@authhero/adapter-interfaces 0.109.0 → 0.111.0

package/dist/adapter-interfaces.mjs

@@ -1,5 +1,77 @@
 import { z as e } from "@hono/zod-openapi";
-const st = e.object({
+const i = e.object({
+  created_at: e.string(),
+  updated_at: e.string()
+}), ut = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), mt = e.enum([
+  "CREATE_USER",
+  "GET_USER",
+  "UPDATE_USER",
+  "SEND_REQUEST",
+  "SEND_EMAIL"
+]), ht = e.enum(["VERIFY_EMAIL"]), k = e.object({
+  require_mx_record: e.boolean().optional(),
+  block_aliases: e.boolean().optional(),
+  block_free_emails: e.boolean().optional(),
+  block_disposable_emails: e.boolean().optional(),
+  blocklist: e.array(e.string()).optional(),
+  allowlist: e.array(e.string()).optional()
+}), F = e.object({
+  id: e.string(),
+  alias: e.string().max(100).optional(),
+  type: e.literal("AUTH0"),
+  action: e.literal("UPDATE_USER"),
+  allow_failure: e.boolean().optional(),
+  mask_output: e.boolean().optional(),
+  params: e.object({
+    connection_id: e.string().optional(),
+    user_id: e.string(),
+    changes: e.record(e.string(), e.any())
+  })
+}), v = e.object({
+  id: e.string(),
+  alias: e.string().max(100).optional(),
+  type: e.literal("EMAIL"),
+  action: e.literal("VERIFY_EMAIL"),
+  allow_failure: e.boolean().optional(),
+  mask_output: e.boolean().optional(),
+  params: e.object({
+    email: e.string(),
+    rules: k.optional()
+  })
+}), x = e.enum(["change-email", "account", "custom"]), P = e.object({
+  id: e.string(),
+  alias: e.string().max(100).optional(),
+  type: e.literal("REDIRECT"),
+  action: e.literal("REDIRECT_USER"),
+  allow_failure: e.boolean().optional(),
+  mask_output: e.boolean().optional(),
+  params: e.object({
+    target: x.openapi({
+      description: "The predefined target to redirect to, or 'custom' for a custom URL"
+    }),
+    custom_url: e.string().optional().openapi({
+      description: "Custom URL to redirect to when target is 'custom'"
+    })
+  })
+}), M = e.union([
+  F,
+  v,
+  P
+]), H = e.object({
+  name: e.string().min(1).max(150).openapi({
+    description: "The name of the flow"
+  }),
+  // Actions is an array of action steps (Auth0 stores as JSON blob)
+  actions: e.array(M).optional().default([]).openapi({
+    description: "The list of actions to execute in sequence"
+  })
+}), bt = H.extend({
+  ...i.shape,
+  id: e.string().openapi({
+    description: "Unique identifier for the flow",
+    example: "af_12tMpdJ3iek7svMyZkSh5M"
+  })
+}), ft = e.object({
   page: e.string().min(0).optional().default("0").transform((t) => parseInt(t, 10)).openapi({
     description: "The page number where 0 is the first page"
   }),
@@ -15,14 +87,11 @@ const st = e.object({
   q: e.string().optional().openapi({
     description: "A lucene query string used to filter the results"
   })
-}), rt = e.object({
+}), Et = e.object({
   start: e.number(),
   limit: e.number(),
   length: e.number()
-}), s = e.object({
-  created_at: e.string(),
-  updated_at: e.string()
-}), U = e.object({
+}), G = e.object({
   email: e.string().optional(),
   email_verified: e.boolean().optional(),
   name: e.string().optional(),
@@ -31,7 +100,7 @@ const st = e.object({
   phone_number: e.string().optional(),
   phone_verified: e.boolean().optional(),
   family_name: e.string().optional()
-}).catchall(e.any()), F = e.object({
+}).catchall(e.any()), K = e.object({
   connection: e.string(),
   user_id: e.string(),
   provider: e.string(),
@@ -39,7 +108,7 @@ const st = e.object({
   access_token: e.string().optional(),
   access_token_secret: e.string().optional(),
   refresh_token: e.string().optional(),
-  profileData: U.optional()
+  profileData: G.optional()
 }), E = e.object({
   email: e.string().optional().transform((t) => t && t.toLowerCase()),
   username: e.string().optional(),
@@ -55,7 +124,7 @@ const st = e.object({
   user_id: e.string().optional(),
   app_metadata: e.any().default({}).optional(),
   user_metadata: e.any().default({}).optional()
-}), v = E.extend({
+}), B = E.extend({
   email_verified: e.boolean().default(!1),
   verify_email: e.boolean().optional(),
   last_ip: e.string().optional(),
@@ -64,29 +133,29 @@ const st = e.object({
   provider: e.string().optional(),
   connection: e.string(),
   is_social: e.boolean().optional()
-}), P = e.object({
-  ...v.shape,
-  ...s.shape,
+}), z = e.object({
+  ...B.shape,
+  ...i.shape,
   user_id: e.string(),
   provider: e.string(),
   is_social: e.boolean(),
   email: e.string().optional(),
   login_count: e.number().default(0),
-  identities: e.array(F).optional()
-}), lt = P, ct = E.extend({
+  identities: e.array(K).optional()
+}), St = z, At = E.extend({
   login_count: e.number(),
   multifactor: e.array(e.string()).optional(),
   last_ip: e.string().optional(),
   last_login: e.string().optional(),
   user_id: e.string()
-}).catchall(e.any()), x = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
-let M = (t = 21) => {
-  let n = "", i = crypto.getRandomValues(new Uint8Array(t |= 0));
+}).catchall(e.any()), W = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
+let X = (t = 21) => {
+  let n = "", a = crypto.getRandomValues(new Uint8Array(t |= 0));
   for (; t--; )
-    n += x[i[t] & 63];
+    n += W[a[t] & 63];
   return n;
 };
-const H = e.object({
+const V = e.object({
   client_id: e.string().openapi({
     description: "ID of this client."
   }),
@@ -99,7 +168,7 @@ const H = e.object({
   global: e.boolean().default(!1).openapi({
     description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)."
   }),
-  client_secret: e.string().default(() => M()).optional().openapi({
+  client_secret: e.string().default(() => X()).optional().openapi({
     description: "Client secret (which you must not make public)."
   }),
   app_type: e.enum([
@@ -256,11 +325,11 @@ const H = e.object({
     description: "Specifies how long, in seconds, a Pushed Authorization Request URI remains valid"
   }),
   token_quota: e.record(e.any()).default({}).optional()
-}), G = e.object({
+}), q = e.object({
   created_at: e.string(),
   updated_at: e.string(),
-  ...H.shape
-}), K = e.object({
+  ...V.shape
+}), Y = e.object({
   client_id: e.string().min(1).openapi({
     description: "ID of the client."
   }),
@@ -285,14 +354,14 @@ const H = e.object({
   authorization_details_types: e.array(e.string()).optional().openapi({
     description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement."
   })
-}), B = e.object({
+}), Q = e.object({
   id: e.string().openapi({
     description: "ID of the client grant."
   }),
-  ...K.shape,
+  ...Y.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), _t = e.array(B), c = e.object({
+}), It = e.array(Q), r = e.object({
   x: e.number(),
   y: e.number()
 });
@@ -301,7 +370,7 @@ const d = e.object({
   id: e.string(),
   category: e.nativeEnum(A),
   type: e.nativeEnum(S)
-}), z = d.extend({
+}), J = d.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -313,7 +382,7 @@ const d = e.object({
   config: e.object({
     content: e.string()
   }).passthrough()
-}), W = d.extend({
+}), Z = d.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -335,7 +404,7 @@ const d = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), X = d.extend({
+}), $ = d.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -349,7 +418,7 @@ const d = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), V = d.extend({
+}), ee = d.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -402,78 +471,101 @@ const d = e.object({
     label: e.string().optional(),
     placeholder: e.string().optional()
   }).passthrough()
-}), q = e.object({
+}), te = e.object({
   id: e.string(),
   category: e.string(),
   type: e.string()
-}).passthrough(), Y = e.union([
-  z,
-  W,
-  X,
-  V,
-  q
+}).passthrough(), oe = e.union([
+  J,
+  Z,
+  $,
+  ee,
+  te
 ]);
-var Q = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(Q || {});
-const J = e.object({
+var ne = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(ne || {});
+const ie = e.object({
   id: e.string(),
   type: e.literal(
     "STEP"
     /* STEP */
   ),
-  coordinates: c,
+  coordinates: r,
   alias: e.string().optional(),
   config: e.object({
-    components: e.array(Y),
+    components: e.array(oe),
     next_node: e.string()
   }).passthrough()
-}), Z = e.object({
+}), ae = e.object({
   id: e.string(),
   type: e.literal(
     "FLOW"
     /* FLOW */
   ),
-  coordinates: c,
+  coordinates: r,
   alias: e.string().optional(),
   config: e.object({
     flow_id: e.string(),
     next_node: e.string()
   })
-}), $ = e.object({
+}), se = e.object({
+  id: e.string(),
+  type: e.literal(
+    "ACTION"
+    /* ACTION */
+  ),
+  coordinates: r,
+  alias: e.string().optional(),
+  config: e.object({
+    action_type: e.enum(["REDIRECT"]).openapi({
+      description: "The type of action to perform"
+    }),
+    target: e.enum(["change-email", "account", "custom"]).openapi({
+      description: "The predefined target to redirect to"
+    }),
+    custom_url: e.string().optional().openapi({
+      description: "Custom URL when target is 'custom'"
+    }),
+    next_node: e.string().openapi({
+      description: "The next node to navigate to after action (for non-redirect actions)"
+    })
+  }).passthrough()
+}), re = e.object({
   id: e.string(),
   type: e.string(),
-  coordinates: c
-}).passthrough(), ee = e.union([
-  J,
-  Z,
-  $
-]), te = e.object({
+  coordinates: r
+}).passthrough(), le = e.union([
+  ie,
+  ae,
+  se,
+  re
+]), ce = e.object({
   next_node: e.string(),
-  coordinates: c
-}).passthrough(), oe = e.object({
+  coordinates: r
+}).passthrough(), pe = e.object({
   resume_flow: e.boolean().optional(),
-  coordinates: c
-}).passthrough(), ne = e.object({
+  coordinates: r
+}).passthrough(), _e = e.object({
   id: e.string(),
   name: e.string(),
   languages: e.object({
     primary: e.string()
   }).passthrough(),
-  nodes: e.array(ee),
-  start: te,
-  ending: oe,
+  nodes: e.array(le),
+  start: ce,
+  ending: pe,
   created_at: e.string(),
   updated_at: e.string(),
   links: e.object({
     sdkSrc: e.string().optional(),
     sdk_src: e.string().optional()
   }).passthrough()
-}).passthrough(), pt = ne.omit({
+}).passthrough(), Ct = _e.omit({
   id: !0,
   created_at: !0,
   updated_at: !0
 });
 var I = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.TOKEN_ID_TOKEN = "token id_token", t.CODE = "code", t))(I || {}), C = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(C || {}), O = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(O || {});
-const ie = e.object({
+const de = e.object({
   client_id: e.string(),
   act_as: e.string().optional(),
   response_type: e.nativeEnum(I).optional(),
@@ -491,7 +583,7 @@ const ie = e.object({
   ui_locales: e.string().optional(),
   // The following fields are not available in Auth0
   vendor_id: e.string().optional()
-}), dt = e.object({
+}), Ot = e.object({
   colors: e.object({
     primary: e.string(),
     page_background: e.object({
@@ -507,7 +599,7 @@ const ie = e.object({
   font: e.object({
     url: e.string()
   }).optional()
-}), ae = e.object({
+}), ge = e.object({
   kid: e.string().optional(),
   team_id: e.string().optional(),
   realms: e.string().optional(),
@@ -527,23 +619,23 @@ const ie = e.object({
   twilio_sid: e.string().optional(),
   twilio_token: e.string().optional(),
   icon_url: e.string().optional()
-}), se = e.object({
+}), ue = e.object({
   id: e.string().optional(),
   name: e.string(),
   display_name: e.string().optional(),
   strategy: e.string(),
-  options: ae.default({}),
+  options: ge.default({}),
   enabled_clients: e.array(e.string()).default([]).optional(),
   response_type: e.custom().optional(),
   response_mode: e.custom().optional(),
   is_domain_connection: e.boolean().optional(),
   show_as_button: e.boolean().optional(),
   metadata: e.record(e.any()).optional()
-}), re = e.object({
+}), me = e.object({
   id: e.string(),
   created_at: e.string().transform((t) => t === null ? "" : t),
   updated_at: e.string().transform((t) => t === null ? "" : t)
-}).extend(se.shape), le = e.object({
+}).extend(ue.shape), he = e.object({
   id: e.string().optional(),
   // Basic settings
   audience: e.string(),
@@ -663,23 +755,23 @@ const ie = e.object({
   // Authorization settings
   pushed_authorization_requests_supported: e.boolean().optional(),
   authorization_response_iss_parameter_supported: e.boolean().optional()
-}), ce = e.object({
+}), be = e.object({
   created_at: e.string().nullable().transform((t) => t ?? ""),
   updated_at: e.string().nullable().transform((t) => t ?? ""),
-  ...le.shape,
+  ...he.shape,
   id: e.string()
-}), gt = e.object({
-  ...G.shape,
-  tenant: ce,
-  connections: e.array(re)
-}), _e = e.enum([
+}), Tt = e.object({
+  ...q.shape,
+  tenant: be,
+  connections: e.array(me)
+}), fe = e.enum([
   "password_reset",
   "email_verification",
   "otp",
   "authorization_code",
   "oauth2_state",
   "ticket"
-]), pe = e.object({
+]), Ee = e.object({
   code_id: e.string().openapi({
     description: "The code that will be used in for instance an email verification flow"
   }),
@@ -689,7 +781,7 @@ const ie = e.object({
   connection_id: e.string().optional().openapi({
     description: "The connection that the code is connected to"
   }),
-  code_type: _e,
+  code_type: fe,
   code_verifier: e.string().optional().openapi({
     description: "The code verifier used in PKCE in outbound flows"
   }),
@@ -711,10 +803,10 @@ const ie = e.object({
   expires_at: e.string(),
   used_at: e.string().optional(),
   user_id: e.string().optional()
-}), ut = e.object({
-  ...pe.shape,
+}), yt = e.object({
+  ...Ee.shape,
   created_at: e.string()
-}), de = e.object({
+}), Se = e.object({
   domain: e.string(),
   custom_domain_id: e.string().optional(),
   type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -728,23 +820,23 @@ const ie = e.object({
     "null"
   ]).optional(),
   domain_metadata: e.record(e.string().max(255)).optional()
-}), ge = e.object({
+}), Ae = e.object({
   name: e.literal("txt"),
   record: e.string(),
   domain: e.string()
-}), ue = e.object({
-  ...de.shape,
+}), Ie = e.object({
+  ...Se.shape,
   custom_domain_id: e.string(),
   primary: e.boolean(),
   status: e.enum(["disabled", "pending", "pending_verification", "ready"]),
   origin_domain_name: e.string().optional(),
   verification: e.object({
-    methods: e.array(ge)
+    methods: e.array(Ae)
   }).optional(),
   tls_policy: e.string().optional()
-}), mt = ue.extend({
+}), Nt = Ie.extend({
   tenant_id: e.string()
-}), ht = e.object({
+}), Rt = e.object({
   id: e.string(),
   type: e.literal("submit"),
   label: e.string(),
@@ -753,31 +845,31 @@ const ie = e.object({
   order: e.number().optional(),
   visible: e.boolean().optional().default(!0),
   customizations: e.record(e.string(), e.any()).optional()
-}), y = e.object({
+}), T = e.object({
   id: e.string(),
   order: e.number().optional(),
   visible: e.boolean().optional().default(!0)
-}), f = y.extend({
+}), f = T.extend({
   category: e.literal("BLOCK").optional()
-}), l = y.extend({
+}), c = T.extend({
   category: e.literal("FIELD").optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), me = e.discriminatedUnion("type", [
+}), Ce = e.discriminatedUnion("type", [
   f.extend({
     type: e.literal("RICH_TEXT"),
     config: e.object({
       content: e.string()
     })
   }),
-  l.omit({ sensitive: !0 }).extend({
+  c.omit({ sensitive: !0 }).extend({
     type: e.literal("LEGAL"),
     config: e.object({
       text: e.string(),
       html: e.boolean().optional()
     })
   }),
-  l.extend({
+  c.extend({
     type: e.literal("TEXT"),
     config: e.object({
       placeholder: e.string().optional(),
@@ -790,21 +882,21 @@ const ie = e.object({
       text: e.string().optional()
     })
   }),
-  l.extend({
+  c.extend({
     type: e.literal("EMAIL"),
     config: e.object({
       label: e.string().optional(),
       placeholder: e.string().optional()
     })
   }),
-  l.extend({
+  c.extend({
     type: e.literal("NUMBER"),
     config: e.object({
       label: e.string().optional(),
       placeholder: e.string().optional()
     })
   }),
-  l.extend({
+  c.extend({
     type: e.literal("PHONE"),
     config: e.object({
       label: e.string().optional(),
@@ -812,7 +904,7 @@ const ie = e.object({
     })
   })
   // Add more component types as needed
-]), he = e.object({
+]), Oe = e.object({
   name: e.string().openapi({
     description: "The name of the form"
   }),
@@ -863,7 +955,7 @@ const ie = e.object({
         coordinates: e.object({ x: e.number(), y: e.number() }),
         alias: e.string().min(1).max(150).optional(),
         config: e.object({
-          components: e.array(me),
+          components: e.array(Ce),
           next_node: e.string().optional()
         })
       })
@@ -886,11 +978,11 @@ const ie = e.object({
   style: e.object({ css: e.string().optional() }).optional()
 }).openapi({
   description: "Schema for flow-based forms (matches new JSON structure)"
-}), bt = e.object({
-  ...s.shape,
-  ...he.shape,
+}), Lt = e.object({
+  ...i.shape,
+  ...Oe.shape,
   id: e.string()
-}), T = e.enum([
+}), y = e.enum([
   "pre-user-registration",
   "post-user-registration",
   "post-user-login",
@@ -910,37 +1002,37 @@ const ie = e.object({
   synchronous: e.boolean().default(!1),
   priority: e.number().optional(),
   hook_id: e.string().optional()
-}, be = e.object({
+}, Te = e.object({
   ...g,
-  trigger_id: T,
+  trigger_id: y,
   url: e.string()
-}), fe = e.object({
+}), ye = e.object({
   ...g,
   trigger_id: N,
   form_id: e.string()
-}), ft = e.union([
-  be,
-  fe
-]), Ee = e.object({
+}), Dt = e.union([
+  Te,
+  ye
+]), Ne = e.object({
   ...g,
-  trigger_id: T,
-  ...s.shape,
+  trigger_id: y,
+  ...i.shape,
   hook_id: e.string(),
   url: e.string()
-}), Se = e.object({
+}), Re = e.object({
   ...g,
   trigger_id: N,
-  ...s.shape,
+  ...i.shape,
   hook_id: e.string(),
   form_id: e.string()
-}), Et = e.union([Ee, Se]), Ae = e.object({
+}), wt = e.union([Ne, Re]), Le = e.object({
   name: e.string().optional()
-}), Ie = e.object({
+}), De = e.object({
   email: e.string().optional()
-}), Ce = e.object({
+}), we = e.object({
   organization_id: e.string().max(50),
-  inviter: Ae,
-  invitee: Ie,
+  inviter: Le,
+  invitee: De,
   invitation_url: e.string().url(),
   client_id: e.string(),
   connection_id: e.string().optional(),
@@ -949,13 +1041,13 @@ const ie = e.object({
   ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
   roles: e.array(e.string()).default([]).optional(),
   send_invitation_email: e.boolean().default(!0).optional()
-}), St = e.object({
+}), jt = e.object({
   id: e.string(),
   organization_id: e.string().max(50),
   created_at: e.string().datetime(),
   expires_at: e.string().datetime(),
   ticket_id: e.string().optional()
-}).extend(Ce.shape), Oe = e.object({
+}).extend(we.shape), je = e.object({
   alg: e.enum([
     "RS256",
     "RS384",
@@ -974,9 +1066,9 @@ const ie = e.object({
   x5t: e.string().optional(),
   x5c: e.array(e.string()).optional(),
   use: e.enum(["sig", "enc"]).optional()
-}), At = e.object({
-  keys: e.array(Oe)
-}), It = e.object({
+}), Ut = e.object({
+  keys: e.array(je)
+}), kt = e.object({
   issuer: e.string(),
   authorization_endpoint: e.string(),
   token_endpoint: e.string(),
@@ -997,10 +1089,10 @@ const ie = e.object({
   request_uri_parameter_supported: e.boolean(),
   request_parameter_supported: e.boolean(),
   token_endpoint_auth_signing_alg_values_supported: e.array(e.string())
-}), ye = e.object({
+}), Ue = e.object({
   csrf_token: e.string(),
   auth0Client: e.string().optional(),
-  authParams: ie,
+  authParams: de,
   expires_at: e.string(),
   deleted_at: e.string().optional(),
   ip: e.string().optional(),
@@ -1010,14 +1102,14 @@ const ie = e.object({
   login_completed: e.boolean().optional().default(!1)
 }).openapi({
   description: "This represents a login sesion"
-}), Ct = e.object({
-  ...ye.shape,
+}), Ft = e.object({
+  ...Ue.shape,
   id: e.string().openapi({
     description: "This is is used as the state in the universal login"
   }),
   created_at: e.string(),
   updated_at: e.string()
-}), Te = {
+}), ke = {
   // Network & System
   ACLS_SUMMARY: "acls_summary",
   ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
@@ -1184,24 +1276,24 @@ const ie = e.object({
   WARNING_DURING_LOGIN: "w",
   WARNING_SENDING_NOTIFICATION: "wn",
   WARNING_USER_MANAGEMENT: "wum"
-}, Ne = e.string().refine(
-  (t) => Object.values(Te).includes(t),
+}, Fe = e.string().refine(
+  (t) => Object.values(ke).includes(t),
   { message: "Invalid log type" }
-), Re = e.object({
+), ve = e.object({
   name: e.string(),
   version: e.string(),
   env: e.object({
     node: e.string().optional()
   }).optional()
-}), Le = e.object({
+}), xe = e.object({
   country_code: e.string().length(2),
   city_name: e.string(),
   latitude: e.string(),
   longitude: e.string(),
   time_zone: e.string(),
   continent_code: e.string()
-}), De = e.object({
-  type: Ne,
+}), Pe = e.object({
+  type: Fe,
   date: e.string(),
   description: e.string().optional(),
   ip: e.string().optional(),
@@ -1220,19 +1312,19 @@ const ie = e.object({
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
   hostname: e.string().optional(),
-  auth0_client: Re.optional(),
+  auth0_client: ve.optional(),
   log_id: e.string().optional(),
-  location_info: Le.optional()
-}), Ot = e.object({
-  ...De.shape,
+  location_info: xe.optional()
+}), vt = e.object({
+  ...Pe.shape,
   log_id: e.string()
-}), we = e.object({
+}), Me = e.object({
   id: e.string().optional(),
   user_id: e.string(),
   password: e.string(),
   algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
   is_current: e.boolean().default(!0)
-}), yt = we.extend({
+}), xt = Me.extend({
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
@@ -1243,7 +1335,7 @@ const ie = e.object({
   last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
   last_ip: e.string().describe("Last IP address from which this user logged in"),
   last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), je = e.object({
+}), He = e.object({
   id: e.string(),
   revoked_at: e.string().optional(),
   used_at: e.string().optional(),
@@ -1255,13 +1347,13 @@ const ie = e.object({
     "Metadata related to the device used in the session"
   ),
   clients: e.array(e.string()).describe("List of client details for the session")
-}), Tt = e.object({
+}), Pt = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   authenticated_at: e.string(),
   last_interaction_at: e.string(),
-  ...je.shape
-}), Nt = e.object({
+  ...He.shape
+}), Mt = e.object({
   kid: e.string().openapi({ description: "The key id of the signing key" }),
   cert: e.string().openapi({ description: "The public certificate of the signing key" }),
   fingerprint: e.string().openapi({ description: "The cert fingerprint" }),
@@ -1287,8 +1379,8 @@ const ie = e.object({
     description: "The type of the signing key"
   })
 });
-var ke = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(ke || {});
-const Rt = e.object({
+var Ge = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(Ge || {});
+const Ht = e.object({
   access_token: e.string(),
   id_token: e.string().optional(),
   scope: e.string().optional(),
@@ -1301,7 +1393,7 @@ e.object({
   code: e.string(),
   state: e.string().optional()
 });
-const Ue = e.object({
+const Ke = e.object({
   button_border_radius: e.number(),
   button_border_weight: e.number(),
   buttons_style: e.enum(["pill", "rounded", "sharp"]),
@@ -1311,7 +1403,7 @@ const Ue = e.object({
   show_widget_shadow: e.boolean(),
   widget_border_weight: e.number(),
   widget_corner_radius: e.number()
-}), Fe = e.object({
+}), Be = e.object({
   base_focus_color: e.string(),
   base_hover_color: e.string(),
   body_text: e.string(),
@@ -1331,44 +1423,44 @@ const Ue = e.object({
   success: e.string(),
   widget_background: e.string(),
   widget_border: e.string()
-}), a = e.object({
+}), s = e.object({
   bold: e.boolean(),
   size: e.number()
-}), ve = e.object({
-  body_text: a,
-  buttons_text: a,
+}), ze = e.object({
+  body_text: s,
+  buttons_text: s,
   font_url: e.string(),
-  input_labels: a,
-  links: a,
+  input_labels: s,
+  links: s,
   links_style: e.enum(["normal", "underlined"]),
   reference_text_size: e.number(),
-  subtitle: a,
-  title: a
-}), Pe = e.object({
+  subtitle: s,
+  title: s
+}), We = e.object({
   background_color: e.string(),
   background_image_url: e.string(),
   page_layout: e.enum(["center", "left", "right"])
-}), xe = e.object({
+}), Xe = e.object({
   header_text_alignment: e.enum(["center", "left", "right"]),
   logo_height: e.number(),
   logo_position: e.enum(["center", "left", "none", "right"]),
   logo_url: e.string(),
   social_buttons_layout: e.enum(["bottom", "top"])
-}), Me = e.object({
-  borders: Ue,
-  colors: Fe,
+}), Ve = e.object({
+  borders: Ke,
+  colors: Be,
   displayName: e.string(),
-  fonts: ve,
-  page_background: Pe,
-  widget: xe
-}), Lt = Me.extend({
+  fonts: ze,
+  page_background: We,
+  widget: Xe
+}), Gt = Ve.extend({
   themeId: e.string()
-}), Dt = e.object({
+}), Kt = e.object({
   universal_login_experience: e.enum(["new", "classic"]).default("new"),
   identifier_first: e.boolean().default(!0),
   password_first: e.boolean().default(!1),
   webauthn_platform_first_factor: e.boolean()
-}), wt = e.object({
+}), Bt = e.object({
   name: e.string(),
   enabled: e.boolean().optional().default(!0),
   default_from_address: e.string().optional(),
@@ -1398,7 +1490,7 @@ const Ue = e.object({
     })
   ]),
   settings: e.object({}).optional()
-}), He = e.object({
+}), qe = e.object({
   // The actual refresh token value (primary key).
   id: e.string(),
   // Link to the session record
@@ -1419,21 +1511,21 @@ const Ue = e.object({
     })
   ),
   rotating: e.boolean()
-}), jt = e.object({
+}), zt = e.object({
   // When the refresh token record was created.
   created_at: e.string(),
   // Spread in the rest of the refresh token properties.
-  ...He.shape
-}), kt = e.object({
+  ...qe.shape
+}), Wt = e.object({
   to: e.string(),
   message: e.string()
-}), Ut = e.object({
+}), Xt = e.object({
   name: e.string(),
   options: e.object({})
-}), Ge = e.object({
+}), Ye = e.object({
   value: e.string(),
   description: e.string().optional()
-}), Ke = e.object({
+}), Qe = e.object({
   token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
   enforce_policies: e.boolean().optional(),
   allow_skipping_userinfo: e.boolean().optional(),
@@ -1443,10 +1535,10 @@ const Ue = e.object({
   mtls: e.object({
     bound_access_tokens: e.boolean().optional()
   }).optional()
-}), Be = e.object({
+}), Je = e.object({
   name: e.string(),
   identifier: e.string(),
-  scopes: e.array(Ge).optional(),
+  scopes: e.array(Ye).optional(),
   signing_alg: e.string().optional(),
   signing_secret: e.string().optional(),
   token_lifetime: e.number().optional(),
@@ -1454,29 +1546,29 @@ const Ue = e.object({
   skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
   allow_offline_access: e.boolean().optional(),
   verificationKey: e.string().optional(),
-  options: Ke.optional()
-}), ze = e.object({
+  options: Qe.optional()
+}), Ze = e.object({
   id: e.string().optional(),
-  ...Be.shape,
+  ...Je.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Ft = e.array(ze), We = e.object({
+}), Vt = e.array(Ze), $e = e.object({
   role_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string()
-}), Xe = e.object({
-  ...We.shape,
+}), et = e.object({
+  ...$e.shape,
   created_at: e.string()
-}), vt = e.array(Xe), Ve = e.object({
+}), qt = e.array(et), tt = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string(),
   organization_id: e.string().optional()
-}), qe = e.object({
-  ...Ve.shape,
+}), ot = e.object({
+  ...tt.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), Pt = e.array(qe), Ye = e.object({
+}), Yt = e.array(ot), nt = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   resource_server_name: e.string(),
@@ -1484,31 +1576,31 @@ const Ue = e.object({
   description: e.string().nullable().optional(),
   created_at: e.string().optional(),
   organization_id: e.string().optional()
-}), xt = e.array(
-  Ye
-), Qe = e.object({
+}), Qt = e.array(
+  nt
+), it = e.object({
   user_id: e.string(),
   role_id: e.string(),
   organization_id: e.string().optional()
-}), Je = e.object({
-  ...Qe.shape,
+}), at = e.object({
+  ...it.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), Mt = e.array(Je), Ze = e.object({
+}), Jt = e.array(at), st = e.object({
   name: e.string().min(1).max(50).openapi({
     description: "The name of the role. Cannot include '<' or '>'"
   }),
   description: e.string().max(255).optional().openapi({
     description: "The description of the role"
   })
-}), $e = e.object({
+}), rt = e.object({
   id: e.string().openapi({
     description: "The unique identifier of the role"
   }),
-  ...Ze.shape,
+  ...st.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Ht = e.array($e), et = e.object({
+}), Zt = e.array(rt), lt = e.object({
   logo_url: e.string().optional().openapi({
     description: "URL of the organization's logo"
   }),
@@ -1520,7 +1612,7 @@ const Ue = e.object({
       description: "Page background color in hex format (e.g., #FFFFFF)"
     })
   }).optional()
-}).optional(), tt = e.object({
+}).optional(), ct = e.object({
   connection_id: e.string().openapi({
     description: "ID of the connection"
   }),
@@ -1533,7 +1625,7 @@ const Ue = e.object({
   is_signup_enabled: e.boolean().default(!0).openapi({
     description: "Whether signup is enabled for this connection"
   })
-}), ot = e.object({
+}), pt = e.object({
   client_credentials: e.object({
     enforce: e.boolean().default(!1).openapi({
       description: "Whether to enforce token quota limits"
@@ -1545,7 +1637,7 @@ const Ue = e.object({
       description: "Maximum tokens per hour (0 = unlimited)"
     })
   }).optional()
-}).optional(), nt = e.object({
+}).optional(), _t = e.object({
   id: e.string().optional(),
   name: e.string().min(1).openapi({
     description: "The name of the organization"
@@ -1553,30 +1645,30 @@ const Ue = e.object({
   display_name: e.string().optional().openapi({
     description: "The display name of the organization"
   }),
-  branding: et,
+  branding: lt,
   metadata: e.record(e.any()).default({}).optional().openapi({
     description: "Custom metadata for the organization"
   }),
-  enabled_connections: e.array(tt).default([]).optional().openapi({
+  enabled_connections: e.array(ct).default([]).optional().openapi({
     description: "List of enabled connections for the organization"
   }),
-  token_quota: ot
-}), Gt = e.object({
-  ...nt.shape,
-  ...s.shape,
+  token_quota: pt
+}), $t = e.object({
+  ..._t.shape,
+  ...i.shape,
   id: e.string()
-}), it = e.object({
+}), dt = e.object({
   user_id: e.string().openapi({
     description: "ID of the user"
   }),
   organization_id: e.string().openapi({
     description: "ID of the organization"
   })
-}), Kt = e.object({
-  ...it.shape,
-  ...s.shape,
+}), eo = e.object({
+  ...dt.shape,
+  ...i.shape,
   id: e.string()
-}), Bt = e.object({
+}), to = e.object({
   // Session settings
   idle_session_lifetime: e.number().optional(),
   session_lifetime: e.number().optional(),
@@ -1645,7 +1737,7 @@ const Ue = e.object({
   sessions: e.object({
     oidc_logout_prompt_enabled: e.boolean().optional()
   }).optional()
-}), zt = e.object({
+}), oo = e.object({
   date: e.string().openapi({
     description: "Date these events occurred in ISO 8601 format",
     example: "2025-12-19"
@@ -1670,182 +1762,194 @@ const Ue = e.object({
     description: "Approximate date and time the first event occurred in ISO 8601 format",
     example: "2025-12-19T00:00:00.000Z"
   })
-}), Wt = e.number().openapi({
+}), no = e.number().openapi({
   description: "Number of active users in the last 30 days",
   example: 1234
 });
-function Xt(t) {
-  const [n, i] = t.split("|");
-  if (!n || !i)
+function io(t) {
+  const [n, a] = t.split("|");
+  if (!n || !a)
     throw new Error(`Invalid user_id: ${t}`);
-  return { connection: n, id: i };
+  return { connection: n, id: a };
 }
-function Vt(t) {
+function ao(t) {
   const {
     primary: n,
-    secondaries: i,
+    secondaries: a,
     syncMethods: L = ["create", "update", "remove", "delete", "set"]
   } = t, D = {
-    get(_, o) {
+    get(p, o) {
       if (typeof o == "symbol")
-        return _[o];
-      const p = _[o];
-      return typeof p != "function" ? p : L.includes(o) ? async (...u) => {
-        const w = await p.apply(_, u), m = [];
-        for (const r of i) {
-          const h = r.adapter[o];
+        return p[o];
+      const _ = p[o];
+      return typeof _ != "function" ? _ : L.includes(o) ? async (...u) => {
+        const w = await _.apply(p, u), m = [];
+        for (const l of a) {
+          const h = l.adapter[o];
           if (typeof h != "function")
             continue;
           const j = (async () => {
             try {
-              await h.apply(r.adapter, u);
+              await h.apply(l.adapter, u);
             } catch (b) {
               try {
-                r.onError ? r.onError(b, o, u) : console.error(
+                l.onError ? l.onError(b, o, u) : console.error(
                   `Passthrough adapter: secondary write failed for ${o}:`,
                   b
                 );
-              } catch (k) {
+              } catch (U) {
                 console.error(
                   `Passthrough adapter: onError handler threw for ${o}:`,
-                  k
+                  U
                 );
               }
             }
           })();
-          r.blocking && m.push(j);
+          l.blocking && m.push(j);
         }
         return m.length > 0 && await Promise.all(m), w;
-      } : p.bind(_);
+      } : _.bind(p);
     }
   };
   return new Proxy(n, D);
 }
-function qt(t) {
+function so(t) {
   return t;
 }
 export {
-  Re as Auth0Client,
+  mt as Auth0ActionEnum,
+  ve as Auth0Client,
   C as AuthorizationResponseMode,
   I as AuthorizationResponseType,
   O as CodeChallengeMethod,
   A as ComponentCategory,
   S as ComponentType,
-  ke as GrantType,
-  Le as LocationInfo,
-  Te as LogTypes,
-  Q as NodeType,
-  Wt as activeUsersResponseSchema,
-  pt as auth0FlowInsertSchema,
-  ne as auth0FlowSchema,
-  st as auth0QuerySchema,
-  lt as auth0UserResponseSchema,
-  ie as authParamsSchema,
+  ht as EmailActionEnum,
+  ut as FlowActionTypeEnum,
+  Ge as GrantType,
+  xe as LocationInfo,
+  ke as LogTypes,
+  ne as NodeType,
+  x as RedirectTargetEnum,
+  se as actionNodeSchema,
+  no as activeUsersResponseSchema,
+  Ct as auth0FlowInsertSchema,
+  _e as auth0FlowSchema,
+  ft as auth0QuerySchema,
+  F as auth0UpdateUserActionSchema,
+  St as auth0UserResponseSchema,
+  de as authParamsSchema,
   E as baseUserSchema,
-  Ue as bordersSchema,
-  dt as brandingSchema,
-  W as buttonComponentSchema,
-  K as clientGrantInsertSchema,
-  _t as clientGrantListSchema,
-  B as clientGrantSchema,
-  H as clientInsertSchema,
-  G as clientSchema,
-  pe as codeInsertSchema,
-  ut as codeSchema,
-  _e as codeTypeSchema,
-  Fe as colorsSchema,
-  Y as componentSchema,
-  se as connectionInsertSchema,
-  ae as connectionOptionsSchema,
-  re as connectionSchema,
-  c as coordinatesSchema,
-  Vt as createPassthroughAdapter,
-  qt as createWriteOnlyAdapter,
-  de as customDomainInsertSchema,
-  ue as customDomainSchema,
-  mt as customDomainWithTenantIdSchema,
-  zt as dailyStatsSchema,
-  wt as emailProviderSchema,
-  oe as endingSchema,
-  V as fieldComponentSchema,
-  Z as flowNodeSchema,
-  a as fontDetailsSchema,
-  ve as fontsSchema,
-  ht as formControlSchema,
-  he as formInsertSchema,
-  me as formNodeComponentDefinition,
-  bt as formSchema,
-  q as genericComponentSchema,
-  $ as genericNodeSchema,
-  ft as hookInsertSchema,
-  Et as hookSchema,
-  F as identitySchema,
-  Ce as inviteInsertSchema,
-  St as inviteSchema,
-  Ie as inviteeSchema,
-  Ae as inviterSchema,
-  At as jwksKeySchema,
-  Oe as jwksSchema,
-  gt as legacyClientSchema,
-  X as legalComponentSchema,
-  De as logInsertSchema,
-  Ot as logSchema,
-  ye as loginSessionInsertSchema,
-  Ct as loginSessionSchema,
-  ee as nodeSchema,
-  It as openIDConfigurationSchema,
-  et as organizationBrandingSchema,
-  tt as organizationEnabledConnectionSchema,
-  nt as organizationInsertSchema,
-  Gt as organizationSchema,
-  ot as organizationTokenQuotaSchema,
-  Pe as pageBackgroundSchema,
-  Xt as parseUserId,
-  we as passwordInsertSchema,
-  yt as passwordSchema,
-  U as profileDataSchema,
-  Dt as promptSettingSchema,
-  He as refreshTokenInsertSchema,
-  jt as refreshTokenSchema,
-  Be as resourceServerInsertSchema,
-  Ft as resourceServerListSchema,
-  Ke as resourceServerOptionsSchema,
-  ze as resourceServerSchema,
-  Ge as resourceServerScopeSchema,
-  z as richTextComponentSchema,
-  Ze as roleInsertSchema,
-  Ht as roleListSchema,
-  We as rolePermissionInsertSchema,
-  vt as rolePermissionListSchema,
-  Xe as rolePermissionSchema,
-  $e as roleSchema,
-  je as sessionInsertSchema,
-  Tt as sessionSchema,
-  Nt as signingKeySchema,
-  Ut as smsProviderSchema,
-  kt as smsSendParamsSchema,
-  te as startSchema,
-  J as stepNodeSchema,
-  le as tenantInsertSchema,
-  ce as tenantSchema,
-  Bt as tenantSettingsSchema,
-  Me as themeInsertSchema,
-  Lt as themeSchema,
-  Rt as tokenResponseSchema,
-  rt as totalsSchema,
-  v as userInsertSchema,
-  it as userOrganizationInsertSchema,
-  Kt as userOrganizationSchema,
-  Ve as userPermissionInsertSchema,
-  Pt as userPermissionListSchema,
-  qe as userPermissionSchema,
-  xt as userPermissionWithDetailsListSchema,
-  Ye as userPermissionWithDetailsSchema,
-  ct as userResponseSchema,
-  Qe as userRoleInsertSchema,
-  Mt as userRoleListSchema,
-  Je as userRoleSchema,
-  P as userSchema,
-  ge as verificationMethodsSchema,
-  xe as widgetSchema
+  Ke as bordersSchema,
+  Ot as brandingSchema,
+  Z as buttonComponentSchema,
+  Y as clientGrantInsertSchema,
+  It as clientGrantListSchema,
+  Q as clientGrantSchema,
+  V as clientInsertSchema,
+  q as clientSchema,
+  Ee as codeInsertSchema,
+  yt as codeSchema,
+  fe as codeTypeSchema,
+  Be as colorsSchema,
+  oe as componentSchema,
+  ue as connectionInsertSchema,
+  ge as connectionOptionsSchema,
+  me as connectionSchema,
+  r as coordinatesSchema,
+  ao as createPassthroughAdapter,
+  so as createWriteOnlyAdapter,
+  Se as customDomainInsertSchema,
+  Ie as customDomainSchema,
+  Nt as customDomainWithTenantIdSchema,
+  oo as dailyStatsSchema,
+  Bt as emailProviderSchema,
+  k as emailVerificationRulesSchema,
+  v as emailVerifyActionSchema,
+  pe as endingSchema,
+  ee as fieldComponentSchema,
+  M as flowActionStepSchema,
+  H as flowInsertSchema,
+  ae as flowNodeSchema,
+  bt as flowSchema,
+  s as fontDetailsSchema,
+  ze as fontsSchema,
+  Rt as formControlSchema,
+  Oe as formInsertSchema,
+  Ce as formNodeComponentDefinition,
+  Lt as formSchema,
+  te as genericComponentSchema,
+  re as genericNodeSchema,
+  Dt as hookInsertSchema,
+  wt as hookSchema,
+  K as identitySchema,
+  we as inviteInsertSchema,
+  jt as inviteSchema,
+  De as inviteeSchema,
+  Le as inviterSchema,
+  Ut as jwksKeySchema,
+  je as jwksSchema,
+  Tt as legacyClientSchema,
+  $ as legalComponentSchema,
+  Pe as logInsertSchema,
+  vt as logSchema,
+  Ue as loginSessionInsertSchema,
+  Ft as loginSessionSchema,
+  le as nodeSchema,
+  kt as openIDConfigurationSchema,
+  lt as organizationBrandingSchema,
+  ct as organizationEnabledConnectionSchema,
+  _t as organizationInsertSchema,
+  $t as organizationSchema,
+  pt as organizationTokenQuotaSchema,
+  We as pageBackgroundSchema,
+  io as parseUserId,
+  Me as passwordInsertSchema,
+  xt as passwordSchema,
+  G as profileDataSchema,
+  Kt as promptSettingSchema,
+  P as redirectActionSchema,
+  qe as refreshTokenInsertSchema,
+  zt as refreshTokenSchema,
+  Je as resourceServerInsertSchema,
+  Vt as resourceServerListSchema,
+  Qe as resourceServerOptionsSchema,
+  Ze as resourceServerSchema,
+  Ye as resourceServerScopeSchema,
+  J as richTextComponentSchema,
+  st as roleInsertSchema,
+  Zt as roleListSchema,
+  $e as rolePermissionInsertSchema,
+  qt as rolePermissionListSchema,
+  et as rolePermissionSchema,
+  rt as roleSchema,
+  He as sessionInsertSchema,
+  Pt as sessionSchema,
+  Mt as signingKeySchema,
+  Xt as smsProviderSchema,
+  Wt as smsSendParamsSchema,
+  ce as startSchema,
+  ie as stepNodeSchema,
+  he as tenantInsertSchema,
+  be as tenantSchema,
+  to as tenantSettingsSchema,
+  Ve as themeInsertSchema,
+  Gt as themeSchema,
+  Ht as tokenResponseSchema,
+  Et as totalsSchema,
+  B as userInsertSchema,
+  dt as userOrganizationInsertSchema,
+  eo as userOrganizationSchema,
+  tt as userPermissionInsertSchema,
+  Yt as userPermissionListSchema,
+  ot as userPermissionSchema,
+  Qt as userPermissionWithDetailsListSchema,
+  nt as userPermissionWithDetailsSchema,
+  At as userResponseSchema,
+  it as userRoleInsertSchema,
+  Jt as userRoleListSchema,
+  at as userRoleSchema,
+  z as userSchema,
+  Ae as verificationMethodsSchema,
+  Xe as widgetSchema
 };