@authhero/adapter-interfaces 0.108.0 → 0.110.0

package/dist/adapter-interfaces.mjs

@@ -1,5 +1,61 @@
 import { z as e } from "@hono/zod-openapi";
-const rt = e.object({
+const i = e.object({
+  created_at: e.string(),
+  updated_at: e.string()
+}), pt = e.enum(["AUTH0", "EMAIL"]), dt = e.enum([
+  "CREATE_USER",
+  "GET_USER",
+  "UPDATE_USER",
+  "SEND_REQUEST",
+  "SEND_EMAIL"
+]), gt = e.enum(["VERIFY_EMAIL"]), U = e.object({
+  require_mx_record: e.boolean().optional(),
+  block_aliases: e.boolean().optional(),
+  block_free_emails: e.boolean().optional(),
+  block_disposable_emails: e.boolean().optional(),
+  blocklist: e.array(e.string()).optional(),
+  allowlist: e.array(e.string()).optional()
+}), F = e.object({
+  id: e.string(),
+  alias: e.string().max(100).optional(),
+  type: e.literal("AUTH0"),
+  action: e.literal("UPDATE_USER"),
+  allow_failure: e.boolean().optional(),
+  mask_output: e.boolean().optional(),
+  params: e.object({
+    connection_id: e.string().optional(),
+    user_id: e.string(),
+    changes: e.record(e.string(), e.any())
+  })
+}), v = e.object({
+  id: e.string(),
+  alias: e.string().max(100).optional(),
+  type: e.literal("EMAIL"),
+  action: e.literal("VERIFY_EMAIL"),
+  allow_failure: e.boolean().optional(),
+  mask_output: e.boolean().optional(),
+  params: e.object({
+    email: e.string(),
+    rules: U.optional()
+  })
+}), x = e.union([
+  F,
+  v
+]), P = e.object({
+  name: e.string().min(1).max(150).openapi({
+    description: "The name of the flow"
+  }),
+  // Actions is an array of action steps (Auth0 stores as JSON blob)
+  actions: e.array(x).optional().default([]).openapi({
+    description: "The list of actions to execute in sequence"
+  })
+}), ut = P.extend({
+  ...i.shape,
+  id: e.string().openapi({
+    description: "Unique identifier for the flow",
+    example: "af_12tMpdJ3iek7svMyZkSh5M"
+  })
+}), mt = e.object({
   page: e.string().min(0).optional().default("0").transform((t) => parseInt(t, 10)).openapi({
     description: "The page number where 0 is the first page"
   }),
@@ -15,14 +71,11 @@ const rt = e.object({
   q: e.string().optional().openapi({
     description: "A lucene query string used to filter the results"
   })
-}), st = e.object({
+}), ht = e.object({
   start: e.number(),
   limit: e.number(),
   length: e.number()
-}), r = e.object({
-  created_at: e.string(),
-  updated_at: e.string()
-}), U = e.object({
+}), M = e.object({
   email: e.string().optional(),
   email_verified: e.boolean().optional(),
   name: e.string().optional(),
@@ -31,7 +84,7 @@ const rt = e.object({
   phone_number: e.string().optional(),
   phone_verified: e.boolean().optional(),
   family_name: e.string().optional()
-}).catchall(e.any()), F = e.object({
+}).catchall(e.any()), H = e.object({
   connection: e.string(),
   user_id: e.string(),
   provider: e.string(),
@@ -39,7 +92,7 @@ const rt = e.object({
   access_token: e.string().optional(),
   access_token_secret: e.string().optional(),
   refresh_token: e.string().optional(),
-  profileData: U.optional()
+  profileData: M.optional()
 }), E = e.object({
   email: e.string().optional().transform((t) => t && t.toLowerCase()),
   username: e.string().optional(),
@@ -55,7 +108,7 @@ const rt = e.object({
   user_id: e.string().optional(),
   app_metadata: e.any().default({}).optional(),
   user_metadata: e.any().default({}).optional()
-}), v = E.extend({
+}), G = E.extend({
   email_verified: e.boolean().default(!1),
   verify_email: e.boolean().optional(),
   last_ip: e.string().optional(),
@@ -64,29 +117,29 @@ const rt = e.object({
   provider: e.string().optional(),
   connection: e.string(),
   is_social: e.boolean().optional()
-}), P = e.object({
-  ...v.shape,
-  ...r.shape,
+}), K = e.object({
+  ...G.shape,
+  ...i.shape,
   user_id: e.string(),
   provider: e.string(),
   is_social: e.boolean(),
   email: e.string().optional(),
   login_count: e.number().default(0),
-  identities: e.array(F).optional()
-}), lt = P, ct = E.extend({
+  identities: e.array(H).optional()
+}), bt = K, ft = E.extend({
   login_count: e.number(),
   multifactor: e.array(e.string()).optional(),
   last_ip: e.string().optional(),
   last_login: e.string().optional(),
   user_id: e.string()
-}).catchall(e.any()), x = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
-let M = (t = 21) => {
-  let n = "", i = crypto.getRandomValues(new Uint8Array(t |= 0));
+}).catchall(e.any()), B = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
+let z = (t = 21) => {
+  let n = "", a = crypto.getRandomValues(new Uint8Array(t |= 0));
   for (; t--; )
-    n += x[i[t] & 63];
+    n += B[a[t] & 63];
   return n;
 };
-const H = e.object({
+const W = e.object({
   client_id: e.string().openapi({
     description: "ID of this client."
   }),
@@ -99,7 +152,7 @@ const H = e.object({
   global: e.boolean().default(!1).openapi({
     description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)."
   }),
-  client_secret: e.string().default(() => M()).optional().openapi({
+  client_secret: e.string().default(() => z()).optional().openapi({
     description: "Client secret (which you must not make public)."
   }),
   app_type: e.enum([
@@ -256,11 +309,11 @@ const H = e.object({
     description: "Specifies how long, in seconds, a Pushed Authorization Request URI remains valid"
   }),
   token_quota: e.record(e.any()).default({}).optional()
-}), G = e.object({
+}), X = e.object({
   created_at: e.string(),
   updated_at: e.string(),
-  ...H.shape
-}), K = e.object({
+  ...W.shape
+}), V = e.object({
   client_id: e.string().min(1).openapi({
     description: "ID of the client."
   }),
@@ -285,14 +338,14 @@ const H = e.object({
   authorization_details_types: e.array(e.string()).optional().openapi({
     description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement."
   })
-}), B = e.object({
+}), q = e.object({
   id: e.string().openapi({
     description: "ID of the client grant."
   }),
-  ...K.shape,
+  ...V.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), _t = e.array(B), c = e.object({
+}), Et = e.array(q), c = e.object({
   x: e.number(),
   y: e.number()
 });
@@ -301,7 +354,7 @@ const d = e.object({
   id: e.string(),
   category: e.nativeEnum(A),
   type: e.nativeEnum(S)
-}), z = d.extend({
+}), Y = d.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -313,7 +366,7 @@ const d = e.object({
   config: e.object({
     content: e.string()
   }).passthrough()
-}), W = d.extend({
+}), Q = d.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -335,7 +388,7 @@ const d = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), X = d.extend({
+}), J = d.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -349,7 +402,7 @@ const d = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), V = d.extend({
+}), Z = d.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -402,19 +455,19 @@ const d = e.object({
     label: e.string().optional(),
     placeholder: e.string().optional()
   }).passthrough()
-}), q = e.object({
+}), $ = e.object({
   id: e.string(),
   category: e.string(),
   type: e.string()
-}).passthrough(), Y = e.union([
-  z,
-  W,
-  X,
-  V,
-  q
+}).passthrough(), ee = e.union([
+  Y,
+  Q,
+  J,
+  Z,
+  $
 ]);
-var Q = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(Q || {});
-const J = e.object({
+var te = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(te || {});
+const oe = e.object({
   id: e.string(),
   type: e.literal(
     "STEP"
@@ -423,10 +476,10 @@ const J = e.object({
   coordinates: c,
   alias: e.string().optional(),
   config: e.object({
-    components: e.array(Y),
+    components: e.array(ee),
     next_node: e.string()
   }).passthrough()
-}), Z = e.object({
+}), ne = e.object({
   id: e.string(),
   type: e.literal(
     "FLOW"
@@ -438,42 +491,42 @@ const J = e.object({
     flow_id: e.string(),
     next_node: e.string()
   })
-}), $ = e.object({
+}), ie = e.object({
   id: e.string(),
   type: e.string(),
   coordinates: c
-}).passthrough(), ee = e.union([
-  J,
-  Z,
-  $
-]), te = e.object({
+}).passthrough(), ae = e.union([
+  oe,
+  ne,
+  ie
+]), se = e.object({
   next_node: e.string(),
   coordinates: c
-}).passthrough(), oe = e.object({
+}).passthrough(), re = e.object({
   resume_flow: e.boolean().optional(),
   coordinates: c
-}).passthrough(), ne = e.object({
+}).passthrough(), le = e.object({
   id: e.string(),
   name: e.string(),
   languages: e.object({
     primary: e.string()
   }).passthrough(),
-  nodes: e.array(ee),
-  start: te,
-  ending: oe,
+  nodes: e.array(ae),
+  start: se,
+  ending: re,
   created_at: e.string(),
   updated_at: e.string(),
   links: e.object({
     sdkSrc: e.string().optional(),
     sdk_src: e.string().optional()
   }).passthrough()
-}).passthrough(), pt = ne.omit({
+}).passthrough(), St = le.omit({
   id: !0,
   created_at: !0,
   updated_at: !0
 });
 var I = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.TOKEN_ID_TOKEN = "token id_token", t.CODE = "code", t))(I || {}), C = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(C || {}), O = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(O || {});
-const ie = e.object({
+const ce = e.object({
   client_id: e.string(),
   act_as: e.string().optional(),
   response_type: e.nativeEnum(I).optional(),
@@ -491,7 +544,7 @@ const ie = e.object({
   ui_locales: e.string().optional(),
   // The following fields are not available in Auth0
   vendor_id: e.string().optional()
-}), dt = e.object({
+}), At = e.object({
   colors: e.object({
     primary: e.string(),
     page_background: e.object({
@@ -507,7 +560,7 @@ const ie = e.object({
   font: e.object({
     url: e.string()
   }).optional()
-}), ae = e.object({
+}), _e = e.object({
   kid: e.string().optional(),
   team_id: e.string().optional(),
   realms: e.string().optional(),
@@ -527,23 +580,23 @@ const ie = e.object({
   twilio_sid: e.string().optional(),
   twilio_token: e.string().optional(),
   icon_url: e.string().optional()
-}), re = e.object({
+}), pe = e.object({
   id: e.string().optional(),
   name: e.string(),
   display_name: e.string().optional(),
   strategy: e.string(),
-  options: ae.default({}),
+  options: _e.default({}),
   enabled_clients: e.array(e.string()).default([]).optional(),
   response_type: e.custom().optional(),
   response_mode: e.custom().optional(),
   is_domain_connection: e.boolean().optional(),
   show_as_button: e.boolean().optional(),
   metadata: e.record(e.any()).optional()
-}), se = e.object({
+}), de = e.object({
   id: e.string(),
   created_at: e.string().transform((t) => t === null ? "" : t),
   updated_at: e.string().transform((t) => t === null ? "" : t)
-}).extend(re.shape), le = e.object({
+}).extend(pe.shape), ge = e.object({
   id: e.string().optional(),
   // Basic settings
   audience: e.string(),
@@ -663,25 +716,23 @@ const ie = e.object({
   // Authorization settings
   pushed_authorization_requests_supported: e.boolean().optional(),
   authorization_response_iss_parameter_supported: e.boolean().optional()
-}), ce = e.object({
+}), ue = e.object({
   created_at: e.string().nullable().transform((t) => t ?? ""),
   updated_at: e.string().nullable().transform((t) => t ?? ""),
-  ...le.shape,
+  ...ge.shape,
   id: e.string()
-});
-e.object({
-  ...G.shape,
-  tenant: ce,
-  connections: e.array(se)
-});
-const _e = e.enum([
+}), It = e.object({
+  ...X.shape,
+  tenant: ue,
+  connections: e.array(de)
+}), me = e.enum([
   "password_reset",
   "email_verification",
   "otp",
   "authorization_code",
   "oauth2_state",
   "ticket"
-]), pe = e.object({
+]), he = e.object({
   code_id: e.string().openapi({
     description: "The code that will be used in for instance an email verification flow"
   }),
@@ -691,7 +742,7 @@ const _e = e.enum([
   connection_id: e.string().optional().openapi({
     description: "The connection that the code is connected to"
   }),
-  code_type: _e,
+  code_type: me,
   code_verifier: e.string().optional().openapi({
     description: "The code verifier used in PKCE in outbound flows"
   }),
@@ -713,10 +764,10 @@ const _e = e.enum([
   expires_at: e.string(),
   used_at: e.string().optional(),
   user_id: e.string().optional()
-}), gt = e.object({
-  ...pe.shape,
+}), Ct = e.object({
+  ...he.shape,
   created_at: e.string()
-}), de = e.object({
+}), be = e.object({
   domain: e.string(),
   custom_domain_id: e.string().optional(),
   type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -730,23 +781,23 @@ const _e = e.enum([
     "null"
   ]).optional(),
   domain_metadata: e.record(e.string().max(255)).optional()
-}), ge = e.object({
+}), fe = e.object({
   name: e.literal("txt"),
   record: e.string(),
   domain: e.string()
-}), ue = e.object({
-  ...de.shape,
+}), Ee = e.object({
+  ...be.shape,
   custom_domain_id: e.string(),
   primary: e.boolean(),
   status: e.enum(["disabled", "pending", "pending_verification", "ready"]),
   origin_domain_name: e.string().optional(),
   verification: e.object({
-    methods: e.array(ge)
+    methods: e.array(fe)
   }).optional(),
   tls_policy: e.string().optional()
-}), ut = ue.extend({
+}), Ot = Ee.extend({
   tenant_id: e.string()
-}), mt = e.object({
+}), yt = e.object({
   id: e.string(),
   type: e.literal("submit"),
   label: e.string(),
@@ -765,7 +816,7 @@ const _e = e.enum([
   category: e.literal("FIELD").optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), me = e.discriminatedUnion("type", [
+}), Se = e.discriminatedUnion("type", [
   f.extend({
     type: e.literal("RICH_TEXT"),
     config: e.object({
@@ -814,7 +865,7 @@ const _e = e.enum([
     })
   })
   // Add more component types as needed
-]), he = e.object({
+]), Ae = e.object({
   name: e.string().openapi({
     description: "The name of the form"
   }),
@@ -865,7 +916,7 @@ const _e = e.enum([
         coordinates: e.object({ x: e.number(), y: e.number() }),
         alias: e.string().min(1).max(150).optional(),
         config: e.object({
-          components: e.array(me),
+          components: e.array(Se),
           next_node: e.string().optional()
         })
       })
@@ -888,9 +939,9 @@ const _e = e.enum([
   style: e.object({ css: e.string().optional() }).optional()
 }).openapi({
   description: "Schema for flow-based forms (matches new JSON structure)"
-}), ht = e.object({
-  ...r.shape,
-  ...he.shape,
+}), Tt = e.object({
+  ...i.shape,
+  ...Ae.shape,
   id: e.string()
 }), T = e.enum([
   "pre-user-registration",
@@ -912,37 +963,37 @@ const _e = e.enum([
   synchronous: e.boolean().default(!1),
   priority: e.number().optional(),
   hook_id: e.string().optional()
-}, be = e.object({
+}, Ie = e.object({
   ...g,
   trigger_id: T,
   url: e.string()
-}), fe = e.object({
+}), Ce = e.object({
   ...g,
   trigger_id: N,
   form_id: e.string()
-}), bt = e.union([
-  be,
-  fe
-]), Ee = e.object({
+}), Nt = e.union([
+  Ie,
+  Ce
+]), Oe = e.object({
   ...g,
   trigger_id: T,
-  ...r.shape,
+  ...i.shape,
   hook_id: e.string(),
   url: e.string()
-}), Se = e.object({
+}), ye = e.object({
   ...g,
   trigger_id: N,
-  ...r.shape,
+  ...i.shape,
   hook_id: e.string(),
   form_id: e.string()
-}), ft = e.union([Ee, Se]), Ae = e.object({
+}), Rt = e.union([Oe, ye]), Te = e.object({
   name: e.string().optional()
-}), Ie = e.object({
+}), Ne = e.object({
   email: e.string().optional()
-}), Ce = e.object({
+}), Re = e.object({
   organization_id: e.string().max(50),
-  inviter: Ae,
-  invitee: Ie,
+  inviter: Te,
+  invitee: Ne,
   invitation_url: e.string().url(),
   client_id: e.string(),
   connection_id: e.string().optional(),
@@ -951,13 +1002,13 @@ const _e = e.enum([
   ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
   roles: e.array(e.string()).default([]).optional(),
   send_invitation_email: e.boolean().default(!0).optional()
-}), Et = e.object({
+}), Lt = e.object({
   id: e.string(),
   organization_id: e.string().max(50),
   created_at: e.string().datetime(),
   expires_at: e.string().datetime(),
   ticket_id: e.string().optional()
-}).extend(Ce.shape), Oe = e.object({
+}).extend(Re.shape), Le = e.object({
   alg: e.enum([
     "RS256",
     "RS384",
@@ -976,9 +1027,9 @@ const _e = e.enum([
   x5t: e.string().optional(),
   x5c: e.array(e.string()).optional(),
   use: e.enum(["sig", "enc"]).optional()
-}), St = e.object({
-  keys: e.array(Oe)
-}), At = e.object({
+}), Dt = e.object({
+  keys: e.array(Le)
+}), wt = e.object({
   issuer: e.string(),
   authorization_endpoint: e.string(),
   token_endpoint: e.string(),
@@ -999,10 +1050,10 @@ const _e = e.enum([
   request_uri_parameter_supported: e.boolean(),
   request_parameter_supported: e.boolean(),
   token_endpoint_auth_signing_alg_values_supported: e.array(e.string())
-}), ye = e.object({
+}), De = e.object({
   csrf_token: e.string(),
   auth0Client: e.string().optional(),
-  authParams: ie,
+  authParams: ce,
   expires_at: e.string(),
   deleted_at: e.string().optional(),
   ip: e.string().optional(),
@@ -1012,14 +1063,14 @@ const _e = e.enum([
   login_completed: e.boolean().optional().default(!1)
 }).openapi({
   description: "This represents a login sesion"
-}), It = e.object({
-  ...ye.shape,
+}), jt = e.object({
+  ...De.shape,
   id: e.string().openapi({
     description: "This is is used as the state in the universal login"
   }),
   created_at: e.string(),
   updated_at: e.string()
-}), Te = {
+}), we = {
   // Network & System
   ACLS_SUMMARY: "acls_summary",
   ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
@@ -1186,24 +1237,24 @@ const _e = e.enum([
   WARNING_DURING_LOGIN: "w",
   WARNING_SENDING_NOTIFICATION: "wn",
   WARNING_USER_MANAGEMENT: "wum"
-}, Ne = e.string().refine(
-  (t) => Object.values(Te).includes(t),
+}, je = e.string().refine(
+  (t) => Object.values(we).includes(t),
   { message: "Invalid log type" }
-), Le = e.object({
+), ke = e.object({
   name: e.string(),
   version: e.string(),
   env: e.object({
     node: e.string().optional()
   }).optional()
-}), Re = e.object({
+}), Ue = e.object({
   country_code: e.string().length(2),
   city_name: e.string(),
   latitude: e.string(),
   longitude: e.string(),
   time_zone: e.string(),
   continent_code: e.string()
-}), De = e.object({
-  type: Ne,
+}), Fe = e.object({
+  type: je,
   date: e.string(),
   description: e.string().optional(),
   ip: e.string().optional(),
@@ -1222,30 +1273,30 @@ const _e = e.enum([
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
   hostname: e.string().optional(),
-  auth0_client: Le.optional(),
+  auth0_client: ke.optional(),
   log_id: e.string().optional(),
-  location_info: Re.optional()
-}), Ct = e.object({
-  ...De.shape,
+  location_info: Ue.optional()
+}), kt = e.object({
+  ...Fe.shape,
   log_id: e.string()
-}), we = e.object({
+}), ve = e.object({
   id: e.string().optional(),
   user_id: e.string(),
   password: e.string(),
   algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
   is_current: e.boolean().default(!0)
-}), Ot = we.extend({
+}), Ut = ve.extend({
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
-}), L = e.object({
+}), R = e.object({
   initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
   initial_ip: e.string().describe("First IP address associated with this session"),
   initial_asn: e.string().describe("First autonomous system number associated with this session"),
   last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
   last_ip: e.string().describe("Last IP address from which this user logged in"),
   last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), je = e.object({
+}), xe = e.object({
   id: e.string(),
   revoked_at: e.string().optional(),
   used_at: e.string().optional(),
@@ -1253,17 +1304,17 @@ const _e = e.enum([
   expires_at: e.string().optional(),
   login_session_id: e.string(),
   idle_expires_at: e.string().optional(),
-  device: L.describe(
+  device: R.describe(
     "Metadata related to the device used in the session"
   ),
   clients: e.array(e.string()).describe("List of client details for the session")
-}), yt = e.object({
+}), Ft = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   authenticated_at: e.string(),
   last_interaction_at: e.string(),
-  ...je.shape
-}), Tt = e.object({
+  ...xe.shape
+}), vt = e.object({
   kid: e.string().openapi({ description: "The key id of the signing key" }),
   cert: e.string().openapi({ description: "The public certificate of the signing key" }),
   fingerprint: e.string().openapi({ description: "The cert fingerprint" }),
@@ -1289,8 +1340,8 @@ const _e = e.enum([
     description: "The type of the signing key"
   })
 });
-var ke = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(ke || {});
-const Nt = e.object({
+var Pe = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(Pe || {});
+const xt = e.object({
   access_token: e.string(),
   id_token: e.string().optional(),
   scope: e.string().optional(),
@@ -1303,7 +1354,7 @@ e.object({
   code: e.string(),
   state: e.string().optional()
 });
-const Ue = e.object({
+const Me = e.object({
   button_border_radius: e.number(),
   button_border_weight: e.number(),
   buttons_style: e.enum(["pill", "rounded", "sharp"]),
@@ -1313,7 +1364,7 @@ const Ue = e.object({
   show_widget_shadow: e.boolean(),
   widget_border_weight: e.number(),
   widget_corner_radius: e.number()
-}), Fe = e.object({
+}), He = e.object({
   base_focus_color: e.string(),
   base_hover_color: e.string(),
   body_text: e.string(),
@@ -1333,44 +1384,44 @@ const Ue = e.object({
   success: e.string(),
   widget_background: e.string(),
   widget_border: e.string()
-}), a = e.object({
+}), s = e.object({
   bold: e.boolean(),
   size: e.number()
-}), ve = e.object({
-  body_text: a,
-  buttons_text: a,
+}), Ge = e.object({
+  body_text: s,
+  buttons_text: s,
   font_url: e.string(),
-  input_labels: a,
-  links: a,
+  input_labels: s,
+  links: s,
   links_style: e.enum(["normal", "underlined"]),
   reference_text_size: e.number(),
-  subtitle: a,
-  title: a
-}), Pe = e.object({
+  subtitle: s,
+  title: s
+}), Ke = e.object({
   background_color: e.string(),
   background_image_url: e.string(),
   page_layout: e.enum(["center", "left", "right"])
-}), xe = e.object({
+}), Be = e.object({
   header_text_alignment: e.enum(["center", "left", "right"]),
   logo_height: e.number(),
   logo_position: e.enum(["center", "left", "none", "right"]),
   logo_url: e.string(),
   social_buttons_layout: e.enum(["bottom", "top"])
-}), Me = e.object({
-  borders: Ue,
-  colors: Fe,
+}), ze = e.object({
+  borders: Me,
+  colors: He,
   displayName: e.string(),
-  fonts: ve,
-  page_background: Pe,
-  widget: xe
-}), Lt = Me.extend({
+  fonts: Ge,
+  page_background: Ke,
+  widget: Be
+}), Pt = ze.extend({
   themeId: e.string()
-}), Rt = e.object({
+}), Mt = e.object({
   universal_login_experience: e.enum(["new", "classic"]).default("new"),
   identifier_first: e.boolean().default(!0),
   password_first: e.boolean().default(!1),
   webauthn_platform_first_factor: e.boolean()
-}), Dt = e.object({
+}), Ht = e.object({
   name: e.string(),
   enabled: e.boolean().optional().default(!0),
   default_from_address: e.string().optional(),
@@ -1400,7 +1451,7 @@ const Ue = e.object({
     })
   ]),
   settings: e.object({}).optional()
-}), He = e.object({
+}), We = e.object({
   // The actual refresh token value (primary key).
   id: e.string(),
   // Link to the session record
@@ -1413,7 +1464,7 @@ const Ue = e.object({
   idle_expires_at: e.string().optional(),
   // When the token was last used.
   last_exchanged_at: e.string().optional(),
-  device: L,
+  device: R,
   resource_servers: e.array(
     e.object({
       audience: e.string(),
@@ -1421,21 +1472,21 @@ const Ue = e.object({
     })
   ),
   rotating: e.boolean()
-}), wt = e.object({
+}), Gt = e.object({
   // When the refresh token record was created.
   created_at: e.string(),
   // Spread in the rest of the refresh token properties.
-  ...He.shape
-}), jt = e.object({
+  ...We.shape
+}), Kt = e.object({
   to: e.string(),
   message: e.string()
-}), kt = e.object({
+}), Bt = e.object({
   name: e.string(),
   options: e.object({})
-}), Ge = e.object({
+}), Xe = e.object({
   value: e.string(),
   description: e.string().optional()
-}), Ke = e.object({
+}), Ve = e.object({
   token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
   enforce_policies: e.boolean().optional(),
   allow_skipping_userinfo: e.boolean().optional(),
@@ -1445,10 +1496,10 @@ const Ue = e.object({
   mtls: e.object({
     bound_access_tokens: e.boolean().optional()
   }).optional()
-}), Be = e.object({
+}), qe = e.object({
   name: e.string(),
   identifier: e.string(),
-  scopes: e.array(Ge).optional(),
+  scopes: e.array(Xe).optional(),
   signing_alg: e.string().optional(),
   signing_secret: e.string().optional(),
   token_lifetime: e.number().optional(),
@@ -1456,29 +1507,29 @@ const Ue = e.object({
   skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
   allow_offline_access: e.boolean().optional(),
   verificationKey: e.string().optional(),
-  options: Ke.optional()
-}), ze = e.object({
+  options: Ve.optional()
+}), Ye = e.object({
   id: e.string().optional(),
-  ...Be.shape,
+  ...qe.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Ut = e.array(ze), We = e.object({
+}), zt = e.array(Ye), Qe = e.object({
   role_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string()
-}), Xe = e.object({
-  ...We.shape,
+}), Je = e.object({
+  ...Qe.shape,
   created_at: e.string()
-}), Ft = e.array(Xe), Ve = e.object({
+}), Wt = e.array(Je), Ze = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string(),
   organization_id: e.string().optional()
-}), qe = e.object({
-  ...Ve.shape,
+}), $e = e.object({
+  ...Ze.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), vt = e.array(qe), Ye = e.object({
+}), Xt = e.array($e), et = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   resource_server_name: e.string(),
@@ -1486,31 +1537,31 @@ const Ue = e.object({
   description: e.string().nullable().optional(),
   created_at: e.string().optional(),
   organization_id: e.string().optional()
-}), Pt = e.array(
-  Ye
-), Qe = e.object({
+}), Vt = e.array(
+  et
+), tt = e.object({
   user_id: e.string(),
   role_id: e.string(),
   organization_id: e.string().optional()
-}), Je = e.object({
-  ...Qe.shape,
+}), ot = e.object({
+  ...tt.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), xt = e.array(Je), Ze = e.object({
+}), qt = e.array(ot), nt = e.object({
   name: e.string().min(1).max(50).openapi({
     description: "The name of the role. Cannot include '<' or '>'"
   }),
   description: e.string().max(255).optional().openapi({
     description: "The description of the role"
   })
-}), $e = e.object({
+}), it = e.object({
   id: e.string().openapi({
     description: "The unique identifier of the role"
   }),
-  ...Ze.shape,
+  ...nt.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Mt = e.array($e), et = e.object({
+}), Yt = e.array(it), at = e.object({
   logo_url: e.string().optional().openapi({
     description: "URL of the organization's logo"
   }),
@@ -1522,7 +1573,7 @@ const Ue = e.object({
       description: "Page background color in hex format (e.g., #FFFFFF)"
     })
   }).optional()
-}).optional(), tt = e.object({
+}).optional(), st = e.object({
   connection_id: e.string().openapi({
     description: "ID of the connection"
   }),
@@ -1535,7 +1586,7 @@ const Ue = e.object({
   is_signup_enabled: e.boolean().default(!0).openapi({
     description: "Whether signup is enabled for this connection"
   })
-}), ot = e.object({
+}), rt = e.object({
   client_credentials: e.object({
     enforce: e.boolean().default(!1).openapi({
       description: "Whether to enforce token quota limits"
@@ -1547,7 +1598,7 @@ const Ue = e.object({
       description: "Maximum tokens per hour (0 = unlimited)"
     })
   }).optional()
-}).optional(), nt = e.object({
+}).optional(), lt = e.object({
   id: e.string().optional(),
   name: e.string().min(1).openapi({
     description: "The name of the organization"
@@ -1555,30 +1606,30 @@ const Ue = e.object({
   display_name: e.string().optional().openapi({
     description: "The display name of the organization"
   }),
-  branding: et,
+  branding: at,
   metadata: e.record(e.any()).default({}).optional().openapi({
     description: "Custom metadata for the organization"
   }),
-  enabled_connections: e.array(tt).default([]).optional().openapi({
+  enabled_connections: e.array(st).default([]).optional().openapi({
     description: "List of enabled connections for the organization"
   }),
-  token_quota: ot
-}), Ht = e.object({
-  ...nt.shape,
-  ...r.shape,
+  token_quota: rt
+}), Qt = e.object({
+  ...lt.shape,
+  ...i.shape,
   id: e.string()
-}), it = e.object({
+}), ct = e.object({
   user_id: e.string().openapi({
     description: "ID of the user"
   }),
   organization_id: e.string().openapi({
     description: "ID of the organization"
   })
-}), Gt = e.object({
-  ...it.shape,
-  ...r.shape,
+}), Jt = e.object({
+  ...ct.shape,
+  ...i.shape,
   id: e.string()
-}), Kt = e.object({
+}), Zt = e.object({
   // Session settings
   idle_session_lifetime: e.number().optional(),
   session_lifetime: e.number().optional(),
@@ -1647,35 +1698,63 @@ const Ue = e.object({
   sessions: e.object({
     oidc_logout_prompt_enabled: e.boolean().optional()
   }).optional()
+}), $t = e.object({
+  date: e.string().openapi({
+    description: "Date these events occurred in ISO 8601 format",
+    example: "2025-12-19"
+  }),
+  logins: e.number().openapi({
+    description: "Number of logins on this date",
+    example: 150
+  }),
+  signups: e.number().openapi({
+    description: "Number of signups on this date",
+    example: 25
+  }),
+  leaked_passwords: e.number().openapi({
+    description: "Number of breached-password detections on this date (subscription required)",
+    example: 0
+  }),
+  updated_at: e.string().openapi({
+    description: "Date and time this stats entry was last updated in ISO 8601 format",
+    example: "2025-12-19T10:30:00.000Z"
+  }),
+  created_at: e.string().openapi({
+    description: "Approximate date and time the first event occurred in ISO 8601 format",
+    example: "2025-12-19T00:00:00.000Z"
+  })
+}), eo = e.number().openapi({
+  description: "Number of active users in the last 30 days",
+  example: 1234
 });
-function Bt(t) {
-  const [n, i] = t.split("|");
-  if (!n || !i)
+function to(t) {
+  const [n, a] = t.split("|");
+  if (!n || !a)
     throw new Error(`Invalid user_id: ${t}`);
-  return { connection: n, id: i };
+  return { connection: n, id: a };
 }
-function zt(t) {
+function oo(t) {
   const {
     primary: n,
-    secondaries: i,
-    syncMethods: R = ["create", "update", "remove", "delete", "set"]
+    secondaries: a,
+    syncMethods: L = ["create", "update", "remove", "delete", "set"]
   } = t, D = {
     get(_, o) {
       if (typeof o == "symbol")
         return _[o];
       const p = _[o];
-      return typeof p != "function" ? p : R.includes(o) ? async (...u) => {
+      return typeof p != "function" ? p : L.includes(o) ? async (...u) => {
         const w = await p.apply(_, u), m = [];
-        for (const s of i) {
-          const h = s.adapter[o];
+        for (const r of a) {
+          const h = r.adapter[o];
           if (typeof h != "function")
             continue;
           const j = (async () => {
             try {
-              await h.apply(s.adapter, u);
+              await h.apply(r.adapter, u);
             } catch (b) {
               try {
-                s.onError ? s.onError(b, o, u) : console.error(
+                r.onError ? r.onError(b, o, u) : console.error(
                   `Passthrough adapter: secondary write failed for ${o}:`,
                   b
                 );
@@ -1687,7 +1766,7 @@ function zt(t) {
               }
             }
           })();
-          s.blocking && m.push(j);
+          r.blocking && m.push(j);
         }
         return m.length > 0 && await Promise.all(m), w;
       } : p.bind(_);
@@ -1695,128 +1774,140 @@ function zt(t) {
   };
   return new Proxy(n, D);
 }
-function Wt(t) {
+function no(t) {
   return t;
 }
 export {
-  Le as Auth0Client,
+  dt as Auth0ActionEnum,
+  ke as Auth0Client,
   C as AuthorizationResponseMode,
   I as AuthorizationResponseType,
   O as CodeChallengeMethod,
   A as ComponentCategory,
   S as ComponentType,
-  ke as GrantType,
-  Re as LocationInfo,
-  Te as LogTypes,
-  Q as NodeType,
-  pt as auth0FlowInsertSchema,
-  ne as auth0FlowSchema,
-  rt as auth0QuerySchema,
-  lt as auth0UserResponseSchema,
-  ie as authParamsSchema,
+  gt as EmailActionEnum,
+  pt as FlowActionTypeEnum,
+  Pe as GrantType,
+  Ue as LocationInfo,
+  we as LogTypes,
+  te as NodeType,
+  eo as activeUsersResponseSchema,
+  St as auth0FlowInsertSchema,
+  le as auth0FlowSchema,
+  mt as auth0QuerySchema,
+  F as auth0UpdateUserActionSchema,
+  bt as auth0UserResponseSchema,
+  ce as authParamsSchema,
   E as baseUserSchema,
-  Ue as bordersSchema,
-  dt as brandingSchema,
-  W as buttonComponentSchema,
-  K as clientGrantInsertSchema,
-  _t as clientGrantListSchema,
-  B as clientGrantSchema,
-  H as clientInsertSchema,
-  G as clientSchema,
-  pe as codeInsertSchema,
-  gt as codeSchema,
-  _e as codeTypeSchema,
-  Fe as colorsSchema,
-  Y as componentSchema,
-  re as connectionInsertSchema,
-  ae as connectionOptionsSchema,
-  se as connectionSchema,
+  Me as bordersSchema,
+  At as brandingSchema,
+  Q as buttonComponentSchema,
+  V as clientGrantInsertSchema,
+  Et as clientGrantListSchema,
+  q as clientGrantSchema,
+  W as clientInsertSchema,
+  X as clientSchema,
+  he as codeInsertSchema,
+  Ct as codeSchema,
+  me as codeTypeSchema,
+  He as colorsSchema,
+  ee as componentSchema,
+  pe as connectionInsertSchema,
+  _e as connectionOptionsSchema,
+  de as connectionSchema,
   c as coordinatesSchema,
-  zt as createPassthroughAdapter,
-  Wt as createWriteOnlyAdapter,
-  de as customDomainInsertSchema,
-  ue as customDomainSchema,
-  ut as customDomainWithTenantIdSchema,
-  Dt as emailProviderSchema,
-  oe as endingSchema,
-  V as fieldComponentSchema,
-  Z as flowNodeSchema,
-  a as fontDetailsSchema,
-  ve as fontsSchema,
-  mt as formControlSchema,
-  he as formInsertSchema,
-  me as formNodeComponentDefinition,
-  ht as formSchema,
-  q as genericComponentSchema,
-  $ as genericNodeSchema,
-  bt as hookInsertSchema,
-  ft as hookSchema,
-  F as identitySchema,
-  Ce as inviteInsertSchema,
-  Et as inviteSchema,
-  Ie as inviteeSchema,
-  Ae as inviterSchema,
-  St as jwksKeySchema,
-  Oe as jwksSchema,
-  X as legalComponentSchema,
-  De as logInsertSchema,
-  Ct as logSchema,
-  ye as loginSessionInsertSchema,
-  It as loginSessionSchema,
-  ee as nodeSchema,
-  At as openIDConfigurationSchema,
-  et as organizationBrandingSchema,
-  tt as organizationEnabledConnectionSchema,
-  nt as organizationInsertSchema,
-  Ht as organizationSchema,
-  ot as organizationTokenQuotaSchema,
-  Pe as pageBackgroundSchema,
-  Bt as parseUserId,
-  we as passwordInsertSchema,
-  Ot as passwordSchema,
-  U as profileDataSchema,
-  Rt as promptSettingSchema,
-  He as refreshTokenInsertSchema,
-  wt as refreshTokenSchema,
-  Be as resourceServerInsertSchema,
-  Ut as resourceServerListSchema,
-  Ke as resourceServerOptionsSchema,
-  ze as resourceServerSchema,
-  Ge as resourceServerScopeSchema,
-  z as richTextComponentSchema,
-  Ze as roleInsertSchema,
-  Mt as roleListSchema,
-  We as rolePermissionInsertSchema,
-  Ft as rolePermissionListSchema,
-  Xe as rolePermissionSchema,
-  $e as roleSchema,
-  je as sessionInsertSchema,
-  yt as sessionSchema,
-  Tt as signingKeySchema,
-  kt as smsProviderSchema,
-  jt as smsSendParamsSchema,
-  te as startSchema,
-  J as stepNodeSchema,
-  le as tenantInsertSchema,
-  ce as tenantSchema,
-  Kt as tenantSettingsSchema,
-  Me as themeInsertSchema,
-  Lt as themeSchema,
-  Nt as tokenResponseSchema,
-  st as totalsSchema,
-  v as userInsertSchema,
-  it as userOrganizationInsertSchema,
-  Gt as userOrganizationSchema,
-  Ve as userPermissionInsertSchema,
-  vt as userPermissionListSchema,
-  qe as userPermissionSchema,
-  Pt as userPermissionWithDetailsListSchema,
-  Ye as userPermissionWithDetailsSchema,
-  ct as userResponseSchema,
-  Qe as userRoleInsertSchema,
-  xt as userRoleListSchema,
-  Je as userRoleSchema,
-  P as userSchema,
-  ge as verificationMethodsSchema,
-  xe as widgetSchema
+  oo as createPassthroughAdapter,
+  no as createWriteOnlyAdapter,
+  be as customDomainInsertSchema,
+  Ee as customDomainSchema,
+  Ot as customDomainWithTenantIdSchema,
+  $t as dailyStatsSchema,
+  Ht as emailProviderSchema,
+  U as emailVerificationRulesSchema,
+  v as emailVerifyActionSchema,
+  re as endingSchema,
+  Z as fieldComponentSchema,
+  x as flowActionStepSchema,
+  P as flowInsertSchema,
+  ne as flowNodeSchema,
+  ut as flowSchema,
+  s as fontDetailsSchema,
+  Ge as fontsSchema,
+  yt as formControlSchema,
+  Ae as formInsertSchema,
+  Se as formNodeComponentDefinition,
+  Tt as formSchema,
+  $ as genericComponentSchema,
+  ie as genericNodeSchema,
+  Nt as hookInsertSchema,
+  Rt as hookSchema,
+  H as identitySchema,
+  Re as inviteInsertSchema,
+  Lt as inviteSchema,
+  Ne as inviteeSchema,
+  Te as inviterSchema,
+  Dt as jwksKeySchema,
+  Le as jwksSchema,
+  It as legacyClientSchema,
+  J as legalComponentSchema,
+  Fe as logInsertSchema,
+  kt as logSchema,
+  De as loginSessionInsertSchema,
+  jt as loginSessionSchema,
+  ae as nodeSchema,
+  wt as openIDConfigurationSchema,
+  at as organizationBrandingSchema,
+  st as organizationEnabledConnectionSchema,
+  lt as organizationInsertSchema,
+  Qt as organizationSchema,
+  rt as organizationTokenQuotaSchema,
+  Ke as pageBackgroundSchema,
+  to as parseUserId,
+  ve as passwordInsertSchema,
+  Ut as passwordSchema,
+  M as profileDataSchema,
+  Mt as promptSettingSchema,
+  We as refreshTokenInsertSchema,
+  Gt as refreshTokenSchema,
+  qe as resourceServerInsertSchema,
+  zt as resourceServerListSchema,
+  Ve as resourceServerOptionsSchema,
+  Ye as resourceServerSchema,
+  Xe as resourceServerScopeSchema,
+  Y as richTextComponentSchema,
+  nt as roleInsertSchema,
+  Yt as roleListSchema,
+  Qe as rolePermissionInsertSchema,
+  Wt as rolePermissionListSchema,
+  Je as rolePermissionSchema,
+  it as roleSchema,
+  xe as sessionInsertSchema,
+  Ft as sessionSchema,
+  vt as signingKeySchema,
+  Bt as smsProviderSchema,
+  Kt as smsSendParamsSchema,
+  se as startSchema,
+  oe as stepNodeSchema,
+  ge as tenantInsertSchema,
+  ue as tenantSchema,
+  Zt as tenantSettingsSchema,
+  ze as themeInsertSchema,
+  Pt as themeSchema,
+  xt as tokenResponseSchema,
+  ht as totalsSchema,
+  G as userInsertSchema,
+  ct as userOrganizationInsertSchema,
+  Jt as userOrganizationSchema,
+  Ze as userPermissionInsertSchema,
+  Xt as userPermissionListSchema,
+  $e as userPermissionSchema,
+  Vt as userPermissionWithDetailsListSchema,
+  et as userPermissionWithDetailsSchema,
+  ft as userResponseSchema,
+  tt as userRoleInsertSchema,
+  qt as userRoleListSchema,
+  ot as userRoleSchema,
+  K as userSchema,
+  fe as verificationMethodsSchema,
+  Be as widgetSchema
 };