@thunderid/tanstack-router 1.3.1 → 1.5.0

package/dist/cjs/index.cjs

@@ -310,7 +310,190 @@ const CallbackRoute = ({ onError, onNavigate }) => {
 };
 var CallbackRoute_default = CallbackRoute;
 
+//#endregion
+//#region src/routes/AdminPage.tsx
+const SECTION_PAGES = {
+	agents: {
+		create: ({ options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(__thunderid_react.AgentCreate, {
+			preferences: options.preferences,
+			onCreated: (agent) => toDetails(agent.id)
+		}),
+		details: ({ id, options, toList }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(__thunderid_react.AgentDetails, {
+			agentId: id,
+			deletable: options.deletable,
+			preferences: options.preferences,
+			onDeleted: toList
+		}),
+		list: ({ createAction, options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(__thunderid_react.AgentList, {
+			actions: createAction,
+			preferences: options.preferences,
+			onSelect: (agent) => toDetails(agent.id)
+		})
+	},
+	groups: {
+		create: ({ options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(__thunderid_react.GroupCreate, {
+			preferences: options.preferences,
+			onCreated: (group) => toDetails(group.id)
+		}),
+		details: ({ id, options }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(__thunderid_react.GroupMembers, {
+			groupId: id,
+			editable: options.editable,
+			preferences: options.preferences
+		}),
+		list: ({ createAction, options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(__thunderid_react.GroupList, {
+			actions: createAction,
+			preferences: options.preferences,
+			onSelect: (group) => toDetails(group.id)
+		})
+	},
+	roles: {
+		create: ({ options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(__thunderid_react.RoleCreate, {
+			preferences: options.preferences,
+			onCreated: (role) => toDetails(role.id)
+		}),
+		details: ({ id, options }) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(__thunderid_react.RolePermissions, {
+			roleId: id,
+			preferences: options.preferences
+		}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(__thunderid_react.RoleAssignments, {
+			roleId: id,
+			editable: options.editable,
+			preferences: options.preferences
+		})] }),
+		list: ({ createAction, options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(__thunderid_react.RoleList, {
+			actions: createAction,
+			preferences: options.preferences,
+			onSelect: (role) => toDetails(role.id)
+		})
+	},
+	users: {
+		create: ({ options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(__thunderid_react.UserCreate, {
+			preferences: options.preferences,
+			onCreated: (user) => toDetails(user.id)
+		}),
+		details: ({ id, options, toList }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(__thunderid_react.UserDetails, {
+			userId: id,
+			deletable: options.deletable,
+			editable: options.editable,
+			preferences: options.preferences,
+			onDeleted: toList
+		}),
+		list: ({ createAction, options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(__thunderid_react.UserList, {
+			actions: createAction,
+			preferences: options.preferences,
+			onSelect: (user) => toDetails(user.id)
+		})
+	}
+};
+/**
+* Renders one admin page and wires its callbacks to navigation within its section.
+*/
+const AdminPage = ({ getSectionPath, kind, options, section }) => {
+	const navigate = (0, __tanstack_react_router.useNavigate)();
+	const id = (0, __tanstack_react_router.useParams)({
+		select: (params) => params.id ?? "",
+		strict: false
+	});
+	const { t } = (0, __thunderid_react.useTranslation)(options.preferences?.i18n);
+	const sectionPath = getSectionPath().replace(/\/+$/, "");
+	const toList = () => {
+		navigate({ to: sectionPath });
+	};
+	const toDetails = (resourceId) => {
+		navigate({
+			params: { id: resourceId },
+			to: `${sectionPath}/$id`
+		});
+	};
+	const createAction = kind === "list" ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(__thunderid_react.Button, {
+		onClick: () => void navigate({ to: `${sectionPath}/new` }),
+		children: t(`admin.${section}.create.title`)
+	}) : null;
+	return SECTION_PAGES[section][kind]({
+		createAction,
+		id,
+		options,
+		toDetails,
+		toList
+	});
+};
+var AdminPage_default = AdminPage;
+
+//#endregion
+//#region src/routes/createAdminRoutes.tsx
+const DEFAULT_SECTIONS = [
+	"users",
+	"groups",
+	"roles",
+	"agents"
+];
+/**
+* Builds TanStack Router routes that mount the admin (management) sections of `@thunderid/react`
+* under `parentRoute`: for each section a list at `<section>`, a create form at `<section>/new`, and
+* a details page at `<section>/$id`. Selecting, creating and deleting navigate between them.
+*
+* The routes are built with `createRoute`, so they carry no route-tree types of their own; navigate
+* to them with string paths.
+*
+* @param parentRoute - The route to mount the sections under, such as the root route or an `/admin` route.
+* @param options - Which sections to mount and how to render them.
+* @returns One route per section, each with its pages as children, for `parentRoute.addChildren`.
+*
+* @example
+* ```tsx
+* const adminRoute = createRoute({getParentRoute: () => rootRoute, path: '/admin'});
+*
+* const routeTree = rootRoute.addChildren([
+*   indexRoute,
+*   adminRoute.addChildren(createAdminRoutes(adminRoute, {protect: {redirectTo: '/signin'}})),
+* ]);
+* ```
+*/
+const createAdminRoutes = (parentRoute, options = {}) => {
+	const { protect, sections = DEFAULT_SECTIONS } = options;
+	return sections.map((section) => {
+		const sectionRoute = (0, __tanstack_react_router.createRoute)({
+			getParentRoute: () => parentRoute,
+			path: section
+		});
+		const page = (kind) => {
+			const Page = () => {
+				const element = /* @__PURE__ */ (0, import_jsx_runtime.jsx)(AdminPage_default, {
+					getSectionPath: () => sectionRoute.fullPath,
+					kind,
+					options,
+					section
+				});
+				return protect ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ProtectedRoute_default, {
+					...protect,
+					children: element
+				}) : element;
+			};
+			Page.displayName = `Admin(${section}/${kind})`;
+			return Page;
+		};
+		return sectionRoute.addChildren([
+			(0, __tanstack_react_router.createRoute)({
+				component: page("list"),
+				getParentRoute: () => sectionRoute,
+				path: "/"
+			}),
+			(0, __tanstack_react_router.createRoute)({
+				component: page("create"),
+				getParentRoute: () => sectionRoute,
+				path: "new"
+			}),
+			(0, __tanstack_react_router.createRoute)({
+				component: page("details"),
+				getParentRoute: () => sectionRoute,
+				path: "$id"
+			})
+		]);
+	});
+};
+var createAdminRoutes_default = createAdminRoutes;
+
 //#endregion
 exports.CallbackRoute = CallbackRoute_default;
 exports.ProtectedRoute = ProtectedRoute_default;
+exports.createAdminRoutes = createAdminRoutes_default;
 //# sourceMappingURL=index.cjs.map

package/dist/cjs/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["ProtectedRoute: FC<ProtectedRouteProps>","Navigate","ThunderIDRuntimeError","CallbackRoute: FC<CallbackRouteProps>","router: ReturnType<typeof useRouter>","fullPath: string","basename: string","navigationPath: string","Callback"],"sources":["../../../../node_modules/.pnpm/react@19.2.3/node_modules/react/cjs/react-jsx-runtime.development.js","../../../../node_modules/.pnpm/react@19.2.3/node_modules/react/jsx-runtime.js","../../src/components/ProtectedRoute.tsx","../../src/components/CallbackRoute.tsx"],"sourcesContent":["/**\n * @license React\n * react-jsx-runtime.development.js\n *\n * Copyright (c) Meta Platforms, Inc. and affiliates.\n *\n * This source code is licensed under the MIT license found in the\n * LICENSE file in the root directory of this source tree.\n */\n\n\"use strict\";\n\"production\" !== process.env.NODE_ENV &&\n  (function () {\n    function getComponentNameFromType(type) {\n      if (null == type) return null;\n      if (\"function\" === typeof type)\n        return type.$$typeof === REACT_CLIENT_REFERENCE\n          ? null\n          : type.displayName || type.name || null;\n      if (\"string\" === typeof type) return type;\n      switch (type) {\n        case REACT_FRAGMENT_TYPE:\n          return \"Fragment\";\n        case REACT_PROFILER_TYPE:\n          return \"Profiler\";\n        case REACT_STRICT_MODE_TYPE:\n          return \"StrictMode\";\n        case REACT_SUSPENSE_TYPE:\n          return \"Suspense\";\n        case REACT_SUSPENSE_LIST_TYPE:\n          return \"SuspenseList\";\n        case REACT_ACTIVITY_TYPE:\n          return \"Activity\";\n      }\n      if (\"object\" === typeof type)\n        switch (\n          (\"number\" === typeof type.tag &&\n            console.error(\n              \"Received an unexpected object in getComponentNameFromType(). This is likely a bug in React. Please file an issue.\"\n            ),\n          type.$$typeof)\n        ) {\n          case REACT_PORTAL_TYPE:\n            return \"Portal\";\n          case REACT_CONTEXT_TYPE:\n            return type.displayName || \"Context\";\n          case REACT_CONSUMER_TYPE:\n            return (type._context.displayName || \"Context\") + \".Consumer\";\n          case REACT_FORWARD_REF_TYPE:\n            var innerType = type.render;\n            type = type.displayName;\n            type ||\n              ((type = innerType.displayName || innerType.name || \"\"),\n              (type = \"\" !== type ? \"ForwardRef(\" + type + \")\" : \"ForwardRef\"));\n            return type;\n          case REACT_MEMO_TYPE:\n            return (\n              (innerType = type.displayName || null),\n              null !== innerType\n                ? innerType\n                : getComponentNameFromType(type.type) || \"Memo\"\n            );\n          case REACT_LAZY_TYPE:\n            innerType = type._payload;\n            type = type._init;\n            try {\n              return getComponentNameFromType(type(innerType));\n            } catch (x) {}\n        }\n      return null;\n    }\n    function testStringCoercion(value) {\n      return \"\" + value;\n    }\n    function checkKeyStringCoercion(value) {\n      try {\n        testStringCoercion(value);\n        var JSCompiler_inline_result = !1;\n      } catch (e) {\n        JSCompiler_inline_result = !0;\n      }\n      if (JSCompiler_inline_result) {\n        JSCompiler_inline_result = console;\n        var JSCompiler_temp_const = JSCompiler_inline_result.error;\n        var JSCompiler_inline_result$jscomp$0 =\n          (\"function\" === typeof Symbol &&\n            Symbol.toStringTag &&\n            value[Symbol.toStringTag]) ||\n          value.constructor.name ||\n          \"Object\";\n        JSCompiler_temp_const.call(\n          JSCompiler_inline_result,\n          \"The provided key is an unsupported type %s. This value must be coerced to a string before using it here.\",\n          JSCompiler_inline_result$jscomp$0\n        );\n        return testStringCoercion(value);\n      }\n    }\n    function getTaskName(type) {\n      if (type === REACT_FRAGMENT_TYPE) return \"<>\";\n      if (\n        \"object\" === typeof type &&\n        null !== type &&\n        type.$$typeof === REACT_LAZY_TYPE\n      )\n        return \"<...>\";\n      try {\n        var name = getComponentNameFromType(type);\n        return name ? \"<\" + name + \">\" : \"<...>\";\n      } catch (x) {\n        return \"<...>\";\n      }\n    }\n    function getOwner() {\n      var dispatcher = ReactSharedInternals.A;\n      return null === dispatcher ? null : dispatcher.getOwner();\n    }\n    function UnknownOwner() {\n      return Error(\"react-stack-top-frame\");\n    }\n    function hasValidKey(config) {\n      if (hasOwnProperty.call(config, \"key\")) {\n        var getter = Object.getOwnPropertyDescriptor(config, \"key\").get;\n        if (getter && getter.isReactWarning) return !1;\n      }\n      return void 0 !== config.key;\n    }\n    function defineKeyPropWarningGetter(props, displayName) {\n      function warnAboutAccessingKey() {\n        specialPropKeyWarningShown ||\n          ((specialPropKeyWarningShown = !0),\n          console.error(\n            \"%s: `key` is not a prop. Trying to access it will result in `undefined` being returned. If you need to access the same value within the child component, you should pass it as a different prop. (https://react.dev/link/special-props)\",\n            displayName\n          ));\n      }\n      warnAboutAccessingKey.isReactWarning = !0;\n      Object.defineProperty(props, \"key\", {\n        get: warnAboutAccessingKey,\n        configurable: !0\n      });\n    }\n    function elementRefGetterWithDeprecationWarning() {\n      var componentName = getComponentNameFromType(this.type);\n      didWarnAboutElementRef[componentName] ||\n        ((didWarnAboutElementRef[componentName] = !0),\n        console.error(\n          \"Accessing element.ref was removed in React 19. ref is now a regular prop. It will be removed from the JSX Element type in a future release.\"\n        ));\n      componentName = this.props.ref;\n      return void 0 !== componentName ? componentName : null;\n    }\n    function ReactElement(type, key, props, owner, debugStack, debugTask) {\n      var refProp = props.ref;\n      type = {\n        $$typeof: REACT_ELEMENT_TYPE,\n        type: type,\n        key: key,\n        props: props,\n        _owner: owner\n      };\n      null !== (void 0 !== refProp ? refProp : null)\n        ? Object.defineProperty(type, \"ref\", {\n            enumerable: !1,\n            get: elementRefGetterWithDeprecationWarning\n          })\n        : Object.defineProperty(type, \"ref\", { enumerable: !1, value: null });\n      type._store = {};\n      Object.defineProperty(type._store, \"validated\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: 0\n      });\n      Object.defineProperty(type, \"_debugInfo\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: null\n      });\n      Object.defineProperty(type, \"_debugStack\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: debugStack\n      });\n      Object.defineProperty(type, \"_debugTask\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: debugTask\n      });\n      Object.freeze && (Object.freeze(type.props), Object.freeze(type));\n      return type;\n    }\n    function jsxDEVImpl(\n      type,\n      config,\n      maybeKey,\n      isStaticChildren,\n      debugStack,\n      debugTask\n    ) {\n      var children = config.children;\n      if (void 0 !== children)\n        if (isStaticChildren)\n          if (isArrayImpl(children)) {\n            for (\n              isStaticChildren = 0;\n              isStaticChildren < children.length;\n              isStaticChildren++\n            )\n              validateChildKeys(children[isStaticChildren]);\n            Object.freeze && Object.freeze(children);\n          } else\n            console.error(\n              \"React.jsx: Static children should always be an array. You are likely explicitly calling React.jsxs or React.jsxDEV. Use the Babel transform instead.\"\n            );\n        else validateChildKeys(children);\n      if (hasOwnProperty.call(config, \"key\")) {\n        children = getComponentNameFromType(type);\n        var keys = Object.keys(config).filter(function (k) {\n          return \"key\" !== k;\n        });\n        isStaticChildren =\n          0 < keys.length\n            ? \"{key: someKey, \" + keys.join(\": ..., \") + \": ...}\"\n            : \"{key: someKey}\";\n        didWarnAboutKeySpread[children + isStaticChildren] ||\n          ((keys =\n            0 < keys.length ? \"{\" + keys.join(\": ..., \") + \": ...}\" : \"{}\"),\n          console.error(\n            'A props object containing a \"key\" prop is being spread into JSX:\\n  let props = %s;\\n  <%s {...props} />\\nReact keys must be passed directly to JSX without using spread:\\n  let props = %s;\\n  <%s key={someKey} {...props} />',\n            isStaticChildren,\n            children,\n            keys,\n            children\n          ),\n          (didWarnAboutKeySpread[children + isStaticChildren] = !0));\n      }\n      children = null;\n      void 0 !== maybeKey &&\n        (checkKeyStringCoercion(maybeKey), (children = \"\" + maybeKey));\n      hasValidKey(config) &&\n        (checkKeyStringCoercion(config.key), (children = \"\" + config.key));\n      if (\"key\" in config) {\n        maybeKey = {};\n        for (var propName in config)\n          \"key\" !== propName && (maybeKey[propName] = config[propName]);\n      } else maybeKey = config;\n      children &&\n        defineKeyPropWarningGetter(\n          maybeKey,\n          \"function\" === typeof type\n            ? type.displayName || type.name || \"Unknown\"\n            : type\n        );\n      return ReactElement(\n        type,\n        children,\n        maybeKey,\n        getOwner(),\n        debugStack,\n        debugTask\n      );\n    }\n    function validateChildKeys(node) {\n      isValidElement(node)\n        ? node._store && (node._store.validated = 1)\n        : \"object\" === typeof node &&\n          null !== node &&\n          node.$$typeof === REACT_LAZY_TYPE &&\n          (\"fulfilled\" === node._payload.status\n            ? isValidElement(node._payload.value) &&\n              node._payload.value._store &&\n              (node._payload.value._store.validated = 1)\n            : node._store && (node._store.validated = 1));\n    }\n    function isValidElement(object) {\n      return (\n        \"object\" === typeof object &&\n        null !== object &&\n        object.$$typeof === REACT_ELEMENT_TYPE\n      );\n    }\n    var React = require(\"react\"),\n      REACT_ELEMENT_TYPE = Symbol.for(\"react.transitional.element\"),\n      REACT_PORTAL_TYPE = Symbol.for(\"react.portal\"),\n      REACT_FRAGMENT_TYPE = Symbol.for(\"react.fragment\"),\n      REACT_STRICT_MODE_TYPE = Symbol.for(\"react.strict_mode\"),\n      REACT_PROFILER_TYPE = Symbol.for(\"react.profiler\"),\n      REACT_CONSUMER_TYPE = Symbol.for(\"react.consumer\"),\n      REACT_CONTEXT_TYPE = Symbol.for(\"react.context\"),\n      REACT_FORWARD_REF_TYPE = Symbol.for(\"react.forward_ref\"),\n      REACT_SUSPENSE_TYPE = Symbol.for(\"react.suspense\"),\n      REACT_SUSPENSE_LIST_TYPE = Symbol.for(\"react.suspense_list\"),\n      REACT_MEMO_TYPE = Symbol.for(\"react.memo\"),\n      REACT_LAZY_TYPE = Symbol.for(\"react.lazy\"),\n      REACT_ACTIVITY_TYPE = Symbol.for(\"react.activity\"),\n      REACT_CLIENT_REFERENCE = Symbol.for(\"react.client.reference\"),\n      ReactSharedInternals =\n        React.__CLIENT_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE,\n      hasOwnProperty = Object.prototype.hasOwnProperty,\n      isArrayImpl = Array.isArray,\n      createTask = console.createTask\n        ? console.createTask\n        : function () {\n            return null;\n          };\n    React = {\n      react_stack_bottom_frame: function (callStackForError) {\n        return callStackForError();\n      }\n    };\n    var specialPropKeyWarningShown;\n    var didWarnAboutElementRef = {};\n    var unknownOwnerDebugStack = React.react_stack_bottom_frame.bind(\n      React,\n      UnknownOwner\n    )();\n    var unknownOwnerDebugTask = createTask(getTaskName(UnknownOwner));\n    var didWarnAboutKeySpread = {};\n    exports.Fragment = REACT_FRAGMENT_TYPE;\n    exports.jsx = function (type, config, maybeKey) {\n      var trackActualOwner =\n        1e4 > ReactSharedInternals.recentlyCreatedOwnerStacks++;\n      return jsxDEVImpl(\n        type,\n        config,\n        maybeKey,\n        !1,\n        trackActualOwner\n          ? Error(\"react-stack-top-frame\")\n          : unknownOwnerDebugStack,\n        trackActualOwner ? createTask(getTaskName(type)) : unknownOwnerDebugTask\n      );\n    };\n    exports.jsxs = function (type, config, maybeKey) {\n      var trackActualOwner =\n        1e4 > ReactSharedInternals.recentlyCreatedOwnerStacks++;\n      return jsxDEVImpl(\n        type,\n        config,\n        maybeKey,\n        !0,\n        trackActualOwner\n          ? Error(\"react-stack-top-frame\")\n          : unknownOwnerDebugStack,\n        trackActualOwner ? createTask(getTaskName(type)) : unknownOwnerDebugTask\n      );\n    };\n  })();\n","'use strict';\n\nif (process.env.NODE_ENV === 'production') {\n  module.exports = require('./cjs/react-jsx-runtime.production.js');\n} else {\n  module.exports = require('./cjs/react-jsx-runtime.development.js');\n}\n","// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Navigate} from '@tanstack/react-router';\nimport {useThunderID, ThunderIDRuntimeError} from '@thunderid/react';\nimport {FC, ReactElement, ReactNode} from 'react';\n\n/**\n * Props for the ProtectedRoute component.\n */\nexport interface ProtectedRouteProps {\n  /**\n   * The element to render when the user is authenticated.\n   */\n  children: ReactElement;\n  /**\n   * Custom fallback element to render when the user is not authenticated.\n   * If provided, this takes precedence over redirectTo.\n   */\n  fallback?: ReactElement;\n  /**\n   * Custom loading element to render while authentication status is being determined.\n   */\n  loader?: ReactNode;\n  /**\n   * URL to redirect to when the user is not authenticated.\n   * Required unless a fallback element is provided.\n   */\n  redirectTo?: string;\n}\n\n/**\n * A protected route component that requires authentication to access.\n *\n * This component should be used as the component prop of a TanStack Router route.\n * It checks authentication status and either renders the protected content,\n * shows a loading state, redirects, or shows a fallback.\n *\n * Either a `redirectTo` prop or a `fallback` prop must be provided to handle\n * unauthenticated users.\n *\n * @example Basic usage with redirect\n * ```tsx\n * const dashboardRoute = createRouteConfig({\n *   path: '/dashboard',\n *   component: () => (\n *     <ProtectedRoute redirectTo=\"/signin\">\n *       <Dashboard />\n *     </ProtectedRoute>\n *   )\n * })\n * ```\n *\n * @example With custom fallback\n * ```tsx\n * const adminRoute = createRouteConfig({\n *   path: '/admin',\n *   component: () => (\n *     <ProtectedRoute fallback={<div>Access denied</div>}>\n *       <AdminPanel />\n *     </ProtectedRoute>\n *   )\n * })\n * ```\n */\nconst ProtectedRoute: FC<ProtectedRouteProps> = ({\n  children,\n  fallback,\n  redirectTo,\n  loader = null,\n}: ProtectedRouteProps) => {\n  const {isSignedIn, isLoading} = useThunderID();\n\n  if (isLoading) {\n    return loader;\n  }\n\n  if (isSignedIn) {\n    return children;\n  }\n\n  if (fallback) {\n    return fallback;\n  }\n\n  if (redirectTo) {\n    return <Navigate to={redirectTo} />;\n  }\n\n  throw new ThunderIDRuntimeError(\n    '\"fallback\" or \"redirectTo\" prop is required.',\n    'ProtectedRoute-ValidationError-001',\n    'tanstack-router',\n    'Either \"fallback\" or \"redirectTo\" prop must be provided to handle unauthenticated users.',\n  );\n};\n\nexport default ProtectedRoute;\n","// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {useRouter, useRouterState} from '@tanstack/react-router';\nimport {Callback} from '@thunderid/react';\nimport {FC} from 'react';\n\n/**\n * Props for the CallbackRoute component.\n */\nexport interface CallbackRouteProps {\n  /**\n   * Callback function called when an error occurs during OAuth processing.\n   * @param error - The error that occurred\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Optional custom navigation handler.\n   * If provided, this will be called instead of the default navigate() behavior.\n   * Useful for apps that need custom navigation logic.\n   * @param path - The path to navigate to\n   */\n  onNavigate?: (path: string) => void;\n}\n\n/**\n * Handles OAuth callback redirects for TanStack Router applications.\n * Processes authorization code, validates CSRF state, and navigates back to the original path.\n * Automatically handles TanStack Router basepath when configured.\n *\n * @example\n * ```tsx\n * const callbackRoute = createRoute({\n *   getParentRoute: () => rootRoute,\n *   path: '/callback',\n *   component: CallbackRoute,\n * });\n * ```\n */\nconst CallbackRoute: FC<CallbackRouteProps> = ({onError, onNavigate}: CallbackRouteProps) => {\n  const router: ReturnType<typeof useRouter> = useRouter();\n  const routerState: ReturnType<typeof useRouterState> = useRouterState();\n  const {pathname}: {pathname: string} = routerState.location;\n\n  const handleNavigate = (path: string): void => {\n    if (onNavigate) {\n      onNavigate(path);\n      return;\n    }\n\n    const fullPath: string = window.location.pathname;\n    const basename: string = fullPath.endsWith(pathname) ? fullPath.slice(0, -pathname.length).replace(/\\/$/, '') : '';\n\n    const navigationPath: string = basename && path.startsWith(basename) ? path.slice(basename.length) || '/' : path;\n\n    router.navigate({to: navigationPath}).catch(() => {});\n  };\n\n  return (\n    <Callback\n      onNavigate={handleNavigate}\n      onError={\n        onError ||\n        ((error: Error): void => {\n          // eslint-disable-next-line no-console\n          console.error('OAuth callback error:', error);\n        })\n      }\n    />\n  );\n};\n\nexport default CallbackRoute;\n"],"x_google_ignoreList":[0,1],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,EACG,WAAY;EACX,SAAS,yBAAyB,MAAM;AACtC,OAAI,QAAQ,KAAM,QAAO;AACzB,OAAI,eAAe,OAAO,KACxB,QAAO,KAAK,aAAa,yBACrB,OACA,KAAK,eAAe,KAAK,QAAQ;AACvC,OAAI,aAAa,OAAO,KAAM,QAAO;AACrC,WAAQ,MAAR;IACE,KAAK,oBACH,QAAO;IACT,KAAK,oBACH,QAAO;IACT,KAAK,uBACH,QAAO;IACT,KAAK,oBACH,QAAO;IACT,KAAK,yBACH,QAAO;IACT,KAAK,oBACH,QAAO;;AAEX,OAAI,aAAa,OAAO,KACtB,SACG,aAAa,OAAO,KAAK,OACxB,QAAQ,MACN,oHACD,EACH,KAAK,UALP;IAOE,KAAK,kBACH,QAAO;IACT,KAAK,mBACH,QAAO,KAAK,eAAe;IAC7B,KAAK,oBACH,SAAQ,KAAK,SAAS,eAAe,aAAa;IACpD,KAAK;KACH,IAAI,YAAY,KAAK;AACrB,YAAO,KAAK;AACZ,cACI,OAAO,UAAU,eAAe,UAAU,QAAQ,IACnD,OAAO,OAAO,OAAO,gBAAgB,OAAO,MAAM;AACrD,YAAO;IACT,KAAK,gBACH,QACG,YAAY,KAAK,eAAe,MACjC,SAAS,YACL,YACA,yBAAyB,KAAK,KAAK,IAAI;IAE/C,KAAK;AACH,iBAAY,KAAK;AACjB,YAAO,KAAK;AACZ,SAAI;AACF,aAAO,yBAAyB,KAAK,UAAU,CAAC;cACzC,GAAG;;AAElB,UAAO;;EAET,SAAS,mBAAmB,OAAO;AACjC,UAAO,KAAK;;EAEd,SAAS,uBAAuB,OAAO;AACrC,OAAI;AACF,uBAAmB,MAAM;IACzB,IAAI,2BAA2B,CAAC;YACzB,GAAG;AACV,+BAA2B,CAAC;;AAE9B,OAAI,0BAA0B;AAC5B,+BAA2B;IAC3B,IAAI,wBAAwB,yBAAyB;IACrD,IAAI,oCACD,eAAe,OAAO,UACrB,OAAO,eACP,MAAM,OAAO,gBACf,MAAM,YAAY,QAClB;AACF,0BAAsB,KACpB,0BACA,4GACA,kCACD;AACD,WAAO,mBAAmB,MAAM;;;EAGpC,SAAS,YAAY,MAAM;AACzB,OAAI,SAAS,oBAAqB,QAAO;AACzC,OACE,aAAa,OAAO,QACpB,SAAS,QACT,KAAK,aAAa,gBAElB,QAAO;AACT,OAAI;IACF,IAAI,OAAO,yBAAyB,KAAK;AACzC,WAAO,OAAO,MAAM,OAAO,MAAM;YAC1B,GAAG;AACV,WAAO;;;EAGX,SAAS,WAAW;GAClB,IAAI,aAAa,qBAAqB;AACtC,UAAO,SAAS,aAAa,OAAO,WAAW,UAAU;;EAE3D,SAAS,eAAe;AACtB,UAAO,MAAM,wBAAwB;;EAEvC,SAAS,YAAY,QAAQ;AAC3B,OAAI,eAAe,KAAK,QAAQ,MAAM,EAAE;IACtC,IAAI,SAAS,OAAO,yBAAyB,QAAQ,MAAM,CAAC;AAC5D,QAAI,UAAU,OAAO,eAAgB,QAAO,CAAC;;AAE/C,UAAO,KAAK,MAAM,OAAO;;EAE3B,SAAS,2BAA2B,OAAO,aAAa;GACtD,SAAS,wBAAwB;AAC/B,mCACI,6BAA6B,CAAC,GAChC,QAAQ,MACN,2OACA,YACD;;AAEL,yBAAsB,iBAAiB,CAAC;AACxC,UAAO,eAAe,OAAO,OAAO;IAClC,KAAK;IACL,cAAc,CAAC;IAChB,CAAC;;EAEJ,SAAS,yCAAyC;GAChD,IAAI,gBAAgB,yBAAyB,KAAK,KAAK;AACvD,0BAAuB,mBACnB,uBAAuB,iBAAiB,CAAC,GAC3C,QAAQ,MACN,8IACD;AACH,mBAAgB,KAAK,MAAM;AAC3B,UAAO,KAAK,MAAM,gBAAgB,gBAAgB;;EAEpD,SAAS,aAAa,MAAM,KAAK,OAAO,OAAO,YAAY,WAAW;GACpE,IAAI,UAAU,MAAM;AACpB,UAAO;IACL,UAAU;IACJ;IACD;IACE;IACP,QAAQ;IACT;AACD,aAAU,KAAK,MAAM,UAAU,UAAU,QACrC,OAAO,eAAe,MAAM,OAAO;IACjC,YAAY,CAAC;IACb,KAAK;IACN,CAAC,GACF,OAAO,eAAe,MAAM,OAAO;IAAE,YAAY,CAAC;IAAG,OAAO;IAAM,CAAC;AACvE,QAAK,SAAS,EAAE;AAChB,UAAO,eAAe,KAAK,QAAQ,aAAa;IAC9C,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,eAAe,MAAM,cAAc;IACxC,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,eAAe,MAAM,eAAe;IACzC,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,eAAe,MAAM,cAAc;IACxC,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,WAAW,OAAO,OAAO,KAAK,MAAM,EAAE,OAAO,OAAO,KAAK;AAChE,UAAO;;EAET,SAAS,WACP,MACA,QACA,UACA,kBACA,YACA,WACA;GACA,IAAI,WAAW,OAAO;AACtB,OAAI,KAAK,MAAM,SACb,KAAI,iBACF,KAAI,YAAY,SAAS,EAAE;AACzB,SACE,mBAAmB,GACnB,mBAAmB,SAAS,QAC5B,mBAEA,mBAAkB,SAAS,kBAAkB;AAC/C,WAAO,UAAU,OAAO,OAAO,SAAS;SAExC,SAAQ,MACN,uJACD;OACA,mBAAkB,SAAS;AAClC,OAAI,eAAe,KAAK,QAAQ,MAAM,EAAE;AACtC,eAAW,yBAAyB,KAAK;IACzC,IAAI,OAAO,OAAO,KAAK,OAAO,CAAC,OAAO,SAAU,GAAG;AACjD,YAAO,UAAU;MACjB;AACF,uBACE,IAAI,KAAK,SACL,oBAAoB,KAAK,KAAK,UAAU,GAAG,WAC3C;AACN,0BAAsB,WAAW,sBAC7B,OACA,IAAI,KAAK,SAAS,MAAM,KAAK,KAAK,UAAU,GAAG,WAAW,MAC5D,QAAQ,MACN,qOACA,kBACA,UACA,MACA,SACD,EACA,sBAAsB,WAAW,oBAAoB,CAAC;;AAE3D,cAAW;AACX,QAAK,MAAM,aACR,uBAAuB,SAAS,EAAG,WAAW,KAAK;AACtD,eAAY,OAAO,KAChB,uBAAuB,OAAO,IAAI,EAAG,WAAW,KAAK,OAAO;AAC/D,OAAI,SAAS,QAAQ;AACnB,eAAW,EAAE;AACb,SAAK,IAAI,YAAY,OACnB,WAAU,aAAa,SAAS,YAAY,OAAO;SAChD,YAAW;AAClB,eACE,2BACE,UACA,eAAe,OAAO,OAClB,KAAK,eAAe,KAAK,QAAQ,YACjC,KACL;AACH,UAAO,aACL,MACA,UACA,UACA,UAAU,EACV,YACA,UACD;;EAEH,SAAS,kBAAkB,MAAM;AAC/B,kBAAe,KAAK,GAChB,KAAK,WAAW,KAAK,OAAO,YAAY,KACxC,aAAa,OAAO,QACpB,SAAS,QACT,KAAK,aAAa,oBACjB,gBAAgB,KAAK,SAAS,SAC3B,eAAe,KAAK,SAAS,MAAM,IACnC,KAAK,SAAS,MAAM,WACnB,KAAK,SAAS,MAAM,OAAO,YAAY,KACxC,KAAK,WAAW,KAAK,OAAO,YAAY;;EAElD,SAAS,eAAe,QAAQ;AAC9B,UACE,aAAa,OAAO,UACpB,SAAS,UACT,OAAO,aAAa;;EAGxB,IAAI,QAAQ,QAAQ,QAAQ,EAC1B,qBAAqB,OAAO,IAAI,6BAA6B,EAC7D,oBAAoB,OAAO,IAAI,eAAe,EAC9C,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,yBAAyB,OAAO,IAAI,oBAAoB,EACxD,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,qBAAqB,OAAO,IAAI,gBAAgB,EAChD,yBAAyB,OAAO,IAAI,oBAAoB,EACxD,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,2BAA2B,OAAO,IAAI,sBAAsB,EAC5D,kBAAkB,OAAO,IAAI,aAAa,EAC1C,kBAAkB,OAAO,IAAI,aAAa,EAC1C,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,yBAAyB,OAAO,IAAI,yBAAyB,EAC7D,uBACE,MAAM,iEACR,iBAAiB,OAAO,UAAU,gBAClC,cAAc,MAAM,SACpB,aAAa,QAAQ,aACjB,QAAQ,aACR,WAAY;AACV,UAAO;;AAEf,UAAQ,EACN,0BAA0B,SAAU,mBAAmB;AACrD,UAAO,mBAAmB;KAE7B;EACD,IAAI;EACJ,IAAI,yBAAyB,EAAE;EAC/B,IAAI,yBAAyB,MAAM,yBAAyB,KAC1D,OACA,aACD,EAAE;EACH,IAAI,wBAAwB,WAAW,YAAY,aAAa,CAAC;EACjE,IAAI,wBAAwB,EAAE;AAC9B,UAAQ,WAAW;AACnB,UAAQ,MAAM,SAAU,MAAM,QAAQ,UAAU;GAC9C,IAAI,mBACF,MAAM,qBAAqB;AAC7B,UAAO,WACL,MACA,QACA,UACA,CAAC,GACD,mBACI,MAAM,wBAAwB,GAC9B,wBACJ,mBAAmB,WAAW,YAAY,KAAK,CAAC,GAAG,sBACpD;;AAEH,UAAQ,OAAO,SAAU,MAAM,QAAQ,UAAU;GAC/C,IAAI,mBACF,MAAM,qBAAqB;AAC7B,UAAO,WACL,MACA,QACA,UACA,CAAC,GACD,mBACI,MAAM,wBAAwB,GAC9B,wBACJ,mBAAmB,WAAW,YAAY,KAAK,CAAC,GAAG,sBACpD;;KAED;;;;;;AC1VJ,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC4DT,MAAMA,kBAA2C,EAC/C,UACA,UACA,YACA,SAAS,WACgB;CACzB,MAAM,EAAC,YAAY,mDAA2B;AAE9C,KAAI,UACF,QAAO;AAGT,KAAI,WACF,QAAO;AAGT,KAAI,SACF,QAAO;AAGT,KAAI,WACF,QAAO,4CAACC,oCAAS,IAAI,aAAc;AAGrC,OAAM,IAAIC,wCACR,oDACA,sCACA,mBACA,+FACD;;AAGH,6BAAe;;;;;;;;;;;;;;;;;;ACzDf,MAAMC,iBAAyC,EAAC,SAAS,iBAAoC;CAC3F,MAAMC,iDAAkD;CAExD,MAAM,EAAC,0DADgE,CACpB;CAEnD,MAAM,kBAAkB,SAAuB;AAC7C,MAAI,YAAY;AACd,cAAW,KAAK;AAChB;;EAGF,MAAMC,WAAmB,OAAO,SAAS;EACzC,MAAMC,WAAmB,SAAS,SAAS,SAAS,GAAG,SAAS,MAAM,GAAG,CAAC,SAAS,OAAO,CAAC,QAAQ,OAAO,GAAG,GAAG;EAEhH,MAAMC,iBAAyB,YAAY,KAAK,WAAW,SAAS,GAAG,KAAK,MAAM,SAAS,OAAO,IAAI,MAAM;AAE5G,SAAO,SAAS,EAAC,IAAI,gBAAe,CAAC,CAAC,YAAY,GAAG;;AAGvD,QACE,4CAACC;EACC,YAAY;EACZ,SACE,aACE,UAAuB;AAEvB,WAAQ,MAAM,yBAAyB,MAAM;;GAGjD;;AAIN,4BAAe"}
+{"version":3,"file":"index.cjs","names":["ProtectedRoute: FC<ProtectedRouteProps>","Navigate","ThunderIDRuntimeError","CallbackRoute: FC<CallbackRouteProps>","router: ReturnType<typeof useRouter>","fullPath: string","basename: string","navigationPath: string","Callback","SECTION_PAGES: Record<AdminSection, Record<AdminPageKind, AdminPageRenderer>>","AgentCreate","AgentDetails","AgentList","GroupCreate","GroupMembers","GroupList","RoleCreate","RolePermissions","RoleAssignments","RoleList","UserCreate","UserDetails","UserList","AdminPage: FC<AdminPageProps>","navigate: ReturnType<typeof useNavigate>","id: string","sectionPath: string","createAction: ReactNode","Button","DEFAULT_SECTIONS: AdminSection[]","sectionRoute: AnyRoute","element: ReactElement","AdminPage","ProtectedRoute"],"sources":["../../../../node_modules/.pnpm/react@19.2.3/node_modules/react/cjs/react-jsx-runtime.development.js","../../../../node_modules/.pnpm/react@19.2.3/node_modules/react/jsx-runtime.js","../../src/components/ProtectedRoute.tsx","../../src/components/CallbackRoute.tsx","../../src/routes/AdminPage.tsx","../../src/routes/createAdminRoutes.tsx"],"sourcesContent":["/**\n * @license React\n * react-jsx-runtime.development.js\n *\n * Copyright (c) Meta Platforms, Inc. and affiliates.\n *\n * This source code is licensed under the MIT license found in the\n * LICENSE file in the root directory of this source tree.\n */\n\n\"use strict\";\n\"production\" !== process.env.NODE_ENV &&\n  (function () {\n    function getComponentNameFromType(type) {\n      if (null == type) return null;\n      if (\"function\" === typeof type)\n        return type.$$typeof === REACT_CLIENT_REFERENCE\n          ? null\n          : type.displayName || type.name || null;\n      if (\"string\" === typeof type) return type;\n      switch (type) {\n        case REACT_FRAGMENT_TYPE:\n          return \"Fragment\";\n        case REACT_PROFILER_TYPE:\n          return \"Profiler\";\n        case REACT_STRICT_MODE_TYPE:\n          return \"StrictMode\";\n        case REACT_SUSPENSE_TYPE:\n          return \"Suspense\";\n        case REACT_SUSPENSE_LIST_TYPE:\n          return \"SuspenseList\";\n        case REACT_ACTIVITY_TYPE:\n          return \"Activity\";\n      }\n      if (\"object\" === typeof type)\n        switch (\n          (\"number\" === typeof type.tag &&\n            console.error(\n              \"Received an unexpected object in getComponentNameFromType(). This is likely a bug in React. Please file an issue.\"\n            ),\n          type.$$typeof)\n        ) {\n          case REACT_PORTAL_TYPE:\n            return \"Portal\";\n          case REACT_CONTEXT_TYPE:\n            return type.displayName || \"Context\";\n          case REACT_CONSUMER_TYPE:\n            return (type._context.displayName || \"Context\") + \".Consumer\";\n          case REACT_FORWARD_REF_TYPE:\n            var innerType = type.render;\n            type = type.displayName;\n            type ||\n              ((type = innerType.displayName || innerType.name || \"\"),\n              (type = \"\" !== type ? \"ForwardRef(\" + type + \")\" : \"ForwardRef\"));\n            return type;\n          case REACT_MEMO_TYPE:\n            return (\n              (innerType = type.displayName || null),\n              null !== innerType\n                ? innerType\n                : getComponentNameFromType(type.type) || \"Memo\"\n            );\n          case REACT_LAZY_TYPE:\n            innerType = type._payload;\n            type = type._init;\n            try {\n              return getComponentNameFromType(type(innerType));\n            } catch (x) {}\n        }\n      return null;\n    }\n    function testStringCoercion(value) {\n      return \"\" + value;\n    }\n    function checkKeyStringCoercion(value) {\n      try {\n        testStringCoercion(value);\n        var JSCompiler_inline_result = !1;\n      } catch (e) {\n        JSCompiler_inline_result = !0;\n      }\n      if (JSCompiler_inline_result) {\n        JSCompiler_inline_result = console;\n        var JSCompiler_temp_const = JSCompiler_inline_result.error;\n        var JSCompiler_inline_result$jscomp$0 =\n          (\"function\" === typeof Symbol &&\n            Symbol.toStringTag &&\n            value[Symbol.toStringTag]) ||\n          value.constructor.name ||\n          \"Object\";\n        JSCompiler_temp_const.call(\n          JSCompiler_inline_result,\n          \"The provided key is an unsupported type %s. This value must be coerced to a string before using it here.\",\n          JSCompiler_inline_result$jscomp$0\n        );\n        return testStringCoercion(value);\n      }\n    }\n    function getTaskName(type) {\n      if (type === REACT_FRAGMENT_TYPE) return \"<>\";\n      if (\n        \"object\" === typeof type &&\n        null !== type &&\n        type.$$typeof === REACT_LAZY_TYPE\n      )\n        return \"<...>\";\n      try {\n        var name = getComponentNameFromType(type);\n        return name ? \"<\" + name + \">\" : \"<...>\";\n      } catch (x) {\n        return \"<...>\";\n      }\n    }\n    function getOwner() {\n      var dispatcher = ReactSharedInternals.A;\n      return null === dispatcher ? null : dispatcher.getOwner();\n    }\n    function UnknownOwner() {\n      return Error(\"react-stack-top-frame\");\n    }\n    function hasValidKey(config) {\n      if (hasOwnProperty.call(config, \"key\")) {\n        var getter = Object.getOwnPropertyDescriptor(config, \"key\").get;\n        if (getter && getter.isReactWarning) return !1;\n      }\n      return void 0 !== config.key;\n    }\n    function defineKeyPropWarningGetter(props, displayName) {\n      function warnAboutAccessingKey() {\n        specialPropKeyWarningShown ||\n          ((specialPropKeyWarningShown = !0),\n          console.error(\n            \"%s: `key` is not a prop. Trying to access it will result in `undefined` being returned. If you need to access the same value within the child component, you should pass it as a different prop. (https://react.dev/link/special-props)\",\n            displayName\n          ));\n      }\n      warnAboutAccessingKey.isReactWarning = !0;\n      Object.defineProperty(props, \"key\", {\n        get: warnAboutAccessingKey,\n        configurable: !0\n      });\n    }\n    function elementRefGetterWithDeprecationWarning() {\n      var componentName = getComponentNameFromType(this.type);\n      didWarnAboutElementRef[componentName] ||\n        ((didWarnAboutElementRef[componentName] = !0),\n        console.error(\n          \"Accessing element.ref was removed in React 19. ref is now a regular prop. It will be removed from the JSX Element type in a future release.\"\n        ));\n      componentName = this.props.ref;\n      return void 0 !== componentName ? componentName : null;\n    }\n    function ReactElement(type, key, props, owner, debugStack, debugTask) {\n      var refProp = props.ref;\n      type = {\n        $$typeof: REACT_ELEMENT_TYPE,\n        type: type,\n        key: key,\n        props: props,\n        _owner: owner\n      };\n      null !== (void 0 !== refProp ? refProp : null)\n        ? Object.defineProperty(type, \"ref\", {\n            enumerable: !1,\n            get: elementRefGetterWithDeprecationWarning\n          })\n        : Object.defineProperty(type, \"ref\", { enumerable: !1, value: null });\n      type._store = {};\n      Object.defineProperty(type._store, \"validated\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: 0\n      });\n      Object.defineProperty(type, \"_debugInfo\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: null\n      });\n      Object.defineProperty(type, \"_debugStack\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: debugStack\n      });\n      Object.defineProperty(type, \"_debugTask\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: debugTask\n      });\n      Object.freeze && (Object.freeze(type.props), Object.freeze(type));\n      return type;\n    }\n    function jsxDEVImpl(\n      type,\n      config,\n      maybeKey,\n      isStaticChildren,\n      debugStack,\n      debugTask\n    ) {\n      var children = config.children;\n      if (void 0 !== children)\n        if (isStaticChildren)\n          if (isArrayImpl(children)) {\n            for (\n              isStaticChildren = 0;\n              isStaticChildren < children.length;\n              isStaticChildren++\n            )\n              validateChildKeys(children[isStaticChildren]);\n            Object.freeze && Object.freeze(children);\n          } else\n            console.error(\n              \"React.jsx: Static children should always be an array. You are likely explicitly calling React.jsxs or React.jsxDEV. Use the Babel transform instead.\"\n            );\n        else validateChildKeys(children);\n      if (hasOwnProperty.call(config, \"key\")) {\n        children = getComponentNameFromType(type);\n        var keys = Object.keys(config).filter(function (k) {\n          return \"key\" !== k;\n        });\n        isStaticChildren =\n          0 < keys.length\n            ? \"{key: someKey, \" + keys.join(\": ..., \") + \": ...}\"\n            : \"{key: someKey}\";\n        didWarnAboutKeySpread[children + isStaticChildren] ||\n          ((keys =\n            0 < keys.length ? \"{\" + keys.join(\": ..., \") + \": ...}\" : \"{}\"),\n          console.error(\n            'A props object containing a \"key\" prop is being spread into JSX:\\n  let props = %s;\\n  <%s {...props} />\\nReact keys must be passed directly to JSX without using spread:\\n  let props = %s;\\n  <%s key={someKey} {...props} />',\n            isStaticChildren,\n            children,\n            keys,\n            children\n          ),\n          (didWarnAboutKeySpread[children + isStaticChildren] = !0));\n      }\n      children = null;\n      void 0 !== maybeKey &&\n        (checkKeyStringCoercion(maybeKey), (children = \"\" + maybeKey));\n      hasValidKey(config) &&\n        (checkKeyStringCoercion(config.key), (children = \"\" + config.key));\n      if (\"key\" in config) {\n        maybeKey = {};\n        for (var propName in config)\n          \"key\" !== propName && (maybeKey[propName] = config[propName]);\n      } else maybeKey = config;\n      children &&\n        defineKeyPropWarningGetter(\n          maybeKey,\n          \"function\" === typeof type\n            ? type.displayName || type.name || \"Unknown\"\n            : type\n        );\n      return ReactElement(\n        type,\n        children,\n        maybeKey,\n        getOwner(),\n        debugStack,\n        debugTask\n      );\n    }\n    function validateChildKeys(node) {\n      isValidElement(node)\n        ? node._store && (node._store.validated = 1)\n        : \"object\" === typeof node &&\n          null !== node &&\n          node.$$typeof === REACT_LAZY_TYPE &&\n          (\"fulfilled\" === node._payload.status\n            ? isValidElement(node._payload.value) &&\n              node._payload.value._store &&\n              (node._payload.value._store.validated = 1)\n            : node._store && (node._store.validated = 1));\n    }\n    function isValidElement(object) {\n      return (\n        \"object\" === typeof object &&\n        null !== object &&\n        object.$$typeof === REACT_ELEMENT_TYPE\n      );\n    }\n    var React = require(\"react\"),\n      REACT_ELEMENT_TYPE = Symbol.for(\"react.transitional.element\"),\n      REACT_PORTAL_TYPE = Symbol.for(\"react.portal\"),\n      REACT_FRAGMENT_TYPE = Symbol.for(\"react.fragment\"),\n      REACT_STRICT_MODE_TYPE = Symbol.for(\"react.strict_mode\"),\n      REACT_PROFILER_TYPE = Symbol.for(\"react.profiler\"),\n      REACT_CONSUMER_TYPE = Symbol.for(\"react.consumer\"),\n      REACT_CONTEXT_TYPE = Symbol.for(\"react.context\"),\n      REACT_FORWARD_REF_TYPE = Symbol.for(\"react.forward_ref\"),\n      REACT_SUSPENSE_TYPE = Symbol.for(\"react.suspense\"),\n      REACT_SUSPENSE_LIST_TYPE = Symbol.for(\"react.suspense_list\"),\n      REACT_MEMO_TYPE = Symbol.for(\"react.memo\"),\n      REACT_LAZY_TYPE = Symbol.for(\"react.lazy\"),\n      REACT_ACTIVITY_TYPE = Symbol.for(\"react.activity\"),\n      REACT_CLIENT_REFERENCE = Symbol.for(\"react.client.reference\"),\n      ReactSharedInternals =\n        React.__CLIENT_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE,\n      hasOwnProperty = Object.prototype.hasOwnProperty,\n      isArrayImpl = Array.isArray,\n      createTask = console.createTask\n        ? console.createTask\n        : function () {\n            return null;\n          };\n    React = {\n      react_stack_bottom_frame: function (callStackForError) {\n        return callStackForError();\n      }\n    };\n    var specialPropKeyWarningShown;\n    var didWarnAboutElementRef = {};\n    var unknownOwnerDebugStack = React.react_stack_bottom_frame.bind(\n      React,\n      UnknownOwner\n    )();\n    var unknownOwnerDebugTask = createTask(getTaskName(UnknownOwner));\n    var didWarnAboutKeySpread = {};\n    exports.Fragment = REACT_FRAGMENT_TYPE;\n    exports.jsx = function (type, config, maybeKey) {\n      var trackActualOwner =\n        1e4 > ReactSharedInternals.recentlyCreatedOwnerStacks++;\n      return jsxDEVImpl(\n        type,\n        config,\n        maybeKey,\n        !1,\n        trackActualOwner\n          ? Error(\"react-stack-top-frame\")\n          : unknownOwnerDebugStack,\n        trackActualOwner ? createTask(getTaskName(type)) : unknownOwnerDebugTask\n      );\n    };\n    exports.jsxs = function (type, config, maybeKey) {\n      var trackActualOwner =\n        1e4 > ReactSharedInternals.recentlyCreatedOwnerStacks++;\n      return jsxDEVImpl(\n        type,\n        config,\n        maybeKey,\n        !0,\n        trackActualOwner\n          ? Error(\"react-stack-top-frame\")\n          : unknownOwnerDebugStack,\n        trackActualOwner ? createTask(getTaskName(type)) : unknownOwnerDebugTask\n      );\n    };\n  })();\n","'use strict';\n\nif (process.env.NODE_ENV === 'production') {\n  module.exports = require('./cjs/react-jsx-runtime.production.js');\n} else {\n  module.exports = require('./cjs/react-jsx-runtime.development.js');\n}\n","// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Navigate} from '@tanstack/react-router';\nimport {useThunderID, ThunderIDRuntimeError} from '@thunderid/react';\nimport {FC, ReactElement, ReactNode} from 'react';\n\n/**\n * Props for the ProtectedRoute component.\n */\nexport interface ProtectedRouteProps {\n  /**\n   * The element to render when the user is authenticated.\n   */\n  children: ReactElement;\n  /**\n   * Custom fallback element to render when the user is not authenticated.\n   * If provided, this takes precedence over redirectTo.\n   */\n  fallback?: ReactElement;\n  /**\n   * Custom loading element to render while authentication status is being determined.\n   */\n  loader?: ReactNode;\n  /**\n   * URL to redirect to when the user is not authenticated.\n   * Required unless a fallback element is provided.\n   */\n  redirectTo?: string;\n}\n\n/**\n * A protected route component that requires authentication to access.\n *\n * This component should be used as the component prop of a TanStack Router route.\n * It checks authentication status and either renders the protected content,\n * shows a loading state, redirects, or shows a fallback.\n *\n * Either a `redirectTo` prop or a `fallback` prop must be provided to handle\n * unauthenticated users.\n *\n * @example Basic usage with redirect\n * ```tsx\n * const dashboardRoute = createRouteConfig({\n *   path: '/dashboard',\n *   component: () => (\n *     <ProtectedRoute redirectTo=\"/signin\">\n *       <Dashboard />\n *     </ProtectedRoute>\n *   )\n * })\n * ```\n *\n * @example With custom fallback\n * ```tsx\n * const adminRoute = createRouteConfig({\n *   path: '/admin',\n *   component: () => (\n *     <ProtectedRoute fallback={<div>Access denied</div>}>\n *       <AdminPanel />\n *     </ProtectedRoute>\n *   )\n * })\n * ```\n */\nconst ProtectedRoute: FC<ProtectedRouteProps> = ({\n  children,\n  fallback,\n  redirectTo,\n  loader = null,\n}: ProtectedRouteProps) => {\n  const {isSignedIn, isLoading} = useThunderID();\n\n  if (isLoading) {\n    return loader;\n  }\n\n  if (isSignedIn) {\n    return children;\n  }\n\n  if (fallback) {\n    return fallback;\n  }\n\n  if (redirectTo) {\n    return <Navigate to={redirectTo} />;\n  }\n\n  throw new ThunderIDRuntimeError(\n    '\"fallback\" or \"redirectTo\" prop is required.',\n    'ProtectedRoute-ValidationError-001',\n    'tanstack-router',\n    'Either \"fallback\" or \"redirectTo\" prop must be provided to handle unauthenticated users.',\n  );\n};\n\nexport default ProtectedRoute;\n","// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {useRouter, useRouterState} from '@tanstack/react-router';\nimport {Callback} from '@thunderid/react';\nimport {FC} from 'react';\n\n/**\n * Props for the CallbackRoute component.\n */\nexport interface CallbackRouteProps {\n  /**\n   * Callback function called when an error occurs during OAuth processing.\n   * @param error - The error that occurred\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Optional custom navigation handler.\n   * If provided, this will be called instead of the default navigate() behavior.\n   * Useful for apps that need custom navigation logic.\n   * @param path - The path to navigate to\n   */\n  onNavigate?: (path: string) => void;\n}\n\n/**\n * Handles OAuth callback redirects for TanStack Router applications.\n * Processes authorization code, validates CSRF state, and navigates back to the original path.\n * Automatically handles TanStack Router basepath when configured.\n *\n * @example\n * ```tsx\n * const callbackRoute = createRoute({\n *   getParentRoute: () => rootRoute,\n *   path: '/callback',\n *   component: CallbackRoute,\n * });\n * ```\n */\nconst CallbackRoute: FC<CallbackRouteProps> = ({onError, onNavigate}: CallbackRouteProps) => {\n  const router: ReturnType<typeof useRouter> = useRouter();\n  const routerState: ReturnType<typeof useRouterState> = useRouterState();\n  const {pathname}: {pathname: string} = routerState.location;\n\n  const handleNavigate = (path: string): void => {\n    if (onNavigate) {\n      onNavigate(path);\n      return;\n    }\n\n    const fullPath: string = window.location.pathname;\n    const basename: string = fullPath.endsWith(pathname) ? fullPath.slice(0, -pathname.length).replace(/\\/$/, '') : '';\n\n    const navigationPath: string = basename && path.startsWith(basename) ? path.slice(basename.length) || '/' : path;\n\n    router.navigate({to: navigationPath}).catch(() => {});\n  };\n\n  return (\n    <Callback\n      onNavigate={handleNavigate}\n      onError={\n        onError ||\n        ((error: Error): void => {\n          // eslint-disable-next-line no-console\n          console.error('OAuth callback error:', error);\n        })\n      }\n    />\n  );\n};\n\nexport default CallbackRoute;\n","// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {useNavigate, useParams} from '@tanstack/react-router';\nimport {\n  AgentCreate,\n  AgentDetails,\n  AgentList,\n  Button,\n  GroupCreate,\n  GroupList,\n  GroupMembers,\n  RoleAssignments,\n  RoleCreate,\n  RoleList,\n  RolePermissions,\n  UserCreate,\n  UserDetails,\n  UserList,\n  useTranslation,\n} from '@thunderid/react';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport type {AdminRoutesOptions, AdminSection} from './createAdminRoutes';\n\nexport type AdminPageKind = 'create' | 'details' | 'list';\n\n/**\n * Navigation between the pages of one section.\n */\ninterface AdminNavigation {\n  createAction: ReactNode;\n  toDetails: (id: string) => void;\n  toList: () => void;\n}\n\ninterface AdminPageContext extends AdminNavigation {\n  id: string;\n  options: AdminRoutesOptions;\n}\n\ntype AdminPageRenderer = (context: AdminPageContext) => ReactElement;\n\nconst SECTION_PAGES: Record<AdminSection, Record<AdminPageKind, AdminPageRenderer>> = {\n  agents: {\n    create: ({options, toDetails}: AdminPageContext) => (\n      <AgentCreate preferences={options.preferences} onCreated={(agent: {id: string}) => toDetails(agent.id)} />\n    ),\n    details: ({id, options, toList}: AdminPageContext) => (\n      <AgentDetails agentId={id} deletable={options.deletable} preferences={options.preferences} onDeleted={toList} />\n    ),\n    list: ({createAction, options, toDetails}: AdminPageContext) => (\n      <AgentList\n        actions={createAction}\n        preferences={options.preferences}\n        onSelect={(agent: {id: string}) => toDetails(agent.id)}\n      />\n    ),\n  },\n  groups: {\n    create: ({options, toDetails}: AdminPageContext) => (\n      <GroupCreate preferences={options.preferences} onCreated={(group: {id: string}) => toDetails(group.id)} />\n    ),\n    details: ({id, options}: AdminPageContext) => (\n      <GroupMembers groupId={id} editable={options.editable} preferences={options.preferences} />\n    ),\n    list: ({createAction, options, toDetails}: AdminPageContext) => (\n      <GroupList\n        actions={createAction}\n        preferences={options.preferences}\n        onSelect={(group: {id: string}) => toDetails(group.id)}\n      />\n    ),\n  },\n  roles: {\n    create: ({options, toDetails}: AdminPageContext) => (\n      <RoleCreate preferences={options.preferences} onCreated={(role: {id: string}) => toDetails(role.id)} />\n    ),\n    details: ({id, options}: AdminPageContext) => (\n      <>\n        <RolePermissions roleId={id} preferences={options.preferences} />\n        <RoleAssignments roleId={id} editable={options.editable} preferences={options.preferences} />\n      </>\n    ),\n    list: ({createAction, options, toDetails}: AdminPageContext) => (\n      <RoleList\n        actions={createAction}\n        preferences={options.preferences}\n        onSelect={(role: {id: string}) => toDetails(role.id)}\n      />\n    ),\n  },\n  users: {\n    create: ({options, toDetails}: AdminPageContext) => (\n      <UserCreate preferences={options.preferences} onCreated={(user: {id: string}) => toDetails(user.id)} />\n    ),\n    details: ({id, options, toList}: AdminPageContext) => (\n      <UserDetails\n        userId={id}\n        deletable={options.deletable}\n        editable={options.editable}\n        preferences={options.preferences}\n        onDeleted={toList}\n      />\n    ),\n    list: ({createAction, options, toDetails}: AdminPageContext) => (\n      <UserList\n        actions={createAction}\n        preferences={options.preferences}\n        onSelect={(user: {id: string}) => toDetails(user.id)}\n      />\n    ),\n  },\n};\n\ninterface AdminPageProps {\n  /**\n   * Returns the full path of the section route. Read at render time, once the router has resolved it.\n   */\n  getSectionPath: () => string;\n  kind: AdminPageKind;\n  options: AdminRoutesOptions;\n  section: AdminSection;\n}\n\n/**\n * Renders one admin page and wires its callbacks to navigation within its section.\n */\nconst AdminPage: FC<AdminPageProps> = ({getSectionPath, kind, options, section}: AdminPageProps): ReactElement => {\n  const navigate: ReturnType<typeof useNavigate> = useNavigate();\n  const id: string = useParams({\n    select: (params: {id?: string}): string => params.id ?? '',\n    strict: false,\n  });\n  const {t} = useTranslation(options.preferences?.i18n);\n  const sectionPath: string = getSectionPath().replace(/\\/+$/, '');\n\n  const toList = (): void => {\n    void navigate({to: sectionPath});\n  };\n  // The identifier goes through `params`, so the router encodes it.\n  const toDetails = (resourceId: string): void => {\n    void navigate({params: {id: resourceId}, to: `${sectionPath}/$id`});\n  };\n\n  const createAction: ReactNode =\n    kind === 'list' ? (\n      <Button onClick={(): void => void navigate({to: `${sectionPath}/new`})}>\n        {t(`admin.${section}.create.title`)}\n      </Button>\n    ) : null;\n\n  return SECTION_PAGES[section][kind]({createAction, id, options, toDetails, toList});\n};\n\nexport default AdminPage;\n","// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {AnyRoute, createRoute} from '@tanstack/react-router';\nimport type {UserListProps} from '@thunderid/react';\nimport {ReactElement} from 'react';\nimport AdminPage, {AdminPageKind} from './AdminPage';\nimport ProtectedRoute, {ProtectedRouteProps} from '../components/ProtectedRoute';\n\n/**\n * An admin section that {@link createAdminRoutes} can mount.\n */\nexport type AdminSection = 'agents' | 'groups' | 'roles' | 'users';\n\n/**\n * Options for {@link createAdminRoutes}.\n */\nexport interface AdminRoutesOptions {\n  /**\n   * Shows the delete action on the user and agent details pages.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Allows editing on the details pages: user attributes, group members and role assignments. When\n   * unset, each component keeps its own default.\n   */\n  editable?: boolean;\n  /**\n   * Passed to every admin component.\n   */\n  preferences?: UserListProps['preferences'];\n  /**\n   * Wraps every admin page in {@link ProtectedRoute} with these props. The management API still\n   * checks every request, so this only decides what an unauthenticated visitor sees.\n   */\n  protect?: Omit<ProtectedRouteProps, 'children'>;\n  /**\n   * The sections to mount.\n   * @default ['users', 'groups', 'roles', 'agents']\n   */\n  sections?: AdminSection[];\n}\n\nconst DEFAULT_SECTIONS: AdminSection[] = ['users', 'groups', 'roles', 'agents'];\n\n/**\n * Builds TanStack Router routes that mount the admin (management) sections of `@thunderid/react`\n * under `parentRoute`: for each section a list at `<section>`, a create form at `<section>/new`, and\n * a details page at `<section>/$id`. Selecting, creating and deleting navigate between them.\n *\n * The routes are built with `createRoute`, so they carry no route-tree types of their own; navigate\n * to them with string paths.\n *\n * @param parentRoute - The route to mount the sections under, such as the root route or an `/admin` route.\n * @param options - Which sections to mount and how to render them.\n * @returns One route per section, each with its pages as children, for `parentRoute.addChildren`.\n *\n * @example\n * ```tsx\n * const adminRoute = createRoute({getParentRoute: () => rootRoute, path: '/admin'});\n *\n * const routeTree = rootRoute.addChildren([\n *   indexRoute,\n *   adminRoute.addChildren(createAdminRoutes(adminRoute, {protect: {redirectTo: '/signin'}})),\n * ]);\n * ```\n */\nconst createAdminRoutes = (parentRoute: AnyRoute, options: AdminRoutesOptions = {}): AnyRoute[] => {\n  const {protect, sections = DEFAULT_SECTIONS} = options;\n\n  return sections.map((section: AdminSection): AnyRoute => {\n    const sectionRoute: AnyRoute = createRoute({getParentRoute: () => parentRoute, path: section});\n\n    const page = (kind: AdminPageKind): (() => ReactElement) => {\n      const Page = (): ReactElement => {\n        const element: ReactElement = (\n          <AdminPage\n            getSectionPath={(): string => sectionRoute.fullPath as string}\n            kind={kind}\n            options={options}\n            section={section}\n          />\n        );\n\n        return protect ? <ProtectedRoute {...protect}>{element}</ProtectedRoute> : element;\n      };\n\n      Page.displayName = `Admin(${section}/${kind})`;\n\n      return Page;\n    };\n\n    return sectionRoute.addChildren([\n      createRoute({component: page('list'), getParentRoute: () => sectionRoute, path: '/'}),\n      createRoute({component: page('create'), getParentRoute: () => sectionRoute, path: 'new'}),\n      createRoute({component: page('details'), getParentRoute: () => sectionRoute, path: '$id'}),\n    ]) as AnyRoute;\n  });\n};\n\nexport default createAdminRoutes;\n"],"x_google_ignoreList":[0,1],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,EACG,WAAY;EACX,SAAS,yBAAyB,MAAM;AACtC,OAAI,QAAQ,KAAM,QAAO;AACzB,OAAI,eAAe,OAAO,KACxB,QAAO,KAAK,aAAa,yBACrB,OACA,KAAK,eAAe,KAAK,QAAQ;AACvC,OAAI,aAAa,OAAO,KAAM,QAAO;AACrC,WAAQ,MAAR;IACE,KAAK,oBACH,QAAO;IACT,KAAK,oBACH,QAAO;IACT,KAAK,uBACH,QAAO;IACT,KAAK,oBACH,QAAO;IACT,KAAK,yBACH,QAAO;IACT,KAAK,oBACH,QAAO;;AAEX,OAAI,aAAa,OAAO,KACtB,SACG,aAAa,OAAO,KAAK,OACxB,QAAQ,MACN,oHACD,EACH,KAAK,UALP;IAOE,KAAK,kBACH,QAAO;IACT,KAAK,mBACH,QAAO,KAAK,eAAe;IAC7B,KAAK,oBACH,SAAQ,KAAK,SAAS,eAAe,aAAa;IACpD,KAAK;KACH,IAAI,YAAY,KAAK;AACrB,YAAO,KAAK;AACZ,cACI,OAAO,UAAU,eAAe,UAAU,QAAQ,IACnD,OAAO,OAAO,OAAO,gBAAgB,OAAO,MAAM;AACrD,YAAO;IACT,KAAK,gBACH,QACG,YAAY,KAAK,eAAe,MACjC,SAAS,YACL,YACA,yBAAyB,KAAK,KAAK,IAAI;IAE/C,KAAK;AACH,iBAAY,KAAK;AACjB,YAAO,KAAK;AACZ,SAAI;AACF,aAAO,yBAAyB,KAAK,UAAU,CAAC;cACzC,GAAG;;AAElB,UAAO;;EAET,SAAS,mBAAmB,OAAO;AACjC,UAAO,KAAK;;EAEd,SAAS,uBAAuB,OAAO;AACrC,OAAI;AACF,uBAAmB,MAAM;IACzB,IAAI,2BAA2B,CAAC;YACzB,GAAG;AACV,+BAA2B,CAAC;;AAE9B,OAAI,0BAA0B;AAC5B,+BAA2B;IAC3B,IAAI,wBAAwB,yBAAyB;IACrD,IAAI,oCACD,eAAe,OAAO,UACrB,OAAO,eACP,MAAM,OAAO,gBACf,MAAM,YAAY,QAClB;AACF,0BAAsB,KACpB,0BACA,4GACA,kCACD;AACD,WAAO,mBAAmB,MAAM;;;EAGpC,SAAS,YAAY,MAAM;AACzB,OAAI,SAAS,oBAAqB,QAAO;AACzC,OACE,aAAa,OAAO,QACpB,SAAS,QACT,KAAK,aAAa,gBAElB,QAAO;AACT,OAAI;IACF,IAAI,OAAO,yBAAyB,KAAK;AACzC,WAAO,OAAO,MAAM,OAAO,MAAM;YAC1B,GAAG;AACV,WAAO;;;EAGX,SAAS,WAAW;GAClB,IAAI,aAAa,qBAAqB;AACtC,UAAO,SAAS,aAAa,OAAO,WAAW,UAAU;;EAE3D,SAAS,eAAe;AACtB,UAAO,MAAM,wBAAwB;;EAEvC,SAAS,YAAY,QAAQ;AAC3B,OAAI,eAAe,KAAK,QAAQ,MAAM,EAAE;IACtC,IAAI,SAAS,OAAO,yBAAyB,QAAQ,MAAM,CAAC;AAC5D,QAAI,UAAU,OAAO,eAAgB,QAAO,CAAC;;AAE/C,UAAO,KAAK,MAAM,OAAO;;EAE3B,SAAS,2BAA2B,OAAO,aAAa;GACtD,SAAS,wBAAwB;AAC/B,mCACI,6BAA6B,CAAC,GAChC,QAAQ,MACN,2OACA,YACD;;AAEL,yBAAsB,iBAAiB,CAAC;AACxC,UAAO,eAAe,OAAO,OAAO;IAClC,KAAK;IACL,cAAc,CAAC;IAChB,CAAC;;EAEJ,SAAS,yCAAyC;GAChD,IAAI,gBAAgB,yBAAyB,KAAK,KAAK;AACvD,0BAAuB,mBACnB,uBAAuB,iBAAiB,CAAC,GAC3C,QAAQ,MACN,8IACD;AACH,mBAAgB,KAAK,MAAM;AAC3B,UAAO,KAAK,MAAM,gBAAgB,gBAAgB;;EAEpD,SAAS,aAAa,MAAM,KAAK,OAAO,OAAO,YAAY,WAAW;GACpE,IAAI,UAAU,MAAM;AACpB,UAAO;IACL,UAAU;IACJ;IACD;IACE;IACP,QAAQ;IACT;AACD,aAAU,KAAK,MAAM,UAAU,UAAU,QACrC,OAAO,eAAe,MAAM,OAAO;IACjC,YAAY,CAAC;IACb,KAAK;IACN,CAAC,GACF,OAAO,eAAe,MAAM,OAAO;IAAE,YAAY,CAAC;IAAG,OAAO;IAAM,CAAC;AACvE,QAAK,SAAS,EAAE;AAChB,UAAO,eAAe,KAAK,QAAQ,aAAa;IAC9C,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,eAAe,MAAM,cAAc;IACxC,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,eAAe,MAAM,eAAe;IACzC,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,eAAe,MAAM,cAAc;IACxC,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,WAAW,OAAO,OAAO,KAAK,MAAM,EAAE,OAAO,OAAO,KAAK;AAChE,UAAO;;EAET,SAAS,WACP,MACA,QACA,UACA,kBACA,YACA,WACA;GACA,IAAI,WAAW,OAAO;AACtB,OAAI,KAAK,MAAM,SACb,KAAI,iBACF,KAAI,YAAY,SAAS,EAAE;AACzB,SACE,mBAAmB,GACnB,mBAAmB,SAAS,QAC5B,mBAEA,mBAAkB,SAAS,kBAAkB;AAC/C,WAAO,UAAU,OAAO,OAAO,SAAS;SAExC,SAAQ,MACN,uJACD;OACA,mBAAkB,SAAS;AAClC,OAAI,eAAe,KAAK,QAAQ,MAAM,EAAE;AACtC,eAAW,yBAAyB,KAAK;IACzC,IAAI,OAAO,OAAO,KAAK,OAAO,CAAC,OAAO,SAAU,GAAG;AACjD,YAAO,UAAU;MACjB;AACF,uBACE,IAAI,KAAK,SACL,oBAAoB,KAAK,KAAK,UAAU,GAAG,WAC3C;AACN,0BAAsB,WAAW,sBAC7B,OACA,IAAI,KAAK,SAAS,MAAM,KAAK,KAAK,UAAU,GAAG,WAAW,MAC5D,QAAQ,MACN,qOACA,kBACA,UACA,MACA,SACD,EACA,sBAAsB,WAAW,oBAAoB,CAAC;;AAE3D,cAAW;AACX,QAAK,MAAM,aACR,uBAAuB,SAAS,EAAG,WAAW,KAAK;AACtD,eAAY,OAAO,KAChB,uBAAuB,OAAO,IAAI,EAAG,WAAW,KAAK,OAAO;AAC/D,OAAI,SAAS,QAAQ;AACnB,eAAW,EAAE;AACb,SAAK,IAAI,YAAY,OACnB,WAAU,aAAa,SAAS,YAAY,OAAO;SAChD,YAAW;AAClB,eACE,2BACE,UACA,eAAe,OAAO,OAClB,KAAK,eAAe,KAAK,QAAQ,YACjC,KACL;AACH,UAAO,aACL,MACA,UACA,UACA,UAAU,EACV,YACA,UACD;;EAEH,SAAS,kBAAkB,MAAM;AAC/B,kBAAe,KAAK,GAChB,KAAK,WAAW,KAAK,OAAO,YAAY,KACxC,aAAa,OAAO,QACpB,SAAS,QACT,KAAK,aAAa,oBACjB,gBAAgB,KAAK,SAAS,SAC3B,eAAe,KAAK,SAAS,MAAM,IACnC,KAAK,SAAS,MAAM,WACnB,KAAK,SAAS,MAAM,OAAO,YAAY,KACxC,KAAK,WAAW,KAAK,OAAO,YAAY;;EAElD,SAAS,eAAe,QAAQ;AAC9B,UACE,aAAa,OAAO,UACpB,SAAS,UACT,OAAO,aAAa;;EAGxB,IAAI,QAAQ,QAAQ,QAAQ,EAC1B,qBAAqB,OAAO,IAAI,6BAA6B,EAC7D,oBAAoB,OAAO,IAAI,eAAe,EAC9C,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,yBAAyB,OAAO,IAAI,oBAAoB,EACxD,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,qBAAqB,OAAO,IAAI,gBAAgB,EAChD,yBAAyB,OAAO,IAAI,oBAAoB,EACxD,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,2BAA2B,OAAO,IAAI,sBAAsB,EAC5D,kBAAkB,OAAO,IAAI,aAAa,EAC1C,kBAAkB,OAAO,IAAI,aAAa,EAC1C,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,yBAAyB,OAAO,IAAI,yBAAyB,EAC7D,uBACE,MAAM,iEACR,iBAAiB,OAAO,UAAU,gBAClC,cAAc,MAAM,SACpB,aAAa,QAAQ,aACjB,QAAQ,aACR,WAAY;AACV,UAAO;;AAEf,UAAQ,EACN,0BAA0B,SAAU,mBAAmB;AACrD,UAAO,mBAAmB;KAE7B;EACD,IAAI;EACJ,IAAI,yBAAyB,EAAE;EAC/B,IAAI,yBAAyB,MAAM,yBAAyB,KAC1D,OACA,aACD,EAAE;EACH,IAAI,wBAAwB,WAAW,YAAY,aAAa,CAAC;EACjE,IAAI,wBAAwB,EAAE;AAC9B,UAAQ,WAAW;AACnB,UAAQ,MAAM,SAAU,MAAM,QAAQ,UAAU;GAC9C,IAAI,mBACF,MAAM,qBAAqB;AAC7B,UAAO,WACL,MACA,QACA,UACA,CAAC,GACD,mBACI,MAAM,wBAAwB,GAC9B,wBACJ,mBAAmB,WAAW,YAAY,KAAK,CAAC,GAAG,sBACpD;;AAEH,UAAQ,OAAO,SAAU,MAAM,QAAQ,UAAU;GAC/C,IAAI,mBACF,MAAM,qBAAqB;AAC7B,UAAO,WACL,MACA,QACA,UACA,CAAC,GACD,mBACI,MAAM,wBAAwB,GAC9B,wBACJ,mBAAmB,WAAW,YAAY,KAAK,CAAC,GAAG,sBACpD;;KAED;;;;;;AC1VJ,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC4DT,MAAMA,kBAA2C,EAC/C,UACA,UACA,YACA,SAAS,WACgB;CACzB,MAAM,EAAC,YAAY,mDAA2B;AAE9C,KAAI,UACF,QAAO;AAGT,KAAI,WACF,QAAO;AAGT,KAAI,SACF,QAAO;AAGT,KAAI,WACF,QAAO,4CAACC,oCAAS,IAAI,aAAc;AAGrC,OAAM,IAAIC,wCACR,oDACA,sCACA,mBACA,+FACD;;AAGH,6BAAe;;;;;;;;;;;;;;;;;;ACzDf,MAAMC,iBAAyC,EAAC,SAAS,iBAAoC;CAC3F,MAAMC,iDAAkD;CAExD,MAAM,EAAC,0DADgE,CACpB;CAEnD,MAAM,kBAAkB,SAAuB;AAC7C,MAAI,YAAY;AACd,cAAW,KAAK;AAChB;;EAGF,MAAMC,WAAmB,OAAO,SAAS;EACzC,MAAMC,WAAmB,SAAS,SAAS,SAAS,GAAG,SAAS,MAAM,GAAG,CAAC,SAAS,OAAO,CAAC,QAAQ,OAAO,GAAG,GAAG;EAEhH,MAAMC,iBAAyB,YAAY,KAAK,WAAW,SAAS,GAAG,KAAK,MAAM,SAAS,OAAO,IAAI,MAAM;AAE5G,SAAO,SAAS,EAAC,IAAI,gBAAe,CAAC,CAAC,YAAY,GAAG;;AAGvD,QACE,4CAACC;EACC,YAAY;EACZ,SACE,aACE,UAAuB;AAEvB,WAAQ,MAAM,yBAAyB,MAAM;;GAGjD;;AAIN,4BAAe;;;;AC/Bf,MAAMC,gBAAgF;CACpF,QAAQ;EACN,SAAS,EAAC,SAAS,gBACjB,4CAACC;GAAY,aAAa,QAAQ;GAAa,YAAY,UAAwB,UAAU,MAAM,GAAG;IAAI;EAE5G,UAAU,EAAC,IAAI,SAAS,aACtB,4CAACC;GAAa,SAAS;GAAI,WAAW,QAAQ;GAAW,aAAa,QAAQ;GAAa,WAAW;IAAU;EAElH,OAAO,EAAC,cAAc,SAAS,gBAC7B,4CAACC;GACC,SAAS;GACT,aAAa,QAAQ;GACrB,WAAW,UAAwB,UAAU,MAAM,GAAG;IACtD;EAEL;CACD,QAAQ;EACN,SAAS,EAAC,SAAS,gBACjB,4CAACC;GAAY,aAAa,QAAQ;GAAa,YAAY,UAAwB,UAAU,MAAM,GAAG;IAAI;EAE5G,UAAU,EAAC,IAAI,cACb,4CAACC;GAAa,SAAS;GAAI,UAAU,QAAQ;GAAU,aAAa,QAAQ;IAAe;EAE7F,OAAO,EAAC,cAAc,SAAS,gBAC7B,4CAACC;GACC,SAAS;GACT,aAAa,QAAQ;GACrB,WAAW,UAAwB,UAAU,MAAM,GAAG;IACtD;EAEL;CACD,OAAO;EACL,SAAS,EAAC,SAAS,gBACjB,4CAACC;GAAW,aAAa,QAAQ;GAAa,YAAY,SAAuB,UAAU,KAAK,GAAG;IAAI;EAEzG,UAAU,EAAC,IAAI,cACb,uFACE,4CAACC;GAAgB,QAAQ;GAAI,aAAa,QAAQ;IAAe,EACjE,4CAACC;GAAgB,QAAQ;GAAI,UAAU,QAAQ;GAAU,aAAa,QAAQ;IAAe,IAC5F;EAEL,OAAO,EAAC,cAAc,SAAS,gBAC7B,4CAACC;GACC,SAAS;GACT,aAAa,QAAQ;GACrB,WAAW,SAAuB,UAAU,KAAK,GAAG;IACpD;EAEL;CACD,OAAO;EACL,SAAS,EAAC,SAAS,gBACjB,4CAACC;GAAW,aAAa,QAAQ;GAAa,YAAY,SAAuB,UAAU,KAAK,GAAG;IAAI;EAEzG,UAAU,EAAC,IAAI,SAAS,aACtB,4CAACC;GACC,QAAQ;GACR,WAAW,QAAQ;GACnB,UAAU,QAAQ;GAClB,aAAa,QAAQ;GACrB,WAAW;IACX;EAEJ,OAAO,EAAC,cAAc,SAAS,gBAC7B,4CAACC;GACC,SAAS;GACT,aAAa,QAAQ;GACrB,WAAW,SAAuB,UAAU,KAAK,GAAG;IACpD;EAEL;CACF;;;;AAeD,MAAMC,aAAiC,EAAC,gBAAgB,MAAM,SAAS,cAA2C;CAChH,MAAMC,qDAAwD;CAC9D,MAAMC,4CAAuB;EAC3B,SAAS,WAAkC,OAAO,MAAM;EACxD,QAAQ;EACT,CAAC;CACF,MAAM,EAAC,4CAAoB,QAAQ,aAAa,KAAK;CACrD,MAAMC,cAAsB,gBAAgB,CAAC,QAAQ,QAAQ,GAAG;CAEhE,MAAM,eAAqB;AACzB,EAAK,SAAS,EAAC,IAAI,aAAY,CAAC;;CAGlC,MAAM,aAAa,eAA6B;AAC9C,EAAK,SAAS;GAAC,QAAQ,EAAC,IAAI,YAAW;GAAE,IAAI,GAAG,YAAY;GAAM,CAAC;;CAGrE,MAAMC,eACJ,SAAS,SACP,4CAACC;EAAO,eAAqB,KAAK,SAAS,EAAC,IAAI,GAAG,YAAY,OAAM,CAAC;YACnE,EAAE,SAAS,QAAQ,eAAe;GAC5B,GACP;AAEN,QAAO,cAAc,SAAS,MAAM;EAAC;EAAc;EAAI;EAAS;EAAW;EAAO,CAAC;;AAGrF,wBAAe;;;;AC9Gf,MAAMC,mBAAmC;CAAC;CAAS;CAAU;CAAS;CAAS;;;;;;;;;;;;;;;;;;;;;;;AAwB/E,MAAM,qBAAqB,aAAuB,UAA8B,EAAE,KAAiB;CACjG,MAAM,EAAC,SAAS,WAAW,qBAAoB;AAE/C,QAAO,SAAS,KAAK,YAAoC;EACvD,MAAMC,wDAAqC;GAAC,sBAAsB;GAAa,MAAM;GAAQ,CAAC;EAE9F,MAAM,QAAQ,SAA8C;GAC1D,MAAM,aAA2B;IAC/B,MAAMC,UACJ,4CAACC;KACC,sBAA8B,aAAa;KACrC;KACG;KACA;MACT;AAGJ,WAAO,UAAU,4CAACC;KAAe,GAAI;eAAU;MAAyB,GAAG;;AAG7E,QAAK,cAAc,SAAS,QAAQ,GAAG,KAAK;AAE5C,UAAO;;AAGT,SAAO,aAAa,YAAY;4CAClB;IAAC,WAAW,KAAK,OAAO;IAAE,sBAAsB;IAAc,MAAM;IAAI,CAAC;4CACzE;IAAC,WAAW,KAAK,SAAS;IAAE,sBAAsB;IAAc,MAAM;IAAM,CAAC;4CAC7E;IAAC,WAAW,KAAK,UAAU;IAAE,sBAAsB;IAAc,MAAM;IAAM,CAAC;GAC3F,CAAC;GACF;;AAGJ,gCAAe"}

package/dist/index.d.ts

@@ -2,4 +2,6 @@ export { default as ProtectedRoute } from './components/ProtectedRoute';
 export * from './components/ProtectedRoute';
 export { default as CallbackRoute } from './components/CallbackRoute';
 export * from './components/CallbackRoute';
+export { default as createAdminRoutes } from './routes/createAdminRoutes';
+export * from './routes/createAdminRoutes';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,OAAO,IAAI,cAAc,EAAC,MAAM,6BAA6B,CAAC;AACtE,cAAc,6BAA6B,CAAC;AAE5C,OAAO,EAAC,OAAO,IAAI,aAAa,EAAC,MAAM,4BAA4B,CAAC;AACpE,cAAc,4BAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,OAAO,IAAI,cAAc,EAAC,MAAM,6BAA6B,CAAC;AACtE,cAAc,6BAA6B,CAAC;AAE5C,OAAO,EAAC,OAAO,IAAI,aAAa,EAAC,MAAM,4BAA4B,CAAC;AACpE,cAAc,4BAA4B,CAAC;AAE3C,OAAO,EAAC,OAAO,IAAI,iBAAiB,EAAC,MAAM,4BAA4B,CAAC;AACxE,cAAc,4BAA4B,CAAC"}

package/dist/index.js

@@ -1,5 +1,5 @@
-import { Navigate, useRouter, useRouterState } from "@tanstack/react-router";
-import { Callback, ThunderIDRuntimeError, useThunderID } from "@thunderid/react";
+import { Navigate, createRoute, useNavigate, useParams, useRouter, useRouterState } from "@tanstack/react-router";
+import { AgentCreate, AgentDetails, AgentList, Button, Callback, GroupCreate, GroupList, GroupMembers, RoleAssignments, RoleCreate, RoleList, RolePermissions, ThunderIDRuntimeError, UserCreate, UserDetails, UserList, useThunderID, useTranslation } from "@thunderid/react";
 
 //#region rolldown:runtime
 var __create = Object.create;
@@ -313,5 +313,187 @@ const CallbackRoute = ({ onError, onNavigate }) => {
 var CallbackRoute_default = CallbackRoute;
 
 //#endregion
-export { CallbackRoute_default as CallbackRoute, ProtectedRoute_default as ProtectedRoute };
+//#region src/routes/AdminPage.tsx
+const SECTION_PAGES = {
+	agents: {
+		create: ({ options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(AgentCreate, {
+			preferences: options.preferences,
+			onCreated: (agent) => toDetails(agent.id)
+		}),
+		details: ({ id, options, toList }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(AgentDetails, {
+			agentId: id,
+			deletable: options.deletable,
+			preferences: options.preferences,
+			onDeleted: toList
+		}),
+		list: ({ createAction, options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(AgentList, {
+			actions: createAction,
+			preferences: options.preferences,
+			onSelect: (agent) => toDetails(agent.id)
+		})
+	},
+	groups: {
+		create: ({ options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(GroupCreate, {
+			preferences: options.preferences,
+			onCreated: (group) => toDetails(group.id)
+		}),
+		details: ({ id, options }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(GroupMembers, {
+			groupId: id,
+			editable: options.editable,
+			preferences: options.preferences
+		}),
+		list: ({ createAction, options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(GroupList, {
+			actions: createAction,
+			preferences: options.preferences,
+			onSelect: (group) => toDetails(group.id)
+		})
+	},
+	roles: {
+		create: ({ options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(RoleCreate, {
+			preferences: options.preferences,
+			onCreated: (role) => toDetails(role.id)
+		}),
+		details: ({ id, options }) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(RolePermissions, {
+			roleId: id,
+			preferences: options.preferences
+		}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(RoleAssignments, {
+			roleId: id,
+			editable: options.editable,
+			preferences: options.preferences
+		})] }),
+		list: ({ createAction, options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(RoleList, {
+			actions: createAction,
+			preferences: options.preferences,
+			onSelect: (role) => toDetails(role.id)
+		})
+	},
+	users: {
+		create: ({ options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(UserCreate, {
+			preferences: options.preferences,
+			onCreated: (user) => toDetails(user.id)
+		}),
+		details: ({ id, options, toList }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(UserDetails, {
+			userId: id,
+			deletable: options.deletable,
+			editable: options.editable,
+			preferences: options.preferences,
+			onDeleted: toList
+		}),
+		list: ({ createAction, options, toDetails }) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(UserList, {
+			actions: createAction,
+			preferences: options.preferences,
+			onSelect: (user) => toDetails(user.id)
+		})
+	}
+};
+/**
+* Renders one admin page and wires its callbacks to navigation within its section.
+*/
+const AdminPage = ({ getSectionPath, kind, options, section }) => {
+	const navigate = useNavigate();
+	const id = useParams({
+		select: (params) => params.id ?? "",
+		strict: false
+	});
+	const { t } = useTranslation(options.preferences?.i18n);
+	const sectionPath = getSectionPath().replace(/\/+$/, "");
+	const toList = () => {
+		navigate({ to: sectionPath });
+	};
+	const toDetails = (resourceId) => {
+		navigate({
+			params: { id: resourceId },
+			to: `${sectionPath}/$id`
+		});
+	};
+	const createAction = kind === "list" ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Button, {
+		onClick: () => void navigate({ to: `${sectionPath}/new` }),
+		children: t(`admin.${section}.create.title`)
+	}) : null;
+	return SECTION_PAGES[section][kind]({
+		createAction,
+		id,
+		options,
+		toDetails,
+		toList
+	});
+};
+var AdminPage_default = AdminPage;
+
+//#endregion
+//#region src/routes/createAdminRoutes.tsx
+const DEFAULT_SECTIONS = [
+	"users",
+	"groups",
+	"roles",
+	"agents"
+];
+/**
+* Builds TanStack Router routes that mount the admin (management) sections of `@thunderid/react`
+* under `parentRoute`: for each section a list at `<section>`, a create form at `<section>/new`, and
+* a details page at `<section>/$id`. Selecting, creating and deleting navigate between them.
+*
+* The routes are built with `createRoute`, so they carry no route-tree types of their own; navigate
+* to them with string paths.
+*
+* @param parentRoute - The route to mount the sections under, such as the root route or an `/admin` route.
+* @param options - Which sections to mount and how to render them.
+* @returns One route per section, each with its pages as children, for `parentRoute.addChildren`.
+*
+* @example
+* ```tsx
+* const adminRoute = createRoute({getParentRoute: () => rootRoute, path: '/admin'});
+*
+* const routeTree = rootRoute.addChildren([
+*   indexRoute,
+*   adminRoute.addChildren(createAdminRoutes(adminRoute, {protect: {redirectTo: '/signin'}})),
+* ]);
+* ```
+*/
+const createAdminRoutes = (parentRoute, options = {}) => {
+	const { protect, sections = DEFAULT_SECTIONS } = options;
+	return sections.map((section) => {
+		const sectionRoute = createRoute({
+			getParentRoute: () => parentRoute,
+			path: section
+		});
+		const page = (kind) => {
+			const Page = () => {
+				const element = /* @__PURE__ */ (0, import_jsx_runtime.jsx)(AdminPage_default, {
+					getSectionPath: () => sectionRoute.fullPath,
+					kind,
+					options,
+					section
+				});
+				return protect ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ProtectedRoute_default, {
+					...protect,
+					children: element
+				}) : element;
+			};
+			Page.displayName = `Admin(${section}/${kind})`;
+			return Page;
+		};
+		return sectionRoute.addChildren([
+			createRoute({
+				component: page("list"),
+				getParentRoute: () => sectionRoute,
+				path: "/"
+			}),
+			createRoute({
+				component: page("create"),
+				getParentRoute: () => sectionRoute,
+				path: "new"
+			}),
+			createRoute({
+				component: page("details"),
+				getParentRoute: () => sectionRoute,
+				path: "$id"
+			})
+		]);
+	});
+};
+var createAdminRoutes_default = createAdminRoutes;
+
+//#endregion
+export { CallbackRoute_default as CallbackRoute, ProtectedRoute_default as ProtectedRoute, createAdminRoutes_default as createAdminRoutes };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["ProtectedRoute: FC<ProtectedRouteProps>","CallbackRoute: FC<CallbackRouteProps>","router: ReturnType<typeof useRouter>","fullPath: string","basename: string","navigationPath: string"],"sources":["../../../node_modules/.pnpm/react@19.2.3/node_modules/react/cjs/react-jsx-runtime.development.js","../../../node_modules/.pnpm/react@19.2.3/node_modules/react/jsx-runtime.js","../src/components/ProtectedRoute.tsx","../src/components/CallbackRoute.tsx"],"sourcesContent":["/**\n * @license React\n * react-jsx-runtime.development.js\n *\n * Copyright (c) Meta Platforms, Inc. and affiliates.\n *\n * This source code is licensed under the MIT license found in the\n * LICENSE file in the root directory of this source tree.\n */\n\n\"use strict\";\n\"production\" !== process.env.NODE_ENV &&\n  (function () {\n    function getComponentNameFromType(type) {\n      if (null == type) return null;\n      if (\"function\" === typeof type)\n        return type.$$typeof === REACT_CLIENT_REFERENCE\n          ? null\n          : type.displayName || type.name || null;\n      if (\"string\" === typeof type) return type;\n      switch (type) {\n        case REACT_FRAGMENT_TYPE:\n          return \"Fragment\";\n        case REACT_PROFILER_TYPE:\n          return \"Profiler\";\n        case REACT_STRICT_MODE_TYPE:\n          return \"StrictMode\";\n        case REACT_SUSPENSE_TYPE:\n          return \"Suspense\";\n        case REACT_SUSPENSE_LIST_TYPE:\n          return \"SuspenseList\";\n        case REACT_ACTIVITY_TYPE:\n          return \"Activity\";\n      }\n      if (\"object\" === typeof type)\n        switch (\n          (\"number\" === typeof type.tag &&\n            console.error(\n              \"Received an unexpected object in getComponentNameFromType(). This is likely a bug in React. Please file an issue.\"\n            ),\n          type.$$typeof)\n        ) {\n          case REACT_PORTAL_TYPE:\n            return \"Portal\";\n          case REACT_CONTEXT_TYPE:\n            return type.displayName || \"Context\";\n          case REACT_CONSUMER_TYPE:\n            return (type._context.displayName || \"Context\") + \".Consumer\";\n          case REACT_FORWARD_REF_TYPE:\n            var innerType = type.render;\n            type = type.displayName;\n            type ||\n              ((type = innerType.displayName || innerType.name || \"\"),\n              (type = \"\" !== type ? \"ForwardRef(\" + type + \")\" : \"ForwardRef\"));\n            return type;\n          case REACT_MEMO_TYPE:\n            return (\n              (innerType = type.displayName || null),\n              null !== innerType\n                ? innerType\n                : getComponentNameFromType(type.type) || \"Memo\"\n            );\n          case REACT_LAZY_TYPE:\n            innerType = type._payload;\n            type = type._init;\n            try {\n              return getComponentNameFromType(type(innerType));\n            } catch (x) {}\n        }\n      return null;\n    }\n    function testStringCoercion(value) {\n      return \"\" + value;\n    }\n    function checkKeyStringCoercion(value) {\n      try {\n        testStringCoercion(value);\n        var JSCompiler_inline_result = !1;\n      } catch (e) {\n        JSCompiler_inline_result = !0;\n      }\n      if (JSCompiler_inline_result) {\n        JSCompiler_inline_result = console;\n        var JSCompiler_temp_const = JSCompiler_inline_result.error;\n        var JSCompiler_inline_result$jscomp$0 =\n          (\"function\" === typeof Symbol &&\n            Symbol.toStringTag &&\n            value[Symbol.toStringTag]) ||\n          value.constructor.name ||\n          \"Object\";\n        JSCompiler_temp_const.call(\n          JSCompiler_inline_result,\n          \"The provided key is an unsupported type %s. This value must be coerced to a string before using it here.\",\n          JSCompiler_inline_result$jscomp$0\n        );\n        return testStringCoercion(value);\n      }\n    }\n    function getTaskName(type) {\n      if (type === REACT_FRAGMENT_TYPE) return \"<>\";\n      if (\n        \"object\" === typeof type &&\n        null !== type &&\n        type.$$typeof === REACT_LAZY_TYPE\n      )\n        return \"<...>\";\n      try {\n        var name = getComponentNameFromType(type);\n        return name ? \"<\" + name + \">\" : \"<...>\";\n      } catch (x) {\n        return \"<...>\";\n      }\n    }\n    function getOwner() {\n      var dispatcher = ReactSharedInternals.A;\n      return null === dispatcher ? null : dispatcher.getOwner();\n    }\n    function UnknownOwner() {\n      return Error(\"react-stack-top-frame\");\n    }\n    function hasValidKey(config) {\n      if (hasOwnProperty.call(config, \"key\")) {\n        var getter = Object.getOwnPropertyDescriptor(config, \"key\").get;\n        if (getter && getter.isReactWarning) return !1;\n      }\n      return void 0 !== config.key;\n    }\n    function defineKeyPropWarningGetter(props, displayName) {\n      function warnAboutAccessingKey() {\n        specialPropKeyWarningShown ||\n          ((specialPropKeyWarningShown = !0),\n          console.error(\n            \"%s: `key` is not a prop. Trying to access it will result in `undefined` being returned. If you need to access the same value within the child component, you should pass it as a different prop. (https://react.dev/link/special-props)\",\n            displayName\n          ));\n      }\n      warnAboutAccessingKey.isReactWarning = !0;\n      Object.defineProperty(props, \"key\", {\n        get: warnAboutAccessingKey,\n        configurable: !0\n      });\n    }\n    function elementRefGetterWithDeprecationWarning() {\n      var componentName = getComponentNameFromType(this.type);\n      didWarnAboutElementRef[componentName] ||\n        ((didWarnAboutElementRef[componentName] = !0),\n        console.error(\n          \"Accessing element.ref was removed in React 19. ref is now a regular prop. It will be removed from the JSX Element type in a future release.\"\n        ));\n      componentName = this.props.ref;\n      return void 0 !== componentName ? componentName : null;\n    }\n    function ReactElement(type, key, props, owner, debugStack, debugTask) {\n      var refProp = props.ref;\n      type = {\n        $$typeof: REACT_ELEMENT_TYPE,\n        type: type,\n        key: key,\n        props: props,\n        _owner: owner\n      };\n      null !== (void 0 !== refProp ? refProp : null)\n        ? Object.defineProperty(type, \"ref\", {\n            enumerable: !1,\n            get: elementRefGetterWithDeprecationWarning\n          })\n        : Object.defineProperty(type, \"ref\", { enumerable: !1, value: null });\n      type._store = {};\n      Object.defineProperty(type._store, \"validated\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: 0\n      });\n      Object.defineProperty(type, \"_debugInfo\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: null\n      });\n      Object.defineProperty(type, \"_debugStack\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: debugStack\n      });\n      Object.defineProperty(type, \"_debugTask\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: debugTask\n      });\n      Object.freeze && (Object.freeze(type.props), Object.freeze(type));\n      return type;\n    }\n    function jsxDEVImpl(\n      type,\n      config,\n      maybeKey,\n      isStaticChildren,\n      debugStack,\n      debugTask\n    ) {\n      var children = config.children;\n      if (void 0 !== children)\n        if (isStaticChildren)\n          if (isArrayImpl(children)) {\n            for (\n              isStaticChildren = 0;\n              isStaticChildren < children.length;\n              isStaticChildren++\n            )\n              validateChildKeys(children[isStaticChildren]);\n            Object.freeze && Object.freeze(children);\n          } else\n            console.error(\n              \"React.jsx: Static children should always be an array. You are likely explicitly calling React.jsxs or React.jsxDEV. Use the Babel transform instead.\"\n            );\n        else validateChildKeys(children);\n      if (hasOwnProperty.call(config, \"key\")) {\n        children = getComponentNameFromType(type);\n        var keys = Object.keys(config).filter(function (k) {\n          return \"key\" !== k;\n        });\n        isStaticChildren =\n          0 < keys.length\n            ? \"{key: someKey, \" + keys.join(\": ..., \") + \": ...}\"\n            : \"{key: someKey}\";\n        didWarnAboutKeySpread[children + isStaticChildren] ||\n          ((keys =\n            0 < keys.length ? \"{\" + keys.join(\": ..., \") + \": ...}\" : \"{}\"),\n          console.error(\n            'A props object containing a \"key\" prop is being spread into JSX:\\n  let props = %s;\\n  <%s {...props} />\\nReact keys must be passed directly to JSX without using spread:\\n  let props = %s;\\n  <%s key={someKey} {...props} />',\n            isStaticChildren,\n            children,\n            keys,\n            children\n          ),\n          (didWarnAboutKeySpread[children + isStaticChildren] = !0));\n      }\n      children = null;\n      void 0 !== maybeKey &&\n        (checkKeyStringCoercion(maybeKey), (children = \"\" + maybeKey));\n      hasValidKey(config) &&\n        (checkKeyStringCoercion(config.key), (children = \"\" + config.key));\n      if (\"key\" in config) {\n        maybeKey = {};\n        for (var propName in config)\n          \"key\" !== propName && (maybeKey[propName] = config[propName]);\n      } else maybeKey = config;\n      children &&\n        defineKeyPropWarningGetter(\n          maybeKey,\n          \"function\" === typeof type\n            ? type.displayName || type.name || \"Unknown\"\n            : type\n        );\n      return ReactElement(\n        type,\n        children,\n        maybeKey,\n        getOwner(),\n        debugStack,\n        debugTask\n      );\n    }\n    function validateChildKeys(node) {\n      isValidElement(node)\n        ? node._store && (node._store.validated = 1)\n        : \"object\" === typeof node &&\n          null !== node &&\n          node.$$typeof === REACT_LAZY_TYPE &&\n          (\"fulfilled\" === node._payload.status\n            ? isValidElement(node._payload.value) &&\n              node._payload.value._store &&\n              (node._payload.value._store.validated = 1)\n            : node._store && (node._store.validated = 1));\n    }\n    function isValidElement(object) {\n      return (\n        \"object\" === typeof object &&\n        null !== object &&\n        object.$$typeof === REACT_ELEMENT_TYPE\n      );\n    }\n    var React = require(\"react\"),\n      REACT_ELEMENT_TYPE = Symbol.for(\"react.transitional.element\"),\n      REACT_PORTAL_TYPE = Symbol.for(\"react.portal\"),\n      REACT_FRAGMENT_TYPE = Symbol.for(\"react.fragment\"),\n      REACT_STRICT_MODE_TYPE = Symbol.for(\"react.strict_mode\"),\n      REACT_PROFILER_TYPE = Symbol.for(\"react.profiler\"),\n      REACT_CONSUMER_TYPE = Symbol.for(\"react.consumer\"),\n      REACT_CONTEXT_TYPE = Symbol.for(\"react.context\"),\n      REACT_FORWARD_REF_TYPE = Symbol.for(\"react.forward_ref\"),\n      REACT_SUSPENSE_TYPE = Symbol.for(\"react.suspense\"),\n      REACT_SUSPENSE_LIST_TYPE = Symbol.for(\"react.suspense_list\"),\n      REACT_MEMO_TYPE = Symbol.for(\"react.memo\"),\n      REACT_LAZY_TYPE = Symbol.for(\"react.lazy\"),\n      REACT_ACTIVITY_TYPE = Symbol.for(\"react.activity\"),\n      REACT_CLIENT_REFERENCE = Symbol.for(\"react.client.reference\"),\n      ReactSharedInternals =\n        React.__CLIENT_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE,\n      hasOwnProperty = Object.prototype.hasOwnProperty,\n      isArrayImpl = Array.isArray,\n      createTask = console.createTask\n        ? console.createTask\n        : function () {\n            return null;\n          };\n    React = {\n      react_stack_bottom_frame: function (callStackForError) {\n        return callStackForError();\n      }\n    };\n    var specialPropKeyWarningShown;\n    var didWarnAboutElementRef = {};\n    var unknownOwnerDebugStack = React.react_stack_bottom_frame.bind(\n      React,\n      UnknownOwner\n    )();\n    var unknownOwnerDebugTask = createTask(getTaskName(UnknownOwner));\n    var didWarnAboutKeySpread = {};\n    exports.Fragment = REACT_FRAGMENT_TYPE;\n    exports.jsx = function (type, config, maybeKey) {\n      var trackActualOwner =\n        1e4 > ReactSharedInternals.recentlyCreatedOwnerStacks++;\n      return jsxDEVImpl(\n        type,\n        config,\n        maybeKey,\n        !1,\n        trackActualOwner\n          ? Error(\"react-stack-top-frame\")\n          : unknownOwnerDebugStack,\n        trackActualOwner ? createTask(getTaskName(type)) : unknownOwnerDebugTask\n      );\n    };\n    exports.jsxs = function (type, config, maybeKey) {\n      var trackActualOwner =\n        1e4 > ReactSharedInternals.recentlyCreatedOwnerStacks++;\n      return jsxDEVImpl(\n        type,\n        config,\n        maybeKey,\n        !0,\n        trackActualOwner\n          ? Error(\"react-stack-top-frame\")\n          : unknownOwnerDebugStack,\n        trackActualOwner ? createTask(getTaskName(type)) : unknownOwnerDebugTask\n      );\n    };\n  })();\n","'use strict';\n\nif (process.env.NODE_ENV === 'production') {\n  module.exports = require('./cjs/react-jsx-runtime.production.js');\n} else {\n  module.exports = require('./cjs/react-jsx-runtime.development.js');\n}\n","// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Navigate} from '@tanstack/react-router';\nimport {useThunderID, ThunderIDRuntimeError} from '@thunderid/react';\nimport {FC, ReactElement, ReactNode} from 'react';\n\n/**\n * Props for the ProtectedRoute component.\n */\nexport interface ProtectedRouteProps {\n  /**\n   * The element to render when the user is authenticated.\n   */\n  children: ReactElement;\n  /**\n   * Custom fallback element to render when the user is not authenticated.\n   * If provided, this takes precedence over redirectTo.\n   */\n  fallback?: ReactElement;\n  /**\n   * Custom loading element to render while authentication status is being determined.\n   */\n  loader?: ReactNode;\n  /**\n   * URL to redirect to when the user is not authenticated.\n   * Required unless a fallback element is provided.\n   */\n  redirectTo?: string;\n}\n\n/**\n * A protected route component that requires authentication to access.\n *\n * This component should be used as the component prop of a TanStack Router route.\n * It checks authentication status and either renders the protected content,\n * shows a loading state, redirects, or shows a fallback.\n *\n * Either a `redirectTo` prop or a `fallback` prop must be provided to handle\n * unauthenticated users.\n *\n * @example Basic usage with redirect\n * ```tsx\n * const dashboardRoute = createRouteConfig({\n *   path: '/dashboard',\n *   component: () => (\n *     <ProtectedRoute redirectTo=\"/signin\">\n *       <Dashboard />\n *     </ProtectedRoute>\n *   )\n * })\n * ```\n *\n * @example With custom fallback\n * ```tsx\n * const adminRoute = createRouteConfig({\n *   path: '/admin',\n *   component: () => (\n *     <ProtectedRoute fallback={<div>Access denied</div>}>\n *       <AdminPanel />\n *     </ProtectedRoute>\n *   )\n * })\n * ```\n */\nconst ProtectedRoute: FC<ProtectedRouteProps> = ({\n  children,\n  fallback,\n  redirectTo,\n  loader = null,\n}: ProtectedRouteProps) => {\n  const {isSignedIn, isLoading} = useThunderID();\n\n  if (isLoading) {\n    return loader;\n  }\n\n  if (isSignedIn) {\n    return children;\n  }\n\n  if (fallback) {\n    return fallback;\n  }\n\n  if (redirectTo) {\n    return <Navigate to={redirectTo} />;\n  }\n\n  throw new ThunderIDRuntimeError(\n    '\"fallback\" or \"redirectTo\" prop is required.',\n    'ProtectedRoute-ValidationError-001',\n    'tanstack-router',\n    'Either \"fallback\" or \"redirectTo\" prop must be provided to handle unauthenticated users.',\n  );\n};\n\nexport default ProtectedRoute;\n","// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {useRouter, useRouterState} from '@tanstack/react-router';\nimport {Callback} from '@thunderid/react';\nimport {FC} from 'react';\n\n/**\n * Props for the CallbackRoute component.\n */\nexport interface CallbackRouteProps {\n  /**\n   * Callback function called when an error occurs during OAuth processing.\n   * @param error - The error that occurred\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Optional custom navigation handler.\n   * If provided, this will be called instead of the default navigate() behavior.\n   * Useful for apps that need custom navigation logic.\n   * @param path - The path to navigate to\n   */\n  onNavigate?: (path: string) => void;\n}\n\n/**\n * Handles OAuth callback redirects for TanStack Router applications.\n * Processes authorization code, validates CSRF state, and navigates back to the original path.\n * Automatically handles TanStack Router basepath when configured.\n *\n * @example\n * ```tsx\n * const callbackRoute = createRoute({\n *   getParentRoute: () => rootRoute,\n *   path: '/callback',\n *   component: CallbackRoute,\n * });\n * ```\n */\nconst CallbackRoute: FC<CallbackRouteProps> = ({onError, onNavigate}: CallbackRouteProps) => {\n  const router: ReturnType<typeof useRouter> = useRouter();\n  const routerState: ReturnType<typeof useRouterState> = useRouterState();\n  const {pathname}: {pathname: string} = routerState.location;\n\n  const handleNavigate = (path: string): void => {\n    if (onNavigate) {\n      onNavigate(path);\n      return;\n    }\n\n    const fullPath: string = window.location.pathname;\n    const basename: string = fullPath.endsWith(pathname) ? fullPath.slice(0, -pathname.length).replace(/\\/$/, '') : '';\n\n    const navigationPath: string = basename && path.startsWith(basename) ? path.slice(basename.length) || '/' : path;\n\n    router.navigate({to: navigationPath}).catch(() => {});\n  };\n\n  return (\n    <Callback\n      onNavigate={handleNavigate}\n      onError={\n        onError ||\n        ((error: Error): void => {\n          // eslint-disable-next-line no-console\n          console.error('OAuth callback error:', error);\n        })\n      }\n    />\n  );\n};\n\nexport default CallbackRoute;\n"],"x_google_ignoreList":[0,1],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,EACG,WAAY;EACX,SAAS,yBAAyB,MAAM;AACtC,OAAI,QAAQ,KAAM,QAAO;AACzB,OAAI,eAAe,OAAO,KACxB,QAAO,KAAK,aAAa,yBACrB,OACA,KAAK,eAAe,KAAK,QAAQ;AACvC,OAAI,aAAa,OAAO,KAAM,QAAO;AACrC,WAAQ,MAAR;IACE,KAAK,oBACH,QAAO;IACT,KAAK,oBACH,QAAO;IACT,KAAK,uBACH,QAAO;IACT,KAAK,oBACH,QAAO;IACT,KAAK,yBACH,QAAO;IACT,KAAK,oBACH,QAAO;;AAEX,OAAI,aAAa,OAAO,KACtB,SACG,aAAa,OAAO,KAAK,OACxB,QAAQ,MACN,oHACD,EACH,KAAK,UALP;IAOE,KAAK,kBACH,QAAO;IACT,KAAK,mBACH,QAAO,KAAK,eAAe;IAC7B,KAAK,oBACH,SAAQ,KAAK,SAAS,eAAe,aAAa;IACpD,KAAK;KACH,IAAI,YAAY,KAAK;AACrB,YAAO,KAAK;AACZ,cACI,OAAO,UAAU,eAAe,UAAU,QAAQ,IACnD,OAAO,OAAO,OAAO,gBAAgB,OAAO,MAAM;AACrD,YAAO;IACT,KAAK,gBACH,QACG,YAAY,KAAK,eAAe,MACjC,SAAS,YACL,YACA,yBAAyB,KAAK,KAAK,IAAI;IAE/C,KAAK;AACH,iBAAY,KAAK;AACjB,YAAO,KAAK;AACZ,SAAI;AACF,aAAO,yBAAyB,KAAK,UAAU,CAAC;cACzC,GAAG;;AAElB,UAAO;;EAET,SAAS,mBAAmB,OAAO;AACjC,UAAO,KAAK;;EAEd,SAAS,uBAAuB,OAAO;AACrC,OAAI;AACF,uBAAmB,MAAM;IACzB,IAAI,2BAA2B,CAAC;YACzB,GAAG;AACV,+BAA2B,CAAC;;AAE9B,OAAI,0BAA0B;AAC5B,+BAA2B;IAC3B,IAAI,wBAAwB,yBAAyB;IACrD,IAAI,oCACD,eAAe,OAAO,UACrB,OAAO,eACP,MAAM,OAAO,gBACf,MAAM,YAAY,QAClB;AACF,0BAAsB,KACpB,0BACA,4GACA,kCACD;AACD,WAAO,mBAAmB,MAAM;;;EAGpC,SAAS,YAAY,MAAM;AACzB,OAAI,SAAS,oBAAqB,QAAO;AACzC,OACE,aAAa,OAAO,QACpB,SAAS,QACT,KAAK,aAAa,gBAElB,QAAO;AACT,OAAI;IACF,IAAI,OAAO,yBAAyB,KAAK;AACzC,WAAO,OAAO,MAAM,OAAO,MAAM;YAC1B,GAAG;AACV,WAAO;;;EAGX,SAAS,WAAW;GAClB,IAAI,aAAa,qBAAqB;AACtC,UAAO,SAAS,aAAa,OAAO,WAAW,UAAU;;EAE3D,SAAS,eAAe;AACtB,UAAO,MAAM,wBAAwB;;EAEvC,SAAS,YAAY,QAAQ;AAC3B,OAAI,eAAe,KAAK,QAAQ,MAAM,EAAE;IACtC,IAAI,SAAS,OAAO,yBAAyB,QAAQ,MAAM,CAAC;AAC5D,QAAI,UAAU,OAAO,eAAgB,QAAO,CAAC;;AAE/C,UAAO,KAAK,MAAM,OAAO;;EAE3B,SAAS,2BAA2B,OAAO,aAAa;GACtD,SAAS,wBAAwB;AAC/B,mCACI,6BAA6B,CAAC,GAChC,QAAQ,MACN,2OACA,YACD;;AAEL,yBAAsB,iBAAiB,CAAC;AACxC,UAAO,eAAe,OAAO,OAAO;IAClC,KAAK;IACL,cAAc,CAAC;IAChB,CAAC;;EAEJ,SAAS,yCAAyC;GAChD,IAAI,gBAAgB,yBAAyB,KAAK,KAAK;AACvD,0BAAuB,mBACnB,uBAAuB,iBAAiB,CAAC,GAC3C,QAAQ,MACN,8IACD;AACH,mBAAgB,KAAK,MAAM;AAC3B,UAAO,KAAK,MAAM,gBAAgB,gBAAgB;;EAEpD,SAAS,aAAa,MAAM,KAAK,OAAO,OAAO,YAAY,WAAW;GACpE,IAAI,UAAU,MAAM;AACpB,UAAO;IACL,UAAU;IACJ;IACD;IACE;IACP,QAAQ;IACT;AACD,aAAU,KAAK,MAAM,UAAU,UAAU,QACrC,OAAO,eAAe,MAAM,OAAO;IACjC,YAAY,CAAC;IACb,KAAK;IACN,CAAC,GACF,OAAO,eAAe,MAAM,OAAO;IAAE,YAAY,CAAC;IAAG,OAAO;IAAM,CAAC;AACvE,QAAK,SAAS,EAAE;AAChB,UAAO,eAAe,KAAK,QAAQ,aAAa;IAC9C,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,eAAe,MAAM,cAAc;IACxC,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,eAAe,MAAM,eAAe;IACzC,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,eAAe,MAAM,cAAc;IACxC,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,WAAW,OAAO,OAAO,KAAK,MAAM,EAAE,OAAO,OAAO,KAAK;AAChE,UAAO;;EAET,SAAS,WACP,MACA,QACA,UACA,kBACA,YACA,WACA;GACA,IAAI,WAAW,OAAO;AACtB,OAAI,KAAK,MAAM,SACb,KAAI,iBACF,KAAI,YAAY,SAAS,EAAE;AACzB,SACE,mBAAmB,GACnB,mBAAmB,SAAS,QAC5B,mBAEA,mBAAkB,SAAS,kBAAkB;AAC/C,WAAO,UAAU,OAAO,OAAO,SAAS;SAExC,SAAQ,MACN,uJACD;OACA,mBAAkB,SAAS;AAClC,OAAI,eAAe,KAAK,QAAQ,MAAM,EAAE;AACtC,eAAW,yBAAyB,KAAK;IACzC,IAAI,OAAO,OAAO,KAAK,OAAO,CAAC,OAAO,SAAU,GAAG;AACjD,YAAO,UAAU;MACjB;AACF,uBACE,IAAI,KAAK,SACL,oBAAoB,KAAK,KAAK,UAAU,GAAG,WAC3C;AACN,0BAAsB,WAAW,sBAC7B,OACA,IAAI,KAAK,SAAS,MAAM,KAAK,KAAK,UAAU,GAAG,WAAW,MAC5D,QAAQ,MACN,qOACA,kBACA,UACA,MACA,SACD,EACA,sBAAsB,WAAW,oBAAoB,CAAC;;AAE3D,cAAW;AACX,QAAK,MAAM,aACR,uBAAuB,SAAS,EAAG,WAAW,KAAK;AACtD,eAAY,OAAO,KAChB,uBAAuB,OAAO,IAAI,EAAG,WAAW,KAAK,OAAO;AAC/D,OAAI,SAAS,QAAQ;AACnB,eAAW,EAAE;AACb,SAAK,IAAI,YAAY,OACnB,WAAU,aAAa,SAAS,YAAY,OAAO;SAChD,YAAW;AAClB,eACE,2BACE,UACA,eAAe,OAAO,OAClB,KAAK,eAAe,KAAK,QAAQ,YACjC,KACL;AACH,UAAO,aACL,MACA,UACA,UACA,UAAU,EACV,YACA,UACD;;EAEH,SAAS,kBAAkB,MAAM;AAC/B,kBAAe,KAAK,GAChB,KAAK,WAAW,KAAK,OAAO,YAAY,KACxC,aAAa,OAAO,QACpB,SAAS,QACT,KAAK,aAAa,oBACjB,gBAAgB,KAAK,SAAS,SAC3B,eAAe,KAAK,SAAS,MAAM,IACnC,KAAK,SAAS,MAAM,WACnB,KAAK,SAAS,MAAM,OAAO,YAAY,KACxC,KAAK,WAAW,KAAK,OAAO,YAAY;;EAElD,SAAS,eAAe,QAAQ;AAC9B,UACE,aAAa,OAAO,UACpB,SAAS,UACT,OAAO,aAAa;;EAGxB,IAAI,kBAAgB,QAAQ,EAC1B,qBAAqB,OAAO,IAAI,6BAA6B,EAC7D,oBAAoB,OAAO,IAAI,eAAe,EAC9C,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,yBAAyB,OAAO,IAAI,oBAAoB,EACxD,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,qBAAqB,OAAO,IAAI,gBAAgB,EAChD,yBAAyB,OAAO,IAAI,oBAAoB,EACxD,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,2BAA2B,OAAO,IAAI,sBAAsB,EAC5D,kBAAkB,OAAO,IAAI,aAAa,EAC1C,kBAAkB,OAAO,IAAI,aAAa,EAC1C,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,yBAAyB,OAAO,IAAI,yBAAyB,EAC7D,uBACE,MAAM,iEACR,iBAAiB,OAAO,UAAU,gBAClC,cAAc,MAAM,SACpB,aAAa,QAAQ,aACjB,QAAQ,aACR,WAAY;AACV,UAAO;;AAEf,UAAQ,EACN,0BAA0B,SAAU,mBAAmB;AACrD,UAAO,mBAAmB;KAE7B;EACD,IAAI;EACJ,IAAI,yBAAyB,EAAE;EAC/B,IAAI,yBAAyB,MAAM,yBAAyB,KAC1D,OACA,aACD,EAAE;EACH,IAAI,wBAAwB,WAAW,YAAY,aAAa,CAAC;EACjE,IAAI,wBAAwB,EAAE;AAC9B,UAAQ,WAAW;AACnB,UAAQ,MAAM,SAAU,MAAM,QAAQ,UAAU;GAC9C,IAAI,mBACF,MAAM,qBAAqB;AAC7B,UAAO,WACL,MACA,QACA,UACA,CAAC,GACD,mBACI,MAAM,wBAAwB,GAC9B,wBACJ,mBAAmB,WAAW,YAAY,KAAK,CAAC,GAAG,sBACpD;;AAEH,UAAQ,OAAO,SAAU,MAAM,QAAQ,UAAU;GAC/C,IAAI,mBACF,MAAM,qBAAqB;AAC7B,UAAO,WACL,MACA,QACA,UACA,CAAC,GACD,mBACI,MAAM,wBAAwB,GAC9B,wBACJ,mBAAmB,WAAW,YAAY,KAAK,CAAC,GAAG,sBACpD;;KAED;;;;;;AC1VJ,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC4DT,MAAMA,kBAA2C,EAC/C,UACA,UACA,YACA,SAAS,WACgB;CACzB,MAAM,EAAC,YAAY,cAAa,cAAc;AAE9C,KAAI,UACF,QAAO;AAGT,KAAI,WACF,QAAO;AAGT,KAAI,SACF,QAAO;AAGT,KAAI,WACF,QAAO,4CAAC,YAAS,IAAI,aAAc;AAGrC,OAAM,IAAI,sBACR,oDACA,sCACA,mBACA,+FACD;;AAGH,6BAAe;;;;;;;;;;;;;;;;;;ACzDf,MAAMC,iBAAyC,EAAC,SAAS,iBAAoC;CAC3F,MAAMC,SAAuC,WAAW;CAExD,MAAM,EAAC,aADgD,gBAAgB,CACpB;CAEnD,MAAM,kBAAkB,SAAuB;AAC7C,MAAI,YAAY;AACd,cAAW,KAAK;AAChB;;EAGF,MAAMC,WAAmB,OAAO,SAAS;EACzC,MAAMC,WAAmB,SAAS,SAAS,SAAS,GAAG,SAAS,MAAM,GAAG,CAAC,SAAS,OAAO,CAAC,QAAQ,OAAO,GAAG,GAAG;EAEhH,MAAMC,iBAAyB,YAAY,KAAK,WAAW,SAAS,GAAG,KAAK,MAAM,SAAS,OAAO,IAAI,MAAM;AAE5G,SAAO,SAAS,EAAC,IAAI,gBAAe,CAAC,CAAC,YAAY,GAAG;;AAGvD,QACE,4CAAC;EACC,YAAY;EACZ,SACE,aACE,UAAuB;AAEvB,WAAQ,MAAM,yBAAyB,MAAM;;GAGjD;;AAIN,4BAAe"}
+{"version":3,"file":"index.js","names":["ProtectedRoute: FC<ProtectedRouteProps>","CallbackRoute: FC<CallbackRouteProps>","router: ReturnType<typeof useRouter>","fullPath: string","basename: string","navigationPath: string","SECTION_PAGES: Record<AdminSection, Record<AdminPageKind, AdminPageRenderer>>","AdminPage: FC<AdminPageProps>","navigate: ReturnType<typeof useNavigate>","id: string","sectionPath: string","createAction: ReactNode","DEFAULT_SECTIONS: AdminSection[]","sectionRoute: AnyRoute","element: ReactElement","AdminPage","ProtectedRoute"],"sources":["../../../node_modules/.pnpm/react@19.2.3/node_modules/react/cjs/react-jsx-runtime.development.js","../../../node_modules/.pnpm/react@19.2.3/node_modules/react/jsx-runtime.js","../src/components/ProtectedRoute.tsx","../src/components/CallbackRoute.tsx","../src/routes/AdminPage.tsx","../src/routes/createAdminRoutes.tsx"],"sourcesContent":["/**\n * @license React\n * react-jsx-runtime.development.js\n *\n * Copyright (c) Meta Platforms, Inc. and affiliates.\n *\n * This source code is licensed under the MIT license found in the\n * LICENSE file in the root directory of this source tree.\n */\n\n\"use strict\";\n\"production\" !== process.env.NODE_ENV &&\n  (function () {\n    function getComponentNameFromType(type) {\n      if (null == type) return null;\n      if (\"function\" === typeof type)\n        return type.$$typeof === REACT_CLIENT_REFERENCE\n          ? null\n          : type.displayName || type.name || null;\n      if (\"string\" === typeof type) return type;\n      switch (type) {\n        case REACT_FRAGMENT_TYPE:\n          return \"Fragment\";\n        case REACT_PROFILER_TYPE:\n          return \"Profiler\";\n        case REACT_STRICT_MODE_TYPE:\n          return \"StrictMode\";\n        case REACT_SUSPENSE_TYPE:\n          return \"Suspense\";\n        case REACT_SUSPENSE_LIST_TYPE:\n          return \"SuspenseList\";\n        case REACT_ACTIVITY_TYPE:\n          return \"Activity\";\n      }\n      if (\"object\" === typeof type)\n        switch (\n          (\"number\" === typeof type.tag &&\n            console.error(\n              \"Received an unexpected object in getComponentNameFromType(). This is likely a bug in React. Please file an issue.\"\n            ),\n          type.$$typeof)\n        ) {\n          case REACT_PORTAL_TYPE:\n            return \"Portal\";\n          case REACT_CONTEXT_TYPE:\n            return type.displayName || \"Context\";\n          case REACT_CONSUMER_TYPE:\n            return (type._context.displayName || \"Context\") + \".Consumer\";\n          case REACT_FORWARD_REF_TYPE:\n            var innerType = type.render;\n            type = type.displayName;\n            type ||\n              ((type = innerType.displayName || innerType.name || \"\"),\n              (type = \"\" !== type ? \"ForwardRef(\" + type + \")\" : \"ForwardRef\"));\n            return type;\n          case REACT_MEMO_TYPE:\n            return (\n              (innerType = type.displayName || null),\n              null !== innerType\n                ? innerType\n                : getComponentNameFromType(type.type) || \"Memo\"\n            );\n          case REACT_LAZY_TYPE:\n            innerType = type._payload;\n            type = type._init;\n            try {\n              return getComponentNameFromType(type(innerType));\n            } catch (x) {}\n        }\n      return null;\n    }\n    function testStringCoercion(value) {\n      return \"\" + value;\n    }\n    function checkKeyStringCoercion(value) {\n      try {\n        testStringCoercion(value);\n        var JSCompiler_inline_result = !1;\n      } catch (e) {\n        JSCompiler_inline_result = !0;\n      }\n      if (JSCompiler_inline_result) {\n        JSCompiler_inline_result = console;\n        var JSCompiler_temp_const = JSCompiler_inline_result.error;\n        var JSCompiler_inline_result$jscomp$0 =\n          (\"function\" === typeof Symbol &&\n            Symbol.toStringTag &&\n            value[Symbol.toStringTag]) ||\n          value.constructor.name ||\n          \"Object\";\n        JSCompiler_temp_const.call(\n          JSCompiler_inline_result,\n          \"The provided key is an unsupported type %s. This value must be coerced to a string before using it here.\",\n          JSCompiler_inline_result$jscomp$0\n        );\n        return testStringCoercion(value);\n      }\n    }\n    function getTaskName(type) {\n      if (type === REACT_FRAGMENT_TYPE) return \"<>\";\n      if (\n        \"object\" === typeof type &&\n        null !== type &&\n        type.$$typeof === REACT_LAZY_TYPE\n      )\n        return \"<...>\";\n      try {\n        var name = getComponentNameFromType(type);\n        return name ? \"<\" + name + \">\" : \"<...>\";\n      } catch (x) {\n        return \"<...>\";\n      }\n    }\n    function getOwner() {\n      var dispatcher = ReactSharedInternals.A;\n      return null === dispatcher ? null : dispatcher.getOwner();\n    }\n    function UnknownOwner() {\n      return Error(\"react-stack-top-frame\");\n    }\n    function hasValidKey(config) {\n      if (hasOwnProperty.call(config, \"key\")) {\n        var getter = Object.getOwnPropertyDescriptor(config, \"key\").get;\n        if (getter && getter.isReactWarning) return !1;\n      }\n      return void 0 !== config.key;\n    }\n    function defineKeyPropWarningGetter(props, displayName) {\n      function warnAboutAccessingKey() {\n        specialPropKeyWarningShown ||\n          ((specialPropKeyWarningShown = !0),\n          console.error(\n            \"%s: `key` is not a prop. Trying to access it will result in `undefined` being returned. If you need to access the same value within the child component, you should pass it as a different prop. (https://react.dev/link/special-props)\",\n            displayName\n          ));\n      }\n      warnAboutAccessingKey.isReactWarning = !0;\n      Object.defineProperty(props, \"key\", {\n        get: warnAboutAccessingKey,\n        configurable: !0\n      });\n    }\n    function elementRefGetterWithDeprecationWarning() {\n      var componentName = getComponentNameFromType(this.type);\n      didWarnAboutElementRef[componentName] ||\n        ((didWarnAboutElementRef[componentName] = !0),\n        console.error(\n          \"Accessing element.ref was removed in React 19. ref is now a regular prop. It will be removed from the JSX Element type in a future release.\"\n        ));\n      componentName = this.props.ref;\n      return void 0 !== componentName ? componentName : null;\n    }\n    function ReactElement(type, key, props, owner, debugStack, debugTask) {\n      var refProp = props.ref;\n      type = {\n        $$typeof: REACT_ELEMENT_TYPE,\n        type: type,\n        key: key,\n        props: props,\n        _owner: owner\n      };\n      null !== (void 0 !== refProp ? refProp : null)\n        ? Object.defineProperty(type, \"ref\", {\n            enumerable: !1,\n            get: elementRefGetterWithDeprecationWarning\n          })\n        : Object.defineProperty(type, \"ref\", { enumerable: !1, value: null });\n      type._store = {};\n      Object.defineProperty(type._store, \"validated\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: 0\n      });\n      Object.defineProperty(type, \"_debugInfo\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: null\n      });\n      Object.defineProperty(type, \"_debugStack\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: debugStack\n      });\n      Object.defineProperty(type, \"_debugTask\", {\n        configurable: !1,\n        enumerable: !1,\n        writable: !0,\n        value: debugTask\n      });\n      Object.freeze && (Object.freeze(type.props), Object.freeze(type));\n      return type;\n    }\n    function jsxDEVImpl(\n      type,\n      config,\n      maybeKey,\n      isStaticChildren,\n      debugStack,\n      debugTask\n    ) {\n      var children = config.children;\n      if (void 0 !== children)\n        if (isStaticChildren)\n          if (isArrayImpl(children)) {\n            for (\n              isStaticChildren = 0;\n              isStaticChildren < children.length;\n              isStaticChildren++\n            )\n              validateChildKeys(children[isStaticChildren]);\n            Object.freeze && Object.freeze(children);\n          } else\n            console.error(\n              \"React.jsx: Static children should always be an array. You are likely explicitly calling React.jsxs or React.jsxDEV. Use the Babel transform instead.\"\n            );\n        else validateChildKeys(children);\n      if (hasOwnProperty.call(config, \"key\")) {\n        children = getComponentNameFromType(type);\n        var keys = Object.keys(config).filter(function (k) {\n          return \"key\" !== k;\n        });\n        isStaticChildren =\n          0 < keys.length\n            ? \"{key: someKey, \" + keys.join(\": ..., \") + \": ...}\"\n            : \"{key: someKey}\";\n        didWarnAboutKeySpread[children + isStaticChildren] ||\n          ((keys =\n            0 < keys.length ? \"{\" + keys.join(\": ..., \") + \": ...}\" : \"{}\"),\n          console.error(\n            'A props object containing a \"key\" prop is being spread into JSX:\\n  let props = %s;\\n  <%s {...props} />\\nReact keys must be passed directly to JSX without using spread:\\n  let props = %s;\\n  <%s key={someKey} {...props} />',\n            isStaticChildren,\n            children,\n            keys,\n            children\n          ),\n          (didWarnAboutKeySpread[children + isStaticChildren] = !0));\n      }\n      children = null;\n      void 0 !== maybeKey &&\n        (checkKeyStringCoercion(maybeKey), (children = \"\" + maybeKey));\n      hasValidKey(config) &&\n        (checkKeyStringCoercion(config.key), (children = \"\" + config.key));\n      if (\"key\" in config) {\n        maybeKey = {};\n        for (var propName in config)\n          \"key\" !== propName && (maybeKey[propName] = config[propName]);\n      } else maybeKey = config;\n      children &&\n        defineKeyPropWarningGetter(\n          maybeKey,\n          \"function\" === typeof type\n            ? type.displayName || type.name || \"Unknown\"\n            : type\n        );\n      return ReactElement(\n        type,\n        children,\n        maybeKey,\n        getOwner(),\n        debugStack,\n        debugTask\n      );\n    }\n    function validateChildKeys(node) {\n      isValidElement(node)\n        ? node._store && (node._store.validated = 1)\n        : \"object\" === typeof node &&\n          null !== node &&\n          node.$$typeof === REACT_LAZY_TYPE &&\n          (\"fulfilled\" === node._payload.status\n            ? isValidElement(node._payload.value) &&\n              node._payload.value._store &&\n              (node._payload.value._store.validated = 1)\n            : node._store && (node._store.validated = 1));\n    }\n    function isValidElement(object) {\n      return (\n        \"object\" === typeof object &&\n        null !== object &&\n        object.$$typeof === REACT_ELEMENT_TYPE\n      );\n    }\n    var React = require(\"react\"),\n      REACT_ELEMENT_TYPE = Symbol.for(\"react.transitional.element\"),\n      REACT_PORTAL_TYPE = Symbol.for(\"react.portal\"),\n      REACT_FRAGMENT_TYPE = Symbol.for(\"react.fragment\"),\n      REACT_STRICT_MODE_TYPE = Symbol.for(\"react.strict_mode\"),\n      REACT_PROFILER_TYPE = Symbol.for(\"react.profiler\"),\n      REACT_CONSUMER_TYPE = Symbol.for(\"react.consumer\"),\n      REACT_CONTEXT_TYPE = Symbol.for(\"react.context\"),\n      REACT_FORWARD_REF_TYPE = Symbol.for(\"react.forward_ref\"),\n      REACT_SUSPENSE_TYPE = Symbol.for(\"react.suspense\"),\n      REACT_SUSPENSE_LIST_TYPE = Symbol.for(\"react.suspense_list\"),\n      REACT_MEMO_TYPE = Symbol.for(\"react.memo\"),\n      REACT_LAZY_TYPE = Symbol.for(\"react.lazy\"),\n      REACT_ACTIVITY_TYPE = Symbol.for(\"react.activity\"),\n      REACT_CLIENT_REFERENCE = Symbol.for(\"react.client.reference\"),\n      ReactSharedInternals =\n        React.__CLIENT_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE,\n      hasOwnProperty = Object.prototype.hasOwnProperty,\n      isArrayImpl = Array.isArray,\n      createTask = console.createTask\n        ? console.createTask\n        : function () {\n            return null;\n          };\n    React = {\n      react_stack_bottom_frame: function (callStackForError) {\n        return callStackForError();\n      }\n    };\n    var specialPropKeyWarningShown;\n    var didWarnAboutElementRef = {};\n    var unknownOwnerDebugStack = React.react_stack_bottom_frame.bind(\n      React,\n      UnknownOwner\n    )();\n    var unknownOwnerDebugTask = createTask(getTaskName(UnknownOwner));\n    var didWarnAboutKeySpread = {};\n    exports.Fragment = REACT_FRAGMENT_TYPE;\n    exports.jsx = function (type, config, maybeKey) {\n      var trackActualOwner =\n        1e4 > ReactSharedInternals.recentlyCreatedOwnerStacks++;\n      return jsxDEVImpl(\n        type,\n        config,\n        maybeKey,\n        !1,\n        trackActualOwner\n          ? Error(\"react-stack-top-frame\")\n          : unknownOwnerDebugStack,\n        trackActualOwner ? createTask(getTaskName(type)) : unknownOwnerDebugTask\n      );\n    };\n    exports.jsxs = function (type, config, maybeKey) {\n      var trackActualOwner =\n        1e4 > ReactSharedInternals.recentlyCreatedOwnerStacks++;\n      return jsxDEVImpl(\n        type,\n        config,\n        maybeKey,\n        !0,\n        trackActualOwner\n          ? Error(\"react-stack-top-frame\")\n          : unknownOwnerDebugStack,\n        trackActualOwner ? createTask(getTaskName(type)) : unknownOwnerDebugTask\n      );\n    };\n  })();\n","'use strict';\n\nif (process.env.NODE_ENV === 'production') {\n  module.exports = require('./cjs/react-jsx-runtime.production.js');\n} else {\n  module.exports = require('./cjs/react-jsx-runtime.development.js');\n}\n","// Copyright 2025 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {Navigate} from '@tanstack/react-router';\nimport {useThunderID, ThunderIDRuntimeError} from '@thunderid/react';\nimport {FC, ReactElement, ReactNode} from 'react';\n\n/**\n * Props for the ProtectedRoute component.\n */\nexport interface ProtectedRouteProps {\n  /**\n   * The element to render when the user is authenticated.\n   */\n  children: ReactElement;\n  /**\n   * Custom fallback element to render when the user is not authenticated.\n   * If provided, this takes precedence over redirectTo.\n   */\n  fallback?: ReactElement;\n  /**\n   * Custom loading element to render while authentication status is being determined.\n   */\n  loader?: ReactNode;\n  /**\n   * URL to redirect to when the user is not authenticated.\n   * Required unless a fallback element is provided.\n   */\n  redirectTo?: string;\n}\n\n/**\n * A protected route component that requires authentication to access.\n *\n * This component should be used as the component prop of a TanStack Router route.\n * It checks authentication status and either renders the protected content,\n * shows a loading state, redirects, or shows a fallback.\n *\n * Either a `redirectTo` prop or a `fallback` prop must be provided to handle\n * unauthenticated users.\n *\n * @example Basic usage with redirect\n * ```tsx\n * const dashboardRoute = createRouteConfig({\n *   path: '/dashboard',\n *   component: () => (\n *     <ProtectedRoute redirectTo=\"/signin\">\n *       <Dashboard />\n *     </ProtectedRoute>\n *   )\n * })\n * ```\n *\n * @example With custom fallback\n * ```tsx\n * const adminRoute = createRouteConfig({\n *   path: '/admin',\n *   component: () => (\n *     <ProtectedRoute fallback={<div>Access denied</div>}>\n *       <AdminPanel />\n *     </ProtectedRoute>\n *   )\n * })\n * ```\n */\nconst ProtectedRoute: FC<ProtectedRouteProps> = ({\n  children,\n  fallback,\n  redirectTo,\n  loader = null,\n}: ProtectedRouteProps) => {\n  const {isSignedIn, isLoading} = useThunderID();\n\n  if (isLoading) {\n    return loader;\n  }\n\n  if (isSignedIn) {\n    return children;\n  }\n\n  if (fallback) {\n    return fallback;\n  }\n\n  if (redirectTo) {\n    return <Navigate to={redirectTo} />;\n  }\n\n  throw new ThunderIDRuntimeError(\n    '\"fallback\" or \"redirectTo\" prop is required.',\n    'ProtectedRoute-ValidationError-001',\n    'tanstack-router',\n    'Either \"fallback\" or \"redirectTo\" prop must be provided to handle unauthenticated users.',\n  );\n};\n\nexport default ProtectedRoute;\n","// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {useRouter, useRouterState} from '@tanstack/react-router';\nimport {Callback} from '@thunderid/react';\nimport {FC} from 'react';\n\n/**\n * Props for the CallbackRoute component.\n */\nexport interface CallbackRouteProps {\n  /**\n   * Callback function called when an error occurs during OAuth processing.\n   * @param error - The error that occurred\n   */\n  onError?: (error: Error) => void;\n\n  /**\n   * Optional custom navigation handler.\n   * If provided, this will be called instead of the default navigate() behavior.\n   * Useful for apps that need custom navigation logic.\n   * @param path - The path to navigate to\n   */\n  onNavigate?: (path: string) => void;\n}\n\n/**\n * Handles OAuth callback redirects for TanStack Router applications.\n * Processes authorization code, validates CSRF state, and navigates back to the original path.\n * Automatically handles TanStack Router basepath when configured.\n *\n * @example\n * ```tsx\n * const callbackRoute = createRoute({\n *   getParentRoute: () => rootRoute,\n *   path: '/callback',\n *   component: CallbackRoute,\n * });\n * ```\n */\nconst CallbackRoute: FC<CallbackRouteProps> = ({onError, onNavigate}: CallbackRouteProps) => {\n  const router: ReturnType<typeof useRouter> = useRouter();\n  const routerState: ReturnType<typeof useRouterState> = useRouterState();\n  const {pathname}: {pathname: string} = routerState.location;\n\n  const handleNavigate = (path: string): void => {\n    if (onNavigate) {\n      onNavigate(path);\n      return;\n    }\n\n    const fullPath: string = window.location.pathname;\n    const basename: string = fullPath.endsWith(pathname) ? fullPath.slice(0, -pathname.length).replace(/\\/$/, '') : '';\n\n    const navigationPath: string = basename && path.startsWith(basename) ? path.slice(basename.length) || '/' : path;\n\n    router.navigate({to: navigationPath}).catch(() => {});\n  };\n\n  return (\n    <Callback\n      onNavigate={handleNavigate}\n      onError={\n        onError ||\n        ((error: Error): void => {\n          // eslint-disable-next-line no-console\n          console.error('OAuth callback error:', error);\n        })\n      }\n    />\n  );\n};\n\nexport default CallbackRoute;\n","// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {useNavigate, useParams} from '@tanstack/react-router';\nimport {\n  AgentCreate,\n  AgentDetails,\n  AgentList,\n  Button,\n  GroupCreate,\n  GroupList,\n  GroupMembers,\n  RoleAssignments,\n  RoleCreate,\n  RoleList,\n  RolePermissions,\n  UserCreate,\n  UserDetails,\n  UserList,\n  useTranslation,\n} from '@thunderid/react';\nimport {FC, ReactElement, ReactNode} from 'react';\nimport type {AdminRoutesOptions, AdminSection} from './createAdminRoutes';\n\nexport type AdminPageKind = 'create' | 'details' | 'list';\n\n/**\n * Navigation between the pages of one section.\n */\ninterface AdminNavigation {\n  createAction: ReactNode;\n  toDetails: (id: string) => void;\n  toList: () => void;\n}\n\ninterface AdminPageContext extends AdminNavigation {\n  id: string;\n  options: AdminRoutesOptions;\n}\n\ntype AdminPageRenderer = (context: AdminPageContext) => ReactElement;\n\nconst SECTION_PAGES: Record<AdminSection, Record<AdminPageKind, AdminPageRenderer>> = {\n  agents: {\n    create: ({options, toDetails}: AdminPageContext) => (\n      <AgentCreate preferences={options.preferences} onCreated={(agent: {id: string}) => toDetails(agent.id)} />\n    ),\n    details: ({id, options, toList}: AdminPageContext) => (\n      <AgentDetails agentId={id} deletable={options.deletable} preferences={options.preferences} onDeleted={toList} />\n    ),\n    list: ({createAction, options, toDetails}: AdminPageContext) => (\n      <AgentList\n        actions={createAction}\n        preferences={options.preferences}\n        onSelect={(agent: {id: string}) => toDetails(agent.id)}\n      />\n    ),\n  },\n  groups: {\n    create: ({options, toDetails}: AdminPageContext) => (\n      <GroupCreate preferences={options.preferences} onCreated={(group: {id: string}) => toDetails(group.id)} />\n    ),\n    details: ({id, options}: AdminPageContext) => (\n      <GroupMembers groupId={id} editable={options.editable} preferences={options.preferences} />\n    ),\n    list: ({createAction, options, toDetails}: AdminPageContext) => (\n      <GroupList\n        actions={createAction}\n        preferences={options.preferences}\n        onSelect={(group: {id: string}) => toDetails(group.id)}\n      />\n    ),\n  },\n  roles: {\n    create: ({options, toDetails}: AdminPageContext) => (\n      <RoleCreate preferences={options.preferences} onCreated={(role: {id: string}) => toDetails(role.id)} />\n    ),\n    details: ({id, options}: AdminPageContext) => (\n      <>\n        <RolePermissions roleId={id} preferences={options.preferences} />\n        <RoleAssignments roleId={id} editable={options.editable} preferences={options.preferences} />\n      </>\n    ),\n    list: ({createAction, options, toDetails}: AdminPageContext) => (\n      <RoleList\n        actions={createAction}\n        preferences={options.preferences}\n        onSelect={(role: {id: string}) => toDetails(role.id)}\n      />\n    ),\n  },\n  users: {\n    create: ({options, toDetails}: AdminPageContext) => (\n      <UserCreate preferences={options.preferences} onCreated={(user: {id: string}) => toDetails(user.id)} />\n    ),\n    details: ({id, options, toList}: AdminPageContext) => (\n      <UserDetails\n        userId={id}\n        deletable={options.deletable}\n        editable={options.editable}\n        preferences={options.preferences}\n        onDeleted={toList}\n      />\n    ),\n    list: ({createAction, options, toDetails}: AdminPageContext) => (\n      <UserList\n        actions={createAction}\n        preferences={options.preferences}\n        onSelect={(user: {id: string}) => toDetails(user.id)}\n      />\n    ),\n  },\n};\n\ninterface AdminPageProps {\n  /**\n   * Returns the full path of the section route. Read at render time, once the router has resolved it.\n   */\n  getSectionPath: () => string;\n  kind: AdminPageKind;\n  options: AdminRoutesOptions;\n  section: AdminSection;\n}\n\n/**\n * Renders one admin page and wires its callbacks to navigation within its section.\n */\nconst AdminPage: FC<AdminPageProps> = ({getSectionPath, kind, options, section}: AdminPageProps): ReactElement => {\n  const navigate: ReturnType<typeof useNavigate> = useNavigate();\n  const id: string = useParams({\n    select: (params: {id?: string}): string => params.id ?? '',\n    strict: false,\n  });\n  const {t} = useTranslation(options.preferences?.i18n);\n  const sectionPath: string = getSectionPath().replace(/\\/+$/, '');\n\n  const toList = (): void => {\n    void navigate({to: sectionPath});\n  };\n  // The identifier goes through `params`, so the router encodes it.\n  const toDetails = (resourceId: string): void => {\n    void navigate({params: {id: resourceId}, to: `${sectionPath}/$id`});\n  };\n\n  const createAction: ReactNode =\n    kind === 'list' ? (\n      <Button onClick={(): void => void navigate({to: `${sectionPath}/new`})}>\n        {t(`admin.${section}.create.title`)}\n      </Button>\n    ) : null;\n\n  return SECTION_PAGES[section][kind]({createAction, id, options, toDetails, toList});\n};\n\nexport default AdminPage;\n","// Copyright 2026 The ThunderID Authors\n// SPDX-License-Identifier: Apache-2.0\n\nimport {AnyRoute, createRoute} from '@tanstack/react-router';\nimport type {UserListProps} from '@thunderid/react';\nimport {ReactElement} from 'react';\nimport AdminPage, {AdminPageKind} from './AdminPage';\nimport ProtectedRoute, {ProtectedRouteProps} from '../components/ProtectedRoute';\n\n/**\n * An admin section that {@link createAdminRoutes} can mount.\n */\nexport type AdminSection = 'agents' | 'groups' | 'roles' | 'users';\n\n/**\n * Options for {@link createAdminRoutes}.\n */\nexport interface AdminRoutesOptions {\n  /**\n   * Shows the delete action on the user and agent details pages.\n   * @default false\n   */\n  deletable?: boolean;\n  /**\n   * Allows editing on the details pages: user attributes, group members and role assignments. When\n   * unset, each component keeps its own default.\n   */\n  editable?: boolean;\n  /**\n   * Passed to every admin component.\n   */\n  preferences?: UserListProps['preferences'];\n  /**\n   * Wraps every admin page in {@link ProtectedRoute} with these props. The management API still\n   * checks every request, so this only decides what an unauthenticated visitor sees.\n   */\n  protect?: Omit<ProtectedRouteProps, 'children'>;\n  /**\n   * The sections to mount.\n   * @default ['users', 'groups', 'roles', 'agents']\n   */\n  sections?: AdminSection[];\n}\n\nconst DEFAULT_SECTIONS: AdminSection[] = ['users', 'groups', 'roles', 'agents'];\n\n/**\n * Builds TanStack Router routes that mount the admin (management) sections of `@thunderid/react`\n * under `parentRoute`: for each section a list at `<section>`, a create form at `<section>/new`, and\n * a details page at `<section>/$id`. Selecting, creating and deleting navigate between them.\n *\n * The routes are built with `createRoute`, so they carry no route-tree types of their own; navigate\n * to them with string paths.\n *\n * @param parentRoute - The route to mount the sections under, such as the root route or an `/admin` route.\n * @param options - Which sections to mount and how to render them.\n * @returns One route per section, each with its pages as children, for `parentRoute.addChildren`.\n *\n * @example\n * ```tsx\n * const adminRoute = createRoute({getParentRoute: () => rootRoute, path: '/admin'});\n *\n * const routeTree = rootRoute.addChildren([\n *   indexRoute,\n *   adminRoute.addChildren(createAdminRoutes(adminRoute, {protect: {redirectTo: '/signin'}})),\n * ]);\n * ```\n */\nconst createAdminRoutes = (parentRoute: AnyRoute, options: AdminRoutesOptions = {}): AnyRoute[] => {\n  const {protect, sections = DEFAULT_SECTIONS} = options;\n\n  return sections.map((section: AdminSection): AnyRoute => {\n    const sectionRoute: AnyRoute = createRoute({getParentRoute: () => parentRoute, path: section});\n\n    const page = (kind: AdminPageKind): (() => ReactElement) => {\n      const Page = (): ReactElement => {\n        const element: ReactElement = (\n          <AdminPage\n            getSectionPath={(): string => sectionRoute.fullPath as string}\n            kind={kind}\n            options={options}\n            section={section}\n          />\n        );\n\n        return protect ? <ProtectedRoute {...protect}>{element}</ProtectedRoute> : element;\n      };\n\n      Page.displayName = `Admin(${section}/${kind})`;\n\n      return Page;\n    };\n\n    return sectionRoute.addChildren([\n      createRoute({component: page('list'), getParentRoute: () => sectionRoute, path: '/'}),\n      createRoute({component: page('create'), getParentRoute: () => sectionRoute, path: 'new'}),\n      createRoute({component: page('details'), getParentRoute: () => sectionRoute, path: '$id'}),\n    ]) as AnyRoute;\n  });\n};\n\nexport default createAdminRoutes;\n"],"x_google_ignoreList":[0,1],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,EACG,WAAY;EACX,SAAS,yBAAyB,MAAM;AACtC,OAAI,QAAQ,KAAM,QAAO;AACzB,OAAI,eAAe,OAAO,KACxB,QAAO,KAAK,aAAa,yBACrB,OACA,KAAK,eAAe,KAAK,QAAQ;AACvC,OAAI,aAAa,OAAO,KAAM,QAAO;AACrC,WAAQ,MAAR;IACE,KAAK,oBACH,QAAO;IACT,KAAK,oBACH,QAAO;IACT,KAAK,uBACH,QAAO;IACT,KAAK,oBACH,QAAO;IACT,KAAK,yBACH,QAAO;IACT,KAAK,oBACH,QAAO;;AAEX,OAAI,aAAa,OAAO,KACtB,SACG,aAAa,OAAO,KAAK,OACxB,QAAQ,MACN,oHACD,EACH,KAAK,UALP;IAOE,KAAK,kBACH,QAAO;IACT,KAAK,mBACH,QAAO,KAAK,eAAe;IAC7B,KAAK,oBACH,SAAQ,KAAK,SAAS,eAAe,aAAa;IACpD,KAAK;KACH,IAAI,YAAY,KAAK;AACrB,YAAO,KAAK;AACZ,cACI,OAAO,UAAU,eAAe,UAAU,QAAQ,IACnD,OAAO,OAAO,OAAO,gBAAgB,OAAO,MAAM;AACrD,YAAO;IACT,KAAK,gBACH,QACG,YAAY,KAAK,eAAe,MACjC,SAAS,YACL,YACA,yBAAyB,KAAK,KAAK,IAAI;IAE/C,KAAK;AACH,iBAAY,KAAK;AACjB,YAAO,KAAK;AACZ,SAAI;AACF,aAAO,yBAAyB,KAAK,UAAU,CAAC;cACzC,GAAG;;AAElB,UAAO;;EAET,SAAS,mBAAmB,OAAO;AACjC,UAAO,KAAK;;EAEd,SAAS,uBAAuB,OAAO;AACrC,OAAI;AACF,uBAAmB,MAAM;IACzB,IAAI,2BAA2B,CAAC;YACzB,GAAG;AACV,+BAA2B,CAAC;;AAE9B,OAAI,0BAA0B;AAC5B,+BAA2B;IAC3B,IAAI,wBAAwB,yBAAyB;IACrD,IAAI,oCACD,eAAe,OAAO,UACrB,OAAO,eACP,MAAM,OAAO,gBACf,MAAM,YAAY,QAClB;AACF,0BAAsB,KACpB,0BACA,4GACA,kCACD;AACD,WAAO,mBAAmB,MAAM;;;EAGpC,SAAS,YAAY,MAAM;AACzB,OAAI,SAAS,oBAAqB,QAAO;AACzC,OACE,aAAa,OAAO,QACpB,SAAS,QACT,KAAK,aAAa,gBAElB,QAAO;AACT,OAAI;IACF,IAAI,OAAO,yBAAyB,KAAK;AACzC,WAAO,OAAO,MAAM,OAAO,MAAM;YAC1B,GAAG;AACV,WAAO;;;EAGX,SAAS,WAAW;GAClB,IAAI,aAAa,qBAAqB;AACtC,UAAO,SAAS,aAAa,OAAO,WAAW,UAAU;;EAE3D,SAAS,eAAe;AACtB,UAAO,MAAM,wBAAwB;;EAEvC,SAAS,YAAY,QAAQ;AAC3B,OAAI,eAAe,KAAK,QAAQ,MAAM,EAAE;IACtC,IAAI,SAAS,OAAO,yBAAyB,QAAQ,MAAM,CAAC;AAC5D,QAAI,UAAU,OAAO,eAAgB,QAAO,CAAC;;AAE/C,UAAO,KAAK,MAAM,OAAO;;EAE3B,SAAS,2BAA2B,OAAO,aAAa;GACtD,SAAS,wBAAwB;AAC/B,mCACI,6BAA6B,CAAC,GAChC,QAAQ,MACN,2OACA,YACD;;AAEL,yBAAsB,iBAAiB,CAAC;AACxC,UAAO,eAAe,OAAO,OAAO;IAClC,KAAK;IACL,cAAc,CAAC;IAChB,CAAC;;EAEJ,SAAS,yCAAyC;GAChD,IAAI,gBAAgB,yBAAyB,KAAK,KAAK;AACvD,0BAAuB,mBACnB,uBAAuB,iBAAiB,CAAC,GAC3C,QAAQ,MACN,8IACD;AACH,mBAAgB,KAAK,MAAM;AAC3B,UAAO,KAAK,MAAM,gBAAgB,gBAAgB;;EAEpD,SAAS,aAAa,MAAM,KAAK,OAAO,OAAO,YAAY,WAAW;GACpE,IAAI,UAAU,MAAM;AACpB,UAAO;IACL,UAAU;IACJ;IACD;IACE;IACP,QAAQ;IACT;AACD,aAAU,KAAK,MAAM,UAAU,UAAU,QACrC,OAAO,eAAe,MAAM,OAAO;IACjC,YAAY,CAAC;IACb,KAAK;IACN,CAAC,GACF,OAAO,eAAe,MAAM,OAAO;IAAE,YAAY,CAAC;IAAG,OAAO;IAAM,CAAC;AACvE,QAAK,SAAS,EAAE;AAChB,UAAO,eAAe,KAAK,QAAQ,aAAa;IAC9C,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,eAAe,MAAM,cAAc;IACxC,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,eAAe,MAAM,eAAe;IACzC,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,eAAe,MAAM,cAAc;IACxC,cAAc,CAAC;IACf,YAAY,CAAC;IACb,UAAU,CAAC;IACX,OAAO;IACR,CAAC;AACF,UAAO,WAAW,OAAO,OAAO,KAAK,MAAM,EAAE,OAAO,OAAO,KAAK;AAChE,UAAO;;EAET,SAAS,WACP,MACA,QACA,UACA,kBACA,YACA,WACA;GACA,IAAI,WAAW,OAAO;AACtB,OAAI,KAAK,MAAM,SACb,KAAI,iBACF,KAAI,YAAY,SAAS,EAAE;AACzB,SACE,mBAAmB,GACnB,mBAAmB,SAAS,QAC5B,mBAEA,mBAAkB,SAAS,kBAAkB;AAC/C,WAAO,UAAU,OAAO,OAAO,SAAS;SAExC,SAAQ,MACN,uJACD;OACA,mBAAkB,SAAS;AAClC,OAAI,eAAe,KAAK,QAAQ,MAAM,EAAE;AACtC,eAAW,yBAAyB,KAAK;IACzC,IAAI,OAAO,OAAO,KAAK,OAAO,CAAC,OAAO,SAAU,GAAG;AACjD,YAAO,UAAU;MACjB;AACF,uBACE,IAAI,KAAK,SACL,oBAAoB,KAAK,KAAK,UAAU,GAAG,WAC3C;AACN,0BAAsB,WAAW,sBAC7B,OACA,IAAI,KAAK,SAAS,MAAM,KAAK,KAAK,UAAU,GAAG,WAAW,MAC5D,QAAQ,MACN,qOACA,kBACA,UACA,MACA,SACD,EACA,sBAAsB,WAAW,oBAAoB,CAAC;;AAE3D,cAAW;AACX,QAAK,MAAM,aACR,uBAAuB,SAAS,EAAG,WAAW,KAAK;AACtD,eAAY,OAAO,KAChB,uBAAuB,OAAO,IAAI,EAAG,WAAW,KAAK,OAAO;AAC/D,OAAI,SAAS,QAAQ;AACnB,eAAW,EAAE;AACb,SAAK,IAAI,YAAY,OACnB,WAAU,aAAa,SAAS,YAAY,OAAO;SAChD,YAAW;AAClB,eACE,2BACE,UACA,eAAe,OAAO,OAClB,KAAK,eAAe,KAAK,QAAQ,YACjC,KACL;AACH,UAAO,aACL,MACA,UACA,UACA,UAAU,EACV,YACA,UACD;;EAEH,SAAS,kBAAkB,MAAM;AAC/B,kBAAe,KAAK,GAChB,KAAK,WAAW,KAAK,OAAO,YAAY,KACxC,aAAa,OAAO,QACpB,SAAS,QACT,KAAK,aAAa,oBACjB,gBAAgB,KAAK,SAAS,SAC3B,eAAe,KAAK,SAAS,MAAM,IACnC,KAAK,SAAS,MAAM,WACnB,KAAK,SAAS,MAAM,OAAO,YAAY,KACxC,KAAK,WAAW,KAAK,OAAO,YAAY;;EAElD,SAAS,eAAe,QAAQ;AAC9B,UACE,aAAa,OAAO,UACpB,SAAS,UACT,OAAO,aAAa;;EAGxB,IAAI,kBAAgB,QAAQ,EAC1B,qBAAqB,OAAO,IAAI,6BAA6B,EAC7D,oBAAoB,OAAO,IAAI,eAAe,EAC9C,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,yBAAyB,OAAO,IAAI,oBAAoB,EACxD,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,qBAAqB,OAAO,IAAI,gBAAgB,EAChD,yBAAyB,OAAO,IAAI,oBAAoB,EACxD,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,2BAA2B,OAAO,IAAI,sBAAsB,EAC5D,kBAAkB,OAAO,IAAI,aAAa,EAC1C,kBAAkB,OAAO,IAAI,aAAa,EAC1C,sBAAsB,OAAO,IAAI,iBAAiB,EAClD,yBAAyB,OAAO,IAAI,yBAAyB,EAC7D,uBACE,MAAM,iEACR,iBAAiB,OAAO,UAAU,gBAClC,cAAc,MAAM,SACpB,aAAa,QAAQ,aACjB,QAAQ,aACR,WAAY;AACV,UAAO;;AAEf,UAAQ,EACN,0BAA0B,SAAU,mBAAmB;AACrD,UAAO,mBAAmB;KAE7B;EACD,IAAI;EACJ,IAAI,yBAAyB,EAAE;EAC/B,IAAI,yBAAyB,MAAM,yBAAyB,KAC1D,OACA,aACD,EAAE;EACH,IAAI,wBAAwB,WAAW,YAAY,aAAa,CAAC;EACjE,IAAI,wBAAwB,EAAE;AAC9B,UAAQ,WAAW;AACnB,UAAQ,MAAM,SAAU,MAAM,QAAQ,UAAU;GAC9C,IAAI,mBACF,MAAM,qBAAqB;AAC7B,UAAO,WACL,MACA,QACA,UACA,CAAC,GACD,mBACI,MAAM,wBAAwB,GAC9B,wBACJ,mBAAmB,WAAW,YAAY,KAAK,CAAC,GAAG,sBACpD;;AAEH,UAAQ,OAAO,SAAU,MAAM,QAAQ,UAAU;GAC/C,IAAI,mBACF,MAAM,qBAAqB;AAC7B,UAAO,WACL,MACA,QACA,UACA,CAAC,GACD,mBACI,MAAM,wBAAwB,GAC9B,wBACJ,mBAAmB,WAAW,YAAY,KAAK,CAAC,GAAG,sBACpD;;KAED;;;;;;AC1VJ,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC4DT,MAAMA,kBAA2C,EAC/C,UACA,UACA,YACA,SAAS,WACgB;CACzB,MAAM,EAAC,YAAY,cAAa,cAAc;AAE9C,KAAI,UACF,QAAO;AAGT,KAAI,WACF,QAAO;AAGT,KAAI,SACF,QAAO;AAGT,KAAI,WACF,QAAO,4CAAC,YAAS,IAAI,aAAc;AAGrC,OAAM,IAAI,sBACR,oDACA,sCACA,mBACA,+FACD;;AAGH,6BAAe;;;;;;;;;;;;;;;;;;ACzDf,MAAMC,iBAAyC,EAAC,SAAS,iBAAoC;CAC3F,MAAMC,SAAuC,WAAW;CAExD,MAAM,EAAC,aADgD,gBAAgB,CACpB;CAEnD,MAAM,kBAAkB,SAAuB;AAC7C,MAAI,YAAY;AACd,cAAW,KAAK;AAChB;;EAGF,MAAMC,WAAmB,OAAO,SAAS;EACzC,MAAMC,WAAmB,SAAS,SAAS,SAAS,GAAG,SAAS,MAAM,GAAG,CAAC,SAAS,OAAO,CAAC,QAAQ,OAAO,GAAG,GAAG;EAEhH,MAAMC,iBAAyB,YAAY,KAAK,WAAW,SAAS,GAAG,KAAK,MAAM,SAAS,OAAO,IAAI,MAAM;AAE5G,SAAO,SAAS,EAAC,IAAI,gBAAe,CAAC,CAAC,YAAY,GAAG;;AAGvD,QACE,4CAAC;EACC,YAAY;EACZ,SACE,aACE,UAAuB;AAEvB,WAAQ,MAAM,yBAAyB,MAAM;;GAGjD;;AAIN,4BAAe;;;;AC/Bf,MAAMC,gBAAgF;CACpF,QAAQ;EACN,SAAS,EAAC,SAAS,gBACjB,4CAAC;GAAY,aAAa,QAAQ;GAAa,YAAY,UAAwB,UAAU,MAAM,GAAG;IAAI;EAE5G,UAAU,EAAC,IAAI,SAAS,aACtB,4CAAC;GAAa,SAAS;GAAI,WAAW,QAAQ;GAAW,aAAa,QAAQ;GAAa,WAAW;IAAU;EAElH,OAAO,EAAC,cAAc,SAAS,gBAC7B,4CAAC;GACC,SAAS;GACT,aAAa,QAAQ;GACrB,WAAW,UAAwB,UAAU,MAAM,GAAG;IACtD;EAEL;CACD,QAAQ;EACN,SAAS,EAAC,SAAS,gBACjB,4CAAC;GAAY,aAAa,QAAQ;GAAa,YAAY,UAAwB,UAAU,MAAM,GAAG;IAAI;EAE5G,UAAU,EAAC,IAAI,cACb,4CAAC;GAAa,SAAS;GAAI,UAAU,QAAQ;GAAU,aAAa,QAAQ;IAAe;EAE7F,OAAO,EAAC,cAAc,SAAS,gBAC7B,4CAAC;GACC,SAAS;GACT,aAAa,QAAQ;GACrB,WAAW,UAAwB,UAAU,MAAM,GAAG;IACtD;EAEL;CACD,OAAO;EACL,SAAS,EAAC,SAAS,gBACjB,4CAAC;GAAW,aAAa,QAAQ;GAAa,YAAY,SAAuB,UAAU,KAAK,GAAG;IAAI;EAEzG,UAAU,EAAC,IAAI,cACb,uFACE,4CAAC;GAAgB,QAAQ;GAAI,aAAa,QAAQ;IAAe,EACjE,4CAAC;GAAgB,QAAQ;GAAI,UAAU,QAAQ;GAAU,aAAa,QAAQ;IAAe,IAC5F;EAEL,OAAO,EAAC,cAAc,SAAS,gBAC7B,4CAAC;GACC,SAAS;GACT,aAAa,QAAQ;GACrB,WAAW,SAAuB,UAAU,KAAK,GAAG;IACpD;EAEL;CACD,OAAO;EACL,SAAS,EAAC,SAAS,gBACjB,4CAAC;GAAW,aAAa,QAAQ;GAAa,YAAY,SAAuB,UAAU,KAAK,GAAG;IAAI;EAEzG,UAAU,EAAC,IAAI,SAAS,aACtB,4CAAC;GACC,QAAQ;GACR,WAAW,QAAQ;GACnB,UAAU,QAAQ;GAClB,aAAa,QAAQ;GACrB,WAAW;IACX;EAEJ,OAAO,EAAC,cAAc,SAAS,gBAC7B,4CAAC;GACC,SAAS;GACT,aAAa,QAAQ;GACrB,WAAW,SAAuB,UAAU,KAAK,GAAG;IACpD;EAEL;CACF;;;;AAeD,MAAMC,aAAiC,EAAC,gBAAgB,MAAM,SAAS,cAA2C;CAChH,MAAMC,WAA2C,aAAa;CAC9D,MAAMC,KAAa,UAAU;EAC3B,SAAS,WAAkC,OAAO,MAAM;EACxD,QAAQ;EACT,CAAC;CACF,MAAM,EAAC,MAAK,eAAe,QAAQ,aAAa,KAAK;CACrD,MAAMC,cAAsB,gBAAgB,CAAC,QAAQ,QAAQ,GAAG;CAEhE,MAAM,eAAqB;AACzB,EAAK,SAAS,EAAC,IAAI,aAAY,CAAC;;CAGlC,MAAM,aAAa,eAA6B;AAC9C,EAAK,SAAS;GAAC,QAAQ,EAAC,IAAI,YAAW;GAAE,IAAI,GAAG,YAAY;GAAM,CAAC;;CAGrE,MAAMC,eACJ,SAAS,SACP,4CAAC;EAAO,eAAqB,KAAK,SAAS,EAAC,IAAI,GAAG,YAAY,OAAM,CAAC;YACnE,EAAE,SAAS,QAAQ,eAAe;GAC5B,GACP;AAEN,QAAO,cAAc,SAAS,MAAM;EAAC;EAAc;EAAI;EAAS;EAAW;EAAO,CAAC;;AAGrF,wBAAe;;;;AC9Gf,MAAMC,mBAAmC;CAAC;CAAS;CAAU;CAAS;CAAS;;;;;;;;;;;;;;;;;;;;;;;AAwB/E,MAAM,qBAAqB,aAAuB,UAA8B,EAAE,KAAiB;CACjG,MAAM,EAAC,SAAS,WAAW,qBAAoB;AAE/C,QAAO,SAAS,KAAK,YAAoC;EACvD,MAAMC,eAAyB,YAAY;GAAC,sBAAsB;GAAa,MAAM;GAAQ,CAAC;EAE9F,MAAM,QAAQ,SAA8C;GAC1D,MAAM,aAA2B;IAC/B,MAAMC,UACJ,4CAACC;KACC,sBAA8B,aAAa;KACrC;KACG;KACA;MACT;AAGJ,WAAO,UAAU,4CAACC;KAAe,GAAI;eAAU;MAAyB,GAAG;;AAG7E,QAAK,cAAc,SAAS,QAAQ,GAAG,KAAK;AAE5C,UAAO;;AAGT,SAAO,aAAa,YAAY;GAC9B,YAAY;IAAC,WAAW,KAAK,OAAO;IAAE,sBAAsB;IAAc,MAAM;IAAI,CAAC;GACrF,YAAY;IAAC,WAAW,KAAK,SAAS;IAAE,sBAAsB;IAAc,MAAM;IAAM,CAAC;GACzF,YAAY;IAAC,WAAW,KAAK,UAAU;IAAE,sBAAsB;IAAc,MAAM;IAAM,CAAC;GAC3F,CAAC;GACF;;AAGJ,gCAAe"}

package/dist/routes/AdminPage.d.ts

@@ -0,0 +1,18 @@
+import { FC } from 'react';
+import type { AdminRoutesOptions, AdminSection } from './createAdminRoutes';
+export type AdminPageKind = 'create' | 'details' | 'list';
+interface AdminPageProps {
+    /**
+     * Returns the full path of the section route. Read at render time, once the router has resolved it.
+     */
+    getSectionPath: () => string;
+    kind: AdminPageKind;
+    options: AdminRoutesOptions;
+    section: AdminSection;
+}
+/**
+ * Renders one admin page and wires its callbacks to navigation within its section.
+ */
+declare const AdminPage: FC<AdminPageProps>;
+export default AdminPage;
+//# sourceMappingURL=AdminPage.d.ts.map

package/dist/routes/AdminPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AdminPage.d.ts","sourceRoot":"","sources":["../../src/routes/AdminPage.tsx"],"names":[],"mappings":"AAqBA,OAAO,EAAC,EAAE,EAA0B,MAAM,OAAO,CAAC;AAClD,OAAO,KAAK,EAAC,kBAAkB,EAAE,YAAY,EAAC,MAAM,qBAAqB,CAAC;AAE1E,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;AA0F1D,UAAU,cAAc;IACtB;;OAEG;IACH,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,OAAO,EAAE,YAAY,CAAC;CACvB;AAED;;GAEG;AACH,QAAA,MAAM,SAAS,EAAE,EAAE,CAAC,cAAc,CAyBjC,CAAC;AAEF,eAAe,SAAS,CAAC"}

package/dist/routes/createAdminRoutes.d.ts

@@ -0,0 +1,61 @@
+import { AnyRoute } from '@tanstack/react-router';
+import type { UserListProps } from '@thunderid/react';
+import { ProtectedRouteProps } from '../components/ProtectedRoute';
+/**
+ * An admin section that {@link createAdminRoutes} can mount.
+ */
+export type AdminSection = 'agents' | 'groups' | 'roles' | 'users';
+/**
+ * Options for {@link createAdminRoutes}.
+ */
+export interface AdminRoutesOptions {
+    /**
+     * Shows the delete action on the user and agent details pages.
+     * @default false
+     */
+    deletable?: boolean;
+    /**
+     * Allows editing on the details pages: user attributes, group members and role assignments. When
+     * unset, each component keeps its own default.
+     */
+    editable?: boolean;
+    /**
+     * Passed to every admin component.
+     */
+    preferences?: UserListProps['preferences'];
+    /**
+     * Wraps every admin page in {@link ProtectedRoute} with these props. The management API still
+     * checks every request, so this only decides what an unauthenticated visitor sees.
+     */
+    protect?: Omit<ProtectedRouteProps, 'children'>;
+    /**
+     * The sections to mount.
+     * @default ['users', 'groups', 'roles', 'agents']
+     */
+    sections?: AdminSection[];
+}
+/**
+ * Builds TanStack Router routes that mount the admin (management) sections of `@thunderid/react`
+ * under `parentRoute`: for each section a list at `<section>`, a create form at `<section>/new`, and
+ * a details page at `<section>/$id`. Selecting, creating and deleting navigate between them.
+ *
+ * The routes are built with `createRoute`, so they carry no route-tree types of their own; navigate
+ * to them with string paths.
+ *
+ * @param parentRoute - The route to mount the sections under, such as the root route or an `/admin` route.
+ * @param options - Which sections to mount and how to render them.
+ * @returns One route per section, each with its pages as children, for `parentRoute.addChildren`.
+ *
+ * @example
+ * ```tsx
+ * const adminRoute = createRoute({getParentRoute: () => rootRoute, path: '/admin'});
+ *
+ * const routeTree = rootRoute.addChildren([
+ *   indexRoute,
+ *   adminRoute.addChildren(createAdminRoutes(adminRoute, {protect: {redirectTo: '/signin'}})),
+ * ]);
+ * ```
+ */
+declare const createAdminRoutes: (parentRoute: AnyRoute, options?: AdminRoutesOptions) => AnyRoute[];
+export default createAdminRoutes;
+//# sourceMappingURL=createAdminRoutes.d.ts.map

package/dist/routes/createAdminRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createAdminRoutes.d.ts","sourceRoot":"","sources":["../../src/routes/createAdminRoutes.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAC,QAAQ,EAAc,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,kBAAkB,CAAC;AAGpD,OAAuB,EAAC,mBAAmB,EAAC,MAAM,8BAA8B,CAAC;AAEjF;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,WAAW,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IAC3C;;;OAGG;IACH,OAAO,CAAC,EAAE,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;IAChD;;;OAGG;IACH,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;CAC3B;AAID;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,QAAA,MAAM,iBAAiB,GAAI,aAAa,QAAQ,EAAE,UAAS,kBAAuB,KAAG,QAAQ,EA+B5F,CAAC;AAEF,eAAe,iBAAiB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thunderid/tanstack-router",
-  "version": "1.3.1",
+  "version": "1.5.0",
   "description": "TanStack Router integration for ThunderID",
   "keywords": [
     "thunderid",
@@ -37,7 +37,7 @@
     "@testing-library/react": "16.3.0",
     "@thunderid/eslint-plugin": "1.0.1",
     "@thunderid/prettier-config": "1.0.1",
-    "@thunderid/react": "^1.4.1",
+    "@thunderid/react": "^1.6.0",
     "@types/node": "24.7.2",
     "@types/react": "19.2.14",
     "@vitest/browser-playwright": "4.1.11",