@thunderid/react 1.9.2 → 1.10.1

package/dist/cjs/components/admin/GroupMembers/GroupMembers.cjs

@@ -29,11 +29,12 @@ const getMembershipInvalidatedKeys = ({ groupId }) => [
 * <GroupMembers groupId={groupId} />
 * ```
 */
-const GroupMembers = ({ administrationMode, editable = false, groupId, preferences,...rest }) => {
+const GroupMembers = ({ administrationMode, editable = false, groupId, ouId, preferences,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const groupsEndpoint = require_useManagementEndpoint.default("groups");
 	const usersEndpoint = require_useManagementEndpoint.default("users");
 	const agentsEndpoint = require_useManagementEndpoint.default("agents");
+	const filter = (0, __thunderid_browser.toEqualityFilter)("ouId", ouId);
 	const members = require_useResourceQuery.default([
 		__thunderid_browser.GroupQueryKeys.GROUP_MEMBERS,
 		groupId,
@@ -44,15 +45,29 @@ const GroupMembers = ({ administrationMode, editable = false, groupId, preferenc
 		groupId,
 		limit: 100
 	}), { enabled: Boolean(groupId) });
-	const users = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USERS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getUsers)({
-		...usersEndpoint,
-		fetcher,
+	const users = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USERS, {
+		filter,
 		limit: 100
+	}], async (fetcher) => ({
+		filter,
+		page: await (0, __thunderid_browser.getUsers)({
+			...usersEndpoint,
+			fetcher,
+			filter,
+			limit: 100
+		})
 	}), { enabled: editable });
-	const agents = require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENTS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getAgents)({
-		...agentsEndpoint,
-		fetcher,
+	const agents = require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENTS, {
+		filter,
 		limit: 100
+	}], async (fetcher) => ({
+		filter,
+		page: await (0, __thunderid_browser.getAgents)({
+			...agentsEndpoint,
+			fetcher,
+			filter,
+			limit: 100
+		})
 	}), { enabled: editable });
 	const add = require_useResourceMutation.default(({ groupId: id, members: changes }, fetcher) => (0, __thunderid_browser.addGroupMembers)({
 		...groupsEndpoint,
@@ -67,16 +82,23 @@ const GroupMembers = ({ administrationMode, editable = false, groupId, preferenc
 		groupId: id,
 		members: changes
 	}), getMembershipInvalidatedKeys);
-	const candidates = (0, react.useMemo)(() => ({
-		agent: (agents.data?.agents ?? []).map((agent) => ({
-			id: agent.id,
-			label: (0, __thunderid_browser.getAgentName)(agent)
-		})),
-		user: (users.data?.users ?? []).map((user) => ({
-			id: user.id,
-			label: (0, __thunderid_browser.resolveManagedIdentityName)(user)
-		}))
-	}), [agents.data, users.data]);
+	const candidates = (0, react.useMemo)(() => {
+		const current = (data) => data && data.filter === filter ? data.page : void 0;
+		return {
+			agent: (current(agents.data)?.agents ?? []).map((agent) => ({
+				id: agent.id,
+				label: (0, __thunderid_browser.getAgentName)(agent)
+			})),
+			user: (current(users.data)?.users ?? []).map((user) => ({
+				id: user.id,
+				label: (0, __thunderid_browser.resolveManagedIdentityName)(user)
+			}))
+		};
+	}, [
+		agents.data,
+		filter,
+		users.data
+	]);
 	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_BaseGroupMembers.default, {
 		members: members.data?.members ?? [],
 		isLoading: members.isLoading,

package/dist/cjs/components/admin/GroupMembers/GroupMembers.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"GroupMembers.cjs","names":["GroupQueryKeys","RoleQueryKeys","GroupMembers: FC<GroupMembersProps>","useTranslation","groupsEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","members: ResourceQueryResult<GroupMemberListResponse>","useResourceQuery","users: ResourceQueryResult<ManagedUserListResponse>","UserQueryKeys","agents: ResourceQueryResult<AgentListResponse>","AgentQueryKeys","add: ResourceMutationResult<Group, GroupMembersVariables>","useResourceMutation","remove: ResourceMutationResult<Group, GroupMembersVariables>","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupMember,\n  GroupMemberListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  ResourceQueryKey,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addGroupMembers,\n  getAgentName,\n  getAgents,\n  getGroupMembers,\n  getUsers,\n  removeGroupMembers,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface GroupMembersVariables {\n  groupId: string;\n  members: Pick<GroupMember, 'id' | 'type'>[];\n}\n\n/**\n * Query keys to refetch after a group's membership changes.\n */\nconst getMembershipInvalidatedKeys = ({groupId}: GroupMembersVariables): ResourceQueryKey[] => [\n  [GroupQueryKeys.GROUP, groupId],\n  [GroupQueryKeys.GROUP_MEMBERS, groupId],\n  [GroupQueryKeys.MEMBERSHIPS],\n  [RoleQueryKeys.ROLE_ASSIGNMENTS],\n];\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * How a member is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  administrationMode,\n  editable = false,\n  groupId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const members: ResourceQueryResult<GroupMemberListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUP_MEMBERS, groupId, {limit: 100}],\n    (fetcher) => getGroupMembers({...groupsEndpoint, fetcher, groupId, limit: 100}),\n    {enabled: Boolean(groupId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const add: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      addGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n  const remove: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      removeGroupMembers({...groupsEndpoint, administrationMode, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: getAgentName(agent)})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, users.data],\n  );\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;AA0CA,MAAM,gCAAgC,EAAC,cAAwD;CAC7F,CAACA,mCAAe,OAAO,QAAQ;CAC/B,CAACA,mCAAe,eAAe,QAAQ;CACvC,CAACA,mCAAe,YAAY;CAC5B,CAACC,kCAAc,iBAAiB;CACjC;;;;;;;;;AA4BD,MAAMC,gBAAuC,EAC3C,oBACA,WAAW,OACX,SACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,iBAAqCC,sCAAsB,SAAS;CAC1E,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,UAAwDC,iCAC5D;EAACT,mCAAe;EAAe;EAAS,EAAC,OAAO,KAAI;EAAC,GACpD,qDAA4B;EAAC,GAAG;EAAgB;EAAS;EAAS,OAAO;EAAI,CAAC,EAC/E,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMU,QAAsDD,iCAC1D,CAACE,kCAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,8CAAqB;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDH,iCACrD,CAACI,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,MAA4DC,qCAC/D,EAAC,SAAS,IAAI,SAAS,WAAiC,qDACvC;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EAC9E,6BACD;CACD,MAAMC,SAA+DD,qCAClE,EAAC,SAAS,IAAI,SAAS,WAAiC,wDACpC;EAAC,GAAG;EAAgB;EAAoB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EACrG,6BACD;CAED,MAAME,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,6CAAoB,MAAM;GAAC,EAAE;EAC3G,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD,CAAC,OAAO,MAAM,MAAM,KAAK,CAC1B;AAED,QACE,2CAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,yDAC2B,GAAG,QAAQ,OAAO,6BAA6B,sDAC/C,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}
+{"version":3,"file":"GroupMembers.cjs","names":["GroupQueryKeys","RoleQueryKeys","GroupMembers: FC<GroupMembersProps>","useTranslation","groupsEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","filter: string | undefined","members: ResourceQueryResult<GroupMemberListResponse>","useResourceQuery","users: ResourceQueryResult<FilteredPage<ManagedUserListResponse>>","UserQueryKeys","agents: ResourceQueryResult<FilteredPage<AgentListResponse>>","AgentQueryKeys","add: ResourceMutationResult<Group, GroupMembersVariables>","useResourceMutation","remove: ResourceMutationResult<Group, GroupMembersVariables>","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupMember,\n  GroupMemberListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  ResourceQueryKey,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addGroupMembers,\n  getAgentName,\n  getAgents,\n  getGroupMembers,\n  getUsers,\n  removeGroupMembers,\n  resolveManagedIdentityName,\n  toEqualityFilter,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface GroupMembersVariables {\n  groupId: string;\n  members: Pick<GroupMember, 'id' | 'type'>[];\n}\n\n/**\n * A candidate page with the filter it was listed with.\n */\ninterface FilteredPage<T> {\n  filter: string | undefined;\n  page: T;\n}\n\n/**\n * Query keys to refetch after a group's membership changes.\n */\nconst getMembershipInvalidatedKeys = ({groupId}: GroupMembersVariables): ResourceQueryKey[] => [\n  [GroupQueryKeys.GROUP, groupId],\n  [GroupQueryKeys.GROUP_MEMBERS, groupId],\n  [GroupQueryKeys.MEMBERSHIPS],\n  [RoleQueryKeys.ROLE_ASSIGNMENTS],\n];\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * How a member is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n  /**\n   * Organization unit the users and agents offered for adding are listed from.\n   */\n  ouId?: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  administrationMode,\n  editable = false,\n  groupId,\n  ouId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const filter: string | undefined = toEqualityFilter('ouId', ouId);\n  const members: ResourceQueryResult<GroupMemberListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUP_MEMBERS, groupId, {limit: 100}],\n    (fetcher) => getGroupMembers({...groupsEndpoint, fetcher, groupId, limit: 100}),\n    {enabled: Boolean(groupId)},\n  );\n  const users: ResourceQueryResult<FilteredPage<ManagedUserListResponse>> = useResourceQuery(\n    [UserQueryKeys.USERS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getUsers({...usersEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<FilteredPage<AgentListResponse>> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getAgents({...agentsEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const add: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      addGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n  const remove: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      removeGroupMembers({...groupsEndpoint, administrationMode, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(() => {\n    // A page listed for an earlier ouId stays in a query until the next one succeeds, so it is not offered.\n    const current = <T,>(data: FilteredPage<T> | undefined): T | undefined =>\n      data && data.filter === filter ? data.page : undefined;\n\n    return {\n      agent: (current(agents.data)?.agents ?? []).map((agent: BasicAgent) => ({\n        id: agent.id,\n        label: getAgentName(agent),\n      })),\n      user: (current(users.data)?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    };\n  }, [agents.data, filter, users.data]);\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;;;;;AAmDA,MAAM,gCAAgC,EAAC,cAAwD;CAC7F,CAACA,mCAAe,OAAO,QAAQ;CAC/B,CAACA,mCAAe,eAAe,QAAQ;CACvC,CAACA,mCAAe,YAAY;CAC5B,CAACC,kCAAc,iBAAiB;CACjC;;;;;;;;;AAgCD,MAAMC,gBAAuC,EAC3C,oBACA,WAAW,OACX,SACA,MACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAMC,iBAAqCC,sCAAsB,SAAS;CAC1E,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,mDAA8C,QAAQ,KAAK;CACjE,MAAMC,UAAwDC,iCAC5D;EAACV,mCAAe;EAAe;EAAS,EAAC,OAAO,KAAI;EAAC,GACpD,qDAA4B;EAAC,GAAG;EAAgB;EAAS;EAAS,OAAO;EAAI,CAAC,EAC/E,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMW,QAAoED,iCACxE,CAACE,kCAAc,OAAO;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC3C,OAAO,aAAa;EAAC;EAAQ,MAAM,wCAAe;GAAC,GAAG;GAAe;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACnG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAA+DH,iCACnE,CAACI,mCAAe,QAAQ;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC7C,OAAO,aAAa;EAAC;EAAQ,MAAM,yCAAgB;GAAC,GAAG;GAAgB;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACrG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,MAA4DC,qCAC/D,EAAC,SAAS,IAAI,SAAS,WAAiC,qDACvC;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EAC9E,6BACD;CACD,MAAMC,SAA+DD,qCAClE,EAAC,SAAS,IAAI,SAAS,WAAiC,wDACpC;EAAC,GAAG;EAAgB;EAAoB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EACrG,6BACD;CAED,MAAME,sCAAmF;EAEvF,MAAM,WAAe,SACnB,QAAQ,KAAK,WAAW,SAAS,KAAK,OAAO;AAE/C,SAAO;GACL,QAAQ,QAAQ,OAAO,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,WAAuB;IACtE,IAAI,MAAM;IACV,6CAAoB,MAAM;IAC3B,EAAE;GACH,OAAO,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAE,EAAE,KAAK,UAAuB;IACnE,IAAI,KAAK;IACT,2DAAkC,KAAK;IACxC,EAAE;GACJ;IACA;EAAC,OAAO;EAAM;EAAQ,MAAM;EAAK,CAAC;AAErC,QACE,2CAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,yDAC2B,GAAG,QAAQ,OAAO,6BAA6B,sDAC/C,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}

package/dist/cjs/components/admin/RoleAssignments/RoleAssignments.cjs

@@ -21,7 +21,7 @@ react_jsx_runtime = require_rolldown_runtime.__toESM(react_jsx_runtime);
 * <RoleAssignments roleId={roleId} />
 * ```
 */
-const RoleAssignments = ({ administrationMode, editable = false, filterable = true, preferences, roleId,...rest }) => {
+const RoleAssignments = ({ administrationMode, editable = false, filterable = true, ouId, preferences, roleId,...rest }) => {
 	const { t } = require_useTranslation.default(preferences?.i18n);
 	const [typeFilter, setTypeFilter] = (0, react.useState)(null);
 	const rolesEndpoint = require_useManagementEndpoint.default("roles");
@@ -29,6 +29,7 @@ const RoleAssignments = ({ administrationMode, editable = false, filterable = tr
 	const groupsEndpoint = require_useManagementEndpoint.default("groups");
 	const agentsEndpoint = require_useManagementEndpoint.default("agents");
 	const type = typeFilter ?? void 0;
+	const filter = (0, __thunderid_browser.toEqualityFilter)("ouId", ouId);
 	const assignments = require_useResourceQuery.default([
 		__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS,
 		roleId,
@@ -43,20 +44,41 @@ const RoleAssignments = ({ administrationMode, editable = false, filterable = tr
 		roleId,
 		type
 	}), { enabled: Boolean(roleId) });
-	const users = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USERS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getUsers)({
-		...usersEndpoint,
-		fetcher,
+	const users = require_useResourceQuery.default([__thunderid_browser.UserQueryKeys.USERS, {
+		filter,
 		limit: 100
+	}], async (fetcher) => ({
+		filter,
+		page: await (0, __thunderid_browser.getUsers)({
+			...usersEndpoint,
+			fetcher,
+			filter,
+			limit: 100
+		})
 	}), { enabled: editable });
-	const groups = require_useResourceQuery.default([__thunderid_browser.GroupQueryKeys.GROUPS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getGroups)({
-		...groupsEndpoint,
-		fetcher,
+	const groups = require_useResourceQuery.default([__thunderid_browser.GroupQueryKeys.GROUPS, {
+		filter,
 		limit: 100
+	}], async (fetcher) => ({
+		filter,
+		page: await (0, __thunderid_browser.getGroups)({
+			...groupsEndpoint,
+			fetcher,
+			filter,
+			limit: 100
+		})
 	}), { enabled: editable });
-	const agents = require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENTS, { limit: 100 }], (fetcher) => (0, __thunderid_browser.getAgents)({
-		...agentsEndpoint,
-		fetcher,
+	const agents = require_useResourceQuery.default([__thunderid_browser.AgentQueryKeys.AGENTS, {
+		filter,
 		limit: 100
+	}], async (fetcher) => ({
+		filter,
+		page: await (0, __thunderid_browser.getAgents)({
+			...agentsEndpoint,
+			fetcher,
+			filter,
+			limit: 100
+		})
 	}), { enabled: editable });
 	const assign = require_useResourceMutation.default(({ assignments: changes, roleId: id }, fetcher) => (0, __thunderid_browser.addRoleAssignments)({
 		...rolesEndpoint,
@@ -71,21 +93,25 @@ const RoleAssignments = ({ administrationMode, editable = false, filterable = tr
 		fetcher,
 		roleId: id
 	}), () => [[__thunderid_browser.RoleQueryKeys.ROLE_ASSIGNMENTS]]);
-	const candidates = (0, react.useMemo)(() => ({
-		agent: (agents.data?.agents ?? []).map((agent) => ({
-			id: agent.id,
-			label: (0, __thunderid_browser.getAgentName)(agent)
-		})),
-		group: (groups.data?.groups ?? []).map((group) => ({
-			id: group.id,
-			label: group.name
-		})),
-		user: (users.data?.users ?? []).map((user) => ({
-			id: user.id,
-			label: (0, __thunderid_browser.resolveManagedIdentityName)(user)
-		}))
-	}), [
+	const candidates = (0, react.useMemo)(() => {
+		const current = (data) => data && data.filter === filter ? data.page : void 0;
+		return {
+			agent: (current(agents.data)?.agents ?? []).map((agent) => ({
+				id: agent.id,
+				label: (0, __thunderid_browser.getAgentName)(agent)
+			})),
+			group: (current(groups.data)?.groups ?? []).map((group) => ({
+				id: group.id,
+				label: group.name
+			})),
+			user: (current(users.data)?.users ?? []).map((user) => ({
+				id: user.id,
+				label: (0, __thunderid_browser.resolveManagedIdentityName)(user)
+			}))
+		};
+	}, [
 		agents.data,
+		filter,
 		groups.data,
 		users.data
 	]);

package/dist/cjs/components/admin/RoleAssignments/RoleAssignments.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"RoleAssignments.cjs","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","rolesEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","groupsEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","type: RoleAssigneeType | undefined","assignments: ResourceQueryResult<RoleAssignmentListResponse>","useResourceQuery","RoleQueryKeys","users: ResourceQueryResult<ManagedUserListResponse>","UserQueryKeys","groups: ResourceQueryResult<GroupListResponse>","GroupQueryKeys","agents: ResourceQueryResult<AgentListResponse>","AgentQueryKeys","assign: ResourceMutationResult<void, RoleAssignmentsVariables>","useResourceMutation","unassign: ResourceMutationResult<void, RoleAssignmentsVariables>","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n  RoleAssignmentListResponse,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addRoleAssignments,\n  getAgentName,\n  getAgents,\n  getGroups,\n  getRoleAssignments,\n  getUsers,\n  removeRoleAssignments,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface RoleAssignmentsVariables {\n  assignments: RoleAssignmentInput[];\n  roleId: string;\n}\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * How an assignment is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  administrationMode,\n  editable = false,\n  filterable = true,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const rolesEndpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const type: RoleAssigneeType | undefined = typeFilter ?? undefined;\n  const assignments: ResourceQueryResult<RoleAssignmentListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, roleId, {limit: 100, type}],\n    (fetcher) => getRoleAssignments({...rolesEndpoint, fetcher, limit: 100, roleId, type}),\n    {enabled: Boolean(roleId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const groups: ResourceQueryResult<GroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUPS, {limit: 100}],\n    (fetcher) => getGroups({...groupsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const assign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      addRoleAssignments({...rolesEndpoint, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n  const unassign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      removeRoleAssignments({...rolesEndpoint, administrationMode, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: getAgentName(agent)})),\n      group: (groups.data?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, groups.data, users.data],\n  );\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAkFA,MAAMA,mBAA6C,EACjD,oBACA,WAAW,OACX,aAAa,MACb,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,qCAAmD,KAAK;CAC3E,MAAMC,gBAAoCC,sCAAsB,QAAQ;CACxE,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,iBAAqCH,sCAAsB,SAAS;CAC1E,MAAMI,OAAqC,cAAc;CACzD,MAAMC,cAA+DC,iCACnE;EAACC,kCAAc;EAAkB;EAAQ;GAAC,OAAO;GAAK;GAAK;EAAC,GAC3D,wDAA+B;EAAC,GAAG;EAAe;EAAS,OAAO;EAAK;EAAQ;EAAK,CAAC,EACtF,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,QAAsDF,iCAC1D,CAACG,kCAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,8CAAqB;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDJ,iCACrD,CAACK,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiDN,iCACrD,CAACO,mCAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,+CAAsB;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiEC,qCACpE,EAAC,aAAa,SAAS,QAAQ,MAA+B,wDAC1C;EAAC,GAAG;EAAe,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QAC7E,CAAC,CAACR,kCAAc,iBAAiB,CAAC,CACzC;CACD,MAAMS,WAAmED,qCACtE,EAAC,aAAa,SAAS,QAAQ,MAA+B,2DACvC;EAAC,GAAG;EAAe;EAAoB,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QACpG,CAAC,CAACR,kCAAc,iBAAiB,CAAC,CACzC;CAED,MAAMU,uCACG;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,6CAAoB,MAAM;GAAC,EAAE;EAC3G,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAkB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAC7F,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,2DAAkC,KAAK;GACxC,EAAE;EACJ,GACD;EAAC,OAAO;EAAM,OAAO;EAAM,MAAM;EAAK,CACvC;AAED,QACE,2CAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,yDAC2B,GAAG,YAAY,OAAO,gCAAgC,sDACtD,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}
+{"version":3,"file":"RoleAssignments.cjs","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","rolesEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","groupsEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","type: RoleAssigneeType | undefined","filter: string | undefined","assignments: ResourceQueryResult<RoleAssignmentListResponse>","useResourceQuery","RoleQueryKeys","users: ResourceQueryResult<FilteredPage<ManagedUserListResponse>>","UserQueryKeys","groups: ResourceQueryResult<FilteredPage<GroupListResponse>>","GroupQueryKeys","agents: ResourceQueryResult<FilteredPage<AgentListResponse>>","AgentQueryKeys","assign: ResourceMutationResult<void, RoleAssignmentsVariables>","useResourceMutation","unassign: ResourceMutationResult<void, RoleAssignmentsVariables>","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n  RoleAssignmentListResponse,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addRoleAssignments,\n  getAgentName,\n  getAgents,\n  getGroups,\n  getRoleAssignments,\n  getUsers,\n  removeRoleAssignments,\n  resolveManagedIdentityName,\n  toEqualityFilter,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface RoleAssignmentsVariables {\n  assignments: RoleAssignmentInput[];\n  roleId: string;\n}\n\n/**\n * A candidate page with the filter it was listed with.\n */\ninterface FilteredPage<T> {\n  filter: string | undefined;\n  page: T;\n}\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * How an assignment is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  /**\n   * Organization unit the users, groups and agents offered for assignment are listed from.\n   */\n  ouId?: string;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  administrationMode,\n  editable = false,\n  filterable = true,\n  ouId,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const rolesEndpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const type: RoleAssigneeType | undefined = typeFilter ?? undefined;\n  const filter: string | undefined = toEqualityFilter('ouId', ouId);\n  const assignments: ResourceQueryResult<RoleAssignmentListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, roleId, {limit: 100, type}],\n    (fetcher) => getRoleAssignments({...rolesEndpoint, fetcher, limit: 100, roleId, type}),\n    {enabled: Boolean(roleId)},\n  );\n  const users: ResourceQueryResult<FilteredPage<ManagedUserListResponse>> = useResourceQuery(\n    [UserQueryKeys.USERS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getUsers({...usersEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const groups: ResourceQueryResult<FilteredPage<GroupListResponse>> = useResourceQuery(\n    [GroupQueryKeys.GROUPS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getGroups({...groupsEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<FilteredPage<AgentListResponse>> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getAgents({...agentsEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const assign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      addRoleAssignments({...rolesEndpoint, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n  const unassign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      removeRoleAssignments({...rolesEndpoint, administrationMode, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(() => {\n    // A page listed for an earlier ouId stays in a query until the next one succeeds, so it is not offered.\n    const current = <T,>(data: FilteredPage<T> | undefined): T | undefined =>\n      data && data.filter === filter ? data.page : undefined;\n\n    return {\n      agent: (current(agents.data)?.agents ?? []).map((agent: BasicAgent) => ({\n        id: agent.id,\n        label: getAgentName(agent),\n      })),\n      group: (current(groups.data)?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (current(users.data)?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    };\n  }, [agents.data, filter, groups.data, users.data]);\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA+FA,MAAMA,mBAA6C,EACjD,oBACA,WAAW,OACX,aAAa,MACb,MACA,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,+BAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,qCAAmD,KAAK;CAC3E,MAAMC,gBAAoCC,sCAAsB,QAAQ;CACxE,MAAMC,gBAAoCD,sCAAsB,QAAQ;CACxE,MAAME,iBAAqCF,sCAAsB,SAAS;CAC1E,MAAMG,iBAAqCH,sCAAsB,SAAS;CAC1E,MAAMI,OAAqC,cAAc;CACzD,MAAMC,mDAA8C,QAAQ,KAAK;CACjE,MAAMC,cAA+DC,iCACnE;EAACC,kCAAc;EAAkB;EAAQ;GAAC,OAAO;GAAK;GAAK;EAAC,GAC3D,wDAA+B;EAAC,GAAG;EAAe;EAAS,OAAO;EAAK;EAAQ;EAAK,CAAC,EACtF,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,QAAoEF,iCACxE,CAACG,kCAAc,OAAO;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC3C,OAAO,aAAa;EAAC;EAAQ,MAAM,wCAAe;GAAC,GAAG;GAAe;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACnG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAA+DJ,iCACnE,CAACK,mCAAe,QAAQ;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC7C,OAAO,aAAa;EAAC;EAAQ,MAAM,yCAAgB;GAAC,GAAG;GAAgB;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACrG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAA+DN,iCACnE,CAACO,mCAAe,QAAQ;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC7C,OAAO,aAAa;EAAC;EAAQ,MAAM,yCAAgB;GAAC,GAAG;GAAgB;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACrG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMC,SAAiEC,qCACpE,EAAC,aAAa,SAAS,QAAQ,MAA+B,wDAC1C;EAAC,GAAG;EAAe,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QAC7E,CAAC,CAACR,kCAAc,iBAAiB,CAAC,CACzC;CACD,MAAMS,WAAmED,qCACtE,EAAC,aAAa,SAAS,QAAQ,MAA+B,2DACvC;EAAC,GAAG;EAAe;EAAoB,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QACpG,CAAC,CAACR,kCAAc,iBAAiB,CAAC,CACzC;CAED,MAAMU,sCAA6F;EAEjG,MAAM,WAAe,SACnB,QAAQ,KAAK,WAAW,SAAS,KAAK,OAAO;AAE/C,SAAO;GACL,QAAQ,QAAQ,OAAO,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,WAAuB;IACtE,IAAI,MAAM;IACV,6CAAoB,MAAM;IAC3B,EAAE;GACH,QAAQ,QAAQ,OAAO,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,WAAkB;IAAC,IAAI,MAAM;IAAI,OAAO,MAAM;IAAK,EAAE;GACtG,OAAO,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAE,EAAE,KAAK,UAAuB;IACnE,IAAI,KAAK;IACT,2DAAkC,KAAK;IACxC,EAAE;GACJ;IACA;EAAC,OAAO;EAAM;EAAQ,OAAO;EAAM,MAAM;EAAK,CAAC;AAElD,QACE,2CAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,yDAC2B,GAAG,YAAY,OAAO,gCAAgC,sDACtD,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}

package/dist/components/admin/GroupMembers/GroupMembers.d.ts

@@ -14,6 +14,10 @@ export type GroupMembersProps = Omit<BaseGroupMembersProps, 'candidates' | 'erro
      */
     editable?: boolean;
     groupId: string;
+    /**
+     * Organization unit the users and agents offered for adding are listed from.
+     */
+    ouId?: string;
 };
 /**
  * Lists the users and agents in a group, and lets the signed-in user add and remove them.

package/dist/components/admin/GroupMembers/GroupMembers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GroupMembers.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"names":[],"mappings":"AAGA,OAAO,EACL,kBAAkB,EAqBnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,EAAE,EAAwB,MAAM,OAAO,CAAC;AAChD,OAAyB,EAAC,qBAAqB,EAAC,MAAM,oBAAoB,CAAC;AAsB3E,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAClC,qBAAqB,EACrB,YAAY,GAAG,OAAO,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,CACvF,GAAG;IACF;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAwEvC,CAAC;AAEF,eAAe,YAAY,CAAC"}
+{"version":3,"file":"GroupMembers.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"names":[],"mappings":"AAGA,OAAO,EACL,kBAAkB,EAsBnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,EAAE,EAAwB,MAAM,OAAO,CAAC;AAChD,OAAyB,EAAC,qBAAqB,EAAC,MAAM,oBAAoB,CAAC;AA8B3E,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAClC,qBAAqB,EACrB,YAAY,GAAG,OAAO,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,CACvF,GAAG;IACF;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAgFvC,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/components/admin/GroupMembers/GroupMembers.js

@@ -3,7 +3,7 @@ import useManagementEndpoint_default from "../../../hooks/management/useManageme
 import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
 import useResourceMutation_default from "../../../hooks/management/useResourceMutation.js";
 import BaseGroupMembers_default from "./BaseGroupMembers.js";
-import { AgentQueryKeys, GroupQueryKeys, RoleQueryKeys, UserQueryKeys, addGroupMembers, getAgentName, getAgents, getGroupMembers, getUsers, removeGroupMembers, resolveManagedIdentityName, toManagementErrorMessage } from "@thunderid/browser";
+import { AgentQueryKeys, GroupQueryKeys, RoleQueryKeys, UserQueryKeys, addGroupMembers, getAgentName, getAgents, getGroupMembers, getUsers, removeGroupMembers, resolveManagedIdentityName, toEqualityFilter, toManagementErrorMessage } from "@thunderid/browser";
 import { useMemo } from "react";
 import { jsx } from "react/jsx-runtime";
 
@@ -25,11 +25,12 @@ const getMembershipInvalidatedKeys = ({ groupId }) => [
 * <GroupMembers groupId={groupId} />
 * ```
 */
-const GroupMembers = ({ administrationMode, editable = false, groupId, preferences,...rest }) => {
+const GroupMembers = ({ administrationMode, editable = false, groupId, ouId, preferences,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
 	const groupsEndpoint = useManagementEndpoint_default("groups");
 	const usersEndpoint = useManagementEndpoint_default("users");
 	const agentsEndpoint = useManagementEndpoint_default("agents");
+	const filter = toEqualityFilter("ouId", ouId);
 	const members = useResourceQuery_default([
 		GroupQueryKeys.GROUP_MEMBERS,
 		groupId,
@@ -40,15 +41,29 @@ const GroupMembers = ({ administrationMode, editable = false, groupId, preferenc
 		groupId,
 		limit: 100
 	}), { enabled: Boolean(groupId) });
-	const users = useResourceQuery_default([UserQueryKeys.USERS, { limit: 100 }], (fetcher) => getUsers({
-		...usersEndpoint,
-		fetcher,
+	const users = useResourceQuery_default([UserQueryKeys.USERS, {
+		filter,
 		limit: 100
+	}], async (fetcher) => ({
+		filter,
+		page: await getUsers({
+			...usersEndpoint,
+			fetcher,
+			filter,
+			limit: 100
+		})
 	}), { enabled: editable });
-	const agents = useResourceQuery_default([AgentQueryKeys.AGENTS, { limit: 100 }], (fetcher) => getAgents({
-		...agentsEndpoint,
-		fetcher,
+	const agents = useResourceQuery_default([AgentQueryKeys.AGENTS, {
+		filter,
 		limit: 100
+	}], async (fetcher) => ({
+		filter,
+		page: await getAgents({
+			...agentsEndpoint,
+			fetcher,
+			filter,
+			limit: 100
+		})
 	}), { enabled: editable });
 	const add = useResourceMutation_default(({ groupId: id, members: changes }, fetcher) => addGroupMembers({
 		...groupsEndpoint,
@@ -63,16 +78,23 @@ const GroupMembers = ({ administrationMode, editable = false, groupId, preferenc
 		groupId: id,
 		members: changes
 	}), getMembershipInvalidatedKeys);
-	const candidates = useMemo(() => ({
-		agent: (agents.data?.agents ?? []).map((agent) => ({
-			id: agent.id,
-			label: getAgentName(agent)
-		})),
-		user: (users.data?.users ?? []).map((user) => ({
-			id: user.id,
-			label: resolveManagedIdentityName(user)
-		}))
-	}), [agents.data, users.data]);
+	const candidates = useMemo(() => {
+		const current = (data) => data && data.filter === filter ? data.page : void 0;
+		return {
+			agent: (current(agents.data)?.agents ?? []).map((agent) => ({
+				id: agent.id,
+				label: getAgentName(agent)
+			})),
+			user: (current(users.data)?.users ?? []).map((user) => ({
+				id: user.id,
+				label: resolveManagedIdentityName(user)
+			}))
+		};
+	}, [
+		agents.data,
+		filter,
+		users.data
+	]);
 	return /* @__PURE__ */ jsx(BaseGroupMembers_default, {
 		members: members.data?.members ?? [],
 		isLoading: members.isLoading,

package/dist/components/admin/GroupMembers/GroupMembers.js.map

@@ -1 +1 @@
-{"version":3,"file":"GroupMembers.js","names":["GroupMembers: FC<GroupMembersProps>","useTranslation","groupsEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","members: ResourceQueryResult<GroupMemberListResponse>","useResourceQuery","users: ResourceQueryResult<ManagedUserListResponse>","agents: ResourceQueryResult<AgentListResponse>","add: ResourceMutationResult<Group, GroupMembersVariables>","useResourceMutation","remove: ResourceMutationResult<Group, GroupMembersVariables>","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupMember,\n  GroupMemberListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  ResourceQueryKey,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addGroupMembers,\n  getAgentName,\n  getAgents,\n  getGroupMembers,\n  getUsers,\n  removeGroupMembers,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface GroupMembersVariables {\n  groupId: string;\n  members: Pick<GroupMember, 'id' | 'type'>[];\n}\n\n/**\n * Query keys to refetch after a group's membership changes.\n */\nconst getMembershipInvalidatedKeys = ({groupId}: GroupMembersVariables): ResourceQueryKey[] => [\n  [GroupQueryKeys.GROUP, groupId],\n  [GroupQueryKeys.GROUP_MEMBERS, groupId],\n  [GroupQueryKeys.MEMBERSHIPS],\n  [RoleQueryKeys.ROLE_ASSIGNMENTS],\n];\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * How a member is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  administrationMode,\n  editable = false,\n  groupId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const members: ResourceQueryResult<GroupMemberListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUP_MEMBERS, groupId, {limit: 100}],\n    (fetcher) => getGroupMembers({...groupsEndpoint, fetcher, groupId, limit: 100}),\n    {enabled: Boolean(groupId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const add: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      addGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n  const remove: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      removeGroupMembers({...groupsEndpoint, administrationMode, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: getAgentName(agent)})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, users.data],\n  );\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;AA0CA,MAAM,gCAAgC,EAAC,cAAwD;CAC7F,CAAC,eAAe,OAAO,QAAQ;CAC/B,CAAC,eAAe,eAAe,QAAQ;CACvC,CAAC,eAAe,YAAY;CAC5B,CAAC,cAAc,iBAAiB;CACjC;;;;;;;;;AA4BD,MAAMA,gBAAuC,EAC3C,oBACA,WAAW,OACX,SACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,iBAAqCC,8BAAsB,SAAS;CAC1E,MAAMC,gBAAoCD,8BAAsB,QAAQ;CACxE,MAAME,iBAAqCF,8BAAsB,SAAS;CAC1E,MAAMG,UAAwDC,yBAC5D;EAAC,eAAe;EAAe;EAAS,EAAC,OAAO,KAAI;EAAC,GACpD,YAAY,gBAAgB;EAAC,GAAG;EAAgB;EAAS;EAAS,OAAO;EAAI,CAAC,EAC/E,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMC,QAAsDD,yBAC1D,CAAC,cAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,YAAY,SAAS;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAME,SAAiDF,yBACrD,CAAC,eAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,YAAY,UAAU;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMG,MAA4DC,6BAC/D,EAAC,SAAS,IAAI,SAAS,WAAiC,YACvD,gBAAgB;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EAC9E,6BACD;CACD,MAAMC,SAA+DD,6BAClE,EAAC,SAAS,IAAI,SAAS,WAAiC,YACvD,mBAAmB;EAAC,GAAG;EAAgB;EAAoB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EACrG,6BACD;CAED,MAAME,aAAqE,eAClE;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,aAAa,MAAM;GAAC,EAAE;EAC3G,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,OAAO,2BAA2B,KAAK;GACxC,EAAE;EACJ,GACD,CAAC,OAAO,MAAM,MAAM,KAAK,CAC1B;AAED,QACE,oBAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,OACE,yBAAyB,GAAG,QAAQ,OAAO,6BAA6B,IACxE,yBAAyB,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}
+{"version":3,"file":"GroupMembers.js","names":["GroupMembers: FC<GroupMembersProps>","useTranslation","groupsEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","filter: string | undefined","members: ResourceQueryResult<GroupMemberListResponse>","useResourceQuery","users: ResourceQueryResult<FilteredPage<ManagedUserListResponse>>","agents: ResourceQueryResult<FilteredPage<AgentListResponse>>","add: ResourceMutationResult<Group, GroupMembersVariables>","useResourceMutation","remove: ResourceMutationResult<Group, GroupMembersVariables>","candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>>","BaseGroupMembers"],"sources":["../../../../src/components/admin/GroupMembers/GroupMembers.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupMember,\n  GroupMemberListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  ResourceQueryKey,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addGroupMembers,\n  getAgentName,\n  getAgents,\n  getGroupMembers,\n  getUsers,\n  removeGroupMembers,\n  resolveManagedIdentityName,\n  toEqualityFilter,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo} from 'react';\nimport BaseGroupMembers, {BaseGroupMembersProps} from './BaseGroupMembers';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface GroupMembersVariables {\n  groupId: string;\n  members: Pick<GroupMember, 'id' | 'type'>[];\n}\n\n/**\n * A candidate page with the filter it was listed with.\n */\ninterface FilteredPage<T> {\n  filter: string | undefined;\n  page: T;\n}\n\n/**\n * Query keys to refetch after a group's membership changes.\n */\nconst getMembershipInvalidatedKeys = ({groupId}: GroupMembersVariables): ResourceQueryKey[] => [\n  [GroupQueryKeys.GROUP, groupId],\n  [GroupQueryKeys.GROUP_MEMBERS, groupId],\n  [GroupQueryKeys.MEMBERSHIPS],\n  [RoleQueryKeys.ROLE_ASSIGNMENTS],\n];\n\nexport type GroupMembersProps = Omit<\n  BaseGroupMembersProps,\n  'candidates' | 'error' | 'isLoading' | 'isMutating' | 'members' | 'onAdd' | 'onRemove'\n> & {\n  /**\n   * How a member is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether members can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  groupId: string;\n  /**\n   * Organization unit the users and agents offered for adding are listed from.\n   */\n  ouId?: string;\n};\n\n/**\n * Lists the users and agents in a group, and lets the signed-in user add and remove them.\n *\n * @example\n * ```tsx\n * <GroupMembers groupId={groupId} />\n * ```\n */\nconst GroupMembers: FC<GroupMembersProps> = ({\n  administrationMode,\n  editable = false,\n  groupId,\n  ouId,\n  preferences,\n  ...rest\n}: GroupMembersProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const filter: string | undefined = toEqualityFilter('ouId', ouId);\n  const members: ResourceQueryResult<GroupMemberListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUP_MEMBERS, groupId, {limit: 100}],\n    (fetcher) => getGroupMembers({...groupsEndpoint, fetcher, groupId, limit: 100}),\n    {enabled: Boolean(groupId)},\n  );\n  const users: ResourceQueryResult<FilteredPage<ManagedUserListResponse>> = useResourceQuery(\n    [UserQueryKeys.USERS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getUsers({...usersEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<FilteredPage<AgentListResponse>> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getAgents({...agentsEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const add: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      addGroupMembers({...groupsEndpoint, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n  const remove: ResourceMutationResult<Group, GroupMembersVariables> = useResourceMutation(\n    ({groupId: id, members: changes}: GroupMembersVariables, fetcher) =>\n      removeGroupMembers({...groupsEndpoint, administrationMode, fetcher, groupId: id, members: changes}),\n    getMembershipInvalidatedKeys,\n  );\n\n  const candidates: Partial<Record<'user' | 'agent', IdentityCandidate[]>> = useMemo(() => {\n    // A page listed for an earlier ouId stays in a query until the next one succeeds, so it is not offered.\n    const current = <T,>(data: FilteredPage<T> | undefined): T | undefined =>\n      data && data.filter === filter ? data.page : undefined;\n\n    return {\n      agent: (current(agents.data)?.agents ?? []).map((agent: BasicAgent) => ({\n        id: agent.id,\n        label: getAgentName(agent),\n      })),\n      user: (current(users.data)?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    };\n  }, [agents.data, filter, users.data]);\n\n  return (\n    <BaseGroupMembers\n      members={members.data?.members ?? []}\n      isLoading={members.isLoading}\n      isMutating={add.isLoading || remove.isLoading}\n      error={\n        toManagementErrorMessage(t, members.error, 'admin.groups.members.error') ??\n        toManagementErrorMessage(t, add.error ?? remove.error, 'admin.groups.members.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAdd={\n        editable\n          ? (member: Pick<GroupMember, 'id' | 'type'>): void => void add.mutate({groupId, members: [member]})\n          : undefined\n      }\n      onRemove={\n        editable\n          ? (member: GroupMember): void => void remove.mutate({groupId, members: [{id: member.id, type: member.type}]})\n          : undefined\n      }\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default GroupMembers;\n"],"mappings":";;;;;;;;;;;;;AAmDA,MAAM,gCAAgC,EAAC,cAAwD;CAC7F,CAAC,eAAe,OAAO,QAAQ;CAC/B,CAAC,eAAe,eAAe,QAAQ;CACvC,CAAC,eAAe,YAAY;CAC5B,CAAC,cAAc,iBAAiB;CACjC;;;;;;;;;AAgCD,MAAMA,gBAAuC,EAC3C,oBACA,WAAW,OACX,SACA,MACA,YACA,GAAG,WACkC;CACrC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAMC,iBAAqCC,8BAAsB,SAAS;CAC1E,MAAMC,gBAAoCD,8BAAsB,QAAQ;CACxE,MAAME,iBAAqCF,8BAAsB,SAAS;CAC1E,MAAMG,SAA6B,iBAAiB,QAAQ,KAAK;CACjE,MAAMC,UAAwDC,yBAC5D;EAAC,eAAe;EAAe;EAAS,EAAC,OAAO,KAAI;EAAC,GACpD,YAAY,gBAAgB;EAAC,GAAG;EAAgB;EAAS;EAAS,OAAO;EAAI,CAAC,EAC/E,EAAC,SAAS,QAAQ,QAAQ,EAAC,CAC5B;CACD,MAAMC,QAAoED,yBACxE,CAAC,cAAc,OAAO;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC3C,OAAO,aAAa;EAAC;EAAQ,MAAM,MAAM,SAAS;GAAC,GAAG;GAAe;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACnG,EAAC,SAAS,UAAS,CACpB;CACD,MAAME,SAA+DF,yBACnE,CAAC,eAAe,QAAQ;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC7C,OAAO,aAAa;EAAC;EAAQ,MAAM,MAAM,UAAU;GAAC,GAAG;GAAgB;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACrG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMG,MAA4DC,6BAC/D,EAAC,SAAS,IAAI,SAAS,WAAiC,YACvD,gBAAgB;EAAC,GAAG;EAAgB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EAC9E,6BACD;CACD,MAAMC,SAA+DD,6BAClE,EAAC,SAAS,IAAI,SAAS,WAAiC,YACvD,mBAAmB;EAAC,GAAG;EAAgB;EAAoB;EAAS,SAAS;EAAI,SAAS;EAAQ,CAAC,EACrG,6BACD;CAED,MAAME,aAAqE,cAAc;EAEvF,MAAM,WAAe,SACnB,QAAQ,KAAK,WAAW,SAAS,KAAK,OAAO;AAE/C,SAAO;GACL,QAAQ,QAAQ,OAAO,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,WAAuB;IACtE,IAAI,MAAM;IACV,OAAO,aAAa,MAAM;IAC3B,EAAE;GACH,OAAO,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAE,EAAE,KAAK,UAAuB;IACnE,IAAI,KAAK;IACT,OAAO,2BAA2B,KAAK;IACxC,EAAE;GACJ;IACA;EAAC,OAAO;EAAM;EAAQ,MAAM;EAAK,CAAC;AAErC,QACE,oBAACC;EACC,SAAS,QAAQ,MAAM,WAAW,EAAE;EACpC,WAAW,QAAQ;EACnB,YAAY,IAAI,aAAa,OAAO;EACpC,OACE,yBAAyB,GAAG,QAAQ,OAAO,6BAA6B,IACxE,yBAAyB,GAAG,IAAI,SAAS,OAAO,OAAO,oCAAoC;EAE7F,YAAY,WAAW,aAAa;EACpC,OACE,YACK,WAAmD,KAAK,IAAI,OAAO;GAAC;GAAS,SAAS,CAAC,OAAO;GAAC,CAAC,GACjG;EAEN,UACE,YACK,WAA8B,KAAK,OAAO,OAAO;GAAC;GAAS,SAAS,CAAC;IAAC,IAAI,OAAO;IAAI,MAAM,OAAO;IAAK,CAAC;GAAC,CAAC,GAC3G;EAEO;EACb,GAAI;GACJ;;AAIN,2BAAe"}

package/dist/components/admin/RoleAssignments/RoleAssignments.d.ts

@@ -18,6 +18,10 @@ export type RoleAssignmentsProps = Omit<BaseRoleAssignmentsProps, 'assignments'
      * @default true
      */
     filterable?: boolean;
+    /**
+     * Organization unit the users, groups and agents offered for assignment are listed from.
+     */
+    ouId?: string;
     roleId: string;
 };
 /**

package/dist/components/admin/RoleAssignments/RoleAssignments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RoleAssignments.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"names":[],"mappings":"AAGA,OAAO,EACL,kBAAkB,EAwBnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,EAAE,EAAkC,MAAM,OAAO,CAAC;AAC1D,OAA4B,EAAC,wBAAwB,EAAC,MAAM,uBAAuB,CAAC;AAYpF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,wBAAwB,EACtB,aAAa,GACb,YAAY,GACZ,OAAO,GACP,WAAW,GACX,YAAY,GACZ,UAAU,GACV,oBAAoB,GACpB,YAAY,GACZ,YAAY,CACf,GAAG;IACF;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;;GAQG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAqF7C,CAAC;AAEF,eAAe,eAAe,CAAC"}
+{"version":3,"file":"RoleAssignments.d.ts","sourceRoot":"","sources":["../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"names":[],"mappings":"AAGA,OAAO,EACL,kBAAkB,EAyBnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,EAAE,EAAkC,MAAM,OAAO,CAAC;AAC1D,OAA4B,EAAC,wBAAwB,EAAC,MAAM,uBAAuB,CAAC;AAoBpF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,wBAAwB,EACtB,aAAa,GACb,YAAY,GACZ,OAAO,GACP,WAAW,GACX,YAAY,GACZ,UAAU,GACV,oBAAoB,GACpB,YAAY,GACZ,YAAY,CACf,GAAG;IACF;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;;GAQG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CA6F7C,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/components/admin/RoleAssignments/RoleAssignments.js

@@ -3,7 +3,7 @@ import useManagementEndpoint_default from "../../../hooks/management/useManageme
 import useResourceQuery_default from "../../../hooks/management/useResourceQuery.js";
 import useResourceMutation_default from "../../../hooks/management/useResourceMutation.js";
 import BaseRoleAssignments_default from "./BaseRoleAssignments.js";
-import { AgentQueryKeys, GroupQueryKeys, RoleQueryKeys, UserQueryKeys, addRoleAssignments, getAgentName, getAgents, getGroups, getRoleAssignments, getUsers, removeRoleAssignments, resolveManagedIdentityName, toManagementErrorMessage } from "@thunderid/browser";
+import { AgentQueryKeys, GroupQueryKeys, RoleQueryKeys, UserQueryKeys, addRoleAssignments, getAgentName, getAgents, getGroups, getRoleAssignments, getUsers, removeRoleAssignments, resolveManagedIdentityName, toEqualityFilter, toManagementErrorMessage } from "@thunderid/browser";
 import { useMemo, useState } from "react";
 import { jsx } from "react/jsx-runtime";
 
@@ -17,7 +17,7 @@ import { jsx } from "react/jsx-runtime";
 * <RoleAssignments roleId={roleId} />
 * ```
 */
-const RoleAssignments = ({ administrationMode, editable = false, filterable = true, preferences, roleId,...rest }) => {
+const RoleAssignments = ({ administrationMode, editable = false, filterable = true, ouId, preferences, roleId,...rest }) => {
 	const { t } = useTranslation_default(preferences?.i18n);
 	const [typeFilter, setTypeFilter] = useState(null);
 	const rolesEndpoint = useManagementEndpoint_default("roles");
@@ -25,6 +25,7 @@ const RoleAssignments = ({ administrationMode, editable = false, filterable = tr
 	const groupsEndpoint = useManagementEndpoint_default("groups");
 	const agentsEndpoint = useManagementEndpoint_default("agents");
 	const type = typeFilter ?? void 0;
+	const filter = toEqualityFilter("ouId", ouId);
 	const assignments = useResourceQuery_default([
 		RoleQueryKeys.ROLE_ASSIGNMENTS,
 		roleId,
@@ -39,20 +40,41 @@ const RoleAssignments = ({ administrationMode, editable = false, filterable = tr
 		roleId,
 		type
 	}), { enabled: Boolean(roleId) });
-	const users = useResourceQuery_default([UserQueryKeys.USERS, { limit: 100 }], (fetcher) => getUsers({
-		...usersEndpoint,
-		fetcher,
+	const users = useResourceQuery_default([UserQueryKeys.USERS, {
+		filter,
 		limit: 100
+	}], async (fetcher) => ({
+		filter,
+		page: await getUsers({
+			...usersEndpoint,
+			fetcher,
+			filter,
+			limit: 100
+		})
 	}), { enabled: editable });
-	const groups = useResourceQuery_default([GroupQueryKeys.GROUPS, { limit: 100 }], (fetcher) => getGroups({
-		...groupsEndpoint,
-		fetcher,
+	const groups = useResourceQuery_default([GroupQueryKeys.GROUPS, {
+		filter,
 		limit: 100
+	}], async (fetcher) => ({
+		filter,
+		page: await getGroups({
+			...groupsEndpoint,
+			fetcher,
+			filter,
+			limit: 100
+		})
 	}), { enabled: editable });
-	const agents = useResourceQuery_default([AgentQueryKeys.AGENTS, { limit: 100 }], (fetcher) => getAgents({
-		...agentsEndpoint,
-		fetcher,
+	const agents = useResourceQuery_default([AgentQueryKeys.AGENTS, {
+		filter,
 		limit: 100
+	}], async (fetcher) => ({
+		filter,
+		page: await getAgents({
+			...agentsEndpoint,
+			fetcher,
+			filter,
+			limit: 100
+		})
 	}), { enabled: editable });
 	const assign = useResourceMutation_default(({ assignments: changes, roleId: id }, fetcher) => addRoleAssignments({
 		...rolesEndpoint,
@@ -67,21 +89,25 @@ const RoleAssignments = ({ administrationMode, editable = false, filterable = tr
 		fetcher,
 		roleId: id
 	}), () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]]);
-	const candidates = useMemo(() => ({
-		agent: (agents.data?.agents ?? []).map((agent) => ({
-			id: agent.id,
-			label: getAgentName(agent)
-		})),
-		group: (groups.data?.groups ?? []).map((group) => ({
-			id: group.id,
-			label: group.name
-		})),
-		user: (users.data?.users ?? []).map((user) => ({
-			id: user.id,
-			label: resolveManagedIdentityName(user)
-		}))
-	}), [
+	const candidates = useMemo(() => {
+		const current = (data) => data && data.filter === filter ? data.page : void 0;
+		return {
+			agent: (current(agents.data)?.agents ?? []).map((agent) => ({
+				id: agent.id,
+				label: getAgentName(agent)
+			})),
+			group: (current(groups.data)?.groups ?? []).map((group) => ({
+				id: group.id,
+				label: group.name
+			})),
+			user: (current(users.data)?.users ?? []).map((user) => ({
+				id: user.id,
+				label: resolveManagedIdentityName(user)
+			}))
+		};
+	}, [
 		agents.data,
+		filter,
 		groups.data,
 		users.data
 	]);

package/dist/components/admin/RoleAssignments/RoleAssignments.js.map

@@ -1 +1 @@
-{"version":3,"file":"RoleAssignments.js","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","rolesEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","groupsEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","type: RoleAssigneeType | undefined","assignments: ResourceQueryResult<RoleAssignmentListResponse>","useResourceQuery","users: ResourceQueryResult<ManagedUserListResponse>","groups: ResourceQueryResult<GroupListResponse>","agents: ResourceQueryResult<AgentListResponse>","assign: ResourceMutationResult<void, RoleAssignmentsVariables>","useResourceMutation","unassign: ResourceMutationResult<void, RoleAssignmentsVariables>","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n  RoleAssignmentListResponse,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addRoleAssignments,\n  getAgentName,\n  getAgents,\n  getGroups,\n  getRoleAssignments,\n  getUsers,\n  removeRoleAssignments,\n  resolveManagedIdentityName,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface RoleAssignmentsVariables {\n  assignments: RoleAssignmentInput[];\n  roleId: string;\n}\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * How an assignment is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  administrationMode,\n  editable = false,\n  filterable = true,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const rolesEndpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const type: RoleAssigneeType | undefined = typeFilter ?? undefined;\n  const assignments: ResourceQueryResult<RoleAssignmentListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, roleId, {limit: 100, type}],\n    (fetcher) => getRoleAssignments({...rolesEndpoint, fetcher, limit: 100, roleId, type}),\n    {enabled: Boolean(roleId)},\n  );\n  const users: ResourceQueryResult<ManagedUserListResponse> = useResourceQuery(\n    [UserQueryKeys.USERS, {limit: 100}],\n    (fetcher) => getUsers({...usersEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const groups: ResourceQueryResult<GroupListResponse> = useResourceQuery(\n    [GroupQueryKeys.GROUPS, {limit: 100}],\n    (fetcher) => getGroups({...groupsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<AgentListResponse> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {limit: 100}],\n    (fetcher) => getAgents({...agentsEndpoint, fetcher, limit: 100}),\n    {enabled: editable},\n  );\n  const assign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      addRoleAssignments({...rolesEndpoint, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n  const unassign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      removeRoleAssignments({...rolesEndpoint, administrationMode, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(\n    () => ({\n      agent: (agents.data?.agents ?? []).map((agent: BasicAgent) => ({id: agent.id, label: getAgentName(agent)})),\n      group: (groups.data?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (users.data?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    }),\n    [agents.data, groups.data, users.data],\n  );\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAkFA,MAAMA,mBAA6C,EACjD,oBACA,WAAW,OACX,aAAa,MACb,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,iBAAiB,SAAkC,KAAK;CAC3E,MAAMC,gBAAoCC,8BAAsB,QAAQ;CACxE,MAAMC,gBAAoCD,8BAAsB,QAAQ;CACxE,MAAME,iBAAqCF,8BAAsB,SAAS;CAC1E,MAAMG,iBAAqCH,8BAAsB,SAAS;CAC1E,MAAMI,OAAqC,cAAc;CACzD,MAAMC,cAA+DC,yBACnE;EAAC,cAAc;EAAkB;EAAQ;GAAC,OAAO;GAAK;GAAK;EAAC,GAC3D,YAAY,mBAAmB;EAAC,GAAG;EAAe;EAAS,OAAO;EAAK;EAAQ;EAAK,CAAC,EACtF,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,QAAsDD,yBAC1D,CAAC,cAAc,OAAO,EAAC,OAAO,KAAI,CAAC,GAClC,YAAY,SAAS;EAAC,GAAG;EAAe;EAAS,OAAO;EAAI,CAAC,EAC9D,EAAC,SAAS,UAAS,CACpB;CACD,MAAME,SAAiDF,yBACrD,CAAC,eAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,YAAY,UAAU;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMG,SAAiDH,yBACrD,CAAC,eAAe,QAAQ,EAAC,OAAO,KAAI,CAAC,GACpC,YAAY,UAAU;EAAC,GAAG;EAAgB;EAAS,OAAO;EAAI,CAAC,EAChE,EAAC,SAAS,UAAS,CACpB;CACD,MAAMI,SAAiEC,6BACpE,EAAC,aAAa,SAAS,QAAQ,MAA+B,YAC7D,mBAAmB;EAAC,GAAG;EAAe,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QAC7E,CAAC,CAAC,cAAc,iBAAiB,CAAC,CACzC;CACD,MAAMC,WAAmED,6BACtE,EAAC,aAAa,SAAS,QAAQ,MAA+B,YAC7D,sBAAsB;EAAC,GAAG;EAAe;EAAoB,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QACpG,CAAC,CAAC,cAAc,iBAAiB,CAAC,CACzC;CAED,MAAME,aAA+E,eAC5E;EACL,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAuB;GAAC,IAAI,MAAM;GAAI,OAAO,aAAa,MAAM;GAAC,EAAE;EAC3G,QAAQ,OAAO,MAAM,UAAU,EAAE,EAAE,KAAK,WAAkB;GAAC,IAAI,MAAM;GAAI,OAAO,MAAM;GAAK,EAAE;EAC7F,OAAO,MAAM,MAAM,SAAS,EAAE,EAAE,KAAK,UAAuB;GAC1D,IAAI,KAAK;GACT,OAAO,2BAA2B,KAAK;GACxC,EAAE;EACJ,GACD;EAAC,OAAO;EAAM,OAAO;EAAM,MAAM;EAAK,CACvC;AAED,QACE,oBAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,OACE,yBAAyB,GAAG,YAAY,OAAO,gCAAgC,IAC/E,yBAAyB,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}
+{"version":3,"file":"RoleAssignments.js","names":["RoleAssignments: FC<RoleAssignmentsProps>","useTranslation","rolesEndpoint: ManagementEndpoint","useManagementEndpoint","usersEndpoint: ManagementEndpoint","groupsEndpoint: ManagementEndpoint","agentsEndpoint: ManagementEndpoint","type: RoleAssigneeType | undefined","filter: string | undefined","assignments: ResourceQueryResult<RoleAssignmentListResponse>","useResourceQuery","users: ResourceQueryResult<FilteredPage<ManagedUserListResponse>>","groups: ResourceQueryResult<FilteredPage<GroupListResponse>>","agents: ResourceQueryResult<FilteredPage<AgentListResponse>>","assign: ResourceMutationResult<void, RoleAssignmentsVariables>","useResourceMutation","unassign: ResourceMutationResult<void, RoleAssignmentsVariables>","candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>>","BaseRoleAssignments"],"sources":["../../../../src/components/admin/RoleAssignments/RoleAssignments.tsx"],"sourcesContent":["// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n  AdministrationMode,\n  AgentListResponse,\n  AgentQueryKeys,\n  BasicAgent,\n  Group,\n  GroupListResponse,\n  GroupQueryKeys,\n  ManagedUser,\n  ManagedUserListResponse,\n  RoleAssigneeType,\n  RoleAssignment,\n  RoleAssignmentInput,\n  RoleAssignmentListResponse,\n  RoleQueryKeys,\n  UserQueryKeys,\n  addRoleAssignments,\n  getAgentName,\n  getAgents,\n  getGroups,\n  getRoleAssignments,\n  getUsers,\n  removeRoleAssignments,\n  resolveManagedIdentityName,\n  toEqualityFilter,\n  toManagementErrorMessage,\n} from '@thunderid/browser';\nimport {FC, ReactElement, useMemo, useState} from 'react';\nimport BaseRoleAssignments, {BaseRoleAssignmentsProps} from './BaseRoleAssignments';\nimport useManagementEndpoint, {ManagementEndpoint} from '../../../hooks/management/useManagementEndpoint';\nimport useResourceMutation, {ResourceMutationResult} from '../../../hooks/management/useResourceMutation';\nimport useResourceQuery, {ResourceQueryResult} from '../../../hooks/management/useResourceQuery';\nimport useTranslation from '../../../hooks/useTranslation';\nimport {IdentityCandidate} from '../shared/IdentityPicker';\n\ninterface RoleAssignmentsVariables {\n  assignments: RoleAssignmentInput[];\n  roleId: string;\n}\n\n/**\n * A candidate page with the filter it was listed with.\n */\ninterface FilteredPage<T> {\n  filter: string | undefined;\n  page: T;\n}\n\nexport type RoleAssignmentsProps = Omit<\n  BaseRoleAssignmentsProps,\n  | 'assignments'\n  | 'candidates'\n  | 'error'\n  | 'isLoading'\n  | 'isMutating'\n  | 'onAssign'\n  | 'onTypeFilterChange'\n  | 'onUnassign'\n  | 'typeFilter'\n> & {\n  /**\n   * How an assignment is removed. `flow` runs the administration flow the server configures for it, which can revoke\n   * grants and end sessions first. It needs `baseUrl`.\n   * @default 'native'\n   */\n  administrationMode?: AdministrationMode;\n  /**\n   * Whether assignments can be added and removed from this view.\n   * @default false\n   */\n  editable?: boolean;\n  /**\n   * Whether to show the assignee type filter, which narrows the list on the server.\n   * @default true\n   */\n  filterable?: boolean;\n  /**\n   * Organization unit the users, groups and agents offered for assignment are listed from.\n   */\n  ouId?: string;\n  roleId: string;\n};\n\n/**\n * Lists who holds a role, and lets the signed-in user assign it to users, groups and agents or\n * remove it from them.\n *\n * @example\n * ```tsx\n * <RoleAssignments roleId={roleId} />\n * ```\n */\nconst RoleAssignments: FC<RoleAssignmentsProps> = ({\n  administrationMode,\n  editable = false,\n  filterable = true,\n  ouId,\n  preferences,\n  roleId,\n  ...rest\n}: RoleAssignmentsProps): ReactElement => {\n  const {t} = useTranslation(preferences?.i18n);\n  const [typeFilter, setTypeFilter] = useState<RoleAssigneeType | null>(null);\n  const rolesEndpoint: ManagementEndpoint = useManagementEndpoint('roles');\n  const usersEndpoint: ManagementEndpoint = useManagementEndpoint('users');\n  const groupsEndpoint: ManagementEndpoint = useManagementEndpoint('groups');\n  const agentsEndpoint: ManagementEndpoint = useManagementEndpoint('agents');\n  const type: RoleAssigneeType | undefined = typeFilter ?? undefined;\n  const filter: string | undefined = toEqualityFilter('ouId', ouId);\n  const assignments: ResourceQueryResult<RoleAssignmentListResponse> = useResourceQuery(\n    [RoleQueryKeys.ROLE_ASSIGNMENTS, roleId, {limit: 100, type}],\n    (fetcher) => getRoleAssignments({...rolesEndpoint, fetcher, limit: 100, roleId, type}),\n    {enabled: Boolean(roleId)},\n  );\n  const users: ResourceQueryResult<FilteredPage<ManagedUserListResponse>> = useResourceQuery(\n    [UserQueryKeys.USERS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getUsers({...usersEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const groups: ResourceQueryResult<FilteredPage<GroupListResponse>> = useResourceQuery(\n    [GroupQueryKeys.GROUPS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getGroups({...groupsEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const agents: ResourceQueryResult<FilteredPage<AgentListResponse>> = useResourceQuery(\n    [AgentQueryKeys.AGENTS, {filter, limit: 100}],\n    async (fetcher) => ({filter, page: await getAgents({...agentsEndpoint, fetcher, filter, limit: 100})}),\n    {enabled: editable},\n  );\n  const assign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      addRoleAssignments({...rolesEndpoint, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n  const unassign: ResourceMutationResult<void, RoleAssignmentsVariables> = useResourceMutation(\n    ({assignments: changes, roleId: id}: RoleAssignmentsVariables, fetcher) =>\n      removeRoleAssignments({...rolesEndpoint, administrationMode, assignments: changes, fetcher, roleId: id}),\n    () => [[RoleQueryKeys.ROLE_ASSIGNMENTS]],\n  );\n\n  const candidates: Partial<Record<'user' | 'group' | 'agent', IdentityCandidate[]>> = useMemo(() => {\n    // A page listed for an earlier ouId stays in a query until the next one succeeds, so it is not offered.\n    const current = <T,>(data: FilteredPage<T> | undefined): T | undefined =>\n      data && data.filter === filter ? data.page : undefined;\n\n    return {\n      agent: (current(agents.data)?.agents ?? []).map((agent: BasicAgent) => ({\n        id: agent.id,\n        label: getAgentName(agent),\n      })),\n      group: (current(groups.data)?.groups ?? []).map((group: Group) => ({id: group.id, label: group.name})),\n      user: (current(users.data)?.users ?? []).map((user: ManagedUser) => ({\n        id: user.id,\n        label: resolveManagedIdentityName(user),\n      })),\n    };\n  }, [agents.data, filter, groups.data, users.data]);\n\n  return (\n    <BaseRoleAssignments\n      assignments={assignments.data?.assignments ?? []}\n      isLoading={assignments.isLoading}\n      isMutating={assign.isLoading || unassign.isLoading}\n      error={\n        toManagementErrorMessage(t, assignments.error, 'admin.roles.assignments.error') ??\n        toManagementErrorMessage(t, assign.error ?? unassign.error, 'admin.roles.assignments.update_error')\n      }\n      candidates={editable ? candidates : undefined}\n      onAssign={\n        editable\n          ? (assignment: RoleAssignmentInput): void => void assign.mutate({assignments: [assignment], roleId})\n          : undefined\n      }\n      onUnassign={\n        editable\n          ? (assignment: RoleAssignment): void =>\n              void unassign.mutate({assignments: [{id: assignment.id, type: assignment.type}], roleId})\n          : undefined\n      }\n      typeFilter={typeFilter}\n      onTypeFilterChange={filterable ? setTypeFilter : undefined}\n      preferences={preferences}\n      {...rest}\n    />\n  );\n};\n\nexport default RoleAssignments;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA+FA,MAAMA,mBAA6C,EACjD,oBACA,WAAW,OACX,aAAa,MACb,MACA,aACA,OACA,GAAG,WACqC;CACxC,MAAM,EAAC,MAAKC,uBAAe,aAAa,KAAK;CAC7C,MAAM,CAAC,YAAY,iBAAiB,SAAkC,KAAK;CAC3E,MAAMC,gBAAoCC,8BAAsB,QAAQ;CACxE,MAAMC,gBAAoCD,8BAAsB,QAAQ;CACxE,MAAME,iBAAqCF,8BAAsB,SAAS;CAC1E,MAAMG,iBAAqCH,8BAAsB,SAAS;CAC1E,MAAMI,OAAqC,cAAc;CACzD,MAAMC,SAA6B,iBAAiB,QAAQ,KAAK;CACjE,MAAMC,cAA+DC,yBACnE;EAAC,cAAc;EAAkB;EAAQ;GAAC,OAAO;GAAK;GAAK;EAAC,GAC3D,YAAY,mBAAmB;EAAC,GAAG;EAAe;EAAS,OAAO;EAAK;EAAQ;EAAK,CAAC,EACtF,EAAC,SAAS,QAAQ,OAAO,EAAC,CAC3B;CACD,MAAMC,QAAoED,yBACxE,CAAC,cAAc,OAAO;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC3C,OAAO,aAAa;EAAC;EAAQ,MAAM,MAAM,SAAS;GAAC,GAAG;GAAe;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACnG,EAAC,SAAS,UAAS,CACpB;CACD,MAAME,SAA+DF,yBACnE,CAAC,eAAe,QAAQ;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC7C,OAAO,aAAa;EAAC;EAAQ,MAAM,MAAM,UAAU;GAAC,GAAG;GAAgB;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACrG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMG,SAA+DH,yBACnE,CAAC,eAAe,QAAQ;EAAC;EAAQ,OAAO;EAAI,CAAC,EAC7C,OAAO,aAAa;EAAC;EAAQ,MAAM,MAAM,UAAU;GAAC,GAAG;GAAgB;GAAS;GAAQ,OAAO;GAAI,CAAC;EAAC,GACrG,EAAC,SAAS,UAAS,CACpB;CACD,MAAMI,SAAiEC,6BACpE,EAAC,aAAa,SAAS,QAAQ,MAA+B,YAC7D,mBAAmB;EAAC,GAAG;EAAe,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QAC7E,CAAC,CAAC,cAAc,iBAAiB,CAAC,CACzC;CACD,MAAMC,WAAmED,6BACtE,EAAC,aAAa,SAAS,QAAQ,MAA+B,YAC7D,sBAAsB;EAAC,GAAG;EAAe;EAAoB,aAAa;EAAS;EAAS,QAAQ;EAAG,CAAC,QACpG,CAAC,CAAC,cAAc,iBAAiB,CAAC,CACzC;CAED,MAAME,aAA+E,cAAc;EAEjG,MAAM,WAAe,SACnB,QAAQ,KAAK,WAAW,SAAS,KAAK,OAAO;AAE/C,SAAO;GACL,QAAQ,QAAQ,OAAO,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,WAAuB;IACtE,IAAI,MAAM;IACV,OAAO,aAAa,MAAM;IAC3B,EAAE;GACH,QAAQ,QAAQ,OAAO,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,WAAkB;IAAC,IAAI,MAAM;IAAI,OAAO,MAAM;IAAK,EAAE;GACtG,OAAO,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAE,EAAE,KAAK,UAAuB;IACnE,IAAI,KAAK;IACT,OAAO,2BAA2B,KAAK;IACxC,EAAE;GACJ;IACA;EAAC,OAAO;EAAM;EAAQ,OAAO;EAAM,MAAM;EAAK,CAAC;AAElD,QACE,oBAACC;EACC,aAAa,YAAY,MAAM,eAAe,EAAE;EAChD,WAAW,YAAY;EACvB,YAAY,OAAO,aAAa,SAAS;EACzC,OACE,yBAAyB,GAAG,YAAY,OAAO,gCAAgC,IAC/E,yBAAyB,GAAG,OAAO,SAAS,SAAS,OAAO,uCAAuC;EAErG,YAAY,WAAW,aAAa;EACpC,UACE,YACK,eAA0C,KAAK,OAAO,OAAO;GAAC,aAAa,CAAC,WAAW;GAAE;GAAO,CAAC,GAClG;EAEN,YACE,YACK,eACC,KAAK,SAAS,OAAO;GAAC,aAAa,CAAC;IAAC,IAAI,WAAW;IAAI,MAAM,WAAW;IAAK,CAAC;GAAE;GAAO,CAAC,GAC3F;EAEM;EACZ,oBAAoB,aAAa,gBAAgB;EACpC;EACb,GAAI;GACJ;;AAIN,8BAAe"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thunderid/react",
-  "version": "1.9.2",
+  "version": "1.10.1",
   "description": "React SDK for ThunderID",
   "keywords": [
     "thunderid",
@@ -60,7 +60,7 @@
   "dependencies": {
     "@emotion/css": "11.13.5",
     "@floating-ui/react": "0.27.12",
-    "@thunderid/browser": "^1.7.1",
+    "@thunderid/browser": "^1.8.1",
     "dompurify": "3.4.17",
     "tslib": "2.8.1"
   },