMutationResult<void, string> = useResourceMutation(\n    (id: string, fetcher) => deleteUser({...endpoint, fetcher, userId: id}),\n    () => [[UserQueryKeys.USERS]],\n    {onSuccess: onDeleted},\n  );\n  const update: ResourceMutationResult<ManagedUser, UpdateUserVariables> = useResourceMutation(\n    ({data, userId: id}: UpdateUserVariables, fetcher) => updateUser({...endpoint, fetcher, payload: data, userId: id}),\n    ({userId: id}: UpdateUserVariables) => [[UserQueryKeys.USER, id], [UserQueryKeys.USERS]],\n  );\n\n  return (\n    <BaseUserDetails\n      user={user.data}\n      groups={groups.data?.groups}\n      isLoading={user.isLoading}\n      error={\n        toManagementErrorMessage(t, user.error, 'admin.users.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.users.details.delete.error') ??\n        toManagementErrorMessage(t, update.error, 'admin.users.details.edit.error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(userId) : undefined}\n      isUpdating={update.isLoading}\n      onUpdate={\n        editable && user.data\n          ? (attributes: Record<string, unknown>): void =>\n              void update.mutate({data: {attributes, ouId: user.data!.ouId, type: user.data!.type}, userId})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAwDA,MAAMA,eAAqC,EACzC,YAAY,OACZ,WAAW,OACX,WACA,aACA,OACA,GAAG,WACiC;CACpC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,sCAAsB,QAAQ;CACnE,MAAMC,OAAyCC,iCAC7C,CAACC,kCAAc,MAAM,OAAO,GAC3B,6CAAoB;EAAC,GAAG;EAAU;EAAS;EAAO,CAAC,EACpD,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,SAA2DF,iCAC/D;EAACG,mCAAe;EAAa;EAAQ;EAAQ,EAAC,OAAO,KAAI;EAAC,GACzD,mDAA0B;EAAC,GAAG;EAAU;EAAS,OAAO;EAAK;EAAO,CAAC,EACtE,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,WAAiDC,qCACpD,IAAY,gDAAuB;EAAC,GAAG;EAAU;EAAS,QAAQ;EAAG,CAAC,QACjE,CAAC,CAACJ,kCAAc,MAAM,CAAC,EAC7B,EAAC,WAAW,WAAU,CACvB;CACD,MAAMK,SAAmED,qCACtE,EAAC,MAAM,QAAQ,MAA0B,gDAAuB;EAAC,GAAG;EAAU;EAAS,SAAS;EAAM,QAAQ;EAAG,CAAC,GAClH,EAAC,QAAQ,SAA6B,CAAC,CAACJ,kCAAc,MAAM,GAAG,EAAE,CAACA,kCAAc,MAAM,CAAC,CACzF;AAED,QACE,2CAACM;EACC,MAAM,KAAK;EACX,QAAQ,OAAO,MAAM;EACrB,WAAW,KAAK;EAChB,yDAC2B,GAAG,KAAK,OAAO,4BAA4B,sDAC3C,GAAG,SAAS,OAAO,mCAAmC,sDACtD,GAAG,OAAO,OAAO,iCAAiC;EAE7E,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,OAAO,GAAG;EACjE,YAAY,OAAO;EACnB,UACE,YAAY,KAAK,QACZ,eACC,KAAK,OAAO,OAAO;GAAC,MAAM;IAAC;IAAY,MAAM,KAAK,KAAM;IAAM,MAAM,KAAK,KAAM;IAAK;GAAE;GAAO,CAAC,GAChG;EAEO;EACb,GAAI;GACJ;;AAIN,0BAAe"}
+{"version":3,"file":"UserDetails.cjs","names":["UserDetails: FC<UserDetailsProps>","useTranslation","endpoint: ManagementEndpoint","useManagementEndpoint","user: ResourceQueryResult<ManagedUser>","useResourceQuery","UserQueryKeys","groups: ResourceQueryResult<MembershipGroupListResponse>","GroupQueryKeys","deletion: ResourceMutationResult<void, string>","useResourceMutation","update: ResourceMutationResult<ManagedUser, UpdateUserVariables>","lifecycle: AccountLifecycleState","useAccountLifecycle","BaseUserDetails"],"sources":["../../../../../src/components/admin/UserDetails/UserDetails.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  GroupQueryKeys,\n  ManagedUser,\n  MembershipGroupListResponse,\n  UpdateManagedUserRequest,\n  UserQueryKeys,\n  deleteUser,\n  getUser,\n  getUserGroups,\n  toManagementErrorMessage,\n  updateUser,\n} from '@thunderid/browser';\nimport {FC, ReactElement} from 'react';\nimport BaseUserDetails, {BaseUserDetailsProps} from './BaseUserDetails';\nimport useAccountLifecycle, {AccountLifecycleState} from '../../../hooks/management/useAccountLifecycle';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\n\ninterface UpdateUserVariables {\n  data: UpdateManagedUserRequest;\n  userId: string;\n}\n\nexport type UserDetailsProps = Omit<\n  BaseUserDetailsProps,\n  | 'error'\n  | 'groups'\n  | 'isDeleting'\n  | 'isLoading'\n  | 'isRunningLifecycleAction'\n  | 'isUpdating'\n  | 'lifecycleActions'\n  | 'onDelete'\n  | 'onLifecycleAction'\n  | 'onUpdate'\n  | 'user'\n> & {\n  /**\n   * How the delete runs. `flow` runs the user deletion flow the server configures, which revokes the\n   * user's grants and ends their sessions before the record goes. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether the user can be deleted from this view.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Whether the user's text attributes can be edited from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether the user can be suspended, unsuspended and unlocked from this view. Each action runs\n   * through its administration flow and is offered only when the server configures that flow. Reading\n   * the configured flows needs a token that may read the server configuration.\n   * @default false\n   */\n  lifecycleActions?: boolean;\n  /**\n   * Called after the user has been deleted.\n   */\n  onDeleted?: () => void;\n  userId: string;\n};\n\n/**\n * Shows a user and the groups they belong to, and optionally lets the signed-in user delete them.\n *\n * @example\n * ```tsx\n * <UserDetails userId={userId} deletable onDeleted={() => navigate('/users')} />\n * ```\n */\nconst UserDetails: FC<UserDetailsProps> = ({\n  administrationMode,\n  deletable = false,\n  editable = false,\n  lifecycleActions = false,\n  onDeleted,\n  preferences,\n  userId,\n  ...rest\n}: UserDetailsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const endpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const user: ResourceQueryResult<ManagedUser> = useResourceQuery(\n    [UserQueryKeys.USER, userId],\n    (fetcher) => getUser({...endpoint, fetcher, userId}),\n    {enabled: Boolean(userId)},\n  );\n  const groups: ResourceQueryResult<MembershipGroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.MEMBERSHIPS, 'user', userId, {limit: 100}],\n    (fetcher) => getUserGroups({...endpoint, fetcher, limit: 100, userId}),\n    {enabled: Boolean(userId)},\n  );\n  const deletion: ResourceMutationResult<void, string> = useResourceMutation(\n    (id: string, fetcher) => deleteUser({...endpoint, administrationMode, fetcher, userId: id}),\n    () => [[UserQueryKeys.USERS]],\n    {onSuccess: onDeleted},\n  );\n  const update: ResourceMutationResult<ManagedUser, UpdateUserVariables> = useResourceMutation(\n    ({data, userId: id}: UpdateUserVariables, fetcher) => updateUser({...endpoint, fetcher, payload: data, userId: id}),\n    ({userId: id}: UpdateUserVariables) => [[UserQueryKeys.USER, id], [UserQueryKeys.USERS]],\n  );\n\n  const lifecycle: AccountLifecycleState = useAccountLifecycle({\n    enabled: lifecycleActions,\n    invalidatedKeys: [[UserQueryKeys.USER, userId], [UserQueryKeys.USERS]],\n    kind: 'user',\n    status: user.data?.status?.value,\n    subject: userId,\n  });\n\n  return (\n    <BaseUserDetails\n      user={user.data}\n      groups={groups.data?.groups}\n      isLoading={user.isLoading}\n      error={\n        toManagementErrorMessage(t, user.error, 'admin.users.details.error') ??\n        toManagementErrorMessage(t, deletion.error, 'admin.users.details.delete.error') ??\n        toManagementErrorMessage(t, update.error, 'admin.users.details.edit.error') ??\n        toManagementErrorMessage(t, lifecycle.error, 'admin.common.lifecycle.error') ??\n        toManagementErrorMessage(t, lifecycle.loadError, 'admin.common.lifecycle.load_error')\n      }\n      isDeleting={deletion.isLoading}\n      onDelete={deletable ? (): void => void deletion.mutate(userId) : undefined}\n      lifecycleActions={lifecycle.actions}\n      isRunningLifecycleAction={lifecycle.isRunning}\n      onLifecycleAction={lifecycleActions ? lifecycle.run : undefined}\n      isUpdating={update.isLoading}\n      onUpdate={\n        editable && user.data\n          ? (attributes: Record<string, unknown>): void =>\n              void update.mutate({data: {attributes, ouId: user.data!.ouId, type: user.data!.type}, userId})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default UserDetails;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAiFA,MAAMA,eAAqC,EACzC,oBACA,YAAY,OACZ,WAAW,OACX,mBAAmB,OACnB,WACA,aACA,OACA,GAAG,WACiC;CACpC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,WAA+BC,sCAAsB,QAAQ;CACnE,MAAMC,OAAyCC,iCAC7C,CAACC,kCAAc,MAAM,OAAO,GAC3B,6CAAoB;EAAC,GAAG;EAAU;EAAS;EAAO,CAAC,EACpD,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,SAA2DF,iCAC/D;EAACG,mCAAe;EAAa;EAAQ;EAAQ,EAAC,OAAO,KAAI;EAAC,GACzD,mDAA0B;EAAC,GAAG;EAAU;EAAS,OAAO;EAAK;EAAO,CAAC,EACtE,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,WAAiDC,qCACpD,IAAY,gDAAuB;EAAC,GAAG;EAAU;EAAoB;EAAS,QAAQ;EAAG,CAAC,QACrF,CAAC,CAACJ,kCAAc,MAAM,CAAC,EAC7B,EAAC,WAAW,WAAU,CACvB;CACD,MAAMK,SAAmED,qCACtE,EAAC,MAAM,QAAQ,MAA0B,gDAAuB;EAAC,GAAG;EAAU;EAAS,SAAS;EAAM,QAAQ;EAAG,CAAC,GAClH,EAAC,QAAQ,SAA6B,CAAC,CAACJ,kCAAc,MAAM,GAAG,EAAE,CAACA,kCAAc,MAAM,CAAC,CACzF;CAED,MAAMM,YAAmCC,oCAAoB;EAC3D,SAAS;EACT,iBAAiB,CAAC,CAACP,kCAAc,MAAM,OAAO,EAAE,CAACA,kCAAc,MAAM,CAAC;EACtE,MAAM;EACN,QAAQ,KAAK,MAAM,QAAQ;EAC3B,SAAS;EACV,CAAC;AAEF,QACE,2CAACQ;EACC,MAAM,KAAK;EACX,QAAQ,OAAO,MAAM;EACrB,WAAW,KAAK;EAChB,yDAC2B,GAAG,KAAK,OAAO,4BAA4B,sDAC3C,GAAG,SAAS,OAAO,mCAAmC,sDACtD,GAAG,OAAO,OAAO,iCAAiC,sDAClD,GAAG,UAAU,OAAO,+BAA+B,sDACnD,GAAG,UAAU,WAAW,oCAAoC;EAEvF,YAAY,SAAS;EACrB,UAAU,kBAAwB,KAAK,SAAS,OAAO,OAAO,GAAG;EACjE,kBAAkB,UAAU;EAC5B,0BAA0B,UAAU;EACpC,mBAAmB,mBAAmB,UAAU,MAAM;EACtD,YAAY,OAAO;EACnB,UACE,YAAY,KAAK,QACZ,eACC,KAAK,OAAO,OAAO;GAAC,MAAM;IAAC;IAAY,MAAM,KAAK,KAAM;IAAM,MAAM,KAAK,KAAM;IAAK;GAAE;GAAO,CAAC,GAChG;EAEO;EACb,GAAI;GACJ;;AAIN,0BAAe"}

package/dist/cjs/components/admin/shared/AccountLifecycleParts.cjs

@@ -0,0 +1,105 @@
+const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
+const require_useTranslation = require('../../../hooks/useTranslation.cjs');
+const require_Button = require('../../primitives/Button/Button.cjs');
+const require_TextField = require('../../primitives/TextField/TextField.cjs');
+const require_useAdminPartStyles = require('./useAdminPartStyles.cjs');
+let react = require("react");
+react = require_rolldown_runtime.__toESM(react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
+
+//#region src/components/admin/shared/AccountLifecycleParts.tsx
+/**
+* Matches the server's limit on an operator note.
+*/
+const OPERATOR_NOTE_MAX_LENGTH = 100;
+/**
+* The translated access status of an identity, or its raw value when the status is one this SDK does
+* not know. Renders nothing when the server reports no status.
+*/
+const AccessStatusBadge = ({ status }) => {
+	const styles = require_useAdminPartStyles.default();
+	const { t } = require_useTranslation.default();
+	if (!status) return null;
+	const labels = {
+		ACTIVE: t("admin.common.status.active"),
+		LOCKED: t("admin.common.status.locked"),
+		SUSPENDED: t("admin.common.status.suspended")
+	};
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+		className: styles["chip"],
+		children: labels[status] ?? status
+	});
+};
+/**
+* One button per account lifecycle action. Suspending and unsuspending ask for confirmation inline;
+* unlocking is remedial and runs straight away.
+*/
+const AccountLifecycleButtons = ({ actions, collectsOperatorNote = false, isRunning = false, name, onAction }) => {
+	const styles = require_useAdminPartStyles.default();
+	const { t } = require_useTranslation.default();
+	const [confirming, setConfirming] = (0, react.useState)(null);
+	const [operatorNote, setOperatorNote] = (0, react.useState)("");
+	if (actions.length === 0) return null;
+	const labels = {
+		suspend: t("admin.common.lifecycle.suspend"),
+		unlock: t("admin.common.lifecycle.unlock"),
+		unsuspend: t("admin.common.lifecycle.unsuspend")
+	};
+	if (confirming && actions.includes(confirming)) {
+		const question = confirming === "suspend" ? t("admin.common.lifecycle.suspend_confirm", { name }) : t("admin.common.lifecycle.unsuspend_confirm", { name });
+		const withNote = collectsOperatorNote && confirming === "suspend";
+		const close = () => {
+			setConfirming(null);
+			setOperatorNote("");
+		};
+		return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+			className: styles["confirm"],
+			role: "group",
+			"aria-label": question,
+			children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: question }),
+				withNote && /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_TextField.default, {
+					name: "operatorNote",
+					label: t("admin.common.lifecycle.operator_note"),
+					"aria-label": t("admin.common.lifecycle.operator_note"),
+					value: operatorNote,
+					maxLength: OPERATOR_NOTE_MAX_LENGTH,
+					disabled: isRunning,
+					onChange: (event) => setOperatorNote(event.target.value)
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Button.default, {
+					variant: "text",
+					size: "small",
+					disabled: isRunning,
+					onClick: close,
+					children: t("admin.common.actions.cancel")
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Button.default, {
+					color: confirming === "suspend" ? "error" : "primary",
+					size: "small",
+					loading: isRunning,
+					disabled: isRunning,
+					onClick: () => {
+						onAction(confirming, withNote ? operatorNote.trim() || void 0 : void 0);
+						close();
+					},
+					children: labels[confirming]
+				})
+			]
+		});
+	}
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(react_jsx_runtime.Fragment, { children: actions.map((action) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_Button.default, {
+		variant: "outline",
+		color: action === "suspend" ? "error" : "primary",
+		disabled: isRunning,
+		loading: isRunning && action === "unlock",
+		onClick: () => action === "unlock" ? onAction(action) : setConfirming(action),
+		children: labels[action]
+	}, action)) });
+};
+
+//#endregion
+exports.AccessStatusBadge = AccessStatusBadge;
+exports.AccountLifecycleButtons = AccountLifecycleButtons;
+//# sourceMappingURL=AccountLifecycleParts.cjs.map

package/dist/cjs/components/admin/shared/AccountLifecycleParts.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountLifecycleParts.cjs","names":["AccessStatusBadge: FC<AccessStatusBadgeProps>","styles: Record<string, string>","useAdminPartStyles","useTranslation","labels: Record<AccessStatusValue, string>","AccountLifecycleButtons: FC<AccountLifecycleButtonsProps>","labels: Record<AccountLifecycleAction, string>","question: string","withNote: boolean","TextField","Button"],"sources":["../../../../../src/components/admin/shared/AccountLifecycleParts.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {AccessStatusValue, AccountLifecycleAction} from '@thunderid/browser';\nimport {ChangeEvent, FC, ReactElement, useState} from 'react';\nimport useAdminPartStyles from './useAdminPartStyles';\nimport useTranslation from '../../../hooks/useTranslation';\nimport Button from '../../primitives/Button/Button';\nimport TextField from '../../primitives/TextField/TextField';\n\n/**\n * Matches the server's limit on an operator note.\n */\nconst OPERATOR_NOTE_MAX_LENGTH = 100;\n\nexport interface AccessStatusBadgeProps {\n  status?: AccessStatusValue;\n}\n\n/**\n * The translated access status of an identity, or its raw value when the status is one this SDK does\n * not know. Renders nothing when the server reports no status.\n */\nexport const AccessStatusBadge: FC<AccessStatusBadgeProps> = ({\n  status,\n}: AccessStatusBadgeProps): ReactElement | null => {\n  const styles: Record<string, string> = useAdminPartStyles();\n  const {t} = useTranslation();\n\n  if (!status) {\n    return null;\n  }\n\n  const labels: Record<AccessStatusValue, string> = {\n    ACTIVE: t('admin.common.status.active'),\n    LOCKED: t('admin.common.status.locked'),\n    SUSPENDED: t('admin.common.status.suspended'),\n  };\n\n  return <span className={styles['chip']}>{labels[status] ?? status}</span>;\n};\n\nexport interface AccountLifecycleButtonsProps {\n  /**\n   * The actions to offer, most expected first.\n   */\n  actions: AccountLifecycleAction[];\n  /**\n   * Whether a suspension asks for an optional operator note. The note is recorded by the flow.\n   */\n  collectsOperatorNote?: boolean;\n  isRunning?: boolean;\n  /**\n   * Name of the identity, already resolved, used in the confirmation question.\n   */\n  name: string;\n  onAction: (action: AccountLifecycleAction, operatorNote?: string) => void;\n}\n\n/**\n * One button per account lifecycle action. Suspending and unsuspending ask for confirmation inline;\n * unlocking is remedial and runs straight away.\n */\nexport const AccountLifecycleButtons: FC<AccountLifecycleButtonsProps> = ({\n  actions,\n  collectsOperatorNote = false,\n  isRunning = false,\n  name,\n  onAction,\n}: AccountLifecycleButtonsProps): ReactElement | null => {\n  const styles: Record<string, string> = useAdminPartStyles();\n  const {t} = useTranslation();\n  const [confirming, setConfirming] = useState<AccountLifecycleAction | null>(null);\n  const [operatorNote, setOperatorNote] = useState<string>('');\n\n  if (actions.length === 0) {\n    return null;\n  }\n\n  const labels: Record<AccountLifecycleAction, string> = {\n    suspend: t('admin.common.lifecycle.suspend'),\n    unlock: t('admin.common.lifecycle.unlock'),\n    unsuspend: t('admin.common.lifecycle.unsuspend'),\n  };\n\n  if (confirming && actions.includes(confirming)) {\n    const question: string =\n      confirming === 'suspend'\n        ? t('admin.common.lifecycle.suspend_confirm', {name})\n        : t('admin.common.lifecycle.unsuspend_confirm', {name});\n    const withNote: boolean = collectsOperatorNote && confirming === 'suspend';\n    const close = (): void => {\n      setConfirming(null);\n      setOperatorNote('');\n    };\n\n    return (\n      <span className={styles['confirm']} role=\"group\" aria-label={question}>\n        <span>{question}</span>\n        {withNote && (\n          <TextField\n            name=\"operatorNote\"\n            label={t('admin.common.lifecycle.operator_note')}\n            aria-label={t('admin.common.lifecycle.operator_note')}\n            value={operatorNote}\n            maxLength={OPERATOR_NOTE_MAX_LENGTH}\n            disabled={isRunning}\n            onChange={(event: ChangeEvent<HTMLInputElement>): void => setOperatorNote(event.target.value)}\n          />\n        )}\n        <Button variant=\"text\" size=\"small\" disabled={isRunning} onClick={close}>\n          {t('admin.common.actions.cancel')}\n        </Button>\n        <Button\n          color={confirming === 'suspend' ? 'error' : 'primary'}\n          size=\"small\"\n          loading={isRunning}\n          disabled={isRunning}\n          onClick={(): void => {\n            onAction(confirming, withNote ? operatorNote.trim() || undefined : undefined);\n            close();\n          }}\n        >\n          {labels[confirming]}\n        </Button>\n      </span>\n    );\n  }\n\n  return (\n    <>\n      {actions.map((action: AccountLifecycleAction) => (\n        <Button\n          key={action}\n          variant=\"outline\"\n          color={action === 'suspend' ? 'error' : 'primary'}\n          disabled={isRunning}\n          loading={isRunning && action === 'unlock'}\n          onClick={(): void => (action === 'unlock' ? onAction(action) : setConfirming(action))}\n        >\n          {labels[action]}\n        </Button>\n      ))}\n    </>\n  );\n};\n"],"mappings":";;;;;;;;;;;;;;AAaA,MAAM,2BAA2B;;;;;AAUjC,MAAaA,qBAAiD,EAC5D,aACiD;CACjD,MAAMC,SAAiCC,oCAAoB;CAC3D,MAAM,EAAC,MAAKC,gCAAgB;AAE5B,KAAI,CAAC,OACH,QAAO;CAGT,MAAMC,SAA4C;EAChD,QAAQ,EAAE,6BAA6B;EACvC,QAAQ,EAAE,6BAA6B;EACvC,WAAW,EAAE,gCAAgC;EAC9C;AAED,QAAO,2CAAC;EAAK,WAAW,OAAO;YAAU,OAAO,WAAW;GAAc;;;;;;AAwB3E,MAAaC,2BAA6D,EACxE,SACA,uBAAuB,OACvB,YAAY,OACZ,MACA,eACuD;CACvD,MAAMJ,SAAiCC,oCAAoB;CAC3D,MAAM,EAAC,MAAKC,gCAAgB;CAC5B,MAAM,CAAC,YAAY,qCAAyD,KAAK;CACjF,MAAM,CAAC,cAAc,uCAAoC,GAAG;AAE5D,KAAI,QAAQ,WAAW,EACrB,QAAO;CAGT,MAAMG,SAAiD;EACrD,SAAS,EAAE,iCAAiC;EAC5C,QAAQ,EAAE,gCAAgC;EAC1C,WAAW,EAAE,mCAAmC;EACjD;AAED,KAAI,cAAc,QAAQ,SAAS,WAAW,EAAE;EAC9C,MAAMC,WACJ,eAAe,YACX,EAAE,0CAA0C,EAAC,MAAK,CAAC,GACnD,EAAE,4CAA4C,EAAC,MAAK,CAAC;EAC3D,MAAMC,WAAoB,wBAAwB,eAAe;EACjE,MAAM,cAAoB;AACxB,iBAAc,KAAK;AACnB,mBAAgB,GAAG;;AAGrB,SACE,4CAAC;GAAK,WAAW,OAAO;GAAY,MAAK;GAAQ,cAAY;;IAC3D,2CAAC,oBAAM,WAAgB;IACtB,YACC,2CAACC;KACC,MAAK;KACL,OAAO,EAAE,uCAAuC;KAChD,cAAY,EAAE,uCAAuC;KACrD,OAAO;KACP,WAAW;KACX,UAAU;KACV,WAAW,UAA+C,gBAAgB,MAAM,OAAO,MAAM;MAC7F;IAEJ,2CAACC;KAAO,SAAQ;KAAO,MAAK;KAAQ,UAAU;KAAW,SAAS;eAC/D,EAAE,8BAA8B;MAC1B;IACT,2CAACA;KACC,OAAO,eAAe,YAAY,UAAU;KAC5C,MAAK;KACL,SAAS;KACT,UAAU;KACV,eAAqB;AACnB,eAAS,YAAY,WAAW,aAAa,MAAM,IAAI,SAAY,OAAU;AAC7E,aAAO;;eAGR,OAAO;MACD;;IACJ;;AAIX,QACE,mFACG,QAAQ,KAAK,WACZ,2CAACA;EAEC,SAAQ;EACR,OAAO,WAAW,YAAY,UAAU;EACxC,UAAU;EACV,SAAS,aAAa,WAAW;EACjC,eAAsB,WAAW,WAAW,SAAS,OAAO,GAAG,cAAc,OAAO;YAEnF,OAAO;IAPH,OAQE,CACT,GACD"}

package/dist/cjs/components/admin/shared/ApplicationFormFields.cjs

@@ -1,7 +1,7 @@
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.cjs');
 const require_useTranslation = require('../../../hooks/useTranslation.cjs');
-const require_Checkbox = require('../../primitives/Checkbox/Checkbox.cjs');
 const require_TextField = require('../../primitives/TextField/TextField.cjs');
+const require_Checkbox = require('../../primitives/Checkbox/Checkbox.cjs');
 const require_useAdminPartStyles = require('./useAdminPartStyles.cjs');
 let __thunderid_browser = require("@thunderid/browser");
 __thunderid_browser = require_rolldown_runtime.__toESM(__thunderid_browser);

package/dist/cjs/components/auth/AcceptInvite/BaseAcceptInvite.cjs

@@ -10,6 +10,7 @@ const require_Button = require('../../primitives/Button/Button.cjs');
 const require_Typography = require('../../primitives/Typography/Typography.cjs');
 const require_Alert = require('../../primitives/Alert/Alert.cjs');
 const require_Card = require('../../primitives/Card/Card.cjs');
+const require_isConsentApprovalBlocked = require('../../../utils/isConsentApprovalBlocked.cjs');
 const require_AuthOptionFactory = require('../flow/AuthOptionFactory.cjs');
 const require_useOAuthCallback = require('../../../hooks/auth/useOAuthCallback.cjs');
 const require_oauth = require('../../../utils/oauth.cjs');
@@ -253,6 +254,7 @@ const BaseAcceptInvite = ({ executionId, inviteToken, onSubmit, onComplete, onEr
 				const raw = currentAdditionalData["consentPrompt"];
 				const purposes = typeof raw === "string" ? JSON.parse(raw) : raw.purposes || raw;
 				const isDeny = component?.variant?.toLowerCase() !== "primary";
+				if (!isDeny && require_isConsentApprovalBlocked.default(purposes, inputs)) return;
 				const decisions = {
 					approved: !isDeny,
 					...isDeny ? { reason: __thunderid_browser.ConsentConstants.REASON_USER_DENIED } : {},
@@ -264,16 +266,13 @@ const BaseAcceptInvite = ({ executionId, inviteToken, onSubmit, onComplete, onEr
 							name: e.name
 						})), ...(p.optional || []).map((e) => {
 							const key = `__consent_opt__${p.purposeId}__${e.name}`;
-							return {
-								approved: !isDeny && inputs[key] === "true",
-								name: e.name
-							};
+							return (0, __thunderid_browser.getConsentElementDecision)(p.purposeId, e, !isDeny && inputs[key] === "true", inputs);
 						})]
 					}))
 				};
 				inputs.consent_decisions = JSON.stringify(decisions);
 				Object.keys(inputs).forEach((k) => {
-					if (k.startsWith("__consent_opt__")) delete inputs[k];
+					if (k.startsWith("__consent_opt__") || k.startsWith(__thunderid_browser.CONSENT_MODIFIED_KEY_PREFIX) || k.startsWith(__thunderid_browser.CONSENT_INVALID_KEY_PREFIX)) delete inputs[k];
 				});
 			} catch {}
 			const payload = {

package/dist/cjs/components/auth/AcceptInvite/BaseAcceptInvite.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"BaseAcceptInvite.cjs","names":["BaseAcceptInvite: FC<BaseAcceptInviteProps>","useThunderID","useTranslation","useTheme","customRenderers: ComponentRendererMap","ComponentRendererContext","styles: any","useStyles","challengeTokenRef: any","responseFieldErrors: FieldError[] | undefined","errors: Record<string, string>","touched: Record<string, boolean>","tokenValidationAttemptedRef: any","tempData: any","storageManager: any","handleError: any","errorMessage: string","extractErrorMessage","normalizeFlowResponseLocal: any","normalizeFlowResponse","components","response: any","handleInputChange: any","newErrors: any","handleInputBlur: any","validateForm: any","value: any","handleSubmit: any","validation: any","inputs: any","raw: any","purposes: any[]","ConsentConstants","payload: Record<string, any>","redirectURL: any","extractHeadings: any","title: string | undefined","subtitle: string | undefined","title","subtitle","filterHeadings: any","components: any","componentsWithoutHeadings: any","renderProps: BaseAcceptInviteRenderProps","CardPrimitive","cx","Spinner","Typography","AlertPrimitive","Button","renderInviteUserComponents"],"sources":["../../../../../src/components/auth/AcceptInvite/BaseAcceptInvite.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ConsentConstants,\n  FieldError,\n  FlowExecutionError,\n  FlowMetadataResponse,\n  Preferences,\n  buildValidatorFromRules,\n} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode, useCallback, useContext, useEffect, useRef, useState} from 'react';\nimport useStyles from './BaseAcceptInvite.styles';\nimport ComponentRendererContext, {\n  ComponentRendererMap,\n} from '../../../contexts/ComponentRenderer/ComponentRendererContext';\nimport useTheme from '../../../contexts/Theme/useTheme';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\nimport {useOAuthCallback} from '../../../hooks/auth/useOAuthCallback';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {cx} from '../../../styles/emotion';\nimport {normalizeFlowResponse, extractErrorMessage} from '../../../utils/flowTransformer';\nimport {initiateOAuthRedirect} from '../../../utils/oauth';\nimport AlertPrimitive from '../../primitives/Alert/Alert';\nimport Button from '../../primitives/Button/Button';\n// eslint-disable-next-line import/no-named-as-default\nimport CardPrimitive, {CardProps} from '../../primitives/Card/Card';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport Typography from '../../primitives/Typography/Typography';\nimport {renderInviteUserComponents} from '../flow/AuthOptionFactory';\n\n/**\n * Flow response structure from the backend.\n */\nexport interface AcceptInviteFlowResponse {\n  challengeToken?: string;\n  data?: {\n    additionalData?: Record<string, string>;\n    components?: any[];\n    fieldErrors?: FieldError[];\n    meta?: {\n      components?: any[];\n    };\n    redirectURL?: string;\n  };\n  error?: FlowExecutionError;\n  executionId: string;\n  flowStatus: 'INCOMPLETE' | 'COMPLETE' | 'ERROR';\n  type?: 'VIEW' | 'REDIRECTION';\n}\n\n/**\n * Render props for custom UI rendering of AcceptInvite.\n */\nexport interface BaseAcceptInviteRenderProps {\n  /**\n   * Additional data from the current flow step (e.g. consentPrompt for consent nodes).\n   */\n  additionalData: Record<string, any>;\n\n  /**\n   * Flow components from the current step.\n   */\n  components: any[];\n\n  /**\n   * API error (if any).\n   */\n  error?: Error | null;\n\n  /**\n   * Current flow ID from URL.\n   */\n  executionId?: string;\n\n  /**\n   * Field validation errors.\n   */\n  fieldErrors: Record<string, string>;\n\n  /**\n   * Navigate to sign in page.\n   */\n  goToSignIn?: () => void;\n\n  /**\n   * Function to handle input blur.\n   */\n  handleInputBlur: (name: string) => void;\n\n  /**\n   * Function to handle input changes.\n   */\n  handleInputChange: (name: string, value: string) => void;\n\n  /**\n   * Function to handle form submission.\n   */\n  handleSubmit: (component: any, data?: Record<string, any>) => Promise<void>;\n\n  /**\n   * Invite token from URL.\n   */\n  inviteToken?: string;\n\n  /**\n   * Whether the flow has completed successfully.\n   */\n  isComplete: boolean;\n\n  /**\n   * Loading state.\n   */\n  isLoading: boolean;\n\n  /**\n   * Whether the token validation failed.\n   */\n  isTokenInvalid: boolean;\n\n  /**\n   * Whether the form is valid.\n   */\n  isValid: boolean;\n\n  /**\n   * Whether the invite token is being validated.\n   */\n  isValidatingToken: boolean;\n\n  /**\n   * Flow metadata returned by the platform (v2 only). `null` while loading or unavailable.\n   */\n  meta: FlowMetadataResponse | null;\n\n  /**\n   * Subtitle for the current step.\n   */\n  subtitle?: string;\n\n  /**\n   * Title for the current step.\n   */\n  title?: string;\n\n  /**\n   * Touched fields.\n   */\n  touched: Record<string, boolean>;\n\n  /**\n   * Form values for the current step.\n   */\n  values: Record<string, string>;\n}\n\n/**\n * Props for the BaseAcceptInvite component.\n */\nexport interface BaseAcceptInviteProps {\n  /**\n   * Render props function for custom UI.\n   * If not provided, default UI will be rendered.\n   */\n  children?: (props: BaseAcceptInviteRenderProps) => ReactNode;\n\n  /**\n   * Custom CSS class name.\n   */\n  className?: string;\n\n  /**\n   * Flow ID from the invite link URL.\n   */\n  executionId?: string;\n\n  /**\n   * Invite token from the invite link URL.\n   */\n  inviteToken?: string;\n\n  /**\n   * Callback when the flow completes successfully.\n   */\n  onComplete?: () => void;\n\n  /**\n   * Callback when an error occurs.\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Callback when the flow state changes.\n   */\n  onFlowChange?: (response: AcceptInviteFlowResponse) => void;\n\n  /**\n   * Callback to navigate to sign in page.\n   */\n  onGoToSignIn?: () => void;\n\n  /**\n   * Function to submit flow step data.\n   * This makes a request to the flow/execute endpoint.\n   */\n  onSubmit: (payload: Record<string, any>) => Promise<AcceptInviteFlowResponse>;\n\n  /**\n   * Component-level preferences to override global i18n and theme settings.\n   * Preferences are deep-merged with global ones, with component preferences\n   * taking precedence. Affects this component and all its descendants.\n   */\n  preferences?: Preferences;\n\n  /**\n   * Whether to show the subtitle.\n   */\n  showSubtitle?: boolean;\n\n  /**\n   * Whether to show the title.\n   */\n  showTitle?: boolean;\n\n  /**\n   * Size variant for the component.\n   */\n  size?: 'small' | 'medium' | 'large';\n\n  /**\n   * Theme variant for the component.\n   */\n  variant?: CardProps['variant'];\n}\n\n/**\n * Base component for accept invite flow (end-user).\n * Handles the flow logic for validating an invite token and setting a password.\n *\n * When no children are provided, renders a default UI with:\n * - Loading spinner during token validation\n * - Error alerts for invalid/expired tokens\n * - Password form with validation\n * - Success state with sign-in redirect\n *\n * Flow steps handled:\n * 1. Validate invite token (automatic on mount)\n * 2. Password input\n * 3. Flow completion\n */\nconst BaseAcceptInvite: FC<BaseAcceptInviteProps> = ({\n  executionId,\n  inviteToken,\n  onSubmit,\n  onComplete,\n  onError,\n  onFlowChange,\n  onGoToSignIn,\n  className = '',\n  children,\n  preferences,\n  size = 'medium',\n  variant = 'outlined',\n  showTitle = true,\n  showSubtitle = true,\n}: BaseAcceptInviteProps): ReactElement => {\n  const {meta, isInitialized, getStorageManager, vendor} = useThunderID();\n  const {t} = useTranslation(preferences?.i18n);\n  const {theme} = useTheme();\n  const customRenderers: ComponentRendererMap = useContext(ComponentRendererContext);\n  const styles: any = useStyles(theme, theme.vars.colors.text.primary);\n  const [isLoading, setIsLoading] = useState(false);\n  const [isValidatingToken, setIsValidatingToken] = useState(true);\n  const [isTokenInvalid, setIsTokenInvalid] = useState(false);\n  const [isComplete, setIsComplete] = useState(false);\n  const [currentFlow, setCurrentFlow] = useState<AcceptInviteFlowResponse | null>(null);\n  const [apiError, setApiError] = useState<Error | null>(null);\n  const [formValues, setFormValues] = useState<Record<string, string>>({});\n  const [formErrors, setFormErrors] = useState<Record<string, string>>({});\n  const [touchedFields, setTouchedFields] = useState<Record<string, boolean>>({});\n  const [isFormValid, setIsFormValid] = useState(true);\n  const [isStorageReady, setIsStorageReady] = useState(false);\n  const challengeTokenRef: any = useRef<string | null>(null);\n\n  /**\n   * Project server-side validation errors from the most recent flow response into\n   * the local formErrors state. First error per field wins; affected fields are\n   * marked touched so errors render immediately.\n   */\n  useEffect(() => {\n    const responseFieldErrors: FieldError[] | undefined = (currentFlow?.data as any)?.fieldErrors;\n    if (!responseFieldErrors || responseFieldErrors.length === 0) {\n      return;\n    }\n    const errors: Record<string, string> = {};\n    const touched: Record<string, boolean> = {};\n    for (const fe of responseFieldErrors) {\n      if (!(fe.identifier in errors)) {\n        errors[fe.identifier] = fe.message;\n        touched[fe.identifier] = true;\n      }\n    }\n    setFormErrors(errors);\n    setTouchedFields((prev: Record<string, boolean>) => ({...prev, ...touched}));\n  }, [currentFlow]);\n\n  const tokenValidationAttemptedRef: any = useRef(false);\n\n  /**\n   * Restore any challenge token persisted before an OAuth redirect.\n   * Waits for SDK initialization before reading from storage.\n   */\n  useEffect(() => {\n    if (!isInitialized) return;\n\n    (async (): Promise<void> => {\n      try {\n        const storageManager: any = await getStorageManager();\n        const tempData: any = await storageManager?.getTemporaryData();\n        if (tempData?.challengeToken) {\n          challengeTokenRef.current = tempData.challengeToken as string;\n        }\n      } finally {\n        setIsStorageReady(true);\n      }\n    })();\n  }, [isInitialized]);\n\n  /**\n   * Updates challengeTokenRef immediately (stale-closure safe) and persists via\n   * the provider's StorageManager so the token survives OAuth redirects.\n   */\n  const setChallengeToken = async (challengeToken: string | null): Promise<void> => {\n    challengeTokenRef.current = challengeToken;\n    const storageManager: any = await getStorageManager();\n    if (storageManager) {\n      if (challengeToken) {\n        await storageManager.setTemporaryDataParameter('challengeToken', challengeToken);\n      } else {\n        await storageManager.removeTemporaryDataParameter('challengeToken');\n      }\n    }\n  };\n\n  /**\n   * Handle error responses and extract meaningful error messages.\n   * Uses the transformer's extractErrorMessage function for consistency.\n   */\n  const handleError: any = useCallback(\n    (error: any) => {\n      const errorMessage: string = extractErrorMessage(error, t, 'components.acceptInvite.errors.generic');\n\n      // Set the API error state\n      setApiError(error instanceof Error ? error : new Error(errorMessage));\n\n      // Call the onError callback if provided\n      onError?.(error instanceof Error ? error : new Error(errorMessage));\n    },\n    [t, onError],\n  );\n\n  /**\n   * Normalize flow response to ensure component-driven format.\n   * Transforms data.meta.components to data.components.\n   */\n  const normalizeFlowResponseLocal: any = useCallback(\n    (response: AcceptInviteFlowResponse): AcceptInviteFlowResponse => {\n      if (!response?.data?.meta?.components) {\n        return response;\n      }\n\n      try {\n        const {components} = normalizeFlowResponse(\n          response,\n          t,\n          {\n            defaultErrorKey: 'components.acceptInvite.errors.generic',\n            resolveTranslations: false,\n          },\n          meta,\n        );\n\n        return {\n          ...response,\n          data: {\n            ...response.data,\n            components: components as any,\n          },\n        };\n      } catch {\n        // If transformer throws (e.g., error response), return as-is\n        return response;\n      }\n    },\n    [t, children],\n  );\n\n  /**\n   * Handle OAuth callback when returning from OAuth provider.\n   * This hook processes the authorization code and continues the flow.\n   */\n  useOAuthCallback({\n    currentExecutionId: executionId ?? null,\n    executionIdStorageKey: `${vendor}_execution_id`,\n    isInitialized: isStorageReady,\n    onComplete: () => {\n      setIsValidatingToken(false);\n      onComplete?.();\n    },\n    onError: (error: any) => {\n      if (!error?.flowStatus) {\n        setIsTokenInvalid(true);\n      }\n      setIsValidatingToken(false);\n      handleError(error);\n    },\n    onFlowChange: (response: any) => {\n      onFlowChange?.(response);\n      if (response.flowStatus === 'COMPLETE') {\n        setIsComplete(true);\n        const completionComponents: any[] = response.data?.components || response.data?.meta?.components || [];\n        if (completionComponents.length > 0) {\n          setCurrentFlow(response);\n        }\n      } else {\n        // Initialize currentFlow for next steps if not complete\n        setCurrentFlow(response);\n        setFormValues({});\n        setFormErrors({});\n        setTouchedFields({});\n      }\n    },\n    onProcessingStart: () => {\n      setIsValidatingToken(true);\n    },\n    onSubmit: async (payload: any) => {\n      const rawResponse: any = await onSubmit({\n        ...payload,\n        ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n      });\n      const response: any = normalizeFlowResponseLocal(rawResponse);\n      await setChallengeToken(response.challengeToken ?? null);\n      return response;\n    },\n    tokenValidationAttemptedRef,\n  });\n\n  /**\n   * Handle input value changes.\n   */\n  const handleInputChange: any = useCallback((name: string, value: string) => {\n    setFormValues((prev: any) => ({...prev, [name]: value}));\n    // Clear error when user starts typing\n    setFormErrors((prev: any) => {\n      const newErrors: any = {...prev};\n      delete newErrors[name];\n      return newErrors;\n    });\n    setIsFormValid(true);\n  }, []);\n\n  /**\n   * Handle input blur.\n   */\n  const handleInputBlur: any = useCallback((name: string) => {\n    setTouchedFields((prev: any) => ({...prev, [name]: true}));\n  }, []);\n\n  /**\n   * Validate required fields based on components.\n   */\n  const validateForm: any = useCallback(\n    (components: any[]): {errors: Record<string, string>; isValid: boolean} => {\n      const errors: Record<string, string> = {};\n\n      const validateComponents = (comps: any[]): any => {\n        comps.forEach((comp: any) => {\n          if (\n            (comp.type === 'PASSWORD_INPUT' ||\n              comp.type === 'TEXT_INPUT' ||\n              comp.type === 'EMAIL_INPUT' ||\n              comp.type === 'PHONE_INPUT' ||\n              comp.type === 'OTP_INPUT' ||\n              comp.type === 'DATE_INPUT' ||\n              comp.type === 'SELECT') &&\n            comp.ref\n          ) {\n            const value: any = formValues[comp.ref];\n            if (comp.required && (!value || value.trim() === '')) {\n              errors[comp.ref] = t('validations.required.field.error');\n            } else if (value) {\n              // Evaluate declarative validation rules from meta.components[].validation.\n              const ruleValidator = buildValidatorFromRules(comp.validation);\n              if (ruleValidator) {\n                const message = ruleValidator(value);\n                if (message) {\n                  errors[comp.ref] = t(message);\n                }\n              }\n            }\n          }\n          if (comp.components && Array.isArray(comp.components)) {\n            validateComponents(comp.components);\n          }\n        });\n      };\n\n      validateComponents(components);\n\n      return {errors, isValid: Object.keys(errors).length === 0};\n    },\n    [formValues, t],\n  );\n\n  /**\n   * Handle form submission.\n   */\n  const handleSubmit: any = useCallback(\n    async (component: any, data?: Record<string, any>) => {\n      if (!currentFlow) {\n        return;\n      }\n\n      // Validate form before submission\n      const components: any = currentFlow.data?.components || [];\n      const validation: any = validateForm(components);\n\n      if (!validation.isValid) {\n        setIsFormValid(false);\n        setFormErrors(validation.errors);\n        // Mark all fields as touched\n        const touched: Record<string, boolean> = {};\n        Object.keys(validation.errors).forEach((key: any) => {\n          touched[key] = true;\n        });\n        setTouchedFields((prev: any) => ({...prev, ...touched}));\n        return;\n      }\n\n      setIsLoading(true);\n      setApiError(null);\n\n      try {\n        // Build payload with form values\n        const inputs: any = {...(data || formValues)};\n\n        // Auto-compile consent_decisions if we are on a consent prompt step.\n        // Mirrors the same logic in SignIn to ensure the server receives a\n        // properly structured JSON payload rather than individual checkbox keys.\n        const currentAdditionalData = (currentFlow?.data?.additionalData as Record<string, any>) ?? {};\n        if (currentAdditionalData['consentPrompt']) {\n          try {\n            const raw: any = currentAdditionalData['consentPrompt'];\n            const purposes: any[] = typeof raw === 'string' ? JSON.parse(raw) : raw.purposes || raw;\n            const isDeny = component?.variant?.toLowerCase() !== 'primary';\n            const decisions = {\n              approved: !isDeny,\n              ...(isDeny ? {reason: ConsentConstants.REASON_USER_DENIED} : {}),\n              purposes: purposes.map((p: any) => ({\n                approved: !isDeny,\n                purposeName: p.purposeName,\n                elements: [\n                  ...(p.essential || []).map((e: any) => ({approved: !isDeny, name: e.name})),\n                  ...(p.optional || []).map((e: any) => {\n                    const key = `__consent_opt__${p.purposeId}__${e.name}`;\n                    return {approved: !isDeny && inputs[key] === 'true', name: e.name};\n                  }),\n                ],\n              })),\n            };\n            inputs.consent_decisions = JSON.stringify(decisions);\n            Object.keys(inputs).forEach((k: string) => {\n              if (k.startsWith('__consent_opt__')) delete inputs[k];\n            });\n          } catch {\n            // Leave inputs as-is if consent building fails\n          }\n        }\n\n        const payload: Record<string, any> = {\n          executionId: currentFlow.executionId,\n          inputs,\n          verbose: true,\n          ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n        };\n\n        // Add action ID if component has one\n        if (component?.id) {\n          payload['action'] = component.id;\n        }\n\n        const rawResponse: any = await onSubmit(payload);\n        const response: any = normalizeFlowResponseLocal(rawResponse);\n        onFlowChange?.(response);\n\n        await setChallengeToken(response.challengeToken ?? null);\n\n        // Handle OAuth redirect response\n        if (response.type === 'REDIRECTION') {\n          const redirectURL: any = response.data?.redirectURL || response?.redirectURL;\n          if (redirectURL && typeof window !== 'undefined') {\n            // Initiate OAuth redirect with secure state management\n            initiateOAuthRedirect(redirectURL, vendor);\n            return;\n          }\n        }\n\n        // Check for completion\n        if (response.flowStatus === 'COMPLETE') {\n          setIsComplete(true);\n          const completionComponents: any[] = response.data?.components || response.data?.meta?.components || [];\n          if (completionComponents.length > 0) {\n            setCurrentFlow(response);\n          } else {\n            onComplete?.();\n          }\n          return;\n        }\n\n        // Check for error status\n        if (response.flowStatus === 'ERROR') {\n          handleError(response);\n          return;\n        }\n\n        // Update current flow and reset form state for next step, preserving input values\n        setCurrentFlow(response);\n        setFormErrors({});\n        setTouchedFields({});\n\n        // Display error from INCOMPLETE response\n        if (response?.error) {\n          handleError(response);\n        }\n      } catch (err) {\n        handleError(err);\n      } finally {\n        setIsLoading(false);\n      }\n    },\n    [\n      currentFlow,\n      formValues,\n      validateForm,\n      onSubmit,\n      onFlowChange,\n      onComplete,\n      handleError,\n      normalizeFlowResponseLocal,\n    ],\n  );\n\n  /**\n   * reset form values, errors, and touched fields to initial state\n   */\n  const resetForm = useCallback(() => {\n    setFormValues({});\n    setFormErrors({});\n    setTouchedFields({});\n  }, []);\n\n  /**\n   * Validate invite token on component mount.\n   */\n  useEffect(() => {\n    // Skip validation if already validated\n    if (tokenValidationAttemptedRef.current) {\n      return;\n    }\n\n    // If an OAuth code is present, this is a return from an OAuth redirect.\n    // useOAuthCallback will handle the code — skip the initial invite validation.\n    const urlParams: URLSearchParams = new URLSearchParams(window.location.search);\n    if (urlParams.get('code')) {\n      return;\n    }\n\n    // Validate required params for initial invite link\n    if (!executionId || !inviteToken) {\n      setIsValidatingToken(false);\n      setIsTokenInvalid(true);\n      handleError(new Error('Invalid invite link. Missing executionId or inviteToken.'));\n      return;\n    }\n\n    tokenValidationAttemptedRef.current = true;\n\n    (async (): Promise<void> => {\n      setIsValidatingToken(true);\n      setApiError(null);\n\n      try {\n        // Store executionId in sessionStorage for OAuth callback\n        if (executionId) {\n          sessionStorage.setItem(`${vendor}_execution_id`, executionId);\n        }\n\n        // Send the invite token to validate and continue the flow\n        const payload: any = {\n          executionId,\n          inputs: {\n            inviteToken,\n          },\n          verbose: true,\n        };\n\n        const rawResponse: any = await onSubmit(payload);\n        const response: any = normalizeFlowResponseLocal(rawResponse);\n        onFlowChange?.(response);\n\n        await setChallengeToken(response.challengeToken ?? null);\n\n        // Check for error (invalid token)\n        if (response.flowStatus === 'ERROR') {\n          setIsTokenInvalid(true);\n          handleError(response);\n          return;\n        }\n\n        // Token is valid, show the password form\n        setCurrentFlow(response);\n\n        // Display error from INCOMPLETE response\n        if (response?.error) {\n          handleError(response);\n        }\n      } catch (err) {\n        setIsTokenInvalid(true);\n        handleError(err);\n      } finally {\n        setIsValidatingToken(false);\n      }\n    })();\n  }, [executionId, inviteToken, onSubmit, onFlowChange, handleError, normalizeFlowResponseLocal]);\n\n  /**\n   * Extract title and subtitle from components.\n   */\n  const extractHeadings: any = useCallback((components: any[]): {subtitle?: string; title?: string} => {\n    let title: string | undefined;\n    let subtitle: string | undefined;\n\n    components.forEach((comp: any) => {\n      if (comp.type === 'TEXT') {\n        if (comp.variant === 'HEADING_1' && !title) {\n          title = comp.label;\n        } else if ((comp.variant === 'HEADING_2' || comp.variant === 'SUBTITLE_1') && !subtitle) {\n          subtitle = comp.label;\n        }\n      }\n    });\n\n    return {subtitle, title};\n  }, []);\n\n  /**\n   * Filter out heading components for default rendering.\n   */\n  const filterHeadings: any = useCallback(\n    (components: any[]): any[] =>\n      components.filter(\n        (comp: any) => !(comp.type === 'TEXT' && (comp.variant === 'HEADING_1' || comp.variant === 'HEADING_2')),\n      ),\n    [],\n  );\n\n  // Get components from normalized response, with fallback to meta.components\n  const components: any = currentFlow?.data?.components || currentFlow?.data?.meta?.components || [];\n  const {title, subtitle} = extractHeadings(components);\n  const componentsWithoutHeadings: any = filterHeadings(components);\n  const additionalData: Record<string, any> = (currentFlow?.data?.additionalData as Record<string, any>) ?? {};\n\n  // Render props\n  const renderProps: BaseAcceptInviteRenderProps = {\n    additionalData,\n    components,\n    error: apiError,\n    executionId,\n    fieldErrors: formErrors,\n    goToSignIn: onGoToSignIn,\n    handleInputBlur,\n    handleInputChange,\n    handleSubmit,\n    inviteToken,\n    isComplete,\n    isLoading,\n    isTokenInvalid,\n    isValid: isFormValid,\n    isValidatingToken,\n    meta,\n    subtitle,\n    title,\n    touched: touchedFields,\n    values: formValues,\n  };\n\n  // If children render prop is provided, use it for custom UI\n  if (children) {\n    return <div className={className}>{children(renderProps)}</div>;\n  }\n\n  // Default rendering\n\n  // Loading state during token validation\n  if (isValidatingToken) {\n    return (\n      <CardPrimitive className={cx(className, styles.card)} variant={variant}>\n        <CardPrimitive.Content>\n          <div className={(styles as Record<string, string>)['tokenValidationContainer']}>\n            <Spinner size=\"medium\" />\n            <Typography variant=\"body1\">Validating your invite link...</Typography>\n          </div>\n        </CardPrimitive.Content>\n      </CardPrimitive>\n    );\n  }\n\n  // Invalid token state\n  if (isTokenInvalid) {\n    return (\n      <CardPrimitive className={cx(className, styles.card)} variant={variant}>\n        <CardPrimitive.Header className={styles.header}>\n          <CardPrimitive.Title level={2} className={styles.title}>\n            Invalid Invite Link\n          </CardPrimitive.Title>\n        </CardPrimitive.Header>\n        <CardPrimitive.Content>\n          <AlertPrimitive variant=\"error\">\n            <AlertPrimitive.Title>Unable to verify invite</AlertPrimitive.Title>\n            <AlertPrimitive.Description>\n              {apiError?.message ||\n                'This invite link is invalid or has expired. Please contact your administrator for a new invite.'}\n            </AlertPrimitive.Description>\n          </AlertPrimitive>\n          {onGoToSignIn && (\n            <div className={(styles as Record<string, string>)['goToSignInContainer']}>\n              <Button variant=\"outline\" onClick={onGoToSignIn}>\n                Go to Sign In\n              </Button>\n            </div>\n          )}\n        </CardPrimitive.Content>\n      </CardPrimitive>\n    );\n  }\n\n  // Flow components (password form)\n  return (\n    <CardPrimitive className={cx(className, styles.card)} variant={variant}>\n      {(showTitle || showSubtitle) && (title || subtitle) && (\n        <CardPrimitive.Header className={styles.header}>\n          {showTitle && title && (\n            <CardPrimitive.Title level={2} className={styles.title}>\n              {title}\n            </CardPrimitive.Title>\n          )}\n          {showSubtitle && subtitle && (\n            <Typography variant=\"body1\" className={styles.subtitle}>\n              {subtitle}\n            </Typography>\n          )}\n        </CardPrimitive.Header>\n      )}\n      <CardPrimitive.Content>\n        {apiError && (\n          <div className={(styles as Record<string, string>)['errorContainer']}>\n            <AlertPrimitive variant=\"error\">\n              <AlertPrimitive.Description>{apiError.message}</AlertPrimitive.Description>\n            </AlertPrimitive>\n          </div>\n        )}\n        <div>\n          {componentsWithoutHeadings && componentsWithoutHeadings.length > 0\n            ? renderInviteUserComponents(\n                componentsWithoutHeadings,\n                formValues,\n                touchedFields,\n                formErrors,\n                isLoading,\n                isFormValid,\n                resetForm,\n                handleInputChange,\n                {\n                  _customRenderers: customRenderers,\n                  _theme: theme,\n                  onInputBlur: handleInputBlur,\n                  onSubmit: handleSubmit,\n                  size,\n                  variant,\n                },\n              )\n            : !isLoading && (\n                <AlertPrimitive variant=\"warning\">\n                  <Typography variant=\"body1\">No form components available</Typography>\n                </AlertPrimitive>\n              )}\n          {isLoading && (\n            <div className={(styles as Record<string, string>)['centeredSpinnerContainerSmall']}>\n              <Spinner size=\"small\" />\n            </div>\n          )}\n        </div>\n        {onGoToSignIn && (\n          <div className={(styles as Record<string, string>)['alreadyHaveAccountContainer']}>\n            <Typography variant=\"body2\">\n              Already have an account?{' '}\n              <Button\n                variant=\"text\"\n                onClick={onGoToSignIn}\n                className={(styles as Record<string, string>)['signInInlineButton']}\n              >\n                Sign In\n              </Button>\n            </Typography>\n          </div>\n        )}\n      </CardPrimitive.Content>\n    </CardPrimitive>\n  );\n};\n\nexport default BaseAcceptInvite;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0PA,MAAMA,oBAA+C,EACnD,aACA,aACA,UACA,YACA,SACA,cACA,cACA,YAAY,IACZ,UACA,aACA,OAAO,UACP,UAAU,YACV,YAAY,MACZ,eAAe,WAC0B;CACzC,MAAM,EAAC,MAAM,eAAe,mBAAmB,WAAUC,8BAAc;CACvE,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,EAAC,UAASC,0BAAU;CAC1B,MAAMC,wCAAmDC,yCAAyB;CAClF,MAAMC,SAAcC,wCAAU,OAAO,MAAM,KAAK,OAAO,KAAK,QAAQ;CACpE,MAAM,CAAC,WAAW,oCAAyB,MAAM;CACjD,MAAM,CAAC,mBAAmB,4CAAiC,KAAK;CAChE,MAAM,CAAC,gBAAgB,yCAA8B,MAAM;CAC3D,MAAM,CAAC,YAAY,qCAA0B,MAAM;CACnD,MAAM,CAAC,aAAa,sCAA4D,KAAK;CACrF,MAAM,CAAC,UAAU,mCAAsC,KAAK;CAC5D,MAAM,CAAC,YAAY,qCAAkD,EAAE,CAAC;CACxE,MAAM,CAAC,YAAY,qCAAkD,EAAE,CAAC;CACxE,MAAM,CAAC,eAAe,wCAAsD,EAAE,CAAC;CAC/E,MAAM,CAAC,aAAa,sCAA2B,KAAK;CACpD,MAAM,CAAC,gBAAgB,yCAA8B,MAAM;CAC3D,MAAMC,sCAA+C,KAAK;;;;;;AAO1D,4BAAgB;EACd,MAAMC,uBAAiD,aAAa,OAAc;AAClF,MAAI,CAAC,uBAAuB,oBAAoB,WAAW,EACzD;EAEF,MAAMC,SAAiC,EAAE;EACzC,MAAMC,UAAmC,EAAE;AAC3C,OAAK,MAAM,MAAM,oBACf,KAAI,EAAE,GAAG,cAAc,SAAS;AAC9B,UAAO,GAAG,cAAc,GAAG;AAC3B,WAAQ,GAAG,cAAc;;AAG7B,gBAAc,OAAO;AACrB,oBAAkB,UAAmC;GAAC,GAAG;GAAM,GAAG;GAAQ,EAAE;IAC3E,CAAC,YAAY,CAAC;CAEjB,MAAMC,gDAA0C,MAAM;;;;;AAMtD,4BAAgB;AACd,MAAI,CAAC,cAAe;AAEpB,GAAC,YAA2B;AAC1B,OAAI;IAEF,MAAMC,WAAgB,OADM,MAAM,mBAAmB,GACT,kBAAkB;AAC9D,QAAI,UAAU,eACZ,mBAAkB,UAAU,SAAS;aAE/B;AACR,sBAAkB,KAAK;;MAEvB;IACH,CAAC,cAAc,CAAC;;;;;CAMnB,MAAM,oBAAoB,OAAO,mBAAiD;AAChF,oBAAkB,UAAU;EAC5B,MAAMC,iBAAsB,MAAM,mBAAmB;AACrD,MAAI,eACF,KAAI,eACF,OAAM,eAAe,0BAA0B,kBAAkB,eAAe;MAEhF,OAAM,eAAe,6BAA6B,iBAAiB;;;;;;CASzE,MAAMC,sCACH,UAAe;EACd,MAAMC,eAAuBC,4CAAoB,OAAO,GAAG,yCAAyC;AAGpG,cAAY,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,aAAa,CAAC;AAGrE,YAAU,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,aAAa,CAAC;IAErE,CAAC,GAAG,QAAQ,CACb;;;;;CAMD,MAAMC,qDACH,aAAiE;AAChE,MAAI,CAAC,UAAU,MAAM,MAAM,WACzB,QAAO;AAGT,MAAI;GACF,MAAM,EAAC,6BAAcC,8CACnB,UACA,GACA;IACE,iBAAiB;IACjB,qBAAqB;IACtB,EACD,KACD;AAED,UAAO;IACL,GAAG;IACH,MAAM;KACJ,GAAG,SAAS;KACZ,YAAYC;KACb;IACF;UACK;AAEN,UAAO;;IAGX,CAAC,GAAG,SAAS,CACd;;;;;AAMD,2CAAiB;EACf,oBAAoB,eAAe;EACnC,uBAAuB,GAAG,OAAO;EACjC,eAAe;EACf,kBAAkB;AAChB,wBAAqB,MAAM;AAC3B,iBAAc;;EAEhB,UAAU,UAAe;AACvB,OAAI,CAAC,OAAO,WACV,mBAAkB,KAAK;AAEzB,wBAAqB,MAAM;AAC3B,eAAY,MAAM;;EAEpB,eAAe,aAAkB;AAC/B,kBAAe,SAAS;AACxB,OAAI,SAAS,eAAe,YAAY;AACtC,kBAAc,KAAK;AAEnB,SADoC,SAAS,MAAM,cAAc,SAAS,MAAM,MAAM,cAAc,EAAE,EAC7E,SAAS,EAChC,gBAAe,SAAS;UAErB;AAEL,mBAAe,SAAS;AACxB,kBAAc,EAAE,CAAC;AACjB,kBAAc,EAAE,CAAC;AACjB,qBAAiB,EAAE,CAAC;;;EAGxB,yBAAyB;AACvB,wBAAqB,KAAK;;EAE5B,UAAU,OAAO,YAAiB;GAKhC,MAAMC,WAAgB,2BAJG,MAAM,SAAS;IACtC,GAAG;IACH,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;IACjF,CAAC,CAC2D;AAC7D,SAAM,kBAAkB,SAAS,kBAAkB,KAAK;AACxD,UAAO;;EAET;EACD,CAAC;;;;CAKF,MAAMC,4CAAsC,MAAc,UAAkB;AAC1E,iBAAe,UAAe;GAAC,GAAG;IAAO,OAAO;GAAM,EAAE;AAExD,iBAAe,SAAc;GAC3B,MAAMC,YAAiB,EAAC,GAAG,MAAK;AAChC,UAAO,UAAU;AACjB,UAAO;IACP;AACF,iBAAe,KAAK;IACnB,EAAE,CAAC;;;;CAKN,MAAMC,0CAAoC,SAAiB;AACzD,oBAAkB,UAAe;GAAC,GAAG;IAAO,OAAO;GAAK,EAAE;IACzD,EAAE,CAAC;;;;CAKN,MAAMC,uCACH,iBAA0E;EACzE,MAAMf,SAAiC,EAAE;EAEzC,MAAM,sBAAsB,UAAsB;AAChD,SAAM,SAAS,SAAc;AAC3B,SACG,KAAK,SAAS,oBACb,KAAK,SAAS,gBACd,KAAK,SAAS,iBACd,KAAK,SAAS,iBACd,KAAK,SAAS,eACd,KAAK,SAAS,gBACd,KAAK,SAAS,aAChB,KAAK,KACL;KACA,MAAMgB,QAAa,WAAW,KAAK;AACnC,SAAI,KAAK,aAAa,CAAC,SAAS,MAAM,MAAM,KAAK,IAC/C,QAAO,KAAK,OAAO,EAAE,mCAAmC;cAC/C,OAAO;MAEhB,MAAM,iEAAwC,KAAK,WAAW;AAC9D,UAAI,eAAe;OACjB,MAAM,UAAU,cAAc,MAAM;AACpC,WAAI,QACF,QAAO,KAAK,OAAO,EAAE,QAAQ;;;;AAKrC,QAAI,KAAK,cAAc,MAAM,QAAQ,KAAK,WAAW,CACnD,oBAAmB,KAAK,WAAW;KAErC;;AAGJ,qBAAmBN,aAAW;AAE9B,SAAO;GAAC;GAAQ,SAAS,OAAO,KAAK,OAAO,CAAC,WAAW;GAAE;IAE5D,CAAC,YAAY,EAAE,CAChB;;;;CAKD,MAAMO,sCACJ,OAAO,WAAgB,SAA+B;AACpD,MAAI,CAAC,YACH;EAKF,MAAMC,aAAkB,aADA,YAAY,MAAM,cAAc,EAAE,CACV;AAEhD,MAAI,CAAC,WAAW,SAAS;AACvB,kBAAe,MAAM;AACrB,iBAAc,WAAW,OAAO;GAEhC,MAAMjB,UAAmC,EAAE;AAC3C,UAAO,KAAK,WAAW,OAAO,CAAC,SAAS,QAAa;AACnD,YAAQ,OAAO;KACf;AACF,qBAAkB,UAAe;IAAC,GAAG;IAAM,GAAG;IAAQ,EAAE;AACxD;;AAGF,eAAa,KAAK;AAClB,cAAY,KAAK;AAEjB,MAAI;GAEF,MAAMkB,SAAc,EAAC,GAAI,QAAQ,YAAY;GAK7C,MAAM,wBAAyB,aAAa,MAAM,kBAA0C,EAAE;AAC9F,OAAI,sBAAsB,iBACxB,KAAI;IACF,MAAMC,MAAW,sBAAsB;IACvC,MAAMC,WAAkB,OAAO,QAAQ,WAAW,KAAK,MAAM,IAAI,GAAG,IAAI,YAAY;IACpF,MAAM,SAAS,WAAW,SAAS,aAAa,KAAK;IACrD,MAAM,YAAY;KAChB,UAAU,CAAC;KACX,GAAI,SAAS,EAAC,QAAQC,qCAAiB,oBAAmB,GAAG,EAAE;KAC/D,UAAU,SAAS,KAAK,OAAY;MAClC,UAAU,CAAC;MACX,aAAa,EAAE;MACf,UAAU,CACR,IAAI,EAAE,aAAa,EAAE,EAAE,KAAK,OAAY;OAAC,UAAU,CAAC;OAAQ,MAAM,EAAE;OAAK,EAAE,EAC3E,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,MAAW;OACpC,MAAM,MAAM,kBAAkB,EAAE,UAAU,IAAI,EAAE;AAChD,cAAO;QAAC,UAAU,CAAC,UAAU,OAAO,SAAS;QAAQ,MAAM,EAAE;QAAK;QAClE,CACH;MACF,EAAE;KACJ;AACD,WAAO,oBAAoB,KAAK,UAAU,UAAU;AACpD,WAAO,KAAK,OAAO,CAAC,SAAS,MAAc;AACzC,SAAI,EAAE,WAAW,kBAAkB,CAAE,QAAO,OAAO;MACnD;WACI;GAKV,MAAMC,UAA+B;IACnC,aAAa,YAAY;IACzB;IACA,SAAS;IACT,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;IACjF;AAGD,OAAI,WAAW,GACb,SAAQ,YAAY,UAAU;GAIhC,MAAMZ,WAAgB,2BADG,MAAM,SAAS,QAAQ,CACa;AAC7D,kBAAe,SAAS;AAExB,SAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,OAAI,SAAS,SAAS,eAAe;IACnC,MAAMa,cAAmB,SAAS,MAAM,eAAe,UAAU;AACjE,QAAI,eAAe,OAAO,WAAW,aAAa;AAEhD,yCAAsB,aAAa,OAAO;AAC1C;;;AAKJ,OAAI,SAAS,eAAe,YAAY;AACtC,kBAAc,KAAK;AAEnB,SADoC,SAAS,MAAM,cAAc,SAAS,MAAM,MAAM,cAAc,EAAE,EAC7E,SAAS,EAChC,gBAAe,SAAS;QAExB,eAAc;AAEhB;;AAIF,OAAI,SAAS,eAAe,SAAS;AACnC,gBAAY,SAAS;AACrB;;AAIF,kBAAe,SAAS;AACxB,iBAAc,EAAE,CAAC;AACjB,oBAAiB,EAAE,CAAC;AAGpB,OAAI,UAAU,MACZ,aAAY,SAAS;WAEhB,KAAK;AACZ,eAAY,IAAI;YACR;AACR,gBAAa,MAAM;;IAGvB;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;;;;CAKD,MAAM,yCAA8B;AAClC,gBAAc,EAAE,CAAC;AACjB,gBAAc,EAAE,CAAC;AACjB,mBAAiB,EAAE,CAAC;IACnB,EAAE,CAAC;;;;AAKN,4BAAgB;AAEd,MAAI,4BAA4B,QAC9B;AAMF,MADmC,IAAI,gBAAgB,OAAO,SAAS,OAAO,CAChE,IAAI,OAAO,CACvB;AAIF,MAAI,CAAC,eAAe,CAAC,aAAa;AAChC,wBAAqB,MAAM;AAC3B,qBAAkB,KAAK;AACvB,+BAAY,IAAI,MAAM,2DAA2D,CAAC;AAClF;;AAGF,8BAA4B,UAAU;AAEtC,GAAC,YAA2B;AAC1B,wBAAqB,KAAK;AAC1B,eAAY,KAAK;AAEjB,OAAI;AAEF,QAAI,YACF,gBAAe,QAAQ,GAAG,OAAO,gBAAgB,YAAY;IAa/D,MAAMb,WAAgB,2BADG,MAAM,SARV;KACnB;KACA,QAAQ,EACN,aACD;KACD,SAAS;KACV,CAE+C,CACa;AAC7D,mBAAe,SAAS;AAExB,UAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,QAAI,SAAS,eAAe,SAAS;AACnC,uBAAkB,KAAK;AACvB,iBAAY,SAAS;AACrB;;AAIF,mBAAe,SAAS;AAGxB,QAAI,UAAU,MACZ,aAAY,SAAS;YAEhB,KAAK;AACZ,sBAAkB,KAAK;AACvB,gBAAY,IAAI;aACR;AACR,yBAAqB,MAAM;;MAE3B;IACH;EAAC;EAAa;EAAa;EAAU;EAAc;EAAa;EAA2B,CAAC;;;;CAK/F,MAAMc,0CAAoC,iBAA2D;EACnG,IAAIC;EACJ,IAAIC;AAEJ,eAAW,SAAS,SAAc;AAChC,OAAI,KAAK,SAAS,QAChB;QAAI,KAAK,YAAY,eAAe,CAACC,QACnC,WAAQ,KAAK;cACH,KAAK,YAAY,eAAe,KAAK,YAAY,iBAAiB,CAACC,WAC7E,cAAW,KAAK;;IAGpB;AAEF,SAAO;GAAC;GAAU;GAAM;IACvB,EAAE,CAAC;;;;CAKN,MAAMC,yCACH,iBACCpB,aAAW,QACR,SAAc,EAAE,KAAK,SAAS,WAAW,KAAK,YAAY,eAAe,KAAK,YAAY,cAC5F,EACH,EAAE,CACH;CAGD,MAAMqB,aAAkB,aAAa,MAAM,cAAc,aAAa,MAAM,MAAM,cAAc,EAAE;CAClG,MAAM,EAAC,OAAO,aAAY,gBAAgB,WAAW;CACrD,MAAMC,4BAAiC,eAAe,WAAW;CAIjE,MAAMC,cAA2C;EAC/C,gBAJ2C,aAAa,MAAM,kBAA0C,EAAE;EAK1G;EACA,OAAO;EACP;EACA,aAAa;EACb,YAAY;EACZ;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT;EACA;EACA;EACA;EACA,SAAS;EACT,QAAQ;EACT;AAGD,KAAI,SACF,QAAO,2CAAC;EAAe;YAAY,SAAS,YAAY;GAAO;AAMjE,KAAI,kBACF,QACE,2CAACC;EAAc,WAAWC,mBAAG,WAAW,OAAO,KAAK;EAAW;YAC7D,2CAACD,qBAAc,qBACb,4CAAC;GAAI,WAAY,OAAkC;cACjD,2CAACE,2BAAQ,MAAK,WAAW,EACzB,2CAACC;IAAW,SAAQ;cAAQ;KAA2C;IACnE,GACgB;GACV;AAKpB,KAAI,eACF,QACE,4CAACH;EAAc,WAAWC,mBAAG,WAAW,OAAO,KAAK;EAAW;aAC7D,2CAACD,qBAAc;GAAO,WAAW,OAAO;aACtC,2CAACA,qBAAc;IAAM,OAAO;IAAG,WAAW,OAAO;cAAO;KAElC;IACD,EACvB,4CAACA,qBAAc,sBACb,4CAACI;GAAe,SAAQ;cACtB,2CAACA,sBAAe,mBAAM,4BAA8C,EACpE,2CAACA,sBAAe,yBACb,UAAU,WACT,oGACyB;IACd,EAChB,gBACC,2CAAC;GAAI,WAAY,OAAkC;aACjD,2CAACC;IAAO,SAAQ;IAAU,SAAS;cAAc;KAExC;IACL,IAEc;GACV;AAKpB,QACE,4CAACL;EAAc,WAAWC,mBAAG,WAAW,OAAO,KAAK;EAAW;cAC3D,aAAa,kBAAkB,SAAS,aACxC,4CAACD,qBAAc;GAAO,WAAW,OAAO;cACrC,aAAa,SACZ,2CAACA,qBAAc;IAAM,OAAO;IAAG,WAAW,OAAO;cAC9C;KACmB,EAEvB,gBAAgB,YACf,2CAACG;IAAW,SAAQ;IAAQ,WAAW,OAAO;cAC3C;KACU;IAEM,EAEzB,4CAACH,qBAAc;GACZ,YACC,2CAAC;IAAI,WAAY,OAAkC;cACjD,2CAACI;KAAe,SAAQ;eACtB,2CAACA,sBAAe,yBAAa,SAAS,UAAqC;MAC5D;KACb;GAER,4CAAC,oBACE,6BAA6B,0BAA0B,SAAS,IAC7DE,qDACE,2BACA,YACA,eACA,YACA,WACA,aACA,WACA,mBACA;IACE,kBAAkB;IAClB,QAAQ;IACR,aAAa;IACb,UAAU;IACV;IACA;IACD,CACF,GACD,CAAC,aACC,2CAACF;IAAe,SAAQ;cACtB,2CAACD;KAAW,SAAQ;eAAQ;MAAyC;KACtD,EAEtB,aACC,2CAAC;IAAI,WAAY,OAAkC;cACjD,2CAACD,2BAAQ,MAAK,UAAU;KACpB,IAEJ;GACL,gBACC,2CAAC;IAAI,WAAY,OAAkC;cACjD,4CAACC;KAAW,SAAQ;;MAAQ;MACD;MACzB,2CAACE;OACC,SAAQ;OACR,SAAS;OACT,WAAY,OAAkC;iBAC/C;QAEQ;;MACE;KACT;MAEc;GACV;;AAIpB,+BAAe"}
+{"version":3,"file":"BaseAcceptInvite.cjs","names":["BaseAcceptInvite: FC<BaseAcceptInviteProps>","useThunderID","useTranslation","useTheme","customRenderers: ComponentRendererMap","ComponentRendererContext","styles: any","useStyles","challengeTokenRef: any","responseFieldErrors: FieldError[] | undefined","errors: Record<string, string>","touched: Record<string, boolean>","tokenValidationAttemptedRef: any","tempData: any","storageManager: any","handleError: any","errorMessage: string","extractErrorMessage","normalizeFlowResponseLocal: any","normalizeFlowResponse","components","response: any","handleInputChange: any","newErrors: any","handleInputBlur: any","validateForm: any","value: any","handleSubmit: any","validation: any","inputs: any","raw: any","purposes: any[]","isConsentApprovalBlocked","ConsentConstants","CONSENT_MODIFIED_KEY_PREFIX","CONSENT_INVALID_KEY_PREFIX","payload: Record<string, any>","redirectURL: any","extractHeadings: any","title: string | undefined","subtitle: string | undefined","title","subtitle","filterHeadings: any","components: any","componentsWithoutHeadings: any","renderProps: BaseAcceptInviteRenderProps","CardPrimitive","cx","Spinner","Typography","AlertPrimitive","Button","renderInviteUserComponents"],"sources":["../../../../../src/components/auth/AcceptInvite/BaseAcceptInvite.tsx"],"sourcesContent":["// Copyright 2025-2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  ConsentConstants,\n  FieldError,\n  FlowExecutionError,\n  FlowMetadataResponse,\n  Preferences,\n  buildValidatorFromRules,\n  CONSENT_INVALID_KEY_PREFIX,\n  CONSENT_MODIFIED_KEY_PREFIX,\n  getConsentElementDecision,\n} from '@thunderid/browser';\nimport {FC, ReactElement, ReactNode, useCallback, useContext, useEffect, useRef, useState} from 'react';\nimport useStyles from './BaseAcceptInvite.styles';\nimport ComponentRendererContext, {\n  ComponentRendererMap,\n} from '../../../contexts/ComponentRenderer/ComponentRendererContext';\nimport useTheme from '../../../contexts/Theme/useTheme';\nimport useThunderID from '../../../contexts/ThunderID/useThunderID';\nimport {useOAuthCallback} from '../../../hooks/auth/useOAuthCallback';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {cx} from '../../../styles/emotion';\nimport {normalizeFlowResponse, extractErrorMessage} from '../../../utils/flowTransformer';\nimport isConsentApprovalBlocked from '../../../utils/isConsentApprovalBlocked';\nimport {initiateOAuthRedirect} from '../../../utils/oauth';\nimport AlertPrimitive from '../../primitives/Alert/Alert';\nimport Button from '../../primitives/Button/Button';\n// eslint-disable-next-line import/no-named-as-default\nimport CardPrimitive, {CardProps} from '../../primitives/Card/Card';\nimport Spinner from '../../primitives/Spinner/Spinner';\nimport Typography from '../../primitives/Typography/Typography';\nimport {renderInviteUserComponents} from '../flow/AuthOptionFactory';\n\n/**\n * Flow response structure from the backend.\n */\nexport interface AcceptInviteFlowResponse {\n  challengeToken?: string;\n  data?: {\n    additionalData?: Record<string, string>;\n    components?: any[];\n    fieldErrors?: FieldError[];\n    meta?: {\n      components?: any[];\n    };\n    redirectURL?: string;\n  };\n  error?: FlowExecutionError;\n  executionId: string;\n  flowStatus: 'INCOMPLETE' | 'COMPLETE' | 'ERROR';\n  type?: 'VIEW' | 'REDIRECTION';\n}\n\n/**\n * Render props for custom UI rendering of AcceptInvite.\n */\nexport interface BaseAcceptInviteRenderProps {\n  /**\n   * Additional data from the current flow step (e.g. consentPrompt for consent nodes).\n   */\n  additionalData: Record<string, any>;\n\n  /**\n   * Flow components from the current step.\n   */\n  components: any[];\n\n  /**\n   * API error (if any).\n   */\n  error?: Error | null;\n\n  /**\n   * Current flow ID from URL.\n   */\n  executionId?: string;\n\n  /**\n   * Field validation errors.\n   */\n  fieldErrors: Record<string, string>;\n\n  /**\n   * Navigate to sign in page.\n   */\n  goToSignIn?: () => void;\n\n  /**\n   * Function to handle input blur.\n   */\n  handleInputBlur: (name: string) => void;\n\n  /**\n   * Function to handle input changes.\n   */\n  handleInputChange: (name: string, value: string) => void;\n\n  /**\n   * Function to handle form submission.\n   */\n  handleSubmit: (component: any, data?: Record<string, any>) => Promise<void>;\n\n  /**\n   * Invite token from URL.\n   */\n  inviteToken?: string;\n\n  /**\n   * Whether the flow has completed successfully.\n   */\n  isComplete: boolean;\n\n  /**\n   * Loading state.\n   */\n  isLoading: boolean;\n\n  /**\n   * Whether the token validation failed.\n   */\n  isTokenInvalid: boolean;\n\n  /**\n   * Whether the form is valid.\n   */\n  isValid: boolean;\n\n  /**\n   * Whether the invite token is being validated.\n   */\n  isValidatingToken: boolean;\n\n  /**\n   * Flow metadata returned by the platform (v2 only). `null` while loading or unavailable.\n   */\n  meta: FlowMetadataResponse | null;\n\n  /**\n   * Subtitle for the current step.\n   */\n  subtitle?: string;\n\n  /**\n   * Title for the current step.\n   */\n  title?: string;\n\n  /**\n   * Touched fields.\n   */\n  touched: Record<string, boolean>;\n\n  /**\n   * Form values for the current step.\n   */\n  values: Record<string, string>;\n}\n\n/**\n * Props for the BaseAcceptInvite component.\n */\nexport interface BaseAcceptInviteProps {\n  /**\n   * Render props function for custom UI.\n   * If not provided, default UI will be rendered.\n   */\n  children?: (props: BaseAcceptInviteRenderProps) => ReactNode;\n\n  /**\n   * Custom CSS class name.\n   */\n  className?: string;\n\n  /**\n   * Flow ID from the invite link URL.\n   */\n  executionId?: string;\n\n  /**\n   * Invite token from the invite link URL.\n   */\n  inviteToken?: string;\n\n  /**\n   * Callback when the flow completes successfully.\n   */\n  onComplete?: () => void;\n\n  /**\n   * Callback when an error occurs.\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Callback when the flow state changes.\n   */\n  onFlowChange?: (response: AcceptInviteFlowResponse) => void;\n\n  /**\n   * Callback to navigate to sign in page.\n   */\n  onGoToSignIn?: () => void;\n\n  /**\n   * Function to submit flow step data.\n   * This makes a request to the flow/execute endpoint.\n   */\n  onSubmit: (payload: Record<string, any>) => Promise<AcceptInviteFlowResponse>;\n\n  /**\n   * Component-level preferences to override global i18n and theme settings.\n   * Preferences are deep-merged with global ones, with component preferences\n   * taking precedence. Affects this component and all its descendants.\n   */\n  preferences?: Preferences;\n\n  /**\n   * Whether to show the subtitle.\n   */\n  showSubtitle?: boolean;\n\n  /**\n   * Whether to show the title.\n   */\n  showTitle?: boolean;\n\n  /**\n   * Size variant for the component.\n   */\n  size?: 'small' | 'medium' | 'large';\n\n  /**\n   * Theme variant for the component.\n   */\n  variant?: CardProps['variant'];\n}\n\n/**\n * Base component for accept invite flow (end-user).\n * Handles the flow logic for validating an invite token and setting a password.\n *\n * When no children are provided, renders a default UI with:\n * - Loading spinner during token validation\n * - Error alerts for invalid/expired tokens\n * - Password form with validation\n * - Success state with sign-in redirect\n *\n * Flow steps handled:\n * 1. Validate invite token (automatic on mount)\n * 2. Password input\n * 3. Flow completion\n */\nconst BaseAcceptInvite: FC<BaseAcceptInviteProps> = ({\n  executionId,\n  inviteToken,\n  onSubmit,\n  onComplete,\n  onError,\n  onFlowChange,\n  onGoToSignIn,\n  className = '',\n  children,\n  preferences,\n  size = 'medium',\n  variant = 'outlined',\n  showTitle = true,\n  showSubtitle = true,\n}: BaseAcceptInviteProps): ReactElement => {\n  const {meta, isInitialized, getStorageManager, vendor} = useThunderID();\n  const {t} = useTranslation(preferences?.i18n);\n  const {theme} = useTheme();\n  const customRenderers: ComponentRendererMap = useContext(ComponentRendererContext);\n  const styles: any = useStyles(theme, theme.vars.colors.text.primary);\n  const [isLoading, setIsLoading] = useState(false);\n  const [isValidatingToken, setIsValidatingToken] = useState(true);\n  const [isTokenInvalid, setIsTokenInvalid] = useState(false);\n  const [isComplete, setIsComplete] = useState(false);\n  const [currentFlow, setCurrentFlow] = useState<AcceptInviteFlowResponse | null>(null);\n  const [apiError, setApiError] = useState<Error | null>(null);\n  const [formValues, setFormValues] = useState<Record<string, string>>({});\n  const [formErrors, setFormErrors] = useState<Record<string, string>>({});\n  const [touchedFields, setTouchedFields] = useState<Record<string, boolean>>({});\n  const [isFormValid, setIsFormValid] = useState(true);\n  const [isStorageReady, setIsStorageReady] = useState(false);\n  const challengeTokenRef: any = useRef<string | null>(null);\n\n  /**\n   * Project server-side validation errors from the most recent flow response into\n   * the local formErrors state. First error per field wins; affected fields are\n   * marked touched so errors render immediately.\n   */\n  useEffect(() => {\n    const responseFieldErrors: FieldError[] | undefined = (currentFlow?.data as any)?.fieldErrors;\n    if (!responseFieldErrors || responseFieldErrors.length === 0) {\n      return;\n    }\n    const errors: Record<string, string> = {};\n    const touched: Record<string, boolean> = {};\n    for (const fe of responseFieldErrors) {\n      if (!(fe.identifier in errors)) {\n        errors[fe.identifier] = fe.message;\n        touched[fe.identifier] = true;\n      }\n    }\n    setFormErrors(errors);\n    setTouchedFields((prev: Record<string, boolean>) => ({...prev, ...touched}));\n  }, [currentFlow]);\n\n  const tokenValidationAttemptedRef: any = useRef(false);\n\n  /**\n   * Restore any challenge token persisted before an OAuth redirect.\n   * Waits for SDK initialization before reading from storage.\n   */\n  useEffect(() => {\n    if (!isInitialized) return;\n\n    (async (): Promise<void> => {\n      try {\n        const storageManager: any = await getStorageManager();\n        const tempData: any = await storageManager?.getTemporaryData();\n        if (tempData?.challengeToken) {\n          challengeTokenRef.current = tempData.challengeToken as string;\n        }\n      } finally {\n        setIsStorageReady(true);\n      }\n    })();\n  }, [isInitialized]);\n\n  /**\n   * Updates challengeTokenRef immediately (stale-closure safe) and persists via\n   * the provider's StorageManager so the token survives OAuth redirects.\n   */\n  const setChallengeToken = async (challengeToken: string | null): Promise<void> => {\n    challengeTokenRef.current = challengeToken;\n    const storageManager: any = await getStorageManager();\n    if (storageManager) {\n      if (challengeToken) {\n        await storageManager.setTemporaryDataParameter('challengeToken', challengeToken);\n      } else {\n        await storageManager.removeTemporaryDataParameter('challengeToken');\n      }\n    }\n  };\n\n  /**\n   * Handle error responses and extract meaningful error messages.\n   * Uses the transformer's extractErrorMessage function for consistency.\n   */\n  const handleError: any = useCallback(\n    (error: any) => {\n      const errorMessage: string = extractErrorMessage(error, t, 'components.acceptInvite.errors.generic');\n\n      // Set the API error state\n      setApiError(error instanceof Error ? error : new Error(errorMessage));\n\n      // Call the onError callback if provided\n      onError?.(error instanceof Error ? error : new Error(errorMessage));\n    },\n    [t, onError],\n  );\n\n  /**\n   * Normalize flow response to ensure component-driven format.\n   * Transforms data.meta.components to data.components.\n   */\n  const normalizeFlowResponseLocal: any = useCallback(\n    (response: AcceptInviteFlowResponse): AcceptInviteFlowResponse => {\n      if (!response?.data?.meta?.components) {\n        return response;\n      }\n\n      try {\n        const {components} = normalizeFlowResponse(\n          response,\n          t,\n          {\n            defaultErrorKey: 'components.acceptInvite.errors.generic',\n            resolveTranslations: false,\n          },\n          meta,\n        );\n\n        return {\n          ...response,\n          data: {\n            ...response.data,\n            components: components as any,\n          },\n        };\n      } catch {\n        // If transformer throws (e.g., error response), return as-is\n        return response;\n      }\n    },\n    [t, children],\n  );\n\n  /**\n   * Handle OAuth callback when returning from OAuth provider.\n   * This hook processes the authorization code and continues the flow.\n   */\n  useOAuthCallback({\n    currentExecutionId: executionId ?? null,\n    executionIdStorageKey: `${vendor}_execution_id`,\n    isInitialized: isStorageReady,\n    onComplete: () => {\n      setIsValidatingToken(false);\n      onComplete?.();\n    },\n    onError: (error: any) => {\n      if (!error?.flowStatus) {\n        setIsTokenInvalid(true);\n      }\n      setIsValidatingToken(false);\n      handleError(error);\n    },\n    onFlowChange: (response: any) => {\n      onFlowChange?.(response);\n      if (response.flowStatus === 'COMPLETE') {\n        setIsComplete(true);\n        const completionComponents: any[] = response.data?.components || response.data?.meta?.components || [];\n        if (completionComponents.length > 0) {\n          setCurrentFlow(response);\n        }\n      } else {\n        // Initialize currentFlow for next steps if not complete\n        setCurrentFlow(response);\n        setFormValues({});\n        setFormErrors({});\n        setTouchedFields({});\n      }\n    },\n    onProcessingStart: () => {\n      setIsValidatingToken(true);\n    },\n    onSubmit: async (payload: any) => {\n      const rawResponse: any = await onSubmit({\n        ...payload,\n        ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n      });\n      const response: any = normalizeFlowResponseLocal(rawResponse);\n      await setChallengeToken(response.challengeToken ?? null);\n      return response;\n    },\n    tokenValidationAttemptedRef,\n  });\n\n  /**\n   * Handle input value changes.\n   */\n  const handleInputChange: any = useCallback((name: string, value: string) => {\n    setFormValues((prev: any) => ({...prev, [name]: value}));\n    // Clear error when user starts typing\n    setFormErrors((prev: any) => {\n      const newErrors: any = {...prev};\n      delete newErrors[name];\n      return newErrors;\n    });\n    setIsFormValid(true);\n  }, []);\n\n  /**\n   * Handle input blur.\n   */\n  const handleInputBlur: any = useCallback((name: string) => {\n    setTouchedFields((prev: any) => ({...prev, [name]: true}));\n  }, []);\n\n  /**\n   * Validate required fields based on components.\n   */\n  const validateForm: any = useCallback(\n    (components: any[]): {errors: Record<string, string>; isValid: boolean} => {\n      const errors: Record<string, string> = {};\n\n      const validateComponents = (comps: any[]): any => {\n        comps.forEach((comp: any) => {\n          if (\n            (comp.type === 'PASSWORD_INPUT' ||\n              comp.type === 'TEXT_INPUT' ||\n              comp.type === 'EMAIL_INPUT' ||\n              comp.type === 'PHONE_INPUT' ||\n              comp.type === 'OTP_INPUT' ||\n              comp.type === 'DATE_INPUT' ||\n              comp.type === 'SELECT') &&\n            comp.ref\n          ) {\n            const value: any = formValues[comp.ref];\n            if (comp.required && (!value || value.trim() === '')) {\n              errors[comp.ref] = t('validations.required.field.error');\n            } else if (value) {\n              // Evaluate declarative validation rules from meta.components[].validation.\n              const ruleValidator = buildValidatorFromRules(comp.validation);\n              if (ruleValidator) {\n                const message = ruleValidator(value);\n                if (message) {\n                  errors[comp.ref] = t(message);\n                }\n              }\n            }\n          }\n          if (comp.components && Array.isArray(comp.components)) {\n            validateComponents(comp.components);\n          }\n        });\n      };\n\n      validateComponents(components);\n\n      return {errors, isValid: Object.keys(errors).length === 0};\n    },\n    [formValues, t],\n  );\n\n  /**\n   * Handle form submission.\n   */\n  const handleSubmit: any = useCallback(\n    async (component: any, data?: Record<string, any>) => {\n      if (!currentFlow) {\n        return;\n      }\n\n      // Validate form before submission\n      const components: any = currentFlow.data?.components || [];\n      const validation: any = validateForm(components);\n\n      if (!validation.isValid) {\n        setIsFormValid(false);\n        setFormErrors(validation.errors);\n        // Mark all fields as touched\n        const touched: Record<string, boolean> = {};\n        Object.keys(validation.errors).forEach((key: any) => {\n          touched[key] = true;\n        });\n        setTouchedFields((prev: any) => ({...prev, ...touched}));\n        return;\n      }\n\n      setIsLoading(true);\n      setApiError(null);\n\n      try {\n        // Build payload with form values\n        const inputs: any = {...(data || formValues)};\n\n        // Auto-compile consent_decisions if we are on a consent prompt step.\n        // Mirrors the same logic in SignIn to ensure the server receives a\n        // properly structured JSON payload rather than individual checkbox keys.\n        const currentAdditionalData = (currentFlow?.data?.additionalData as Record<string, any>) ?? {};\n        if (currentAdditionalData['consentPrompt']) {\n          try {\n            const raw: any = currentAdditionalData['consentPrompt'];\n            const purposes: any[] = typeof raw === 'string' ? JSON.parse(raw) : raw.purposes || raw;\n            const isDeny = component?.variant?.toLowerCase() !== 'primary';\n            // Approval waits while an approved authorization detail shows a value that cannot be submitted\n            // eslint-disable-next-line @typescript-eslint/no-unsafe-argument\n            if (!isDeny && isConsentApprovalBlocked(purposes, inputs)) {\n              return;\n            }\n            const decisions = {\n              approved: !isDeny,\n              ...(isDeny ? {reason: ConsentConstants.REASON_USER_DENIED} : {}),\n              purposes: purposes.map((p: any) => ({\n                approved: !isDeny,\n                purposeName: p.purposeName,\n                elements: [\n                  ...(p.essential || []).map((e: any) => ({approved: !isDeny, name: e.name})),\n                  ...(p.optional || []).map((e: any) => {\n                    const key = `__consent_opt__${p.purposeId}__${e.name}`;\n                    // eslint-disable-next-line @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-member-access\n                    return getConsentElementDecision(p.purposeId, e, !isDeny && inputs[key] === 'true', inputs);\n                  }),\n                ],\n              })),\n            };\n            inputs.consent_decisions = JSON.stringify(decisions);\n            Object.keys(inputs).forEach((k: string) => {\n              if (\n                k.startsWith('__consent_opt__') ||\n                k.startsWith(CONSENT_MODIFIED_KEY_PREFIX) ||\n                k.startsWith(CONSENT_INVALID_KEY_PREFIX)\n              ) {\n                // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access\n                delete inputs[k];\n              }\n            });\n          } catch {\n            // Leave inputs as-is if consent building fails\n          }\n        }\n\n        const payload: Record<string, any> = {\n          executionId: currentFlow.executionId,\n          inputs,\n          verbose: true,\n          ...(challengeTokenRef.current ? {challengeToken: challengeTokenRef.current} : {}),\n        };\n\n        // Add action ID if component has one\n        if (component?.id) {\n          payload['action'] = component.id;\n        }\n\n        const rawResponse: any = await onSubmit(payload);\n        const response: any = normalizeFlowResponseLocal(rawResponse);\n        onFlowChange?.(response);\n\n        await setChallengeToken(response.challengeToken ?? null);\n\n        // Handle OAuth redirect response\n        if (response.type === 'REDIRECTION') {\n          const redirectURL: any = response.data?.redirectURL || response?.redirectURL;\n          if (redirectURL && typeof window !== 'undefined') {\n            // Initiate OAuth redirect with secure state management\n            initiateOAuthRedirect(redirectURL, vendor);\n            return;\n          }\n        }\n\n        // Check for completion\n        if (response.flowStatus === 'COMPLETE') {\n          setIsComplete(true);\n          const completionComponents: any[] = response.data?.components || response.data?.meta?.components || [];\n          if (completionComponents.length > 0) {\n            setCurrentFlow(response);\n          } else {\n            onComplete?.();\n          }\n          return;\n        }\n\n        // Check for error status\n        if (response.flowStatus === 'ERROR') {\n          handleError(response);\n          return;\n        }\n\n        // Update current flow and reset form state for next step, preserving input values\n        setCurrentFlow(response);\n        setFormErrors({});\n        setTouchedFields({});\n\n        // Display error from INCOMPLETE response\n        if (response?.error) {\n          handleError(response);\n        }\n      } catch (err) {\n        handleError(err);\n      } finally {\n        setIsLoading(false);\n      }\n    },\n    [\n      currentFlow,\n      formValues,\n      validateForm,\n      onSubmit,\n      onFlowChange,\n      onComplete,\n      handleError,\n      normalizeFlowResponseLocal,\n    ],\n  );\n\n  /**\n   * reset form values, errors, and touched fields to initial state\n   */\n  const resetForm = useCallback(() => {\n    setFormValues({});\n    setFormErrors({});\n    setTouchedFields({});\n  }, []);\n\n  /**\n   * Validate invite token on component mount.\n   */\n  useEffect(() => {\n    // Skip validation if already validated\n    if (tokenValidationAttemptedRef.current) {\n      return;\n    }\n\n    // If an OAuth code is present, this is a return from an OAuth redirect.\n    // useOAuthCallback will handle the code — skip the initial invite validation.\n    const urlParams: URLSearchParams = new URLSearchParams(window.location.search);\n    if (urlParams.get('code')) {\n      return;\n    }\n\n    // Validate required params for initial invite link\n    if (!executionId || !inviteToken) {\n      setIsValidatingToken(false);\n      setIsTokenInvalid(true);\n      handleError(new Error('Invalid invite link. Missing executionId or inviteToken.'));\n      return;\n    }\n\n    tokenValidationAttemptedRef.current = true;\n\n    (async (): Promise<void> => {\n      setIsValidatingToken(true);\n      setApiError(null);\n\n      try {\n        // Store executionId in sessionStorage for OAuth callback\n        if (executionId) {\n          sessionStorage.setItem(`${vendor}_execution_id`, executionId);\n        }\n\n        // Send the invite token to validate and continue the flow\n        const payload: any = {\n          executionId,\n          inputs: {\n            inviteToken,\n          },\n          verbose: true,\n        };\n\n        const rawResponse: any = await onSubmit(payload);\n        const response: any = normalizeFlowResponseLocal(rawResponse);\n        onFlowChange?.(response);\n\n        await setChallengeToken(response.challengeToken ?? null);\n\n        // Check for error (invalid token)\n        if (response.flowStatus === 'ERROR') {\n          setIsTokenInvalid(true);\n          handleError(response);\n          return;\n        }\n\n        // Token is valid, show the password form\n        setCurrentFlow(response);\n\n        // Display error from INCOMPLETE response\n        if (response?.error) {\n          handleError(response);\n        }\n      } catch (err) {\n        setIsTokenInvalid(true);\n        handleError(err);\n      } finally {\n        setIsValidatingToken(false);\n      }\n    })();\n  }, [executionId, inviteToken, onSubmit, onFlowChange, handleError, normalizeFlowResponseLocal]);\n\n  /**\n   * Extract title and subtitle from components.\n   */\n  const extractHeadings: any = useCallback((components: any[]): {subtitle?: string; title?: string} => {\n    let title: string | undefined;\n    let subtitle: string | undefined;\n\n    components.forEach((comp: any) => {\n      if (comp.type === 'TEXT') {\n        if (comp.variant === 'HEADING_1' && !title) {\n          title = comp.label;\n        } else if ((comp.variant === 'HEADING_2' || comp.variant === 'SUBTITLE_1') && !subtitle) {\n          subtitle = comp.label;\n        }\n      }\n    });\n\n    return {subtitle, title};\n  }, []);\n\n  /**\n   * Filter out heading components for default rendering.\n   */\n  const filterHeadings: any = useCallback(\n    (components: any[]): any[] =>\n      components.filter(\n        (comp: any) => !(comp.type === 'TEXT' && (comp.variant === 'HEADING_1' || comp.variant === 'HEADING_2')),\n      ),\n    [],\n  );\n\n  // Get components from normalized response, with fallback to meta.components\n  const components: any = currentFlow?.data?.components || currentFlow?.data?.meta?.components || [];\n  const {title, subtitle} = extractHeadings(components);\n  const componentsWithoutHeadings: any = filterHeadings(components);\n  const additionalData: Record<string, any> = (currentFlow?.data?.additionalData as Record<string, any>) ?? {};\n\n  // Render props\n  const renderProps: BaseAcceptInviteRenderProps = {\n    additionalData,\n    components,\n    error: apiError,\n    executionId,\n    fieldErrors: formErrors,\n    goToSignIn: onGoToSignIn,\n    handleInputBlur,\n    handleInputChange,\n    handleSubmit,\n    inviteToken,\n    isComplete,\n    isLoading,\n    isTokenInvalid,\n    isValid: isFormValid,\n    isValidatingToken,\n    meta,\n    subtitle,\n    title,\n    touched: touchedFields,\n    values: formValues,\n  };\n\n  // If children render prop is provided, use it for custom UI\n  if (children) {\n    return <div className={className}>{children(renderProps)}</div>;\n  }\n\n  // Default rendering\n\n  // Loading state during token validation\n  if (isValidatingToken) {\n    return (\n      <CardPrimitive className={cx(className, styles.card)} variant={variant}>\n        <CardPrimitive.Content>\n          <div className={(styles as Record<string, string>)['tokenValidationContainer']}>\n            <Spinner size=\"medium\" />\n            <Typography variant=\"body1\">Validating your invite link...</Typography>\n          </div>\n        </CardPrimitive.Content>\n      </CardPrimitive>\n    );\n  }\n\n  // Invalid token state\n  if (isTokenInvalid) {\n    return (\n      <CardPrimitive className={cx(className, styles.card)} variant={variant}>\n        <CardPrimitive.Header className={styles.header}>\n          <CardPrimitive.Title level={2} className={styles.title}>\n            Invalid Invite Link\n          </CardPrimitive.Title>\n        </CardPrimitive.Header>\n        <CardPrimitive.Content>\n          <AlertPrimitive variant=\"error\">\n            <AlertPrimitive.Title>Unable to verify invite</AlertPrimitive.Title>\n            <AlertPrimitive.Description>\n              {apiError?.message ||\n                'This invite link is invalid or has expired. Please contact your administrator for a new invite.'}\n            </AlertPrimitive.Description>\n          </AlertPrimitive>\n          {onGoToSignIn && (\n            <div className={(styles as Record<string, string>)['goToSignInContainer']}>\n              <Button variant=\"outline\" onClick={onGoToSignIn}>\n                Go to Sign In\n              </Button>\n            </div>\n          )}\n        </CardPrimitive.Content>\n      </CardPrimitive>\n    );\n  }\n\n  // Flow components (password form)\n  return (\n    <CardPrimitive className={cx(className, styles.card)} variant={variant}>\n      {(showTitle || showSubtitle) && (title || subtitle) && (\n        <CardPrimitive.Header className={styles.header}>\n          {showTitle && title && (\n            <CardPrimitive.Title level={2} className={styles.title}>\n              {title}\n            </CardPrimitive.Title>\n          )}\n          {showSubtitle && subtitle && (\n            <Typography variant=\"body1\" className={styles.subtitle}>\n              {subtitle}\n            </Typography>\n          )}\n        </CardPrimitive.Header>\n      )}\n      <CardPrimitive.Content>\n        {apiError && (\n          <div className={(styles as Record<string, string>)['errorContainer']}>\n            <AlertPrimitive variant=\"error\">\n              <AlertPrimitive.Description>{apiError.message}</AlertPrimitive.Description>\n            </AlertPrimitive>\n          </div>\n        )}\n        <div>\n          {componentsWithoutHeadings && componentsWithoutHeadings.length > 0\n            ? renderInviteUserComponents(\n                componentsWithoutHeadings,\n                formValues,\n                touchedFields,\n                formErrors,\n                isLoading,\n                isFormValid,\n                resetForm,\n                handleInputChange,\n                {\n                  _customRenderers: customRenderers,\n                  _theme: theme,\n                  onInputBlur: handleInputBlur,\n                  onSubmit: handleSubmit,\n                  size,\n                  variant,\n                },\n              )\n            : !isLoading && (\n                <AlertPrimitive variant=\"warning\">\n                  <Typography variant=\"body1\">No form components available</Typography>\n                </AlertPrimitive>\n              )}\n          {isLoading && (\n            <div className={(styles as Record<string, string>)['centeredSpinnerContainerSmall']}>\n              <Spinner size=\"small\" />\n            </div>\n          )}\n        </div>\n        {onGoToSignIn && (\n          <div className={(styles as Record<string, string>)['alreadyHaveAccountContainer']}>\n            <Typography variant=\"body2\">\n              Already have an account?{' '}\n              <Button\n                variant=\"text\"\n                onClick={onGoToSignIn}\n                className={(styles as Record<string, string>)['signInInlineButton']}\n              >\n                Sign In\n              </Button>\n            </Typography>\n          </div>\n        )}\n      </CardPrimitive.Content>\n    </CardPrimitive>\n  );\n};\n\nexport default BaseAcceptInvite;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8PA,MAAMA,oBAA+C,EACnD,aACA,aACA,UACA,YACA,SACA,cACA,cACA,YAAY,IACZ,UACA,aACA,OAAO,UACP,UAAU,YACV,YAAY,MACZ,eAAe,WAC0B;CACzC,MAAM,EAAC,MAAM,eAAe,mBAAmB,WAAUC,8BAAc;CACvE,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,EAAC,UAASC,0BAAU;CAC1B,MAAMC,wCAAmDC,yCAAyB;CAClF,MAAMC,SAAcC,wCAAU,OAAO,MAAM,KAAK,OAAO,KAAK,QAAQ;CACpE,MAAM,CAAC,WAAW,oCAAyB,MAAM;CACjD,MAAM,CAAC,mBAAmB,4CAAiC,KAAK;CAChE,MAAM,CAAC,gBAAgB,yCAA8B,MAAM;CAC3D,MAAM,CAAC,YAAY,qCAA0B,MAAM;CACnD,MAAM,CAAC,aAAa,sCAA4D,KAAK;CACrF,MAAM,CAAC,UAAU,mCAAsC,KAAK;CAC5D,MAAM,CAAC,YAAY,qCAAkD,EAAE,CAAC;CACxE,MAAM,CAAC,YAAY,qCAAkD,EAAE,CAAC;CACxE,MAAM,CAAC,eAAe,wCAAsD,EAAE,CAAC;CAC/E,MAAM,CAAC,aAAa,sCAA2B,KAAK;CACpD,MAAM,CAAC,gBAAgB,yCAA8B,MAAM;CAC3D,MAAMC,sCAA+C,KAAK;;;;;;AAO1D,4BAAgB;EACd,MAAMC,uBAAiD,aAAa,OAAc;AAClF,MAAI,CAAC,uBAAuB,oBAAoB,WAAW,EACzD;EAEF,MAAMC,SAAiC,EAAE;EACzC,MAAMC,UAAmC,EAAE;AAC3C,OAAK,MAAM,MAAM,oBACf,KAAI,EAAE,GAAG,cAAc,SAAS;AAC9B,UAAO,GAAG,cAAc,GAAG;AAC3B,WAAQ,GAAG,cAAc;;AAG7B,gBAAc,OAAO;AACrB,oBAAkB,UAAmC;GAAC,GAAG;GAAM,GAAG;GAAQ,EAAE;IAC3E,CAAC,YAAY,CAAC;CAEjB,MAAMC,gDAA0C,MAAM;;;;;AAMtD,4BAAgB;AACd,MAAI,CAAC,cAAe;AAEpB,GAAC,YAA2B;AAC1B,OAAI;IAEF,MAAMC,WAAgB,OADM,MAAM,mBAAmB,GACT,kBAAkB;AAC9D,QAAI,UAAU,eACZ,mBAAkB,UAAU,SAAS;aAE/B;AACR,sBAAkB,KAAK;;MAEvB;IACH,CAAC,cAAc,CAAC;;;;;CAMnB,MAAM,oBAAoB,OAAO,mBAAiD;AAChF,oBAAkB,UAAU;EAC5B,MAAMC,iBAAsB,MAAM,mBAAmB;AACrD,MAAI,eACF,KAAI,eACF,OAAM,eAAe,0BAA0B,kBAAkB,eAAe;MAEhF,OAAM,eAAe,6BAA6B,iBAAiB;;;;;;CASzE,MAAMC,sCACH,UAAe;EACd,MAAMC,eAAuBC,4CAAoB,OAAO,GAAG,yCAAyC;AAGpG,cAAY,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,aAAa,CAAC;AAGrE,YAAU,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,aAAa,CAAC;IAErE,CAAC,GAAG,QAAQ,CACb;;;;;CAMD,MAAMC,qDACH,aAAiE;AAChE,MAAI,CAAC,UAAU,MAAM,MAAM,WACzB,QAAO;AAGT,MAAI;GACF,MAAM,EAAC,6BAAcC,8CACnB,UACA,GACA;IACE,iBAAiB;IACjB,qBAAqB;IACtB,EACD,KACD;AAED,UAAO;IACL,GAAG;IACH,MAAM;KACJ,GAAG,SAAS;KACZ,YAAYC;KACb;IACF;UACK;AAEN,UAAO;;IAGX,CAAC,GAAG,SAAS,CACd;;;;;AAMD,2CAAiB;EACf,oBAAoB,eAAe;EACnC,uBAAuB,GAAG,OAAO;EACjC,eAAe;EACf,kBAAkB;AAChB,wBAAqB,MAAM;AAC3B,iBAAc;;EAEhB,UAAU,UAAe;AACvB,OAAI,CAAC,OAAO,WACV,mBAAkB,KAAK;AAEzB,wBAAqB,MAAM;AAC3B,eAAY,MAAM;;EAEpB,eAAe,aAAkB;AAC/B,kBAAe,SAAS;AACxB,OAAI,SAAS,eAAe,YAAY;AACtC,kBAAc,KAAK;AAEnB,SADoC,SAAS,MAAM,cAAc,SAAS,MAAM,MAAM,cAAc,EAAE,EAC7E,SAAS,EAChC,gBAAe,SAAS;UAErB;AAEL,mBAAe,SAAS;AACxB,kBAAc,EAAE,CAAC;AACjB,kBAAc,EAAE,CAAC;AACjB,qBAAiB,EAAE,CAAC;;;EAGxB,yBAAyB;AACvB,wBAAqB,KAAK;;EAE5B,UAAU,OAAO,YAAiB;GAKhC,MAAMC,WAAgB,2BAJG,MAAM,SAAS;IACtC,GAAG;IACH,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;IACjF,CAAC,CAC2D;AAC7D,SAAM,kBAAkB,SAAS,kBAAkB,KAAK;AACxD,UAAO;;EAET;EACD,CAAC;;;;CAKF,MAAMC,4CAAsC,MAAc,UAAkB;AAC1E,iBAAe,UAAe;GAAC,GAAG;IAAO,OAAO;GAAM,EAAE;AAExD,iBAAe,SAAc;GAC3B,MAAMC,YAAiB,EAAC,GAAG,MAAK;AAChC,UAAO,UAAU;AACjB,UAAO;IACP;AACF,iBAAe,KAAK;IACnB,EAAE,CAAC;;;;CAKN,MAAMC,0CAAoC,SAAiB;AACzD,oBAAkB,UAAe;GAAC,GAAG;IAAO,OAAO;GAAK,EAAE;IACzD,EAAE,CAAC;;;;CAKN,MAAMC,uCACH,iBAA0E;EACzE,MAAMf,SAAiC,EAAE;EAEzC,MAAM,sBAAsB,UAAsB;AAChD,SAAM,SAAS,SAAc;AAC3B,SACG,KAAK,SAAS,oBACb,KAAK,SAAS,gBACd,KAAK,SAAS,iBACd,KAAK,SAAS,iBACd,KAAK,SAAS,eACd,KAAK,SAAS,gBACd,KAAK,SAAS,aAChB,KAAK,KACL;KACA,MAAMgB,QAAa,WAAW,KAAK;AACnC,SAAI,KAAK,aAAa,CAAC,SAAS,MAAM,MAAM,KAAK,IAC/C,QAAO,KAAK,OAAO,EAAE,mCAAmC;cAC/C,OAAO;MAEhB,MAAM,iEAAwC,KAAK,WAAW;AAC9D,UAAI,eAAe;OACjB,MAAM,UAAU,cAAc,MAAM;AACpC,WAAI,QACF,QAAO,KAAK,OAAO,EAAE,QAAQ;;;;AAKrC,QAAI,KAAK,cAAc,MAAM,QAAQ,KAAK,WAAW,CACnD,oBAAmB,KAAK,WAAW;KAErC;;AAGJ,qBAAmBN,aAAW;AAE9B,SAAO;GAAC;GAAQ,SAAS,OAAO,KAAK,OAAO,CAAC,WAAW;GAAE;IAE5D,CAAC,YAAY,EAAE,CAChB;;;;CAKD,MAAMO,sCACJ,OAAO,WAAgB,SAA+B;AACpD,MAAI,CAAC,YACH;EAKF,MAAMC,aAAkB,aADA,YAAY,MAAM,cAAc,EAAE,CACV;AAEhD,MAAI,CAAC,WAAW,SAAS;AACvB,kBAAe,MAAM;AACrB,iBAAc,WAAW,OAAO;GAEhC,MAAMjB,UAAmC,EAAE;AAC3C,UAAO,KAAK,WAAW,OAAO,CAAC,SAAS,QAAa;AACnD,YAAQ,OAAO;KACf;AACF,qBAAkB,UAAe;IAAC,GAAG;IAAM,GAAG;IAAQ,EAAE;AACxD;;AAGF,eAAa,KAAK;AAClB,cAAY,KAAK;AAEjB,MAAI;GAEF,MAAMkB,SAAc,EAAC,GAAI,QAAQ,YAAY;GAK7C,MAAM,wBAAyB,aAAa,MAAM,kBAA0C,EAAE;AAC9F,OAAI,sBAAsB,iBACxB,KAAI;IACF,MAAMC,MAAW,sBAAsB;IACvC,MAAMC,WAAkB,OAAO,QAAQ,WAAW,KAAK,MAAM,IAAI,GAAG,IAAI,YAAY;IACpF,MAAM,SAAS,WAAW,SAAS,aAAa,KAAK;AAGrD,QAAI,CAAC,UAAUC,yCAAyB,UAAU,OAAO,CACvD;IAEF,MAAM,YAAY;KAChB,UAAU,CAAC;KACX,GAAI,SAAS,EAAC,QAAQC,qCAAiB,oBAAmB,GAAG,EAAE;KAC/D,UAAU,SAAS,KAAK,OAAY;MAClC,UAAU,CAAC;MACX,aAAa,EAAE;MACf,UAAU,CACR,IAAI,EAAE,aAAa,EAAE,EAAE,KAAK,OAAY;OAAC,UAAU,CAAC;OAAQ,MAAM,EAAE;OAAK,EAAE,EAC3E,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,MAAW;OACpC,MAAM,MAAM,kBAAkB,EAAE,UAAU,IAAI,EAAE;AAEhD,iEAAiC,EAAE,WAAW,GAAG,CAAC,UAAU,OAAO,SAAS,QAAQ,OAAO;QAC3F,CACH;MACF,EAAE;KACJ;AACD,WAAO,oBAAoB,KAAK,UAAU,UAAU;AACpD,WAAO,KAAK,OAAO,CAAC,SAAS,MAAc;AACzC,SACE,EAAE,WAAW,kBAAkB,IAC/B,EAAE,WAAWC,gDAA4B,IACzC,EAAE,WAAWC,+CAA2B,CAGxC,QAAO,OAAO;MAEhB;WACI;GAKV,MAAMC,UAA+B;IACnC,aAAa,YAAY;IACzB;IACA,SAAS;IACT,GAAI,kBAAkB,UAAU,EAAC,gBAAgB,kBAAkB,SAAQ,GAAG,EAAE;IACjF;AAGD,OAAI,WAAW,GACb,SAAQ,YAAY,UAAU;GAIhC,MAAMf,WAAgB,2BADG,MAAM,SAAS,QAAQ,CACa;AAC7D,kBAAe,SAAS;AAExB,SAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,OAAI,SAAS,SAAS,eAAe;IACnC,MAAMgB,cAAmB,SAAS,MAAM,eAAe,UAAU;AACjE,QAAI,eAAe,OAAO,WAAW,aAAa;AAEhD,yCAAsB,aAAa,OAAO;AAC1C;;;AAKJ,OAAI,SAAS,eAAe,YAAY;AACtC,kBAAc,KAAK;AAEnB,SADoC,SAAS,MAAM,cAAc,SAAS,MAAM,MAAM,cAAc,EAAE,EAC7E,SAAS,EAChC,gBAAe,SAAS;QAExB,eAAc;AAEhB;;AAIF,OAAI,SAAS,eAAe,SAAS;AACnC,gBAAY,SAAS;AACrB;;AAIF,kBAAe,SAAS;AACxB,iBAAc,EAAE,CAAC;AACjB,oBAAiB,EAAE,CAAC;AAGpB,OAAI,UAAU,MACZ,aAAY,SAAS;WAEhB,KAAK;AACZ,eAAY,IAAI;YACR;AACR,gBAAa,MAAM;;IAGvB;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF;;;;CAKD,MAAM,yCAA8B;AAClC,gBAAc,EAAE,CAAC;AACjB,gBAAc,EAAE,CAAC;AACjB,mBAAiB,EAAE,CAAC;IACnB,EAAE,CAAC;;;;AAKN,4BAAgB;AAEd,MAAI,4BAA4B,QAC9B;AAMF,MADmC,IAAI,gBAAgB,OAAO,SAAS,OAAO,CAChE,IAAI,OAAO,CACvB;AAIF,MAAI,CAAC,eAAe,CAAC,aAAa;AAChC,wBAAqB,MAAM;AAC3B,qBAAkB,KAAK;AACvB,+BAAY,IAAI,MAAM,2DAA2D,CAAC;AAClF;;AAGF,8BAA4B,UAAU;AAEtC,GAAC,YAA2B;AAC1B,wBAAqB,KAAK;AAC1B,eAAY,KAAK;AAEjB,OAAI;AAEF,QAAI,YACF,gBAAe,QAAQ,GAAG,OAAO,gBAAgB,YAAY;IAa/D,MAAMhB,WAAgB,2BADG,MAAM,SARV;KACnB;KACA,QAAQ,EACN,aACD;KACD,SAAS;KACV,CAE+C,CACa;AAC7D,mBAAe,SAAS;AAExB,UAAM,kBAAkB,SAAS,kBAAkB,KAAK;AAGxD,QAAI,SAAS,eAAe,SAAS;AACnC,uBAAkB,KAAK;AACvB,iBAAY,SAAS;AACrB;;AAIF,mBAAe,SAAS;AAGxB,QAAI,UAAU,MACZ,aAAY,SAAS;YAEhB,KAAK;AACZ,sBAAkB,KAAK;AACvB,gBAAY,IAAI;aACR;AACR,yBAAqB,MAAM;;MAE3B;IACH;EAAC;EAAa;EAAa;EAAU;EAAc;EAAa;EAA2B,CAAC;;;;CAK/F,MAAMiB,0CAAoC,iBAA2D;EACnG,IAAIC;EACJ,IAAIC;AAEJ,eAAW,SAAS,SAAc;AAChC,OAAI,KAAK,SAAS,QAChB;QAAI,KAAK,YAAY,eAAe,CAACC,QACnC,WAAQ,KAAK;cACH,KAAK,YAAY,eAAe,KAAK,YAAY,iBAAiB,CAACC,WAC7E,cAAW,KAAK;;IAGpB;AAEF,SAAO;GAAC;GAAU;GAAM;IACvB,EAAE,CAAC;;;;CAKN,MAAMC,yCACH,iBACCvB,aAAW,QACR,SAAc,EAAE,KAAK,SAAS,WAAW,KAAK,YAAY,eAAe,KAAK,YAAY,cAC5F,EACH,EAAE,CACH;CAGD,MAAMwB,aAAkB,aAAa,MAAM,cAAc,aAAa,MAAM,MAAM,cAAc,EAAE;CAClG,MAAM,EAAC,OAAO,aAAY,gBAAgB,WAAW;CACrD,MAAMC,4BAAiC,eAAe,WAAW;CAIjE,MAAMC,cAA2C;EAC/C,gBAJ2C,aAAa,MAAM,kBAA0C,EAAE;EAK1G;EACA,OAAO;EACP;EACA,aAAa;EACb,YAAY;EACZ;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT;EACA;EACA;EACA;EACA,SAAS;EACT,QAAQ;EACT;AAGD,KAAI,SACF,QAAO,2CAAC;EAAe;YAAY,SAAS,YAAY;GAAO;AAMjE,KAAI,kBACF,QACE,2CAACC;EAAc,WAAWC,mBAAG,WAAW,OAAO,KAAK;EAAW;YAC7D,2CAACD,qBAAc,qBACb,4CAAC;GAAI,WAAY,OAAkC;cACjD,2CAACE,2BAAQ,MAAK,WAAW,EACzB,2CAACC;IAAW,SAAQ;cAAQ;KAA2C;IACnE,GACgB;GACV;AAKpB,KAAI,eACF,QACE,4CAACH;EAAc,WAAWC,mBAAG,WAAW,OAAO,KAAK;EAAW;aAC7D,2CAACD,qBAAc;GAAO,WAAW,OAAO;aACtC,2CAACA,qBAAc;IAAM,OAAO;IAAG,WAAW,OAAO;cAAO;KAElC;IACD,EACvB,4CAACA,qBAAc,sBACb,4CAACI;GAAe,SAAQ;cACtB,2CAACA,sBAAe,mBAAM,4BAA8C,EACpE,2CAACA,sBAAe,yBACb,UAAU,WACT,oGACyB;IACd,EAChB,gBACC,2CAAC;GAAI,WAAY,OAAkC;aACjD,2CAACC;IAAO,SAAQ;IAAU,SAAS;cAAc;KAExC;IACL,IAEc;GACV;AAKpB,QACE,4CAACL;EAAc,WAAWC,mBAAG,WAAW,OAAO,KAAK;EAAW;cAC3D,aAAa,kBAAkB,SAAS,aACxC,4CAACD,qBAAc;GAAO,WAAW,OAAO;cACrC,aAAa,SACZ,2CAACA,qBAAc;IAAM,OAAO;IAAG,WAAW,OAAO;cAC9C;KACmB,EAEvB,gBAAgB,YACf,2CAACG;IAAW,SAAQ;IAAQ,WAAW,OAAO;cAC3C;KACU;IAEM,EAEzB,4CAACH,qBAAc;GACZ,YACC,2CAAC;IAAI,WAAY,OAAkC;cACjD,2CAACI;KAAe,SAAQ;eACtB,2CAACA,sBAAe,yBAAa,SAAS,UAAqC;MAC5D;KACb;GAER,4CAAC,oBACE,6BAA6B,0BAA0B,SAAS,IAC7DE,qDACE,2BACA,YACA,eACA,YACA,WACA,aACA,WACA,mBACA;IACE,kBAAkB;IAClB,QAAQ;IACR,aAAa;IACb,UAAU;IACV;IACA;IACD,CACF,GACD,CAAC,aACC,2CAACF;IAAe,SAAQ;cACtB,2CAACD;KAAW,SAAQ;eAAQ;MAAyC;KACtD,EAEtB,aACC,2CAAC;IAAI,WAAY,OAAkC;cACjD,2CAACD,2BAAQ,MAAK,UAAU;KACpB,IAEJ;GACL,gBACC,2CAAC;IAAI,WAAY,OAAkC;cACjD,4CAACC;KAAW,SAAQ;;MAAQ;MACD;MACzB,2CAACE;OACC,SAAQ;OACR,SAAS;OACT,WAAY,OAAkC;iBAC/C;QAEQ;;MACE;KACT;MAEc;GACV;;AAIpB,+BAAe"}