@authhero/adapter-interfaces 0.115.0 → 0.116.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1 +1 @@
1
- "use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("@hono/zod-openapi"),r=e.z.object({created_at:e.z.string(),updated_at:e.z.string()}),gt=e.z.enum(["AUTH0","EMAIL","REDIRECT"]),mt=e.z.enum(["CREATE_USER","GET_USER","UPDATE_USER","SEND_REQUEST","SEND_EMAIL"]),ut=e.z.enum(["VERIFY_EMAIL"]),R=e.z.object({require_mx_record:e.z.boolean().optional(),block_aliases:e.z.boolean().optional(),block_free_emails:e.z.boolean().optional(),block_disposable_emails:e.z.boolean().optional(),blocklist:e.z.array(e.z.string()).optional(),allowlist:e.z.array(e.z.string()).optional()}),L=e.z.object({id:e.z.string(),alias:e.z.string().max(100).optional(),type:e.z.literal("AUTH0"),action:e.z.literal("UPDATE_USER"),allow_failure:e.z.boolean().optional(),mask_output:e.z.boolean().optional(),params:e.z.object({connection_id:e.z.string().optional(),user_id:e.z.string(),changes:e.z.record(e.z.string(),e.z.any())})}),D=e.z.object({id:e.z.string(),alias:e.z.string().max(100).optional(),type:e.z.literal("EMAIL"),action:e.z.literal("VERIFY_EMAIL"),allow_failure:e.z.boolean().optional(),mask_output:e.z.boolean().optional(),params:e.z.object({email:e.z.string(),rules:R.optional()})}),w=e.z.enum(["change-email","account","custom"]),j=e.z.object({id:e.z.string(),alias:e.z.string().max(100).optional(),type:e.z.literal("REDIRECT"),action:e.z.literal("REDIRECT_USER"),allow_failure:e.z.boolean().optional(),mask_output:e.z.boolean().optional(),params:e.z.object({target:w.openapi({description:"The predefined target to redirect to, or 'custom' for a custom URL"}),custom_url:e.z.string().optional().openapi({description:"Custom URL to redirect to when target is 'custom'"})})}),k=e.z.union([L,D,j]),U=e.z.object({name:e.z.string().min(1).max(150).openapi({description:"The name of the flow"}),actions:e.z.array(k).optional().default([]).openapi({description:"The list of actions to execute in sequence"})}),ht=U.extend({...r.shape,id:e.z.string().openapi({description:"Unique identifier for the flow",example:"af_12tMpdJ3iek7svMyZkSh5M"})}),St=e.z.object({page:e.z.string().min(0).optional().default("0").transform(t=>parseInt(t,10)).openapi({description:"The page number where 0 is the first page"}),per_page:e.z.string().min(1).optional().default("10").transform(t=>parseInt(t,10)).openapi({description:"The number of items per page"}),include_totals:e.z.string().optional().default("false").transform(t=>t==="true").openapi({description:"If the total number of items should be included in the response"}),sort:e.z.string().regex(/^.+:(-1|1)$/).optional().openapi({description:"A property that should have the format 'string:-1' or 'string:1'"}),q:e.z.string().optional().openapi({description:"A lucene query string used to filter the results"})}),bt=e.z.object({start:e.z.number(),limit:e.z.number(),length:e.z.number(),total:e.z.number().optional()}),F=e.z.object({email:e.z.string().optional(),email_verified:e.z.boolean().optional(),name:e.z.string().optional(),username:e.z.string().optional(),given_name:e.z.string().optional(),phone_number:e.z.string().optional(),phone_verified:e.z.boolean().optional(),family_name:e.z.string().optional()}).catchall(e.z.any()),v=e.z.object({connection:e.z.string(),user_id:e.z.string(),provider:e.z.string(),isSocial:e.z.boolean(),access_token:e.z.string().optional(),access_token_secret:e.z.string().optional(),refresh_token:e.z.string().optional(),profileData:F.optional()}),S=e.z.object({email:e.z.string().optional().transform(t=>t&&t.toLowerCase()),username:e.z.string().optional(),phone_number:e.z.string().optional(),given_name:e.z.string().optional(),family_name:e.z.string().optional(),nickname:e.z.string().optional(),name:e.z.string().optional(),picture:e.z.string().optional(),locale:e.z.string().optional(),linked_to:e.z.string().optional(),profileData:e.z.string().optional(),user_id:e.z.string().optional(),app_metadata:e.z.any().default({}).optional(),user_metadata:e.z.any().default({}).optional()}),x=S.extend({email_verified:e.z.boolean().default(!1),verify_email:e.z.boolean().optional(),last_ip:e.z.string().optional(),last_login:e.z.string().optional(),user_id:e.z.string().optional(),provider:e.z.string().optional(),connection:e.z.string(),is_social:e.z.boolean().optional()}),P=e.z.object({...x.shape,...r.shape,user_id:e.z.string(),provider:e.z.string(),is_social:e.z.boolean(),email:e.z.string().optional(),login_count:e.z.number().default(0),identities:e.z.array(v).optional()}),ft=P,Et=S.extend({login_count:e.z.number(),multifactor:e.z.array(e.z.string()).optional(),last_ip:e.z.string().optional(),last_login:e.z.string().optional(),user_id:e.z.string()}).catchall(e.z.any()),At="useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";let It=(t=21)=>{let a="",c=crypto.getRandomValues(new Uint8Array(t|=0));for(;t--;)a+=At[c[t]&63];return a};const M=e.z.object({client_id:e.z.string().openapi({description:"ID of this client."}),name:e.z.string().min(1).openapi({description:"Name of this client (min length: 1 character, does not allow < or >)."}),description:e.z.string().max(140).optional().openapi({description:"Free text description of this client (max length: 140 characters)."}),global:e.z.boolean().default(!1).openapi({description:"Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)."}),client_secret:e.z.string().default(()=>It()).optional().openapi({description:"Client secret (which you must not make public)."}),app_type:e.z.enum(["native","spa","regular_web","non_interactive","resource_server","express_configuration","rms","box","cloudbees","concur","dropbox","mscrm","echosign","egnyte","newrelic","office365","salesforce","sentry","sharepoint","slack","springcm","zendesk","zoom","sso_integration","oag"]).default("regular_web").optional().openapi({description:"The type of application this client represents"}),logo_uri:e.z.string().url().optional().openapi({description:"URL of the logo to display for this client. Recommended size is 150x150 pixels."}),is_first_party:e.z.boolean().default(!1).openapi({description:"Whether this client a first party client (true) or not (false)."}),oidc_conformant:e.z.boolean().default(!0).openapi({description:"Whether this client conforms to strict OIDC specifications (true) or uses legacy features (false)."}),callbacks:e.z.array(e.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs whitelisted for Auth0 to use as a callback to the client after authentication."}),allowed_origins:e.z.array(e.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs allowed to make requests from JavaScript to Auth0 API (typically used with CORS). By default, all your callback URLs will be allowed. This field allows you to enter other origins if necessary. You can also use wildcards at the subdomain level (e.g., https://*.contoso.com). Query strings and hash information are not taken into account when validating these URLs."}),web_origins:e.z.array(e.z.string()).default([]).optional().openapi({description:"Comma-separated list of allowed origins for use with Cross-Origin Authentication, Device Flow, and web message response mode."}),client_aliases:e.z.array(e.z.string()).default([]).optional().openapi({description:"List of audiences/realms for SAML protocol. Used by the wsfed addon."}),allowed_clients:e.z.array(e.z.string()).default([]).optional().openapi({description:"List of allow clients and API ids that are allowed to make delegation requests. Empty means all all your clients are allowed."}),connections:e.z.array(e.z.string()).default([]).optional().openapi({description:"List of connection IDs enabled for this client. The order determines the display order on the login page."}),allowed_logout_urls:e.z.array(e.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs that are valid to redirect to after logout from Auth0. Wildcards are allowed for subdomains."}),session_transfer:e.z.record(e.z.any()).default({}).optional().openapi({description:"Native to Web SSO Configuration"}),oidc_logout:e.z.record(e.z.any()).default({}).optional().openapi({description:"Configuration for OIDC backchannel logout"}),grant_types:e.z.array(e.z.string()).default([]).optional().openapi({description:"List of grant types supported for this application. Can include authorization_code, implicit, refresh_token, client_credentials, password, http://auth0.com/oauth/grant-type/password-realm, http://auth0.com/oauth/grant-type/mfa-oob, http://auth0.com/oauth/grant-type/mfa-otp, http://auth0.com/oauth/grant-type/mfa-recovery-code, urn:openid:params:grant-type:ciba, and urn:ietf:params:oauth:grant-type:device_code."}),jwt_configuration:e.z.record(e.z.any()).default({}).optional().openapi({description:"Configuration related to JWTs for the client."}),signing_keys:e.z.array(e.z.record(e.z.any())).default([]).optional().openapi({description:"Signing certificates associated with this client."}),encryption_key:e.z.record(e.z.any()).default({}).optional().openapi({description:"Encryption used for WsFed responses with this client."}),sso:e.z.boolean().default(!1).openapi({description:"Applies only to SSO clients and determines whether Auth0 will handle Single Sign On (true) or whether the Identity Provider will (false)."}),sso_disabled:e.z.boolean().default(!0).openapi({description:"Whether Single Sign On is disabled (true) or enabled (true). Defaults to true."}),cross_origin_authentication:e.z.boolean().default(!1).openapi({description:"Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false)."}),cross_origin_loc:e.z.string().url().optional().openapi({description:"URL of the location in your site where the cross origin verification takes place for the cross-origin auth flow when performing Auth in your own domain instead of Auth0 hosted login page."}),custom_login_page_on:e.z.boolean().default(!1).openapi({description:"Whether a custom login page is to be used (true) or the default provided login page (false)."}),custom_login_page:e.z.string().optional().openapi({description:"The content (HTML, CSS, JS) of the custom login page."}),custom_login_page_preview:e.z.string().optional().openapi({description:"The content (HTML, CSS, JS) of the custom login page. (Used on Previews)"}),form_template:e.z.string().optional().openapi({description:"HTML form template to be used for WS-Federation."}),addons:e.z.record(e.z.any()).default({}).optional().openapi({description:"Addons enabled for this client and their associated configurations."}),token_endpoint_auth_method:e.z.enum(["none","client_secret_post","client_secret_basic"]).default("client_secret_basic").optional().openapi({description:"Defines the requested authentication method for the token endpoint. Can be none (public client without a client secret), client_secret_post (client uses HTTP POST parameters), or client_secret_basic (client uses HTTP Basic)."}),client_metadata:e.z.record(e.z.string().max(255)).default({}).optional().openapi({description:'Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/()<>@ [Tab][Space]'}),mobile:e.z.record(e.z.any()).default({}).optional().openapi({description:"Additional configuration for native mobile apps."}),initiate_login_uri:e.z.string().url().optional().openapi({description:"Initiate login uri, must be https"}),native_social_login:e.z.record(e.z.any()).default({}).optional(),refresh_token:e.z.record(e.z.any()).default({}).optional().openapi({description:"Refresh token configuration"}),default_organization:e.z.record(e.z.any()).default({}).optional().openapi({description:"Defines the default Organization ID and flows"}),organization_usage:e.z.enum(["deny","allow","require"]).default("deny").optional().openapi({description:"Defines how to proceed during an authentication transaction with regards an organization. Can be deny (default), allow or require."}),organization_require_behavior:e.z.enum(["no_prompt","pre_login_prompt","post_login_prompt"]).default("no_prompt").optional().openapi({description:"Defines how to proceed during an authentication transaction when client.organization_usage: 'require'. Can be no_prompt (default), pre_login_prompt or post_login_prompt. post_login_prompt requires oidc_conformant: true."}),client_authentication_methods:e.z.record(e.z.any()).default({}).optional().openapi({description:"Defines client authentication methods."}),require_pushed_authorization_requests:e.z.boolean().default(!1).openapi({description:"Makes the use of Pushed Authorization Requests mandatory for this client"}),require_proof_of_possession:e.z.boolean().default(!1).openapi({description:"Makes the use of Proof-of-Possession mandatory for this client"}),signed_request_object:e.z.record(e.z.any()).default({}).optional().openapi({description:"JWT-secured Authorization Requests (JAR) settings."}),compliance_level:e.z.enum(["none","fapi1_adv_pkj_par","fapi1_adv_mtls_par","fapi2_sp_pkj_mtls","fapi2_sp_mtls_mtls"]).optional().openapi({description:"Defines the compliance level for this client, which may restrict it's capabilities"}),par_request_expiry:e.z.number().optional().openapi({description:"Specifies how long, in seconds, a Pushed Authorization Request URI remains valid"}),token_quota:e.z.record(e.z.any()).default({}).optional()}),H=e.z.object({created_at:e.z.string(),updated_at:e.z.string(),...M.shape}),G=e.z.object({client_id:e.z.string().min(1).openapi({description:"ID of the client."}),audience:e.z.string().min(1).openapi({description:"The audience (API identifier) of this client grant."}),scope:e.z.array(e.z.string()).optional().openapi({description:"Scopes allowed for this client grant."}),organization_usage:e.z.enum(["deny","allow","require"]).optional().openapi({description:"Defines whether organizations can be used with client credentials exchanges for this grant."}),allow_any_organization:e.z.boolean().optional().openapi({description:"If enabled, any organization can be used with this grant. If disabled (default), the grant must be explicitly assigned to the desired organizations."}),is_system:e.z.boolean().optional().openapi({description:"If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly."}),subject_type:e.z.enum(["client","user"]).optional().openapi({description:"The type of application access the client grant allows. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement."}),authorization_details_types:e.z.array(e.z.string()).optional().openapi({description:"Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement."})}),B=e.z.object({id:e.z.string().openapi({description:"ID of the client grant."}),...G.shape,created_at:e.z.string().optional(),updated_at:e.z.string().optional()}),Ct=e.z.array(B),l=e.z.object({x:e.z.number(),y:e.z.number()});var b=(t=>(t.RICH_TEXT="RICH_TEXT",t.NEXT_BUTTON="NEXT_BUTTON",t.BACK_BUTTON="BACK_BUTTON",t.SUBMIT_BUTTON="SUBMIT_BUTTON",t.DIVIDER="DIVIDER",t.TEXT="TEXT",t.EMAIL="EMAIL",t.PASSWORD="PASSWORD",t.NUMBER="NUMBER",t.PHONE="PHONE",t.DATE="DATE",t.CHECKBOX="CHECKBOX",t.RADIO="RADIO",t.SELECT="SELECT",t.HIDDEN="HIDDEN",t.LEGAL="LEGAL",t))(b||{}),f=(t=>(t.BLOCK="BLOCK",t.FIELD="FIELD",t))(f||{});const g=e.z.object({id:e.z.string(),category:e.z.nativeEnum(f),type:e.z.nativeEnum(b)}),K=g.extend({category:e.z.literal("BLOCK"),type:e.z.literal("RICH_TEXT"),config:e.z.object({content:e.z.string()}).passthrough()}),W=g.extend({category:e.z.literal("BLOCK"),type:e.z.union([e.z.literal("NEXT_BUTTON"),e.z.literal("BACK_BUTTON"),e.z.literal("SUBMIT_BUTTON")]),config:e.z.object({text:e.z.string()}).passthrough()}),V=g.extend({category:e.z.literal("FIELD"),type:e.z.literal("LEGAL"),required:e.z.boolean().optional(),sensitive:e.z.boolean().optional(),config:e.z.object({text:e.z.string()}).passthrough()}),X=g.extend({category:e.z.literal("FIELD"),type:e.z.union([e.z.literal("TEXT"),e.z.literal("EMAIL"),e.z.literal("PASSWORD"),e.z.literal("NUMBER"),e.z.literal("PHONE"),e.z.literal("DATE"),e.z.literal("CHECKBOX"),e.z.literal("RADIO"),e.z.literal("SELECT"),e.z.literal("HIDDEN")]),required:e.z.boolean().optional(),sensitive:e.z.boolean().optional(),config:e.z.object({label:e.z.string().optional(),placeholder:e.z.string().optional()}).passthrough()}),q=e.z.object({id:e.z.string(),category:e.z.string(),type:e.z.string()}).passthrough(),Y=e.z.union([K,W,V,X,q]);var Q=(t=>(t.STEP="STEP",t.FLOW="FLOW",t.CONDITION="CONDITION",t.ACTION="ACTION",t))(Q||{});const J=e.z.object({id:e.z.string(),type:e.z.literal("STEP"),coordinates:l,alias:e.z.string().optional(),config:e.z.object({components:e.z.array(Y),next_node:e.z.string()}).passthrough()}),Z=e.z.object({id:e.z.string(),type:e.z.literal("FLOW"),coordinates:l,alias:e.z.string().optional(),config:e.z.object({flow_id:e.z.string(),next_node:e.z.string()})}),$=e.z.object({id:e.z.string(),type:e.z.literal("ACTION"),coordinates:l,alias:e.z.string().optional(),config:e.z.object({action_type:e.z.enum(["REDIRECT"]).openapi({description:"The type of action to perform"}),target:e.z.enum(["change-email","account","custom"]).openapi({description:"The predefined target to redirect to"}),custom_url:e.z.string().optional().openapi({description:"Custom URL when target is 'custom'"}),next_node:e.z.string().openapi({description:"The next node to navigate to after action (for non-redirect actions)"})}).passthrough()}),ee=e.z.object({id:e.z.string(),type:e.z.string(),coordinates:l}).passthrough(),te=e.z.union([J,Z,$,ee]),oe=e.z.object({next_node:e.z.string(),coordinates:l}).passthrough(),ne=e.z.object({resume_flow:e.z.boolean().optional(),coordinates:l}).passthrough(),ie=e.z.object({id:e.z.string(),name:e.z.string(),languages:e.z.object({primary:e.z.string()}).passthrough(),nodes:e.z.array(te),start:oe,ending:ne,created_at:e.z.string(),updated_at:e.z.string(),links:e.z.object({sdkSrc:e.z.string().optional(),sdk_src:e.z.string().optional()}).passthrough()}).passthrough(),yt=ie.omit({id:!0,created_at:!0,updated_at:!0});var E=(t=>(t.TOKEN="token",t.TOKEN_ID_TOKEN="token id_token",t.CODE="code",t))(E||{}),A=(t=>(t.QUERY="query",t.FRAGMENT="fragment",t.FORM_POST="form_post",t.WEB_MESSAGE="web_message",t.SAML_POST="saml_post",t))(A||{}),I=(t=>(t.S256="S256",t.Plain="plain",t))(I||{});const ae=e.z.object({client_id:e.z.string(),act_as:e.z.string().optional(),response_type:e.z.nativeEnum(E).optional(),response_mode:e.z.nativeEnum(A).optional(),redirect_uri:e.z.string().optional(),audience:e.z.string().optional(),organization:e.z.string().optional(),state:e.z.string().optional(),nonce:e.z.string().optional(),scope:e.z.string().optional(),prompt:e.z.string().optional(),code_challenge_method:e.z.nativeEnum(I).optional(),code_challenge:e.z.string().optional(),username:e.z.string().optional(),ui_locales:e.z.string().optional(),vendor_id:e.z.string().optional()}),Tt=e.z.object({colors:e.z.object({primary:e.z.string(),page_background:e.z.object({type:e.z.string().optional(),start:e.z.string().optional(),end:e.z.string().optional(),angle_deg:e.z.number().optional()}).optional()}).optional(),logo_url:e.z.string().optional(),favicon_url:e.z.string().optional(),powered_by_logo_url:e.z.string().optional(),font:e.z.object({url:e.z.string()}).optional()}),se=e.z.object({kid:e.z.string().optional(),team_id:e.z.string().optional(),realms:e.z.string().optional(),authentication_method:e.z.string().optional(),client_id:e.z.string().optional(),client_secret:e.z.string().optional(),app_secret:e.z.string().optional(),scope:e.z.string().optional(),authorization_endpoint:e.z.string().optional(),token_endpoint:e.z.string().optional(),userinfo_endpoint:e.z.string().optional(),jwks_uri:e.z.string().optional(),discovery_url:e.z.string().optional(),issuer:e.z.string().optional(),provider:e.z.string().optional(),from:e.z.string().optional(),twilio_sid:e.z.string().optional(),twilio_token:e.z.string().optional(),icon_url:e.z.string().optional()}),re=e.z.object({id:e.z.string().optional(),name:e.z.string(),display_name:e.z.string().optional(),strategy:e.z.string(),options:se.default({}),enabled_clients:e.z.array(e.z.string()).default([]).optional(),response_type:e.z.custom().optional(),response_mode:e.z.custom().optional(),is_domain_connection:e.z.boolean().optional(),show_as_button:e.z.boolean().optional(),metadata:e.z.record(e.z.any()).optional(),is_system:e.z.boolean().optional()}),le=e.z.object({id:e.z.string(),created_at:e.z.string().transform(t=>t===null?"":t),updated_at:e.z.string().transform(t=>t===null?"":t)}).extend(re.shape),ce=e.z.object({id:e.z.string().optional(),audience:e.z.string(),friendly_name:e.z.string(),picture_url:e.z.string().optional(),support_email:e.z.string().optional(),support_url:e.z.string().optional(),sender_email:e.z.string().email(),sender_name:e.z.string(),session_lifetime:e.z.number().optional(),idle_session_lifetime:e.z.number().optional(),ephemeral_session_lifetime:e.z.number().optional(),idle_ephemeral_session_lifetime:e.z.number().optional(),session_cookie:e.z.object({mode:e.z.enum(["persistent","non-persistent"]).optional()}).optional(),allowed_logout_urls:e.z.array(e.z.string()).optional(),default_redirection_uri:e.z.string().optional(),enabled_locales:e.z.array(e.z.string()).optional(),default_directory:e.z.string().optional(),error_page:e.z.object({html:e.z.string().optional(),show_log_link:e.z.boolean().optional(),url:e.z.string().optional()}).optional(),flags:e.z.object({allow_changing_enable_sso:e.z.boolean().optional(),allow_legacy_delegation_grant_types:e.z.boolean().optional(),allow_legacy_ro_grant_types:e.z.boolean().optional(),allow_legacy_tokeninfo_endpoint:e.z.boolean().optional(),change_pwd_flow_v1:e.z.boolean().optional(),custom_domains_provisioning:e.z.boolean().optional(),dashboard_insights_view:e.z.boolean().optional(),dashboard_log_streams_next:e.z.boolean().optional(),disable_clickjack_protection_headers:e.z.boolean().optional(),disable_fields_map_fix:e.z.boolean().optional(),disable_impersonation:e.z.boolean().optional(),disable_management_api_sms_obfuscation:e.z.boolean().optional(),enable_adfs_waad_email_verification:e.z.boolean().optional(),enable_apis_section:e.z.boolean().optional(),enable_client_connections:e.z.boolean().optional(),enable_custom_domain_in_emails:e.z.boolean().optional(),enable_dynamic_client_registration:e.z.boolean().optional(),enable_idtoken_api2:e.z.boolean().optional(),enable_legacy_logs_search_v2:e.z.boolean().optional(),enable_legacy_profile:e.z.boolean().optional(),enable_pipeline2:e.z.boolean().optional(),enable_public_signup_user_exists_error:e.z.boolean().optional(),enable_sso:e.z.boolean().optional(),enforce_client_authentication_on_passwordless_start:e.z.boolean().optional(),genai_trial:e.z.boolean().optional(),improved_signup_bot_detection_in_classic:e.z.boolean().optional(),mfa_show_factor_list_on_enrollment:e.z.boolean().optional(),no_disclose_enterprise_connections:e.z.boolean().optional(),remove_alg_from_jwks:e.z.boolean().optional(),revoke_refresh_token_grant:e.z.boolean().optional(),trust_azure_adfs_email_verified_connection_property:e.z.boolean().optional(),use_scope_descriptions_for_consent:e.z.boolean().optional(),inherit_global_permissions_in_organizations:e.z.boolean().optional()}).optional(),sandbox_version:e.z.string().optional(),legacy_sandbox_version:e.z.string().optional(),sandbox_versions_available:e.z.array(e.z.string()).optional(),change_password:e.z.object({enabled:e.z.boolean().optional(),html:e.z.string().optional()}).optional(),guardian_mfa_page:e.z.object({enabled:e.z.boolean().optional(),html:e.z.string().optional()}).optional(),device_flow:e.z.object({charset:e.z.enum(["base20","digits"]).optional(),mask:e.z.string().max(20).optional()}).optional(),default_token_quota:e.z.object({clients:e.z.object({client_credentials:e.z.record(e.z.any()).optional()}).optional(),organizations:e.z.object({client_credentials:e.z.record(e.z.any()).optional()}).optional()}).optional(),default_audience:e.z.string().optional(),default_organization:e.z.string().optional(),sessions:e.z.object({oidc_logout_prompt_enabled:e.z.boolean().optional()}).optional(),oidc_logout:e.z.object({rp_logout_end_session_endpoint_discovery:e.z.boolean().optional()}).optional(),allow_organization_name_in_authentication_api:e.z.boolean().optional(),customize_mfa_in_postlogin_action:e.z.boolean().optional(),acr_values_supported:e.z.array(e.z.string()).optional(),mtls:e.z.object({enable_endpoint_aliases:e.z.boolean().optional()}).optional(),pushed_authorization_requests_supported:e.z.boolean().optional(),authorization_response_iss_parameter_supported:e.z.boolean().optional()}),pe=e.z.object({created_at:e.z.string().nullable().transform(t=>t??""),updated_at:e.z.string().nullable().transform(t=>t??""),...ce.shape,id:e.z.string()}),Ot=e.z.object({...H.shape,tenant:pe,connections:e.z.array(le)}),_e=e.z.enum(["password_reset","email_verification","otp","authorization_code","oauth2_state","ticket"]),de=e.z.object({code_id:e.z.string().openapi({description:"The code that will be used in for instance an email verification flow"}),login_id:e.z.string().openapi({description:"The id of the login session that the code is connected to"}),connection_id:e.z.string().optional().openapi({description:"The connection that the code is connected to"}),code_type:_e,code_verifier:e.z.string().optional().openapi({description:"The code verifier used in PKCE in outbound flows"}),code_challenge:e.z.string().optional().openapi({description:"The code challenge used in PKCE in outbound flows"}),code_challenge_method:e.z.enum(["plain","S256"]).optional().openapi({description:"The code challenge method used in PKCE in outbound flows"}),redirect_uri:e.z.string().optional().openapi({description:"The redirect URI associated with the code"}),nonce:e.z.string().optional().openapi({description:"The nonce value used for security in OIDC flows"}),state:e.z.string().optional().openapi({description:"The state parameter used for CSRF protection in OAuth flows"}),expires_at:e.z.string(),used_at:e.z.string().optional(),user_id:e.z.string().optional()}),Nt=e.z.object({...de.shape,created_at:e.z.string()}),ze=e.z.object({domain:e.z.string(),custom_domain_id:e.z.string().optional(),type:e.z.enum(["auth0_managed_certs","self_managed_certs"]),verification_method:e.z.enum(["txt"]).optional(),tls_policy:e.z.enum(["recommended"]).optional(),custom_client_ip_header:e.z.enum(["true-client-ip","cf-connecting-ip","x-forwarded-for","x-azure-clientip","null"]).optional(),domain_metadata:e.z.record(e.z.string().max(255)).optional()}),ge=e.z.object({name:e.z.literal("txt"),record:e.z.string(),domain:e.z.string()}),me=e.z.object({...ze.shape,custom_domain_id:e.z.string(),primary:e.z.boolean(),status:e.z.enum(["disabled","pending","pending_verification","ready"]),origin_domain_name:e.z.string().optional(),verification:e.z.object({methods:e.z.array(ge)}).optional(),tls_policy:e.z.string().optional()}),Rt=me.extend({tenant_id:e.z.string()}),C=e.z.object({id:e.z.string(),order:e.z.number().optional(),visible:e.z.boolean().optional().default(!0)}),i=C.extend({category:e.z.literal("BLOCK").optional()}),Lt=i.extend({type:e.z.literal("DIVIDER"),config:e.z.object({}).optional()}),Dt=i.extend({type:e.z.literal("HTML"),config:e.z.object({content:e.z.string().optional()}).optional()}),wt=i.extend({type:e.z.literal("IMAGE"),config:e.z.object({src:e.z.string().optional(),alt:e.z.string().optional(),width:e.z.number().optional(),height:e.z.number().optional()}).optional()}),jt=i.extend({type:e.z.literal("JUMP_BUTTON"),config:e.z.object({text:e.z.string().optional(),target_step:e.z.string().optional()})}),kt=i.extend({type:e.z.literal("RESEND_BUTTON"),config:e.z.object({text:e.z.string().optional(),resend_action:e.z.string().optional()})}),Ut=i.extend({type:e.z.literal("NEXT_BUTTON"),config:e.z.object({text:e.z.string().optional()})}),Ft=i.extend({type:e.z.literal("PREVIOUS_BUTTON"),config:e.z.object({text:e.z.string().optional()})}),vt=i.extend({type:e.z.literal("RICH_TEXT"),config:e.z.object({content:e.z.string().optional()}).optional()}),y=C.extend({category:e.z.literal("WIDGET").optional(),label:e.z.string().min(1).optional(),hint:e.z.string().min(1).max(500).optional(),required:e.z.boolean().optional(),sensitive:e.z.boolean().optional()}),xt=y.extend({type:e.z.literal("AUTH0_VERIFIABLE_CREDENTIALS"),config:e.z.object({credential_type:e.z.string().optional()})}),Pt=y.extend({type:e.z.literal("GMAPS_ADDRESS"),config:e.z.object({api_key:e.z.string().optional()})}),Mt=y.extend({type:e.z.literal("RECAPTCHA"),config:e.z.object({site_key:e.z.string().optional()})}),o=C.extend({category:e.z.literal("FIELD").optional(),label:e.z.string().min(1).optional(),hint:e.z.string().min(1).max(500).optional(),required:e.z.boolean().optional(),sensitive:e.z.boolean().optional()}),Ht=o.extend({type:e.z.literal("BOOLEAN"),config:e.z.object({default_value:e.z.boolean().optional()}).optional()}),Gt=o.extend({type:e.z.literal("CARDS"),config:e.z.object({options:e.z.array(e.z.object({value:e.z.string(),label:e.z.string(),description:e.z.string().optional(),image:e.z.string().optional()})).optional(),multi_select:e.z.boolean().optional()}).optional()}),Bt=o.extend({type:e.z.literal("CHOICE"),config:e.z.object({options:e.z.array(e.z.object({value:e.z.string(),label:e.z.string()})).optional(),display:e.z.enum(["radio","checkbox"]).optional()}).optional()}),Kt=o.extend({type:e.z.literal("CUSTOM"),config:e.z.object({component:e.z.string().optional(),props:e.z.record(e.z.any()).optional()})}),Wt=o.extend({type:e.z.literal("DATE"),config:e.z.object({format:e.z.string().optional(),min:e.z.string().optional(),max:e.z.string().optional()}).optional()}),Vt=o.extend({type:e.z.literal("DROPDOWN"),config:e.z.object({options:e.z.array(e.z.object({value:e.z.string(),label:e.z.string()})).optional(),placeholder:e.z.string().optional(),searchable:e.z.boolean().optional()}).optional()}),Xt=o.extend({type:e.z.literal("EMAIL"),config:e.z.object({placeholder:e.z.string().optional()}).optional()}),qt=o.extend({type:e.z.literal("FILE"),config:e.z.object({accept:e.z.string().optional(),max_size:e.z.number().optional(),multiple:e.z.boolean().optional()}).optional()}),Yt=o.extend({type:e.z.literal("LEGAL"),config:e.z.object({text:e.z.string(),html:e.z.boolean().optional()}).optional()}),Qt=o.extend({type:e.z.literal("NUMBER"),config:e.z.object({placeholder:e.z.string().optional(),min:e.z.number().optional(),max:e.z.number().optional(),step:e.z.number().optional()}).optional()}),Jt=o.extend({type:e.z.literal("PASSWORD"),config:e.z.object({placeholder:e.z.string().optional(),min_length:e.z.number().optional(),show_toggle:e.z.boolean().optional()}).optional()}),Zt=o.extend({type:e.z.literal("PAYMENT"),config:e.z.object({provider:e.z.string().optional(),currency:e.z.string().optional()}).optional()}),$t=o.extend({type:e.z.literal("SOCIAL"),config:e.z.object({providers:e.z.array(e.z.string()).optional()}).optional()}),eo=o.extend({type:e.z.literal("TEL"),config:e.z.object({placeholder:e.z.string().optional(),default_country:e.z.string().optional()}).optional()}),to=o.extend({type:e.z.literal("TEXT"),config:e.z.object({placeholder:e.z.string().optional(),multiline:e.z.boolean().optional(),max_length:e.z.number().optional()}).optional()}),oo=o.extend({type:e.z.literal("URL"),config:e.z.object({placeholder:e.z.string().optional()}).optional()}),ue=e.z.discriminatedUnion("type",[Lt,Dt,wt,jt,kt,Ut,Ft,vt]),he=e.z.discriminatedUnion("type",[xt,Pt,Mt]),Se=e.z.discriminatedUnion("type",[Ht,Gt,Bt,Kt,Wt,Vt,Xt,qt,Yt,Qt,Jt,Zt,$t,eo,to,oo]),T=e.z.union([ue,he,Se]),no=e.z.object({id:e.z.string(),type:e.z.literal("submit"),label:e.z.string(),className:e.z.string().optional(),disabled:e.z.boolean().optional().default(!1),order:e.z.number().optional(),visible:e.z.boolean().optional().default(!0),customizations:e.z.record(e.z.string(),e.z.any()).optional()}),_=e.z.object({x:e.z.number(),y:e.z.number()}),io=e.z.object({id:e.z.string(),type:e.z.literal("FLOW"),coordinates:_,alias:e.z.string().min(1).max(150).optional(),config:e.z.object({flow_id:e.z.string().max(30),next_node:e.z.string().optional()})}),ao=e.z.object({id:e.z.string(),type:e.z.literal("ROUTER"),coordinates:_,alias:e.z.string().min(1).max(150),config:e.z.object({rules:e.z.array(e.z.object({id:e.z.string(),alias:e.z.string().min(1).max(150).optional(),condition:e.z.any(),next_node:e.z.string()})),fallback:e.z.string()})}),so=e.z.object({id:e.z.string(),type:e.z.literal("STEP"),coordinates:_,alias:e.z.string().min(1).max(150).optional(),config:e.z.object({components:e.z.array(T),next_node:e.z.string().optional()})}),be=e.z.discriminatedUnion("type",[io,ao,so]),fe=e.z.object({name:e.z.string().openapi({description:"The name of the form"}),messages:e.z.object({errors:e.z.record(e.z.string(),e.z.any()).optional(),custom:e.z.record(e.z.string(),e.z.any()).optional()}).optional(),languages:e.z.object({primary:e.z.string().optional(),default:e.z.string().optional()}).optional(),translations:e.z.record(e.z.string(),e.z.any()).optional(),nodes:e.z.array(be).optional(),start:e.z.object({hidden_fields:e.z.array(e.z.object({key:e.z.string(),value:e.z.string()})).optional(),next_node:e.z.string().optional(),coordinates:_.optional()}).optional(),ending:e.z.object({redirection:e.z.object({delay:e.z.number().optional(),target:e.z.string().optional()}).optional(),after_submit:e.z.object({flow_id:e.z.string().optional()}).optional(),coordinates:_.optional(),resume_flow:e.z.boolean().optional()}).optional(),style:e.z.object({css:e.z.string().optional()}).optional()}).openapi({description:"Schema for flow-based forms (matches Auth0 Forms structure)"}),ro=e.z.object({...r.shape,...fe.shape,id:e.z.string()}),Ee=e.z.object({id:e.z.number().optional(),text:e.z.string(),type:e.z.enum(["info","error","success","warning"])}),Ae=e.z.object({id:e.z.string().optional(),text:e.z.string(),href:e.z.string(),linkText:e.z.string().optional()}),lo=e.z.object({action:e.z.string(),method:e.z.enum(["POST","GET"]),title:e.z.string().optional(),description:e.z.string().optional(),components:e.z.array(T),messages:e.z.array(Ee).optional(),links:e.z.array(Ae).optional()});function co(t){return t.category==="BLOCK"}function po(t){return t.category==="WIDGET"}function _o(t){return t.category==="FIELD"}const Ie=e.z.enum(["pre-user-registration","post-user-registration","post-user-login","validate-registration-username","pre-user-deletion","post-user-deletion"]),Ce=e.z.enum(["pre-user-registration","post-user-registration","post-user-login","validate-registration-username","pre-user-deletion","post-user-deletion"]),m={enabled:e.z.boolean().default(!1),synchronous:e.z.boolean().default(!1),priority:e.z.number().optional(),hook_id:e.z.string().optional()},zo=e.z.object({...m,trigger_id:Ie,url:e.z.string()}),go=e.z.object({...m,trigger_id:Ce,form_id:e.z.string()}),mo=e.z.union([zo,go]),uo=e.z.object({...m,trigger_id:Ie,...r.shape,hook_id:e.z.string(),url:e.z.string()}),ho=e.z.object({...m,trigger_id:Ce,...r.shape,hook_id:e.z.string(),form_id:e.z.string()}),So=e.z.union([uo,ho]),ye=e.z.object({name:e.z.string().optional()}),Te=e.z.object({email:e.z.string().optional()}),Oe=e.z.object({organization_id:e.z.string().max(50),inviter:ye,invitee:Te,invitation_url:e.z.string().url(),client_id:e.z.string(),connection_id:e.z.string().optional(),app_metadata:e.z.record(e.z.any()).default({}).optional(),user_metadata:e.z.record(e.z.any()).default({}).optional(),ttl_sec:e.z.number().int().max(2592e3).default(604800).optional(),roles:e.z.array(e.z.string()).default([]).optional(),send_invitation_email:e.z.boolean().default(!0).optional()}),bo=e.z.object({id:e.z.string(),organization_id:e.z.string().max(50),created_at:e.z.string().datetime(),expires_at:e.z.string().datetime(),ticket_id:e.z.string().optional()}).extend(Oe.shape),Ne=e.z.object({alg:e.z.enum(["RS256","RS384","RS512","ES256","ES384","ES512","HS256","HS384","HS512"]),e:e.z.string(),kid:e.z.string(),kty:e.z.enum(["RSA","EC","oct"]),n:e.z.string(),x5t:e.z.string().optional(),x5c:e.z.array(e.z.string()).optional(),use:e.z.enum(["sig","enc"]).optional()}),fo=e.z.object({keys:e.z.array(Ne)}),Eo=e.z.object({issuer:e.z.string(),authorization_endpoint:e.z.string(),token_endpoint:e.z.string(),device_authorization_endpoint:e.z.string(),userinfo_endpoint:e.z.string(),mfa_challenge_endpoint:e.z.string(),jwks_uri:e.z.string(),registration_endpoint:e.z.string(),revocation_endpoint:e.z.string(),scopes_supported:e.z.array(e.z.string()),response_types_supported:e.z.array(e.z.string()),code_challenge_methods_supported:e.z.array(e.z.string()),response_modes_supported:e.z.array(e.z.string()),subject_types_supported:e.z.array(e.z.string()),id_token_signing_alg_values_supported:e.z.array(e.z.string()),token_endpoint_auth_methods_supported:e.z.array(e.z.string()),claims_supported:e.z.array(e.z.string()),request_uri_parameter_supported:e.z.boolean(),request_parameter_supported:e.z.boolean(),token_endpoint_auth_signing_alg_values_supported:e.z.array(e.z.string())}),Re=e.z.object({csrf_token:e.z.string(),auth0Client:e.z.string().optional(),authParams:ae,expires_at:e.z.string(),deleted_at:e.z.string().optional(),ip:e.z.string().optional(),useragent:e.z.string().optional(),session_id:e.z.string().optional(),authorization_url:e.z.string().optional(),login_completed:e.z.boolean().optional().default(!1)}).openapi({description:"This represents a login sesion"}),Ao=e.z.object({...Re.shape,id:e.z.string().openapi({description:"This is is used as the state in the universal login"}),created_at:e.z.string(),updated_at:e.z.string()}),Le={ACLS_SUMMARY:"acls_summary",ACTIONS_EXECUTION_FAILED:"actions_execution_failed",API_LIMIT:"api_limit",API_LIMIT_WARNING:"api_limit_warning",APPI:"appi",CIBA_EXCHANGE_FAILED:"ciba_exchange_failed",CIBA_EXCHANGE_SUCCEEDED:"ciba_exchange_succeeded",CIBA_START_FAILED:"ciba_start_failed",CIBA_START_SUCCEEDED:"ciba_start_succeeded",CODE_LINK_SENT:"cls",CODE_SENT:"cs",DEPRECATION_NOTICE:"depnote",FAILED_LOGIN:"f",FAILED_BY_CONNECTOR:"fc",FAILED_CHANGE_EMAIL:"fce",FAILED_BY_CORS:"fco",FAILED_CROSS_ORIGIN_AUTHENTICATION:"fcoa",FAILED_CHANGE_PASSWORD:"fcp",FAILED_POST_CHANGE_PASSWORD_HOOK:"fcph",FAILED_CHANGE_PHONE_NUMBER:"fcpn",FAILED_CHANGE_PASSWORD_REQUEST:"fcpr",FAILED_CONNECTOR_PROVISIONING:"fcpro",FAILED_CHANGE_USERNAME:"fcu",FAILED_DELEGATION:"fd",FAILED_DEVICE_ACTIVATION:"fdeac",FAILED_DEVICE_AUTHORIZATION_REQUEST:"fdeaz",USER_CANCELED_DEVICE_CONFIRMATION:"fdecc",FAILED_USER_DELETION:"fdu",FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN:"feacft",FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS:"feccft",FAILED_EXCHANGE_CUSTOM_TOKEN:"fecte",FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN:"fede",FAILED_FEDERATED_LOGOUT:"federated_logout_failed",FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN:"fens",FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN:"feoobft",FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN:"feotpft",FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN:"fepft",FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN:"fepotpft",FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN:"fercft",FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN:"ferrt",FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN:"fertft",FAILED_HOOK:"fh",FAILED_INVITE_ACCEPT:"fi",FAILED_LOGOUT:"flo",FLOWS_EXECUTION_COMPLETED:"flows_execution_completed",FLOWS_EXECUTION_FAILED:"flows_execution_failed",FAILED_SENDING_NOTIFICATION:"fn",FORMS_SUBMISSION_FAILED:"forms_submission_failed",FORMS_SUBMISSION_SUCCEEDED:"forms_submission_succeeded",FAILED_LOGIN_INCORRECT_PASSWORD:"fp",FAILED_PUSHED_AUTHORIZATION_REQUEST:"fpar",FAILED_POST_USER_REGISTRATION_HOOK:"fpurh",FAILED_SIGNUP:"fs",FAILED_SILENT_AUTH:"fsa",FAILED_LOGIN_INVALID_EMAIL_USERNAME:"fu",FAILED_USERS_IMPORT:"fui",FAILED_VERIFICATION_EMAIL:"fv",FAILED_VERIFICATION_EMAIL_REQUEST:"fvr",EMAIL_VERIFICATION_CONFIRMED:"gd_auth_email_verification",EMAIL_VERIFICATION_FAILED:"gd_auth_fail_email_verification",MFA_AUTH_FAILED:"gd_auth_failed",MFA_AUTH_REJECTED:"gd_auth_rejected",MFA_AUTH_SUCCESS:"gd_auth_succeed",MFA_ENROLLMENT_COMPLETE:"gd_enrollment_complete",TOO_MANY_MFA_FAILURES:"gd_otp_rate_limit_exceed",MFA_RECOVERY_FAILED:"gd_recovery_failed",MFA_RECOVERY_RATE_LIMIT_EXCEED:"gd_recovery_rate_limit_exceed",MFA_RECOVERY_SUCCESS:"gd_recovery_succeed",MFA_EMAIL_SENT:"gd_send_email",EMAIL_VERIFICATION_SENT:"gd_send_email_verification",EMAIL_VERIFICATION_SEND_FAILURE:"gd_send_email_verification_failure",PUSH_NOTIFICATION_SENT:"gd_send_pn",ERROR_SENDING_MFA_PUSH_NOTIFICATION:"gd_send_pn_failure",MFA_SMS_SENT:"gd_send_sms",ERROR_SENDING_MFA_SMS:"gd_send_sms_failure",MFA_VOICE_CALL_SUCCESS:"gd_send_voice",MFA_VOICE_CALL_FAILED:"gd_send_voice_failure",SECOND_FACTOR_STARTED:"gd_start_auth",MFA_ENROLL_STARTED:"gd_start_enroll",MFA_ENROLLMENT_FAILED:"gd_start_enroll_failed",GUARDIAN_TENANT_UPDATE:"gd_tenant_update",UNENROLL_DEVICE_ACCOUNT:"gd_unenroll",UPDATE_DEVICE_ACCOUNT:"gd_update_device_account",WEBAUTHN_CHALLENGE_FAILED:"gd_webauthn_challenge_failed",WEBAUTHN_ENROLLMENT_FAILED:"gd_webauthn_enrollment_failed",FAILED_KMS_API_OPERATION:"kms_key_management_failure",SUCCESS_KMS_API_OPERATION:"kms_key_management_success",KMS_KEY_STATE_CHANGED:"kms_key_state_changed",TOO_MANY_CALLS_TO_DELEGATION:"limit_delegation",BLOCKED_IP_ADDRESS:"limit_mu",BLOCKED_ACCOUNT_IP:"limit_sul",BLOCKED_ACCOUNT_EMAIL:"limit_wc",MFA_REQUIRED:"mfar",MANAGEMENT_API_READ_OPERATION:"mgmt_api_read",FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT:"my_account_authentication_method_failed",SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT:"my_account_authentication_method_succeeded",FAILED_OIDC_BACKCHANNEL_LOGOUT:"oidc_backchannel_logout_failed",SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT:"oidc_backchannel_logout_succeeded",ORGANIZATION_MEMBER_ADDED:"organization_member_added",PASSKEY_CHALLENGE_FAILED:"passkey_challenge_failed",PASSKEY_CHALLENGE_STARTED:"passkey_challenge_started",PRE_LOGIN_ASSESSMENT:"pla",BREACHED_PASSWORD:"pwd_leak",BREACHED_PASSWORD_ON_RESET:"reset_pwd_leak",SUCCESS_RESOURCE_CLEANUP:"resource_cleanup",RICH_CONSENTS_ACCESS_ERROR:"rich_consents_access_error",SUCCESS_LOGIN:"s",SUCCESS_API_OPERATION:"sapi",SUCCESS_CHANGE_EMAIL:"sce",SUCCESS_CROSS_ORIGIN_AUTHENTICATION:"scoa",SUCCESS_CHANGE_PASSWORD:"scp",SUCCESS_CHANGE_PHONE_NUMBER:"scpn",SUCCESS_CHANGE_PASSWORD_REQUEST:"scpr",SUCCESS_CHANGE_USERNAME:"scu",SUCCESS_CREDENTIAL_VALIDATION:"scv",SUCCESS_DELEGATION:"sd",SUCCESS_USER_DELETION:"sdu",SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN:"seacft",SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS:"seccft",SUCCESS_EXCHANGE_CUSTOM_TOKEN:"secte",SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN:"sede",SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN:"sens",SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN:"seoobft",SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN:"seotpft",SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN:"sepft",SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN:"sepkoobft",SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN:"sepkotpft",SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN:"sepkrcft",SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN:"sercft",SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN:"sertft",SUCCESSFULLY_ACCEPTED_USER_INVITE:"si",BREACHED_PASSWORD_ON_SIGNUP:"signup_pwd_leak",SUCCESS_LOGOUT:"slo",SUCCESS_REVOCATION:"srrt",SUCCESS_SIGNUP:"ss",FAILED_SS_SSO_OPERATION:"ss_sso_failure",INFORMATION_FROM_SS_SSO_OPERATION:"ss_sso_info",SUCCESS_SS_SSO_OPERATION:"ss_sso_success",SUCCESS_SILENT_AUTH:"ssa",SUCCESSFUL_SCIM_OPERATION:"sscim",SUCCESSFULLY_IMPORTED_USERS:"sui",SUCCESS_VERIFICATION_EMAIL:"sv",SUCCESS_VERIFICATION_EMAIL_REQUEST:"svr",MAX_AMOUNT_OF_AUTHENTICATORS:"too_many_records",USER_LOGIN_BLOCK_RELEASED:"ublkdu",FAILED_UNIVERSAL_LOGOUT:"universal_logout_failed",SUCCESSFUL_UNIVERSAL_LOGOUT:"universal_logout_succeeded",WARNING_DURING_LOGIN:"w",WARNING_SENDING_NOTIFICATION:"wn",WARNING_USER_MANAGEMENT:"wum"},Io=e.z.string().refine(t=>Object.values(Le).includes(t),{message:"Invalid log type"}),De=e.z.object({name:e.z.string(),version:e.z.string(),env:e.z.object({node:e.z.string().optional()}).optional()}),we=e.z.object({country_code:e.z.string().length(2),city_name:e.z.string(),latitude:e.z.string(),longitude:e.z.string(),time_zone:e.z.string(),continent_code:e.z.string()}),je=e.z.object({type:Io,date:e.z.string(),description:e.z.string().optional(),ip:e.z.string().optional(),user_agent:e.z.string().optional(),details:e.z.any().optional(),isMobile:e.z.boolean(),user_id:e.z.string().optional(),user_name:e.z.string().optional(),connection:e.z.string().optional(),connection_id:e.z.string().optional(),client_id:e.z.string().optional(),client_name:e.z.string().optional(),audience:e.z.string().optional(),scope:e.z.string().optional(),strategy:e.z.string().optional(),strategy_type:e.z.string().optional(),hostname:e.z.string().optional(),auth0_client:De.optional(),log_id:e.z.string().optional(),location_info:we.optional()}),Co=e.z.object({...je.shape,log_id:e.z.string()}),ke=e.z.object({id:e.z.string().optional(),user_id:e.z.string(),password:e.z.string(),algorithm:e.z.enum(["bcrypt","argon2id"]).default("argon2id"),is_current:e.z.boolean().default(!0)}),yo=ke.extend({id:e.z.string(),created_at:e.z.string(),updated_at:e.z.string()}),Ue=e.z.object({initial_user_agent:e.z.string().describe("First user agent of the device from which this user logged in"),initial_ip:e.z.string().describe("First IP address associated with this session"),initial_asn:e.z.string().describe("First autonomous system number associated with this session"),last_user_agent:e.z.string().describe("Last user agent of the device from which this user logged in"),last_ip:e.z.string().describe("Last IP address from which this user logged in"),last_asn:e.z.string().describe("Last autonomous system number from which this user logged in")}),Fe=e.z.object({id:e.z.string(),revoked_at:e.z.string().optional(),used_at:e.z.string().optional(),user_id:e.z.string().describe("The user ID associated with the session"),expires_at:e.z.string().optional(),login_session_id:e.z.string(),idle_expires_at:e.z.string().optional(),device:Ue.describe("Metadata related to the device used in the session"),clients:e.z.array(e.z.string()).describe("List of client details for the session")}),To=e.z.object({created_at:e.z.string(),updated_at:e.z.string(),authenticated_at:e.z.string(),last_interaction_at:e.z.string(),...Fe.shape}),Oo=e.z.object({kid:e.z.string().openapi({description:"The key id of the signing key"}),cert:e.z.string().openapi({description:"The public certificate of the signing key"}),fingerprint:e.z.string().openapi({description:"The cert fingerprint"}),thumbprint:e.z.string().openapi({description:"The cert thumbprint"}),pkcs7:e.z.string().optional().openapi({description:"The private key in pkcs7 format"}),current:e.z.boolean().optional().openapi({description:"True if the key is the current key"}),next:e.z.boolean().optional().openapi({description:"True if the key is the next key"}),previous:e.z.boolean().optional().openapi({description:"True if the key is the previous key"}),current_since:e.z.string().optional().openapi({description:"The date and time when the key became the current key"}),current_until:e.z.string().optional().openapi({description:"The date and time when the current key was rotated"}),revoked:e.z.boolean().optional().openapi({description:"True if the key is revoked"}),revoked_at:e.z.string().optional().openapi({description:"The date and time when the key was revoked"}),connection:e.z.string().optional().openapi({description:"The connection identifier associated with the key"}),type:e.z.enum(["jwt_signing","saml_encryption"]).openapi({description:"The type of the signing key"})});var ve=(t=>(t.RefreshToken="refresh_token",t.AuthorizationCode="authorization_code",t.ClientCredential="client_credentials",t.Passwordless="passwordless",t.Password="password",t.OTP="http://auth0.com/oauth/grant-type/passwordless/otp",t))(ve||{});const No=e.z.object({access_token:e.z.string(),id_token:e.z.string().optional(),scope:e.z.string().optional(),state:e.z.string().optional(),refresh_token:e.z.string().optional(),token_type:e.z.string(),expires_in:e.z.number()});e.z.object({code:e.z.string(),state:e.z.string().optional()});const xe=e.z.object({button_border_radius:e.z.number(),button_border_weight:e.z.number(),buttons_style:e.z.enum(["pill","rounded","sharp"]),input_border_radius:e.z.number(),input_border_weight:e.z.number(),inputs_style:e.z.enum(["pill","rounded","sharp"]),show_widget_shadow:e.z.boolean(),widget_border_weight:e.z.number(),widget_corner_radius:e.z.number()}),Pe=e.z.object({base_focus_color:e.z.string(),base_hover_color:e.z.string(),body_text:e.z.string(),captcha_widget_theme:e.z.enum(["auto","dark","light"]),error:e.z.string(),header:e.z.string(),icons:e.z.string(),input_background:e.z.string(),input_border:e.z.string(),input_filled_text:e.z.string(),input_labels_placeholders:e.z.string(),links_focused_components:e.z.string(),primary_button:e.z.string(),primary_button_label:e.z.string(),secondary_button_border:e.z.string(),secondary_button_label:e.z.string(),success:e.z.string(),widget_background:e.z.string(),widget_border:e.z.string()}),s=e.z.object({bold:e.z.boolean(),size:e.z.number()}),Me=e.z.object({body_text:s,buttons_text:s,font_url:e.z.string(),input_labels:s,links:s,links_style:e.z.enum(["normal","underlined"]),reference_text_size:e.z.number(),subtitle:s,title:s}),He=e.z.object({background_color:e.z.string(),background_image_url:e.z.string(),page_layout:e.z.enum(["center","left","right"])}),Ge=e.z.object({header_text_alignment:e.z.enum(["center","left","right"]),logo_height:e.z.number(),logo_position:e.z.enum(["center","left","none","right"]),logo_url:e.z.string(),social_buttons_layout:e.z.enum(["bottom","top"])}),Be=e.z.object({borders:xe,colors:Pe,displayName:e.z.string(),fonts:Me,page_background:He,widget:Ge}),Ro=Be.extend({themeId:e.z.string()}),Lo=e.z.object({universal_login_experience:e.z.enum(["new","classic"]).default("new"),identifier_first:e.z.boolean().default(!0),password_first:e.z.boolean().default(!1),webauthn_platform_first_factor:e.z.boolean()}),Do=e.z.object({name:e.z.string(),enabled:e.z.boolean().optional().default(!0),default_from_address:e.z.string().optional(),credentials:e.z.union([e.z.object({accessKeyId:e.z.string(),secretAccessKey:e.z.string(),region:e.z.string()}),e.z.object({smtp_host:e.z.array(e.z.string()),smtp_port:e.z.number(),smtp_user:e.z.string(),smtp_pass:e.z.string()}),e.z.object({api_key:e.z.string(),domain:e.z.string().optional()}),e.z.object({connectionString:e.z.string()}),e.z.object({tenantId:e.z.string(),clientId:e.z.string(),clientSecret:e.z.string()})]),settings:e.z.object({}).optional()}),Ke=e.z.object({id:e.z.string(),session_id:e.z.string(),user_id:e.z.string(),client_id:e.z.string(),expires_at:e.z.string().optional(),idle_expires_at:e.z.string().optional(),last_exchanged_at:e.z.string().optional(),device:Ue,resource_servers:e.z.array(e.z.object({audience:e.z.string(),scopes:e.z.string()})),rotating:e.z.boolean()}),wo=e.z.object({created_at:e.z.string(),...Ke.shape}),jo=e.z.object({to:e.z.string(),message:e.z.string()}),ko=e.z.object({name:e.z.string(),options:e.z.object({})}),We=e.z.object({value:e.z.string(),description:e.z.string().optional()}),Ve=e.z.object({token_dialect:e.z.enum(["access_token","access_token_authz"]).optional(),enforce_policies:e.z.boolean().optional(),allow_skipping_userinfo:e.z.boolean().optional(),skip_userinfo:e.z.boolean().optional(),persist_client_authorization:e.z.boolean().optional(),enable_introspection_endpoint:e.z.boolean().optional(),mtls:e.z.object({bound_access_tokens:e.z.boolean().optional()}).optional()}),Xe=e.z.object({name:e.z.string(),identifier:e.z.string(),scopes:e.z.array(We).optional(),signing_alg:e.z.string().optional(),signing_secret:e.z.string().optional(),token_lifetime:e.z.number().optional(),token_lifetime_for_web:e.z.number().optional(),skip_consent_for_verifiable_first_party_clients:e.z.boolean().optional(),allow_offline_access:e.z.boolean().optional(),verificationKey:e.z.string().optional(),options:Ve.optional(),is_system:e.z.boolean().optional()}),qe=e.z.object({id:e.z.string().optional(),...Xe.shape,created_at:e.z.string().optional(),updated_at:e.z.string().optional()}),Uo=e.z.array(qe),Ye=e.z.object({role_id:e.z.string(),resource_server_identifier:e.z.string(),permission_name:e.z.string()}),Qe=e.z.object({...Ye.shape,created_at:e.z.string()}),Fo=e.z.array(Qe),Je=e.z.object({user_id:e.z.string(),resource_server_identifier:e.z.string(),permission_name:e.z.string(),organization_id:e.z.string().optional()}),Ze=e.z.object({...Je.shape,tenant_id:e.z.string(),created_at:e.z.string().optional()}),vo=e.z.array(Ze),$e=e.z.object({user_id:e.z.string(),resource_server_identifier:e.z.string(),resource_server_name:e.z.string(),permission_name:e.z.string(),description:e.z.string().nullable().optional(),created_at:e.z.string().optional(),organization_id:e.z.string().optional()}),xo=e.z.array($e),et=e.z.object({user_id:e.z.string(),role_id:e.z.string(),organization_id:e.z.string().optional()}),tt=e.z.object({...et.shape,tenant_id:e.z.string(),created_at:e.z.string().optional()}),Po=e.z.array(tt),ot=e.z.object({name:e.z.string().min(1).max(50).openapi({description:"The name of the role. Cannot include '<' or '>'"}),description:e.z.string().max(255).optional().openapi({description:"The description of the role"}),is_system:e.z.boolean().optional()}),nt=e.z.object({id:e.z.string().openapi({description:"The unique identifier of the role"}),...ot.shape,created_at:e.z.string().optional(),updated_at:e.z.string().optional()}),Mo=e.z.array(nt),it=e.z.object({logo_url:e.z.string().optional().openapi({description:"URL of the organization's logo"}),colors:e.z.object({primary:e.z.string().optional().openapi({description:"Primary color in hex format (e.g., #FF0000)"}),page_background:e.z.string().optional().openapi({description:"Page background color in hex format (e.g., #FFFFFF)"})}).optional()}).optional(),at=e.z.object({connection_id:e.z.string().openapi({description:"ID of the connection"}),assign_membership_on_login:e.z.boolean().default(!1).openapi({description:"Whether to assign membership to the organization on login"}),show_as_button:e.z.boolean().default(!0).openapi({description:"Whether to show this connection as a button in the login screen"}),is_signup_enabled:e.z.boolean().default(!0).openapi({description:"Whether signup is enabled for this connection"})}),st=e.z.object({client_credentials:e.z.object({enforce:e.z.boolean().default(!1).openapi({description:"Whether to enforce token quota limits"}),per_day:e.z.number().min(0).default(0).openapi({description:"Maximum tokens per day (0 = unlimited)"}),per_hour:e.z.number().min(0).default(0).openapi({description:"Maximum tokens per hour (0 = unlimited)"})}).optional()}).optional(),rt=e.z.object({id:e.z.string().optional(),name:e.z.string().min(1).openapi({description:"The name of the organization"}),display_name:e.z.string().optional().openapi({description:"The display name of the organization"}),branding:it,metadata:e.z.record(e.z.any()).default({}).optional().openapi({description:"Custom metadata for the organization"}),enabled_connections:e.z.array(at).default([]).optional().openapi({description:"List of enabled connections for the organization"}),token_quota:st}),Ho=e.z.object({...rt.shape,...r.shape,id:e.z.string()}),lt=e.z.object({user_id:e.z.string().openapi({description:"ID of the user"}),organization_id:e.z.string().openapi({description:"ID of the organization"})}),Go=e.z.object({...lt.shape,...r.shape,id:e.z.string()}),Bo=e.z.object({idle_session_lifetime:e.z.number().optional(),session_lifetime:e.z.number().optional(),session_cookie:e.z.object({mode:e.z.enum(["persistent","non-persistent"]).optional()}).optional(),enable_client_connections:e.z.boolean().optional(),default_redirection_uri:e.z.string().optional(),enabled_locales:e.z.array(e.z.string()).optional(),default_directory:e.z.string().optional(),error_page:e.z.object({html:e.z.string().optional(),show_log_link:e.z.boolean().optional(),url:e.z.string().optional()}).optional(),flags:e.z.object({allow_legacy_delegation_grant_types:e.z.boolean().optional(),allow_legacy_ro_grant_types:e.z.boolean().optional(),allow_legacy_tokeninfo_endpoint:e.z.boolean().optional(),disable_clickjack_protection_headers:e.z.boolean().optional(),enable_apis_section:e.z.boolean().optional(),enable_client_connections:e.z.boolean().optional(),enable_custom_domain_in_emails:e.z.boolean().optional(),enable_dynamic_client_registration:e.z.boolean().optional(),enable_idtoken_api2:e.z.boolean().optional(),enable_legacy_logs_search_v2:e.z.boolean().optional(),enable_legacy_profile:e.z.boolean().optional(),enable_pipeline2:e.z.boolean().optional(),enable_public_signup_user_exists_error:e.z.boolean().optional(),use_scope_descriptions_for_consent:e.z.boolean().optional(),disable_management_api_sms_obfuscation:e.z.boolean().optional(),enable_adfs_waad_email_verification:e.z.boolean().optional(),revoke_refresh_token_grant:e.z.boolean().optional(),dashboard_log_streams_next:e.z.boolean().optional(),dashboard_insights_view:e.z.boolean().optional(),disable_fields_map_fix:e.z.boolean().optional(),mfa_show_factor_list_on_enrollment:e.z.boolean().optional()}).optional(),friendly_name:e.z.string().optional(),picture_url:e.z.string().optional(),support_email:e.z.string().optional(),support_url:e.z.string().optional(),sandbox_version:e.z.string().optional(),sandbox_versions_available:e.z.array(e.z.string()).optional(),change_password:e.z.object({enabled:e.z.boolean(),html:e.z.string()}).optional(),guardian_mfa_page:e.z.object({enabled:e.z.boolean(),html:e.z.string()}).optional(),default_audience:e.z.string().optional(),default_organization:e.z.string().optional(),sessions:e.z.object({oidc_logout_prompt_enabled:e.z.boolean().optional()}).optional()}),Ko=e.z.object({date:e.z.string().openapi({description:"Date these events occurred in ISO 8601 format",example:"2025-12-19"}),logins:e.z.number().openapi({description:"Number of logins on this date",example:150}),signups:e.z.number().openapi({description:"Number of signups on this date",example:25}),leaked_passwords:e.z.number().openapi({description:"Number of breached-password detections on this date (subscription required)",example:0}),updated_at:e.z.string().openapi({description:"Date and time this stats entry was last updated in ISO 8601 format",example:"2025-12-19T10:30:00.000Z"}),created_at:e.z.string().openapi({description:"Approximate date and time the first event occurred in ISO 8601 format",example:"2025-12-19T00:00:00.000Z"})}),Wo=e.z.number().openapi({description:"Number of active users in the last 30 days",example:1234});function Vo(t){const[a,c]=t.split("|");if(!a||!c)throw new Error(`Invalid user_id: ${t}`);return{connection:a,id:c}}function Xo(t){const{primary:a,secondaries:c,syncMethods:ct=["create","update","remove","delete","set"]}=t,pt={get(d,n){if(typeof n=="symbol")return d[n];const z=d[n];return typeof z!="function"?z:ct.includes(n)?async(...u)=>{const _t=await z.apply(d,u),h=[];for(const p of c){const O=p.adapter[n];if(typeof O!="function")continue;const dt=(async()=>{try{await O.apply(p.adapter,u)}catch(N){try{p.onError?p.onError(N,n,u):console.error(`Passthrough adapter: secondary write failed for ${n}:`,N)}catch(zt){console.error(`Passthrough adapter: onError handler threw for ${n}:`,zt)}}})();p.blocking&&h.push(dt)}return h.length>0&&await Promise.all(h),_t}:z.bind(d)}};return new Proxy(a,pt)}function qo(t){return t}exports.Auth0ActionEnum=mt;exports.Auth0Client=De;exports.AuthorizationResponseMode=A;exports.AuthorizationResponseType=E;exports.CodeChallengeMethod=I;exports.ComponentCategory=f;exports.ComponentType=b;exports.EmailActionEnum=ut;exports.FlowActionTypeEnum=gt;exports.GrantType=ve;exports.LocationInfo=we;exports.LogTypes=Le;exports.NodeType=Q;exports.RedirectTargetEnum=w;exports.actionNodeSchema=$;exports.activeUsersResponseSchema=Wo;exports.auth0FlowInsertSchema=yt;exports.auth0FlowSchema=ie;exports.auth0QuerySchema=St;exports.auth0UpdateUserActionSchema=L;exports.auth0UserResponseSchema=ft;exports.authParamsSchema=ae;exports.baseUserSchema=S;exports.blockComponentSchema=ue;exports.bordersSchema=xe;exports.brandingSchema=Tt;exports.buttonComponentSchema=W;exports.clientGrantInsertSchema=G;exports.clientGrantListSchema=Ct;exports.clientGrantSchema=B;exports.clientInsertSchema=M;exports.clientSchema=H;exports.codeInsertSchema=de;exports.codeSchema=Nt;exports.codeTypeSchema=_e;exports.colorsSchema=Pe;exports.componentMessageSchema=Ee;exports.componentSchema=Y;exports.connectionInsertSchema=re;exports.connectionOptionsSchema=se;exports.connectionSchema=le;exports.coordinatesSchema=l;exports.createPassthroughAdapter=Xo;exports.createWriteOnlyAdapter=qo;exports.customDomainInsertSchema=ze;exports.customDomainSchema=me;exports.customDomainWithTenantIdSchema=Rt;exports.dailyStatsSchema=Ko;exports.emailProviderSchema=Do;exports.emailVerificationRulesSchema=R;exports.emailVerifyActionSchema=D;exports.endingSchema=ne;exports.fieldComponentSchema=Se;exports.flowActionStepSchema=k;exports.flowInsertSchema=U;exports.flowSchema=ht;exports.flowsFieldComponentSchema=X;exports.flowsFlowNodeSchema=Z;exports.flowsStepNodeSchema=J;exports.fontDetailsSchema=s;exports.fontsSchema=Me;exports.formControlSchema=no;exports.formInsertSchema=fe;exports.formNodeComponentDefinition=T;exports.formNodeSchema=be;exports.formSchema=ro;exports.genericComponentSchema=q;exports.genericNodeSchema=ee;exports.hookInsertSchema=mo;exports.hookSchema=So;exports.identitySchema=v;exports.inviteInsertSchema=Oe;exports.inviteSchema=bo;exports.inviteeSchema=Te;exports.inviterSchema=ye;exports.isBlockComponent=co;exports.isFieldComponent=_o;exports.isWidgetComponent=po;exports.jwksKeySchema=fo;exports.jwksSchema=Ne;exports.legacyClientSchema=Ot;exports.legalComponentSchema=V;exports.logInsertSchema=je;exports.logSchema=Co;exports.loginSessionInsertSchema=Re;exports.loginSessionSchema=Ao;exports.nodeSchema=te;exports.openIDConfigurationSchema=Eo;exports.organizationBrandingSchema=it;exports.organizationEnabledConnectionSchema=at;exports.organizationInsertSchema=rt;exports.organizationSchema=Ho;exports.organizationTokenQuotaSchema=st;exports.pageBackgroundSchema=He;exports.parseUserId=Vo;exports.passwordInsertSchema=ke;exports.passwordSchema=yo;exports.profileDataSchema=F;exports.promptSettingSchema=Lo;exports.redirectActionSchema=j;exports.refreshTokenInsertSchema=Ke;exports.refreshTokenSchema=wo;exports.resourceServerInsertSchema=Xe;exports.resourceServerListSchema=Uo;exports.resourceServerOptionsSchema=Ve;exports.resourceServerSchema=qe;exports.resourceServerScopeSchema=We;exports.richTextComponentSchema=K;exports.roleInsertSchema=ot;exports.roleListSchema=Mo;exports.rolePermissionInsertSchema=Ye;exports.rolePermissionListSchema=Fo;exports.rolePermissionSchema=Qe;exports.roleSchema=nt;exports.screenLinkSchema=Ae;exports.sessionInsertSchema=Fe;exports.sessionSchema=To;exports.signingKeySchema=Oo;exports.smsProviderSchema=ko;exports.smsSendParamsSchema=jo;exports.startSchema=oe;exports.tenantInsertSchema=ce;exports.tenantSchema=pe;exports.tenantSettingsSchema=Bo;exports.themeInsertSchema=Be;exports.themeSchema=Ro;exports.tokenResponseSchema=No;exports.totalsSchema=bt;exports.uiScreenSchema=lo;exports.userInsertSchema=x;exports.userOrganizationInsertSchema=lt;exports.userOrganizationSchema=Go;exports.userPermissionInsertSchema=Je;exports.userPermissionListSchema=vo;exports.userPermissionSchema=Ze;exports.userPermissionWithDetailsListSchema=xo;exports.userPermissionWithDetailsSchema=$e;exports.userResponseSchema=Et;exports.userRoleInsertSchema=et;exports.userRoleListSchema=Po;exports.userRoleSchema=tt;exports.userSchema=P;exports.verificationMethodsSchema=ge;exports.widgetComponentSchema=he;exports.widgetSchema=Ge;
1
+ "use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("@hono/zod-openapi"),s=e.z.object({created_at:e.z.string(),updated_at:e.z.string()}),gt=e.z.enum(["AUTH0","EMAIL","REDIRECT"]),mt=e.z.enum(["CREATE_USER","GET_USER","UPDATE_USER","SEND_REQUEST","SEND_EMAIL"]),ut=e.z.enum(["VERIFY_EMAIL"]),R=e.z.object({require_mx_record:e.z.boolean().optional(),block_aliases:e.z.boolean().optional(),block_free_emails:e.z.boolean().optional(),block_disposable_emails:e.z.boolean().optional(),blocklist:e.z.array(e.z.string()).optional(),allowlist:e.z.array(e.z.string()).optional()}),L=e.z.object({id:e.z.string(),alias:e.z.string().max(100).optional(),type:e.z.literal("AUTH0"),action:e.z.literal("UPDATE_USER"),allow_failure:e.z.boolean().optional(),mask_output:e.z.boolean().optional(),params:e.z.object({connection_id:e.z.string().optional(),user_id:e.z.string(),changes:e.z.record(e.z.string(),e.z.any())})}),D=e.z.object({id:e.z.string(),alias:e.z.string().max(100).optional(),type:e.z.literal("EMAIL"),action:e.z.literal("VERIFY_EMAIL"),allow_failure:e.z.boolean().optional(),mask_output:e.z.boolean().optional(),params:e.z.object({email:e.z.string(),rules:R.optional()})}),w=e.z.enum(["change-email","account","custom"]),j=e.z.object({id:e.z.string(),alias:e.z.string().max(100).optional(),type:e.z.literal("REDIRECT"),action:e.z.literal("REDIRECT_USER"),allow_failure:e.z.boolean().optional(),mask_output:e.z.boolean().optional(),params:e.z.object({target:w.openapi({description:"The predefined target to redirect to, or 'custom' for a custom URL"}),custom_url:e.z.string().optional().openapi({description:"Custom URL to redirect to when target is 'custom'"})})}),k=e.z.union([L,D,j]),U=e.z.object({name:e.z.string().min(1).max(150).openapi({description:"The name of the flow"}),actions:e.z.array(k).optional().default([]).openapi({description:"The list of actions to execute in sequence"})}),ht=U.extend({...s.shape,id:e.z.string().openapi({description:"Unique identifier for the flow",example:"af_12tMpdJ3iek7svMyZkSh5M"})}),St=e.z.object({page:e.z.string().min(0).optional().default("0").transform(t=>parseInt(t,10)).openapi({description:"The page number where 0 is the first page"}),per_page:e.z.string().min(1).optional().default("10").transform(t=>parseInt(t,10)).openapi({description:"The number of items per page"}),include_totals:e.z.string().optional().default("false").transform(t=>t==="true").openapi({description:"If the total number of items should be included in the response"}),sort:e.z.string().regex(/^.+:(-1|1)$/).optional().openapi({description:"A property that should have the format 'string:-1' or 'string:1'"}),q:e.z.string().optional().openapi({description:"A lucene query string used to filter the results"})}),bt=e.z.object({start:e.z.number(),limit:e.z.number(),length:e.z.number(),total:e.z.number().optional()}),F=e.z.object({email:e.z.string().optional(),email_verified:e.z.boolean().optional(),name:e.z.string().optional(),username:e.z.string().optional(),given_name:e.z.string().optional(),phone_number:e.z.string().optional(),phone_verified:e.z.boolean().optional(),family_name:e.z.string().optional()}).catchall(e.z.any()),v=e.z.object({connection:e.z.string(),user_id:e.z.string(),provider:e.z.string(),isSocial:e.z.boolean(),access_token:e.z.string().optional(),access_token_secret:e.z.string().optional(),refresh_token:e.z.string().optional(),profileData:F.optional()}),S=e.z.object({email:e.z.string().optional().transform(t=>t&&t.toLowerCase()),username:e.z.string().optional(),phone_number:e.z.string().optional(),given_name:e.z.string().optional(),family_name:e.z.string().optional(),nickname:e.z.string().optional(),name:e.z.string().optional(),picture:e.z.string().optional(),locale:e.z.string().optional(),linked_to:e.z.string().optional(),profileData:e.z.string().optional(),user_id:e.z.string().optional(),app_metadata:e.z.any().default({}).optional(),user_metadata:e.z.any().default({}).optional()}),x=S.extend({email_verified:e.z.boolean().default(!1),verify_email:e.z.boolean().optional(),last_ip:e.z.string().optional(),last_login:e.z.string().optional(),user_id:e.z.string().optional(),provider:e.z.string().optional(),connection:e.z.string(),is_social:e.z.boolean().optional()}),P=e.z.object({...x.shape,...s.shape,user_id:e.z.string(),provider:e.z.string(),is_social:e.z.boolean(),email:e.z.string().optional(),login_count:e.z.number().default(0),identities:e.z.array(v).optional()}),ft=P,Et=S.extend({login_count:e.z.number(),multifactor:e.z.array(e.z.string()).optional(),last_ip:e.z.string().optional(),last_login:e.z.string().optional(),user_id:e.z.string()}).catchall(e.z.any()),At="useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";let It=(t=21)=>{let a="",c=crypto.getRandomValues(new Uint8Array(t|=0));for(;t--;)a+=At[c[t]&63];return a};const M=e.z.object({client_id:e.z.string().openapi({description:"ID of this client."}),name:e.z.string().min(1).openapi({description:"Name of this client (min length: 1 character, does not allow < or >)."}),description:e.z.string().max(140).optional().openapi({description:"Free text description of this client (max length: 140 characters)."}),global:e.z.boolean().default(!1).openapi({description:"Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)."}),client_secret:e.z.string().default(()=>It()).optional().openapi({description:"Client secret (which you must not make public)."}),app_type:e.z.enum(["native","spa","regular_web","non_interactive","resource_server","express_configuration","rms","box","cloudbees","concur","dropbox","mscrm","echosign","egnyte","newrelic","office365","salesforce","sentry","sharepoint","slack","springcm","zendesk","zoom","sso_integration","oag"]).default("regular_web").optional().openapi({description:"The type of application this client represents"}),logo_uri:e.z.string().url().optional().openapi({description:"URL of the logo to display for this client. Recommended size is 150x150 pixels."}),is_first_party:e.z.boolean().default(!1).openapi({description:"Whether this client a first party client (true) or not (false)."}),oidc_conformant:e.z.boolean().default(!0).openapi({description:"Whether this client conforms to strict OIDC specifications (true) or uses legacy features (false)."}),callbacks:e.z.array(e.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs whitelisted for Auth0 to use as a callback to the client after authentication."}),allowed_origins:e.z.array(e.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs allowed to make requests from JavaScript to Auth0 API (typically used with CORS). By default, all your callback URLs will be allowed. This field allows you to enter other origins if necessary. You can also use wildcards at the subdomain level (e.g., https://*.contoso.com). Query strings and hash information are not taken into account when validating these URLs."}),web_origins:e.z.array(e.z.string()).default([]).optional().openapi({description:"Comma-separated list of allowed origins for use with Cross-Origin Authentication, Device Flow, and web message response mode."}),client_aliases:e.z.array(e.z.string()).default([]).optional().openapi({description:"List of audiences/realms for SAML protocol. Used by the wsfed addon."}),allowed_clients:e.z.array(e.z.string()).default([]).optional().openapi({description:"List of allow clients and API ids that are allowed to make delegation requests. Empty means all all your clients are allowed."}),connections:e.z.array(e.z.string()).default([]).optional().openapi({description:"List of connection IDs enabled for this client. The order determines the display order on the login page."}),allowed_logout_urls:e.z.array(e.z.string()).default([]).optional().openapi({description:"Comma-separated list of URLs that are valid to redirect to after logout from Auth0. Wildcards are allowed for subdomains."}),session_transfer:e.z.record(e.z.any()).default({}).optional().openapi({description:"Native to Web SSO Configuration"}),oidc_logout:e.z.record(e.z.any()).default({}).optional().openapi({description:"Configuration for OIDC backchannel logout"}),grant_types:e.z.array(e.z.string()).default([]).optional().openapi({description:"List of grant types supported for this application. Can include authorization_code, implicit, refresh_token, client_credentials, password, http://auth0.com/oauth/grant-type/password-realm, http://auth0.com/oauth/grant-type/mfa-oob, http://auth0.com/oauth/grant-type/mfa-otp, http://auth0.com/oauth/grant-type/mfa-recovery-code, urn:openid:params:grant-type:ciba, and urn:ietf:params:oauth:grant-type:device_code."}),jwt_configuration:e.z.record(e.z.any()).default({}).optional().openapi({description:"Configuration related to JWTs for the client."}),signing_keys:e.z.array(e.z.record(e.z.any())).default([]).optional().openapi({description:"Signing certificates associated with this client."}),encryption_key:e.z.record(e.z.any()).default({}).optional().openapi({description:"Encryption used for WsFed responses with this client."}),sso:e.z.boolean().default(!1).openapi({description:"Applies only to SSO clients and determines whether Auth0 will handle Single Sign On (true) or whether the Identity Provider will (false)."}),sso_disabled:e.z.boolean().default(!0).openapi({description:"Whether Single Sign On is disabled (true) or enabled (true). Defaults to true."}),cross_origin_authentication:e.z.boolean().default(!1).openapi({description:"Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false)."}),cross_origin_loc:e.z.string().url().optional().openapi({description:"URL of the location in your site where the cross origin verification takes place for the cross-origin auth flow when performing Auth in your own domain instead of Auth0 hosted login page."}),custom_login_page_on:e.z.boolean().default(!1).openapi({description:"Whether a custom login page is to be used (true) or the default provided login page (false)."}),custom_login_page:e.z.string().optional().openapi({description:"The content (HTML, CSS, JS) of the custom login page."}),custom_login_page_preview:e.z.string().optional().openapi({description:"The content (HTML, CSS, JS) of the custom login page. (Used on Previews)"}),form_template:e.z.string().optional().openapi({description:"HTML form template to be used for WS-Federation."}),addons:e.z.record(e.z.any()).default({}).optional().openapi({description:"Addons enabled for this client and their associated configurations."}),token_endpoint_auth_method:e.z.enum(["none","client_secret_post","client_secret_basic"]).default("client_secret_basic").optional().openapi({description:"Defines the requested authentication method for the token endpoint. Can be none (public client without a client secret), client_secret_post (client uses HTTP POST parameters), or client_secret_basic (client uses HTTP Basic)."}),client_metadata:e.z.record(e.z.string().max(255)).default({}).optional().openapi({description:'Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/()<>@ [Tab][Space]'}),mobile:e.z.record(e.z.any()).default({}).optional().openapi({description:"Additional configuration for native mobile apps."}),initiate_login_uri:e.z.string().url().optional().openapi({description:"Initiate login uri, must be https"}),native_social_login:e.z.record(e.z.any()).default({}).optional(),refresh_token:e.z.record(e.z.any()).default({}).optional().openapi({description:"Refresh token configuration"}),default_organization:e.z.record(e.z.any()).default({}).optional().openapi({description:"Defines the default Organization ID and flows"}),organization_usage:e.z.enum(["deny","allow","require"]).default("deny").optional().openapi({description:"Defines how to proceed during an authentication transaction with regards an organization. Can be deny (default), allow or require."}),organization_require_behavior:e.z.enum(["no_prompt","pre_login_prompt","post_login_prompt"]).default("no_prompt").optional().openapi({description:"Defines how to proceed during an authentication transaction when client.organization_usage: 'require'. Can be no_prompt (default), pre_login_prompt or post_login_prompt. post_login_prompt requires oidc_conformant: true."}),client_authentication_methods:e.z.record(e.z.any()).default({}).optional().openapi({description:"Defines client authentication methods."}),require_pushed_authorization_requests:e.z.boolean().default(!1).openapi({description:"Makes the use of Pushed Authorization Requests mandatory for this client"}),require_proof_of_possession:e.z.boolean().default(!1).openapi({description:"Makes the use of Proof-of-Possession mandatory for this client"}),signed_request_object:e.z.record(e.z.any()).default({}).optional().openapi({description:"JWT-secured Authorization Requests (JAR) settings."}),compliance_level:e.z.enum(["none","fapi1_adv_pkj_par","fapi1_adv_mtls_par","fapi2_sp_pkj_mtls","fapi2_sp_mtls_mtls"]).optional().openapi({description:"Defines the compliance level for this client, which may restrict it's capabilities"}),par_request_expiry:e.z.number().optional().openapi({description:"Specifies how long, in seconds, a Pushed Authorization Request URI remains valid"}),token_quota:e.z.record(e.z.any()).default({}).optional()}),H=e.z.object({created_at:e.z.string(),updated_at:e.z.string(),...M.shape}),G=e.z.object({client_id:e.z.string().min(1).openapi({description:"ID of the client."}),audience:e.z.string().min(1).openapi({description:"The audience (API identifier) of this client grant."}),scope:e.z.array(e.z.string()).optional().openapi({description:"Scopes allowed for this client grant."}),organization_usage:e.z.enum(["deny","allow","require"]).optional().openapi({description:"Defines whether organizations can be used with client credentials exchanges for this grant."}),allow_any_organization:e.z.boolean().optional().openapi({description:"If enabled, any organization can be used with this grant. If disabled (default), the grant must be explicitly assigned to the desired organizations."}),is_system:e.z.boolean().optional().openapi({description:"If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly."}),subject_type:e.z.enum(["client","user"]).optional().openapi({description:"The type of application access the client grant allows. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement."}),authorization_details_types:e.z.array(e.z.string()).optional().openapi({description:"Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement."})}),B=e.z.object({id:e.z.string().openapi({description:"ID of the client grant."}),...G.shape,created_at:e.z.string().optional(),updated_at:e.z.string().optional()}),Ct=e.z.array(B),l=e.z.object({x:e.z.number(),y:e.z.number()});var b=(t=>(t.RICH_TEXT="RICH_TEXT",t.NEXT_BUTTON="NEXT_BUTTON",t.BACK_BUTTON="BACK_BUTTON",t.SUBMIT_BUTTON="SUBMIT_BUTTON",t.DIVIDER="DIVIDER",t.TEXT="TEXT",t.EMAIL="EMAIL",t.PASSWORD="PASSWORD",t.NUMBER="NUMBER",t.PHONE="PHONE",t.DATE="DATE",t.CHECKBOX="CHECKBOX",t.RADIO="RADIO",t.SELECT="SELECT",t.HIDDEN="HIDDEN",t.LEGAL="LEGAL",t))(b||{}),f=(t=>(t.BLOCK="BLOCK",t.FIELD="FIELD",t))(f||{});const g=e.z.object({id:e.z.string(),category:e.z.nativeEnum(f),type:e.z.nativeEnum(b)}),K=g.extend({category:e.z.literal("BLOCK"),type:e.z.literal("RICH_TEXT"),config:e.z.object({content:e.z.string()}).passthrough()}),W=g.extend({category:e.z.literal("BLOCK"),type:e.z.union([e.z.literal("NEXT_BUTTON"),e.z.literal("BACK_BUTTON"),e.z.literal("SUBMIT_BUTTON")]),config:e.z.object({text:e.z.string()}).passthrough()}),V=g.extend({category:e.z.literal("FIELD"),type:e.z.literal("LEGAL"),required:e.z.boolean().optional(),sensitive:e.z.boolean().optional(),config:e.z.object({text:e.z.string()}).passthrough()}),X=g.extend({category:e.z.literal("FIELD"),type:e.z.union([e.z.literal("TEXT"),e.z.literal("EMAIL"),e.z.literal("PASSWORD"),e.z.literal("NUMBER"),e.z.literal("PHONE"),e.z.literal("DATE"),e.z.literal("CHECKBOX"),e.z.literal("RADIO"),e.z.literal("SELECT"),e.z.literal("HIDDEN")]),required:e.z.boolean().optional(),sensitive:e.z.boolean().optional(),config:e.z.object({label:e.z.string().optional(),placeholder:e.z.string().optional()}).passthrough()}),q=e.z.object({id:e.z.string(),category:e.z.string(),type:e.z.string()}).passthrough(),Y=e.z.union([K,W,V,X,q]);var Q=(t=>(t.STEP="STEP",t.FLOW="FLOW",t.CONDITION="CONDITION",t.ACTION="ACTION",t))(Q||{});const J=e.z.object({id:e.z.string(),type:e.z.literal("STEP"),coordinates:l,alias:e.z.string().optional(),config:e.z.object({components:e.z.array(Y),next_node:e.z.string()}).passthrough()}),Z=e.z.object({id:e.z.string(),type:e.z.literal("FLOW"),coordinates:l,alias:e.z.string().optional(),config:e.z.object({flow_id:e.z.string(),next_node:e.z.string()})}),$=e.z.object({id:e.z.string(),type:e.z.literal("ACTION"),coordinates:l,alias:e.z.string().optional(),config:e.z.object({action_type:e.z.enum(["REDIRECT"]).openapi({description:"The type of action to perform"}),target:e.z.enum(["change-email","account","custom"]).openapi({description:"The predefined target to redirect to"}),custom_url:e.z.string().optional().openapi({description:"Custom URL when target is 'custom'"}),next_node:e.z.string().openapi({description:"The next node to navigate to after action (for non-redirect actions)"})}).passthrough()}),ee=e.z.object({id:e.z.string(),type:e.z.string(),coordinates:l}).passthrough(),te=e.z.union([J,Z,$,ee]),oe=e.z.object({next_node:e.z.string(),coordinates:l}).passthrough(),ne=e.z.object({resume_flow:e.z.boolean().optional(),coordinates:l}).passthrough(),ie=e.z.object({id:e.z.string(),name:e.z.string(),languages:e.z.object({primary:e.z.string()}).passthrough(),nodes:e.z.array(te),start:oe,ending:ne,created_at:e.z.string(),updated_at:e.z.string(),links:e.z.object({sdkSrc:e.z.string().optional(),sdk_src:e.z.string().optional()}).passthrough()}).passthrough(),yt=ie.omit({id:!0,created_at:!0,updated_at:!0});var E=(t=>(t.TOKEN="token",t.TOKEN_ID_TOKEN="token id_token",t.CODE="code",t))(E||{}),A=(t=>(t.QUERY="query",t.FRAGMENT="fragment",t.FORM_POST="form_post",t.WEB_MESSAGE="web_message",t.SAML_POST="saml_post",t))(A||{}),I=(t=>(t.S256="S256",t.Plain="plain",t))(I||{});const ae=e.z.object({client_id:e.z.string(),act_as:e.z.string().optional(),response_type:e.z.nativeEnum(E).optional(),response_mode:e.z.nativeEnum(A).optional(),redirect_uri:e.z.string().optional(),audience:e.z.string().optional(),organization:e.z.string().optional(),state:e.z.string().optional(),nonce:e.z.string().optional(),scope:e.z.string().optional(),prompt:e.z.string().optional(),code_challenge_method:e.z.nativeEnum(I).optional(),code_challenge:e.z.string().optional(),username:e.z.string().optional(),ui_locales:e.z.string().optional(),vendor_id:e.z.string().optional()}),Tt=e.z.object({colors:e.z.object({primary:e.z.string(),page_background:e.z.object({type:e.z.string().optional(),start:e.z.string().optional(),end:e.z.string().optional(),angle_deg:e.z.number().optional()}).optional()}).optional(),logo_url:e.z.string().optional(),favicon_url:e.z.string().optional(),powered_by_logo_url:e.z.string().optional(),font:e.z.object({url:e.z.string()}).optional()}),re=e.z.object({kid:e.z.string().optional(),team_id:e.z.string().optional(),realms:e.z.string().optional(),authentication_method:e.z.string().optional(),client_id:e.z.string().optional(),client_secret:e.z.string().optional(),app_secret:e.z.string().optional(),scope:e.z.string().optional(),authorization_endpoint:e.z.string().optional(),token_endpoint:e.z.string().optional(),userinfo_endpoint:e.z.string().optional(),jwks_uri:e.z.string().optional(),discovery_url:e.z.string().optional(),issuer:e.z.string().optional(),provider:e.z.string().optional(),from:e.z.string().optional(),twilio_sid:e.z.string().optional(),twilio_token:e.z.string().optional(),icon_url:e.z.string().optional()}),se=e.z.object({id:e.z.string().optional(),name:e.z.string(),display_name:e.z.string().optional(),strategy:e.z.string(),options:re.default({}),enabled_clients:e.z.array(e.z.string()).default([]).optional(),response_type:e.z.custom().optional(),response_mode:e.z.custom().optional(),is_domain_connection:e.z.boolean().optional(),show_as_button:e.z.boolean().optional(),metadata:e.z.record(e.z.any()).optional(),is_system:e.z.boolean().optional()}),le=e.z.object({id:e.z.string(),created_at:e.z.string().transform(t=>t===null?"":t),updated_at:e.z.string().transform(t=>t===null?"":t)}).extend(se.shape),ce=e.z.object({id:e.z.string().optional(),audience:e.z.string(),friendly_name:e.z.string(),picture_url:e.z.string().optional(),support_email:e.z.string().optional(),support_url:e.z.string().optional(),sender_email:e.z.string().email(),sender_name:e.z.string(),session_lifetime:e.z.number().optional(),idle_session_lifetime:e.z.number().optional(),ephemeral_session_lifetime:e.z.number().optional(),idle_ephemeral_session_lifetime:e.z.number().optional(),session_cookie:e.z.object({mode:e.z.enum(["persistent","non-persistent"]).optional()}).optional(),allowed_logout_urls:e.z.array(e.z.string()).optional(),default_redirection_uri:e.z.string().optional(),enabled_locales:e.z.array(e.z.string()).optional(),default_directory:e.z.string().optional(),error_page:e.z.object({html:e.z.string().optional(),show_log_link:e.z.boolean().optional(),url:e.z.string().optional()}).optional(),flags:e.z.object({allow_changing_enable_sso:e.z.boolean().optional(),allow_legacy_delegation_grant_types:e.z.boolean().optional(),allow_legacy_ro_grant_types:e.z.boolean().optional(),allow_legacy_tokeninfo_endpoint:e.z.boolean().optional(),change_pwd_flow_v1:e.z.boolean().optional(),custom_domains_provisioning:e.z.boolean().optional(),dashboard_insights_view:e.z.boolean().optional(),dashboard_log_streams_next:e.z.boolean().optional(),disable_clickjack_protection_headers:e.z.boolean().optional(),disable_fields_map_fix:e.z.boolean().optional(),disable_impersonation:e.z.boolean().optional(),disable_management_api_sms_obfuscation:e.z.boolean().optional(),enable_adfs_waad_email_verification:e.z.boolean().optional(),enable_apis_section:e.z.boolean().optional(),enable_client_connections:e.z.boolean().optional(),enable_custom_domain_in_emails:e.z.boolean().optional(),enable_dynamic_client_registration:e.z.boolean().optional(),enable_idtoken_api2:e.z.boolean().optional(),enable_legacy_logs_search_v2:e.z.boolean().optional(),enable_legacy_profile:e.z.boolean().optional(),enable_pipeline2:e.z.boolean().optional(),enable_public_signup_user_exists_error:e.z.boolean().optional(),enable_sso:e.z.boolean().optional(),enforce_client_authentication_on_passwordless_start:e.z.boolean().optional(),genai_trial:e.z.boolean().optional(),improved_signup_bot_detection_in_classic:e.z.boolean().optional(),mfa_show_factor_list_on_enrollment:e.z.boolean().optional(),no_disclose_enterprise_connections:e.z.boolean().optional(),remove_alg_from_jwks:e.z.boolean().optional(),revoke_refresh_token_grant:e.z.boolean().optional(),trust_azure_adfs_email_verified_connection_property:e.z.boolean().optional(),use_scope_descriptions_for_consent:e.z.boolean().optional(),inherit_global_permissions_in_organizations:e.z.boolean().optional()}).optional(),sandbox_version:e.z.string().optional(),legacy_sandbox_version:e.z.string().optional(),sandbox_versions_available:e.z.array(e.z.string()).optional(),change_password:e.z.object({enabled:e.z.boolean().optional(),html:e.z.string().optional()}).optional(),guardian_mfa_page:e.z.object({enabled:e.z.boolean().optional(),html:e.z.string().optional()}).optional(),device_flow:e.z.object({charset:e.z.enum(["base20","digits"]).optional(),mask:e.z.string().max(20).optional()}).optional(),default_token_quota:e.z.object({clients:e.z.object({client_credentials:e.z.record(e.z.any()).optional()}).optional(),organizations:e.z.object({client_credentials:e.z.record(e.z.any()).optional()}).optional()}).optional(),default_audience:e.z.string().optional(),default_organization:e.z.string().optional(),sessions:e.z.object({oidc_logout_prompt_enabled:e.z.boolean().optional()}).optional(),oidc_logout:e.z.object({rp_logout_end_session_endpoint_discovery:e.z.boolean().optional()}).optional(),allow_organization_name_in_authentication_api:e.z.boolean().optional(),customize_mfa_in_postlogin_action:e.z.boolean().optional(),acr_values_supported:e.z.array(e.z.string()).optional(),mtls:e.z.object({enable_endpoint_aliases:e.z.boolean().optional()}).optional(),pushed_authorization_requests_supported:e.z.boolean().optional(),authorization_response_iss_parameter_supported:e.z.boolean().optional()}),pe=e.z.object({created_at:e.z.string().nullable().transform(t=>t??""),updated_at:e.z.string().nullable().transform(t=>t??""),...ce.shape,id:e.z.string()}),Ot=e.z.object({...H.shape,tenant:pe,connections:e.z.array(le)}),_e=e.z.enum(["password_reset","email_verification","otp","authorization_code","oauth2_state","ticket"]),de=e.z.object({code_id:e.z.string().openapi({description:"The code that will be used in for instance an email verification flow"}),login_id:e.z.string().openapi({description:"The id of the login session that the code is connected to"}),connection_id:e.z.string().optional().openapi({description:"The connection that the code is connected to"}),code_type:_e,code_verifier:e.z.string().optional().openapi({description:"The code verifier used in PKCE in outbound flows"}),code_challenge:e.z.string().optional().openapi({description:"The code challenge used in PKCE in outbound flows"}),code_challenge_method:e.z.enum(["plain","S256"]).optional().openapi({description:"The code challenge method used in PKCE in outbound flows"}),redirect_uri:e.z.string().optional().openapi({description:"The redirect URI associated with the code"}),nonce:e.z.string().optional().openapi({description:"The nonce value used for security in OIDC flows"}),state:e.z.string().optional().openapi({description:"The state parameter used for CSRF protection in OAuth flows"}),expires_at:e.z.string(),used_at:e.z.string().optional(),user_id:e.z.string().optional()}),Nt=e.z.object({...de.shape,created_at:e.z.string()}),ze=e.z.object({domain:e.z.string(),custom_domain_id:e.z.string().optional(),type:e.z.enum(["auth0_managed_certs","self_managed_certs"]),verification_method:e.z.enum(["txt"]).optional(),tls_policy:e.z.enum(["recommended"]).optional(),custom_client_ip_header:e.z.enum(["true-client-ip","cf-connecting-ip","x-forwarded-for","x-azure-clientip","null"]).optional(),domain_metadata:e.z.record(e.z.string().max(255)).optional()}),ge=e.z.object({name:e.z.literal("txt"),record:e.z.string(),domain:e.z.string()}),me=e.z.object({...ze.shape,custom_domain_id:e.z.string(),primary:e.z.boolean(),status:e.z.enum(["disabled","pending","pending_verification","ready"]),origin_domain_name:e.z.string().optional(),verification:e.z.object({methods:e.z.array(ge)}).optional(),tls_policy:e.z.string().optional()}),Rt=me.extend({tenant_id:e.z.string()}),C=e.z.object({id:e.z.string(),order:e.z.number().optional(),visible:e.z.boolean().optional().default(!0)}),i=C.extend({category:e.z.literal("BLOCK").optional()}),Lt=i.extend({type:e.z.literal("DIVIDER"),config:e.z.object({}).optional()}),Dt=i.extend({type:e.z.literal("HTML"),config:e.z.object({content:e.z.string().optional()}).optional()}),wt=i.extend({type:e.z.literal("IMAGE"),config:e.z.object({src:e.z.string().optional(),alt:e.z.string().optional(),width:e.z.number().optional(),height:e.z.number().optional()}).optional()}),jt=i.extend({type:e.z.literal("JUMP_BUTTON"),config:e.z.object({text:e.z.string().optional(),target_step:e.z.string().optional()})}),kt=i.extend({type:e.z.literal("RESEND_BUTTON"),config:e.z.object({text:e.z.string().optional(),resend_action:e.z.string().optional()})}),Ut=i.extend({type:e.z.literal("NEXT_BUTTON"),config:e.z.object({text:e.z.string().optional()})}),Ft=i.extend({type:e.z.literal("PREVIOUS_BUTTON"),config:e.z.object({text:e.z.string().optional()})}),vt=i.extend({type:e.z.literal("RICH_TEXT"),config:e.z.object({content:e.z.string().optional()}).optional()}),y=C.extend({category:e.z.literal("WIDGET").optional(),label:e.z.string().min(1).optional(),hint:e.z.string().min(1).max(500).optional(),required:e.z.boolean().optional(),sensitive:e.z.boolean().optional()}),xt=y.extend({type:e.z.literal("AUTH0_VERIFIABLE_CREDENTIALS"),config:e.z.object({credential_type:e.z.string().optional()})}),Pt=y.extend({type:e.z.literal("GMAPS_ADDRESS"),config:e.z.object({api_key:e.z.string().optional()})}),Mt=y.extend({type:e.z.literal("RECAPTCHA"),config:e.z.object({site_key:e.z.string().optional()})}),o=C.extend({category:e.z.literal("FIELD").optional(),label:e.z.string().min(1).optional(),hint:e.z.string().min(1).max(500).optional(),required:e.z.boolean().optional(),sensitive:e.z.boolean().optional()}),Ht=o.extend({type:e.z.literal("BOOLEAN"),config:e.z.object({default_value:e.z.boolean().optional()}).optional()}),Gt=o.extend({type:e.z.literal("CARDS"),config:e.z.object({options:e.z.array(e.z.object({value:e.z.string(),label:e.z.string(),description:e.z.string().optional(),image:e.z.string().optional()})).optional(),multi_select:e.z.boolean().optional()}).optional()}),Bt=o.extend({type:e.z.literal("CHOICE"),config:e.z.object({options:e.z.array(e.z.object({value:e.z.string(),label:e.z.string()})).optional(),display:e.z.enum(["radio","checkbox"]).optional()}).optional()}),Kt=o.extend({type:e.z.literal("CUSTOM"),config:e.z.object({component:e.z.string().optional(),props:e.z.record(e.z.any()).optional()})}),Wt=o.extend({type:e.z.literal("DATE"),config:e.z.object({format:e.z.string().optional(),min:e.z.string().optional(),max:e.z.string().optional()}).optional()}),Vt=o.extend({type:e.z.literal("DROPDOWN"),config:e.z.object({options:e.z.array(e.z.object({value:e.z.string(),label:e.z.string()})).optional(),placeholder:e.z.string().optional(),searchable:e.z.boolean().optional()}).optional()}),Xt=o.extend({type:e.z.literal("EMAIL"),config:e.z.object({placeholder:e.z.string().optional()}).optional()}),qt=o.extend({type:e.z.literal("FILE"),config:e.z.object({accept:e.z.string().optional(),max_size:e.z.number().optional(),multiple:e.z.boolean().optional()}).optional()}),Yt=o.extend({type:e.z.literal("LEGAL"),config:e.z.object({text:e.z.string(),html:e.z.boolean().optional()}).optional()}),Qt=o.extend({type:e.z.literal("NUMBER"),config:e.z.object({placeholder:e.z.string().optional(),min:e.z.number().optional(),max:e.z.number().optional(),step:e.z.number().optional()}).optional()}),Jt=o.extend({type:e.z.literal("PASSWORD"),config:e.z.object({placeholder:e.z.string().optional(),min_length:e.z.number().optional(),show_toggle:e.z.boolean().optional()}).optional()}),Zt=o.extend({type:e.z.literal("PAYMENT"),config:e.z.object({provider:e.z.string().optional(),currency:e.z.string().optional()}).optional()}),$t=o.extend({type:e.z.literal("SOCIAL"),config:e.z.object({providers:e.z.array(e.z.string()).optional()}).optional()}),eo=o.extend({type:e.z.literal("TEL"),config:e.z.object({placeholder:e.z.string().optional(),default_country:e.z.string().optional()}).optional()}),to=o.extend({type:e.z.literal("TEXT"),config:e.z.object({placeholder:e.z.string().optional(),multiline:e.z.boolean().optional(),max_length:e.z.number().optional()}).optional()}),oo=o.extend({type:e.z.literal("URL"),config:e.z.object({placeholder:e.z.string().optional()}).optional()}),ue=e.z.discriminatedUnion("type",[Lt,Dt,wt,jt,kt,Ut,Ft,vt]),he=e.z.discriminatedUnion("type",[xt,Pt,Mt]),Se=e.z.discriminatedUnion("type",[Ht,Gt,Bt,Kt,Wt,Vt,Xt,qt,Yt,Qt,Jt,Zt,$t,eo,to,oo]),T=e.z.union([ue,he,Se]),no=e.z.object({id:e.z.string(),type:e.z.literal("submit"),label:e.z.string(),className:e.z.string().optional(),disabled:e.z.boolean().optional().default(!1),order:e.z.number().optional(),visible:e.z.boolean().optional().default(!0),customizations:e.z.record(e.z.string(),e.z.any()).optional()}),_=e.z.object({x:e.z.number(),y:e.z.number()}),io=e.z.object({id:e.z.string(),type:e.z.literal("FLOW"),coordinates:_,alias:e.z.string().min(1).max(150).optional(),config:e.z.object({flow_id:e.z.string().max(30),next_node:e.z.string().optional()})}),ao=e.z.object({id:e.z.string(),type:e.z.literal("ROUTER"),coordinates:_,alias:e.z.string().min(1).max(150),config:e.z.object({rules:e.z.array(e.z.object({id:e.z.string(),alias:e.z.string().min(1).max(150).optional(),condition:e.z.any(),next_node:e.z.string()})),fallback:e.z.string()})}),ro=e.z.object({id:e.z.string(),type:e.z.literal("STEP"),coordinates:_,alias:e.z.string().min(1).max(150).optional(),config:e.z.object({components:e.z.array(T),next_node:e.z.string().optional()})}),be=e.z.discriminatedUnion("type",[io,ao,ro]),fe=e.z.object({name:e.z.string().openapi({description:"The name of the form"}),messages:e.z.object({errors:e.z.record(e.z.string(),e.z.any()).optional(),custom:e.z.record(e.z.string(),e.z.any()).optional()}).optional(),languages:e.z.object({primary:e.z.string().optional(),default:e.z.string().optional()}).optional(),translations:e.z.record(e.z.string(),e.z.any()).optional(),nodes:e.z.array(be).optional(),start:e.z.object({hidden_fields:e.z.array(e.z.object({key:e.z.string(),value:e.z.string()})).optional(),next_node:e.z.string().optional(),coordinates:_.optional()}).optional(),ending:e.z.object({redirection:e.z.object({delay:e.z.number().optional(),target:e.z.string().optional()}).optional(),after_submit:e.z.object({flow_id:e.z.string().optional()}).optional(),coordinates:_.optional(),resume_flow:e.z.boolean().optional()}).optional(),style:e.z.object({css:e.z.string().optional()}).optional()}).openapi({description:"Schema for flow-based forms (matches Auth0 Forms structure)"}),so=e.z.object({...s.shape,...fe.shape,id:e.z.string()}),Ee=e.z.object({id:e.z.number().optional(),text:e.z.string(),type:e.z.enum(["info","error","success","warning"])}),Ae=e.z.object({id:e.z.string().optional(),text:e.z.string(),href:e.z.string(),linkText:e.z.string().optional()}),lo=e.z.object({action:e.z.string(),method:e.z.enum(["POST","GET"]),title:e.z.string().optional(),description:e.z.string().optional(),components:e.z.array(T),messages:e.z.array(Ee).optional(),links:e.z.array(Ae).optional()});function co(t){return t.category==="BLOCK"}function po(t){return t.category==="WIDGET"}function _o(t){return t.category==="FIELD"}const Ie=e.z.enum(["pre-user-registration","post-user-registration","post-user-login","validate-registration-username","pre-user-deletion","post-user-deletion"]),Ce=e.z.enum(["pre-user-registration","post-user-registration","post-user-login","validate-registration-username","pre-user-deletion","post-user-deletion"]),m={enabled:e.z.boolean().default(!1),synchronous:e.z.boolean().default(!1),priority:e.z.number().optional(),hook_id:e.z.string().optional()},zo=e.z.object({...m,trigger_id:Ie,url:e.z.string()}),go=e.z.object({...m,trigger_id:Ce,form_id:e.z.string()}),mo=e.z.union([zo,go]),uo=e.z.object({...m,trigger_id:Ie,...s.shape,hook_id:e.z.string(),url:e.z.string()}),ho=e.z.object({...m,trigger_id:Ce,...s.shape,hook_id:e.z.string(),form_id:e.z.string()}),So=e.z.union([uo,ho]),ye=e.z.object({name:e.z.string().optional()}),Te=e.z.object({email:e.z.string().optional()}),Oe=e.z.object({organization_id:e.z.string().max(50),inviter:ye,invitee:Te,invitation_url:e.z.string().url(),client_id:e.z.string(),connection_id:e.z.string().optional(),app_metadata:e.z.record(e.z.any()).default({}).optional(),user_metadata:e.z.record(e.z.any()).default({}).optional(),ttl_sec:e.z.number().int().max(2592e3).default(604800).optional(),roles:e.z.array(e.z.string()).default([]).optional(),send_invitation_email:e.z.boolean().default(!0).optional()}),bo=e.z.object({id:e.z.string(),organization_id:e.z.string().max(50),created_at:e.z.string().datetime(),expires_at:e.z.string().datetime(),ticket_id:e.z.string().optional()}).extend(Oe.shape),Ne=e.z.object({alg:e.z.enum(["RS256","RS384","RS512","ES256","ES384","ES512","HS256","HS384","HS512"]),e:e.z.string(),kid:e.z.string(),kty:e.z.enum(["RSA","EC","oct"]),n:e.z.string(),x5t:e.z.string().optional(),x5c:e.z.array(e.z.string()).optional(),use:e.z.enum(["sig","enc"]).optional()}),fo=e.z.object({keys:e.z.array(Ne)}),Eo=e.z.object({issuer:e.z.string(),authorization_endpoint:e.z.string(),token_endpoint:e.z.string(),device_authorization_endpoint:e.z.string(),userinfo_endpoint:e.z.string(),mfa_challenge_endpoint:e.z.string(),jwks_uri:e.z.string(),registration_endpoint:e.z.string(),revocation_endpoint:e.z.string(),scopes_supported:e.z.array(e.z.string()),response_types_supported:e.z.array(e.z.string()),code_challenge_methods_supported:e.z.array(e.z.string()),response_modes_supported:e.z.array(e.z.string()),subject_types_supported:e.z.array(e.z.string()),id_token_signing_alg_values_supported:e.z.array(e.z.string()),token_endpoint_auth_methods_supported:e.z.array(e.z.string()),claims_supported:e.z.array(e.z.string()),request_uri_parameter_supported:e.z.boolean(),request_parameter_supported:e.z.boolean(),token_endpoint_auth_signing_alg_values_supported:e.z.array(e.z.string())}),Re=e.z.object({csrf_token:e.z.string(),auth0Client:e.z.string().optional(),authParams:ae,expires_at:e.z.string(),deleted_at:e.z.string().optional(),ip:e.z.string().optional(),useragent:e.z.string().optional(),session_id:e.z.string().optional(),authorization_url:e.z.string().optional(),login_completed:e.z.boolean().optional().default(!1)}).openapi({description:"This represents a login sesion"}),Ao=e.z.object({...Re.shape,id:e.z.string().openapi({description:"This is is used as the state in the universal login"}),created_at:e.z.string(),updated_at:e.z.string()}),Le={ACLS_SUMMARY:"acls_summary",ACTIONS_EXECUTION_FAILED:"actions_execution_failed",API_LIMIT:"api_limit",API_LIMIT_WARNING:"api_limit_warning",APPI:"appi",CIBA_EXCHANGE_FAILED:"ciba_exchange_failed",CIBA_EXCHANGE_SUCCEEDED:"ciba_exchange_succeeded",CIBA_START_FAILED:"ciba_start_failed",CIBA_START_SUCCEEDED:"ciba_start_succeeded",CODE_LINK_SENT:"cls",CODE_SENT:"cs",DEPRECATION_NOTICE:"depnote",FAILED_LOGIN:"f",FAILED_BY_CONNECTOR:"fc",FAILED_CHANGE_EMAIL:"fce",FAILED_BY_CORS:"fco",FAILED_CROSS_ORIGIN_AUTHENTICATION:"fcoa",FAILED_CHANGE_PASSWORD:"fcp",FAILED_POST_CHANGE_PASSWORD_HOOK:"fcph",FAILED_CHANGE_PHONE_NUMBER:"fcpn",FAILED_CHANGE_PASSWORD_REQUEST:"fcpr",FAILED_CONNECTOR_PROVISIONING:"fcpro",FAILED_CHANGE_USERNAME:"fcu",FAILED_DELEGATION:"fd",FAILED_DEVICE_ACTIVATION:"fdeac",FAILED_DEVICE_AUTHORIZATION_REQUEST:"fdeaz",USER_CANCELED_DEVICE_CONFIRMATION:"fdecc",FAILED_USER_DELETION:"fdu",FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN:"feacft",FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS:"feccft",FAILED_EXCHANGE_CUSTOM_TOKEN:"fecte",FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN:"fede",FAILED_FEDERATED_LOGOUT:"federated_logout_failed",FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN:"fens",FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN:"feoobft",FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN:"feotpft",FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN:"fepft",FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN:"fepotpft",FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN:"fercft",FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN:"ferrt",FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN:"fertft",FAILED_HOOK:"fh",FAILED_INVITE_ACCEPT:"fi",FAILED_LOGOUT:"flo",FLOWS_EXECUTION_COMPLETED:"flows_execution_completed",FLOWS_EXECUTION_FAILED:"flows_execution_failed",FAILED_SENDING_NOTIFICATION:"fn",FORMS_SUBMISSION_FAILED:"forms_submission_failed",FORMS_SUBMISSION_SUCCEEDED:"forms_submission_succeeded",FAILED_LOGIN_INCORRECT_PASSWORD:"fp",FAILED_PUSHED_AUTHORIZATION_REQUEST:"fpar",FAILED_POST_USER_REGISTRATION_HOOK:"fpurh",FAILED_SIGNUP:"fs",FAILED_SILENT_AUTH:"fsa",FAILED_LOGIN_INVALID_EMAIL_USERNAME:"fu",FAILED_USERS_IMPORT:"fui",FAILED_VERIFICATION_EMAIL:"fv",FAILED_VERIFICATION_EMAIL_REQUEST:"fvr",EMAIL_VERIFICATION_CONFIRMED:"gd_auth_email_verification",EMAIL_VERIFICATION_FAILED:"gd_auth_fail_email_verification",MFA_AUTH_FAILED:"gd_auth_failed",MFA_AUTH_REJECTED:"gd_auth_rejected",MFA_AUTH_SUCCESS:"gd_auth_succeed",MFA_ENROLLMENT_COMPLETE:"gd_enrollment_complete",TOO_MANY_MFA_FAILURES:"gd_otp_rate_limit_exceed",MFA_RECOVERY_FAILED:"gd_recovery_failed",MFA_RECOVERY_RATE_LIMIT_EXCEED:"gd_recovery_rate_limit_exceed",MFA_RECOVERY_SUCCESS:"gd_recovery_succeed",MFA_EMAIL_SENT:"gd_send_email",EMAIL_VERIFICATION_SENT:"gd_send_email_verification",EMAIL_VERIFICATION_SEND_FAILURE:"gd_send_email_verification_failure",PUSH_NOTIFICATION_SENT:"gd_send_pn",ERROR_SENDING_MFA_PUSH_NOTIFICATION:"gd_send_pn_failure",MFA_SMS_SENT:"gd_send_sms",ERROR_SENDING_MFA_SMS:"gd_send_sms_failure",MFA_VOICE_CALL_SUCCESS:"gd_send_voice",MFA_VOICE_CALL_FAILED:"gd_send_voice_failure",SECOND_FACTOR_STARTED:"gd_start_auth",MFA_ENROLL_STARTED:"gd_start_enroll",MFA_ENROLLMENT_FAILED:"gd_start_enroll_failed",GUARDIAN_TENANT_UPDATE:"gd_tenant_update",UNENROLL_DEVICE_ACCOUNT:"gd_unenroll",UPDATE_DEVICE_ACCOUNT:"gd_update_device_account",WEBAUTHN_CHALLENGE_FAILED:"gd_webauthn_challenge_failed",WEBAUTHN_ENROLLMENT_FAILED:"gd_webauthn_enrollment_failed",FAILED_KMS_API_OPERATION:"kms_key_management_failure",SUCCESS_KMS_API_OPERATION:"kms_key_management_success",KMS_KEY_STATE_CHANGED:"kms_key_state_changed",TOO_MANY_CALLS_TO_DELEGATION:"limit_delegation",BLOCKED_IP_ADDRESS:"limit_mu",BLOCKED_ACCOUNT_IP:"limit_sul",BLOCKED_ACCOUNT_EMAIL:"limit_wc",MFA_REQUIRED:"mfar",MANAGEMENT_API_READ_OPERATION:"mgmt_api_read",FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT:"my_account_authentication_method_failed",SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT:"my_account_authentication_method_succeeded",FAILED_OIDC_BACKCHANNEL_LOGOUT:"oidc_backchannel_logout_failed",SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT:"oidc_backchannel_logout_succeeded",ORGANIZATION_MEMBER_ADDED:"organization_member_added",PASSKEY_CHALLENGE_FAILED:"passkey_challenge_failed",PASSKEY_CHALLENGE_STARTED:"passkey_challenge_started",PRE_LOGIN_ASSESSMENT:"pla",BREACHED_PASSWORD:"pwd_leak",BREACHED_PASSWORD_ON_RESET:"reset_pwd_leak",SUCCESS_RESOURCE_CLEANUP:"resource_cleanup",RICH_CONSENTS_ACCESS_ERROR:"rich_consents_access_error",SUCCESS_LOGIN:"s",SUCCESS_API_OPERATION:"sapi",SUCCESS_CHANGE_EMAIL:"sce",SUCCESS_CROSS_ORIGIN_AUTHENTICATION:"scoa",SUCCESS_CHANGE_PASSWORD:"scp",SUCCESS_CHANGE_PHONE_NUMBER:"scpn",SUCCESS_CHANGE_PASSWORD_REQUEST:"scpr",SUCCESS_CHANGE_USERNAME:"scu",SUCCESS_CREDENTIAL_VALIDATION:"scv",SUCCESS_DELEGATION:"sd",SUCCESS_USER_DELETION:"sdu",SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN:"seacft",SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS:"seccft",SUCCESS_EXCHANGE_CUSTOM_TOKEN:"secte",SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN:"sede",SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN:"sens",SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN:"seoobft",SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN:"seotpft",SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN:"sepft",SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN:"sepkoobft",SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN:"sepkotpft",SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN:"sepkrcft",SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN:"sercft",SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN:"sertft",SUCCESSFULLY_ACCEPTED_USER_INVITE:"si",BREACHED_PASSWORD_ON_SIGNUP:"signup_pwd_leak",SUCCESS_LOGOUT:"slo",SUCCESS_REVOCATION:"srrt",SUCCESS_SIGNUP:"ss",FAILED_SS_SSO_OPERATION:"ss_sso_failure",INFORMATION_FROM_SS_SSO_OPERATION:"ss_sso_info",SUCCESS_SS_SSO_OPERATION:"ss_sso_success",SUCCESS_SILENT_AUTH:"ssa",SUCCESSFUL_SCIM_OPERATION:"sscim",SUCCESSFULLY_IMPORTED_USERS:"sui",SUCCESS_VERIFICATION_EMAIL:"sv",SUCCESS_VERIFICATION_EMAIL_REQUEST:"svr",MAX_AMOUNT_OF_AUTHENTICATORS:"too_many_records",USER_LOGIN_BLOCK_RELEASED:"ublkdu",FAILED_UNIVERSAL_LOGOUT:"universal_logout_failed",SUCCESSFUL_UNIVERSAL_LOGOUT:"universal_logout_succeeded",WARNING_DURING_LOGIN:"w",WARNING_SENDING_NOTIFICATION:"wn",WARNING_USER_MANAGEMENT:"wum"},Io=e.z.string().refine(t=>Object.values(Le).includes(t),{message:"Invalid log type"}),De=e.z.object({name:e.z.string(),version:e.z.string(),env:e.z.object({node:e.z.string().optional()}).optional()}),we=e.z.object({country_code:e.z.string().length(2),city_name:e.z.string(),latitude:e.z.string(),longitude:e.z.string(),time_zone:e.z.string(),continent_code:e.z.string()}),je=e.z.object({type:Io,date:e.z.string(),description:e.z.string().optional(),ip:e.z.string().optional(),user_agent:e.z.string().optional(),details:e.z.any().optional(),isMobile:e.z.boolean(),user_id:e.z.string().optional(),user_name:e.z.string().optional(),connection:e.z.string().optional(),connection_id:e.z.string().optional(),client_id:e.z.string().optional(),client_name:e.z.string().optional(),audience:e.z.string().optional(),scope:e.z.string().optional(),strategy:e.z.string().optional(),strategy_type:e.z.string().optional(),hostname:e.z.string().optional(),auth0_client:De.optional(),log_id:e.z.string().optional(),location_info:we.optional()}),Co=e.z.object({...je.shape,log_id:e.z.string()}),ke=e.z.object({id:e.z.string().optional(),user_id:e.z.string(),password:e.z.string(),algorithm:e.z.enum(["bcrypt","argon2id"]).default("argon2id"),is_current:e.z.boolean().default(!0)}),yo=ke.extend({id:e.z.string(),created_at:e.z.string(),updated_at:e.z.string()}),Ue=e.z.object({initial_user_agent:e.z.string().describe("First user agent of the device from which this user logged in"),initial_ip:e.z.string().describe("First IP address associated with this session"),initial_asn:e.z.string().describe("First autonomous system number associated with this session"),last_user_agent:e.z.string().describe("Last user agent of the device from which this user logged in"),last_ip:e.z.string().describe("Last IP address from which this user logged in"),last_asn:e.z.string().describe("Last autonomous system number from which this user logged in")}),Fe=e.z.object({id:e.z.string(),revoked_at:e.z.string().optional(),used_at:e.z.string().optional(),user_id:e.z.string().describe("The user ID associated with the session"),expires_at:e.z.string().optional(),login_session_id:e.z.string(),idle_expires_at:e.z.string().optional(),device:Ue.describe("Metadata related to the device used in the session"),clients:e.z.array(e.z.string()).describe("List of client details for the session")}),To=e.z.object({created_at:e.z.string(),updated_at:e.z.string(),authenticated_at:e.z.string(),last_interaction_at:e.z.string(),...Fe.shape}),Oo=e.z.object({kid:e.z.string().openapi({description:"The key id of the signing key"}),cert:e.z.string().openapi({description:"The public certificate of the signing key"}),fingerprint:e.z.string().openapi({description:"The cert fingerprint"}),thumbprint:e.z.string().openapi({description:"The cert thumbprint"}),pkcs7:e.z.string().optional().openapi({description:"The private key in pkcs7 format"}),current:e.z.boolean().optional().openapi({description:"True if the key is the current key"}),next:e.z.boolean().optional().openapi({description:"True if the key is the next key"}),previous:e.z.boolean().optional().openapi({description:"True if the key is the previous key"}),current_since:e.z.string().optional().openapi({description:"The date and time when the key became the current key"}),current_until:e.z.string().optional().openapi({description:"The date and time when the current key was rotated"}),revoked:e.z.boolean().optional().openapi({description:"True if the key is revoked"}),revoked_at:e.z.string().optional().openapi({description:"The date and time when the key was revoked"}),connection:e.z.string().optional().openapi({description:"The connection identifier associated with the key"}),type:e.z.enum(["jwt_signing","saml_encryption"]).openapi({description:"The type of the signing key"})});var ve=(t=>(t.RefreshToken="refresh_token",t.AuthorizationCode="authorization_code",t.ClientCredential="client_credentials",t.Passwordless="passwordless",t.Password="password",t.OTP="http://auth0.com/oauth/grant-type/passwordless/otp",t))(ve||{});const No=e.z.object({access_token:e.z.string(),id_token:e.z.string().optional(),scope:e.z.string().optional(),state:e.z.string().optional(),refresh_token:e.z.string().optional(),token_type:e.z.string(),expires_in:e.z.number()});e.z.object({code:e.z.string(),state:e.z.string().optional()});const xe=e.z.object({button_border_radius:e.z.number(),button_border_weight:e.z.number(),buttons_style:e.z.enum(["pill","rounded","sharp"]),input_border_radius:e.z.number(),input_border_weight:e.z.number(),inputs_style:e.z.enum(["pill","rounded","sharp"]),show_widget_shadow:e.z.boolean(),widget_border_weight:e.z.number(),widget_corner_radius:e.z.number()}),Pe=e.z.object({base_focus_color:e.z.string(),base_hover_color:e.z.string(),body_text:e.z.string(),captcha_widget_theme:e.z.enum(["auto","dark","light"]),error:e.z.string(),header:e.z.string(),icons:e.z.string(),input_background:e.z.string(),input_border:e.z.string(),input_filled_text:e.z.string(),input_labels_placeholders:e.z.string(),links_focused_components:e.z.string(),primary_button:e.z.string(),primary_button_label:e.z.string(),secondary_button_border:e.z.string(),secondary_button_label:e.z.string(),success:e.z.string(),widget_background:e.z.string(),widget_border:e.z.string()}),r=e.z.object({bold:e.z.boolean(),size:e.z.number()}),Me=e.z.object({body_text:r,buttons_text:r,font_url:e.z.string(),input_labels:r,links:r,links_style:e.z.enum(["normal","underlined"]),reference_text_size:e.z.number(),subtitle:r,title:r}),He=e.z.object({background_color:e.z.string(),background_image_url:e.z.string(),page_layout:e.z.enum(["center","left","right"])}),Ge=e.z.object({header_text_alignment:e.z.enum(["center","left","right"]),logo_height:e.z.number(),logo_position:e.z.enum(["center","left","none","right"]),logo_url:e.z.string(),social_buttons_layout:e.z.enum(["bottom","top"])}),Be=e.z.object({borders:xe,colors:Pe,displayName:e.z.string(),fonts:Me,page_background:He,widget:Ge}),Ro=Be.extend({themeId:e.z.string()}),Lo=e.z.object({universal_login_experience:e.z.enum(["new","classic"]).default("new"),identifier_first:e.z.boolean().default(!0),password_first:e.z.boolean().default(!1),webauthn_platform_first_factor:e.z.boolean()}),Do=e.z.object({name:e.z.string(),enabled:e.z.boolean().optional().default(!0),default_from_address:e.z.string().optional(),credentials:e.z.union([e.z.object({accessKeyId:e.z.string(),secretAccessKey:e.z.string(),region:e.z.string()}),e.z.object({smtp_host:e.z.array(e.z.string()),smtp_port:e.z.number(),smtp_user:e.z.string(),smtp_pass:e.z.string()}),e.z.object({api_key:e.z.string(),domain:e.z.string().optional()}),e.z.object({connectionString:e.z.string()}),e.z.object({tenantId:e.z.string(),clientId:e.z.string(),clientSecret:e.z.string()})]),settings:e.z.object({}).optional()}),Ke=e.z.object({id:e.z.string(),session_id:e.z.string(),user_id:e.z.string(),client_id:e.z.string(),expires_at:e.z.string().optional(),idle_expires_at:e.z.string().optional(),last_exchanged_at:e.z.string().optional(),device:Ue,resource_servers:e.z.array(e.z.object({audience:e.z.string(),scopes:e.z.string()})),rotating:e.z.boolean()}),wo=e.z.object({created_at:e.z.string(),...Ke.shape}),jo=e.z.object({to:e.z.string(),message:e.z.string()}),ko=e.z.object({name:e.z.string(),options:e.z.object({})}),We=e.z.object({value:e.z.string(),description:e.z.string().optional()}),Ve=e.z.object({token_dialect:e.z.enum(["access_token","access_token_authz"]).optional(),enforce_policies:e.z.boolean().optional(),allow_skipping_userinfo:e.z.boolean().optional(),skip_userinfo:e.z.boolean().optional(),persist_client_authorization:e.z.boolean().optional(),enable_introspection_endpoint:e.z.boolean().optional(),mtls:e.z.object({bound_access_tokens:e.z.boolean().optional()}).optional()}),Xe=e.z.object({id:e.z.string().optional(),name:e.z.string(),identifier:e.z.string(),scopes:e.z.array(We).optional(),signing_alg:e.z.string().optional(),signing_secret:e.z.string().optional(),token_lifetime:e.z.number().optional(),token_lifetime_for_web:e.z.number().optional(),skip_consent_for_verifiable_first_party_clients:e.z.boolean().optional(),allow_offline_access:e.z.boolean().optional(),verificationKey:e.z.string().optional(),options:Ve.optional(),is_system:e.z.boolean().optional()}),qe=e.z.object({...Xe.shape,created_at:e.z.string().optional(),updated_at:e.z.string().optional()}),Uo=e.z.array(qe),Ye=e.z.object({role_id:e.z.string(),resource_server_identifier:e.z.string(),permission_name:e.z.string()}),Qe=e.z.object({...Ye.shape,created_at:e.z.string()}),Fo=e.z.array(Qe),Je=e.z.object({user_id:e.z.string(),resource_server_identifier:e.z.string(),permission_name:e.z.string(),organization_id:e.z.string().optional()}),Ze=e.z.object({...Je.shape,tenant_id:e.z.string(),created_at:e.z.string().optional()}),vo=e.z.array(Ze),$e=e.z.object({user_id:e.z.string(),resource_server_identifier:e.z.string(),resource_server_name:e.z.string(),permission_name:e.z.string(),description:e.z.string().nullable().optional(),created_at:e.z.string().optional(),organization_id:e.z.string().optional()}),xo=e.z.array($e),et=e.z.object({user_id:e.z.string(),role_id:e.z.string(),organization_id:e.z.string().optional()}),tt=e.z.object({...et.shape,tenant_id:e.z.string(),created_at:e.z.string().optional()}),Po=e.z.array(tt),ot=e.z.object({id:e.z.string().optional().openapi({description:"The unique identifier of the role. If not provided, one will be generated."}),name:e.z.string().min(1).max(50).openapi({description:"The name of the role. Cannot include '<' or '>'"}),description:e.z.string().max(255).optional().openapi({description:"The description of the role"}),is_system:e.z.boolean().optional()}),nt=ot.extend({id:e.z.string().openapi({description:"The unique identifier of the role"}),created_at:e.z.string().optional(),updated_at:e.z.string().optional()}),Mo=e.z.array(nt),it=e.z.object({logo_url:e.z.string().optional().openapi({description:"URL of the organization's logo"}),colors:e.z.object({primary:e.z.string().optional().openapi({description:"Primary color in hex format (e.g., #FF0000)"}),page_background:e.z.string().optional().openapi({description:"Page background color in hex format (e.g., #FFFFFF)"})}).optional()}).optional(),at=e.z.object({connection_id:e.z.string().openapi({description:"ID of the connection"}),assign_membership_on_login:e.z.boolean().default(!1).openapi({description:"Whether to assign membership to the organization on login"}),show_as_button:e.z.boolean().default(!0).openapi({description:"Whether to show this connection as a button in the login screen"}),is_signup_enabled:e.z.boolean().default(!0).openapi({description:"Whether signup is enabled for this connection"})}),rt=e.z.object({client_credentials:e.z.object({enforce:e.z.boolean().default(!1).openapi({description:"Whether to enforce token quota limits"}),per_day:e.z.number().min(0).default(0).openapi({description:"Maximum tokens per day (0 = unlimited)"}),per_hour:e.z.number().min(0).default(0).openapi({description:"Maximum tokens per hour (0 = unlimited)"})}).optional()}).optional(),st=e.z.object({id:e.z.string().optional(),name:e.z.string().min(1).openapi({description:"The name of the organization"}),display_name:e.z.string().optional().openapi({description:"The display name of the organization"}),branding:it,metadata:e.z.record(e.z.any()).default({}).optional().openapi({description:"Custom metadata for the organization"}),enabled_connections:e.z.array(at).default([]).optional().openapi({description:"List of enabled connections for the organization"}),token_quota:rt}),Ho=e.z.object({...st.shape,...s.shape,id:e.z.string()}),lt=e.z.object({user_id:e.z.string().openapi({description:"ID of the user"}),organization_id:e.z.string().openapi({description:"ID of the organization"})}),Go=e.z.object({...lt.shape,...s.shape,id:e.z.string()}),Bo=e.z.object({idle_session_lifetime:e.z.number().optional(),session_lifetime:e.z.number().optional(),session_cookie:e.z.object({mode:e.z.enum(["persistent","non-persistent"]).optional()}).optional(),enable_client_connections:e.z.boolean().optional(),default_redirection_uri:e.z.string().optional(),enabled_locales:e.z.array(e.z.string()).optional(),default_directory:e.z.string().optional(),error_page:e.z.object({html:e.z.string().optional(),show_log_link:e.z.boolean().optional(),url:e.z.string().optional()}).optional(),flags:e.z.object({allow_legacy_delegation_grant_types:e.z.boolean().optional(),allow_legacy_ro_grant_types:e.z.boolean().optional(),allow_legacy_tokeninfo_endpoint:e.z.boolean().optional(),disable_clickjack_protection_headers:e.z.boolean().optional(),enable_apis_section:e.z.boolean().optional(),enable_client_connections:e.z.boolean().optional(),enable_custom_domain_in_emails:e.z.boolean().optional(),enable_dynamic_client_registration:e.z.boolean().optional(),enable_idtoken_api2:e.z.boolean().optional(),enable_legacy_logs_search_v2:e.z.boolean().optional(),enable_legacy_profile:e.z.boolean().optional(),enable_pipeline2:e.z.boolean().optional(),enable_public_signup_user_exists_error:e.z.boolean().optional(),use_scope_descriptions_for_consent:e.z.boolean().optional(),disable_management_api_sms_obfuscation:e.z.boolean().optional(),enable_adfs_waad_email_verification:e.z.boolean().optional(),revoke_refresh_token_grant:e.z.boolean().optional(),dashboard_log_streams_next:e.z.boolean().optional(),dashboard_insights_view:e.z.boolean().optional(),disable_fields_map_fix:e.z.boolean().optional(),mfa_show_factor_list_on_enrollment:e.z.boolean().optional()}).optional(),friendly_name:e.z.string().optional(),picture_url:e.z.string().optional(),support_email:e.z.string().optional(),support_url:e.z.string().optional(),sandbox_version:e.z.string().optional(),sandbox_versions_available:e.z.array(e.z.string()).optional(),change_password:e.z.object({enabled:e.z.boolean(),html:e.z.string()}).optional(),guardian_mfa_page:e.z.object({enabled:e.z.boolean(),html:e.z.string()}).optional(),default_audience:e.z.string().optional(),default_organization:e.z.string().optional(),sessions:e.z.object({oidc_logout_prompt_enabled:e.z.boolean().optional()}).optional()}),Ko=e.z.object({date:e.z.string().openapi({description:"Date these events occurred in ISO 8601 format",example:"2025-12-19"}),logins:e.z.number().openapi({description:"Number of logins on this date",example:150}),signups:e.z.number().openapi({description:"Number of signups on this date",example:25}),leaked_passwords:e.z.number().openapi({description:"Number of breached-password detections on this date (subscription required)",example:0}),updated_at:e.z.string().openapi({description:"Date and time this stats entry was last updated in ISO 8601 format",example:"2025-12-19T10:30:00.000Z"}),created_at:e.z.string().openapi({description:"Approximate date and time the first event occurred in ISO 8601 format",example:"2025-12-19T00:00:00.000Z"})}),Wo=e.z.number().openapi({description:"Number of active users in the last 30 days",example:1234});function Vo(t){const[a,c]=t.split("|");if(!a||!c)throw new Error(`Invalid user_id: ${t}`);return{connection:a,id:c}}function Xo(t){const{primary:a,secondaries:c,syncMethods:ct=["create","update","remove","delete","set"]}=t,pt={get(d,n){if(typeof n=="symbol")return d[n];const z=d[n];return typeof z!="function"?z:ct.includes(n)?async(...u)=>{const _t=await z.apply(d,u),h=[];for(const p of c){const O=p.adapter[n];if(typeof O!="function")continue;const dt=(async()=>{try{await O.apply(p.adapter,u)}catch(N){try{p.onError?p.onError(N,n,u):console.error(`Passthrough adapter: secondary write failed for ${n}:`,N)}catch(zt){console.error(`Passthrough adapter: onError handler threw for ${n}:`,zt)}}})();p.blocking&&h.push(dt)}return h.length>0&&await Promise.all(h),_t}:z.bind(d)}};return new Proxy(a,pt)}function qo(t){return t}exports.Auth0ActionEnum=mt;exports.Auth0Client=De;exports.AuthorizationResponseMode=A;exports.AuthorizationResponseType=E;exports.CodeChallengeMethod=I;exports.ComponentCategory=f;exports.ComponentType=b;exports.EmailActionEnum=ut;exports.FlowActionTypeEnum=gt;exports.GrantType=ve;exports.LocationInfo=we;exports.LogTypes=Le;exports.NodeType=Q;exports.RedirectTargetEnum=w;exports.actionNodeSchema=$;exports.activeUsersResponseSchema=Wo;exports.auth0FlowInsertSchema=yt;exports.auth0FlowSchema=ie;exports.auth0QuerySchema=St;exports.auth0UpdateUserActionSchema=L;exports.auth0UserResponseSchema=ft;exports.authParamsSchema=ae;exports.baseUserSchema=S;exports.blockComponentSchema=ue;exports.bordersSchema=xe;exports.brandingSchema=Tt;exports.buttonComponentSchema=W;exports.clientGrantInsertSchema=G;exports.clientGrantListSchema=Ct;exports.clientGrantSchema=B;exports.clientInsertSchema=M;exports.clientSchema=H;exports.codeInsertSchema=de;exports.codeSchema=Nt;exports.codeTypeSchema=_e;exports.colorsSchema=Pe;exports.componentMessageSchema=Ee;exports.componentSchema=Y;exports.connectionInsertSchema=se;exports.connectionOptionsSchema=re;exports.connectionSchema=le;exports.coordinatesSchema=l;exports.createPassthroughAdapter=Xo;exports.createWriteOnlyAdapter=qo;exports.customDomainInsertSchema=ze;exports.customDomainSchema=me;exports.customDomainWithTenantIdSchema=Rt;exports.dailyStatsSchema=Ko;exports.emailProviderSchema=Do;exports.emailVerificationRulesSchema=R;exports.emailVerifyActionSchema=D;exports.endingSchema=ne;exports.fieldComponentSchema=Se;exports.flowActionStepSchema=k;exports.flowInsertSchema=U;exports.flowSchema=ht;exports.flowsFieldComponentSchema=X;exports.flowsFlowNodeSchema=Z;exports.flowsStepNodeSchema=J;exports.fontDetailsSchema=r;exports.fontsSchema=Me;exports.formControlSchema=no;exports.formInsertSchema=fe;exports.formNodeComponentDefinition=T;exports.formNodeSchema=be;exports.formSchema=so;exports.genericComponentSchema=q;exports.genericNodeSchema=ee;exports.hookInsertSchema=mo;exports.hookSchema=So;exports.identitySchema=v;exports.inviteInsertSchema=Oe;exports.inviteSchema=bo;exports.inviteeSchema=Te;exports.inviterSchema=ye;exports.isBlockComponent=co;exports.isFieldComponent=_o;exports.isWidgetComponent=po;exports.jwksKeySchema=fo;exports.jwksSchema=Ne;exports.legacyClientSchema=Ot;exports.legalComponentSchema=V;exports.logInsertSchema=je;exports.logSchema=Co;exports.loginSessionInsertSchema=Re;exports.loginSessionSchema=Ao;exports.nodeSchema=te;exports.openIDConfigurationSchema=Eo;exports.organizationBrandingSchema=it;exports.organizationEnabledConnectionSchema=at;exports.organizationInsertSchema=st;exports.organizationSchema=Ho;exports.organizationTokenQuotaSchema=rt;exports.pageBackgroundSchema=He;exports.parseUserId=Vo;exports.passwordInsertSchema=ke;exports.passwordSchema=yo;exports.profileDataSchema=F;exports.promptSettingSchema=Lo;exports.redirectActionSchema=j;exports.refreshTokenInsertSchema=Ke;exports.refreshTokenSchema=wo;exports.resourceServerInsertSchema=Xe;exports.resourceServerListSchema=Uo;exports.resourceServerOptionsSchema=Ve;exports.resourceServerSchema=qe;exports.resourceServerScopeSchema=We;exports.richTextComponentSchema=K;exports.roleInsertSchema=ot;exports.roleListSchema=Mo;exports.rolePermissionInsertSchema=Ye;exports.rolePermissionListSchema=Fo;exports.rolePermissionSchema=Qe;exports.roleSchema=nt;exports.screenLinkSchema=Ae;exports.sessionInsertSchema=Fe;exports.sessionSchema=To;exports.signingKeySchema=Oo;exports.smsProviderSchema=ko;exports.smsSendParamsSchema=jo;exports.startSchema=oe;exports.tenantInsertSchema=ce;exports.tenantSchema=pe;exports.tenantSettingsSchema=Bo;exports.themeInsertSchema=Be;exports.themeSchema=Ro;exports.tokenResponseSchema=No;exports.totalsSchema=bt;exports.uiScreenSchema=lo;exports.userInsertSchema=x;exports.userOrganizationInsertSchema=lt;exports.userOrganizationSchema=Go;exports.userPermissionInsertSchema=Je;exports.userPermissionListSchema=vo;exports.userPermissionSchema=Ze;exports.userPermissionWithDetailsListSchema=xo;exports.userPermissionWithDetailsSchema=$e;exports.userResponseSchema=Et;exports.userRoleInsertSchema=et;exports.userRoleListSchema=Po;exports.userRoleSchema=tt;exports.userSchema=P;exports.verificationMethodsSchema=ge;exports.widgetComponentSchema=he;exports.widgetSchema=Ge;
@@ -35684,6 +35684,7 @@ export declare const resourceServerOptionsSchema: z.ZodObject<{
35684
35684
  }>;
35685
35685
  export type ResourceServerOptions = z.infer<typeof resourceServerOptionsSchema>;
35686
35686
  export declare const resourceServerInsertSchema: z.ZodObject<{
35687
+ id: z.ZodOptional<z.ZodString>;
35687
35688
  name: z.ZodString;
35688
35689
  identifier: z.ZodString;
35689
35690
  scopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -35756,6 +35757,7 @@ export declare const resourceServerInsertSchema: z.ZodObject<{
35756
35757
  persist_client_authorization?: boolean | undefined;
35757
35758
  enable_introspection_endpoint?: boolean | undefined;
35758
35759
  } | undefined;
35760
+ id?: string | undefined;
35759
35761
  is_system?: boolean | undefined;
35760
35762
  scopes?: {
35761
35763
  value: string;
@@ -35782,6 +35784,7 @@ export declare const resourceServerInsertSchema: z.ZodObject<{
35782
35784
  persist_client_authorization?: boolean | undefined;
35783
35785
  enable_introspection_endpoint?: boolean | undefined;
35784
35786
  } | undefined;
35787
+ id?: string | undefined;
35785
35788
  is_system?: boolean | undefined;
35786
35789
  scopes?: {
35787
35790
  value: string;
@@ -35799,6 +35802,7 @@ export type ResourceServerInsert = z.input<typeof resourceServerInsertSchema>;
35799
35802
  export declare const resourceServerSchema: z.ZodObject<{
35800
35803
  created_at: z.ZodOptional<z.ZodString>;
35801
35804
  updated_at: z.ZodOptional<z.ZodString>;
35805
+ id: z.ZodOptional<z.ZodString>;
35802
35806
  name: z.ZodString;
35803
35807
  identifier: z.ZodString;
35804
35808
  scopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -35857,7 +35861,6 @@ export declare const resourceServerSchema: z.ZodObject<{
35857
35861
  enable_introspection_endpoint?: boolean | undefined;
35858
35862
  }>>;
35859
35863
  is_system: z.ZodOptional<z.ZodBoolean>;
35860
- id: z.ZodOptional<z.ZodString>;
35861
35864
  }, "strip", z.ZodTypeAny, {
35862
35865
  name: string;
35863
35866
  identifier: string;
@@ -35921,6 +35924,7 @@ export type ResourceServer = z.infer<typeof resourceServerSchema>;
35921
35924
  export declare const resourceServerListSchema: z.ZodArray<z.ZodObject<{
35922
35925
  created_at: z.ZodOptional<z.ZodString>;
35923
35926
  updated_at: z.ZodOptional<z.ZodString>;
35927
+ id: z.ZodOptional<z.ZodString>;
35924
35928
  name: z.ZodString;
35925
35929
  identifier: z.ZodString;
35926
35930
  scopes: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -35979,7 +35983,6 @@ export declare const resourceServerListSchema: z.ZodArray<z.ZodObject<{
35979
35983
  enable_introspection_endpoint?: boolean | undefined;
35980
35984
  }>>;
35981
35985
  is_system: z.ZodOptional<z.ZodBoolean>;
35982
- id: z.ZodOptional<z.ZodString>;
35983
35986
  }, "strip", z.ZodTypeAny, {
35984
35987
  name: string;
35985
35988
  identifier: string;
@@ -36258,25 +36261,29 @@ export declare const userRoleListSchema: z.ZodArray<z.ZodObject<{
36258
36261
  }>, "many">;
36259
36262
  export type UserRoleList = z.infer<typeof userRoleListSchema>;
36260
36263
  export declare const roleInsertSchema: z.ZodObject<{
36264
+ id: z.ZodOptional<z.ZodString>;
36261
36265
  name: z.ZodString;
36262
36266
  description: z.ZodOptional<z.ZodString>;
36263
36267
  is_system: z.ZodOptional<z.ZodBoolean>;
36264
36268
  }, "strip", z.ZodTypeAny, {
36265
36269
  name: string;
36266
36270
  description?: string | undefined;
36271
+ id?: string | undefined;
36267
36272
  is_system?: boolean | undefined;
36268
36273
  }, {
36269
36274
  name: string;
36270
36275
  description?: string | undefined;
36276
+ id?: string | undefined;
36271
36277
  is_system?: boolean | undefined;
36272
36278
  }>;
36273
36279
  export declare const roleSchema: z.ZodObject<{
36274
- created_at: z.ZodOptional<z.ZodString>;
36275
- updated_at: z.ZodOptional<z.ZodString>;
36276
36280
  name: z.ZodString;
36277
36281
  description: z.ZodOptional<z.ZodString>;
36278
36282
  is_system: z.ZodOptional<z.ZodBoolean>;
36283
+ } & {
36279
36284
  id: z.ZodString;
36285
+ created_at: z.ZodOptional<z.ZodString>;
36286
+ updated_at: z.ZodOptional<z.ZodString>;
36280
36287
  }, "strip", z.ZodTypeAny, {
36281
36288
  id: string;
36282
36289
  name: string;
@@ -36295,12 +36302,13 @@ export declare const roleSchema: z.ZodObject<{
36295
36302
  export type Role = z.infer<typeof roleSchema>;
36296
36303
  export type RoleInsert = z.infer<typeof roleInsertSchema>;
36297
36304
  export declare const roleListSchema: z.ZodArray<z.ZodObject<{
36298
- created_at: z.ZodOptional<z.ZodString>;
36299
- updated_at: z.ZodOptional<z.ZodString>;
36300
36305
  name: z.ZodString;
36301
36306
  description: z.ZodOptional<z.ZodString>;
36302
36307
  is_system: z.ZodOptional<z.ZodBoolean>;
36308
+ } & {
36303
36309
  id: z.ZodString;
36310
+ created_at: z.ZodOptional<z.ZodString>;
36311
+ updated_at: z.ZodOptional<z.ZodString>;
36304
36312
  }, "strip", z.ZodTypeAny, {
36305
36313
  id: string;
36306
36314
  name: string;
@@ -110,7 +110,7 @@ const s = e.object({
110
110
  access_token_secret: e.string().optional(),
111
111
  refresh_token: e.string().optional(),
112
112
  profileData: W.optional()
113
- }), C = e.object({
113
+ }), I = e.object({
114
114
  email: e.string().optional().transform((t) => t && t.toLowerCase()),
115
115
  username: e.string().optional(),
116
116
  phone_number: e.string().optional(),
@@ -125,7 +125,7 @@ const s = e.object({
125
125
  user_id: e.string().optional(),
126
126
  app_metadata: e.any().default({}).optional(),
127
127
  user_metadata: e.any().default({}).optional()
128
- }), X = C.extend({
128
+ }), X = I.extend({
129
129
  email_verified: e.boolean().default(!1),
130
130
  verify_email: e.boolean().optional(),
131
131
  last_ip: e.string().optional(),
@@ -143,7 +143,7 @@ const s = e.object({
143
143
  email: e.string().optional(),
144
144
  login_count: e.number().default(0),
145
145
  identities: e.array(z).optional()
146
- }), io = V, ao = C.extend({
146
+ }), io = V, ao = I.extend({
147
147
  login_count: e.number(),
148
148
  multifactor: e.array(e.string()).optional(),
149
149
  last_ip: e.string().optional(),
@@ -366,11 +366,11 @@ const Q = e.object({
366
366
  x: e.number(),
367
367
  y: e.number()
368
368
  });
369
- var I = /* @__PURE__ */ ((t) => (t.RICH_TEXT = "RICH_TEXT", t.NEXT_BUTTON = "NEXT_BUTTON", t.BACK_BUTTON = "BACK_BUTTON", t.SUBMIT_BUTTON = "SUBMIT_BUTTON", t.DIVIDER = "DIVIDER", t.TEXT = "TEXT", t.EMAIL = "EMAIL", t.PASSWORD = "PASSWORD", t.NUMBER = "NUMBER", t.PHONE = "PHONE", t.DATE = "DATE", t.CHECKBOX = "CHECKBOX", t.RADIO = "RADIO", t.SELECT = "SELECT", t.HIDDEN = "HIDDEN", t.LEGAL = "LEGAL", t))(I || {}), y = /* @__PURE__ */ ((t) => (t.BLOCK = "BLOCK", t.FIELD = "FIELD", t))(y || {});
369
+ var C = /* @__PURE__ */ ((t) => (t.RICH_TEXT = "RICH_TEXT", t.NEXT_BUTTON = "NEXT_BUTTON", t.BACK_BUTTON = "BACK_BUTTON", t.SUBMIT_BUTTON = "SUBMIT_BUTTON", t.DIVIDER = "DIVIDER", t.TEXT = "TEXT", t.EMAIL = "EMAIL", t.PASSWORD = "PASSWORD", t.NUMBER = "NUMBER", t.PHONE = "PHONE", t.DATE = "DATE", t.CHECKBOX = "CHECKBOX", t.RADIO = "RADIO", t.SELECT = "SELECT", t.HIDDEN = "HIDDEN", t.LEGAL = "LEGAL", t))(C || {}), y = /* @__PURE__ */ ((t) => (t.BLOCK = "BLOCK", t.FIELD = "FIELD", t))(y || {});
370
370
  const u = e.object({
371
371
  id: e.string(),
372
372
  category: e.nativeEnum(y),
373
- type: e.nativeEnum(I)
373
+ type: e.nativeEnum(C)
374
374
  }), ee = u.extend({
375
375
  category: e.literal(
376
376
  "BLOCK"
@@ -777,7 +777,7 @@ const me = e.object({
777
777
  "authorization_code",
778
778
  "oauth2_state",
779
779
  "ticket"
780
- ]), Ce = e.object({
780
+ ]), Ie = e.object({
781
781
  code_id: e.string().openapi({
782
782
  description: "The code that will be used in for instance an email verification flow"
783
783
  }),
@@ -810,9 +810,9 @@ const me = e.object({
810
810
  used_at: e.string().optional(),
811
811
  user_id: e.string().optional()
812
812
  }), po = e.object({
813
- ...Ce.shape,
813
+ ...Ie.shape,
814
814
  created_at: e.string()
815
- }), Ie = e.object({
815
+ }), Ce = e.object({
816
816
  domain: e.string(),
817
817
  custom_domain_id: e.string().optional(),
818
818
  type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -831,7 +831,7 @@ const me = e.object({
831
831
  record: e.string(),
832
832
  domain: e.string()
833
833
  }), Oe = e.object({
834
- ...Ie.shape,
834
+ ...Ce.shape,
835
835
  custom_domain_id: e.string(),
836
836
  primary: e.boolean(),
837
837
  status: e.enum(["disabled", "pending", "pending_verification", "ready"]),
@@ -876,12 +876,12 @@ const me = e.object({
876
876
  text: e.string().optional(),
877
877
  resend_action: e.string().optional()
878
878
  })
879
- }), je = i.extend({
879
+ }), we = i.extend({
880
880
  type: e.literal("NEXT_BUTTON"),
881
881
  config: e.object({
882
882
  text: e.string().optional()
883
883
  })
884
- }), we = i.extend({
884
+ }), je = i.extend({
885
885
  type: e.literal("PREVIOUS_BUTTON"),
886
886
  config: e.object({
887
887
  text: e.string().optional()
@@ -1040,8 +1040,8 @@ const me = e.object({
1040
1040
  Re,
1041
1041
  Le,
1042
1042
  De,
1043
- je,
1044
1043
  we,
1044
+ je,
1045
1045
  Ue
1046
1046
  ]), et = e.discriminatedUnion("type", [
1047
1047
  Fe,
@@ -1264,9 +1264,9 @@ const L = e.enum([
1264
1264
  x5t: e.string().optional(),
1265
1265
  x5c: e.array(e.string()).optional(),
1266
1266
  use: e.enum(["sig", "enc"]).optional()
1267
- }), Co = e.object({
1268
- keys: e.array(ht)
1269
1267
  }), Io = e.object({
1268
+ keys: e.array(ht)
1269
+ }), Co = e.object({
1270
1270
  issuer: e.string(),
1271
1271
  authorization_endpoint: e.string(),
1272
1272
  token_endpoint: e.string(),
@@ -1490,7 +1490,7 @@ const L = e.enum([
1490
1490
  longitude: e.string(),
1491
1491
  time_zone: e.string(),
1492
1492
  continent_code: e.string()
1493
- }), Ct = e.object({
1493
+ }), It = e.object({
1494
1494
  type: Et,
1495
1495
  date: e.string(),
1496
1496
  description: e.string().optional(),
@@ -1514,19 +1514,19 @@ const L = e.enum([
1514
1514
  log_id: e.string().optional(),
1515
1515
  location_info: At.optional()
1516
1516
  }), Oo = e.object({
1517
- ...Ct.shape,
1517
+ ...It.shape,
1518
1518
  log_id: e.string()
1519
- }), It = e.object({
1519
+ }), Ct = e.object({
1520
1520
  id: e.string().optional(),
1521
1521
  user_id: e.string(),
1522
1522
  password: e.string(),
1523
1523
  algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
1524
1524
  is_current: e.boolean().default(!0)
1525
- }), To = It.extend({
1525
+ }), To = Ct.extend({
1526
1526
  id: e.string(),
1527
1527
  created_at: e.string(),
1528
1528
  updated_at: e.string()
1529
- }), j = e.object({
1529
+ }), w = e.object({
1530
1530
  initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
1531
1531
  initial_ip: e.string().describe("First IP address associated with this session"),
1532
1532
  initial_asn: e.string().describe("First autonomous system number associated with this session"),
@@ -1541,7 +1541,7 @@ const L = e.enum([
1541
1541
  expires_at: e.string().optional(),
1542
1542
  login_session_id: e.string(),
1543
1543
  idle_expires_at: e.string().optional(),
1544
- device: j.describe(
1544
+ device: w.describe(
1545
1545
  "Metadata related to the device used in the session"
1546
1546
  ),
1547
1547
  clients: e.array(e.string()).describe("List of client details for the session")
@@ -1644,21 +1644,21 @@ const Tt = e.object({
1644
1644
  logo_position: e.enum(["center", "left", "none", "right"]),
1645
1645
  logo_url: e.string(),
1646
1646
  social_buttons_layout: e.enum(["bottom", "top"])
1647
- }), jt = e.object({
1647
+ }), wt = e.object({
1648
1648
  borders: Tt,
1649
1649
  colors: Nt,
1650
1650
  displayName: e.string(),
1651
1651
  fonts: Rt,
1652
1652
  page_background: Lt,
1653
1653
  widget: Dt
1654
- }), Do = jt.extend({
1654
+ }), Do = wt.extend({
1655
1655
  themeId: e.string()
1656
- }), jo = e.object({
1656
+ }), wo = e.object({
1657
1657
  universal_login_experience: e.enum(["new", "classic"]).default("new"),
1658
1658
  identifier_first: e.boolean().default(!0),
1659
1659
  password_first: e.boolean().default(!1),
1660
1660
  webauthn_platform_first_factor: e.boolean()
1661
- }), wo = e.object({
1661
+ }), jo = e.object({
1662
1662
  name: e.string(),
1663
1663
  enabled: e.boolean().optional().default(!0),
1664
1664
  default_from_address: e.string().optional(),
@@ -1688,7 +1688,7 @@ const Tt = e.object({
1688
1688
  })
1689
1689
  ]),
1690
1690
  settings: e.object({}).optional()
1691
- }), wt = e.object({
1691
+ }), jt = e.object({
1692
1692
  // The actual refresh token value (primary key).
1693
1693
  id: e.string(),
1694
1694
  // Link to the session record
@@ -1701,7 +1701,7 @@ const Tt = e.object({
1701
1701
  idle_expires_at: e.string().optional(),
1702
1702
  // When the token was last used.
1703
1703
  last_exchanged_at: e.string().optional(),
1704
- device: j,
1704
+ device: w,
1705
1705
  resource_servers: e.array(
1706
1706
  e.object({
1707
1707
  audience: e.string(),
@@ -1713,7 +1713,7 @@ const Tt = e.object({
1713
1713
  // When the refresh token record was created.
1714
1714
  created_at: e.string(),
1715
1715
  // Spread in the rest of the refresh token properties.
1716
- ...wt.shape
1716
+ ...jt.shape
1717
1717
  }), Fo = e.object({
1718
1718
  to: e.string(),
1719
1719
  message: e.string()
@@ -1734,6 +1734,7 @@ const Tt = e.object({
1734
1734
  bound_access_tokens: e.boolean().optional()
1735
1735
  }).optional()
1736
1736
  }), kt = e.object({
1737
+ id: e.string().optional(),
1737
1738
  name: e.string(),
1738
1739
  identifier: e.string(),
1739
1740
  scopes: e.array(Ut).optional(),
@@ -1747,7 +1748,6 @@ const Tt = e.object({
1747
1748
  options: Ft.optional(),
1748
1749
  is_system: e.boolean().optional()
1749
1750
  }), vt = e.object({
1750
- id: e.string().optional(),
1751
1751
  ...kt.shape,
1752
1752
  created_at: e.string().optional(),
1753
1753
  updated_at: e.string().optional()
@@ -1786,6 +1786,9 @@ const Tt = e.object({
1786
1786
  tenant_id: e.string(),
1787
1787
  created_at: e.string().optional()
1788
1788
  }), Ho = e.array(Kt), Wt = e.object({
1789
+ id: e.string().optional().openapi({
1790
+ description: "The unique identifier of the role. If not provided, one will be generated."
1791
+ }),
1789
1792
  name: e.string().min(1).max(50).openapi({
1790
1793
  description: "The name of the role. Cannot include '<' or '>'"
1791
1794
  }),
@@ -1793,11 +1796,10 @@ const Tt = e.object({
1793
1796
  description: "The description of the role"
1794
1797
  }),
1795
1798
  is_system: e.boolean().optional()
1796
- }), zt = e.object({
1799
+ }), zt = Wt.extend({
1797
1800
  id: e.string().openapi({
1798
1801
  description: "The unique identifier of the role"
1799
1802
  }),
1800
- ...Wt.shape,
1801
1803
  created_at: e.string().optional(),
1802
1804
  updated_at: e.string().optional()
1803
1805
  }), Go = e.array(zt), Xt = e.object({
@@ -1976,13 +1978,13 @@ function qo(t) {
1976
1978
  const {
1977
1979
  primary: a,
1978
1980
  secondaries: r,
1979
- syncMethods: w = ["create", "update", "remove", "delete", "set"]
1981
+ syncMethods: j = ["create", "update", "remove", "delete", "set"]
1980
1982
  } = t, U = {
1981
1983
  get(d, n) {
1982
1984
  if (typeof n == "symbol")
1983
1985
  return d[n];
1984
1986
  const g = d[n];
1985
- return typeof g != "function" ? g : w.includes(n) ? async (...h) => {
1987
+ return typeof g != "function" ? g : j.includes(n) ? async (...h) => {
1986
1988
  const F = await g.apply(d, h), b = [];
1987
1989
  for (const p of r) {
1988
1990
  const S = p.adapter[n];
@@ -2023,7 +2025,7 @@ export {
2023
2025
  O as AuthorizationResponseType,
2024
2026
  N as CodeChallengeMethod,
2025
2027
  y as ComponentCategory,
2026
- I as ComponentType,
2028
+ C as ComponentType,
2027
2029
  eo as EmailActionEnum,
2028
2030
  Zt as FlowActionTypeEnum,
2029
2031
  Ot as GrantType,
@@ -2039,7 +2041,7 @@ export {
2039
2041
  P as auth0UpdateUserActionSchema,
2040
2042
  io as auth0UserResponseSchema,
2041
2043
  me as authParamsSchema,
2042
- C as baseUserSchema,
2044
+ I as baseUserSchema,
2043
2045
  $e as blockComponentSchema,
2044
2046
  Tt as bordersSchema,
2045
2047
  lo as brandingSchema,
@@ -2049,7 +2051,7 @@ export {
2049
2051
  $ as clientGrantSchema,
2050
2052
  Q as clientInsertSchema,
2051
2053
  J as clientSchema,
2052
- Ce as codeInsertSchema,
2054
+ Ie as codeInsertSchema,
2053
2055
  po as codeSchema,
2054
2056
  Ae as codeTypeSchema,
2055
2057
  Nt as colorsSchema,
@@ -2061,11 +2063,11 @@ export {
2061
2063
  c as coordinatesSchema,
2062
2064
  qo as createPassthroughAdapter,
2063
2065
  Yo as createWriteOnlyAdapter,
2064
- Ie as customDomainInsertSchema,
2066
+ Ce as customDomainInsertSchema,
2065
2067
  Oe as customDomainSchema,
2066
2068
  _o as customDomainWithTenantIdSchema,
2067
2069
  zo as dailyStatsSchema,
2068
- wo as emailProviderSchema,
2070
+ jo as emailProviderSchema,
2069
2071
  x as emailVerificationRulesSchema,
2070
2072
  M as emailVerifyActionSchema,
2071
2073
  ge as endingSchema,
@@ -2095,16 +2097,16 @@ export {
2095
2097
  ho as isBlockComponent,
2096
2098
  fo as isFieldComponent,
2097
2099
  bo as isWidgetComponent,
2098
- Co as jwksKeySchema,
2100
+ Io as jwksKeySchema,
2099
2101
  ht as jwksSchema,
2100
2102
  co as legacyClientSchema,
2101
2103
  oe as legalComponentSchema,
2102
- Ct as logInsertSchema,
2104
+ It as logInsertSchema,
2103
2105
  Oo as logSchema,
2104
2106
  bt as loginSessionInsertSchema,
2105
2107
  yo as loginSessionSchema,
2106
2108
  _e as nodeSchema,
2107
- Io as openIDConfigurationSchema,
2109
+ Co as openIDConfigurationSchema,
2108
2110
  Xt as organizationBrandingSchema,
2109
2111
  Vt as organizationEnabledConnectionSchema,
2110
2112
  Yt as organizationInsertSchema,
@@ -2112,12 +2114,12 @@ export {
2112
2114
  qt as organizationTokenQuotaSchema,
2113
2115
  Lt as pageBackgroundSchema,
2114
2116
  Vo as parseUserId,
2115
- It as passwordInsertSchema,
2117
+ Ct as passwordInsertSchema,
2116
2118
  To as passwordSchema,
2117
2119
  W as profileDataSchema,
2118
- jo as promptSettingSchema,
2120
+ wo as promptSettingSchema,
2119
2121
  G as redirectActionSchema,
2120
- wt as refreshTokenInsertSchema,
2122
+ jt as refreshTokenInsertSchema,
2121
2123
  Uo as refreshTokenSchema,
2122
2124
  kt as resourceServerInsertSchema,
2123
2125
  vo as resourceServerListSchema,
@@ -2141,7 +2143,7 @@ export {
2141
2143
  Ee as tenantInsertSchema,
2142
2144
  Se as tenantSchema,
2143
2145
  Wo as tenantSettingsSchema,
2144
- jt as themeInsertSchema,
2146
+ wt as themeInsertSchema,
2145
2147
  Do as themeSchema,
2146
2148
  Lo as tokenResponseSchema,
2147
2149
  no as totalsSchema,
package/package.json CHANGED
@@ -11,7 +11,7 @@
11
11
  "type": "git",
12
12
  "url": "https://github.com/markusahlstrand/authhero"
13
13
  },
14
- "version": "0.115.0",
14
+ "version": "0.116.0",
15
15
  "files": [
16
16
  "dist"
17
17
  ],