@authhero/adapter-interfaces 0.132.0 → 0.134.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,14 +1,14 @@
1
1
  import { z as e } from "@hono/zod-openapi";
2
- const r = e.object({
2
+ const s = e.object({
3
3
  created_at: e.string(),
4
4
  updated_at: e.string()
5
- }), eo = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), to = e.enum([
5
+ }), ot = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), tt = e.enum([
6
6
  "CREATE_USER",
7
7
  "GET_USER",
8
8
  "UPDATE_USER",
9
9
  "SEND_REQUEST",
10
10
  "SEND_EMAIL"
11
- ]), oo = e.enum(["VERIFY_EMAIL"]), P = e.object({
11
+ ]), nt = e.enum(["VERIFY_EMAIL"]), P = e.object({
12
12
  require_mx_record: e.boolean().optional(),
13
13
  block_aliases: e.boolean().optional(),
14
14
  block_free_emails: e.boolean().optional(),
@@ -65,20 +65,20 @@ const r = e.object({
65
65
  actions: e.array(K).optional().default([]).openapi({
66
66
  description: "The list of actions to execute in sequence"
67
67
  })
68
- }), no = W.extend({
69
- ...r.shape,
68
+ }), it = W.extend({
69
+ ...s.shape,
70
70
  id: e.string().openapi({
71
71
  description: "Unique identifier for the flow",
72
72
  example: "af_12tMpdJ3iek7svMyZkSh5M"
73
73
  })
74
- }), io = e.object({
75
- page: e.string().min(0).optional().default("0").transform((t) => parseInt(t, 10)).openapi({
74
+ }), at = e.object({
75
+ page: e.string().min(0).optional().default("0").transform((o) => parseInt(o, 10)).openapi({
76
76
  description: "The page number where 0 is the first page"
77
77
  }),
78
- per_page: e.string().min(1).optional().default("10").transform((t) => parseInt(t, 10)).openapi({
78
+ per_page: e.string().min(1).optional().default("10").transform((o) => parseInt(o, 10)).openapi({
79
79
  description: "The number of items per page"
80
80
  }),
81
- include_totals: e.string().optional().default("false").transform((t) => t === "true").openapi({
81
+ include_totals: e.string().optional().default("false").transform((o) => o === "true").openapi({
82
82
  description: "If the total number of items should be included in the response"
83
83
  }),
84
84
  sort: e.string().regex(/^.+:(-1|1)$/).optional().openapi({
@@ -87,7 +87,7 @@ const r = e.object({
87
87
  q: e.string().optional().openapi({
88
88
  description: "A lucene query string used to filter the results"
89
89
  })
90
- }), ao = e.object({
90
+ }), st = e.object({
91
91
  start: e.number(),
92
92
  limit: e.number(),
93
93
  length: e.number(),
@@ -124,7 +124,7 @@ const r = e.object({
124
124
  country: e.string().optional()
125
125
  // Country name
126
126
  }).optional(), I = e.object({
127
- email: e.string().optional().transform((t) => t && t.toLowerCase()),
127
+ email: e.string().optional().transform((o) => o && o.toLowerCase()),
128
128
  username: e.string().optional(),
129
129
  phone_number: e.string().optional(),
130
130
  phone_verified: e.boolean().optional(),
@@ -171,24 +171,24 @@ const r = e.object({
171
171
  }).optional()
172
172
  }), Y = e.object({
173
173
  ...q.omit({ password: !0 }).shape,
174
- ...r.shape,
174
+ ...s.shape,
175
175
  user_id: e.string(),
176
176
  provider: e.string(),
177
177
  is_social: e.boolean(),
178
178
  email: e.string().optional(),
179
179
  login_count: e.number().default(0),
180
180
  identities: e.array(X).optional()
181
- }), ro = Y, so = I.extend({
181
+ }), rt = Y, lt = I.extend({
182
182
  login_count: e.number(),
183
183
  multifactor: e.array(e.string()).optional(),
184
184
  last_ip: e.string().optional(),
185
185
  last_login: e.string().optional(),
186
186
  user_id: e.string()
187
187
  }).catchall(e.any()), Q = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
188
- let J = (t = 21) => {
189
- let a = "", s = crypto.getRandomValues(new Uint8Array(t |= 0));
190
- for (; t--; )
191
- a += Q[s[t] & 63];
188
+ let J = (o = 21) => {
189
+ let a = "", r = crypto.getRandomValues(new Uint8Array(o |= 0));
190
+ for (; o--; )
191
+ a += Q[r[o] & 63];
192
192
  return a;
193
193
  };
194
194
  const Z = e.object({
@@ -364,7 +364,7 @@ const Z = e.object({
364
364
  description: "Specifies how long, in seconds, a Pushed Authorization Request URI remains valid"
365
365
  }),
366
366
  token_quota: e.record(e.any()).default({}).optional()
367
- }), lo = e.object({
367
+ }), ct = e.object({
368
368
  created_at: e.string(),
369
369
  updated_at: e.string(),
370
370
  ...Z.shape
@@ -400,16 +400,16 @@ const Z = e.object({
400
400
  ...$.shape,
401
401
  created_at: e.string().optional(),
402
402
  updated_at: e.string().optional()
403
- }), co = e.array(ee), c = e.object({
403
+ }), pt = e.array(ee), c = e.object({
404
404
  x: e.number(),
405
405
  y: e.number()
406
406
  });
407
- var C = /* @__PURE__ */ ((t) => (t.RICH_TEXT = "RICH_TEXT", t.NEXT_BUTTON = "NEXT_BUTTON", t.BACK_BUTTON = "BACK_BUTTON", t.SUBMIT_BUTTON = "SUBMIT_BUTTON", t.DIVIDER = "DIVIDER", t.TEXT = "TEXT", t.EMAIL = "EMAIL", t.PASSWORD = "PASSWORD", t.NUMBER = "NUMBER", t.PHONE = "PHONE", t.DATE = "DATE", t.CHECKBOX = "CHECKBOX", t.RADIO = "RADIO", t.SELECT = "SELECT", t.HIDDEN = "HIDDEN", t.LEGAL = "LEGAL", t))(C || {}), y = /* @__PURE__ */ ((t) => (t.BLOCK = "BLOCK", t.FIELD = "FIELD", t))(y || {});
407
+ var y = /* @__PURE__ */ ((o) => (o.RICH_TEXT = "RICH_TEXT", o.NEXT_BUTTON = "NEXT_BUTTON", o.BACK_BUTTON = "BACK_BUTTON", o.SUBMIT_BUTTON = "SUBMIT_BUTTON", o.DIVIDER = "DIVIDER", o.TEXT = "TEXT", o.EMAIL = "EMAIL", o.PASSWORD = "PASSWORD", o.NUMBER = "NUMBER", o.PHONE = "PHONE", o.DATE = "DATE", o.CHECKBOX = "CHECKBOX", o.RADIO = "RADIO", o.SELECT = "SELECT", o.HIDDEN = "HIDDEN", o.LEGAL = "LEGAL", o))(y || {}), C = /* @__PURE__ */ ((o) => (o.BLOCK = "BLOCK", o.FIELD = "FIELD", o))(C || {});
408
408
  const u = e.object({
409
409
  id: e.string(),
410
- category: e.nativeEnum(y),
411
- type: e.nativeEnum(C)
412
- }), te = u.extend({
410
+ category: e.nativeEnum(C),
411
+ type: e.nativeEnum(y)
412
+ }), oe = u.extend({
413
413
  category: e.literal(
414
414
  "BLOCK"
415
415
  /* BLOCK */
@@ -421,7 +421,7 @@ const u = e.object({
421
421
  config: e.object({
422
422
  content: e.string()
423
423
  }).passthrough()
424
- }), oe = u.extend({
424
+ }), te = u.extend({
425
425
  category: e.literal(
426
426
  "BLOCK"
427
427
  /* BLOCK */
@@ -514,14 +514,14 @@ const u = e.object({
514
514
  id: e.string(),
515
515
  category: e.string(),
516
516
  type: e.string()
517
- }).passthrough(), re = e.union([
518
- te,
517
+ }).passthrough(), se = e.union([
519
518
  oe,
519
+ te,
520
520
  ne,
521
521
  ie,
522
522
  ae
523
523
  ]);
524
- var se = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(se || {});
524
+ var re = /* @__PURE__ */ ((o) => (o.STEP = "STEP", o.FLOW = "FLOW", o.CONDITION = "CONDITION", o.ACTION = "ACTION", o))(re || {});
525
525
  const le = e.object({
526
526
  id: e.string(),
527
527
  type: e.literal(
@@ -531,7 +531,7 @@ const le = e.object({
531
531
  coordinates: c,
532
532
  alias: e.string().optional(),
533
533
  config: e.object({
534
- components: e.array(re),
534
+ components: e.array(se),
535
535
  next_node: e.string()
536
536
  }).passthrough()
537
537
  }), ce = e.object({
@@ -598,12 +598,12 @@ const le = e.object({
598
598
  sdkSrc: e.string().optional(),
599
599
  sdk_src: e.string().optional()
600
600
  }).passthrough()
601
- }).passthrough(), po = me.omit({
601
+ }).passthrough(), _t = me.omit({
602
602
  id: !0,
603
603
  created_at: !0,
604
604
  updated_at: !0
605
605
  });
606
- var T = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.ID_TOKEN = "id_token", t.TOKEN_ID_TOKEN = "token id_token", t.CODE = "code", t))(T || {}), O = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(O || {}), N = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(N || {});
606
+ var T = /* @__PURE__ */ ((o) => (o.TOKEN = "token", o.ID_TOKEN = "id_token", o.TOKEN_ID_TOKEN = "token id_token", o.CODE = "code", o))(T || {}), O = /* @__PURE__ */ ((o) => (o.QUERY = "query", o.FRAGMENT = "fragment", o.FORM_POST = "form_post", o.WEB_MESSAGE = "web_message", o.SAML_POST = "saml_post", o))(O || {}), N = /* @__PURE__ */ ((o) => (o.S256 = "S256", o.Plain = "plain", o))(N || {});
607
607
  const he = e.object({
608
608
  client_id: e.string(),
609
609
  act_as: e.string().optional(),
@@ -628,7 +628,7 @@ const he = e.object({
628
628
  acr_values: e.string().optional(),
629
629
  // The following fields are not available in Auth0
630
630
  vendor_id: e.string().optional()
631
- }), _o = e.object({
631
+ }), dt = e.object({
632
632
  colors: e.object({
633
633
  primary: e.string(),
634
634
  page_background: e.object({
@@ -683,7 +683,7 @@ const he = e.object({
683
683
  expires_at: e.string(),
684
684
  used_at: e.string().optional(),
685
685
  user_id: e.string().optional()
686
- }), go = e.object({
686
+ }), gt = e.object({
687
687
  ...fe.shape,
688
688
  created_at: e.string()
689
689
  }), Ee = e.object({
@@ -705,7 +705,23 @@ const he = e.object({
705
705
  from: e.string().optional(),
706
706
  twilio_sid: e.string().optional(),
707
707
  twilio_token: e.string().optional(),
708
- icon_url: e.string().optional()
708
+ icon_url: e.string().optional(),
709
+ // Password policy options for Username-Password-Authentication connections
710
+ passwordPolicy: e.enum(["none", "low", "fair", "good", "excellent"]).optional(),
711
+ password_complexity_options: e.object({
712
+ min_length: e.number().optional()
713
+ }).optional(),
714
+ password_history: e.object({
715
+ enable: e.boolean().optional(),
716
+ size: e.number().optional()
717
+ }).optional(),
718
+ password_no_personal_info: e.object({
719
+ enable: e.boolean().optional()
720
+ }).optional(),
721
+ password_dictionary: e.object({
722
+ enable: e.boolean().optional(),
723
+ dictionary: e.array(e.string()).optional()
724
+ }).optional()
709
725
  }), Se = e.object({
710
726
  id: e.string().optional(),
711
727
  name: e.string(),
@@ -719,10 +735,10 @@ const he = e.object({
719
735
  show_as_button: e.boolean().optional(),
720
736
  metadata: e.record(e.any()).optional(),
721
737
  is_system: e.boolean().optional()
722
- }), uo = e.object({
738
+ }), ut = e.object({
723
739
  id: e.string(),
724
- created_at: e.string().transform((t) => t === null ? "" : t),
725
- updated_at: e.string().transform((t) => t === null ? "" : t)
740
+ created_at: e.string().transform((o) => o === null ? "" : o),
741
+ updated_at: e.string().transform((o) => o === null ? "" : o)
726
742
  }).extend(Se.shape), Ae = e.object({
727
743
  domain: e.string(),
728
744
  custom_domain_id: e.string().optional(),
@@ -741,7 +757,7 @@ const he = e.object({
741
757
  name: e.literal("txt"),
742
758
  record: e.string(),
743
759
  domain: e.string()
744
- }), Ce = e.object({
760
+ }), ye = e.object({
745
761
  ...Ae.shape,
746
762
  custom_domain_id: e.string(),
747
763
  primary: e.boolean(),
@@ -751,7 +767,7 @@ const he = e.object({
751
767
  methods: e.array(Ie)
752
768
  }).optional(),
753
769
  tls_policy: e.string().optional()
754
- }), mo = Ce.extend({
770
+ }), mt = ye.extend({
755
771
  tenant_id: e.string()
756
772
  }), f = e.object({
757
773
  id: e.string(),
@@ -759,7 +775,7 @@ const he = e.object({
759
775
  visible: e.boolean().optional().default(!0)
760
776
  }), i = f.extend({
761
777
  category: e.literal("BLOCK").optional()
762
- }), ye = i.extend({
778
+ }), Ce = i.extend({
763
779
  type: e.literal("DIVIDER"),
764
780
  config: e.object({}).optional()
765
781
  }), Te = i.extend({
@@ -787,17 +803,17 @@ const he = e.object({
787
803
  text: e.string().optional(),
788
804
  resend_action: e.string().optional()
789
805
  })
790
- }), De = i.extend({
806
+ }), we = i.extend({
791
807
  type: e.literal("NEXT_BUTTON"),
792
808
  config: e.object({
793
809
  text: e.string().optional()
794
810
  })
795
- }), Le = i.extend({
811
+ }), De = i.extend({
796
812
  type: e.literal("PREVIOUS_BUTTON"),
797
813
  config: e.object({
798
814
  text: e.string().optional()
799
815
  })
800
- }), we = i.extend({
816
+ }), je = i.extend({
801
817
  type: e.literal("RICH_TEXT"),
802
818
  config: e.object({
803
819
  content: e.string().optional()
@@ -808,7 +824,7 @@ const he = e.object({
808
824
  hint: e.string().min(1).max(500).optional(),
809
825
  required: e.boolean().optional(),
810
826
  sensitive: e.boolean().optional()
811
- }), je = E.extend({
827
+ }), Le = E.extend({
812
828
  type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
813
829
  config: e.object({
814
830
  credential_type: e.string().optional()
@@ -818,23 +834,23 @@ const he = e.object({
818
834
  config: e.object({
819
835
  api_key: e.string().optional()
820
836
  })
821
- }), Ue = E.extend({
837
+ }), ve = E.extend({
822
838
  type: e.literal("RECAPTCHA"),
823
839
  config: e.object({
824
840
  site_key: e.string().optional()
825
841
  })
826
- }), o = f.extend({
842
+ }), t = f.extend({
827
843
  category: e.literal("FIELD").optional(),
828
844
  label: e.string().min(1).optional(),
829
845
  hint: e.string().min(1).max(500).optional(),
830
846
  required: e.boolean().optional(),
831
847
  sensitive: e.boolean().optional()
832
- }), Fe = o.extend({
848
+ }), Ue = t.extend({
833
849
  type: e.literal("BOOLEAN"),
834
850
  config: e.object({
835
851
  default_value: e.boolean().optional()
836
852
  }).optional()
837
- }), ve = o.extend({
853
+ }), Fe = t.extend({
838
854
  type: e.literal("CARDS"),
839
855
  config: e.object({
840
856
  options: e.array(
@@ -847,7 +863,7 @@ const he = e.object({
847
863
  ).optional(),
848
864
  multi_select: e.boolean().optional()
849
865
  }).optional()
850
- }), xe = o.extend({
866
+ }), xe = t.extend({
851
867
  type: e.literal("CHOICE"),
852
868
  config: e.object({
853
869
  options: e.array(
@@ -860,7 +876,7 @@ const he = e.object({
860
876
  multiple: e.boolean().optional(),
861
877
  default_value: e.union([e.string(), e.array(e.string())]).optional()
862
878
  }).optional()
863
- }), Pe = o.extend({
879
+ }), Pe = t.extend({
864
880
  type: e.literal("CUSTOM"),
865
881
  config: e.object({
866
882
  component: e.string().optional(),
@@ -868,14 +884,14 @@ const he = e.object({
868
884
  schema: e.record(e.any()).optional(),
869
885
  code: e.string().optional()
870
886
  })
871
- }), Me = o.extend({
887
+ }), Me = t.extend({
872
888
  type: e.literal("DATE"),
873
889
  config: e.object({
874
890
  format: e.string().optional(),
875
891
  min: e.string().optional(),
876
892
  max: e.string().optional()
877
893
  }).optional()
878
- }), He = o.extend({
894
+ }), He = t.extend({
879
895
  type: e.literal("DROPDOWN"),
880
896
  config: e.object({
881
897
  options: e.array(
@@ -889,25 +905,25 @@ const he = e.object({
889
905
  multiple: e.boolean().optional(),
890
906
  default_value: e.union([e.string(), e.array(e.string())]).optional()
891
907
  }).optional()
892
- }), Ge = o.extend({
908
+ }), Ge = t.extend({
893
909
  type: e.literal("EMAIL"),
894
910
  config: e.object({
895
911
  placeholder: e.string().optional()
896
912
  }).optional()
897
- }), Be = o.extend({
913
+ }), Be = t.extend({
898
914
  type: e.literal("FILE"),
899
915
  config: e.object({
900
916
  accept: e.string().optional(),
901
917
  max_size: e.number().optional(),
902
918
  multiple: e.boolean().optional()
903
919
  }).optional()
904
- }), Ke = o.extend({
920
+ }), Ke = t.extend({
905
921
  type: e.literal("LEGAL"),
906
922
  config: e.object({
907
923
  text: e.string(),
908
924
  html: e.boolean().optional()
909
925
  }).optional()
910
- }), We = o.extend({
926
+ }), We = t.extend({
911
927
  type: e.literal("NUMBER"),
912
928
  config: e.object({
913
929
  placeholder: e.string().optional(),
@@ -915,7 +931,7 @@ const he = e.object({
915
931
  max: e.number().optional(),
916
932
  step: e.number().optional()
917
933
  }).optional()
918
- }), ze = o.extend({
934
+ }), ze = t.extend({
919
935
  type: e.literal("PASSWORD"),
920
936
  config: e.object({
921
937
  placeholder: e.string().optional(),
@@ -923,13 +939,13 @@ const he = e.object({
923
939
  show_toggle: e.boolean().optional(),
924
940
  forgot_password_link: e.string().optional()
925
941
  }).optional()
926
- }), Xe = o.extend({
942
+ }), Xe = t.extend({
927
943
  type: e.literal("PAYMENT"),
928
944
  config: e.object({
929
945
  provider: e.string().optional(),
930
946
  currency: e.string().optional()
931
947
  }).optional()
932
- }), Ve = o.extend({
948
+ }), Ve = t.extend({
933
949
  type: e.literal("SOCIAL"),
934
950
  config: e.object({
935
951
  providers: e.array(e.string()).optional(),
@@ -943,40 +959,40 @@ const he = e.object({
943
959
  })
944
960
  ).optional()
945
961
  }).optional()
946
- }), qe = o.extend({
962
+ }), qe = t.extend({
947
963
  type: e.literal("TEL"),
948
964
  config: e.object({
949
965
  placeholder: e.string().optional(),
950
966
  default_country: e.string().optional()
951
967
  }).optional()
952
- }), Ye = o.extend({
968
+ }), Ye = t.extend({
953
969
  type: e.literal("TEXT"),
954
970
  config: e.object({
955
971
  placeholder: e.string().optional(),
956
972
  multiline: e.boolean().optional(),
957
973
  max_length: e.number().optional()
958
974
  }).optional()
959
- }), Qe = o.extend({
975
+ }), Qe = t.extend({
960
976
  type: e.literal("URL"),
961
977
  config: e.object({
962
978
  placeholder: e.string().optional()
963
979
  }).optional()
964
980
  }), Je = e.discriminatedUnion("type", [
965
- ye,
981
+ Ce,
966
982
  Te,
967
983
  Oe,
968
984
  Ne,
969
985
  Re,
986
+ we,
970
987
  De,
971
- Le,
972
- we
988
+ je
973
989
  ]), Ze = e.discriminatedUnion("type", [
974
- je,
990
+ Le,
975
991
  ke,
976
- Ue
992
+ ve
977
993
  ]), $e = e.discriminatedUnion("type", [
994
+ Ue,
978
995
  Fe,
979
- ve,
980
996
  xe,
981
997
  Pe,
982
998
  Me,
@@ -995,7 +1011,7 @@ const he = e.object({
995
1011
  Je,
996
1012
  Ze,
997
1013
  $e
998
- ]), ho = e.object({
1014
+ ]), ht = e.object({
999
1015
  id: e.string(),
1000
1016
  type: e.literal("submit"),
1001
1017
  label: e.string(),
@@ -1007,7 +1023,7 @@ const he = e.object({
1007
1023
  }), _ = e.object({
1008
1024
  x: e.number(),
1009
1025
  y: e.number()
1010
- }), et = e.object({
1026
+ }), eo = e.object({
1011
1027
  id: e.string(),
1012
1028
  type: e.literal("FLOW"),
1013
1029
  coordinates: _,
@@ -1016,7 +1032,7 @@ const he = e.object({
1016
1032
  flow_id: e.string().max(30),
1017
1033
  next_node: e.string().optional()
1018
1034
  })
1019
- }), tt = e.object({
1035
+ }), oo = e.object({
1020
1036
  id: e.string(),
1021
1037
  type: e.literal("ROUTER"),
1022
1038
  coordinates: _,
@@ -1032,7 +1048,7 @@ const he = e.object({
1032
1048
  ),
1033
1049
  fallback: e.string()
1034
1050
  })
1035
- }), ot = e.object({
1051
+ }), to = e.object({
1036
1052
  id: e.string(),
1037
1053
  type: e.literal("STEP"),
1038
1054
  coordinates: _,
@@ -1041,11 +1057,11 @@ const he = e.object({
1041
1057
  components: e.array(R),
1042
1058
  next_node: e.string().optional()
1043
1059
  })
1044
- }), nt = e.discriminatedUnion("type", [
1045
- et,
1046
- tt,
1047
- ot
1048
- ]), it = e.object({
1060
+ }), no = e.discriminatedUnion("type", [
1061
+ eo,
1062
+ oo,
1063
+ to
1064
+ ]), io = e.object({
1049
1065
  name: e.string().openapi({
1050
1066
  description: "The name of the form"
1051
1067
  }),
@@ -1058,7 +1074,7 @@ const he = e.object({
1058
1074
  default: e.string().optional()
1059
1075
  }).optional(),
1060
1076
  translations: e.record(e.string(), e.any()).optional(),
1061
- nodes: e.array(nt).optional(),
1077
+ nodes: e.array(no).optional(),
1062
1078
  start: e.object({
1063
1079
  hidden_fields: e.array(e.object({ key: e.string(), value: e.string() })).optional(),
1064
1080
  next_node: e.string().optional(),
@@ -1080,20 +1096,20 @@ const he = e.object({
1080
1096
  }).optional()
1081
1097
  }).openapi({
1082
1098
  description: "Schema for flow-based forms (matches Auth0 Forms structure)"
1083
- }), bo = e.object({
1084
- ...r.shape,
1085
- ...it.shape,
1099
+ }), bt = e.object({
1100
+ ...s.shape,
1101
+ ...io.shape,
1086
1102
  id: e.string()
1087
- }), at = e.object({
1103
+ }), ao = e.object({
1088
1104
  id: e.number().optional(),
1089
1105
  text: e.string(),
1090
1106
  type: e.enum(["info", "error", "success", "warning"])
1091
- }), rt = e.object({
1107
+ }), so = e.object({
1092
1108
  id: e.string().optional(),
1093
1109
  text: e.string(),
1094
1110
  href: e.string(),
1095
1111
  linkText: e.string().optional()
1096
- }), fo = e.object({
1112
+ }), ft = e.object({
1097
1113
  /** Screen identifier for CSS targeting (e.g., 'identifier', 'enter-password', 'signup') */
1098
1114
  name: e.string().optional(),
1099
1115
  action: e.string(),
@@ -1101,21 +1117,21 @@ const he = e.object({
1101
1117
  title: e.string().optional(),
1102
1118
  description: e.string().optional(),
1103
1119
  components: e.array(R),
1104
- messages: e.array(at).optional(),
1105
- links: e.array(rt).optional(),
1120
+ messages: e.array(ao).optional(),
1121
+ links: e.array(so).optional(),
1106
1122
  /** Footer HTML content displayed at the very bottom of the widget (e.g., terms and conditions) */
1107
1123
  footer: e.string().optional()
1108
1124
  });
1109
- function Eo(t) {
1110
- return t.category === "BLOCK";
1125
+ function Et(o) {
1126
+ return o.category === "BLOCK";
1111
1127
  }
1112
- function So(t) {
1113
- return t.category === "WIDGET";
1128
+ function St(o) {
1129
+ return o.category === "WIDGET";
1114
1130
  }
1115
- function Ao(t) {
1116
- return t.category === "FIELD";
1131
+ function At(o) {
1132
+ return o.category === "FIELD";
1117
1133
  }
1118
- const D = e.enum([
1134
+ const w = e.enum([
1119
1135
  "pre-user-registration",
1120
1136
  "post-user-registration",
1121
1137
  "post-user-login",
@@ -1123,7 +1139,7 @@ const D = e.enum([
1123
1139
  "pre-user-deletion",
1124
1140
  "post-user-deletion"
1125
1141
  // Potentially other triggers specific to webhooks in the future
1126
- ]), L = e.enum([
1142
+ ]), D = e.enum([
1127
1143
  "pre-user-registration",
1128
1144
  "post-user-registration",
1129
1145
  "post-user-login",
@@ -1135,37 +1151,37 @@ const D = e.enum([
1135
1151
  synchronous: e.boolean().default(!1),
1136
1152
  priority: e.number().optional(),
1137
1153
  hook_id: e.string().optional()
1138
- }, st = e.object({
1154
+ }, ro = e.object({
1139
1155
  ...m,
1140
- trigger_id: D,
1156
+ trigger_id: w,
1141
1157
  url: e.string()
1142
- }), lt = e.object({
1158
+ }), lo = e.object({
1143
1159
  ...m,
1144
- trigger_id: L,
1160
+ trigger_id: D,
1145
1161
  form_id: e.string()
1146
- }), Io = e.union([
1147
- st,
1148
- lt
1149
- ]), ct = e.object({
1162
+ }), It = e.union([
1163
+ ro,
1164
+ lo
1165
+ ]), co = e.object({
1150
1166
  ...m,
1151
- trigger_id: D,
1152
- ...r.shape,
1167
+ trigger_id: w,
1168
+ ...s.shape,
1153
1169
  hook_id: e.string(),
1154
1170
  url: e.string()
1155
- }), pt = e.object({
1171
+ }), po = e.object({
1156
1172
  ...m,
1157
- trigger_id: L,
1158
- ...r.shape,
1173
+ trigger_id: D,
1174
+ ...s.shape,
1159
1175
  hook_id: e.string(),
1160
1176
  form_id: e.string()
1161
- }), Co = e.union([ct, pt]), _t = e.object({
1177
+ }), yt = e.union([co, po]), _o = e.object({
1162
1178
  name: e.string().optional()
1163
- }), dt = e.object({
1179
+ }), go = e.object({
1164
1180
  email: e.string().optional()
1165
- }), gt = e.object({
1181
+ }), uo = e.object({
1166
1182
  organization_id: e.string().max(50),
1167
- inviter: _t,
1168
- invitee: dt,
1183
+ inviter: _o,
1184
+ invitee: go,
1169
1185
  invitation_url: e.string().url(),
1170
1186
  client_id: e.string(),
1171
1187
  connection_id: e.string().optional(),
@@ -1174,13 +1190,13 @@ const D = e.enum([
1174
1190
  ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
1175
1191
  roles: e.array(e.string()).default([]).optional(),
1176
1192
  send_invitation_email: e.boolean().default(!0).optional()
1177
- }), yo = e.object({
1193
+ }), Ct = e.object({
1178
1194
  id: e.string(),
1179
1195
  organization_id: e.string().max(50),
1180
1196
  created_at: e.string().datetime(),
1181
1197
  expires_at: e.string().datetime(),
1182
1198
  ticket_id: e.string().optional()
1183
- }).extend(gt.shape), ut = e.object({
1199
+ }).extend(uo.shape), mo = e.object({
1184
1200
  alg: e.enum([
1185
1201
  "RS256",
1186
1202
  "RS384",
@@ -1199,9 +1215,9 @@ const D = e.enum([
1199
1215
  x5t: e.string().optional(),
1200
1216
  x5c: e.array(e.string()).optional(),
1201
1217
  use: e.enum(["sig", "enc"]).optional()
1202
- }), To = e.object({
1203
- keys: e.array(ut)
1204
- }), Oo = e.object({
1218
+ }), Tt = e.object({
1219
+ keys: e.array(mo)
1220
+ }), Ot = e.object({
1205
1221
  issuer: e.string(),
1206
1222
  authorization_endpoint: e.string(),
1207
1223
  token_endpoint: e.string(),
@@ -1223,8 +1239,8 @@ const D = e.enum([
1223
1239
  request_parameter_supported: e.boolean(),
1224
1240
  token_endpoint_auth_signing_alg_values_supported: e.array(e.string())
1225
1241
  });
1226
- var w = /* @__PURE__ */ ((t) => (t.PENDING = "pending", t.AUTHENTICATED = "authenticated", t.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", t.AWAITING_HOOK = "awaiting_hook", t.AWAITING_CONTINUATION = "awaiting_continuation", t.COMPLETED = "completed", t.FAILED = "failed", t.EXPIRED = "expired", t))(w || {});
1227
- const mt = e.nativeEnum(w), ht = e.object({
1242
+ var j = /* @__PURE__ */ ((o) => (o.PENDING = "pending", o.AUTHENTICATED = "authenticated", o.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", o.AWAITING_HOOK = "awaiting_hook", o.AWAITING_CONTINUATION = "awaiting_continuation", o.COMPLETED = "completed", o.FAILED = "failed", o.EXPIRED = "expired", o))(j || {});
1243
+ const ho = e.nativeEnum(j), bo = e.object({
1228
1244
  csrf_token: e.string(),
1229
1245
  auth0Client: e.string().optional(),
1230
1246
  authParams: he,
@@ -1234,7 +1250,7 @@ const mt = e.nativeEnum(w), ht = e.object({
1234
1250
  useragent: e.string().optional(),
1235
1251
  session_id: e.string().optional(),
1236
1252
  authorization_url: e.string().optional(),
1237
- state: mt.optional().default(
1253
+ state: ho.optional().default(
1238
1254
  "pending"
1239
1255
  /* PENDING */
1240
1256
  ),
@@ -1245,14 +1261,14 @@ const mt = e.nativeEnum(w), ht = e.object({
1245
1261
  // Set once user is authenticated
1246
1262
  }).openapi({
1247
1263
  description: "This represents a login sesion"
1248
- }), No = e.object({
1249
- ...ht.shape,
1264
+ }), Nt = e.object({
1265
+ ...bo.shape,
1250
1266
  id: e.string().openapi({
1251
1267
  description: "This is is used as the state in the universal login"
1252
1268
  }),
1253
1269
  created_at: e.string(),
1254
1270
  updated_at: e.string()
1255
- }), bt = {
1271
+ }), fo = {
1256
1272
  // Network & System
1257
1273
  ACLS_SUMMARY: "acls_summary",
1258
1274
  ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
@@ -1423,24 +1439,24 @@ const mt = e.nativeEnum(w), ht = e.object({
1423
1439
  WARNING_DURING_LOGIN: "w",
1424
1440
  WARNING_SENDING_NOTIFICATION: "wn",
1425
1441
  WARNING_USER_MANAGEMENT: "wum"
1426
- }, ft = e.string().refine(
1427
- (t) => Object.values(bt).includes(t),
1442
+ }, Eo = e.string().refine(
1443
+ (o) => Object.values(fo).includes(o),
1428
1444
  { message: "Invalid log type" }
1429
- ), Et = e.object({
1445
+ ), So = e.object({
1430
1446
  name: e.string(),
1431
1447
  version: e.string(),
1432
1448
  env: e.object({
1433
1449
  node: e.string().optional()
1434
1450
  }).optional()
1435
- }), St = e.object({
1451
+ }), Ao = e.object({
1436
1452
  country_code: e.string().length(2),
1437
1453
  city_name: e.string(),
1438
1454
  latitude: e.string(),
1439
1455
  longitude: e.string(),
1440
1456
  time_zone: e.string(),
1441
1457
  continent_code: e.string()
1442
- }), At = e.object({
1443
- type: ft,
1458
+ }), Io = e.object({
1459
+ type: Eo,
1444
1460
  date: e.string(),
1445
1461
  description: e.string().optional(),
1446
1462
  ip: e.string().optional(),
@@ -1459,30 +1475,30 @@ const mt = e.nativeEnum(w), ht = e.object({
1459
1475
  strategy: e.string().optional(),
1460
1476
  strategy_type: e.string().optional(),
1461
1477
  hostname: e.string().optional(),
1462
- auth0_client: Et.optional(),
1478
+ auth0_client: So.optional(),
1463
1479
  log_id: e.string().optional(),
1464
- location_info: St.optional()
1465
- }), Ro = e.object({
1466
- ...At.shape,
1480
+ location_info: Ao.optional()
1481
+ }), Rt = e.object({
1482
+ ...Io.shape,
1467
1483
  log_id: e.string()
1468
- }), It = e.object({
1484
+ }), yo = e.object({
1469
1485
  id: e.string().optional(),
1470
1486
  user_id: e.string(),
1471
1487
  password: e.string(),
1472
1488
  algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
1473
1489
  is_current: e.boolean().default(!0)
1474
- }), Do = It.extend({
1490
+ }), wt = yo.extend({
1475
1491
  id: e.string(),
1476
1492
  created_at: e.string(),
1477
1493
  updated_at: e.string()
1478
- }), j = e.object({
1494
+ }), L = e.object({
1479
1495
  initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
1480
1496
  initial_ip: e.string().describe("First IP address associated with this session"),
1481
1497
  initial_asn: e.string().describe("First autonomous system number associated with this session"),
1482
1498
  last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
1483
1499
  last_ip: e.string().describe("Last IP address from which this user logged in"),
1484
1500
  last_asn: e.string().describe("Last autonomous system number from which this user logged in")
1485
- }), Ct = e.object({
1501
+ }), Co = e.object({
1486
1502
  id: e.string(),
1487
1503
  revoked_at: e.string().optional(),
1488
1504
  used_at: e.string().optional(),
@@ -1490,17 +1506,17 @@ const mt = e.nativeEnum(w), ht = e.object({
1490
1506
  expires_at: e.string().optional(),
1491
1507
  login_session_id: e.string(),
1492
1508
  idle_expires_at: e.string().optional(),
1493
- device: j.describe(
1509
+ device: L.describe(
1494
1510
  "Metadata related to the device used in the session"
1495
1511
  ),
1496
1512
  clients: e.array(e.string()).describe("List of client details for the session")
1497
- }), Lo = e.object({
1513
+ }), Dt = e.object({
1498
1514
  created_at: e.string(),
1499
1515
  updated_at: e.string(),
1500
1516
  authenticated_at: e.string(),
1501
1517
  last_interaction_at: e.string(),
1502
- ...Ct.shape
1503
- }), wo = e.object({
1518
+ ...Co.shape
1519
+ }), jt = e.object({
1504
1520
  kid: e.string().openapi({ description: "The key id of the signing key" }),
1505
1521
  cert: e.string().openapi({ description: "The public certificate of the signing key" }),
1506
1522
  fingerprint: e.string().openapi({ description: "The cert fingerprint" }),
@@ -1525,7 +1541,7 @@ const mt = e.nativeEnum(w), ht = e.object({
1525
1541
  type: e.enum(["jwt_signing", "saml_encryption"]).openapi({
1526
1542
  description: "The type of the signing key"
1527
1543
  })
1528
- }), yt = e.object({
1544
+ }), To = e.object({
1529
1545
  id: e.string().optional(),
1530
1546
  // Basic settings
1531
1547
  audience: e.string(),
@@ -1648,15 +1664,44 @@ const mt = e.nativeEnum(w), ht = e.object({
1648
1664
  }).optional(),
1649
1665
  // Authorization settings
1650
1666
  pushed_authorization_requests_supported: e.boolean().optional(),
1651
- authorization_response_iss_parameter_supported: e.boolean().optional()
1652
- }), jo = e.object({
1653
- created_at: e.string().nullable().transform((t) => t ?? ""),
1654
- updated_at: e.string().nullable().transform((t) => t ?? ""),
1655
- ...yt.shape,
1667
+ authorization_response_iss_parameter_supported: e.boolean().optional(),
1668
+ // Guardian MFA Factors configuration (internal storage, exposed via /guardian API)
1669
+ mfa: e.object({
1670
+ // Factor states
1671
+ factors: e.object({
1672
+ sms: e.boolean().default(!1),
1673
+ otp: e.boolean().default(!1),
1674
+ email: e.boolean().default(!1),
1675
+ push_notification: e.boolean().default(!1),
1676
+ webauthn_roaming: e.boolean().default(!1),
1677
+ webauthn_platform: e.boolean().default(!1),
1678
+ recovery_code: e.boolean().default(!1),
1679
+ duo: e.boolean().default(!1)
1680
+ }).optional(),
1681
+ // SMS provider configuration
1682
+ sms_provider: e.object({
1683
+ provider: e.enum(["twilio", "vonage", "aws_sns", "phone_message_hook"]).optional()
1684
+ }).optional(),
1685
+ // Twilio-specific configuration
1686
+ twilio: e.object({
1687
+ sid: e.string().optional(),
1688
+ auth_token: e.string().optional(),
1689
+ from: e.string().optional(),
1690
+ messaging_service_sid: e.string().optional()
1691
+ }).optional(),
1692
+ // Phone message configuration (custom)
1693
+ phone_message: e.object({
1694
+ message: e.string().optional()
1695
+ }).optional()
1696
+ }).optional()
1697
+ }), Lt = e.object({
1698
+ created_at: e.string().nullable().transform((o) => o ?? ""),
1699
+ updated_at: e.string().nullable().transform((o) => o ?? ""),
1700
+ ...To.shape,
1656
1701
  id: e.string()
1657
1702
  });
1658
- var Tt = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(Tt || {});
1659
- const ko = e.object({
1703
+ var Oo = /* @__PURE__ */ ((o) => (o.RefreshToken = "refresh_token", o.AuthorizationCode = "authorization_code", o.ClientCredential = "client_credentials", o.Passwordless = "passwordless", o.Password = "password", o.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", o))(Oo || {});
1704
+ const kt = e.object({
1660
1705
  access_token: e.string(),
1661
1706
  id_token: e.string().optional(),
1662
1707
  scope: e.string().optional(),
@@ -1669,7 +1714,7 @@ e.object({
1669
1714
  code: e.string(),
1670
1715
  state: e.string().optional()
1671
1716
  });
1672
- const Ot = e.object({
1717
+ const No = e.object({
1673
1718
  button_border_radius: e.number(),
1674
1719
  button_border_weight: e.number(),
1675
1720
  buttons_style: e.enum(["pill", "rounded", "sharp"]),
@@ -1679,7 +1724,7 @@ const Ot = e.object({
1679
1724
  show_widget_shadow: e.boolean(),
1680
1725
  widget_border_weight: e.number(),
1681
1726
  widget_corner_radius: e.number()
1682
- }), Nt = e.object({
1727
+ }), Ro = e.object({
1683
1728
  base_focus_color: e.string(),
1684
1729
  base_hover_color: e.string(),
1685
1730
  body_text: e.string(),
@@ -1702,7 +1747,7 @@ const Ot = e.object({
1702
1747
  }), l = e.object({
1703
1748
  bold: e.boolean(),
1704
1749
  size: e.number()
1705
- }), Rt = e.object({
1750
+ }), wo = e.object({
1706
1751
  body_text: l,
1707
1752
  buttons_text: l,
1708
1753
  font_url: e.string(),
@@ -1712,31 +1757,31 @@ const Ot = e.object({
1712
1757
  reference_text_size: e.number(),
1713
1758
  subtitle: l,
1714
1759
  title: l
1715
- }), Dt = e.object({
1760
+ }), Do = e.object({
1716
1761
  background_color: e.string(),
1717
1762
  background_image_url: e.string(),
1718
1763
  page_layout: e.enum(["center", "left", "right"])
1719
- }), Lt = e.object({
1764
+ }), jo = e.object({
1720
1765
  header_text_alignment: e.enum(["center", "left", "right"]),
1721
1766
  logo_height: e.number(),
1722
1767
  logo_position: e.enum(["center", "left", "none", "right"]),
1723
1768
  logo_url: e.string(),
1724
1769
  social_buttons_layout: e.enum(["bottom", "top"])
1725
- }), wt = e.object({
1726
- borders: Ot,
1727
- colors: Nt,
1770
+ }), Lo = e.object({
1771
+ borders: No,
1772
+ colors: Ro,
1728
1773
  displayName: e.string(),
1729
- fonts: Rt,
1730
- page_background: Dt,
1731
- widget: Lt
1732
- }), Uo = wt.extend({
1774
+ fonts: wo,
1775
+ page_background: Do,
1776
+ widget: jo
1777
+ }), vt = Lo.extend({
1733
1778
  themeId: e.string()
1734
- }), Fo = e.object({
1779
+ }), Ut = e.object({
1735
1780
  universal_login_experience: e.enum(["new", "classic"]).default("new"),
1736
1781
  identifier_first: e.boolean().default(!0),
1737
1782
  password_first: e.boolean().default(!1),
1738
1783
  webauthn_platform_first_factor: e.boolean()
1739
- }), vo = e.object({
1784
+ }), Ft = e.object({
1740
1785
  name: e.string(),
1741
1786
  enabled: e.boolean().optional().default(!0),
1742
1787
  default_from_address: e.string().optional(),
@@ -1766,7 +1811,7 @@ const Ot = e.object({
1766
1811
  })
1767
1812
  ]),
1768
1813
  settings: e.object({}).optional()
1769
- }), jt = e.object({
1814
+ }), ko = e.object({
1770
1815
  // The actual refresh token value (primary key).
1771
1816
  id: e.string(),
1772
1817
  // Link to the session record
@@ -1779,7 +1824,7 @@ const Ot = e.object({
1779
1824
  idle_expires_at: e.string().optional(),
1780
1825
  // When the token was last used.
1781
1826
  last_exchanged_at: e.string().optional(),
1782
- device: j,
1827
+ device: L,
1783
1828
  resource_servers: e.array(
1784
1829
  e.object({
1785
1830
  audience: e.string(),
@@ -1787,21 +1832,21 @@ const Ot = e.object({
1787
1832
  })
1788
1833
  ),
1789
1834
  rotating: e.boolean()
1790
- }), xo = e.object({
1835
+ }), xt = e.object({
1791
1836
  // When the refresh token record was created.
1792
1837
  created_at: e.string(),
1793
1838
  // Spread in the rest of the refresh token properties.
1794
- ...jt.shape
1795
- }), Po = e.object({
1839
+ ...ko.shape
1840
+ }), Pt = e.object({
1796
1841
  to: e.string(),
1797
1842
  message: e.string()
1798
- }), Mo = e.object({
1843
+ }), Mt = e.object({
1799
1844
  name: e.string(),
1800
1845
  options: e.object({})
1801
- }), kt = e.object({
1846
+ }), vo = e.object({
1802
1847
  value: e.string(),
1803
1848
  description: e.string().optional()
1804
- }), Ut = e.object({
1849
+ }), Uo = e.object({
1805
1850
  token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
1806
1851
  enforce_policies: e.boolean().optional(),
1807
1852
  allow_skipping_userinfo: e.boolean().optional(),
@@ -1811,11 +1856,11 @@ const Ot = e.object({
1811
1856
  mtls: e.object({
1812
1857
  bound_access_tokens: e.boolean().optional()
1813
1858
  }).optional()
1814
- }), Ft = e.object({
1859
+ }), Fo = e.object({
1815
1860
  id: e.string().optional(),
1816
1861
  name: e.string(),
1817
1862
  identifier: e.string(),
1818
- scopes: e.array(kt).optional(),
1863
+ scopes: e.array(vo).optional(),
1819
1864
  signing_alg: e.string().optional(),
1820
1865
  signing_secret: e.string().optional(),
1821
1866
  token_lifetime: e.number().optional(),
@@ -1823,30 +1868,30 @@ const Ot = e.object({
1823
1868
  skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
1824
1869
  allow_offline_access: e.boolean().optional(),
1825
1870
  verificationKey: e.string().optional(),
1826
- options: Ut.optional(),
1871
+ options: Uo.optional(),
1827
1872
  is_system: e.boolean().optional(),
1828
1873
  metadata: e.record(e.any()).optional()
1829
- }), vt = e.object({
1830
- ...Ft.shape,
1874
+ }), xo = e.object({
1875
+ ...Fo.shape,
1831
1876
  created_at: e.string().optional(),
1832
1877
  updated_at: e.string().optional()
1833
- }), Ho = e.array(vt), xt = e.object({
1878
+ }), Ht = e.array(xo), Po = e.object({
1834
1879
  role_id: e.string(),
1835
1880
  resource_server_identifier: e.string(),
1836
1881
  permission_name: e.string()
1837
- }), Pt = e.object({
1838
- ...xt.shape,
1882
+ }), Mo = e.object({
1883
+ ...Po.shape,
1839
1884
  created_at: e.string()
1840
- }), Go = e.array(Pt), Mt = e.object({
1885
+ }), Gt = e.array(Mo), Ho = e.object({
1841
1886
  user_id: e.string(),
1842
1887
  resource_server_identifier: e.string(),
1843
1888
  permission_name: e.string(),
1844
1889
  organization_id: e.string().optional()
1845
- }), Ht = e.object({
1846
- ...Mt.shape,
1890
+ }), Go = e.object({
1891
+ ...Ho.shape,
1847
1892
  tenant_id: e.string(),
1848
1893
  created_at: e.string().optional()
1849
- }), Bo = e.array(Ht), Gt = e.object({
1894
+ }), Bt = e.array(Go), Bo = e.object({
1850
1895
  user_id: e.string(),
1851
1896
  resource_server_identifier: e.string(),
1852
1897
  resource_server_name: e.string(),
@@ -1854,17 +1899,17 @@ const Ot = e.object({
1854
1899
  description: e.string().nullable().optional(),
1855
1900
  created_at: e.string().optional(),
1856
1901
  organization_id: e.string().optional()
1857
- }), Ko = e.array(
1858
- Gt
1859
- ), Bt = e.object({
1902
+ }), Kt = e.array(
1903
+ Bo
1904
+ ), Ko = e.object({
1860
1905
  user_id: e.string(),
1861
1906
  role_id: e.string(),
1862
1907
  organization_id: e.string().optional()
1863
- }), Kt = e.object({
1864
- ...Bt.shape,
1908
+ }), Wo = e.object({
1909
+ ...Ko.shape,
1865
1910
  tenant_id: e.string(),
1866
1911
  created_at: e.string().optional()
1867
- }), Wo = e.array(Kt), Wt = e.object({
1912
+ }), Wt = e.array(Wo), zo = e.object({
1868
1913
  id: e.string().optional().openapi({
1869
1914
  description: "The unique identifier of the role. If not provided, one will be generated."
1870
1915
  }),
@@ -1878,13 +1923,13 @@ const Ot = e.object({
1878
1923
  metadata: e.record(e.any()).optional().openapi({
1879
1924
  description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios."
1880
1925
  })
1881
- }), zt = Wt.extend({
1926
+ }), Xo = zo.extend({
1882
1927
  id: e.string().openapi({
1883
1928
  description: "The unique identifier of the role"
1884
1929
  }),
1885
1930
  created_at: e.string().optional(),
1886
1931
  updated_at: e.string().optional()
1887
- }), zo = e.array(zt), Xt = e.object({
1932
+ }), zt = e.array(Xo), Vo = e.object({
1888
1933
  logo_url: e.string().optional().openapi({
1889
1934
  description: "URL of the organization's logo"
1890
1935
  }),
@@ -1896,7 +1941,7 @@ const Ot = e.object({
1896
1941
  description: "Page background color in hex format (e.g., #FFFFFF)"
1897
1942
  })
1898
1943
  }).optional()
1899
- }).optional(), Vt = e.object({
1944
+ }).optional(), qo = e.object({
1900
1945
  connection_id: e.string().openapi({
1901
1946
  description: "ID of the connection"
1902
1947
  }),
@@ -1909,7 +1954,7 @@ const Ot = e.object({
1909
1954
  is_signup_enabled: e.boolean().default(!0).openapi({
1910
1955
  description: "Whether signup is enabled for this connection"
1911
1956
  })
1912
- }), qt = e.object({
1957
+ }), Yo = e.object({
1913
1958
  client_credentials: e.object({
1914
1959
  enforce: e.boolean().default(!1).openapi({
1915
1960
  description: "Whether to enforce token quota limits"
@@ -1921,7 +1966,7 @@ const Ot = e.object({
1921
1966
  description: "Maximum tokens per hour (0 = unlimited)"
1922
1967
  })
1923
1968
  }).optional()
1924
- }).optional(), Yt = e.object({
1969
+ }).optional(), Qo = e.object({
1925
1970
  id: e.string().optional(),
1926
1971
  name: e.string().min(1).regex(/^[a-z0-9_-]+$/, {
1927
1972
  message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores"
@@ -1931,34 +1976,34 @@ const Ot = e.object({
1931
1976
  display_name: e.string().optional().openapi({
1932
1977
  description: "The display name of the organization"
1933
1978
  }),
1934
- branding: Xt,
1979
+ branding: Vo,
1935
1980
  metadata: e.record(e.any()).default({}).optional().openapi({
1936
1981
  description: "Custom metadata for the organization"
1937
1982
  }),
1938
- enabled_connections: e.array(Vt).default([]).optional().openapi({
1983
+ enabled_connections: e.array(qo).default([]).optional().openapi({
1939
1984
  description: "List of enabled connections for the organization"
1940
1985
  }),
1941
- token_quota: qt
1942
- }), Xo = e.object({
1943
- ...Yt.shape,
1944
- ...r.shape,
1986
+ token_quota: Yo
1987
+ }), Xt = e.object({
1988
+ ...Qo.shape,
1989
+ ...s.shape,
1945
1990
  id: e.string(),
1946
1991
  // Override name to be lenient when reading from database (to support existing uppercase names)
1947
1992
  name: e.string().min(1).openapi({
1948
1993
  description: "The name of the organization"
1949
1994
  })
1950
- }), Qt = e.object({
1995
+ }), Jo = e.object({
1951
1996
  user_id: e.string().openapi({
1952
1997
  description: "ID of the user"
1953
1998
  }),
1954
1999
  organization_id: e.string().openapi({
1955
2000
  description: "ID of the organization"
1956
2001
  })
1957
- }), Vo = e.object({
1958
- ...Qt.shape,
1959
- ...r.shape,
2002
+ }), Vt = e.object({
2003
+ ...Jo.shape,
2004
+ ...s.shape,
1960
2005
  id: e.string()
1961
- }), qo = e.object({
2006
+ }), qt = e.object({
1962
2007
  // Session settings
1963
2008
  idle_session_lifetime: e.number().optional(),
1964
2009
  session_lifetime: e.number().optional(),
@@ -2026,8 +2071,37 @@ const Ot = e.object({
2026
2071
  // Session management
2027
2072
  sessions: e.object({
2028
2073
  oidc_logout_prompt_enabled: e.boolean().optional()
2074
+ }).optional(),
2075
+ // Guardian MFA Factors configuration (internal storage, exposed via /guardian API)
2076
+ mfa: e.object({
2077
+ // Factor states
2078
+ factors: e.object({
2079
+ sms: e.boolean().default(!1),
2080
+ otp: e.boolean().default(!1),
2081
+ email: e.boolean().default(!1),
2082
+ push_notification: e.boolean().default(!1),
2083
+ webauthn_roaming: e.boolean().default(!1),
2084
+ webauthn_platform: e.boolean().default(!1),
2085
+ recovery_code: e.boolean().default(!1),
2086
+ duo: e.boolean().default(!1)
2087
+ }).optional(),
2088
+ // SMS provider configuration
2089
+ sms_provider: e.object({
2090
+ provider: e.enum(["twilio", "vonage", "aws_sns", "phone_message_hook"]).optional()
2091
+ }).optional(),
2092
+ // Twilio-specific configuration
2093
+ twilio: e.object({
2094
+ sid: e.string().optional(),
2095
+ auth_token: e.string().optional(),
2096
+ from: e.string().optional(),
2097
+ messaging_service_sid: e.string().optional()
2098
+ }).optional(),
2099
+ // Phone message configuration (custom)
2100
+ phone_message: e.object({
2101
+ message: e.string().optional()
2102
+ }).optional()
2029
2103
  }).optional()
2030
- }), Yo = e.object({
2104
+ }), Yt = e.object({
2031
2105
  date: e.string().openapi({
2032
2106
  description: "Date these events occurred in ISO 8601 format",
2033
2107
  example: "2025-12-19"
@@ -2052,10 +2126,10 @@ const Ot = e.object({
2052
2126
  description: "Approximate date and time the first event occurred in ISO 8601 format",
2053
2127
  example: "2025-12-19T00:00:00.000Z"
2054
2128
  })
2055
- }), Qo = e.number().openapi({
2129
+ }), Qt = e.number().openapi({
2056
2130
  description: "Number of active users in the last 30 days",
2057
2131
  example: 1234
2058
- }), Jt = e.enum([
2132
+ }), Zo = e.enum([
2059
2133
  "login",
2060
2134
  "login-id",
2061
2135
  "login-password",
@@ -2083,37 +2157,37 @@ const Ot = e.object({
2083
2157
  "passkeys",
2084
2158
  "captcha",
2085
2159
  "custom-form"
2086
- ]), Zt = e.record(e.string(), e.string()).openapi({
2160
+ ]), $o = e.record(e.string(), e.string()).openapi({
2087
2161
  type: "object",
2088
2162
  additionalProperties: { type: "string" }
2089
- }), Jo = e.object({
2090
- prompt: Jt,
2163
+ }), Jt = e.object({
2164
+ prompt: Zo,
2091
2165
  language: e.string(),
2092
- custom_text: Zt
2166
+ custom_text: $o
2093
2167
  });
2094
- function Zo(t) {
2095
- const [a, s] = t.split("|");
2096
- if (!a || !s)
2097
- throw new Error(`Invalid user_id: ${t}`);
2098
- return { connection: a, id: s };
2168
+ function Zt(o) {
2169
+ const [a, r] = o.split("|");
2170
+ if (!a || !r)
2171
+ throw new Error(`Invalid user_id: ${o}`);
2172
+ return { connection: a, id: r };
2099
2173
  }
2100
- function $o(t) {
2174
+ function $t(o) {
2101
2175
  const {
2102
2176
  primary: a,
2103
- secondaries: s,
2177
+ secondaries: r,
2104
2178
  syncMethods: k = ["create", "update", "remove", "delete", "set"]
2105
- } = t, U = {
2179
+ } = o, v = {
2106
2180
  get(d, n) {
2107
2181
  if (typeof n == "symbol")
2108
2182
  return d[n];
2109
2183
  const g = d[n];
2110
2184
  return typeof g != "function" ? g : k.includes(n) ? async (...h) => {
2111
- const F = await g.apply(d, h), b = [];
2112
- for (const p of s) {
2185
+ const U = await g.apply(d, h), b = [];
2186
+ for (const p of r) {
2113
2187
  const S = p.adapter[n];
2114
2188
  if (typeof S != "function")
2115
2189
  continue;
2116
- const v = (async () => {
2190
+ const F = (async () => {
2117
2191
  try {
2118
2192
  await S.apply(p.adapter, h);
2119
2193
  } catch (A) {
@@ -2130,166 +2204,166 @@ function $o(t) {
2130
2204
  }
2131
2205
  }
2132
2206
  })();
2133
- p.blocking && b.push(v);
2207
+ p.blocking && b.push(F);
2134
2208
  }
2135
- return b.length > 0 && await Promise.all(b), F;
2209
+ return b.length > 0 && await Promise.all(b), U;
2136
2210
  } : g.bind(d);
2137
2211
  }
2138
2212
  };
2139
- return new Proxy(a, U);
2213
+ return new Proxy(a, v);
2140
2214
  }
2141
- function en(t) {
2142
- return t;
2215
+ function en(o) {
2216
+ return o;
2143
2217
  }
2144
2218
  export {
2145
- to as Auth0ActionEnum,
2146
- Et as Auth0Client,
2219
+ tt as Auth0ActionEnum,
2220
+ So as Auth0Client,
2147
2221
  O as AuthorizationResponseMode,
2148
2222
  T as AuthorizationResponseType,
2149
2223
  N as CodeChallengeMethod,
2150
- y as ComponentCategory,
2151
- C as ComponentType,
2152
- oo as EmailActionEnum,
2153
- eo as FlowActionTypeEnum,
2154
- Tt as GrantType,
2155
- St as LocationInfo,
2156
- bt as LogTypes,
2157
- w as LoginSessionState,
2158
- se as NodeType,
2224
+ C as ComponentCategory,
2225
+ y as ComponentType,
2226
+ nt as EmailActionEnum,
2227
+ ot as FlowActionTypeEnum,
2228
+ Oo as GrantType,
2229
+ Ao as LocationInfo,
2230
+ fo as LogTypes,
2231
+ j as LoginSessionState,
2232
+ re as NodeType,
2159
2233
  G as RedirectTargetEnum,
2160
2234
  pe as actionNodeSchema,
2161
- Qo as activeUsersResponseSchema,
2235
+ Qt as activeUsersResponseSchema,
2162
2236
  V as addressSchema,
2163
- po as auth0FlowInsertSchema,
2237
+ _t as auth0FlowInsertSchema,
2164
2238
  me as auth0FlowSchema,
2165
- io as auth0QuerySchema,
2239
+ at as auth0QuerySchema,
2166
2240
  M as auth0UpdateUserActionSchema,
2167
- ro as auth0UserResponseSchema,
2241
+ rt as auth0UserResponseSchema,
2168
2242
  he as authParamsSchema,
2169
2243
  I as baseUserSchema,
2170
2244
  Je as blockComponentSchema,
2171
- Ot as bordersSchema,
2172
- _o as brandingSchema,
2173
- oe as buttonComponentSchema,
2245
+ No as bordersSchema,
2246
+ dt as brandingSchema,
2247
+ te as buttonComponentSchema,
2174
2248
  $ as clientGrantInsertSchema,
2175
- co as clientGrantListSchema,
2249
+ pt as clientGrantListSchema,
2176
2250
  ee as clientGrantSchema,
2177
2251
  Z as clientInsertSchema,
2178
- lo as clientSchema,
2252
+ ct as clientSchema,
2179
2253
  fe as codeInsertSchema,
2180
- go as codeSchema,
2254
+ gt as codeSchema,
2181
2255
  be as codeTypeSchema,
2182
- Nt as colorsSchema,
2183
- at as componentMessageSchema,
2184
- re as componentSchema,
2256
+ Ro as colorsSchema,
2257
+ ao as componentMessageSchema,
2258
+ se as componentSchema,
2185
2259
  Se as connectionInsertSchema,
2186
2260
  Ee as connectionOptionsSchema,
2187
- uo as connectionSchema,
2261
+ ut as connectionSchema,
2188
2262
  c as coordinatesSchema,
2189
- $o as createPassthroughAdapter,
2263
+ $t as createPassthroughAdapter,
2190
2264
  en as createWriteOnlyAdapter,
2191
2265
  Ae as customDomainInsertSchema,
2192
- Ce as customDomainSchema,
2193
- mo as customDomainWithTenantIdSchema,
2194
- Jo as customTextEntrySchema,
2195
- Zt as customTextSchema,
2196
- Yo as dailyStatsSchema,
2197
- vo as emailProviderSchema,
2266
+ ye as customDomainSchema,
2267
+ mt as customDomainWithTenantIdSchema,
2268
+ Jt as customTextEntrySchema,
2269
+ $o as customTextSchema,
2270
+ Yt as dailyStatsSchema,
2271
+ Ft as emailProviderSchema,
2198
2272
  P as emailVerificationRulesSchema,
2199
2273
  H as emailVerifyActionSchema,
2200
2274
  ue as endingSchema,
2201
2275
  $e as fieldComponentSchema,
2202
2276
  K as flowActionStepSchema,
2203
2277
  W as flowInsertSchema,
2204
- no as flowSchema,
2278
+ it as flowSchema,
2205
2279
  ie as flowsFieldComponentSchema,
2206
2280
  ce as flowsFlowNodeSchema,
2207
2281
  le as flowsStepNodeSchema,
2208
2282
  l as fontDetailsSchema,
2209
- Rt as fontsSchema,
2210
- ho as formControlSchema,
2211
- it as formInsertSchema,
2283
+ wo as fontsSchema,
2284
+ ht as formControlSchema,
2285
+ io as formInsertSchema,
2212
2286
  R as formNodeComponentDefinition,
2213
- nt as formNodeSchema,
2214
- bo as formSchema,
2287
+ no as formNodeSchema,
2288
+ bt as formSchema,
2215
2289
  ae as genericComponentSchema,
2216
2290
  _e as genericNodeSchema,
2217
- Io as hookInsertSchema,
2218
- Co as hookSchema,
2291
+ It as hookInsertSchema,
2292
+ yt as hookSchema,
2219
2293
  X as identitySchema,
2220
- gt as inviteInsertSchema,
2221
- yo as inviteSchema,
2222
- dt as inviteeSchema,
2223
- _t as inviterSchema,
2224
- Eo as isBlockComponent,
2225
- Ao as isFieldComponent,
2226
- So as isWidgetComponent,
2227
- To as jwksKeySchema,
2228
- ut as jwksSchema,
2294
+ uo as inviteInsertSchema,
2295
+ Ct as inviteSchema,
2296
+ go as inviteeSchema,
2297
+ _o as inviterSchema,
2298
+ Et as isBlockComponent,
2299
+ At as isFieldComponent,
2300
+ St as isWidgetComponent,
2301
+ Tt as jwksKeySchema,
2302
+ mo as jwksSchema,
2229
2303
  ne as legalComponentSchema,
2230
- At as logInsertSchema,
2231
- Ro as logSchema,
2232
- ht as loginSessionInsertSchema,
2233
- No as loginSessionSchema,
2234
- mt as loginSessionStateSchema,
2304
+ Io as logInsertSchema,
2305
+ Rt as logSchema,
2306
+ bo as loginSessionInsertSchema,
2307
+ Nt as loginSessionSchema,
2308
+ ho as loginSessionStateSchema,
2235
2309
  de as nodeSchema,
2236
- Oo as openIDConfigurationSchema,
2237
- Xt as organizationBrandingSchema,
2238
- Vt as organizationEnabledConnectionSchema,
2239
- Yt as organizationInsertSchema,
2240
- Xo as organizationSchema,
2241
- qt as organizationTokenQuotaSchema,
2242
- Dt as pageBackgroundSchema,
2243
- Zo as parseUserId,
2244
- It as passwordInsertSchema,
2245
- Do as passwordSchema,
2310
+ Ot as openIDConfigurationSchema,
2311
+ Vo as organizationBrandingSchema,
2312
+ qo as organizationEnabledConnectionSchema,
2313
+ Qo as organizationInsertSchema,
2314
+ Xt as organizationSchema,
2315
+ Yo as organizationTokenQuotaSchema,
2316
+ Do as pageBackgroundSchema,
2317
+ Zt as parseUserId,
2318
+ yo as passwordInsertSchema,
2319
+ wt as passwordSchema,
2246
2320
  z as profileDataSchema,
2247
- Jt as promptScreenSchema,
2248
- Fo as promptSettingSchema,
2321
+ Zo as promptScreenSchema,
2322
+ Ut as promptSettingSchema,
2249
2323
  B as redirectActionSchema,
2250
- jt as refreshTokenInsertSchema,
2251
- xo as refreshTokenSchema,
2252
- Ft as resourceServerInsertSchema,
2253
- Ho as resourceServerListSchema,
2254
- Ut as resourceServerOptionsSchema,
2255
- vt as resourceServerSchema,
2256
- kt as resourceServerScopeSchema,
2257
- te as richTextComponentSchema,
2258
- Wt as roleInsertSchema,
2259
- zo as roleListSchema,
2260
- xt as rolePermissionInsertSchema,
2261
- Go as rolePermissionListSchema,
2262
- Pt as rolePermissionSchema,
2263
- zt as roleSchema,
2264
- rt as screenLinkSchema,
2265
- Ct as sessionInsertSchema,
2266
- Lo as sessionSchema,
2267
- wo as signingKeySchema,
2268
- Mo as smsProviderSchema,
2269
- Po as smsSendParamsSchema,
2324
+ ko as refreshTokenInsertSchema,
2325
+ xt as refreshTokenSchema,
2326
+ Fo as resourceServerInsertSchema,
2327
+ Ht as resourceServerListSchema,
2328
+ Uo as resourceServerOptionsSchema,
2329
+ xo as resourceServerSchema,
2330
+ vo as resourceServerScopeSchema,
2331
+ oe as richTextComponentSchema,
2332
+ zo as roleInsertSchema,
2333
+ zt as roleListSchema,
2334
+ Po as rolePermissionInsertSchema,
2335
+ Gt as rolePermissionListSchema,
2336
+ Mo as rolePermissionSchema,
2337
+ Xo as roleSchema,
2338
+ so as screenLinkSchema,
2339
+ Co as sessionInsertSchema,
2340
+ Dt as sessionSchema,
2341
+ jt as signingKeySchema,
2342
+ Mt as smsProviderSchema,
2343
+ Pt as smsSendParamsSchema,
2270
2344
  ge as startSchema,
2271
- yt as tenantInsertSchema,
2272
- jo as tenantSchema,
2273
- qo as tenantSettingsSchema,
2274
- wt as themeInsertSchema,
2275
- Uo as themeSchema,
2276
- ko as tokenResponseSchema,
2277
- ao as totalsSchema,
2278
- fo as uiScreenSchema,
2345
+ To as tenantInsertSchema,
2346
+ Lt as tenantSchema,
2347
+ qt as tenantSettingsSchema,
2348
+ Lo as themeInsertSchema,
2349
+ vt as themeSchema,
2350
+ kt as tokenResponseSchema,
2351
+ st as totalsSchema,
2352
+ ft as uiScreenSchema,
2279
2353
  q as userInsertSchema,
2280
- Qt as userOrganizationInsertSchema,
2281
- Vo as userOrganizationSchema,
2282
- Mt as userPermissionInsertSchema,
2283
- Bo as userPermissionListSchema,
2284
- Ht as userPermissionSchema,
2285
- Ko as userPermissionWithDetailsListSchema,
2286
- Gt as userPermissionWithDetailsSchema,
2287
- so as userResponseSchema,
2288
- Bt as userRoleInsertSchema,
2289
- Wo as userRoleListSchema,
2290
- Kt as userRoleSchema,
2354
+ Jo as userOrganizationInsertSchema,
2355
+ Vt as userOrganizationSchema,
2356
+ Ho as userPermissionInsertSchema,
2357
+ Bt as userPermissionListSchema,
2358
+ Go as userPermissionSchema,
2359
+ Kt as userPermissionWithDetailsListSchema,
2360
+ Bo as userPermissionWithDetailsSchema,
2361
+ lt as userResponseSchema,
2362
+ Ko as userRoleInsertSchema,
2363
+ Wt as userRoleListSchema,
2364
+ Wo as userRoleSchema,
2291
2365
  Y as userSchema,
2292
2366
  Ie as verificationMethodsSchema,
2293
2367
  Ze as widgetComponentSchema,
2294
- Lt as widgetSchema
2368
+ jo as widgetSchema
2295
2369
  };