@authhero/adapter-interfaces 0.93.0 → 0.95.0

package/dist/adapter-interfaces.mjs

@@ -1,12 +1,12 @@
 import { z as e } from "@hono/zod-openapi";
-const Ge = e.object({
+const xe = e.object({
   start: e.number(),
   limit: e.number(),
   length: e.number()
-}), i = e.object({
+}), n = e.object({
   created_at: e.string(),
   updated_at: e.string()
-}), S = e.object({
+}), E = e.object({
   email: e.string().optional(),
   email_verified: e.boolean().optional(),
   name: e.string().optional(),
@@ -23,9 +23,9 @@ const Ge = e.object({
   access_token: e.string().optional(),
   access_token_secret: e.string().optional(),
   refresh_token: e.string().optional(),
-  profileData: S.optional()
-}), c = e.object({
-  email: e.string().optional().transform((t) => t && t.toLowerCase()),
+  profileData: E.optional()
+}), _ = e.object({
+  email: e.string().optional().transform((o) => o && o.toLowerCase()),
   username: e.string().optional(),
   phone_number: e.string().optional(),
   given_name: e.string().optional(),
@@ -39,7 +39,7 @@ const Ge = e.object({
   user_id: e.string().optional(),
   app_metadata: e.any().default({}).optional(),
   user_metadata: e.any().default({}).optional()
-}), b = c.extend({
+}), S = _.extend({
   email_verified: e.boolean().default(!1),
   verify_email: e.boolean().optional(),
   last_ip: e.string().optional(),
@@ -49,25 +49,25 @@ const Ge = e.object({
   connection: e.string().default("email"),
   is_social: e.boolean().optional()
 }), A = e.object({
-  ...b.shape,
-  ...i.shape,
+  ...S.shape,
+  ...n.shape,
   user_id: e.string(),
   is_social: e.boolean(),
   email: e.string().optional(),
   login_count: e.number().default(0),
   identities: e.array(f).optional()
-}), xe = A, Ke = c.extend({
+}), Ge = A, Ke = _.extend({
   login_count: e.number(),
   multifactor: e.array(e.string()).optional(),
   last_ip: e.string().optional(),
   last_login: e.string().optional(),
   user_id: e.string()
 }).catchall(e.any()), I = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
-let C = (t = 21) => {
-  let n = "", r = crypto.getRandomValues(new Uint8Array(t));
-  for (; t--; )
-    n += I[r[t] & 63];
-  return n;
+let C = (o = 21) => {
+  let i = "", s = crypto.getRandomValues(new Uint8Array(o));
+  for (; o--; )
+    i += I[s[o] & 63];
+  return i;
 };
 const O = e.object({
   client_id: e.string().openapi({
@@ -276,12 +276,12 @@ const O = e.object({
   x: e.number(),
   y: e.number()
 });
-var _ = /* @__PURE__ */ ((t) => (t.RICH_TEXT = "RICH_TEXT", t.NEXT_BUTTON = "NEXT_BUTTON", t.BACK_BUTTON = "BACK_BUTTON", t.SUBMIT_BUTTON = "SUBMIT_BUTTON", t.DIVIDER = "DIVIDER", t.TEXT = "TEXT", t.EMAIL = "EMAIL", t.PASSWORD = "PASSWORD", t.NUMBER = "NUMBER", t.PHONE = "PHONE", t.DATE = "DATE", t.CHECKBOX = "CHECKBOX", t.RADIO = "RADIO", t.SELECT = "SELECT", t.HIDDEN = "HIDDEN", t.LEGAL = "LEGAL", t))(_ || {}), p = /* @__PURE__ */ ((t) => (t.BLOCK = "BLOCK", t.FIELD = "FIELD", t))(p || {});
-const s = e.object({
+var c = /* @__PURE__ */ ((o) => (o.RICH_TEXT = "RICH_TEXT", o.NEXT_BUTTON = "NEXT_BUTTON", o.BACK_BUTTON = "BACK_BUTTON", o.SUBMIT_BUTTON = "SUBMIT_BUTTON", o.DIVIDER = "DIVIDER", o.TEXT = "TEXT", o.EMAIL = "EMAIL", o.PASSWORD = "PASSWORD", o.NUMBER = "NUMBER", o.PHONE = "PHONE", o.DATE = "DATE", o.CHECKBOX = "CHECKBOX", o.RADIO = "RADIO", o.SELECT = "SELECT", o.HIDDEN = "HIDDEN", o.LEGAL = "LEGAL", o))(c || {}), p = /* @__PURE__ */ ((o) => (o.BLOCK = "BLOCK", o.FIELD = "FIELD", o))(p || {});
+const r = e.object({
   id: e.string(),
   category: e.nativeEnum(p),
-  type: e.nativeEnum(_)
-}), R = s.extend({
+  type: e.nativeEnum(c)
+}), R = r.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -293,7 +293,7 @@ const s = e.object({
   config: e.object({
     content: e.string()
   }).passthrough()
-}), L = s.extend({
+}), L = r.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -315,7 +315,7 @@ const s = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), D = s.extend({
+}), D = r.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -329,7 +329,7 @@ const s = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), U = s.extend({
+}), w = r.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -382,19 +382,19 @@ const s = e.object({
     label: e.string().optional(),
     placeholder: e.string().optional()
   }).passthrough()
-}), F = e.object({
+}), j = e.object({
   id: e.string(),
   category: e.string(),
   type: e.string()
-}).passthrough(), w = e.union([
+}).passthrough(), k = e.union([
   R,
   L,
   D,
-  U,
-  F
+  w,
+  j
 ]);
-var j = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(j || {});
-const k = e.object({
+var U = /* @__PURE__ */ ((o) => (o.STEP = "STEP", o.FLOW = "FLOW", o.CONDITION = "CONDITION", o.ACTION = "ACTION", o))(U || {});
+const F = e.object({
   id: e.string(),
   type: e.literal(
     "STEP"
@@ -403,7 +403,7 @@ const k = e.object({
   coordinates: a,
   alias: e.string().optional(),
   config: e.object({
-    components: e.array(w),
+    components: e.array(k),
     next_node: e.string()
   }).passthrough()
 }), v = e.object({
@@ -423,16 +423,16 @@ const k = e.object({
   type: e.string(),
   coordinates: a
 }).passthrough(), H = e.union([
-  k,
+  F,
   v,
   P
 ]), M = e.object({
   next_node: e.string(),
   coordinates: a
-}).passthrough(), G = e.object({
+}).passthrough(), x = e.object({
   resume_flow: e.boolean().optional(),
   coordinates: a
-}).passthrough(), x = e.object({
+}).passthrough(), G = e.object({
   id: e.string(),
   name: e.string(),
   languages: e.object({
@@ -440,19 +440,19 @@ const k = e.object({
   }).passthrough(),
   nodes: e.array(H),
   start: M,
-  ending: G,
+  ending: x,
   created_at: e.string(),
   updated_at: e.string(),
   links: e.object({
     sdkSrc: e.string().optional(),
     sdk_src: e.string().optional()
   }).passthrough()
-}).passthrough(), We = x.omit({
+}).passthrough(), ze = G.omit({
   id: !0,
   created_at: !0,
   updated_at: !0
 });
-var d = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.TOKEN_ID_TOKEN = "token id_token", t.CODE = "code", t))(d || {}), g = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(g || {}), u = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(u || {});
+var d = /* @__PURE__ */ ((o) => (o.TOKEN = "token", o.TOKEN_ID_TOKEN = "token id_token", o.CODE = "code", o))(d || {}), g = /* @__PURE__ */ ((o) => (o.QUERY = "query", o.FRAGMENT = "fragment", o.FORM_POST = "form_post", o.WEB_MESSAGE = "web_message", o.SAML_POST = "saml_post", o))(g || {}), u = /* @__PURE__ */ ((o) => (o.S256 = "S256", o.Plain = "plain", o))(u || {});
 const K = e.object({
   client_id: e.string(),
   act_as: e.string().optional(),
@@ -471,7 +471,7 @@ const K = e.object({
   ui_locales: e.string().optional(),
   // The following fields are not available in Auth0
   vendor_id: e.string().optional()
-}), ze = e.object({
+}), We = e.object({
   colors: e.object({
     primary: e.string(),
     page_background: e.object({
@@ -506,7 +506,7 @@ const K = e.object({
   from: e.string().optional(),
   twilio_sid: e.string().optional(),
   twilio_token: e.string().optional()
-}), W = e.object({
+}), z = e.object({
   id: e.string().optional(),
   name: e.string(),
   strategy: e.string(),
@@ -514,31 +514,140 @@ const K = e.object({
   enabled_clients: e.array(e.string()).default([]).optional(),
   response_type: e.custom().optional(),
   response_mode: e.custom().optional()
-}), z = e.object({
+}), W = e.object({
   id: e.string(),
-  created_at: e.string().transform((t) => t === null ? "" : t),
-  updated_at: e.string().transform((t) => t === null ? "" : t)
-}).extend(W.shape), X = e.object({
-  name: e.string(),
+  created_at: e.string().transform((o) => o === null ? "" : o),
+  updated_at: e.string().transform((o) => o === null ? "" : o)
+}).extend(z.shape), X = e.object({
+  id: e.string().optional(),
+  // Basic settings
   audience: e.string(),
+  friendly_name: e.string(),
+  // Required - replaces the old 'name' field
+  picture_url: e.string().optional(),
+  support_email: e.string().optional(),
+  support_url: e.string().optional(),
   sender_email: e.string().email(),
   sender_name: e.string(),
-  support_url: e.string().url().optional(),
-  logo: e.string().url().optional(),
-  primary_color: e.string().optional(),
-  secondary_color: e.string().optional(),
-  language: e.string().optional(),
-  id: e.string().optional()
+  // Tenant Settings fields (merged from TenantSettings)
+  // Session settings
+  session_lifetime: e.number().optional(),
+  idle_session_lifetime: e.number().optional(),
+  ephemeral_session_lifetime: e.number().optional(),
+  idle_ephemeral_session_lifetime: e.number().optional(),
+  session_cookie: e.object({
+    mode: e.enum(["persistent", "non-persistent"]).optional()
+  }).optional(),
+  // Logout settings
+  allowed_logout_urls: e.array(e.string()).optional(),
+  // Universal Login settings
+  default_redirection_uri: e.string().optional(),
+  // Advanced settings
+  enabled_locales: e.array(e.string()).optional(),
+  default_directory: e.string().optional(),
+  error_page: e.object({
+    html: e.string().optional(),
+    show_log_link: e.boolean().optional(),
+    url: e.string().optional()
+  }).optional(),
+  // Flags
+  flags: e.object({
+    allow_changing_enable_sso: e.boolean().optional(),
+    allow_legacy_delegation_grant_types: e.boolean().optional(),
+    allow_legacy_ro_grant_types: e.boolean().optional(),
+    allow_legacy_tokeninfo_endpoint: e.boolean().optional(),
+    change_pwd_flow_v1: e.boolean().optional(),
+    custom_domains_provisioning: e.boolean().optional(),
+    dashboard_insights_view: e.boolean().optional(),
+    dashboard_log_streams_next: e.boolean().optional(),
+    disable_clickjack_protection_headers: e.boolean().optional(),
+    disable_fields_map_fix: e.boolean().optional(),
+    disable_impersonation: e.boolean().optional(),
+    disable_management_api_sms_obfuscation: e.boolean().optional(),
+    enable_adfs_waad_email_verification: e.boolean().optional(),
+    enable_apis_section: e.boolean().optional(),
+    enable_client_connections: e.boolean().optional(),
+    enable_custom_domain_in_emails: e.boolean().optional(),
+    enable_dynamic_client_registration: e.boolean().optional(),
+    enable_idtoken_api2: e.boolean().optional(),
+    enable_legacy_logs_search_v2: e.boolean().optional(),
+    enable_legacy_profile: e.boolean().optional(),
+    enable_pipeline2: e.boolean().optional(),
+    enable_public_signup_user_exists_error: e.boolean().optional(),
+    enable_sso: e.boolean().optional(),
+    enforce_client_authentication_on_passwordless_start: e.boolean().optional(),
+    genai_trial: e.boolean().optional(),
+    improved_signup_bot_detection_in_classic: e.boolean().optional(),
+    mfa_show_factor_list_on_enrollment: e.boolean().optional(),
+    no_disclose_enterprise_connections: e.boolean().optional(),
+    remove_alg_from_jwks: e.boolean().optional(),
+    revoke_refresh_token_grant: e.boolean().optional(),
+    trust_azure_adfs_email_verified_connection_property: e.boolean().optional(),
+    use_scope_descriptions_for_consent: e.boolean().optional()
+  }).optional(),
+  // Sandbox settings
+  sandbox_version: e.string().optional(),
+  legacy_sandbox_version: e.string().optional(),
+  sandbox_versions_available: e.array(e.string()).optional(),
+  // Change password settings
+  change_password: e.object({
+    enabled: e.boolean().optional(),
+    html: e.string().optional()
+  }).optional(),
+  // Guardian MFA settings
+  guardian_mfa_page: e.object({
+    enabled: e.boolean().optional(),
+    html: e.string().optional()
+  }).optional(),
+  // Device flow settings
+  device_flow: e.object({
+    charset: e.enum(["base20", "digits"]).optional(),
+    mask: e.string().max(20).optional()
+  }).optional(),
+  // Default token quota
+  default_token_quota: e.object({
+    clients: e.object({
+      client_credentials: e.record(e.any()).optional()
+    }).optional(),
+    organizations: e.object({
+      client_credentials: e.record(e.any()).optional()
+    }).optional()
+  }).optional(),
+  // Default audience
+  default_audience: e.string().optional(),
+  // Default organization
+  default_organization: e.string().optional(),
+  // Session management
+  sessions: e.object({
+    oidc_logout_prompt_enabled: e.boolean().optional()
+  }).optional(),
+  // OIDC logout settings
+  oidc_logout: e.object({
+    rp_logout_end_session_endpoint_discovery: e.boolean().optional()
+  }).optional(),
+  // Organization settings
+  allow_organization_name_in_authentication_api: e.boolean().optional(),
+  // MFA settings
+  customize_mfa_in_postlogin_action: e.boolean().optional(),
+  // ACR values
+  acr_values_supported: e.array(e.string()).optional(),
+  // mTLS settings
+  mtls: e.object({
+    enable_endpoint_aliases: e.boolean().optional()
+  }).optional(),
+  // Authorization settings
+  pushed_authorization_requests_supported: e.boolean().optional(),
+  authorization_response_iss_parameter_supported: e.boolean().optional()
 }), V = e.object({
-  created_at: e.string().transform((t) => t === null ? "" : t),
-  updated_at: e.string().transform((t) => t === null ? "" : t),
+  created_at: e.string().nullable().transform((o) => o ?? ""),
+  updated_at: e.string().nullable().transform((o) => o ?? ""),
   ...X.shape,
   id: e.string()
 });
 e.object({
   ...T.shape,
   tenant: V,
-  connections: e.array(z)
+  connections: e.array(W)
 });
 const q = e.enum([
   "password_reset",
@@ -739,7 +848,7 @@ const q = e.enum([
 }).openapi({
   description: "Schema for flow-based forms (matches new JSON structure)"
 }), Ye = e.object({
-  ...i.shape,
+  ...n.shape,
   ...ee.shape,
   id: e.string()
 }), m = e.enum([
@@ -756,30 +865,30 @@ const q = e.enum([
   synchronous: e.boolean().default(!1),
   priority: e.number().optional(),
   hook_id: e.string().optional()
-}, te = e.object({
+}, oe = e.object({
   ...l,
   trigger_id: m,
   url: e.string()
-}), oe = e.object({
+}), te = e.object({
   ...l,
   trigger_id: h,
   form_id: e.string()
 }), Qe = e.union([
-  te,
-  oe
-]), ie = e.object({
+  oe,
+  te
+]), ne = e.object({
   ...l,
   trigger_id: m,
-  ...i.shape,
+  ...n.shape,
   hook_id: e.string(),
   url: e.string()
-}), ne = e.object({
+}), ie = e.object({
   ...l,
   trigger_id: h,
-  ...i.shape,
+  ...n.shape,
   hook_id: e.string(),
   form_id: e.string()
-}), Je = e.union([ie, ne]), ae = e.object({
+}), Je = e.union([ne, ie]), ae = e.object({
   alg: e.enum([
     "RS256",
     "RS384",
@@ -821,7 +930,7 @@ const q = e.enum([
   request_uri_parameter_supported: e.boolean(),
   request_parameter_supported: e.boolean(),
   token_endpoint_auth_signing_alg_values_supported: e.array(e.string())
-}), re = e.object({
+}), se = e.object({
   csrf_token: e.string(),
   auth0Client: e.string().optional(),
   authParams: K,
@@ -834,14 +943,14 @@ const q = e.enum([
   login_completed: e.boolean().optional().default(!1)
 }).openapi({
   description: "This represents a login sesion"
-}), et = e.object({
-  ...re.shape,
+}), eo = e.object({
+  ...se.shape,
   id: e.string().openapi({
     description: "This is is used as the state in the universal login"
   }),
   created_at: e.string(),
   updated_at: e.string()
-}), se = {
+}), re = {
   // Network & System
   ACLS_SUMMARY: "acls_summary",
   ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
@@ -1009,15 +1118,15 @@ const q = e.enum([
   WARNING_SENDING_NOTIFICATION: "wn",
   WARNING_USER_MANAGEMENT: "wum"
 }, le = e.string().refine(
-  (t) => Object.values(se).includes(t),
+  (o) => Object.values(re).includes(o),
   { message: "Invalid log type" }
-), ce = e.object({
+), _e = e.object({
   name: e.string(),
   version: e.string(),
   env: e.object({
     node: e.string().optional()
   }).optional()
-}), tt = e.object({
+}), oo = e.object({
   type: le,
   date: e.string(),
   description: e.string().optional(),
@@ -1039,16 +1148,16 @@ const q = e.enum([
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
   hostname: e.string().optional(),
-  auth0_client: ce.optional()
-}), _e = e.object({
+  auth0_client: _e.optional()
+}), ce = e.object({
   user_id: e.string(),
   password: e.string(),
   algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id")
-}), ot = e.object({
-  ..._e.shape,
+}), to = e.object({
+  ...ce.shape,
   created_at: e.string(),
   updated_at: e.string()
-}), E = e.object({
+}), b = e.object({
   initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
   initial_ip: e.string().describe("First IP address associated with this session"),
   initial_asn: e.string().describe("First autonomous system number associated with this session"),
@@ -1063,17 +1172,17 @@ const q = e.enum([
   expires_at: e.string().optional(),
   login_session_id: e.string(),
   idle_expires_at: e.string().optional(),
-  device: E.describe(
+  device: b.describe(
     "Metadata related to the device used in the session"
   ),
   clients: e.array(e.string()).describe("List of client details for the session")
-}), it = e.object({
+}), no = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   authenticated_at: e.string(),
   last_interaction_at: e.string(),
   ...pe.shape
-}), nt = e.object({
+}), io = e.object({
   kid: e.string().openapi({ description: "The key id of the signing key" }),
   cert: e.string().openapi({ description: "The public certificate of the signing key" }),
   fingerprint: e.string().openapi({ description: "The cert fingerprint" }),
@@ -1099,8 +1208,8 @@ const q = e.enum([
     description: "The type of the signing key"
   })
 });
-var de = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(de || {});
-const at = e.object({
+var de = /* @__PURE__ */ ((o) => (o.RefreshToken = "refresh_token", o.AuthorizationCode = "authorization_code", o.ClientCredential = "client_credentials", o.Passwordless = "passwordless", o.Password = "password", o.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", o))(de || {});
+const ao = e.object({
   access_token: e.string(),
   id_token: e.string().optional(),
   scope: e.string().optional(),
@@ -1143,44 +1252,44 @@ const ge = e.object({
   success: e.string(),
   widget_background: e.string(),
   widget_border: e.string()
-}), o = e.object({
+}), t = e.object({
   bold: e.boolean(),
   size: e.number()
 }), me = e.object({
-  body_text: o,
-  buttons_text: o,
+  body_text: t,
+  buttons_text: t,
   font_url: e.string(),
-  input_labels: o,
-  links: o,
+  input_labels: t,
+  links: t,
   links_style: e.enum(["normal", "underlined"]),
   reference_text_size: e.number(),
-  subtitle: o,
-  title: o
+  subtitle: t,
+  title: t
 }), he = e.object({
   background_color: e.string(),
   background_image_url: e.string(),
   page_layout: e.enum(["center", "left", "right"])
-}), Ee = e.object({
+}), be = e.object({
   header_text_alignment: e.enum(["center", "left", "right"]),
   logo_height: e.number(),
   logo_position: e.enum(["center", "left", "none", "right"]),
   logo_url: e.string(),
   social_buttons_layout: e.enum(["bottom", "top"])
-}), Se = e.object({
+}), Ee = e.object({
   borders: ge,
   colors: ue,
   displayName: e.string(),
   fonts: me,
   page_background: he,
-  widget: Ee
-}), rt = Se.extend({
+  widget: be
+}), so = Ee.extend({
   themeId: e.string()
-}), st = e.object({
+}), ro = e.object({
   universal_login_experience: e.enum(["new", "classic"]).default("new"),
   identifier_first: e.boolean().default(!0),
   password_first: e.boolean().default(!1),
   webauthn_platform_first_factor: e.boolean()
-}), lt = e.object({
+}), lo = e.object({
   name: e.string(),
   enabled: e.boolean().optional().default(!0),
   default_from_address: e.string().optional(),
@@ -1223,7 +1332,7 @@ const ge = e.object({
   idle_expires_at: e.string().optional(),
   // When the token was last used.
   last_exchanged_at: e.string().optional(),
-  device: E,
+  device: b,
   resource_servers: e.array(
     e.object({
       audience: e.string(),
@@ -1231,18 +1340,18 @@ const ge = e.object({
     })
   ),
   rotating: e.boolean()
-}), ct = e.object({
+}), _o = e.object({
   // When the refresh token record was created.
   created_at: e.string(),
   // Spread in the rest of the refresh token properties.
   ...fe.shape
-}), _t = e.object({
+}), co = e.object({
   to: e.string(),
   message: e.string()
-}), pt = e.object({
+}), po = e.object({
   name: e.string(),
   options: e.object({})
-}), be = e.object({
+}), Se = e.object({
   value: e.string(),
   description: e.string().optional()
 }), Ae = e.object({
@@ -1258,7 +1367,7 @@ const ge = e.object({
 }), Ie = e.object({
   name: e.string(),
   identifier: e.string(),
-  scopes: e.array(be).optional(),
+  scopes: e.array(Se).optional(),
   signing_alg: e.string().optional(),
   signing_secret: e.string().optional(),
   token_lifetime: e.number().optional(),
@@ -1272,7 +1381,7 @@ const ge = e.object({
   ...Ie.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), dt = e.array(Ce), Oe = e.object({
+}), go = e.array(Ce), Oe = e.object({
   role_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string()
@@ -1280,14 +1389,14 @@ const ge = e.object({
   ...Oe.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), gt = e.array(Te), Ne = e.object({
+}), uo = e.array(Te), Ne = e.object({
   role_id: e.string(),
   resource_server_identifier: e.string(),
   resource_server_name: e.string(),
   permission_name: e.string(),
   description: e.string().nullable().optional(),
   created_at: e.string().optional()
-}), ut = e.array(
+}), mo = e.array(
   Ne
 ), ye = e.object({
   user_id: e.string(),
@@ -1298,7 +1407,7 @@ const ge = e.object({
   ...ye.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), mt = e.array(Re), Le = e.object({
+}), ho = e.array(Re), Le = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   resource_server_name: e.string(),
@@ -1306,31 +1415,31 @@ const ge = e.object({
   description: e.string().nullable().optional(),
   created_at: e.string().optional(),
   organization_id: e.string().optional()
-}), ht = e.array(
+}), bo = e.array(
   Le
 ), De = e.object({
   user_id: e.string(),
   role_id: e.string(),
   organization_id: e.string().optional()
-}), Ue = e.object({
+}), we = e.object({
   ...De.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), Et = e.array(Ue), Fe = e.object({
+}), Eo = e.array(we), je = e.object({
   name: e.string().min(1).max(50).openapi({
     description: "The name of the role. Cannot include '<' or '>'"
   }),
   description: e.string().max(255).optional().openapi({
     description: "The description of the role"
   })
-}), we = e.object({
+}), ke = e.object({
   id: e.string().openapi({
     description: "The unique identifier of the role"
   }),
-  ...Fe.shape,
+  ...je.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), St = e.array(we), je = e.object({
+}), fo = e.array(ke), Ue = e.object({
   logo_url: e.string().optional().openapi({
     description: "URL of the organization's logo"
   }),
@@ -1342,7 +1451,7 @@ const ge = e.object({
       description: "Page background color in hex format (e.g., #FFFFFF)"
     })
   }).optional()
-}).optional(), ke = e.object({
+}).optional(), Fe = e.object({
   connection_id: e.string().openapi({
     description: "ID of the connection"
   }),
@@ -1375,17 +1484,17 @@ const ge = e.object({
   display_name: e.string().optional().openapi({
     description: "The display name of the organization"
   }),
-  branding: je,
+  branding: Ue,
   metadata: e.record(e.any()).default({}).optional().openapi({
     description: "Custom metadata for the organization"
   }),
-  enabled_connections: e.array(ke).default([]).optional().openapi({
+  enabled_connections: e.array(Fe).default([]).optional().openapi({
     description: "List of enabled connections for the organization"
   }),
   token_quota: ve
-}), ft = e.object({
+}), So = e.object({
   ...Pe.shape,
-  ...i.shape,
+  ...n.shape,
   id: e.string()
 }), He = e.object({
   user_id: e.string().openapi({
@@ -1394,34 +1503,103 @@ const ge = e.object({
   organization_id: e.string().openapi({
     description: "ID of the organization"
   })
-}), bt = e.object({
+}), Ao = e.object({
   ...He.shape,
-  ...i.shape,
+  ...n.shape,
   id: e.string()
+}), Io = e.object({
+  // Session settings
+  idle_session_lifetime: e.number().optional(),
+  session_lifetime: e.number().optional(),
+  session_cookie: e.object({
+    mode: e.enum(["persistent", "non-persistent"]).optional()
+  }).optional(),
+  // MFA settings
+  enable_client_connections: e.boolean().optional(),
+  // Universal Login settings
+  default_redirection_uri: e.string().optional(),
+  // Advanced settings
+  enabled_locales: e.array(e.string()).optional(),
+  default_directory: e.string().optional(),
+  error_page: e.object({
+    html: e.string().optional(),
+    show_log_link: e.boolean().optional(),
+    url: e.string().optional()
+  }).optional(),
+  // Flags
+  flags: e.object({
+    allow_legacy_delegation_grant_types: e.boolean().optional(),
+    allow_legacy_ro_grant_types: e.boolean().optional(),
+    allow_legacy_tokeninfo_endpoint: e.boolean().optional(),
+    disable_clickjack_protection_headers: e.boolean().optional(),
+    enable_apis_section: e.boolean().optional(),
+    enable_client_connections: e.boolean().optional(),
+    enable_custom_domain_in_emails: e.boolean().optional(),
+    enable_dynamic_client_registration: e.boolean().optional(),
+    enable_idtoken_api2: e.boolean().optional(),
+    enable_legacy_logs_search_v2: e.boolean().optional(),
+    enable_legacy_profile: e.boolean().optional(),
+    enable_pipeline2: e.boolean().optional(),
+    enable_public_signup_user_exists_error: e.boolean().optional(),
+    use_scope_descriptions_for_consent: e.boolean().optional(),
+    disable_management_api_sms_obfuscation: e.boolean().optional(),
+    enable_adfs_waad_email_verification: e.boolean().optional(),
+    revoke_refresh_token_grant: e.boolean().optional(),
+    dashboard_log_streams_next: e.boolean().optional(),
+    dashboard_insights_view: e.boolean().optional(),
+    disable_fields_map_fix: e.boolean().optional(),
+    mfa_show_factor_list_on_enrollment: e.boolean().optional()
+  }).optional(),
+  // Additional settings
+  friendly_name: e.string().optional(),
+  picture_url: e.string().optional(),
+  support_email: e.string().optional(),
+  support_url: e.string().optional(),
+  // Sandbox settings
+  sandbox_version: e.string().optional(),
+  sandbox_versions_available: e.array(e.string()).optional(),
+  // Change password settings
+  change_password: e.object({
+    enabled: e.boolean(),
+    html: e.string()
+  }).optional(),
+  // Guardian MFA settings
+  guardian_mfa_page: e.object({
+    enabled: e.boolean(),
+    html: e.string()
+  }).optional(),
+  // Default audience
+  default_audience: e.string().optional(),
+  // Default directory
+  default_organization: e.string().optional(),
+  // Session management
+  sessions: e.object({
+    oidc_logout_prompt_enabled: e.boolean().optional()
+  }).optional()
 });
-function At(t) {
-  const [n, r] = t.split("|");
-  if (!n || !r)
-    throw new Error(`Invalid user_id: ${t}`);
-  return { connection: n, id: r };
+function Co(o) {
+  const [i, s] = o.split("|");
+  if (!i || !s)
+    throw new Error(`Invalid user_id: ${o}`);
+  return { connection: i, id: s };
 }
 export {
-  ce as Auth0Client,
+  _e as Auth0Client,
   g as AuthorizationResponseMode,
   d as AuthorizationResponseType,
   u as CodeChallengeMethod,
   p as ComponentCategory,
-  _ as ComponentType,
+  c as ComponentType,
   de as GrantType,
-  se as LogTypes,
-  j as NodeType,
-  We as auth0FlowInsertSchema,
-  x as auth0FlowSchema,
-  xe as auth0UserResponseSchema,
+  re as LogTypes,
+  U as NodeType,
+  ze as auth0FlowInsertSchema,
+  G as auth0FlowSchema,
+  Ge as auth0UserResponseSchema,
   K as authParamsSchema,
-  c as baseUserSchema,
+  _ as baseUserSchema,
   ge as bordersSchema,
-  ze as brandingSchema,
+  We as brandingSchema,
   L as buttonComponentSchema,
   N as clientGrantInsertSchema,
   Be as clientGrantListSchema,
@@ -1432,25 +1610,25 @@ export {
   Xe as codeSchema,
   q as codeTypeSchema,
   ue as colorsSchema,
-  w as componentSchema,
-  W as connectionInsertSchema,
+  k as componentSchema,
+  z as connectionInsertSchema,
   B as connectionOptionsSchema,
-  z as connectionSchema,
+  W as connectionSchema,
   a as coordinatesSchema,
   Q as customDomainInsertSchema,
   Z as customDomainSchema,
   Ve as customDomainWithTenantIdSchema,
-  lt as emailProviderSchema,
-  G as endingSchema,
-  U as fieldComponentSchema,
+  lo as emailProviderSchema,
+  x as endingSchema,
+  w as fieldComponentSchema,
   v as flowNodeSchema,
-  o as fontDetailsSchema,
+  t as fontDetailsSchema,
   me as fontsSchema,
   qe as formControlSchema,
   ee as formInsertSchema,
   $ as formNodeComponentDefinition,
   Ye as formSchema,
-  F as genericComponentSchema,
+  j as genericComponentSchema,
   P as genericNodeSchema,
   Qe as hookInsertSchema,
   Je as hookSchema,
@@ -1458,64 +1636,65 @@ export {
   Ze as jwksKeySchema,
   ae as jwksSchema,
   D as legalComponentSchema,
-  tt as logSchema,
-  re as loginSessionInsertSchema,
-  et as loginSessionSchema,
+  oo as logSchema,
+  se as loginSessionInsertSchema,
+  eo as loginSessionSchema,
   H as nodeSchema,
   $e as openIDConfigurationSchema,
-  je as organizationBrandingSchema,
-  ke as organizationEnabledConnectionSchema,
+  Ue as organizationBrandingSchema,
+  Fe as organizationEnabledConnectionSchema,
   Pe as organizationInsertSchema,
-  ft as organizationSchema,
+  So as organizationSchema,
   ve as organizationTokenQuotaSchema,
   he as pageBackgroundSchema,
-  At as parseUserId,
-  _e as passwordInsertSchema,
-  ot as passwordSchema,
-  S as profileDataSchema,
-  st as promptSettingSchema,
+  Co as parseUserId,
+  ce as passwordInsertSchema,
+  to as passwordSchema,
+  E as profileDataSchema,
+  ro as promptSettingSchema,
   fe as refreshTokenInsertSchema,
-  ct as refreshTokenSchema,
+  _o as refreshTokenSchema,
   Ie as resourceServerInsertSchema,
-  dt as resourceServerListSchema,
+  go as resourceServerListSchema,
   Ae as resourceServerOptionsSchema,
   Ce as resourceServerSchema,
-  be as resourceServerScopeSchema,
+  Se as resourceServerScopeSchema,
   R as richTextComponentSchema,
-  Fe as roleInsertSchema,
-  St as roleListSchema,
+  je as roleInsertSchema,
+  fo as roleListSchema,
   Oe as rolePermissionInsertSchema,
-  gt as rolePermissionListSchema,
+  uo as rolePermissionListSchema,
   Te as rolePermissionSchema,
-  ut as rolePermissionWithDetailsListSchema,
+  mo as rolePermissionWithDetailsListSchema,
   Ne as rolePermissionWithDetailsSchema,
-  we as roleSchema,
+  ke as roleSchema,
   pe as sessionInsertSchema,
-  it as sessionSchema,
-  nt as signingKeySchema,
-  pt as smsProviderSchema,
-  _t as smsSendParamsSchema,
+  no as sessionSchema,
+  io as signingKeySchema,
+  po as smsProviderSchema,
+  co as smsSendParamsSchema,
   M as startSchema,
-  k as stepNodeSchema,
+  F as stepNodeSchema,
   X as tenantInsertSchema,
   V as tenantSchema,
-  Se as themeInsertSchema,
-  rt as themeSchema,
-  at as tokenResponseSchema,
-  Ge as totalsSchema,
-  b as userInsertSchema,
+  Io as tenantSettingsSchema,
+  Ee as themeInsertSchema,
+  so as themeSchema,
+  ao as tokenResponseSchema,
+  xe as totalsSchema,
+  S as userInsertSchema,
   He as userOrganizationInsertSchema,
-  bt as userOrganizationSchema,
+  Ao as userOrganizationSchema,
   ye as userPermissionInsertSchema,
-  mt as userPermissionListSchema,
+  ho as userPermissionListSchema,
   Re as userPermissionSchema,
-  ht as userPermissionWithDetailsListSchema,
+  bo as userPermissionWithDetailsListSchema,
   Le as userPermissionWithDetailsSchema,
   Ke as userResponseSchema,
   De as userRoleInsertSchema,
-  Et as userRoleListSchema,
-  Ue as userRoleSchema,
+  Eo as userRoleListSchema,
+  we as userRoleSchema,
   A as userSchema,
   J as verificationMethodsSchema,
-  Ee as widgetSchema
+  be as widgetSchema
 };