@authhero/adapter-interfaces 0.154.0 → 1.0.0

package/dist/adapter-interfaces.mjs

@@ -1,10 +1,10 @@
 import { z as e } from "@hono/zod-openapi";
-const q = e.enum([
+const X = e.enum([
   "user_action",
   "admin_action",
   "system",
   "api"
-]), X = e.object({
+]), V = e.object({
   type: e.enum(["user", "admin", "system", "api_key", "client_credentials"]),
   id: e.string().optional(),
   email: e.string().optional(),
@@ -12,13 +12,13 @@ const q = e.enum([
   org_name: e.string().optional(),
   scopes: e.array(e.string()).optional(),
   client_id: e.string().optional()
-}), V = e.object({
+}), Y = e.object({
   type: e.string(),
   id: e.string(),
   before: e.record(e.unknown()).optional(),
   after: e.record(e.unknown()).optional(),
   diff: e.record(e.object({ old: e.unknown(), new: e.unknown() })).optional()
-}), Y = e.object({
+}), Q = e.object({
   method: e.string(),
   path: e.string(),
   query: e.record(e.string()).optional(),
@@ -26,57 +26,57 @@ const q = e.enum([
   ip: e.string(),
   user_agent: e.string().optional(),
   correlation_id: e.string().optional()
-}), Q = e.object({
+}), Z = e.object({
   status_code: e.number(),
   body: e.unknown().optional()
-}), Z = e.object({
+}), $ = e.object({
   country_code: e.string(),
   city_name: e.string(),
   latitude: e.string(),
   longitude: e.string(),
   time_zone: e.string(),
   continent_code: e.string()
-}), $ = e.object({
+}), J = e.object({
   name: e.string(),
   version: e.string(),
   env: e.record(e.string()).optional()
-}), J = e.object({
+}), ee = e.object({
   tenant_id: e.string(),
   event_type: e.string(),
   log_type: e.string(),
   description: e.string().optional(),
-  category: q,
-  actor: X,
-  target: V,
-  request: Y,
-  response: Q.optional(),
+  category: X,
+  actor: V,
+  target: Y,
+  request: Q,
+  response: Z.optional(),
   connection: e.string().optional(),
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
-  location: Z.optional(),
-  auth0_client: $.optional(),
+  location: $.optional(),
+  auth0_client: J.optional(),
   hostname: e.string(),
   is_mobile: e.boolean().optional(),
   timestamp: e.string()
-}), At = J.extend({
+}), Tt = ee.extend({
   id: e.string()
-}), r = e.object({
+}), s = e.object({
   created_at: e.string(),
   updated_at: e.string()
-}), yt = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), It = e.enum([
+}), Ot = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), Nt = e.enum([
   "CREATE_USER",
   "GET_USER",
   "UPDATE_USER",
   "SEND_REQUEST",
   "SEND_EMAIL"
-]), Ct = e.enum(["VERIFY_EMAIL"]), ee = e.object({
+]), wt = e.enum(["VERIFY_EMAIL"]), oe = e.object({
   require_mx_record: e.boolean().optional(),
   block_aliases: e.boolean().optional(),
   block_free_emails: e.boolean().optional(),
   block_disposable_emails: e.boolean().optional(),
   blocklist: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional()
-}), oe = e.object({
+}), te = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("AUTH0"),
@@ -88,7 +88,7 @@ const q = e.enum([
     user_id: e.string(),
     changes: e.record(e.string(), e.any())
   })
-}), te = e.object({
+}), ne = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("EMAIL"),
@@ -97,9 +97,9 @@ const q = e.enum([
   mask_output: e.boolean().optional(),
   params: e.object({
     email: e.string(),
-    rules: ee.optional()
+    rules: oe.optional()
   })
-}), ne = e.enum(["change-email", "account", "custom"]), ie = e.object({
+}), ie = e.enum(["change-email", "account", "custom"]), ae = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("REDIRECT"),
@@ -107,32 +107,32 @@ const q = e.enum([
   allow_failure: e.boolean().optional(),
   mask_output: e.boolean().optional(),
   params: e.object({
-    target: ne.openapi({
+    target: ie.openapi({
       description: "The predefined target to redirect to, or 'custom' for a custom URL"
     }),
     custom_url: e.string().optional().openapi({
       description: "Custom URL to redirect to when target is 'custom'"
     })
   })
-}), ae = e.union([
-  oe,
+}), se = e.union([
   te,
-  ie
-]), se = e.object({
+  ne,
+  ae
+]), re = e.object({
   name: e.string().min(1).max(150).openapi({
     description: "The name of the flow"
   }),
   // Actions is an array of action steps (Auth0 stores as JSON blob)
-  actions: e.array(ae).optional().default([]).openapi({
+  actions: e.array(se).optional().default([]).openapi({
     description: "The list of actions to execute in sequence"
   })
-}), Tt = se.extend({
-  ...r.shape,
+}), jt = re.extend({
+  ...s.shape,
   id: e.string().openapi({
     description: "Unique identifier for the flow",
     example: "af_12tMpdJ3iek7svMyZkSh5M"
   })
-}), Ot = e.object({
+}), Rt = e.object({
   page: e.string().min(0).optional().default("0").transform((o) => parseInt(o, 10)).openapi({
     description: "The page number where 0 is the first page"
   }),
@@ -148,12 +148,12 @@ const q = e.enum([
   q: e.string().optional().openapi({
     description: "A lucene query string used to filter the results"
   })
-}), Nt = e.object({
+}), Dt = e.object({
   start: e.number(),
   limit: e.number(),
   length: e.number(),
   total: e.number().optional()
-}), re = e.object({
+}), le = e.object({
   email: e.string().optional(),
   email_verified: e.boolean().optional(),
   name: e.string().optional(),
@@ -162,7 +162,7 @@ const q = e.enum([
   phone_number: e.string().optional(),
   phone_verified: e.boolean().optional(),
   family_name: e.string().optional()
-}).catchall(e.any()), le = e.object({
+}).catchall(e.any()), pe = e.object({
   connection: e.string(),
   user_id: e.string(),
   provider: e.string(),
@@ -175,8 +175,8 @@ const q = e.enum([
   access_token: e.string().optional(),
   access_token_secret: e.string().optional(),
   refresh_token: e.string().optional(),
-  profileData: re.optional()
-}), pe = e.object({
+  profileData: le.optional()
+}), ce = e.object({
   formatted: e.string().optional(),
   // Full mailing address
   street_address: e.string().optional(),
@@ -221,8 +221,8 @@ const q = e.enum([
   zoneinfo: e.string().optional(),
   // e.g., "Europe/Paris"
   // OIDC address claim (OIDC Core 5.1.1)
-  address: pe
-}), ce = N.extend({
+  address: ce
+}), _e = N.extend({
   email_verified: e.boolean().default(!1),
   verify_email: e.boolean().optional(),
   last_ip: e.string().optional(),
@@ -237,29 +237,29 @@ const q = e.enum([
     hash: e.string(),
     algorithm: e.string()
   }).optional()
-}), _e = e.object({
-  ...ce.omit({ password: !0 }).shape,
-  ...r.shape,
+}), de = e.object({
+  ..._e.omit({ password: !0 }).shape,
+  ...s.shape,
   user_id: e.string(),
   provider: e.string(),
   is_social: e.boolean(),
   email: e.string().optional(),
   login_count: e.number().default(0),
-  identities: e.array(le).optional()
-}), wt = _e, jt = N.extend({
+  identities: e.array(pe).optional()
+}), Lt = de, vt = N.extend({
   login_count: e.number(),
   multifactor: e.array(e.string()).optional(),
   last_ip: e.string().optional(),
   last_login: e.string().optional(),
   user_id: e.string()
 }).catchall(e.any());
-let de = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", ge = (o = 21) => {
+let ge = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", ue = (o = 21) => {
   let t = "", i = crypto.getRandomValues(new Uint8Array(o |= 0));
   for (; o--; )
-    t += de[i[o] & 63];
+    t += ge[i[o] & 63];
   return t;
 };
-const ue = e.object({
+const me = e.object({
   client_id: e.string().openapi({
     description: "ID of this client."
   }),
@@ -272,7 +272,7 @@ const ue = e.object({
   global: e.boolean().default(!1).openapi({
     description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)."
   }),
-  client_secret: e.string().default(() => ge()).optional().openapi({
+  client_secret: e.string().default(() => ue()).optional().openapi({
     description: "Client secret (which you must not make public)."
   }),
   app_type: e.enum([
@@ -358,8 +358,8 @@ const ue = e.object({
   sso: e.boolean().default(!1).openapi({
     description: "Applies only to SSO clients and determines whether Auth0 will handle Single Sign On (true) or whether the Identity Provider will (false)."
   }),
-  sso_disabled: e.boolean().default(!0).openapi({
-    description: "Whether Single Sign On is disabled (true) or enabled (true). Defaults to true."
+  sso_disabled: e.boolean().default(!1).openapi({
+    description: "Whether Single Sign On is disabled for this client. When true, existing SSO sessions will not be reused and users must authenticate every time."
   }),
   cross_origin_authentication: e.boolean().default(!1).openapi({
     description: "Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false)."
@@ -432,11 +432,11 @@ const ue = e.object({
     description: "Specifies how long, in seconds, a Pushed Authorization Request URI remains valid"
   }),
   token_quota: e.record(e.any()).default({}).optional()
-}), Rt = e.object({
+}), kt = e.object({
   created_at: e.string(),
   updated_at: e.string(),
-  ...ue.shape
-}), me = e.object({
+  ...me.shape
+}), he = e.object({
   client_id: e.string().min(1).openapi({
     description: "ID of the client."
   }),
@@ -461,14 +461,14 @@ const ue = e.object({
   authorization_details_types: e.array(e.string()).optional().openapi({
     description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement."
   })
-}), he = e.object({
+}), be = e.object({
   id: e.string().openapi({
     description: "ID of the client grant."
   }),
-  ...me.shape,
+  ...he.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Dt = e.array(he), u = e.object({
+}), Ut = e.array(be), m = e.object({
   x: e.number(),
   y: e.number()
 });
@@ -477,7 +477,7 @@ const I = e.object({
   id: e.string(),
   category: e.nativeEnum(j),
   type: e.nativeEnum(w)
-}), be = I.extend({
+}), fe = I.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -489,7 +489,7 @@ const I = e.object({
   config: e.object({
     content: e.string()
   }).passthrough()
-}), fe = I.extend({
+}), Ee = I.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -511,7 +511,7 @@ const I = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), Ee = I.extend({
+}), Se = I.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -525,7 +525,7 @@ const I = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), Se = I.extend({
+}), Ae = I.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -578,49 +578,49 @@ const I = e.object({
     label: e.string().optional(),
     placeholder: e.string().optional()
   }).passthrough()
-}), Ae = e.object({
+}), ye = e.object({
   id: e.string(),
   category: e.string(),
   type: e.string()
-}).passthrough(), ye = e.union([
-  be,
+}).passthrough(), Ie = e.union([
   fe,
   Ee,
   Se,
-  Ae
+  Ae,
+  ye
 ]);
-var Ie = /* @__PURE__ */ ((o) => (o.STEP = "STEP", o.FLOW = "FLOW", o.CONDITION = "CONDITION", o.ACTION = "ACTION", o))(Ie || {});
-const Ce = e.object({
+var Ce = /* @__PURE__ */ ((o) => (o.STEP = "STEP", o.FLOW = "FLOW", o.CONDITION = "CONDITION", o.ACTION = "ACTION", o))(Ce || {});
+const Te = e.object({
   id: e.string(),
   type: e.literal(
     "STEP"
     /* STEP */
   ),
-  coordinates: u,
+  coordinates: m,
   alias: e.string().optional(),
   config: e.object({
-    components: e.array(ye),
+    components: e.array(Ie),
     next_node: e.string()
   }).passthrough()
-}), Te = e.object({
+}), Oe = e.object({
   id: e.string(),
   type: e.literal(
     "FLOW"
     /* FLOW */
   ),
-  coordinates: u,
+  coordinates: m,
   alias: e.string().optional(),
   config: e.object({
     flow_id: e.string(),
     next_node: e.string()
   })
-}), Oe = e.object({
+}), Ne = e.object({
   id: e.string(),
   type: e.literal(
     "ACTION"
     /* ACTION */
   ),
-  coordinates: u,
+  coordinates: m,
   alias: e.string().optional(),
   config: e.object({
     action_type: e.enum(["REDIRECT"]).openapi({
@@ -636,43 +636,43 @@ const Ce = e.object({
       description: "The next node to navigate to after action (for non-redirect actions)"
     })
   }).passthrough()
-}), Ne = e.object({
+}), we = e.object({
   id: e.string(),
   type: e.string(),
-  coordinates: u
-}).passthrough(), we = e.union([
-  Ce,
+  coordinates: m
+}).passthrough(), je = e.union([
   Te,
   Oe,
-  Ne
-]), je = e.object({
+  Ne,
+  we
+]), Re = e.object({
   next_node: e.string(),
-  coordinates: u
-}).passthrough(), Re = e.object({
-  resume_flow: e.boolean().optional(),
-  coordinates: u
+  coordinates: m
 }).passthrough(), De = e.object({
+  resume_flow: e.boolean().optional(),
+  coordinates: m
+}).passthrough(), Le = e.object({
   id: e.string(),
   name: e.string(),
   languages: e.object({
     primary: e.string()
   }).passthrough(),
-  nodes: e.array(we),
-  start: je,
-  ending: Re,
+  nodes: e.array(je),
+  start: Re,
+  ending: De,
   created_at: e.string(),
   updated_at: e.string(),
   links: e.object({
     sdkSrc: e.string().optional(),
     sdk_src: e.string().optional()
   }).passthrough()
-}).passthrough(), Lt = De.omit({
+}).passthrough(), Ft = Le.omit({
   id: !0,
   created_at: !0,
   updated_at: !0
 });
 var R = /* @__PURE__ */ ((o) => (o.TOKEN = "token", o.ID_TOKEN = "id_token", o.TOKEN_ID_TOKEN = "token id_token", o.CODE = "code", o))(R || {}), D = /* @__PURE__ */ ((o) => (o.QUERY = "query", o.FRAGMENT = "fragment", o.FORM_POST = "form_post", o.WEB_MESSAGE = "web_message", o.SAML_POST = "saml_post", o))(D || {}), L = /* @__PURE__ */ ((o) => (o.S256 = "S256", o.Plain = "plain", o))(L || {});
-const Le = e.object({
+const ve = e.object({
   client_id: e.string(),
   act_as: e.string().optional(),
   response_type: e.nativeEnum(R).optional(),
@@ -696,7 +696,7 @@ const Le = e.object({
   acr_values: e.string().optional(),
   // The following fields are not available in Auth0
   vendor_id: e.string().optional()
-}), vt = e.object({
+}), xt = e.object({
   colors: e.object({
     primary: e.string(),
     page_background: e.object({
@@ -712,7 +712,7 @@ const Le = e.object({
   font: e.object({
     url: e.string()
   }).optional()
-}), ve = e.enum([
+}), ke = e.enum([
   "password_reset",
   "email_verification",
   "otp",
@@ -720,7 +720,7 @@ const Le = e.object({
   "authorization_code",
   "oauth2_state",
   "ticket"
-]), ke = e.object({
+]), Ue = e.object({
   code_id: e.string().openapi({
     description: "The code that will be used in for instance an email verification flow"
   }),
@@ -730,7 +730,7 @@ const Le = e.object({
   connection_id: e.string().optional().openapi({
     description: "The connection that the code is connected to"
   }),
-  code_type: ve,
+  code_type: ke,
   code_verifier: e.string().optional().openapi({
     description: "The code verifier used in PKCE in outbound flows"
   }),
@@ -755,10 +755,10 @@ const Le = e.object({
   expires_at: e.string(),
   used_at: e.string().optional(),
   user_id: e.string().optional()
-}), kt = e.object({
-  ...ke.shape,
+}), Pt = e.object({
+  ...Ue.shape,
   created_at: e.string()
-}), Ue = e.object({
+}), Fe = e.object({
   kid: e.string().optional(),
   team_id: e.string().optional(),
   realms: e.string().optional(),
@@ -870,12 +870,12 @@ const Le = e.object({
   }).optional(),
   // Controls when root user attributes are updated from external IdP
   set_user_root_attributes: e.enum(["on_each_login", "on_first_login", "never_on_login"]).optional()
-}), Fe = e.object({
+}), xe = e.object({
   id: e.string().optional(),
   name: e.string(),
   display_name: e.string().optional(),
   strategy: e.string(),
-  options: Ue.default({}),
+  options: Fe.default({}),
   enabled_clients: e.array(e.string()).default([]).optional(),
   response_type: e.custom().optional(),
   response_mode: e.custom().optional(),
@@ -883,11 +883,11 @@ const Le = e.object({
   show_as_button: e.boolean().optional(),
   metadata: e.record(e.any()).optional(),
   is_system: e.boolean().optional()
-}), Ut = e.object({
+}), Mt = e.object({
   id: e.string(),
   created_at: e.string().transform((o) => o === null ? "" : o),
   updated_at: e.string().transform((o) => o === null ? "" : o)
-}).extend(Fe.shape), xe = e.object({
+}).extend(xe.shape), Pe = e.object({
   domain: e.string(),
   custom_domain_id: e.string().optional(),
   type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -901,7 +901,7 @@ const Le = e.object({
     "null"
   ]).optional(),
   domain_metadata: e.record(e.string().max(255)).optional()
-}), Pe = e.discriminatedUnion("name", [
+}), Me = e.discriminatedUnion("name", [
   e.object({
     name: e.literal("txt"),
     record: e.string(),
@@ -912,17 +912,17 @@ const Le = e.object({
     http_body: e.string(),
     http_url: e.string()
   })
-]), Me = e.object({
-  ...xe.shape,
+]), He = e.object({
+  ...Pe.shape,
   custom_domain_id: e.string(),
   primary: e.boolean(),
   status: e.enum(["disabled", "pending", "pending_verification", "ready"]),
   origin_domain_name: e.string().optional(),
   verification: e.object({
-    methods: e.array(Pe)
+    methods: e.array(Me)
   }).optional(),
   tls_policy: e.string().optional()
-}), Ft = Me.extend({
+}), Ht = He.extend({
   tenant_id: e.string()
 }), C = e.object({
   id: e.string(),
@@ -930,17 +930,17 @@ const Le = e.object({
   visible: e.boolean().optional().default(!0)
 }), l = C.extend({
   category: e.literal("BLOCK").optional()
-}), He = l.extend({
+}), Ge = l.extend({
   type: e.literal("DIVIDER"),
   config: e.object({
     text: e.string().optional()
   }).optional()
-}), Ge = l.extend({
+}), Be = l.extend({
   type: e.literal("HTML"),
   config: e.object({
     content: e.string().optional()
   }).optional()
-}), Be = l.extend({
+}), We = l.extend({
   type: e.literal("IMAGE"),
   config: e.object({
     src: e.string().optional(),
@@ -948,29 +948,29 @@ const Le = e.object({
     width: e.number().optional(),
     height: e.number().optional()
   }).optional()
-}), We = l.extend({
+}), Ke = l.extend({
   type: e.literal("JUMP_BUTTON"),
   config: e.object({
     text: e.string().optional(),
     target_step: e.string().optional()
   })
-}), Ke = l.extend({
+}), ze = l.extend({
   type: e.literal("RESEND_BUTTON"),
   config: e.object({
     text: e.string().optional(),
     resend_action: e.string().optional()
   })
-}), ze = l.extend({
+}), qe = l.extend({
   type: e.literal("NEXT_BUTTON"),
   config: e.object({
     text: e.string().optional()
   })
-}), qe = l.extend({
+}), Xe = l.extend({
   type: e.literal("PREVIOUS_BUTTON"),
   config: e.object({
     text: e.string().optional()
   })
-}), Xe = l.extend({
+}), Ve = l.extend({
   type: e.literal("RICH_TEXT"),
   config: e.object({
     content: e.string().optional()
@@ -981,17 +981,17 @@ const Le = e.object({
   hint: e.string().min(1).max(500).optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), Ve = T.extend({
+}), Ye = T.extend({
   type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
   config: e.object({
     credential_type: e.string().optional()
   })
-}), Ye = T.extend({
+}), Qe = T.extend({
   type: e.literal("GMAPS_ADDRESS"),
   config: e.object({
     api_key: e.string().optional()
   })
-}), Qe = T.extend({
+}), Ze = T.extend({
   type: e.literal("RECAPTCHA"),
   config: e.object({
     site_key: e.string().optional()
@@ -1009,12 +1009,12 @@ const Le = e.object({
   ).optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), Ze = n.extend({
+}), $e = n.extend({
   type: e.literal("BOOLEAN"),
   config: e.object({
     default_value: e.boolean().optional()
   }).optional()
-}), $e = n.extend({
+}), Je = n.extend({
   type: e.literal("CARDS"),
   config: e.object({
     options: e.array(
@@ -1027,7 +1027,7 @@ const Le = e.object({
     ).optional(),
     multi_select: e.boolean().optional()
   }).optional()
-}), Je = n.extend({
+}), eo = n.extend({
   type: e.literal("CHOICE"),
   config: e.object({
     options: e.array(
@@ -1040,7 +1040,7 @@ const Le = e.object({
     multiple: e.boolean().optional(),
     default_value: e.union([e.string(), e.array(e.string())]).optional()
   }).optional()
-}), eo = n.extend({
+}), oo = n.extend({
   type: e.literal("CUSTOM"),
   config: e.object({
     component: e.string().optional(),
@@ -1048,7 +1048,7 @@ const Le = e.object({
     schema: e.record(e.any()).optional(),
     code: e.string().optional()
   })
-}), oo = n.extend({
+}), to = n.extend({
   type: e.literal("DATE"),
   config: e.object({
     format: e.string().optional(),
@@ -1056,7 +1056,7 @@ const Le = e.object({
     max: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), to = n.extend({
+}), no = n.extend({
   type: e.literal("DROPDOWN"),
   config: e.object({
     options: e.array(
@@ -1070,26 +1070,26 @@ const Le = e.object({
     multiple: e.boolean().optional(),
     default_value: e.union([e.string(), e.array(e.string())]).optional()
   }).optional()
-}), no = n.extend({
+}), io = n.extend({
   type: e.literal("EMAIL"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), io = n.extend({
+}), ao = n.extend({
   type: e.literal("FILE"),
   config: e.object({
     accept: e.string().optional(),
     max_size: e.number().optional(),
     multiple: e.boolean().optional()
   }).optional()
-}), ao = n.extend({
+}), so = n.extend({
   type: e.literal("LEGAL"),
   config: e.object({
     text: e.string(),
     html: e.boolean().optional()
   }).optional()
-}), so = n.extend({
+}), ro = n.extend({
   type: e.literal("NUMBER"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1098,7 +1098,7 @@ const Le = e.object({
     step: e.number().optional(),
     default_value: e.string().optional()
   }).optional()
-}), ro = n.extend({
+}), lo = n.extend({
   type: e.literal("PASSWORD"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1107,13 +1107,13 @@ const Le = e.object({
     forgot_password_link: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), lo = n.extend({
+}), po = n.extend({
   type: e.literal("PAYMENT"),
   config: e.object({
     provider: e.string().optional(),
     currency: e.string().optional()
   }).optional()
-}), po = n.extend({
+}), co = n.extend({
   type: e.literal("SOCIAL"),
   config: e.object({
     providers: e.array(e.string()).optional(),
@@ -1128,7 +1128,7 @@ const Le = e.object({
       })
     ).optional()
   }).optional()
-}), co = n.extend({
+}), _o = n.extend({
   type: e.literal("TEL"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1136,7 +1136,7 @@ const Le = e.object({
     default_value: e.string().optional(),
     allow_email: e.boolean().optional()
   }).optional()
-}), _o = n.extend({
+}), go = n.extend({
   type: e.literal("TEXT"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1144,37 +1144,36 @@ const Le = e.object({
     max_length: e.number().optional(),
     default_value: e.string().optional()
   }).optional()
-}), go = n.extend({
+}), uo = n.extend({
   type: e.literal("COUNTRY"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), uo = n.extend({
+}), mo = n.extend({
   type: e.literal("URL"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), mo = e.discriminatedUnion("type", [
-  He,
+}), ho = e.discriminatedUnion("type", [
   Ge,
   Be,
   We,
   Ke,
   ze,
   qe,
-  Xe
-]), ho = e.discriminatedUnion("type", [
-  Ve,
-  Ye,
-  Qe
+  Xe,
+  Ve
 ]), bo = e.discriminatedUnion("type", [
-  Ze,
+  Ye,
+  Qe,
+  Ze
+]), fo = e.discriminatedUnion("type", [
   $e,
   Je,
-  go,
   eo,
+  uo,
   oo,
   to,
   no,
@@ -1186,12 +1185,13 @@ const Le = e.object({
   po,
   co,
   _o,
-  uo
+  go,
+  mo
 ]), v = e.union([
-  mo,
   ho,
-  bo
-]), xt = /* @__PURE__ */ new Set([
+  bo,
+  fo
+]), Gt = /* @__PURE__ */ new Set([
   "BOOLEAN",
   "CARDS",
   "CHOICE",
@@ -1205,7 +1205,7 @@ const Le = e.object({
   "TEL",
   "TEXT",
   "URL"
-]), Pt = e.object({
+]), Bt = e.object({
   id: e.string(),
   type: e.literal("submit"),
   label: e.string(),
@@ -1217,7 +1217,7 @@ const Le = e.object({
 }), f = e.object({
   x: e.number(),
   y: e.number()
-}), fo = e.object({
+}), Eo = e.object({
   id: e.string(),
   type: e.literal("FLOW"),
   coordinates: f,
@@ -1226,7 +1226,7 @@ const Le = e.object({
     flow_id: e.string().max(30),
     next_node: e.string().optional()
   })
-}), Eo = e.object({
+}), So = e.object({
   id: e.string(),
   type: e.literal("ROUTER"),
   coordinates: f,
@@ -1242,7 +1242,7 @@ const Le = e.object({
     ),
     fallback: e.string()
   })
-}), So = e.object({
+}), Ao = e.object({
   id: e.string(),
   type: e.literal("STEP"),
   coordinates: f,
@@ -1251,11 +1251,11 @@ const Le = e.object({
     components: e.array(v),
     next_node: e.string().optional()
   })
-}), Ao = e.discriminatedUnion("type", [
-  fo,
+}), yo = e.discriminatedUnion("type", [
   Eo,
-  So
-]), yo = e.object({
+  So,
+  Ao
+]), Io = e.object({
   name: e.string().openapi({
     description: "The name of the form"
   }),
@@ -1268,7 +1268,7 @@ const Le = e.object({
     default: e.string().optional()
   }).optional(),
   translations: e.record(e.string(), e.any()).optional(),
-  nodes: e.array(Ao).optional(),
+  nodes: e.array(yo).optional(),
   start: e.object({
     hidden_fields: e.array(e.object({ key: e.string(), value: e.string() })).optional(),
     next_node: e.string().optional(),
@@ -1290,20 +1290,20 @@ const Le = e.object({
   }).optional()
 }).openapi({
   description: "Schema for flow-based forms (matches Auth0 Forms structure)"
-}), Mt = e.object({
-  ...r.shape,
-  ...yo.shape,
+}), Wt = e.object({
+  ...s.shape,
+  ...Io.shape,
   id: e.string()
-}), Io = e.object({
+}), Co = e.object({
   id: e.number().optional(),
   text: e.string(),
   type: e.enum(["info", "error", "success", "warning"])
-}), Co = e.object({
+}), To = e.object({
   id: e.string().optional(),
   text: e.string(),
   href: e.string(),
   linkText: e.string().optional()
-}), Ht = e.object({
+}), Kt = e.object({
   /** Screen identifier for CSS targeting (e.g., 'identifier', 'enter-password', 'signup') */
   name: e.string().optional(),
   action: e.string(),
@@ -1311,18 +1311,18 @@ const Le = e.object({
   title: e.string().optional(),
   description: e.string().optional(),
   components: e.array(v),
-  messages: e.array(Io).optional(),
-  links: e.array(Co).optional(),
+  messages: e.array(Co).optional(),
+  links: e.array(To).optional(),
   /** Footer HTML content displayed at the very bottom of the widget (e.g., terms and conditions) */
   footer: e.string().optional()
 });
-function Gt(o) {
+function zt(o) {
   return o.category === "BLOCK";
 }
-function Bt(o) {
+function qt(o) {
   return o.category === "WIDGET";
 }
-function Wt(o) {
+function Xt(o) {
   return o.category === "FIELD";
 }
 const k = e.enum([
@@ -1344,9 +1344,14 @@ const k = e.enum([
   "post-user-login",
   "credentials-exchange"
 ]), x = e.enum([
+  "post-user-login",
+  "credentials-exchange",
+  "pre-user-registration",
+  "post-user-registration"
+]), P = e.enum([
   "ensure-username",
   "set-preferred-username"
-]), Kt = {
+]), Vt = {
   "ensure-username": {
     name: "Ensure Username",
     description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1357,57 +1362,76 @@ const k = e.enum([
     description: "Sets the preferred_username claim on tokens based on the username from the primary or linked user.",
     trigger_id: "credentials-exchange"
   }
-}, m = {
+}, p = {
   enabled: e.boolean().default(!1),
   synchronous: e.boolean().default(!1),
   priority: e.number().optional(),
   hook_id: e.string().optional()
-}, To = e.object({
-  ...m,
+}, Oo = e.object({
+  ...p,
   trigger_id: k,
   url: e.string()
-}), Oo = e.object({
-  ...m,
+}), No = e.object({
+  ...p,
   trigger_id: U,
   form_id: e.string()
-}), No = e.object({
-  ...m,
+}), wo = e.object({
+  ...p,
   trigger_id: F,
-  template_id: x
-}), zt = e.union([
-  To,
+  template_id: P
+}), jo = e.object({
+  ...p,
+  trigger_id: x,
+  code_id: e.string()
+}), Yt = e.union([
   Oo,
-  No
-]), wo = e.object({
-  ...m,
+  No,
+  wo,
+  jo
+]), Ro = e.object({
+  ...p,
   trigger_id: k,
-  ...r.shape,
+  ...s.shape,
   hook_id: e.string(),
   url: e.string()
-}), jo = e.object({
-  ...m,
+}), Do = e.object({
+  ...p,
   trigger_id: U,
-  ...r.shape,
+  ...s.shape,
   hook_id: e.string(),
   form_id: e.string()
-}), Ro = e.object({
-  ...m,
+}), Lo = e.object({
+  ...p,
   trigger_id: F,
-  ...r.shape,
+  ...s.shape,
   hook_id: e.string(),
-  template_id: x
-}), qt = e.union([
-  wo,
-  jo,
-  Ro
-]), Do = e.object({
+  template_id: P
+}), vo = e.object({
+  ...p,
+  trigger_id: x,
+  ...s.shape,
+  hook_id: e.string(),
+  code_id: e.string()
+}), Qt = e.union([
+  Ro,
+  Do,
+  Lo,
+  vo
+]), ko = e.object({
+  code: e.string().max(1e5),
+  secrets: e.record(e.string()).optional()
+}), Zt = ko.extend({
+  id: e.string(),
+  tenant_id: e.string(),
+  ...s.shape
+}), Uo = e.object({
   name: e.string().optional()
-}), Lo = e.object({
+}), Fo = e.object({
   email: e.string().optional()
-}), vo = e.object({
+}), xo = e.object({
   organization_id: e.string().max(50),
-  inviter: Do,
-  invitee: Lo,
+  inviter: Uo,
+  invitee: Fo,
   invitation_url: e.string().url(),
   client_id: e.string(),
   connection_id: e.string().optional(),
@@ -1416,13 +1440,13 @@ const k = e.enum([
   ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
   roles: e.array(e.string()).default([]).optional(),
   send_invitation_email: e.boolean().default(!0).optional()
-}), Xt = e.object({
+}), $t = e.object({
   id: e.string(),
   organization_id: e.string().max(50),
   created_at: e.string().datetime(),
   expires_at: e.string().datetime(),
   ticket_id: e.string().optional()
-}).extend(vo.shape), ko = e.object({
+}).extend(xo.shape), Po = e.object({
   alg: e.enum([
     "RS256",
     "RS384",
@@ -1441,9 +1465,9 @@ const k = e.enum([
   x5t: e.string().optional(),
   x5c: e.array(e.string()).optional(),
   use: e.enum(["sig", "enc"]).optional()
-}), Vt = e.object({
-  keys: e.array(ko)
-}), Yt = e.object({
+}), Jt = e.object({
+  keys: e.array(Po)
+}), en = e.object({
   issuer: e.string(),
   authorization_endpoint: e.string(),
   token_endpoint: e.string(),
@@ -1465,18 +1489,18 @@ const k = e.enum([
   request_parameter_supported: e.boolean(),
   token_endpoint_auth_signing_alg_values_supported: e.array(e.string())
 });
-var P = /* @__PURE__ */ ((o) => (o.PENDING = "pending", o.AUTHENTICATED = "authenticated", o.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", o.AWAITING_MFA = "awaiting_mfa", o.AWAITING_HOOK = "awaiting_hook", o.AWAITING_CONTINUATION = "awaiting_continuation", o.COMPLETED = "completed", o.FAILED = "failed", o.EXPIRED = "expired", o))(P || {});
-const Uo = e.nativeEnum(P), Fo = e.object({
+var M = /* @__PURE__ */ ((o) => (o.PENDING = "pending", o.AUTHENTICATED = "authenticated", o.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", o.AWAITING_MFA = "awaiting_mfa", o.AWAITING_HOOK = "awaiting_hook", o.AWAITING_CONTINUATION = "awaiting_continuation", o.COMPLETED = "completed", o.FAILED = "failed", o.EXPIRED = "expired", o))(M || {});
+const Mo = e.nativeEnum(M), Ho = e.object({
   csrf_token: e.string(),
   auth0Client: e.string().optional(),
-  authParams: Le,
+  authParams: ve,
   expires_at: e.string(),
   deleted_at: e.string().optional(),
   ip: e.string().optional(),
   useragent: e.string().optional(),
   session_id: e.string().optional(),
   authorization_url: e.string().optional(),
-  state: Uo.optional().default(
+  state: Mo.optional().default(
     "pending"
     /* PENDING */
   ),
@@ -1489,14 +1513,14 @@ const Uo = e.nativeEnum(P), Fo = e.object({
   // The connection used to authenticate (may differ from primary user's connection)
 }).openapi({
   description: "This represents a login sesion"
-}), Qt = e.object({
-  ...Fo.shape,
+}), on = e.object({
+  ...Ho.shape,
   id: e.string().openapi({
     description: "This is is used as the state in the universal login"
   }),
   created_at: e.string(),
   updated_at: e.string()
-}), xo = {
+}), Go = {
   // Network & System
   ACLS_SUMMARY: "acls_summary",
   ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
@@ -1667,24 +1691,24 @@ const Uo = e.nativeEnum(P), Fo = e.object({
   WARNING_DURING_LOGIN: "w",
   WARNING_SENDING_NOTIFICATION: "wn",
   WARNING_USER_MANAGEMENT: "wum"
-}, Po = e.string().refine(
-  (o) => Object.values(xo).includes(o),
+}, Bo = e.string().refine(
+  (o) => Object.values(Go).includes(o),
   { message: "Invalid log type" }
-), Mo = e.object({
+), Wo = e.object({
   name: e.string(),
   version: e.string(),
   env: e.object({
     node: e.string().optional()
   }).optional()
-}), Ho = e.object({
+}), Ko = e.object({
   country_code: e.string().length(2),
   city_name: e.string(),
   latitude: e.string(),
   longitude: e.string(),
   time_zone: e.string(),
   continent_code: e.string()
-}), Go = e.object({
-  type: Po,
+}), zo = e.object({
+  type: Bo,
   date: e.string(),
   description: e.string().optional(),
   ip: e.string().optional(),
@@ -1703,30 +1727,30 @@ const Uo = e.nativeEnum(P), Fo = e.object({
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
   hostname: e.string().optional(),
-  auth0_client: Mo.optional(),
+  auth0_client: Wo.optional(),
   log_id: e.string().optional(),
-  location_info: Ho.optional()
-}), Zt = e.object({
-  ...Go.shape,
+  location_info: Ko.optional()
+}), tn = e.object({
+  ...zo.shape,
   log_id: e.string()
-}), Bo = e.object({
+}), qo = e.object({
   id: e.string().optional(),
   user_id: e.string(),
   password: e.string(),
   algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
   is_current: e.boolean().default(!0)
-}), $t = Bo.extend({
+}), nn = qo.extend({
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
-}), M = e.object({
+}), H = e.object({
   initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
   initial_ip: e.string().describe("First IP address associated with this session"),
   initial_asn: e.string().describe("First autonomous system number associated with this session"),
   last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
   last_ip: e.string().describe("Last IP address from which this user logged in"),
   last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), Wo = e.object({
+}), Xo = e.object({
   id: e.string(),
   revoked_at: e.string().optional(),
   used_at: e.string().optional(),
@@ -1734,17 +1758,17 @@ const Uo = e.nativeEnum(P), Fo = e.object({
   expires_at: e.string().optional(),
   login_session_id: e.string(),
   idle_expires_at: e.string().optional(),
-  device: M.describe(
+  device: H.describe(
     "Metadata related to the device used in the session"
   ),
   clients: e.array(e.string()).describe("List of client details for the session")
-}), Jt = e.object({
+}), an = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   authenticated_at: e.string(),
   last_interaction_at: e.string(),
-  ...Wo.shape
-}), en = e.object({
+  ...Xo.shape
+}), sn = e.object({
   kid: e.string().openapi({ description: "The key id of the signing key" }),
   cert: e.string().openapi({ description: "The public certificate of the signing key" }),
   fingerprint: e.string().openapi({ description: "The cert fingerprint" }),
@@ -1769,7 +1793,7 @@ const Uo = e.nativeEnum(P), Fo = e.object({
   type: e.enum(["jwt_signing", "saml_encryption"]).openapi({
     description: "The type of the signing key"
   })
-}), Ko = e.object({
+}), Vo = e.object({
   id: e.string().optional(),
   // Basic settings
   audience: e.string(),
@@ -1924,14 +1948,14 @@ const Uo = e.nativeEnum(P), Fo = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), on = e.object({
+}), rn = e.object({
   created_at: e.string().nullable().transform((o) => o ?? ""),
   updated_at: e.string().nullable().transform((o) => o ?? ""),
-  ...Ko.shape,
+  ...Vo.shape,
   id: e.string()
 });
-var zo = /* @__PURE__ */ ((o) => (o.RefreshToken = "refresh_token", o.AuthorizationCode = "authorization_code", o.ClientCredential = "client_credentials", o.Passwordless = "passwordless", o.Password = "password", o.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", o))(zo || {});
-const tn = e.object({
+var Yo = /* @__PURE__ */ ((o) => (o.RefreshToken = "refresh_token", o.AuthorizationCode = "authorization_code", o.ClientCredential = "client_credentials", o.Passwordless = "passwordless", o.Password = "password", o.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", o))(Yo || {});
+const ln = e.object({
   access_token: e.string(),
   id_token: e.string().optional(),
   scope: e.string().optional(),
@@ -1944,7 +1968,7 @@ e.object({
   code: e.string(),
   state: e.string().optional()
 });
-const qo = e.object({
+const Qo = e.object({
   button_border_radius: e.number(),
   button_border_weight: e.number(),
   buttons_style: e.enum(["pill", "rounded", "sharp"]),
@@ -1954,7 +1978,7 @@ const qo = e.object({
   show_widget_shadow: e.boolean(),
   widget_border_weight: e.number(),
   widget_corner_radius: e.number()
-}), Xo = e.object({
+}), Zo = e.object({
   base_focus_color: e.string(),
   base_hover_color: e.string(),
   body_text: e.string(),
@@ -1974,44 +1998,44 @@ const qo = e.object({
   success: e.string(),
   widget_background: e.string(),
   widget_border: e.string()
-}), g = e.object({
+}), u = e.object({
   bold: e.boolean(),
   size: e.number()
-}), Vo = e.object({
-  body_text: g,
-  buttons_text: g,
+}), $o = e.object({
+  body_text: u,
+  buttons_text: u,
   font_url: e.string(),
-  input_labels: g,
-  links: g,
+  input_labels: u,
+  links: u,
   links_style: e.enum(["normal", "underlined"]),
   reference_text_size: e.number(),
-  subtitle: g,
-  title: g
-}), Yo = e.object({
+  subtitle: u,
+  title: u
+}), Jo = e.object({
   background_color: e.string(),
   background_image_url: e.string(),
   page_layout: e.enum(["center", "left", "right"])
-}), Qo = e.object({
+}), et = e.object({
   header_text_alignment: e.enum(["center", "left", "right"]),
   logo_height: e.number(),
   logo_position: e.enum(["center", "left", "none", "right"]),
   logo_url: e.string(),
   social_buttons_layout: e.enum(["bottom", "top"])
-}), Zo = e.object({
-  borders: qo,
-  colors: Xo,
+}), ot = e.object({
+  borders: Qo,
+  colors: Zo,
   displayName: e.string(),
-  fonts: Vo,
-  page_background: Yo,
-  widget: Qo
-}), nn = Zo.extend({
+  fonts: $o,
+  page_background: Jo,
+  widget: et
+}), pn = ot.extend({
   themeId: e.string()
-}), an = e.object({
+}), cn = e.object({
   universal_login_experience: e.enum(["new", "classic"]).default("new"),
   identifier_first: e.boolean().default(!0),
   password_first: e.boolean().default(!1),
   webauthn_platform_first_factor: e.boolean()
-}), sn = e.object({
+}), _n = e.object({
   name: e.string(),
   enabled: e.boolean().optional().default(!0),
   default_from_address: e.string().optional(),
@@ -2041,7 +2065,7 @@ const qo = e.object({
     })
   ]),
   settings: e.object({}).optional()
-}), $o = e.object({
+}), tt = e.object({
   // The actual refresh token value (primary key).
   id: e.string(),
   // Link to the login session
@@ -2054,7 +2078,7 @@ const qo = e.object({
   idle_expires_at: e.string().optional(),
   // When the token was last used.
   last_exchanged_at: e.string().optional(),
-  device: M,
+  device: H,
   resource_servers: e.array(
     e.object({
       audience: e.string(),
@@ -2062,21 +2086,21 @@ const qo = e.object({
     })
   ),
   rotating: e.boolean()
-}), rn = e.object({
+}), dn = e.object({
   // When the refresh token record was created.
   created_at: e.string(),
   // Spread in the rest of the refresh token properties.
-  ...$o.shape
-}), ln = e.object({
+  ...tt.shape
+}), gn = e.object({
   to: e.string(),
   message: e.string()
-}), pn = e.object({
+}), un = e.object({
   name: e.string(),
   options: e.object({})
-}), Jo = e.object({
+}), nt = e.object({
   value: e.string(),
   description: e.string().optional()
-}), et = e.object({
+}), it = e.object({
   token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
   enforce_policies: e.boolean().optional(),
   allow_skipping_userinfo: e.boolean().optional(),
@@ -2086,11 +2110,11 @@ const qo = e.object({
   mtls: e.object({
     bound_access_tokens: e.boolean().optional()
   }).optional()
-}), ot = e.object({
+}), at = e.object({
   id: e.string().optional(),
   name: e.string(),
   identifier: e.string(),
-  scopes: e.array(Jo).optional(),
+  scopes: e.array(nt).optional(),
   signing_alg: e.string().optional(),
   signing_secret: e.string().optional(),
   token_lifetime: e.number().optional(),
@@ -2098,30 +2122,30 @@ const qo = e.object({
   skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
   allow_offline_access: e.boolean().optional(),
   verificationKey: e.string().optional(),
-  options: et.optional(),
+  options: it.optional(),
   is_system: e.boolean().optional(),
   metadata: e.record(e.any()).optional()
-}), tt = e.object({
-  ...ot.shape,
+}), st = e.object({
+  ...at.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), cn = e.array(tt), nt = e.object({
+}), mn = e.array(st), rt = e.object({
   role_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string()
-}), it = e.object({
-  ...nt.shape,
+}), lt = e.object({
+  ...rt.shape,
   created_at: e.string()
-}), _n = e.array(it), at = e.object({
+}), hn = e.array(lt), pt = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string(),
   organization_id: e.string().optional()
-}), st = e.object({
-  ...at.shape,
+}), ct = e.object({
+  ...pt.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), dn = e.array(st), rt = e.object({
+}), bn = e.array(ct), _t = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   resource_server_name: e.string(),
@@ -2129,17 +2153,17 @@ const qo = e.object({
   description: e.string().nullable().optional(),
   created_at: e.string().optional(),
   organization_id: e.string().optional()
-}), gn = e.array(
-  rt
-), lt = e.object({
+}), fn = e.array(
+  _t
+), dt = e.object({
   user_id: e.string(),
   role_id: e.string(),
   organization_id: e.string().optional()
-}), pt = e.object({
-  ...lt.shape,
+}), gt = e.object({
+  ...dt.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), un = e.array(pt), ct = e.object({
+}), En = e.array(gt), ut = e.object({
   id: e.string().optional().openapi({
     description: "The unique identifier of the role. If not provided, one will be generated."
   }),
@@ -2153,13 +2177,13 @@ const qo = e.object({
   metadata: e.record(e.any()).optional().openapi({
     description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios."
   })
-}), _t = ct.extend({
+}), mt = ut.extend({
   id: e.string().openapi({
     description: "The unique identifier of the role"
   }),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), mn = e.array(_t), dt = e.object({
+}), Sn = e.array(mt), ht = e.object({
   logo_url: e.string().optional().openapi({
     description: "URL of the organization's logo"
   }),
@@ -2171,7 +2195,7 @@ const qo = e.object({
       description: "Page background color in hex format (e.g., #FFFFFF)"
     })
   }).optional()
-}).optional(), gt = e.object({
+}).optional(), bt = e.object({
   connection_id: e.string().openapi({
     description: "ID of the connection"
   }),
@@ -2184,7 +2208,7 @@ const qo = e.object({
   is_signup_enabled: e.boolean().default(!0).openapi({
     description: "Whether signup is enabled for this connection"
   })
-}), ut = e.object({
+}), ft = e.object({
   client_credentials: e.object({
     enforce: e.boolean().default(!1).openapi({
       description: "Whether to enforce token quota limits"
@@ -2196,7 +2220,7 @@ const qo = e.object({
       description: "Maximum tokens per hour (0 = unlimited)"
     })
   }).optional()
-}).optional(), mt = e.object({
+}).optional(), Et = e.object({
   id: e.string().optional(),
   name: e.string().min(1).regex(/^[a-z0-9_-]+$/, {
     message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores"
@@ -2206,34 +2230,34 @@ const qo = e.object({
   display_name: e.string().optional().openapi({
     description: "The display name of the organization"
   }),
-  branding: dt,
+  branding: ht,
   metadata: e.record(e.any()).default({}).optional().openapi({
     description: "Custom metadata for the organization"
   }),
-  enabled_connections: e.array(gt).default([]).optional().openapi({
+  enabled_connections: e.array(bt).default([]).optional().openapi({
     description: "List of enabled connections for the organization"
   }),
-  token_quota: ut
-}), hn = e.object({
-  ...mt.shape,
-  ...r.shape,
+  token_quota: ft
+}), An = e.object({
+  ...Et.shape,
+  ...s.shape,
   id: e.string(),
   // Override name to be lenient when reading from database (to support existing uppercase names)
   name: e.string().min(1).openapi({
     description: "The name of the organization"
   })
-}), ht = e.object({
+}), St = e.object({
   user_id: e.string().openapi({
     description: "ID of the user"
   }),
   organization_id: e.string().openapi({
     description: "ID of the organization"
   })
-}), bn = e.object({
-  ...ht.shape,
-  ...r.shape,
+}), yn = e.object({
+  ...St.shape,
+  ...s.shape,
   id: e.string()
-}), fn = e.object({
+}), In = e.object({
   // Session settings
   idle_session_lifetime: e.number().optional(),
   session_lifetime: e.number().optional(),
@@ -2333,7 +2357,7 @@ const qo = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), En = e.object({
+}), Cn = e.object({
   date: e.string().openapi({
     description: "Date these events occurred in ISO 8601 format",
     example: "2025-12-19"
@@ -2358,10 +2382,10 @@ const qo = e.object({
     description: "Approximate date and time the first event occurred in ISO 8601 format",
     example: "2025-12-19T00:00:00.000Z"
   })
-}), Sn = e.number().openapi({
+}), Tn = e.number().openapi({
   description: "Number of active users in the last 30 days",
   example: 1234
-}), bt = e.enum([
+}), At = e.enum([
   "login",
   "login-id",
   "login-password",
@@ -2390,17 +2414,17 @@ const qo = e.object({
   "custom-form",
   "login-passwordless",
   "mfa-login-options"
-]), ft = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+]), yt = e.record(e.string(), e.record(e.string(), e.string())).openapi({
   type: "object",
   additionalProperties: {
     type: "object",
     additionalProperties: { type: "string" }
   }
-}), An = e.object({
-  prompt: bt,
+}), On = e.object({
+  prompt: At,
   language: e.string(),
-  custom_text: ft
-}), yn = {
+  custom_text: yt
+}), Nn = {
   EMAIL: "email",
   SMS: "sms",
   USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2415,11 +2439,11 @@ const qo = e.object({
   SAMLP: "samlp",
   WAAD: "waad",
   ADFS: "adfs"
-}, In = {
+}, wn = {
   DATABASE: "database",
   SOCIAL: "social",
   PASSWORDLESS: "passwordless"
-}, Et = e.enum([
+}, It = e.enum([
   "phone",
   "totp",
   "email",
@@ -2427,9 +2451,9 @@ const qo = e.object({
   "webauthn-roaming",
   "webauthn-platform",
   "passkey"
-]), H = e.object({
+]), G = e.object({
   user_id: e.string(),
-  type: Et,
+  type: It,
   // Phone-specific
   phone_number: e.string().optional(),
   // TOTP-specific
@@ -2444,7 +2468,7 @@ const qo = e.object({
   // Common
   confirmed: e.boolean().default(!1)
 });
-function G(o, t) {
+function B(o, t) {
   o.type === "phone" && !o.phone_number && t.addIssue({
     code: e.ZodIssueCode.custom,
     message: "phone_number is required when type is 'phone'",
@@ -2463,40 +2487,40 @@ function G(o, t) {
     path: ["public_key"]
   }));
 }
-const Cn = H.superRefine(G), Tn = e.object({
-  ...H.shape,
+const jn = G.superRefine(B), Rn = e.object({
+  ...G.shape,
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
-}).superRefine(G);
-function On(o) {
+}).superRefine(B);
+function Dn(o) {
   const [t, i] = o.split("|");
   if (!t || !i)
     throw new Error(`Invalid user_id: ${o}`);
   return { connection: t, id: i };
 }
-function Nn(o) {
+function Ln(o) {
   const {
     primary: t,
     secondaries: i,
     syncMethods: O = ["create", "update", "remove", "delete", "set"]
   } = o, E = {
-    get(p, a) {
+    get(c, a) {
       if (typeof a == "symbol")
-        return p[a];
-      const c = p[a];
-      return typeof c != "function" ? c : O.includes(a) ? async (..._) => {
-        const S = await c.apply(p, _), d = [];
-        for (const s of i) {
-          const h = s.adapter[a];
+        return c[a];
+      const _ = c[a];
+      return typeof _ != "function" ? _ : O.includes(a) ? async (...d) => {
+        const S = await _.apply(c, d), g = [];
+        for (const r of i) {
+          const h = r.adapter[a];
           if (typeof h != "function")
             continue;
           const A = (async () => {
             try {
-              await h.apply(s.adapter, _);
+              await h.apply(r.adapter, d);
             } catch (b) {
               try {
-                s.onError ? s.onError(b, a, _) : console.error(
+                r.onError ? r.onError(b, a, d) : console.error(
                   `Passthrough adapter: secondary write failed for ${a}:`,
                   b
                 );
@@ -2508,19 +2532,19 @@ function Nn(o) {
               }
             }
           })();
-          s.blocking && d.push(A);
+          r.blocking && g.push(A);
         }
-        return d.length > 0 && await Promise.all(d), S;
-      } : c.bind(p);
+        return g.length > 0 && await Promise.all(g), S;
+      } : _.bind(c);
     }
   };
   return new Proxy(t, E);
 }
-function wn(o) {
+function vn(o) {
   return o;
 }
-function jn(o) {
-  var E, p, a, c, _, S, d, s, h, A, b, y;
+function kn(o) {
+  var E, c, a, _, d, S, g, r, h, A, b, y;
   const t = o == null ? void 0 : o.options;
   if (!t)
     return {
@@ -2531,12 +2555,12 @@ function jn(o) {
     };
   const i = t.attributes;
   if (i) {
-    const B = ((p = (E = i.username) == null ? void 0 : E.identifier) == null ? void 0 : p.active) === !0, W = ((c = (a = i.email) == null ? void 0 : a.identifier) == null ? void 0 : c.active) !== !1, K = ((S = (_ = i.username) == null ? void 0 : _.validation) == null ? void 0 : S.min_length) ?? 1, z = ((s = (d = i.username) == null ? void 0 : d.validation) == null ? void 0 : s.max_length) ?? 15;
+    const W = ((c = (E = i.username) == null ? void 0 : E.identifier) == null ? void 0 : c.active) === !0, K = ((_ = (a = i.email) == null ? void 0 : a.identifier) == null ? void 0 : _.active) !== !1, z = ((S = (d = i.username) == null ? void 0 : d.validation) == null ? void 0 : S.min_length) ?? 1, q = ((r = (g = i.username) == null ? void 0 : g.validation) == null ? void 0 : r.max_length) ?? 15;
     return {
-      usernameIdentifierActive: B,
-      emailIdentifierActive: W,
-      usernameMinLength: K,
-      usernameMaxLength: z
+      usernameIdentifierActive: W,
+      emailIdentifierActive: K,
+      usernameMinLength: z,
+      usernameMaxLength: q
     };
   }
   return {
@@ -2547,172 +2571,174 @@ function jn(o) {
   };
 }
 export {
-  It as Auth0ActionEnum,
-  Mo as Auth0Client,
+  Nt as Auth0ActionEnum,
+  Wo as Auth0Client,
   D as AuthorizationResponseMode,
   R as AuthorizationResponseType,
   L as CodeChallengeMethod,
   j as ComponentCategory,
   w as ComponentType,
-  Ct as EmailActionEnum,
-  xt as FORM_FIELD_TYPES,
-  yt as FlowActionTypeEnum,
-  zo as GrantType,
-  Ho as LocationInfo,
-  xo as LogTypes,
-  P as LoginSessionState,
-  Ie as NodeType,
-  ne as RedirectTargetEnum,
-  yn as Strategy,
-  In as StrategyType,
-  Oe as actionNodeSchema,
-  Sn as activeUsersResponseSchema,
-  X as actorSchema,
-  pe as addressSchema,
-  q as auditCategorySchema,
-  J as auditEventInsertSchema,
-  At as auditEventSchema,
-  $ as auth0ClientSchema,
-  Lt as auth0FlowInsertSchema,
-  De as auth0FlowSchema,
-  Ot as auth0QuerySchema,
-  oe as auth0UpdateUserActionSchema,
-  wt as auth0UserResponseSchema,
-  Le as authParamsSchema,
-  Cn as authenticationMethodInsertSchema,
-  Tn as authenticationMethodSchema,
-  Et as authenticationMethodTypeSchema,
+  wt as EmailActionEnum,
+  Gt as FORM_FIELD_TYPES,
+  Ot as FlowActionTypeEnum,
+  Yo as GrantType,
+  Ko as LocationInfo,
+  Go as LogTypes,
+  M as LoginSessionState,
+  Ce as NodeType,
+  ie as RedirectTargetEnum,
+  Nn as Strategy,
+  wn as StrategyType,
+  Ne as actionNodeSchema,
+  Tn as activeUsersResponseSchema,
+  V as actorSchema,
+  ce as addressSchema,
+  X as auditCategorySchema,
+  ee as auditEventInsertSchema,
+  Tt as auditEventSchema,
+  J as auth0ClientSchema,
+  Ft as auth0FlowInsertSchema,
+  Le as auth0FlowSchema,
+  Rt as auth0QuerySchema,
+  te as auth0UpdateUserActionSchema,
+  Lt as auth0UserResponseSchema,
+  ve as authParamsSchema,
+  jn as authenticationMethodInsertSchema,
+  Rn as authenticationMethodSchema,
+  It as authenticationMethodTypeSchema,
   N as baseUserSchema,
-  mo as blockComponentSchema,
-  qo as bordersSchema,
-  vt as brandingSchema,
-  fe as buttonComponentSchema,
-  me as clientGrantInsertSchema,
-  Dt as clientGrantListSchema,
-  he as clientGrantSchema,
-  ue as clientInsertSchema,
-  Rt as clientSchema,
-  ke as codeInsertSchema,
-  kt as codeSchema,
-  ve as codeTypeSchema,
-  Xo as colorsSchema,
-  Io as componentMessageSchema,
-  ye as componentSchema,
-  Fe as connectionInsertSchema,
-  Ue as connectionOptionsSchema,
-  Ut as connectionSchema,
-  u as coordinatesSchema,
-  Nn as createPassthroughAdapter,
-  wn as createWriteOnlyAdapter,
-  xe as customDomainInsertSchema,
-  Me as customDomainSchema,
-  Ft as customDomainWithTenantIdSchema,
-  An as customTextEntrySchema,
-  ft as customTextSchema,
-  En as dailyStatsSchema,
-  sn as emailProviderSchema,
-  ee as emailVerificationRulesSchema,
-  te as emailVerifyActionSchema,
-  Re as endingSchema,
-  bo as fieldComponentSchema,
-  ae as flowActionStepSchema,
-  se as flowInsertSchema,
-  Tt as flowSchema,
-  Se as flowsFieldComponentSchema,
-  Te as flowsFlowNodeSchema,
-  Ce as flowsStepNodeSchema,
-  g as fontDetailsSchema,
-  Vo as fontsSchema,
-  Pt as formControlSchema,
-  yo as formInsertSchema,
+  ho as blockComponentSchema,
+  Qo as bordersSchema,
+  xt as brandingSchema,
+  Ee as buttonComponentSchema,
+  he as clientGrantInsertSchema,
+  Ut as clientGrantListSchema,
+  be as clientGrantSchema,
+  me as clientInsertSchema,
+  kt as clientSchema,
+  Ue as codeInsertSchema,
+  Pt as codeSchema,
+  ke as codeTypeSchema,
+  Zo as colorsSchema,
+  Co as componentMessageSchema,
+  Ie as componentSchema,
+  xe as connectionInsertSchema,
+  Fe as connectionOptionsSchema,
+  Mt as connectionSchema,
+  m as coordinatesSchema,
+  Ln as createPassthroughAdapter,
+  vn as createWriteOnlyAdapter,
+  Pe as customDomainInsertSchema,
+  He as customDomainSchema,
+  Ht as customDomainWithTenantIdSchema,
+  On as customTextEntrySchema,
+  yt as customTextSchema,
+  Cn as dailyStatsSchema,
+  _n as emailProviderSchema,
+  oe as emailVerificationRulesSchema,
+  ne as emailVerifyActionSchema,
+  De as endingSchema,
+  fo as fieldComponentSchema,
+  se as flowActionStepSchema,
+  re as flowInsertSchema,
+  jt as flowSchema,
+  Ae as flowsFieldComponentSchema,
+  Oe as flowsFlowNodeSchema,
+  Te as flowsStepNodeSchema,
+  u as fontDetailsSchema,
+  $o as fontsSchema,
+  Bt as formControlSchema,
+  Io as formInsertSchema,
   v as formNodeComponentDefinition,
-  Ao as formNodeSchema,
-  Mt as formSchema,
-  Ae as genericComponentSchema,
-  Ne as genericNodeSchema,
-  jn as getConnectionIdentifierConfig,
-  zt as hookInsertSchema,
-  qt as hookSchema,
-  x as hookTemplateId,
-  Kt as hookTemplates,
-  le as identitySchema,
-  vo as inviteInsertSchema,
-  Xt as inviteSchema,
-  Lo as inviteeSchema,
-  Do as inviterSchema,
-  Gt as isBlockComponent,
-  Wt as isFieldComponent,
-  Bt as isWidgetComponent,
-  Vt as jwksKeySchema,
-  ko as jwksSchema,
-  Ee as legalComponentSchema,
-  Z as locationInfoSchema,
-  Go as logInsertSchema,
-  Zt as logSchema,
-  Fo as loginSessionInsertSchema,
-  Qt as loginSessionSchema,
-  Uo as loginSessionStateSchema,
-  we as nodeSchema,
-  Yt as openIDConfigurationSchema,
-  dt as organizationBrandingSchema,
-  gt as organizationEnabledConnectionSchema,
-  mt as organizationInsertSchema,
-  hn as organizationSchema,
-  ut as organizationTokenQuotaSchema,
-  Yo as pageBackgroundSchema,
-  On as parseUserId,
-  Bo as passwordInsertSchema,
-  $t as passwordSchema,
-  re as profileDataSchema,
-  bt as promptScreenSchema,
-  an as promptSettingSchema,
-  ie as redirectActionSchema,
-  $o as refreshTokenInsertSchema,
-  rn as refreshTokenSchema,
-  Y as requestContextSchema,
-  ot as resourceServerInsertSchema,
-  cn as resourceServerListSchema,
-  et as resourceServerOptionsSchema,
-  tt as resourceServerSchema,
-  Jo as resourceServerScopeSchema,
-  Q as responseContextSchema,
-  be as richTextComponentSchema,
-  ct as roleInsertSchema,
-  mn as roleListSchema,
-  nt as rolePermissionInsertSchema,
-  _n as rolePermissionListSchema,
-  it as rolePermissionSchema,
-  _t as roleSchema,
-  Co as screenLinkSchema,
-  Wo as sessionInsertSchema,
-  Jt as sessionSchema,
-  en as signingKeySchema,
-  pn as smsProviderSchema,
-  ln as smsSendParamsSchema,
-  je as startSchema,
-  V as targetSchema,
-  Ko as tenantInsertSchema,
-  on as tenantSchema,
-  fn as tenantSettingsSchema,
-  Zo as themeInsertSchema,
-  nn as themeSchema,
-  tn as tokenResponseSchema,
-  Nt as totalsSchema,
-  Ht as uiScreenSchema,
-  ce as userInsertSchema,
-  ht as userOrganizationInsertSchema,
-  bn as userOrganizationSchema,
-  at as userPermissionInsertSchema,
-  dn as userPermissionListSchema,
-  st as userPermissionSchema,
-  gn as userPermissionWithDetailsListSchema,
-  rt as userPermissionWithDetailsSchema,
-  jt as userResponseSchema,
-  lt as userRoleInsertSchema,
-  un as userRoleListSchema,
-  pt as userRoleSchema,
-  _e as userSchema,
-  Pe as verificationMethodsSchema,
-  ho as widgetComponentSchema,
-  Qo as widgetSchema
+  yo as formNodeSchema,
+  Wt as formSchema,
+  ye as genericComponentSchema,
+  we as genericNodeSchema,
+  kn as getConnectionIdentifierConfig,
+  ko as hookCodeInsertSchema,
+  Zt as hookCodeSchema,
+  Yt as hookInsertSchema,
+  Qt as hookSchema,
+  P as hookTemplateId,
+  Vt as hookTemplates,
+  pe as identitySchema,
+  xo as inviteInsertSchema,
+  $t as inviteSchema,
+  Fo as inviteeSchema,
+  Uo as inviterSchema,
+  zt as isBlockComponent,
+  Xt as isFieldComponent,
+  qt as isWidgetComponent,
+  Jt as jwksKeySchema,
+  Po as jwksSchema,
+  Se as legalComponentSchema,
+  $ as locationInfoSchema,
+  zo as logInsertSchema,
+  tn as logSchema,
+  Ho as loginSessionInsertSchema,
+  on as loginSessionSchema,
+  Mo as loginSessionStateSchema,
+  je as nodeSchema,
+  en as openIDConfigurationSchema,
+  ht as organizationBrandingSchema,
+  bt as organizationEnabledConnectionSchema,
+  Et as organizationInsertSchema,
+  An as organizationSchema,
+  ft as organizationTokenQuotaSchema,
+  Jo as pageBackgroundSchema,
+  Dn as parseUserId,
+  qo as passwordInsertSchema,
+  nn as passwordSchema,
+  le as profileDataSchema,
+  At as promptScreenSchema,
+  cn as promptSettingSchema,
+  ae as redirectActionSchema,
+  tt as refreshTokenInsertSchema,
+  dn as refreshTokenSchema,
+  Q as requestContextSchema,
+  at as resourceServerInsertSchema,
+  mn as resourceServerListSchema,
+  it as resourceServerOptionsSchema,
+  st as resourceServerSchema,
+  nt as resourceServerScopeSchema,
+  Z as responseContextSchema,
+  fe as richTextComponentSchema,
+  ut as roleInsertSchema,
+  Sn as roleListSchema,
+  rt as rolePermissionInsertSchema,
+  hn as rolePermissionListSchema,
+  lt as rolePermissionSchema,
+  mt as roleSchema,
+  To as screenLinkSchema,
+  Xo as sessionInsertSchema,
+  an as sessionSchema,
+  sn as signingKeySchema,
+  un as smsProviderSchema,
+  gn as smsSendParamsSchema,
+  Re as startSchema,
+  Y as targetSchema,
+  Vo as tenantInsertSchema,
+  rn as tenantSchema,
+  In as tenantSettingsSchema,
+  ot as themeInsertSchema,
+  pn as themeSchema,
+  ln as tokenResponseSchema,
+  Dt as totalsSchema,
+  Kt as uiScreenSchema,
+  _e as userInsertSchema,
+  St as userOrganizationInsertSchema,
+  yn as userOrganizationSchema,
+  pt as userPermissionInsertSchema,
+  bn as userPermissionListSchema,
+  ct as userPermissionSchema,
+  fn as userPermissionWithDetailsListSchema,
+  _t as userPermissionWithDetailsSchema,
+  vt as userResponseSchema,
+  dt as userRoleInsertSchema,
+  En as userRoleListSchema,
+  gt as userRoleSchema,
+  de as userSchema,
+  Me as verificationMethodsSchema,
+  bo as widgetComponentSchema,
+  et as widgetSchema
 };