@authhero/adapter-interfaces 1.1.0 → 1.3.0

package/dist/adapter-interfaces.mjs

@@ -1,10 +1,42 @@
 import { z as e } from "@hono/zod-openapi";
-const X = e.enum([
+const s = e.object({
+  created_at: e.string(),
+  updated_at: e.string()
+}), X = e.object({
+  id: e.string(),
+  version: e.string().optional()
+}), V = e.object({
+  name: e.string(),
+  version: e.string()
+}), Y = e.object({
+  name: e.string(),
+  value: e.string()
+}), Q = e.object({
+  name: e.string().max(255),
+  code: e.string().max(1e5),
+  supported_triggers: e.array(X).optional(),
+  runtime: e.string().max(50).optional(),
+  dependencies: e.array(V).optional(),
+  secrets: e.array(Y).optional()
+}), jt = Q.extend({
+  id: e.string(),
+  tenant_id: e.string(),
+  status: e.enum(["draft", "built"]).default("built"),
+  deployed_at: e.string().optional(),
+  // Override secrets to return names only (no values) in responses
+  secrets: e.array(
+    e.object({
+      name: e.string(),
+      value: e.string().optional()
+    })
+  ).optional(),
+  ...s.shape
+}), Z = e.enum([
   "user_action",
   "admin_action",
   "system",
   "api"
-]), V = e.object({
+]), $ = e.object({
   type: e.enum(["user", "admin", "system", "api_key", "client_credentials"]),
   id: e.string().optional(),
   email: e.string().optional(),
@@ -12,13 +44,13 @@ const X = e.enum([
   org_name: e.string().optional(),
   scopes: e.array(e.string()).optional(),
   client_id: e.string().optional()
-}), Y = e.object({
+}), J = e.object({
   type: e.string(),
   id: e.string(),
   before: e.record(e.unknown()).optional(),
   after: e.record(e.unknown()).optional(),
   diff: e.record(e.object({ old: e.unknown(), new: e.unknown() })).optional()
-}), Q = e.object({
+}), ee = e.object({
   method: e.string(),
   path: e.string(),
   query: e.record(e.string()).optional(),
@@ -26,57 +58,54 @@ const X = e.enum([
   ip: e.string(),
   user_agent: e.string().optional(),
   correlation_id: e.string().optional()
-}), Z = e.object({
+}), oe = e.object({
   status_code: e.number(),
   body: e.unknown().optional()
-}), $ = e.object({
+}), te = e.object({
   country_code: e.string(),
   city_name: e.string(),
   latitude: e.string(),
   longitude: e.string(),
   time_zone: e.string(),
   continent_code: e.string()
-}), J = e.object({
+}), ne = e.object({
   name: e.string(),
   version: e.string(),
   env: e.record(e.string()).optional()
-}), ee = e.object({
+}), ie = e.object({
   tenant_id: e.string(),
   event_type: e.string(),
   log_type: e.string(),
   description: e.string().optional(),
-  category: X,
-  actor: V,
-  target: Y,
-  request: Q,
-  response: Z.optional(),
+  category: Z,
+  actor: $,
+  target: J,
+  request: ee,
+  response: oe.optional(),
   connection: e.string().optional(),
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
-  location: $.optional(),
-  auth0_client: J.optional(),
+  location: te.optional(),
+  auth0_client: ne.optional(),
   hostname: e.string(),
   is_mobile: e.boolean().optional(),
   timestamp: e.string()
-}), Ot = ee.extend({
+}), Rt = ie.extend({
   id: e.string()
-}), s = e.object({
-  created_at: e.string(),
-  updated_at: e.string()
-}), Tt = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), Nt = e.enum([
+}), Dt = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), Lt = e.enum([
   "CREATE_USER",
   "GET_USER",
   "UPDATE_USER",
   "SEND_REQUEST",
   "SEND_EMAIL"
-]), wt = e.enum(["VERIFY_EMAIL"]), oe = e.object({
+]), vt = e.enum(["VERIFY_EMAIL"]), ae = e.object({
   require_mx_record: e.boolean().optional(),
   block_aliases: e.boolean().optional(),
   block_free_emails: e.boolean().optional(),
   block_disposable_emails: e.boolean().optional(),
   blocklist: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional()
-}), te = e.object({
+}), se = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("AUTH0"),
@@ -88,7 +117,7 @@ const X = e.enum([
     user_id: e.string(),
     changes: e.record(e.string(), e.any())
   })
-}), ne = e.object({
+}), re = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("EMAIL"),
@@ -97,9 +126,9 @@ const X = e.enum([
   mask_output: e.boolean().optional(),
   params: e.object({
     email: e.string(),
-    rules: oe.optional()
+    rules: ae.optional()
   })
-}), ie = e.enum(["change-email", "account", "custom"]), ae = e.object({
+}), le = e.enum(["change-email", "account", "custom"]), ce = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("REDIRECT"),
@@ -107,32 +136,32 @@ const X = e.enum([
   allow_failure: e.boolean().optional(),
   mask_output: e.boolean().optional(),
   params: e.object({
-    target: ie.openapi({
+    target: le.openapi({
       description: "The predefined target to redirect to, or 'custom' for a custom URL"
     }),
     custom_url: e.string().optional().openapi({
       description: "Custom URL to redirect to when target is 'custom'"
     })
   })
-}), se = e.union([
-  te,
-  ne,
-  ae
-]), re = e.object({
+}), pe = e.union([
+  se,
+  re,
+  ce
+]), _e = e.object({
   name: e.string().min(1).max(150).openapi({
     description: "The name of the flow"
   }),
   // Actions is an array of action steps (Auth0 stores as JSON blob)
-  actions: e.array(se).optional().default([]).openapi({
+  actions: e.array(pe).optional().default([]).openapi({
     description: "The list of actions to execute in sequence"
   })
-}), jt = re.extend({
+}), kt = _e.extend({
   ...s.shape,
   id: e.string().openapi({
     description: "Unique identifier for the flow",
     example: "af_12tMpdJ3iek7svMyZkSh5M"
   })
-}), Rt = e.object({
+}), Ut = e.object({
   page: e.string().min(0).optional().default("0").transform((o) => parseInt(o, 10)).openapi({
     description: "The page number where 0 is the first page"
   }),
@@ -148,12 +177,12 @@ const X = e.enum([
   q: e.string().optional().openapi({
     description: "A lucene query string used to filter the results"
   })
-}), Dt = e.object({
+}), Ft = e.object({
   start: e.number(),
   limit: e.number(),
   length: e.number(),
   total: e.number().optional()
-}), le = e.object({
+}), de = e.object({
   email: e.string().optional(),
   email_verified: e.boolean().optional(),
   name: e.string().optional(),
@@ -162,7 +191,7 @@ const X = e.enum([
   phone_number: e.string().optional(),
   phone_verified: e.boolean().optional(),
   family_name: e.string().optional()
-}).catchall(e.any()), pe = e.object({
+}).catchall(e.any()), ge = e.object({
   connection: e.string(),
   user_id: e.string(),
   provider: e.string(),
@@ -175,8 +204,8 @@ const X = e.enum([
   access_token: e.string().optional(),
   access_token_secret: e.string().optional(),
   refresh_token: e.string().optional(),
-  profileData: le.optional()
-}), ce = e.object({
+  profileData: de.optional()
+}), ue = e.object({
   formatted: e.string().optional(),
   // Full mailing address
   street_address: e.string().optional(),
@@ -221,8 +250,8 @@ const X = e.enum([
   zoneinfo: e.string().optional(),
   // e.g., "Europe/Paris"
   // OIDC address claim (OIDC Core 5.1.1)
-  address: ce
-}), _e = N.extend({
+  address: ue
+}), me = N.extend({
   email_verified: e.boolean().default(!1),
   verify_email: e.boolean().optional(),
   last_ip: e.string().optional(),
@@ -231,35 +260,43 @@ const X = e.enum([
   provider: e.string().optional(),
   connection: e.string(),
   is_social: e.boolean().optional(),
+  /**
+   * Set when the post-user-registration outbox event has reached processed
+   * state (all post-hook destinations succeeded) or when the inline dispatch
+   * path delivered the webhooks without error. Used by `postUserLoginHook`
+   * to decide whether to re-enqueue the event on the user's next login —
+   * the self-healing mechanism for transient post-registration failures.
+   */
+  registration_completed_at: e.string().optional(),
   // Optional password for atomic user+password creation
   // When provided, user and password are created in a single transaction
   password: e.object({
     hash: e.string(),
     algorithm: e.string()
   }).optional()
-}), de = e.object({
-  ..._e.omit({ password: !0 }).shape,
+}), he = e.object({
+  ...me.omit({ password: !0 }).shape,
   ...s.shape,
   user_id: e.string(),
   provider: e.string(),
   is_social: e.boolean(),
   email: e.string().optional(),
   login_count: e.number().default(0),
-  identities: e.array(pe).optional()
-}), Lt = de, vt = N.extend({
+  identities: e.array(ge).optional()
+}), xt = he, Pt = N.extend({
   login_count: e.number(),
   multifactor: e.array(e.string()).optional(),
   last_ip: e.string().optional(),
   last_login: e.string().optional(),
   user_id: e.string()
 }).catchall(e.any());
-let ge = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", ue = (o = 21) => {
+let be = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", fe = (o = 21) => {
   let t = "", i = crypto.getRandomValues(new Uint8Array(o |= 0));
   for (; o--; )
-    t += ge[i[o] & 63];
+    t += be[i[o] & 63];
   return t;
 };
-const me = e.object({
+const Ee = e.object({
   client_id: e.string().openapi({
     description: "ID of this client."
   }),
@@ -272,7 +309,7 @@ const me = e.object({
   global: e.boolean().default(!1).openapi({
     description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)."
   }),
-  client_secret: e.string().default(() => ue()).optional().openapi({
+  client_secret: e.string().default(() => fe()).optional().openapi({
     description: "Client secret (which you must not make public)."
   }),
   app_type: e.enum([
@@ -432,11 +469,11 @@ const me = e.object({
     description: "Specifies how long, in seconds, a Pushed Authorization Request URI remains valid"
   }),
   token_quota: e.record(e.any()).default({}).optional()
-}), kt = e.object({
+}), Mt = e.object({
   created_at: e.string(),
   updated_at: e.string(),
-  ...me.shape
-}), he = e.object({
+  ...Ee.shape
+}), Se = e.object({
   client_id: e.string().min(1).openapi({
     description: "ID of the client."
   }),
@@ -461,14 +498,14 @@ const me = e.object({
   authorization_details_types: e.array(e.string()).optional().openapi({
     description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement."
   })
-}), be = e.object({
+}), Ae = e.object({
   id: e.string().openapi({
     description: "ID of the client grant."
   }),
-  ...he.shape,
+  ...Se.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Ut = e.array(be), m = e.object({
+}), Ht = e.array(Ae), m = e.object({
   x: e.number(),
   y: e.number()
 });
@@ -477,7 +514,7 @@ const I = e.object({
   id: e.string(),
   category: e.nativeEnum(j),
   type: e.nativeEnum(w)
-}), fe = I.extend({
+}), ye = I.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -489,7 +526,7 @@ const I = e.object({
   config: e.object({
     content: e.string()
   }).passthrough()
-}), Ee = I.extend({
+}), Ie = I.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -511,7 +548,7 @@ const I = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), Se = I.extend({
+}), Ce = I.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -525,7 +562,7 @@ const I = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), Ae = I.extend({
+}), Te = I.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -578,19 +615,19 @@ const I = e.object({
     label: e.string().optional(),
     placeholder: e.string().optional()
   }).passthrough()
-}), ye = e.object({
+}), Oe = e.object({
   id: e.string(),
   category: e.string(),
   type: e.string()
-}).passthrough(), Ie = e.union([
-  fe,
-  Ee,
-  Se,
-  Ae,
-  ye
+}).passthrough(), Ne = e.union([
+  ye,
+  Ie,
+  Ce,
+  Te,
+  Oe
 ]);
-var Ce = /* @__PURE__ */ ((o) => (o.STEP = "STEP", o.FLOW = "FLOW", o.CONDITION = "CONDITION", o.ACTION = "ACTION", o))(Ce || {});
-const Oe = e.object({
+var we = /* @__PURE__ */ ((o) => (o.STEP = "STEP", o.FLOW = "FLOW", o.CONDITION = "CONDITION", o.ACTION = "ACTION", o))(we || {});
+const je = e.object({
   id: e.string(),
   type: e.literal(
     "STEP"
@@ -599,10 +636,10 @@ const Oe = e.object({
   coordinates: m,
   alias: e.string().optional(),
   config: e.object({
-    components: e.array(Ie),
+    components: e.array(Ne),
     next_node: e.string()
   }).passthrough()
-}), Te = e.object({
+}), Re = e.object({
   id: e.string(),
   type: e.literal(
     "FLOW"
@@ -614,7 +651,7 @@ const Oe = e.object({
     flow_id: e.string(),
     next_node: e.string()
   })
-}), Ne = e.object({
+}), De = e.object({
   id: e.string(),
   type: e.literal(
     "ACTION"
@@ -636,43 +673,43 @@ const Oe = e.object({
       description: "The next node to navigate to after action (for non-redirect actions)"
     })
   }).passthrough()
-}), we = e.object({
+}), Le = e.object({
   id: e.string(),
   type: e.string(),
   coordinates: m
-}).passthrough(), je = e.union([
-  Oe,
-  Te,
-  Ne,
-  we
-]), Re = e.object({
+}).passthrough(), ve = e.union([
+  je,
+  Re,
+  De,
+  Le
+]), ke = e.object({
   next_node: e.string(),
   coordinates: m
-}).passthrough(), De = e.object({
+}).passthrough(), Ue = e.object({
   resume_flow: e.boolean().optional(),
   coordinates: m
-}).passthrough(), Le = e.object({
+}).passthrough(), Fe = e.object({
   id: e.string(),
   name: e.string(),
   languages: e.object({
     primary: e.string()
   }).passthrough(),
-  nodes: e.array(je),
-  start: Re,
-  ending: De,
+  nodes: e.array(ve),
+  start: ke,
+  ending: Ue,
   created_at: e.string(),
   updated_at: e.string(),
   links: e.object({
     sdkSrc: e.string().optional(),
     sdk_src: e.string().optional()
   }).passthrough()
-}).passthrough(), Ft = Le.omit({
+}).passthrough(), Gt = Fe.omit({
   id: !0,
   created_at: !0,
   updated_at: !0
 });
 var R = /* @__PURE__ */ ((o) => (o.TOKEN = "token", o.ID_TOKEN = "id_token", o.TOKEN_ID_TOKEN = "token id_token", o.CODE = "code", o))(R || {}), D = /* @__PURE__ */ ((o) => (o.QUERY = "query", o.FRAGMENT = "fragment", o.FORM_POST = "form_post", o.WEB_MESSAGE = "web_message", o.SAML_POST = "saml_post", o))(D || {}), L = /* @__PURE__ */ ((o) => (o.S256 = "S256", o.Plain = "plain", o))(L || {});
-const ve = e.object({
+const xe = e.object({
   client_id: e.string(),
   act_as: e.string().optional(),
   response_type: e.nativeEnum(R).optional(),
@@ -696,7 +733,7 @@ const ve = e.object({
   acr_values: e.string().optional(),
   // The following fields are not available in Auth0
   vendor_id: e.string().optional()
-}), xt = e.object({
+}), Bt = e.object({
   colors: e.object({
     primary: e.string(),
     page_background: e.object({
@@ -712,7 +749,7 @@ const ve = e.object({
   font: e.object({
     url: e.string()
   }).optional()
-}), ke = e.enum([
+}), Pe = e.enum([
   "password_reset",
   "email_verification",
   "otp",
@@ -720,7 +757,7 @@ const ve = e.object({
   "authorization_code",
   "oauth2_state",
   "ticket"
-]), Ue = e.object({
+]), Me = e.object({
   code_id: e.string().openapi({
     description: "The code that will be used in for instance an email verification flow"
   }),
@@ -730,7 +767,7 @@ const ve = e.object({
   connection_id: e.string().optional().openapi({
     description: "The connection that the code is connected to"
   }),
-  code_type: ke,
+  code_type: Pe,
   code_verifier: e.string().optional().openapi({
     description: "The code verifier used in PKCE in outbound flows"
   }),
@@ -755,10 +792,10 @@ const ve = e.object({
   expires_at: e.string(),
   used_at: e.string().optional(),
   user_id: e.string().optional()
-}), Pt = e.object({
-  ...Ue.shape,
+}), Wt = e.object({
+  ...Me.shape,
   created_at: e.string()
-}), Fe = e.object({
+}), He = e.object({
   kid: e.string().optional(),
   team_id: e.string().optional(),
   realms: e.string().optional(),
@@ -870,12 +907,12 @@ const ve = e.object({
   }).optional(),
   // Controls when root user attributes are updated from external IdP
   set_user_root_attributes: e.enum(["on_each_login", "on_first_login", "never_on_login"]).optional()
-}), xe = e.object({
+}), Ge = e.object({
   id: e.string().optional(),
   name: e.string(),
   display_name: e.string().optional(),
   strategy: e.string(),
-  options: Fe.default({}),
+  options: He.default({}),
   enabled_clients: e.array(e.string()).default([]).optional(),
   response_type: e.custom().optional(),
   response_mode: e.custom().optional(),
@@ -883,11 +920,11 @@ const ve = e.object({
   show_as_button: e.boolean().optional(),
   metadata: e.record(e.any()).optional(),
   is_system: e.boolean().optional()
-}), Mt = e.object({
+}), Kt = e.object({
   id: e.string(),
   created_at: e.string().transform((o) => o === null ? "" : o),
   updated_at: e.string().transform((o) => o === null ? "" : o)
-}).extend(xe.shape), Pe = e.object({
+}).extend(Ge.shape), Be = e.object({
   domain: e.string(),
   custom_domain_id: e.string().optional(),
   type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -901,7 +938,7 @@ const ve = e.object({
     "null"
   ]).optional(),
   domain_metadata: e.record(e.string().max(255)).optional()
-}), Me = e.discriminatedUnion("name", [
+}), We = e.discriminatedUnion("name", [
   e.object({
     name: e.literal("txt"),
     record: e.string(),
@@ -912,17 +949,17 @@ const ve = e.object({
     http_body: e.string(),
     http_url: e.string()
   })
-]), He = e.object({
-  ...Pe.shape,
+]), Ke = e.object({
+  ...Be.shape,
   custom_domain_id: e.string(),
   primary: e.boolean(),
   status: e.enum(["disabled", "pending", "pending_verification", "ready"]),
   origin_domain_name: e.string().optional(),
   verification: e.object({
-    methods: e.array(Me)
+    methods: e.array(We)
   }).optional(),
   tls_policy: e.string().optional()
-}), Ht = He.extend({
+}), zt = Ke.extend({
   tenant_id: e.string()
 }), C = e.object({
   id: e.string(),
@@ -930,17 +967,17 @@ const ve = e.object({
   visible: e.boolean().optional().default(!0)
 }), l = C.extend({
   category: e.literal("BLOCK").optional()
-}), Ge = l.extend({
+}), ze = l.extend({
   type: e.literal("DIVIDER"),
   config: e.object({
     text: e.string().optional()
   }).optional()
-}), Be = l.extend({
+}), qe = l.extend({
   type: e.literal("HTML"),
   config: e.object({
     content: e.string().optional()
   }).optional()
-}), We = l.extend({
+}), Xe = l.extend({
   type: e.literal("IMAGE"),
   config: e.object({
     src: e.string().optional(),
@@ -948,50 +985,50 @@ const ve = e.object({
     width: e.number().optional(),
     height: e.number().optional()
   }).optional()
-}), Ke = l.extend({
+}), Ve = l.extend({
   type: e.literal("JUMP_BUTTON"),
   config: e.object({
     text: e.string().optional(),
     target_step: e.string().optional()
   })
-}), ze = l.extend({
+}), Ye = l.extend({
   type: e.literal("RESEND_BUTTON"),
   config: e.object({
     text: e.string().optional(),
     resend_action: e.string().optional()
   })
-}), qe = l.extend({
+}), Qe = l.extend({
   type: e.literal("NEXT_BUTTON"),
   config: e.object({
     text: e.string().optional()
   })
-}), Xe = l.extend({
+}), Ze = l.extend({
   type: e.literal("PREVIOUS_BUTTON"),
   config: e.object({
     text: e.string().optional()
   })
-}), Ve = l.extend({
+}), $e = l.extend({
   type: e.literal("RICH_TEXT"),
   config: e.object({
     content: e.string().optional()
   }).optional()
-}), O = C.extend({
+}), T = C.extend({
   category: e.literal("WIDGET").optional(),
   label: e.string().min(1).optional(),
   hint: e.string().min(1).max(500).optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), Ye = O.extend({
+}), Je = T.extend({
   type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
   config: e.object({
     credential_type: e.string().optional()
   })
-}), Qe = O.extend({
+}), eo = T.extend({
   type: e.literal("GMAPS_ADDRESS"),
   config: e.object({
     api_key: e.string().optional()
   })
-}), Ze = O.extend({
+}), oo = T.extend({
   type: e.literal("RECAPTCHA"),
   config: e.object({
     site_key: e.string().optional()
@@ -1009,12 +1046,12 @@ const ve = e.object({
   ).optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), $e = n.extend({
+}), to = n.extend({
   type: e.literal("BOOLEAN"),
   config: e.object({
     default_value: e.boolean().optional()
   }).optional()
-}), Je = n.extend({
+}), no = n.extend({
   type: e.literal("CARDS"),
   config: e.object({
     options: e.array(
@@ -1027,7 +1064,7 @@ const ve = e.object({
     ).optional(),
     multi_select: e.boolean().optional()
   }).optional()
-}), eo = n.extend({
+}), io = n.extend({
   type: e.literal("CHOICE"),
   config: e.object({
     options: e.array(
@@ -1040,7 +1077,7 @@ const ve = e.object({
     multiple: e.boolean().optional(),
     default_value: e.union([e.string(), e.array(e.string())]).optional()
   }).optional()
-}), oo = n.extend({
+}), ao = n.extend({
   type: e.literal("CUSTOM"),
   config: e.object({
     component: e.string().optional(),
@@ -1048,7 +1085,7 @@ const ve = e.object({
     schema: e.record(e.any()).optional(),
     code: e.string().optional()
   })
-}), to = n.extend({
+}), so = n.extend({
   type: e.literal("DATE"),
   config: e.object({
     format: e.string().optional(),
@@ -1056,7 +1093,7 @@ const ve = e.object({
     max: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), no = n.extend({
+}), ro = n.extend({
   type: e.literal("DROPDOWN"),
   config: e.object({
     options: e.array(
@@ -1070,26 +1107,26 @@ const ve = e.object({
     multiple: e.boolean().optional(),
     default_value: e.union([e.string(), e.array(e.string())]).optional()
   }).optional()
-}), io = n.extend({
+}), lo = n.extend({
   type: e.literal("EMAIL"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), ao = n.extend({
+}), co = n.extend({
   type: e.literal("FILE"),
   config: e.object({
     accept: e.string().optional(),
     max_size: e.number().optional(),
     multiple: e.boolean().optional()
   }).optional()
-}), so = n.extend({
+}), po = n.extend({
   type: e.literal("LEGAL"),
   config: e.object({
     text: e.string(),
     html: e.boolean().optional()
   }).optional()
-}), ro = n.extend({
+}), _o = n.extend({
   type: e.literal("NUMBER"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1098,7 +1135,7 @@ const ve = e.object({
     step: e.number().optional(),
     default_value: e.string().optional()
   }).optional()
-}), lo = n.extend({
+}), go = n.extend({
   type: e.literal("PASSWORD"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1107,13 +1144,13 @@ const ve = e.object({
     forgot_password_link: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), po = n.extend({
+}), uo = n.extend({
   type: e.literal("PAYMENT"),
   config: e.object({
     provider: e.string().optional(),
     currency: e.string().optional()
   }).optional()
-}), co = n.extend({
+}), mo = n.extend({
   type: e.literal("SOCIAL"),
   config: e.object({
     providers: e.array(e.string()).optional(),
@@ -1128,7 +1165,7 @@ const ve = e.object({
       })
     ).optional()
   }).optional()
-}), _o = n.extend({
+}), ho = n.extend({
   type: e.literal("TEL"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1136,7 +1173,7 @@ const ve = e.object({
     default_value: e.string().optional(),
     allow_email: e.boolean().optional()
   }).optional()
-}), go = n.extend({
+}), bo = n.extend({
   type: e.literal("TEXT"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1144,54 +1181,54 @@ const ve = e.object({
     max_length: e.number().optional(),
     default_value: e.string().optional()
   }).optional()
-}), uo = n.extend({
+}), fo = n.extend({
   type: e.literal("COUNTRY"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), mo = n.extend({
+}), Eo = n.extend({
   type: e.literal("URL"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), ho = e.discriminatedUnion("type", [
-  Ge,
-  Be,
-  We,
-  Ke,
+}), So = e.discriminatedUnion("type", [
   ze,
   qe,
   Xe,
-  Ve
-]), bo = e.discriminatedUnion("type", [
+  Ve,
   Ye,
   Qe,
-  Ze
-]), fo = e.discriminatedUnion("type", [
-  $e,
+  Ze,
+  $e
+]), Ao = e.discriminatedUnion("type", [
   Je,
   eo,
-  uo,
-  oo,
+  oo
+]), yo = e.discriminatedUnion("type", [
   to,
   no,
   io,
+  fo,
   ao,
   so,
   ro,
   lo,
-  po,
   co,
+  po,
   _o,
   go,
-  mo
-]), v = e.union([
+  uo,
+  mo,
   ho,
   bo,
-  fo
-]), Gt = /* @__PURE__ */ new Set([
+  Eo
+]), v = e.union([
+  So,
+  Ao,
+  yo
+]), qt = /* @__PURE__ */ new Set([
   "BOOLEAN",
   "CARDS",
   "CHOICE",
@@ -1205,7 +1242,7 @@ const ve = e.object({
   "TEL",
   "TEXT",
   "URL"
-]), Bt = e.object({
+]), Xt = e.object({
   id: e.string(),
   type: e.literal("submit"),
   label: e.string(),
@@ -1217,7 +1254,7 @@ const ve = e.object({
 }), f = e.object({
   x: e.number(),
   y: e.number()
-}), Eo = e.object({
+}), Io = e.object({
   id: e.string(),
   type: e.literal("FLOW"),
   coordinates: f,
@@ -1226,7 +1263,7 @@ const ve = e.object({
     flow_id: e.string().max(30),
     next_node: e.string().optional()
   })
-}), So = e.object({
+}), Co = e.object({
   id: e.string(),
   type: e.literal("ROUTER"),
   coordinates: f,
@@ -1242,7 +1279,7 @@ const ve = e.object({
     ),
     fallback: e.string()
   })
-}), Ao = e.object({
+}), To = e.object({
   id: e.string(),
   type: e.literal("STEP"),
   coordinates: f,
@@ -1251,11 +1288,11 @@ const ve = e.object({
     components: e.array(v),
     next_node: e.string().optional()
   })
-}), yo = e.discriminatedUnion("type", [
-  Eo,
-  So,
-  Ao
-]), Io = e.object({
+}), Oo = e.discriminatedUnion("type", [
+  Io,
+  Co,
+  To
+]), No = e.object({
   name: e.string().openapi({
     description: "The name of the form"
   }),
@@ -1268,7 +1305,7 @@ const ve = e.object({
     default: e.string().optional()
   }).optional(),
   translations: e.record(e.string(), e.any()).optional(),
-  nodes: e.array(yo).optional(),
+  nodes: e.array(Oo).optional(),
   start: e.object({
     hidden_fields: e.array(e.object({ key: e.string(), value: e.string() })).optional(),
     next_node: e.string().optional(),
@@ -1290,20 +1327,20 @@ const ve = e.object({
   }).optional()
 }).openapi({
   description: "Schema for flow-based forms (matches Auth0 Forms structure)"
-}), Wt = e.object({
+}), Vt = e.object({
   ...s.shape,
-  ...Io.shape,
+  ...No.shape,
   id: e.string()
-}), Co = e.object({
+}), wo = e.object({
   id: e.number().optional(),
   text: e.string(),
   type: e.enum(["info", "error", "success", "warning"])
-}), Oo = e.object({
+}), jo = e.object({
   id: e.string().optional(),
   text: e.string(),
   href: e.string(),
   linkText: e.string().optional()
-}), Kt = e.object({
+}), Yt = e.object({
   /** Screen identifier for CSS targeting (e.g., 'identifier', 'enter-password', 'signup') */
   name: e.string().optional(),
   action: e.string(),
@@ -1311,18 +1348,18 @@ const ve = e.object({
   title: e.string().optional(),
   description: e.string().optional(),
   components: e.array(v),
-  messages: e.array(Co).optional(),
-  links: e.array(Oo).optional(),
+  messages: e.array(wo).optional(),
+  links: e.array(jo).optional(),
   /** Footer HTML content displayed at the very bottom of the widget (e.g., terms and conditions) */
   footer: e.string().optional()
 });
-function zt(o) {
+function Qt(o) {
   return o.category === "BLOCK";
 }
-function qt(o) {
+function Zt(o) {
   return o.category === "WIDGET";
 }
-function Xt(o) {
+function $t(o) {
   return o.category === "FIELD";
 }
 const k = e.enum([
@@ -1351,7 +1388,7 @@ const k = e.enum([
 ]), P = e.enum([
   "ensure-username",
   "set-preferred-username"
-]), Vt = {
+]), Jt = {
   "ensure-username": {
     name: "Ensure Username",
     description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1362,76 +1399,76 @@ const k = e.enum([
     description: "Sets the preferred_username claim on tokens based on the username from the primary or linked user.",
     trigger_id: "credentials-exchange"
   }
-}, p = {
+}, c = {
   enabled: e.boolean().default(!1),
   synchronous: e.boolean().default(!1),
   priority: e.number().optional(),
   hook_id: e.string().optional()
-}, To = e.object({
-  ...p,
+}, Ro = e.object({
+  ...c,
   trigger_id: k,
   url: e.string()
-}), No = e.object({
-  ...p,
+}), Do = e.object({
+  ...c,
   trigger_id: U,
   form_id: e.string()
-}), wo = e.object({
-  ...p,
+}), Lo = e.object({
+  ...c,
   trigger_id: F,
   template_id: P
-}), jo = e.object({
-  ...p,
+}), vo = e.object({
+  ...c,
   trigger_id: x,
   code_id: e.string()
-}), Yt = e.union([
-  To,
-  No,
-  wo,
-  jo
-]), Ro = e.object({
-  ...p,
+}), en = e.union([
+  Ro,
+  Do,
+  Lo,
+  vo
+]), ko = e.object({
+  ...c,
   trigger_id: k,
   ...s.shape,
   hook_id: e.string(),
   url: e.string()
-}), Do = e.object({
-  ...p,
+}), Uo = e.object({
+  ...c,
   trigger_id: U,
   ...s.shape,
   hook_id: e.string(),
   form_id: e.string()
-}), Lo = e.object({
-  ...p,
+}), Fo = e.object({
+  ...c,
   trigger_id: F,
   ...s.shape,
   hook_id: e.string(),
   template_id: P
-}), vo = e.object({
-  ...p,
+}), xo = e.object({
+  ...c,
   trigger_id: x,
   ...s.shape,
   hook_id: e.string(),
   code_id: e.string()
-}), Qt = e.union([
-  Ro,
-  Do,
-  Lo,
-  vo
-]), ko = e.object({
+}), on = e.union([
+  ko,
+  Uo,
+  Fo,
+  xo
+]), Po = e.object({
   code: e.string().max(1e5),
   secrets: e.record(e.string()).optional()
-}), Zt = ko.extend({
+}), tn = Po.extend({
   id: e.string(),
   tenant_id: e.string(),
   ...s.shape
-}), Uo = e.object({
+}), Mo = e.object({
   name: e.string().optional()
-}), Fo = e.object({
+}), Ho = e.object({
   email: e.string().optional()
-}), xo = e.object({
+}), Go = e.object({
   organization_id: e.string().max(50),
-  inviter: Uo,
-  invitee: Fo,
+  inviter: Mo,
+  invitee: Ho,
   invitation_url: e.string().url(),
   client_id: e.string(),
   connection_id: e.string().optional(),
@@ -1440,13 +1477,13 @@ const k = e.enum([
   ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
   roles: e.array(e.string()).default([]).optional(),
   send_invitation_email: e.boolean().default(!0).optional()
-}), $t = e.object({
+}), nn = e.object({
   id: e.string(),
   organization_id: e.string().max(50),
   created_at: e.string().datetime(),
   expires_at: e.string().datetime(),
   ticket_id: e.string().optional()
-}).extend(xo.shape), Po = e.object({
+}).extend(Go.shape), Bo = e.object({
   alg: e.enum([
     "RS256",
     "RS384",
@@ -1465,9 +1502,9 @@ const k = e.enum([
   x5t: e.string().optional(),
   x5c: e.array(e.string()).optional(),
   use: e.enum(["sig", "enc"]).optional()
-}), Jt = e.object({
-  keys: e.array(Po)
-}), en = e.object({
+}), an = e.object({
+  keys: e.array(Bo)
+}), sn = e.object({
   issuer: e.string(),
   authorization_endpoint: e.string(),
   token_endpoint: e.string(),
@@ -1490,17 +1527,17 @@ const k = e.enum([
   token_endpoint_auth_signing_alg_values_supported: e.array(e.string())
 });
 var M = /* @__PURE__ */ ((o) => (o.PENDING = "pending", o.AUTHENTICATED = "authenticated", o.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", o.AWAITING_MFA = "awaiting_mfa", o.AWAITING_HOOK = "awaiting_hook", o.AWAITING_CONTINUATION = "awaiting_continuation", o.COMPLETED = "completed", o.FAILED = "failed", o.EXPIRED = "expired", o))(M || {});
-const Mo = e.nativeEnum(M), Ho = e.object({
+const Wo = e.nativeEnum(M), Ko = e.object({
   csrf_token: e.string(),
   auth0Client: e.string().optional(),
-  authParams: ve,
+  authParams: xe,
   expires_at: e.string(),
   deleted_at: e.string().optional(),
   ip: e.string().optional(),
   useragent: e.string().optional(),
   session_id: e.string().optional(),
   authorization_url: e.string().optional(),
-  state: Mo.optional().default(
+  state: Wo.optional().default(
     "pending"
     /* PENDING */
   ),
@@ -1513,14 +1550,14 @@ const Mo = e.nativeEnum(M), Ho = e.object({
   // The connection used to authenticate (may differ from primary user's connection)
 }).openapi({
   description: "This represents a login sesion"
-}), on = e.object({
-  ...Ho.shape,
+}), rn = e.object({
+  ...Ko.shape,
   id: e.string().openapi({
     description: "This is is used as the state in the universal login"
   }),
   created_at: e.string(),
   updated_at: e.string()
-}), Go = {
+}), zo = {
   // Network & System
   ACLS_SUMMARY: "acls_summary",
   ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
@@ -1692,24 +1729,24 @@ const Mo = e.nativeEnum(M), Ho = e.object({
   WARNING_DURING_LOGIN: "w",
   WARNING_SENDING_NOTIFICATION: "wn",
   WARNING_USER_MANAGEMENT: "wum"
-}, Bo = e.string().refine(
-  (o) => Object.values(Go).includes(o),
+}, qo = e.string().refine(
+  (o) => Object.values(zo).includes(o),
   { message: "Invalid log type" }
-), Wo = e.object({
+), Xo = e.object({
   name: e.string(),
   version: e.string(),
   env: e.object({
     node: e.string().optional()
   }).optional()
-}), Ko = e.object({
+}), Vo = e.object({
   country_code: e.string().length(2),
   city_name: e.string(),
   latitude: e.string(),
   longitude: e.string(),
   time_zone: e.string(),
   continent_code: e.string()
-}), zo = e.object({
-  type: Bo,
+}), Yo = e.object({
+  type: qo,
   date: e.string(),
   description: e.string().optional(),
   ip: e.string().optional(),
@@ -1728,19 +1765,19 @@ const Mo = e.nativeEnum(M), Ho = e.object({
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
   hostname: e.string().optional(),
-  auth0_client: Wo.optional(),
+  auth0_client: Xo.optional(),
   log_id: e.string().optional(),
-  location_info: Ko.optional()
-}), tn = e.object({
-  ...zo.shape,
+  location_info: Vo.optional()
+}), ln = e.object({
+  ...Yo.shape,
   log_id: e.string()
-}), qo = e.object({
+}), Qo = e.object({
   id: e.string().optional(),
   user_id: e.string(),
   password: e.string(),
   algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
   is_current: e.boolean().default(!0)
-}), nn = qo.extend({
+}), cn = Qo.extend({
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
@@ -1751,7 +1788,7 @@ const Mo = e.nativeEnum(M), Ho = e.object({
   last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
   last_ip: e.string().describe("Last IP address from which this user logged in"),
   last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), Xo = e.object({
+}), Zo = e.object({
   id: e.string(),
   revoked_at: e.string().optional(),
   used_at: e.string().optional(),
@@ -1763,13 +1800,13 @@ const Mo = e.nativeEnum(M), Ho = e.object({
     "Metadata related to the device used in the session"
   ),
   clients: e.array(e.string()).describe("List of client details for the session")
-}), an = e.object({
+}), pn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   authenticated_at: e.string(),
   last_interaction_at: e.string(),
-  ...Xo.shape
-}), sn = e.object({
+  ...Zo.shape
+}), _n = e.object({
   kid: e.string().openapi({ description: "The key id of the signing key" }),
   cert: e.string().openapi({ description: "The public certificate of the signing key" }),
   fingerprint: e.string().openapi({ description: "The cert fingerprint" }),
@@ -1794,7 +1831,7 @@ const Mo = e.nativeEnum(M), Ho = e.object({
   type: e.enum(["jwt_signing", "saml_encryption"]).openapi({
     description: "The type of the signing key"
   })
-}), Vo = e.object({
+}), $o = e.object({
   id: e.string().optional(),
   // Basic settings
   audience: e.string(),
@@ -1807,8 +1844,8 @@ const Mo = e.nativeEnum(M), Ho = e.object({
   sender_name: e.string(),
   // Tenant Settings fields (merged from TenantSettings)
   // Session settings
-  session_lifetime: e.number().optional(),
-  idle_session_lifetime: e.number().optional(),
+  session_lifetime: e.number().default(168),
+  idle_session_lifetime: e.number().default(72),
   ephemeral_session_lifetime: e.number().optional(),
   idle_ephemeral_session_lifetime: e.number().optional(),
   session_cookie: e.object({
@@ -1949,14 +1986,14 @@ const Mo = e.nativeEnum(M), Ho = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), rn = e.object({
+}), dn = e.object({
   created_at: e.string().nullable().transform((o) => o ?? ""),
   updated_at: e.string().nullable().transform((o) => o ?? ""),
-  ...Vo.shape,
+  ...$o.shape,
   id: e.string()
 });
-var Yo = /* @__PURE__ */ ((o) => (o.RefreshToken = "refresh_token", o.AuthorizationCode = "authorization_code", o.ClientCredential = "client_credentials", o.Passwordless = "passwordless", o.Password = "password", o.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", o))(Yo || {});
-const ln = e.object({
+var Jo = /* @__PURE__ */ ((o) => (o.RefreshToken = "refresh_token", o.AuthorizationCode = "authorization_code", o.ClientCredential = "client_credentials", o.Passwordless = "passwordless", o.Password = "password", o.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", o))(Jo || {});
+const gn = e.object({
   access_token: e.string(),
   id_token: e.string().optional(),
   scope: e.string().optional(),
@@ -1969,7 +2006,7 @@ e.object({
   code: e.string(),
   state: e.string().optional()
 });
-const Qo = e.object({
+const et = e.object({
   button_border_radius: e.number(),
   button_border_weight: e.number(),
   buttons_style: e.enum(["pill", "rounded", "sharp"]),
@@ -1979,7 +2016,7 @@ const Qo = e.object({
   show_widget_shadow: e.boolean(),
   widget_border_weight: e.number(),
   widget_corner_radius: e.number()
-}), Zo = e.object({
+}), ot = e.object({
   base_focus_color: e.string(),
   base_hover_color: e.string(),
   body_text: e.string(),
@@ -2002,7 +2039,7 @@ const Qo = e.object({
 }), u = e.object({
   bold: e.boolean(),
   size: e.number()
-}), $o = e.object({
+}), tt = e.object({
   body_text: u,
   buttons_text: u,
   font_url: e.string(),
@@ -2012,31 +2049,31 @@ const Qo = e.object({
   reference_text_size: e.number(),
   subtitle: u,
   title: u
-}), Jo = e.object({
+}), nt = e.object({
   background_color: e.string(),
   background_image_url: e.string(),
   page_layout: e.enum(["center", "left", "right"])
-}), et = e.object({
+}), it = e.object({
   header_text_alignment: e.enum(["center", "left", "right"]),
   logo_height: e.number(),
   logo_position: e.enum(["center", "left", "none", "right"]),
   logo_url: e.string(),
   social_buttons_layout: e.enum(["bottom", "top"])
-}), ot = e.object({
-  borders: Qo,
-  colors: Zo,
+}), at = e.object({
+  borders: et,
+  colors: ot,
   displayName: e.string(),
-  fonts: $o,
-  page_background: Jo,
-  widget: et
-}), pn = ot.extend({
+  fonts: tt,
+  page_background: nt,
+  widget: it
+}), un = at.extend({
   themeId: e.string()
-}), cn = e.object({
+}), mn = e.object({
   universal_login_experience: e.enum(["new", "classic"]).default("new"),
   identifier_first: e.boolean().default(!0),
   password_first: e.boolean().default(!1),
   webauthn_platform_first_factor: e.boolean()
-}), _n = e.object({
+}), hn = e.object({
   name: e.string(),
   enabled: e.boolean().optional().default(!0),
   default_from_address: e.string().optional(),
@@ -2066,7 +2103,7 @@ const Qo = e.object({
     })
   ]),
   settings: e.object({}).optional()
-}), tt = e.object({
+}), st = e.object({
   // The actual refresh token value (primary key).
   id: e.string(),
   // Link to the login session
@@ -2087,21 +2124,21 @@ const Qo = e.object({
     })
   ),
   rotating: e.boolean()
-}), dn = e.object({
+}), bn = e.object({
   // When the refresh token record was created.
   created_at: e.string(),
   // Spread in the rest of the refresh token properties.
-  ...tt.shape
-}), gn = e.object({
+  ...st.shape
+}), fn = e.object({
   to: e.string(),
   message: e.string()
-}), un = e.object({
+}), En = e.object({
   name: e.string(),
   options: e.object({})
-}), nt = e.object({
+}), rt = e.object({
   value: e.string(),
   description: e.string().optional()
-}), it = e.object({
+}), lt = e.object({
   token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
   enforce_policies: e.boolean().optional(),
   allow_skipping_userinfo: e.boolean().optional(),
@@ -2111,42 +2148,42 @@ const Qo = e.object({
   mtls: e.object({
     bound_access_tokens: e.boolean().optional()
   }).optional()
-}), at = e.object({
+}), ct = e.object({
   id: e.string().optional(),
   name: e.string(),
   identifier: e.string(),
-  scopes: e.array(nt).optional(),
+  scopes: e.array(rt).optional(),
   signing_alg: e.string().optional(),
   signing_secret: e.string().optional(),
-  token_lifetime: e.number().optional(),
-  token_lifetime_for_web: e.number().optional(),
+  token_lifetime: e.number().default(86400),
+  token_lifetime_for_web: e.number().default(7200),
   skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
   allow_offline_access: e.boolean().optional(),
   verificationKey: e.string().optional(),
-  options: it.optional(),
+  options: lt.optional(),
   is_system: e.boolean().optional(),
   metadata: e.record(e.any()).optional()
-}), st = e.object({
-  ...at.shape,
+}), pt = e.object({
+  ...ct.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), mn = e.array(st), rt = e.object({
+}), Sn = e.array(pt), _t = e.object({
   role_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string()
-}), lt = e.object({
-  ...rt.shape,
+}), dt = e.object({
+  ..._t.shape,
   created_at: e.string()
-}), hn = e.array(lt), pt = e.object({
+}), An = e.array(dt), gt = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string(),
   organization_id: e.string().optional()
-}), ct = e.object({
-  ...pt.shape,
+}), ut = e.object({
+  ...gt.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), bn = e.array(ct), _t = e.object({
+}), yn = e.array(ut), mt = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   resource_server_name: e.string(),
@@ -2154,17 +2191,17 @@ const Qo = e.object({
   description: e.string().nullable().optional(),
   created_at: e.string().optional(),
   organization_id: e.string().optional()
-}), fn = e.array(
-  _t
-), dt = e.object({
+}), In = e.array(
+  mt
+), ht = e.object({
   user_id: e.string(),
   role_id: e.string(),
   organization_id: e.string().optional()
-}), gt = e.object({
-  ...dt.shape,
+}), bt = e.object({
+  ...ht.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), En = e.array(gt), ut = e.object({
+}), Cn = e.array(bt), ft = e.object({
   id: e.string().optional().openapi({
     description: "The unique identifier of the role. If not provided, one will be generated."
   }),
@@ -2178,13 +2215,13 @@ const Qo = e.object({
   metadata: e.record(e.any()).optional().openapi({
     description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios."
   })
-}), mt = ut.extend({
+}), Et = ft.extend({
   id: e.string().openapi({
     description: "The unique identifier of the role"
   }),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Sn = e.array(mt), ht = e.object({
+}), Tn = e.array(Et), St = e.object({
   logo_url: e.string().optional().openapi({
     description: "URL of the organization's logo"
   }),
@@ -2196,7 +2233,7 @@ const Qo = e.object({
       description: "Page background color in hex format (e.g., #FFFFFF)"
     })
   }).optional()
-}).optional(), bt = e.object({
+}).optional(), At = e.object({
   connection_id: e.string().openapi({
     description: "ID of the connection"
   }),
@@ -2209,7 +2246,7 @@ const Qo = e.object({
   is_signup_enabled: e.boolean().default(!0).openapi({
     description: "Whether signup is enabled for this connection"
   })
-}), ft = e.object({
+}), yt = e.object({
   client_credentials: e.object({
     enforce: e.boolean().default(!1).openapi({
       description: "Whether to enforce token quota limits"
@@ -2221,7 +2258,7 @@ const Qo = e.object({
       description: "Maximum tokens per hour (0 = unlimited)"
     })
   }).optional()
-}).optional(), Et = e.object({
+}).optional(), It = e.object({
   id: e.string().optional(),
   name: e.string().min(1).regex(/^[a-z0-9_-]+$/, {
     message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores"
@@ -2231,37 +2268,37 @@ const Qo = e.object({
   display_name: e.string().optional().openapi({
     description: "The display name of the organization"
   }),
-  branding: ht,
+  branding: St,
   metadata: e.record(e.any()).default({}).optional().openapi({
     description: "Custom metadata for the organization"
   }),
-  enabled_connections: e.array(bt).default([]).optional().openapi({
+  enabled_connections: e.array(At).default([]).optional().openapi({
     description: "List of enabled connections for the organization"
   }),
-  token_quota: ft
-}), An = e.object({
-  ...Et.shape,
+  token_quota: yt
+}), On = e.object({
+  ...It.shape,
   ...s.shape,
   id: e.string(),
   // Override name to be lenient when reading from database (to support existing uppercase names)
   name: e.string().min(1).openapi({
     description: "The name of the organization"
   })
-}), St = e.object({
+}), Ct = e.object({
   user_id: e.string().openapi({
     description: "ID of the user"
   }),
   organization_id: e.string().openapi({
     description: "ID of the organization"
   })
-}), yn = e.object({
-  ...St.shape,
+}), Nn = e.object({
+  ...Ct.shape,
   ...s.shape,
   id: e.string()
-}), In = e.object({
+}), wn = e.object({
   // Session settings
-  idle_session_lifetime: e.number().optional(),
-  session_lifetime: e.number().optional(),
+  idle_session_lifetime: e.number().default(72),
+  session_lifetime: e.number().default(168),
   session_cookie: e.object({
     mode: e.enum(["persistent", "non-persistent"]).optional()
   }).optional(),
@@ -2358,7 +2395,7 @@ const Qo = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), Cn = e.object({
+}), jn = e.object({
   date: e.string().openapi({
     description: "Date these events occurred in ISO 8601 format",
     example: "2025-12-19"
@@ -2383,10 +2420,10 @@ const Qo = e.object({
     description: "Approximate date and time the first event occurred in ISO 8601 format",
     example: "2025-12-19T00:00:00.000Z"
   })
-}), On = e.number().openapi({
+}), Rn = e.number().openapi({
   description: "Number of active users in the last 30 days",
   example: 1234
-}), At = e.enum([
+}), Tt = e.enum([
   "login",
   "login-id",
   "login-password",
@@ -2415,17 +2452,17 @@ const Qo = e.object({
   "custom-form",
   "login-passwordless",
   "mfa-login-options"
-]), yt = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+]), Ot = e.record(e.string(), e.record(e.string(), e.string())).openapi({
   type: "object",
   additionalProperties: {
     type: "object",
     additionalProperties: { type: "string" }
   }
-}), Tn = e.object({
-  prompt: At,
+}), Dn = e.object({
+  prompt: Tt,
   language: e.string(),
-  custom_text: yt
-}), Nn = {
+  custom_text: Ot
+}), Ln = {
   EMAIL: "email",
   SMS: "sms",
   USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2440,11 +2477,11 @@ const Qo = e.object({
   SAMLP: "samlp",
   WAAD: "waad",
   ADFS: "adfs"
-}, wn = {
+}, vn = {
   DATABASE: "database",
   SOCIAL: "social",
   PASSWORDLESS: "passwordless"
-}, It = e.enum([
+}, Nt = e.enum([
   "phone",
   "totp",
   "email",
@@ -2454,7 +2491,7 @@ const Qo = e.object({
   "passkey"
 ]), G = e.object({
   user_id: e.string(),
-  type: It,
+  type: Nt,
   // Phone-specific
   phone_number: e.string().optional(),
   // TOTP-specific
@@ -2488,30 +2525,30 @@ function B(o, t) {
     path: ["public_key"]
   }));
 }
-const jn = G.superRefine(B), Rn = e.object({
+const kn = G.superRefine(B), Un = e.object({
   ...G.shape,
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
 }).superRefine(B);
-function Dn(o) {
+function Fn(o) {
   const [t, i] = o.split("|");
   if (!t || !i)
     throw new Error(`Invalid user_id: ${o}`);
   return { connection: t, id: i };
 }
-function Ln(o) {
+function xn(o) {
   const {
     primary: t,
     secondaries: i,
-    syncMethods: T = ["create", "update", "remove", "delete", "set"]
+    syncMethods: O = ["create", "rawCreate", "update", "remove", "delete", "set"]
   } = o, E = {
-    get(c, a) {
+    get(p, a) {
       if (typeof a == "symbol")
-        return c[a];
-      const _ = c[a];
-      return typeof _ != "function" ? _ : T.includes(a) ? async (...d) => {
-        const S = await _.apply(c, d), g = [];
+        return p[a];
+      const _ = p[a];
+      return typeof _ != "function" ? _ : O.includes(a) ? async (...d) => {
+        const S = await _.apply(p, d), g = [];
         for (const r of i) {
           const h = r.adapter[a];
           if (typeof h != "function")
@@ -2536,16 +2573,16 @@ function Ln(o) {
           r.blocking && g.push(A);
         }
         return g.length > 0 && await Promise.all(g), S;
-      } : _.bind(c);
+      } : _.bind(p);
     }
   };
   return new Proxy(t, E);
 }
-function vn(o) {
+function Pn(o) {
   return o;
 }
-function kn(o) {
-  var E, c, a, _, d, S, g, r, h, A, b, y;
+function Mn(o) {
+  var E, p, a, _, d, S, g, r, h, A, b, y;
   const t = o == null ? void 0 : o.options;
   if (!t)
     return {
@@ -2556,7 +2593,7 @@ function kn(o) {
     };
   const i = t.attributes;
   if (i) {
-    const W = ((c = (E = i.username) == null ? void 0 : E.identifier) == null ? void 0 : c.active) === !0, K = ((_ = (a = i.email) == null ? void 0 : a.identifier) == null ? void 0 : _.active) !== !1, z = ((S = (d = i.username) == null ? void 0 : d.validation) == null ? void 0 : S.min_length) ?? 1, q = ((r = (g = i.username) == null ? void 0 : g.validation) == null ? void 0 : r.max_length) ?? 15;
+    const W = ((p = (E = i.username) == null ? void 0 : E.identifier) == null ? void 0 : p.active) === !0, K = ((_ = (a = i.email) == null ? void 0 : a.identifier) == null ? void 0 : _.active) !== !1, z = ((S = (d = i.username) == null ? void 0 : d.validation) == null ? void 0 : S.min_length) ?? 1, q = ((r = (g = i.username) == null ? void 0 : g.validation) == null ? void 0 : r.max_length) ?? 15;
     return {
       usernameIdentifierActive: W,
       emailIdentifierActive: K,
@@ -2572,174 +2609,179 @@ function kn(o) {
   };
 }
 export {
-  Nt as Auth0ActionEnum,
-  Wo as Auth0Client,
+  Lt as Auth0ActionEnum,
+  Xo as Auth0Client,
   D as AuthorizationResponseMode,
   R as AuthorizationResponseType,
   L as CodeChallengeMethod,
   j as ComponentCategory,
   w as ComponentType,
-  wt as EmailActionEnum,
-  Gt as FORM_FIELD_TYPES,
-  Tt as FlowActionTypeEnum,
-  Yo as GrantType,
-  Ko as LocationInfo,
-  Go as LogTypes,
+  vt as EmailActionEnum,
+  qt as FORM_FIELD_TYPES,
+  Dt as FlowActionTypeEnum,
+  Jo as GrantType,
+  Vo as LocationInfo,
+  zo as LogTypes,
   M as LoginSessionState,
-  Ce as NodeType,
-  ie as RedirectTargetEnum,
-  Nn as Strategy,
-  wn as StrategyType,
-  Ne as actionNodeSchema,
-  On as activeUsersResponseSchema,
-  V as actorSchema,
-  ce as addressSchema,
-  X as auditCategorySchema,
-  ee as auditEventInsertSchema,
-  Ot as auditEventSchema,
-  J as auth0ClientSchema,
-  Ft as auth0FlowInsertSchema,
-  Le as auth0FlowSchema,
-  Rt as auth0QuerySchema,
-  te as auth0UpdateUserActionSchema,
-  Lt as auth0UserResponseSchema,
-  ve as authParamsSchema,
-  jn as authenticationMethodInsertSchema,
-  Rn as authenticationMethodSchema,
-  It as authenticationMethodTypeSchema,
+  we as NodeType,
+  le as RedirectTargetEnum,
+  Ln as Strategy,
+  vn as StrategyType,
+  V as actionDependencySchema,
+  Q as actionInsertSchema,
+  De as actionNodeSchema,
+  jt as actionSchema,
+  Y as actionSecretSchema,
+  X as actionTriggerSchema,
+  Rn as activeUsersResponseSchema,
+  $ as actorSchema,
+  ue as addressSchema,
+  Z as auditCategorySchema,
+  ie as auditEventInsertSchema,
+  Rt as auditEventSchema,
+  ne as auth0ClientSchema,
+  Gt as auth0FlowInsertSchema,
+  Fe as auth0FlowSchema,
+  Ut as auth0QuerySchema,
+  se as auth0UpdateUserActionSchema,
+  xt as auth0UserResponseSchema,
+  xe as authParamsSchema,
+  kn as authenticationMethodInsertSchema,
+  Un as authenticationMethodSchema,
+  Nt as authenticationMethodTypeSchema,
   N as baseUserSchema,
-  ho as blockComponentSchema,
-  Qo as bordersSchema,
-  xt as brandingSchema,
-  Ee as buttonComponentSchema,
-  he as clientGrantInsertSchema,
-  Ut as clientGrantListSchema,
-  be as clientGrantSchema,
-  me as clientInsertSchema,
-  kt as clientSchema,
-  Ue as codeInsertSchema,
-  Pt as codeSchema,
-  ke as codeTypeSchema,
-  Zo as colorsSchema,
-  Co as componentMessageSchema,
-  Ie as componentSchema,
-  xe as connectionInsertSchema,
-  Fe as connectionOptionsSchema,
-  Mt as connectionSchema,
+  So as blockComponentSchema,
+  et as bordersSchema,
+  Bt as brandingSchema,
+  Ie as buttonComponentSchema,
+  Se as clientGrantInsertSchema,
+  Ht as clientGrantListSchema,
+  Ae as clientGrantSchema,
+  Ee as clientInsertSchema,
+  Mt as clientSchema,
+  Me as codeInsertSchema,
+  Wt as codeSchema,
+  Pe as codeTypeSchema,
+  ot as colorsSchema,
+  wo as componentMessageSchema,
+  Ne as componentSchema,
+  Ge as connectionInsertSchema,
+  He as connectionOptionsSchema,
+  Kt as connectionSchema,
   m as coordinatesSchema,
-  Ln as createPassthroughAdapter,
-  vn as createWriteOnlyAdapter,
-  Pe as customDomainInsertSchema,
-  He as customDomainSchema,
-  Ht as customDomainWithTenantIdSchema,
-  Tn as customTextEntrySchema,
-  yt as customTextSchema,
-  Cn as dailyStatsSchema,
-  _n as emailProviderSchema,
-  oe as emailVerificationRulesSchema,
-  ne as emailVerifyActionSchema,
-  De as endingSchema,
-  fo as fieldComponentSchema,
-  se as flowActionStepSchema,
-  re as flowInsertSchema,
-  jt as flowSchema,
-  Ae as flowsFieldComponentSchema,
-  Te as flowsFlowNodeSchema,
-  Oe as flowsStepNodeSchema,
+  xn as createPassthroughAdapter,
+  Pn as createWriteOnlyAdapter,
+  Be as customDomainInsertSchema,
+  Ke as customDomainSchema,
+  zt as customDomainWithTenantIdSchema,
+  Dn as customTextEntrySchema,
+  Ot as customTextSchema,
+  jn as dailyStatsSchema,
+  hn as emailProviderSchema,
+  ae as emailVerificationRulesSchema,
+  re as emailVerifyActionSchema,
+  Ue as endingSchema,
+  yo as fieldComponentSchema,
+  pe as flowActionStepSchema,
+  _e as flowInsertSchema,
+  kt as flowSchema,
+  Te as flowsFieldComponentSchema,
+  Re as flowsFlowNodeSchema,
+  je as flowsStepNodeSchema,
   u as fontDetailsSchema,
-  $o as fontsSchema,
-  Bt as formControlSchema,
-  Io as formInsertSchema,
+  tt as fontsSchema,
+  Xt as formControlSchema,
+  No as formInsertSchema,
   v as formNodeComponentDefinition,
-  yo as formNodeSchema,
-  Wt as formSchema,
-  ye as genericComponentSchema,
-  we as genericNodeSchema,
-  kn as getConnectionIdentifierConfig,
-  ko as hookCodeInsertSchema,
-  Zt as hookCodeSchema,
-  Yt as hookInsertSchema,
-  Qt as hookSchema,
+  Oo as formNodeSchema,
+  Vt as formSchema,
+  Oe as genericComponentSchema,
+  Le as genericNodeSchema,
+  Mn as getConnectionIdentifierConfig,
+  Po as hookCodeInsertSchema,
+  tn as hookCodeSchema,
+  en as hookInsertSchema,
+  on as hookSchema,
   P as hookTemplateId,
-  Vt as hookTemplates,
-  pe as identitySchema,
-  xo as inviteInsertSchema,
-  $t as inviteSchema,
-  Fo as inviteeSchema,
-  Uo as inviterSchema,
-  zt as isBlockComponent,
-  Xt as isFieldComponent,
-  qt as isWidgetComponent,
-  Jt as jwksKeySchema,
-  Po as jwksSchema,
-  Se as legalComponentSchema,
-  $ as locationInfoSchema,
-  zo as logInsertSchema,
-  tn as logSchema,
-  Ho as loginSessionInsertSchema,
-  on as loginSessionSchema,
-  Mo as loginSessionStateSchema,
-  je as nodeSchema,
-  en as openIDConfigurationSchema,
-  ht as organizationBrandingSchema,
-  bt as organizationEnabledConnectionSchema,
-  Et as organizationInsertSchema,
-  An as organizationSchema,
-  ft as organizationTokenQuotaSchema,
-  Jo as pageBackgroundSchema,
-  Dn as parseUserId,
-  qo as passwordInsertSchema,
-  nn as passwordSchema,
-  le as profileDataSchema,
-  At as promptScreenSchema,
-  cn as promptSettingSchema,
-  ae as redirectActionSchema,
-  tt as refreshTokenInsertSchema,
-  dn as refreshTokenSchema,
-  Q as requestContextSchema,
-  at as resourceServerInsertSchema,
-  mn as resourceServerListSchema,
-  it as resourceServerOptionsSchema,
-  st as resourceServerSchema,
-  nt as resourceServerScopeSchema,
-  Z as responseContextSchema,
-  fe as richTextComponentSchema,
-  ut as roleInsertSchema,
-  Sn as roleListSchema,
-  rt as rolePermissionInsertSchema,
-  hn as rolePermissionListSchema,
-  lt as rolePermissionSchema,
-  mt as roleSchema,
-  Oo as screenLinkSchema,
-  Xo as sessionInsertSchema,
-  an as sessionSchema,
-  sn as signingKeySchema,
-  un as smsProviderSchema,
-  gn as smsSendParamsSchema,
-  Re as startSchema,
-  Y as targetSchema,
-  Vo as tenantInsertSchema,
-  rn as tenantSchema,
-  In as tenantSettingsSchema,
-  ot as themeInsertSchema,
-  pn as themeSchema,
-  ln as tokenResponseSchema,
-  Dt as totalsSchema,
-  Kt as uiScreenSchema,
-  _e as userInsertSchema,
-  St as userOrganizationInsertSchema,
-  yn as userOrganizationSchema,
-  pt as userPermissionInsertSchema,
-  bn as userPermissionListSchema,
-  ct as userPermissionSchema,
-  fn as userPermissionWithDetailsListSchema,
-  _t as userPermissionWithDetailsSchema,
-  vt as userResponseSchema,
-  dt as userRoleInsertSchema,
-  En as userRoleListSchema,
-  gt as userRoleSchema,
-  de as userSchema,
-  Me as verificationMethodsSchema,
-  bo as widgetComponentSchema,
-  et as widgetSchema
+  Jt as hookTemplates,
+  ge as identitySchema,
+  Go as inviteInsertSchema,
+  nn as inviteSchema,
+  Ho as inviteeSchema,
+  Mo as inviterSchema,
+  Qt as isBlockComponent,
+  $t as isFieldComponent,
+  Zt as isWidgetComponent,
+  an as jwksKeySchema,
+  Bo as jwksSchema,
+  Ce as legalComponentSchema,
+  te as locationInfoSchema,
+  Yo as logInsertSchema,
+  ln as logSchema,
+  Ko as loginSessionInsertSchema,
+  rn as loginSessionSchema,
+  Wo as loginSessionStateSchema,
+  ve as nodeSchema,
+  sn as openIDConfigurationSchema,
+  St as organizationBrandingSchema,
+  At as organizationEnabledConnectionSchema,
+  It as organizationInsertSchema,
+  On as organizationSchema,
+  yt as organizationTokenQuotaSchema,
+  nt as pageBackgroundSchema,
+  Fn as parseUserId,
+  Qo as passwordInsertSchema,
+  cn as passwordSchema,
+  de as profileDataSchema,
+  Tt as promptScreenSchema,
+  mn as promptSettingSchema,
+  ce as redirectActionSchema,
+  st as refreshTokenInsertSchema,
+  bn as refreshTokenSchema,
+  ee as requestContextSchema,
+  ct as resourceServerInsertSchema,
+  Sn as resourceServerListSchema,
+  lt as resourceServerOptionsSchema,
+  pt as resourceServerSchema,
+  rt as resourceServerScopeSchema,
+  oe as responseContextSchema,
+  ye as richTextComponentSchema,
+  ft as roleInsertSchema,
+  Tn as roleListSchema,
+  _t as rolePermissionInsertSchema,
+  An as rolePermissionListSchema,
+  dt as rolePermissionSchema,
+  Et as roleSchema,
+  jo as screenLinkSchema,
+  Zo as sessionInsertSchema,
+  pn as sessionSchema,
+  _n as signingKeySchema,
+  En as smsProviderSchema,
+  fn as smsSendParamsSchema,
+  ke as startSchema,
+  J as targetSchema,
+  $o as tenantInsertSchema,
+  dn as tenantSchema,
+  wn as tenantSettingsSchema,
+  at as themeInsertSchema,
+  un as themeSchema,
+  gn as tokenResponseSchema,
+  Ft as totalsSchema,
+  Yt as uiScreenSchema,
+  me as userInsertSchema,
+  Ct as userOrganizationInsertSchema,
+  Nn as userOrganizationSchema,
+  gt as userPermissionInsertSchema,
+  yn as userPermissionListSchema,
+  ut as userPermissionSchema,
+  In as userPermissionWithDetailsListSchema,
+  mt as userPermissionWithDetailsSchema,
+  Pt as userResponseSchema,
+  ht as userRoleInsertSchema,
+  Cn as userRoleListSchema,
+  bt as userRoleSchema,
+  he as userSchema,
+  We as verificationMethodsSchema,
+  Ao as widgetComponentSchema,
+  it as widgetSchema
 };