@authhero/adapter-interfaces 1.10.3 → 1.12.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/dist/adapter-interfaces.cjs +1 -1
  2. package/dist/adapter-interfaces.d.ts +1955 -568
  3. package/dist/adapter-interfaces.mjs +762 -608
  4. package/package.json +1 -1
package/dist/adapter-interfaces.mjs CHANGED
@@ -1,27 +1,29 @@
1
1
  import { z as e } from "@hono/zod-openapi";
2
- const s = e.object({
2
+ const r = e.object({
3
3
  created_at: e.string(),
4
4
  updated_at: e.string()
5
- }), V = e.object({
5
+ }), Q = e.object({
6
6
  id: e.string(),
7
7
  version: e.string().optional()
8
- }), Y = e.object({
8
+ }), Z = e.object({
9
9
  name: e.string(),
10
10
  version: e.string()
11
- }), Q = e.object({
11
+ }), $ = e.object({
12
12
  name: e.string(),
13
- value: e.string()
14
- }), N = e.object({
13
+ // Optional on writes so PATCH callers can omit the value to preserve the
14
+ // existing secret. The adapter merges by name when value is missing.
15
+ value: e.string().optional()
16
+ }), w = e.object({
15
17
  name: e.string().max(255),
16
18
  code: e.string().max(1e5),
17
- supported_triggers: e.array(V).optional(),
19
+ supported_triggers: e.array(Q).optional(),
18
20
  runtime: e.string().max(50).optional(),
19
- dependencies: e.array(Y).optional(),
20
- secrets: e.array(Q).optional()
21
- }), Lo = N.partial().extend({
21
+ dependencies: e.array(Z).optional(),
22
+ secrets: e.array($).optional()
23
+ }), Wo = w.partial().extend({
22
24
  status: e.enum(["draft", "built"]).optional(),
23
25
  deployed_at: e.string().optional()
24
- }), vo = N.extend({
26
+ }), zo = w.extend({
25
27
  id: e.string(),
26
28
  tenant_id: e.string(),
27
29
  status: e.enum(["draft", "built"]).default("built"),
@@ -33,13 +35,13 @@ const s = e.object({
33
35
  value: e.string().optional()
34
36
  })
35
37
  ).optional(),
36
- ...s.shape
37
- }), Z = e.enum([
38
+ ...r.shape
39
+ }), J = e.enum([
38
40
  "user_action",
39
41
  "admin_action",
40
42
  "system",
41
43
  "api"
42
- ]), $ = e.object({
44
+ ]), ee = e.object({
43
45
  type: e.enum(["user", "admin", "system", "api_key", "client_credentials"]),
44
46
  id: e.string().optional(),
45
47
  email: e.string().optional(),
@@ -47,13 +49,13 @@ const s = e.object({
47
49
  org_name: e.string().optional(),
48
50
  scopes: e.array(e.string()).optional(),
49
51
  client_id: e.string().optional()
50
- }), J = e.object({
52
+ }), te = e.object({
51
53
  type: e.string(),
52
54
  id: e.string(),
53
55
  before: e.record(e.unknown()).optional(),
54
56
  after: e.record(e.unknown()).optional(),
55
57
  diff: e.record(e.object({ old: e.unknown(), new: e.unknown() })).optional()
56
- }), ee = e.object({
58
+ }), oe = e.object({
57
59
  method: e.string(),
58
60
  path: e.string(),
59
61
  query: e.record(e.string()).optional(),
@@ -61,56 +63,56 @@ const s = e.object({
61
63
  ip: e.string(),
62
64
  user_agent: e.string().optional(),
63
65
  correlation_id: e.string().optional()
64
- }), te = e.object({
66
+ }), ne = e.object({
65
67
  status_code: e.number(),
66
68
  body: e.unknown().optional()
67
- }), oe = e.object({
69
+ }), ie = e.object({
68
70
  country_code: e.string(),
69
71
  city_name: e.string(),
70
72
  latitude: e.string(),
71
73
  longitude: e.string(),
72
74
  time_zone: e.string(),
73
75
  continent_code: e.string()
74
- }), ne = e.object({
76
+ }), ae = e.object({
75
77
  name: e.string(),
76
78
  version: e.string(),
77
79
  env: e.record(e.string()).optional()
78
- }), ie = e.object({
80
+ }), re = e.object({
79
81
  tenant_id: e.string(),
80
82
  event_type: e.string(),
81
83
  log_type: e.string(),
82
84
  description: e.string().optional(),
83
- category: Z,
84
- actor: $,
85
- target: J,
86
- request: ee,
87
- response: te.optional(),
85
+ category: J,
86
+ actor: ee,
87
+ target: te,
88
+ request: oe,
89
+ response: ne.optional(),
88
90
  connection: e.string().optional(),
89
91
  strategy: e.string().optional(),
90
92
  strategy_type: e.string().optional(),
91
93
  audience: e.string().optional(),
92
94
  scope: e.string().optional(),
93
- location: oe.optional(),
94
- auth0_client: ne.optional(),
95
+ location: ie.optional(),
96
+ auth0_client: ae.optional(),
95
97
  hostname: e.string(),
96
98
  is_mobile: e.boolean().optional(),
97
99
  timestamp: e.string()
98
- }), ko = ie.extend({
100
+ }), Ko = re.extend({
99
101
  id: e.string()
100
- }), Uo = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), Fo = e.enum([
102
+ }), qo = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), Xo = e.enum([
101
103
  "CREATE_USER",
102
104
  "GET_USER",
103
105
  "UPDATE_USER",
104
106
  "SEND_REQUEST",
105
107
  "SEND_EMAIL"
106
- ]), xo = e.enum(["VERIFY_EMAIL"]), ae = e.object({
108
+ ]), Vo = e.enum(["VERIFY_EMAIL"]), se = e.object({
107
109
  require_mx_record: e.boolean().optional(),
108
110
  block_aliases: e.boolean().optional(),
109
111
  block_free_emails: e.boolean().optional(),
110
112
  block_disposable_emails: e.boolean().optional(),
111
113
  blocklist: e.array(e.string()).optional(),
112
114
  allowlist: e.array(e.string()).optional()
113
- }), se = e.object({
115
+ }), le = e.object({
114
116
  id: e.string(),
115
117
  alias: e.string().max(100).optional(),
116
118
  type: e.literal("AUTH0"),
@@ -122,7 +124,7 @@ const s = e.object({
122
124
  user_id: e.string(),
123
125
  changes: e.record(e.string(), e.any())
124
126
  })
125
- }), re = e.object({
127
+ }), pe = e.object({
126
128
  id: e.string(),
127
129
  alias: e.string().max(100).optional(),
128
130
  type: e.literal("EMAIL"),
@@ -131,9 +133,9 @@ const s = e.object({
131
133
  mask_output: e.boolean().optional(),
132
134
  params: e.object({
133
135
  email: e.string(),
134
- rules: ae.optional()
136
+ rules: se.optional()
135
137
  })
136
- }), le = e.enum(["change-email", "account", "custom"]), ce = e.object({
138
+ }), ce = e.enum(["change-email", "account", "custom"]), de = e.object({
137
139
  id: e.string(),
138
140
  alias: e.string().max(100).optional(),
139
141
  type: e.literal("REDIRECT"),
@@ -141,32 +143,32 @@ const s = e.object({
141
143
  allow_failure: e.boolean().optional(),
142
144
  mask_output: e.boolean().optional(),
143
145
  params: e.object({
144
- target: le.openapi({
146
+ target: ce.openapi({
145
147
  description: "The predefined target to redirect to, or 'custom' for a custom URL"
146
148
  }),
147
149
  custom_url: e.string().optional().openapi({
148
150
  description: "Custom URL to redirect to when target is 'custom'"
149
151
  })
150
152
  })
151
- }), pe = e.union([
152
- se,
153
- re,
154
- ce
155
- ]), _e = e.object({
153
+ }), _e = e.union([
154
+ le,
155
+ pe,
156
+ de
157
+ ]), ge = e.object({
156
158
  name: e.string().min(1).max(150).openapi({
157
159
  description: "The name of the flow"
158
160
  }),
159
161
  // Actions is an array of action steps (Auth0 stores as JSON blob)
160
- actions: e.array(pe).optional().default([]).openapi({
162
+ actions: e.array(_e).optional().default([]).openapi({
161
163
  description: "The list of actions to execute in sequence"
162
164
  })
163
- }), Po = _e.extend({
164
- ...s.shape,
165
+ }), Yo = ge.extend({
166
+ ...r.shape,
165
167
  id: e.string().openapi({
166
168
  description: "Unique identifier for the flow",
167
169
  example: "af_12tMpdJ3iek7svMyZkSh5M"
168
170
  })
169
- }), Mo = e.object({
171
+ }), Qo = e.object({
170
172
  page: e.string().min(0).optional().default("0").transform((t) => parseInt(t, 10)).openapi({
171
173
  description: "The page number where 0 is the first page"
172
174
  }),
@@ -182,12 +184,12 @@ const s = e.object({
182
184
  q: e.string().optional().openapi({
183
185
  description: "A lucene query string used to filter the results"
184
186
  })
185
- }), Ho = e.object({
187
+ }), Zo = e.object({
186
188
  start: e.number(),
187
189
  limit: e.number(),
188
190
  length: e.number(),
189
191
  total: e.number().optional()
190
- }), de = e.object({
192
+ }), ue = e.object({
191
193
  email: e.string().optional(),
192
194
  email_verified: e.boolean().optional(),
193
195
  name: e.string().optional(),
@@ -196,7 +198,7 @@ const s = e.object({
196
198
  phone_number: e.string().optional(),
197
199
  phone_verified: e.boolean().optional(),
198
200
  family_name: e.string().optional()
199
- }).catchall(e.any()), ge = e.object({
201
+ }).catchall(e.any()), me = e.object({
200
202
  connection: e.string(),
201
203
  user_id: e.string(),
202
204
  provider: e.string(),
@@ -209,8 +211,8 @@ const s = e.object({
209
211
  access_token: e.string().optional(),
210
212
  access_token_secret: e.string().optional(),
211
213
  refresh_token: e.string().optional(),
212
- profileData: de.optional()
213
- }), ue = e.object({
214
+ profileData: ue.optional()
215
+ }), he = e.object({
214
216
  formatted: e.string().optional(),
215
217
  // Full mailing address
216
218
  street_address: e.string().optional(),
@@ -223,7 +225,7 @@ const s = e.object({
223
225
  // Zip code or postal code
224
226
  country: e.string().optional()
225
227
  // Country name
226
- }).optional(), w = e.object({
228
+ }).optional(), j = e.object({
227
229
  email: e.string().optional().transform((t) => t && t.toLowerCase()),
228
230
  username: e.string().refine((t) => !t.includes("@"), {
229
231
  message: 'Usernames must not contain "@". Use the email field for email addresses.'
@@ -255,8 +257,8 @@ const s = e.object({
255
257
  zoneinfo: e.string().optional(),
256
258
  // e.g., "Europe/Paris"
257
259
  // OIDC address claim (OIDC Core 5.1.1)
258
- address: ue
259
- }), me = w.extend({
260
+ address: he
261
+ }), be = j.extend({
260
262
  email_verified: e.boolean().default(!1),
261
263
  verify_email: e.boolean().optional(),
262
264
  last_ip: e.string().optional(),
@@ -279,33 +281,33 @@ const s = e.object({
279
281
  hash: e.string(),
280
282
  algorithm: e.string()
281
283
  }).optional()
282
- }), he = e.object({
283
- ...me.omit({ password: !0 }).shape,
284
- ...s.shape,
284
+ }), fe = e.object({
285
+ ...be.omit({ password: !0 }).shape,
286
+ ...r.shape,
285
287
  user_id: e.string(),
286
288
  provider: e.string(),
287
289
  is_social: e.boolean(),
288
290
  email: e.string().optional(),
289
291
  login_count: e.number().default(0),
290
- identities: e.array(ge).optional()
291
- }), Go = he.omit({
292
+ identities: e.array(me).optional()
293
+ }), $o = fe.omit({
292
294
  registration_completed_at: !0
293
- }), Bo = w.extend({
295
+ }), Jo = j.extend({
294
296
  login_count: e.number(),
295
297
  multifactor: e.array(e.string()).optional(),
296
298
  last_ip: e.string().optional(),
297
299
  last_login: e.string().optional(),
298
300
  user_id: e.string()
299
301
  }).catchall(e.any());
300
- let be = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", fe = (t = 21) => {
302
+ let Ee = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Se = (t = 21) => {
301
303
  let o = "", i = crypto.getRandomValues(new Uint8Array(t |= 0));
302
304
  for (; t--; )
303
- o += be[i[t] & 63];
305
+ o += Ee[i[t] & 63];
304
306
  return o;
305
307
  };
306
- const Ee = e.object({
307
- client_id: e.string().openapi({
308
- description: "ID of this client."
308
+ const ye = e.object({
309
+ client_id: e.string().optional().openapi({
310
+ description: "ID of this client. Generated server-side if omitted (Auth0 behavior)."
309
311
  }),
310
312
  name: e.string().min(1).openapi({
311
313
  description: "Name of this client (min length: 1 character, does not allow < or >)."
@@ -316,7 +318,7 @@ const Ee = e.object({
316
318
  global: e.boolean().default(!1).openapi({
317
319
  description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)."
318
320
  }),
319
- client_secret: e.string().default(() => fe()).optional().openapi({
321
+ client_secret: e.string().default(() => Se()).optional().openapi({
320
322
  description: "Client secret (which you must not make public)."
321
323
  }),
322
324
  app_type: e.enum([
@@ -439,7 +441,34 @@ const Ee = e.object({
439
441
  description: "Initiate login uri, must be https"
440
442
  }),
441
443
  native_social_login: e.record(e.any()).default({}).optional(),
442
- refresh_token: e.record(e.any()).default({}).optional().openapi({
444
+ refresh_token: e.object({
445
+ rotation_type: e.enum(["rotating", "non-rotating"]).optional().openapi({
446
+ description: "Whether refresh tokens for this client are rotated on every exchange (Auth0 'rotating' behavior) or kept stable (legacy non-rotating). Defaults to 'non-rotating' when unset."
447
+ }),
448
+ leeway: e.number().int().min(0).max(600).optional().openapi({
449
+ description: "Seconds after a parent token's first rotation during which presenting it again still mints a fresh sibling child instead of triggering reuse-detection. Defaults to 30s when unset."
450
+ }),
451
+ // Auth0-compatible fields. Listed explicitly (rather than using
452
+ // .passthrough()) so they survive parse cycles AND keep type info,
453
+ // without tripping dts-bundle-generator's handling of zod's
454
+ // `objectInputType`. Not yet honored by the engine — added so values
455
+ // round-trip cleanly when migrating tenants from Auth0.
456
+ expiration_type: e.enum(["expiring", "non-expiring"]).optional().openapi({
457
+ description: "Auth0-compatible: whether refresh tokens expire."
458
+ }),
459
+ token_lifetime: e.number().int().min(0).optional().openapi({
460
+ description: "Auth0-compatible: refresh-token absolute lifetime in seconds."
461
+ }),
462
+ infinite_token_lifetime: e.boolean().optional().openapi({
463
+ description: "Auth0-compatible: when true, refresh tokens have no absolute expiry."
464
+ }),
465
+ idle_token_lifetime: e.number().int().min(0).optional().openapi({
466
+ description: "Auth0-compatible: refresh-token idle (sliding) lifetime in seconds."
467
+ }),
468
+ infinite_idle_token_lifetime: e.boolean().optional().openapi({
469
+ description: "Auth0-compatible: when true, refresh tokens have no idle expiry."
470
+ })
471
+ }).default({}).optional().openapi({
443
472
  description: "Refresh token configuration"
444
473
  }),
445
474
  default_organization: e.record(e.any()).default({}).optional().openapi({
@@ -488,11 +517,14 @@ const Ee = e.object({
488
517
  user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({
489
518
  description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies."
490
519
  })
491
- }), Wo = e.object({
520
+ }), en = e.object({
492
521
  created_at: e.string(),
493
522
  updated_at: e.string(),
494
- ...Ee.shape
495
- }), Se = e.object({
523
+ ...ye.shape,
524
+ // Insert allows omitting (server-generated to match Auth0). The read schema
525
+ // always has it — the row in storage is non-null.
526
+ client_id: e.string()
527
+ }), Ae = e.object({
496
528
  client_id: e.string().min(1).openapi({
497
529
  description: "ID of the client."
498
530
  }),
@@ -517,37 +549,37 @@ const Ee = e.object({
517
549
  authorization_details_types: e.array(e.string()).optional().openapi({
518
550
  description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement."
519
551
  })
520
- }), ye = e.object({
552
+ }), Ie = e.object({
521
553
  id: e.string().openapi({
522
554
  description: "ID of the client grant."
523
555
  }),
524
- ...Se.shape,
556
+ ...Ae.shape,
525
557
  created_at: e.string().optional(),
526
558
  updated_at: e.string().optional()
527
- }), Ko = e.array(ye), Ae = e.enum(["iat", "rat"]), Ie = e.object({
559
+ }), tn = e.array(Ie), Ce = e.enum(["iat", "rat"]), Te = e.object({
528
560
  id: e.string(),
529
561
  token_hash: e.string(),
530
- type: Ae,
562
+ type: Ce,
531
563
  client_id: e.string().optional(),
532
564
  sub: e.string().optional(),
533
565
  constraints: e.record(e.unknown()).optional(),
534
566
  single_use: e.boolean().default(!1),
535
567
  expires_at: e.string().optional()
536
- }), zo = e.object({
568
+ }), on = e.object({
537
569
  created_at: e.string(),
538
570
  used_at: e.string().optional(),
539
571
  revoked_at: e.string().optional(),
540
- ...Ie.shape
572
+ ...Te.shape
541
573
  }), m = e.object({
542
574
  x: e.number(),
543
575
  y: e.number()
544
576
  });
545
- var j = /* @__PURE__ */ ((t) => (t.RICH_TEXT = "RICH_TEXT", t.NEXT_BUTTON = "NEXT_BUTTON", t.BACK_BUTTON = "BACK_BUTTON", t.SUBMIT_BUTTON = "SUBMIT_BUTTON", t.DIVIDER = "DIVIDER", t.TEXT = "TEXT", t.EMAIL = "EMAIL", t.PASSWORD = "PASSWORD", t.NUMBER = "NUMBER", t.PHONE = "PHONE", t.DATE = "DATE", t.CHECKBOX = "CHECKBOX", t.RADIO = "RADIO", t.SELECT = "SELECT", t.HIDDEN = "HIDDEN", t.LEGAL = "LEGAL", t))(j || {}), R = /* @__PURE__ */ ((t) => (t.BLOCK = "BLOCK", t.FIELD = "FIELD", t))(R || {});
546
- const I = e.object({
577
+ var R = /* @__PURE__ */ ((t) => (t.RICH_TEXT = "RICH_TEXT", t.NEXT_BUTTON = "NEXT_BUTTON", t.BACK_BUTTON = "BACK_BUTTON", t.SUBMIT_BUTTON = "SUBMIT_BUTTON", t.DIVIDER = "DIVIDER", t.TEXT = "TEXT", t.EMAIL = "EMAIL", t.PASSWORD = "PASSWORD", t.NUMBER = "NUMBER", t.PHONE = "PHONE", t.DATE = "DATE", t.CHECKBOX = "CHECKBOX", t.RADIO = "RADIO", t.SELECT = "SELECT", t.HIDDEN = "HIDDEN", t.LEGAL = "LEGAL", t))(R || {}), k = /* @__PURE__ */ ((t) => (t.BLOCK = "BLOCK", t.FIELD = "FIELD", t))(k || {});
578
+ const C = e.object({
547
579
  id: e.string(),
548
- category: e.nativeEnum(R),
549
- type: e.nativeEnum(j)
550
- }), Ce = I.extend({
580
+ category: e.nativeEnum(k),
581
+ type: e.nativeEnum(R)
582
+ }), Oe = C.extend({
551
583
  category: e.literal(
552
584
  "BLOCK"
553
585
  /* BLOCK */
@@ -559,7 +591,7 @@ const I = e.object({
559
591
  config: e.object({
560
592
  content: e.string()
561
593
  }).passthrough()
562
- }), Te = I.extend({
594
+ }), Ne = C.extend({
563
595
  category: e.literal(
564
596
  "BLOCK"
565
597
  /* BLOCK */
@@ -581,7 +613,7 @@ const I = e.object({
581
613
  config: e.object({
582
614
  text: e.string()
583
615
  }).passthrough()
584
- }), Oe = I.extend({
616
+ }), we = C.extend({
585
617
  category: e.literal(
586
618
  "FIELD"
587
619
  /* FIELD */
@@ -595,7 +627,7 @@ const I = e.object({
595
627
  config: e.object({
596
628
  text: e.string()
597
629
  }).passthrough()
598
- }), Ne = I.extend({
630
+ }), je = C.extend({
599
631
  category: e.literal(
600
632
  "FIELD"
601
633
  /* FIELD */
@@ -648,19 +680,19 @@ const I = e.object({
648
680
  label: e.string().optional(),
649
681
  placeholder: e.string().optional()
650
682
  }).passthrough()
651
- }), we = e.object({
683
+ }), Re = e.object({
652
684
  id: e.string(),
653
685
  category: e.string(),
654
686
  type: e.string()
655
- }).passthrough(), je = e.union([
656
- Ce,
657
- Te,
687
+ }).passthrough(), ke = e.union([
658
688
  Oe,
659
689
  Ne,
660
- we
690
+ we,
691
+ je,
692
+ Re
661
693
  ]);
662
- var Re = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(Re || {});
663
- const De = e.object({
694
+ var De = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(De || {});
695
+ const ve = e.object({
664
696
  id: e.string(),
665
697
  type: e.literal(
666
698
  "STEP"
@@ -669,7 +701,7 @@ const De = e.object({
669
701
  coordinates: m,
670
702
  alias: e.string().optional(),
671
703
  config: e.object({
672
- components: e.array(je),
704
+ components: e.array(ke),
673
705
  next_node: e.string()
674
706
  }).passthrough()
675
707
  }), Le = e.object({
@@ -684,7 +716,7 @@ const De = e.object({
684
716
  flow_id: e.string(),
685
717
  next_node: e.string()
686
718
  })
687
- }), ve = e.object({
719
+ }), Ue = e.object({
688
720
  id: e.string(),
689
721
  type: e.literal(
690
722
  "ACTION"
@@ -706,47 +738,47 @@ const De = e.object({
706
738
  description: "The next node to navigate to after action (for non-redirect actions)"
707
739
  })
708
740
  }).passthrough()
709
- }), ke = e.object({
741
+ }), xe = e.object({
710
742
  id: e.string(),
711
743
  type: e.string(),
712
744
  coordinates: m
713
- }).passthrough(), Ue = e.union([
714
- De,
715
- Le,
745
+ }).passthrough(), Fe = e.union([
716
746
  ve,
717
- ke
718
- ]), Fe = e.object({
747
+ Le,
748
+ Ue,
749
+ xe
750
+ ]), Pe = e.object({
719
751
  next_node: e.string(),
720
752
  coordinates: m
721
- }).passthrough(), xe = e.object({
753
+ }).passthrough(), Me = e.object({
722
754
  resume_flow: e.boolean().optional(),
723
755
  coordinates: m
724
- }).passthrough(), Pe = e.object({
756
+ }).passthrough(), He = e.object({
725
757
  id: e.string(),
726
758
  name: e.string(),
727
759
  languages: e.object({
728
760
  primary: e.string()
729
761
  }).passthrough(),
730
- nodes: e.array(Ue),
731
- start: Fe,
732
- ending: xe,
762
+ nodes: e.array(Fe),
763
+ start: Pe,
764
+ ending: Me,
733
765
  created_at: e.string(),
734
766
  updated_at: e.string(),
735
767
  links: e.object({
736
768
  sdkSrc: e.string().optional(),
737
769
  sdk_src: e.string().optional()
738
770
  }).passthrough()
739
- }).passthrough(), qo = Pe.omit({
771
+ }).passthrough(), nn = He.omit({
740
772
  id: !0,
741
773
  created_at: !0,
742
774
  updated_at: !0
743
775
  });
744
- var D = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.ID_TOKEN = "id_token", t.TOKEN_ID_TOKEN = "token id_token", t.CODE = "code", t))(D || {}), L = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(L || {}), v = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(v || {});
745
- const Me = e.object({
776
+ var D = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.ID_TOKEN = "id_token", t.TOKEN_ID_TOKEN = "token id_token", t.CODE = "code", t))(D || {}), v = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(v || {}), L = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(L || {});
777
+ const Ge = e.object({
746
778
  client_id: e.string(),
747
779
  act_as: e.string().optional(),
748
780
  response_type: e.nativeEnum(D).optional(),
749
- response_mode: e.nativeEnum(L).optional(),
781
+ response_mode: e.nativeEnum(v).optional(),
750
782
  redirect_uri: e.string().optional(),
751
783
  audience: e.string().optional(),
752
784
  organization: e.string().optional(),
@@ -754,7 +786,7 @@ const Me = e.object({
754
786
  nonce: e.string().optional(),
755
787
  scope: e.string().optional(),
756
788
  prompt: e.string().optional(),
757
- code_challenge_method: e.nativeEnum(v).optional(),
789
+ code_challenge_method: e.nativeEnum(L).optional(),
758
790
  code_challenge: e.string().optional(),
759
791
  username: e.string().optional(),
760
792
  ui_locales: e.string().optional(),
@@ -766,15 +798,20 @@ const Me = e.object({
766
798
  acr_values: e.string().optional(),
767
799
  // The following fields are not available in Auth0
768
800
  vendor_id: e.string().optional()
769
- }), Xo = e.object({
801
+ }), an = e.object({
770
802
  colors: e.object({
771
803
  primary: e.string(),
772
- page_background: e.object({
773
- type: e.string().optional(),
774
- start: e.string().optional(),
775
- end: e.string().optional(),
776
- angle_deg: e.number().optional()
777
- }).optional()
804
+ // Auth0 supports either a hex color string ("#ffffff") or a gradient
805
+ // object. Match both shapes so SDK callers don't get rejected.
806
+ page_background: e.union([
807
+ e.string(),
808
+ e.object({
809
+ type: e.string().optional(),
810
+ start: e.string().optional(),
811
+ end: e.string().optional(),
812
+ angle_deg: e.number().optional()
813
+ })
814
+ ]).optional()
778
815
  }).optional(),
779
816
  logo_url: e.string().optional(),
780
817
  favicon_url: e.string().optional(),
@@ -782,7 +819,7 @@ const Me = e.object({
782
819
  font: e.object({
783
820
  url: e.string()
784
821
  }).optional()
785
- }), He = e.enum([
822
+ }), Be = e.enum([
786
823
  "password_reset",
787
824
  "email_verification",
788
825
  "otp",
@@ -790,7 +827,7 @@ const Me = e.object({
790
827
  "authorization_code",
791
828
  "oauth2_state",
792
829
  "ticket"
793
- ]), Ge = e.object({
830
+ ]), We = e.object({
794
831
  code_id: e.string().openapi({
795
832
  description: "The code that will be used in for instance an email verification flow"
796
833
  }),
@@ -800,7 +837,7 @@ const Me = e.object({
800
837
  connection_id: e.string().optional().openapi({
801
838
  description: "The connection that the code is connected to"
802
839
  }),
803
- code_type: He,
840
+ code_type: Be,
804
841
  code_verifier: e.string().optional().openapi({
805
842
  description: "The code verifier used in PKCE in outbound flows"
806
843
  }),
@@ -825,10 +862,10 @@ const Me = e.object({
825
862
  expires_at: e.string(),
826
863
  used_at: e.string().optional(),
827
864
  user_id: e.string().optional()
828
- }), Vo = e.object({
829
- ...Ge.shape,
865
+ }), rn = e.object({
866
+ ...We.shape,
830
867
  created_at: e.string()
831
- }), Be = e.object({
868
+ }), ze = e.object({
832
869
  kid: e.string().optional(),
833
870
  team_id: e.string().optional(),
834
871
  realms: e.string().optional(),
@@ -940,12 +977,29 @@ const Me = e.object({
940
977
  }).optional(),
941
978
  // Controls when root user attributes are updated from external IdP
942
979
  set_user_root_attributes: e.enum(["on_each_login", "on_first_login", "never_on_login"]).optional()
943
- }), We = e.object({
980
+ });
981
+ function T(t) {
982
+ if (t !== null) {
983
+ if (Array.isArray(t))
984
+ return t.filter((o) => o !== null).map(T);
985
+ if (t && typeof t == "object") {
986
+ const o = {};
987
+ for (const [i, h] of Object.entries(t))
988
+ h !== null && (o[i] = T(h));
989
+ return o;
990
+ }
991
+ return t;
992
+ }
993
+ }
994
+ const Ke = e.object({
944
995
  id: e.string().optional(),
945
996
  name: e.string(),
946
997
  display_name: e.string().optional(),
947
998
  strategy: e.string(),
948
- options: Be.default({}),
999
+ options: e.preprocess(
1000
+ (t) => t === null ? {} : T(t),
1001
+ ze
1002
+ ).default({}),
949
1003
  enabled_clients: e.array(e.string()).default([]).optional(),
950
1004
  response_type: e.custom().optional(),
951
1005
  response_mode: e.custom().optional(),
@@ -953,11 +1007,11 @@ const Me = e.object({
953
1007
  show_as_button: e.boolean().optional(),
954
1008
  metadata: e.record(e.any()).optional(),
955
1009
  is_system: e.boolean().optional()
956
- }), Yo = e.object({
1010
+ }), sn = e.object({
957
1011
  id: e.string(),
958
1012
  created_at: e.string().transform((t) => t === null ? "" : t),
959
1013
  updated_at: e.string().transform((t) => t === null ? "" : t)
960
- }).extend(We.shape), Ke = e.object({
1014
+ }).extend(Ke.shape), qe = e.object({
961
1015
  domain: e.string(),
962
1016
  custom_domain_id: e.string().optional(),
963
1017
  type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -971,7 +1025,7 @@ const Me = e.object({
971
1025
  "null"
972
1026
  ]).optional(),
973
1027
  domain_metadata: e.record(e.string().max(255)).optional()
974
- }), ze = e.discriminatedUnion("name", [
1028
+ }), Xe = e.discriminatedUnion("name", [
975
1029
  e.object({
976
1030
  name: e.literal("txt"),
977
1031
  record: e.string(),
@@ -982,35 +1036,35 @@ const Me = e.object({
982
1036
  http_body: e.string(),
983
1037
  http_url: e.string()
984
1038
  })
985
- ]), qe = e.object({
986
- ...Ke.shape,
1039
+ ]), Ve = e.object({
1040
+ ...qe.shape,
987
1041
  custom_domain_id: e.string(),
988
1042
  primary: e.boolean(),
989
1043
  status: e.enum(["disabled", "pending", "pending_verification", "ready"]),
990
1044
  origin_domain_name: e.string().optional(),
991
1045
  verification: e.object({
992
- methods: e.array(ze)
1046
+ methods: e.array(Xe)
993
1047
  }).optional(),
994
1048
  tls_policy: e.string().optional()
995
- }), Qo = qe.extend({
1049
+ }), ln = Ve.extend({
996
1050
  tenant_id: e.string()
997
- }), C = e.object({
1051
+ }), O = e.object({
998
1052
  id: e.string(),
999
1053
  order: e.number().optional(),
1000
1054
  visible: e.boolean().optional().default(!0)
1001
- }), l = C.extend({
1055
+ }), l = O.extend({
1002
1056
  category: e.literal("BLOCK").optional()
1003
- }), Xe = l.extend({
1057
+ }), Ye = l.extend({
1004
1058
  type: e.literal("DIVIDER"),
1005
1059
  config: e.object({
1006
1060
  text: e.string().optional()
1007
1061
  }).optional()
1008
- }), Ve = l.extend({
1062
+ }), Qe = l.extend({
1009
1063
  type: e.literal("HTML"),
1010
1064
  config: e.object({
1011
1065
  content: e.string().optional()
1012
1066
  }).optional()
1013
- }), Ye = l.extend({
1067
+ }), Ze = l.extend({
1014
1068
  type: e.literal("IMAGE"),
1015
1069
  config: e.object({
1016
1070
  src: e.string().optional(),
@@ -1018,55 +1072,55 @@ const Me = e.object({
1018
1072
  width: e.number().optional(),
1019
1073
  height: e.number().optional()
1020
1074
  }).optional()
1021
- }), Qe = l.extend({
1075
+ }), $e = l.extend({
1022
1076
  type: e.literal("JUMP_BUTTON"),
1023
1077
  config: e.object({
1024
1078
  text: e.string().optional(),
1025
1079
  target_step: e.string().optional()
1026
1080
  })
1027
- }), Ze = l.extend({
1081
+ }), Je = l.extend({
1028
1082
  type: e.literal("RESEND_BUTTON"),
1029
1083
  config: e.object({
1030
1084
  text: e.string().optional(),
1031
1085
  resend_action: e.string().optional()
1032
1086
  })
1033
- }), $e = l.extend({
1087
+ }), et = l.extend({
1034
1088
  type: e.literal("NEXT_BUTTON"),
1035
1089
  config: e.object({
1036
1090
  text: e.string().optional()
1037
1091
  })
1038
- }), Je = l.extend({
1092
+ }), tt = l.extend({
1039
1093
  type: e.literal("PREVIOUS_BUTTON"),
1040
1094
  config: e.object({
1041
1095
  text: e.string().optional()
1042
1096
  })
1043
- }), et = l.extend({
1097
+ }), ot = l.extend({
1044
1098
  type: e.literal("RICH_TEXT"),
1045
1099
  config: e.object({
1046
1100
  content: e.string().optional()
1047
1101
  }).optional()
1048
- }), T = C.extend({
1102
+ }), N = O.extend({
1049
1103
  category: e.literal("WIDGET").optional(),
1050
1104
  label: e.string().min(1).optional(),
1051
1105
  hint: e.string().min(1).max(500).optional(),
1052
1106
  required: e.boolean().optional(),
1053
1107
  sensitive: e.boolean().optional()
1054
- }), tt = T.extend({
1108
+ }), nt = N.extend({
1055
1109
  type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
1056
1110
  config: e.object({
1057
1111
  credential_type: e.string().optional()
1058
1112
  })
1059
- }), ot = T.extend({
1113
+ }), it = N.extend({
1060
1114
  type: e.literal("GMAPS_ADDRESS"),
1061
1115
  config: e.object({
1062
1116
  api_key: e.string().optional()
1063
1117
  })
1064
- }), nt = T.extend({
1118
+ }), at = N.extend({
1065
1119
  type: e.literal("RECAPTCHA"),
1066
1120
  config: e.object({
1067
1121
  site_key: e.string().optional()
1068
1122
  })
1069
- }), n = C.extend({
1123
+ }), n = O.extend({
1070
1124
  category: e.literal("FIELD").optional(),
1071
1125
  label: e.string().min(1).optional(),
1072
1126
  hint: e.string().min(1).max(500).optional(),
@@ -1079,12 +1133,12 @@ const Me = e.object({
1079
1133
  ).optional(),
1080
1134
  required: e.boolean().optional(),
1081
1135
  sensitive: e.boolean().optional()
1082
- }), it = n.extend({
1136
+ }), rt = n.extend({
1083
1137
  type: e.literal("BOOLEAN"),
1084
1138
  config: e.object({
1085
1139
  default_value: e.boolean().optional()
1086
1140
  }).optional()
1087
- }), at = n.extend({
1141
+ }), st = n.extend({
1088
1142
  type: e.literal("CARDS"),
1089
1143
  config: e.object({
1090
1144
  options: e.array(
@@ -1097,7 +1151,7 @@ const Me = e.object({
1097
1151
  ).optional(),
1098
1152
  multi_select: e.boolean().optional()
1099
1153
  }).optional()
1100
- }), st = n.extend({
1154
+ }), lt = n.extend({
1101
1155
  type: e.literal("CHOICE"),
1102
1156
  config: e.object({
1103
1157
  options: e.array(
@@ -1110,7 +1164,7 @@ const Me = e.object({
1110
1164
  multiple: e.boolean().optional(),
1111
1165
  default_value: e.union([e.string(), e.array(e.string())]).optional()
1112
1166
  }).optional()
1113
- }), rt = n.extend({
1167
+ }), pt = n.extend({
1114
1168
  type: e.literal("CUSTOM"),
1115
1169
  config: e.object({
1116
1170
  component: e.string().optional(),
@@ -1118,7 +1172,7 @@ const Me = e.object({
1118
1172
  schema: e.record(e.any()).optional(),
1119
1173
  code: e.string().optional()
1120
1174
  })
1121
- }), lt = n.extend({
1175
+ }), ct = n.extend({
1122
1176
  type: e.literal("DATE"),
1123
1177
  config: e.object({
1124
1178
  format: e.string().optional(),
@@ -1126,7 +1180,7 @@ const Me = e.object({
1126
1180
  max: e.string().optional(),
1127
1181
  default_value: e.string().optional()
1128
1182
  }).optional()
1129
- }), ct = n.extend({
1183
+ }), dt = n.extend({
1130
1184
  type: e.literal("DROPDOWN"),
1131
1185
  config: e.object({
1132
1186
  options: e.array(
@@ -1140,26 +1194,26 @@ const Me = e.object({
1140
1194
  multiple: e.boolean().optional(),
1141
1195
  default_value: e.union([e.string(), e.array(e.string())]).optional()
1142
1196
  }).optional()
1143
- }), pt = n.extend({
1197
+ }), _t = n.extend({
1144
1198
  type: e.literal("EMAIL"),
1145
1199
  config: e.object({
1146
1200
  placeholder: e.string().optional(),
1147
1201
  default_value: e.string().optional()
1148
1202
  }).optional()
1149
- }), _t = n.extend({
1203
+ }), gt = n.extend({
1150
1204
  type: e.literal("FILE"),
1151
1205
  config: e.object({
1152
1206
  accept: e.string().optional(),
1153
1207
  max_size: e.number().optional(),
1154
1208
  multiple: e.boolean().optional()
1155
1209
  }).optional()
1156
- }), dt = n.extend({
1210
+ }), ut = n.extend({
1157
1211
  type: e.literal("LEGAL"),
1158
1212
  config: e.object({
1159
1213
  text: e.string(),
1160
1214
  html: e.boolean().optional()
1161
1215
  }).optional()
1162
- }), gt = n.extend({
1216
+ }), mt = n.extend({
1163
1217
  type: e.literal("NUMBER"),
1164
1218
  config: e.object({
1165
1219
  placeholder: e.string().optional(),
@@ -1168,7 +1222,7 @@ const Me = e.object({
1168
1222
  step: e.number().optional(),
1169
1223
  default_value: e.string().optional()
1170
1224
  }).optional()
1171
- }), ut = n.extend({
1225
+ }), ht = n.extend({
1172
1226
  type: e.literal("PASSWORD"),
1173
1227
  config: e.object({
1174
1228
  placeholder: e.string().optional(),
@@ -1177,13 +1231,13 @@ const Me = e.object({
1177
1231
  forgot_password_link: e.string().optional(),
1178
1232
  default_value: e.string().optional()
1179
1233
  }).optional()
1180
- }), mt = n.extend({
1234
+ }), bt = n.extend({
1181
1235
  type: e.literal("PAYMENT"),
1182
1236
  config: e.object({
1183
1237
  provider: e.string().optional(),
1184
1238
  currency: e.string().optional()
1185
1239
  }).optional()
1186
- }), ht = n.extend({
1240
+ }), ft = n.extend({
1187
1241
  type: e.literal("SOCIAL"),
1188
1242
  config: e.object({
1189
1243
  providers: e.array(e.string()).optional(),
@@ -1198,7 +1252,7 @@ const Me = e.object({
1198
1252
  })
1199
1253
  ).optional()
1200
1254
  }).optional()
1201
- }), bt = n.extend({
1255
+ }), Et = n.extend({
1202
1256
  type: e.literal("TEL"),
1203
1257
  config: e.object({
1204
1258
  placeholder: e.string().optional(),
@@ -1206,7 +1260,7 @@ const Me = e.object({
1206
1260
  default_value: e.string().optional(),
1207
1261
  allow_email: e.boolean().optional()
1208
1262
  }).optional()
1209
- }), ft = n.extend({
1263
+ }), St = n.extend({
1210
1264
  type: e.literal("TEXT"),
1211
1265
  config: e.object({
1212
1266
  placeholder: e.string().optional(),
@@ -1214,54 +1268,54 @@ const Me = e.object({
1214
1268
  max_length: e.number().optional(),
1215
1269
  default_value: e.string().optional()
1216
1270
  }).optional()
1217
- }), Et = n.extend({
1271
+ }), yt = n.extend({
1218
1272
  type: e.literal("COUNTRY"),
1219
1273
  config: e.object({
1220
1274
  placeholder: e.string().optional(),
1221
1275
  default_value: e.string().optional()
1222
1276
  }).optional()
1223
- }), St = n.extend({
1277
+ }), At = n.extend({
1224
1278
  type: e.literal("URL"),
1225
1279
  config: e.object({
1226
1280
  placeholder: e.string().optional(),
1227
1281
  default_value: e.string().optional()
1228
1282
  }).optional()
1229
- }), yt = e.discriminatedUnion("type", [
1230
- Xe,
1231
- Ve,
1283
+ }), It = e.discriminatedUnion("type", [
1232
1284
  Ye,
1233
1285
  Qe,
1234
1286
  Ze,
1235
1287
  $e,
1236
1288
  Je,
1237
- et
1238
- ]), At = e.discriminatedUnion("type", [
1289
+ et,
1239
1290
  tt,
1240
- ot,
1241
- nt
1242
- ]), It = e.discriminatedUnion("type", [
1291
+ ot
1292
+ ]), Ct = e.discriminatedUnion("type", [
1293
+ nt,
1243
1294
  it,
1244
- at,
1245
- st,
1246
- Et,
1295
+ at
1296
+ ]), Tt = e.discriminatedUnion("type", [
1247
1297
  rt,
1298
+ st,
1248
1299
  lt,
1249
- ct,
1300
+ yt,
1250
1301
  pt,
1251
- _t,
1302
+ ct,
1252
1303
  dt,
1304
+ _t,
1253
1305
  gt,
1254
1306
  ut,
1255
1307
  mt,
1256
1308
  ht,
1257
1309
  bt,
1258
1310
  ft,
1259
- St
1260
- ]), k = e.union([
1261
- yt,
1262
- At,
1263
- It
1264
- ]), Zo = /* @__PURE__ */ new Set([
1311
+ Et,
1312
+ St,
1313
+ At
1314
+ ]), U = e.union([
1315
+ It,
1316
+ Ct,
1317
+ Tt
1318
+ ]), pn = /* @__PURE__ */ new Set([
1265
1319
  "BOOLEAN",
1266
1320
  "CARDS",
1267
1321
  "CHOICE",
@@ -1275,7 +1329,7 @@ const Me = e.object({
1275
1329
  "TEL",
1276
1330
  "TEXT",
1277
1331
  "URL"
1278
- ]), $o = e.object({
1332
+ ]), cn = e.object({
1279
1333
  id: e.string(),
1280
1334
  type: e.literal("submit"),
1281
1335
  label: e.string(),
@@ -1284,22 +1338,22 @@ const Me = e.object({
1284
1338
  order: e.number().optional(),
1285
1339
  visible: e.boolean().optional().default(!0),
1286
1340
  customizations: e.record(e.string(), e.any()).optional()
1287
- }), f = e.object({
1341
+ }), E = e.object({
1288
1342
  x: e.number(),
1289
1343
  y: e.number()
1290
- }), Ct = e.object({
1344
+ }), Ot = e.object({
1291
1345
  id: e.string(),
1292
1346
  type: e.literal("FLOW"),
1293
- coordinates: f,
1347
+ coordinates: E,
1294
1348
  alias: e.string().min(1).max(150).optional(),
1295
1349
  config: e.object({
1296
1350
  flow_id: e.string().max(30),
1297
1351
  next_node: e.string().optional()
1298
1352
  })
1299
- }), Tt = e.object({
1353
+ }), Nt = e.object({
1300
1354
  id: e.string(),
1301
1355
  type: e.literal("ROUTER"),
1302
- coordinates: f,
1356
+ coordinates: E,
1303
1357
  alias: e.string().min(1).max(150),
1304
1358
  config: e.object({
1305
1359
  rules: e.array(
@@ -1312,20 +1366,20 @@ const Me = e.object({
1312
1366
  ),
1313
1367
  fallback: e.string()
1314
1368
  })
1315
- }), Ot = e.object({
1369
+ }), wt = e.object({
1316
1370
  id: e.string(),
1317
1371
  type: e.literal("STEP"),
1318
- coordinates: f,
1372
+ coordinates: E,
1319
1373
  alias: e.string().min(1).max(150).optional(),
1320
1374
  config: e.object({
1321
- components: e.array(k),
1375
+ components: e.array(U),
1322
1376
  next_node: e.string().optional()
1323
1377
  })
1324
- }), Nt = e.discriminatedUnion("type", [
1325
- Ct,
1326
- Tt,
1327
- Ot
1328
- ]), wt = e.object({
1378
+ }), jt = e.discriminatedUnion("type", [
1379
+ Ot,
1380
+ Nt,
1381
+ wt
1382
+ ]), Rt = e.object({
1329
1383
  name: e.string().openapi({
1330
1384
  description: "The name of the form"
1331
1385
  }),
@@ -1338,11 +1392,11 @@ const Me = e.object({
1338
1392
  default: e.string().optional()
1339
1393
  }).optional(),
1340
1394
  translations: e.record(e.string(), e.any()).optional(),
1341
- nodes: e.array(Nt).optional(),
1395
+ nodes: e.array(jt).optional(),
1342
1396
  start: e.object({
1343
1397
  hidden_fields: e.array(e.object({ key: e.string(), value: e.string() })).optional(),
1344
1398
  next_node: e.string().optional(),
1345
- coordinates: f.optional()
1399
+ coordinates: E.optional()
1346
1400
  }).optional(),
1347
1401
  ending: e.object({
1348
1402
  redirection: e.object({
@@ -1350,7 +1404,7 @@ const Me = e.object({
1350
1404
  target: e.string().optional()
1351
1405
  }).optional(),
1352
1406
  after_submit: e.object({ flow_id: e.string().optional() }).optional(),
1353
- coordinates: f.optional(),
1407
+ coordinates: E.optional(),
1354
1408
  resume_flow: e.boolean().optional()
1355
1409
  }).optional(),
1356
1410
  style: e.object({ css: e.string().optional() }).optional(),
@@ -1360,42 +1414,42 @@ const Me = e.object({
1360
1414
  }).optional()
1361
1415
  }).openapi({
1362
1416
  description: "Schema for flow-based forms (matches Auth0 Forms structure)"
1363
- }), Jo = e.object({
1364
- ...s.shape,
1365
- ...wt.shape,
1417
+ }), dn = e.object({
1418
+ ...r.shape,
1419
+ ...Rt.shape,
1366
1420
  id: e.string()
1367
- }), jt = e.object({
1421
+ }), kt = e.object({
1368
1422
  id: e.number().optional(),
1369
1423
  text: e.string(),
1370
1424
  type: e.enum(["info", "error", "success", "warning"])
1371
- }), Rt = e.object({
1425
+ }), Dt = e.object({
1372
1426
  id: e.string().optional(),
1373
1427
  text: e.string(),
1374
1428
  href: e.string(),
1375
1429
  linkText: e.string().optional()
1376
- }), en = e.object({
1430
+ }), _n = e.object({
1377
1431
  /** Screen identifier for CSS targeting (e.g., 'identifier', 'enter-password', 'signup') */
1378
1432
  name: e.string().optional(),
1379
1433
  action: e.string(),
1380
1434
  method: e.enum(["POST", "GET"]),
1381
1435
  title: e.string().optional(),
1382
1436
  description: e.string().optional(),
1383
- components: e.array(k),
1384
- messages: e.array(jt).optional(),
1385
- links: e.array(Rt).optional(),
1437
+ components: e.array(U),
1438
+ messages: e.array(kt).optional(),
1439
+ links: e.array(Dt).optional(),
1386
1440
  /** Footer HTML content displayed at the very bottom of the widget (e.g., terms and conditions) */
1387
1441
  footer: e.string().optional()
1388
1442
  });
1389
- function tn(t) {
1443
+ function gn(t) {
1390
1444
  return t.category === "BLOCK";
1391
1445
  }
1392
- function on(t) {
1446
+ function un(t) {
1393
1447
  return t.category === "WIDGET";
1394
1448
  }
1395
- function nn(t) {
1449
+ function mn(t) {
1396
1450
  return t.category === "FIELD";
1397
1451
  }
1398
- const U = e.enum([
1452
+ const x = e.enum([
1399
1453
  "pre-user-registration",
1400
1454
  "post-user-registration",
1401
1455
  "post-user-login",
@@ -1411,21 +1465,21 @@ const U = e.enum([
1411
1465
  "validate-registration-username",
1412
1466
  "pre-user-deletion",
1413
1467
  "post-user-deletion"
1414
- ]), x = e.enum([
1468
+ ]), P = e.enum([
1415
1469
  "post-user-login",
1416
1470
  "post-user-registration",
1417
1471
  "post-user-update",
1418
1472
  "credentials-exchange"
1419
- ]), P = e.enum([
1473
+ ]), M = e.enum([
1420
1474
  "post-user-login",
1421
1475
  "credentials-exchange",
1422
1476
  "pre-user-registration",
1423
1477
  "post-user-registration"
1424
- ]), M = e.enum([
1478
+ ]), H = e.enum([
1425
1479
  "ensure-username",
1426
1480
  "set-preferred-username",
1427
1481
  "account-linking"
1428
- ]), an = {
1482
+ ]), hn = {
1429
1483
  "ensure-username": {
1430
1484
  name: "Ensure Username",
1431
1485
  description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1445,7 +1499,7 @@ const U = e.enum([
1445
1499
  "post-user-update"
1446
1500
  ]
1447
1501
  }
1448
- }, c = {
1502
+ }, p = {
1449
1503
  enabled: e.boolean().default(!1),
1450
1504
  synchronous: e.boolean().default(!1),
1451
1505
  priority: e.number().optional(),
@@ -1462,71 +1516,71 @@ const U = e.enum([
1462
1516
  * Everything else is opaque to the runtime. Persisted as JSON.
1463
1517
  */
1464
1518
  metadata: e.record(e.unknown()).optional()
1465
- }, Dt = e.object({
1466
- ...c,
1467
- trigger_id: U,
1519
+ }, vt = e.object({
1520
+ ...p,
1521
+ trigger_id: x,
1468
1522
  url: e.string()
1469
1523
  }), Lt = e.object({
1470
- ...c,
1524
+ ...p,
1471
1525
  trigger_id: F,
1472
1526
  form_id: e.string()
1473
- }), vt = e.object({
1474
- ...c,
1475
- trigger_id: x,
1476
- template_id: M
1477
- }), kt = e.object({
1478
- ...c,
1527
+ }), Ut = e.object({
1528
+ ...p,
1479
1529
  trigger_id: P,
1530
+ template_id: H
1531
+ }), xt = e.object({
1532
+ ...p,
1533
+ trigger_id: M,
1480
1534
  code_id: e.string()
1481
- }), sn = e.union([
1482
- Dt,
1483
- Lt,
1535
+ }), bn = e.union([
1484
1536
  vt,
1485
- kt
1486
- ]), Ut = e.object({
1487
- ...c,
1488
- trigger_id: U,
1489
- ...s.shape,
1537
+ Lt,
1538
+ Ut,
1539
+ xt
1540
+ ]), Ft = e.object({
1541
+ ...p,
1542
+ trigger_id: x,
1543
+ ...r.shape,
1490
1544
  hook_id: e.string(),
1491
1545
  url: e.string()
1492
- }), Ft = e.object({
1493
- ...c,
1546
+ }), Pt = e.object({
1547
+ ...p,
1494
1548
  trigger_id: F,
1495
- ...s.shape,
1549
+ ...r.shape,
1496
1550
  hook_id: e.string(),
1497
1551
  form_id: e.string()
1498
- }), xt = e.object({
1499
- ...c,
1500
- trigger_id: x,
1501
- ...s.shape,
1502
- hook_id: e.string(),
1503
- template_id: M
1504
- }), Pt = e.object({
1505
- ...c,
1552
+ }), Mt = e.object({
1553
+ ...p,
1506
1554
  trigger_id: P,
1507
- ...s.shape,
1555
+ ...r.shape,
1556
+ hook_id: e.string(),
1557
+ template_id: H
1558
+ }), Ht = e.object({
1559
+ ...p,
1560
+ trigger_id: M,
1561
+ ...r.shape,
1508
1562
  hook_id: e.string(),
1509
1563
  code_id: e.string()
1510
- }), rn = e.union([
1511
- Ut,
1564
+ }), fn = e.union([
1512
1565
  Ft,
1513
- xt,
1514
- Pt
1515
- ]), Mt = e.object({
1566
+ Pt,
1567
+ Mt,
1568
+ Ht
1569
+ ]), Gt = e.object({
1516
1570
  code: e.string().max(1e5),
1517
1571
  secrets: e.record(e.string()).optional()
1518
- }), ln = Mt.extend({
1572
+ }), En = Gt.extend({
1519
1573
  id: e.string(),
1520
1574
  tenant_id: e.string(),
1521
- ...s.shape
1522
- }), Ht = e.object({
1575
+ ...r.shape
1576
+ }), Bt = e.object({
1523
1577
  name: e.string().optional()
1524
- }), Gt = e.object({
1578
+ }), Wt = e.object({
1525
1579
  email: e.string().optional()
1526
- }), Bt = e.object({
1580
+ }), zt = e.object({
1527
1581
  organization_id: e.string().max(50),
1528
- inviter: Ht,
1529
- invitee: Gt,
1582
+ inviter: Bt,
1583
+ invitee: Wt,
1530
1584
  invitation_url: e.string().url(),
1531
1585
  client_id: e.string(),
1532
1586
  connection_id: e.string().optional(),
@@ -1535,13 +1589,13 @@ const U = e.enum([
1535
1589
  ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
1536
1590
  roles: e.array(e.string()).default([]).optional(),
1537
1591
  send_invitation_email: e.boolean().default(!0).optional()
1538
- }), cn = e.object({
1592
+ }), Sn = e.object({
1539
1593
  id: e.string(),
1540
1594
  organization_id: e.string().max(50),
1541
1595
  created_at: e.string().datetime(),
1542
1596
  expires_at: e.string().datetime(),
1543
1597
  ticket_id: e.string().optional()
1544
- }).extend(Bt.shape), Wt = e.object({
1598
+ }).extend(zt.shape), Kt = e.object({
1545
1599
  alg: e.enum([
1546
1600
  "RS256",
1547
1601
  "RS384",
@@ -1560,9 +1614,9 @@ const U = e.enum([
1560
1614
  x5t: e.string().optional(),
1561
1615
  x5c: e.array(e.string()).optional(),
1562
1616
  use: e.enum(["sig", "enc"]).optional()
1563
- }), pn = e.object({
1564
- keys: e.array(Wt)
1565
- }), _n = e.object({
1617
+ }), yn = e.object({
1618
+ keys: e.array(Kt)
1619
+ }), An = e.object({
1566
1620
  issuer: e.string(),
1567
1621
  authorization_endpoint: e.string(),
1568
1622
  token_endpoint: e.string(),
@@ -1586,21 +1640,21 @@ const U = e.enum([
1586
1640
  request_parameter_supported: e.boolean(),
1587
1641
  token_endpoint_auth_signing_alg_values_supported: e.array(e.string())
1588
1642
  });
1589
- var H = /* @__PURE__ */ ((t) => (t.PENDING = "pending", t.AUTHENTICATED = "authenticated", t.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", t.AWAITING_MFA = "awaiting_mfa", t.AWAITING_HOOK = "awaiting_hook", t.AWAITING_CONTINUATION = "awaiting_continuation", t.COMPLETED = "completed", t.FAILED = "failed", t.EXPIRED = "expired", t))(H || {});
1590
- const Kt = e.nativeEnum(H), zt = e.object({
1643
+ var G = /* @__PURE__ */ ((t) => (t.PENDING = "pending", t.AUTHENTICATED = "authenticated", t.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", t.AWAITING_MFA = "awaiting_mfa", t.AWAITING_HOOK = "awaiting_hook", t.AWAITING_CONTINUATION = "awaiting_continuation", t.COMPLETED = "completed", t.FAILED = "failed", t.EXPIRED = "expired", t))(G || {});
1644
+ const qt = e.nativeEnum(G), Xt = e.object({
1591
1645
  strategy: e.string(),
1592
1646
  strategy_type: e.string()
1593
- }), qt = e.object({
1647
+ }), Vt = e.object({
1594
1648
  csrf_token: e.string(),
1595
1649
  auth0Client: e.string().optional(),
1596
- authParams: Me,
1650
+ authParams: Ge,
1597
1651
  expires_at: e.string(),
1598
1652
  deleted_at: e.string().optional(),
1599
1653
  ip: e.string().optional(),
1600
1654
  useragent: e.string().optional(),
1601
1655
  session_id: e.string().optional(),
1602
1656
  authorization_url: e.string().optional(),
1603
- state: Kt.optional().default(
1657
+ state: qt.optional().default(
1604
1658
  "pending"
1605
1659
  /* PENDING */
1606
1660
  ),
@@ -1611,19 +1665,19 @@ const Kt = e.nativeEnum(H), zt = e.object({
1611
1665
  // Set once user is authenticated
1612
1666
  auth_connection: e.string().optional(),
1613
1667
  // The connection used to authenticate (may differ from primary user's connection)
1614
- auth_strategy: zt.optional(),
1668
+ auth_strategy: Xt.optional(),
1615
1669
  authenticated_at: e.string().optional()
1616
1670
  // ISO timestamp persisted for audit/metadata; not used to reject resumed sessions
1617
1671
  }).openapi({
1618
1672
  description: "This represents a login sesion"
1619
- }), dn = e.object({
1620
- ...qt.shape,
1673
+ }), In = e.object({
1674
+ ...Vt.shape,
1621
1675
  id: e.string().openapi({
1622
1676
  description: "This is is used as the state in the universal login"
1623
1677
  }),
1624
1678
  created_at: e.string(),
1625
1679
  updated_at: e.string()
1626
- }), Xt = {
1680
+ }), Yt = {
1627
1681
  // Network & System
1628
1682
  ACLS_SUMMARY: "acls_summary",
1629
1683
  ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
@@ -1777,6 +1831,8 @@ const Kt = e.nativeEnum(H), zt = e.object({
1777
1831
  SUCCESSFULLY_ACCEPTED_USER_INVITE: "si",
1778
1832
  BREACHED_PASSWORD_ON_SIGNUP: "signup_pwd_leak",
1779
1833
  SUCCESS_LOGOUT: "slo",
1834
+ SUCCESS_HOOK: "sh",
1835
+ // Custom AuthHero-specific
1780
1836
  SUCCESS_REVOCATION: "srrt",
1781
1837
  SUCCESS_SIGNUP: "ss",
1782
1838
  FAILED_SS_SSO_OPERATION: "ss_sso_failure",
@@ -1795,24 +1851,24 @@ const Kt = e.nativeEnum(H), zt = e.object({
1795
1851
  WARNING_DURING_LOGIN: "w",
1796
1852
  WARNING_SENDING_NOTIFICATION: "wn",
1797
1853
  WARNING_USER_MANAGEMENT: "wum"
1798
- }, Vt = e.string().refine(
1799
- (t) => Object.values(Xt).includes(t),
1854
+ }, Qt = e.string().refine(
1855
+ (t) => Object.values(Yt).includes(t),
1800
1856
  { message: "Invalid log type" }
1801
- ), Yt = e.object({
1857
+ ), Zt = e.object({
1802
1858
  name: e.string(),
1803
1859
  version: e.string(),
1804
1860
  env: e.object({
1805
1861
  node: e.string().optional()
1806
1862
  }).optional()
1807
- }), Qt = e.object({
1863
+ }), $t = e.object({
1808
1864
  country_code: e.string().length(2),
1809
1865
  city_name: e.string(),
1810
1866
  latitude: e.string(),
1811
1867
  longitude: e.string(),
1812
1868
  time_zone: e.string(),
1813
1869
  continent_code: e.string()
1814
- }), Zt = e.object({
1815
- type: Vt,
1870
+ }), Jt = e.object({
1871
+ type: Qt,
1816
1872
  date: e.string(),
1817
1873
  description: e.string().optional(),
1818
1874
  ip: e.string().optional(),
@@ -1831,30 +1887,93 @@ const Kt = e.nativeEnum(H), zt = e.object({
1831
1887
  strategy: e.string().optional(),
1832
1888
  strategy_type: e.string().optional(),
1833
1889
  hostname: e.string().optional(),
1834
- auth0_client: Yt.optional(),
1890
+ auth0_client: Zt.optional(),
1835
1891
  log_id: e.string().optional(),
1836
- location_info: Qt.optional()
1837
- }), gn = e.object({
1838
- ...Zt.shape,
1892
+ location_info: $t.optional()
1893
+ }), Cn = e.object({
1894
+ ...Jt.shape,
1839
1895
  log_id: e.string()
1840
- }), $t = e.object({
1896
+ }), eo = e.enum([
1897
+ "http",
1898
+ "eventbridge",
1899
+ "eventgrid",
1900
+ "splunk",
1901
+ "datadog",
1902
+ "sumo"
1903
+ ]), B = e.enum([
1904
+ "active",
1905
+ "paused",
1906
+ "suspended"
1907
+ ]), to = e.object({
1908
+ type: e.string(),
1909
+ name: e.string()
1910
+ }), oo = e.object({
1911
+ name: e.string(),
1912
+ type: eo,
1913
+ status: B.optional(),
1914
+ sink: e.record(e.string(), e.unknown()),
1915
+ filters: e.array(to).optional(),
1916
+ isPriority: e.boolean().optional()
1917
+ }), Tn = oo.extend({
1918
+ id: e.string(),
1919
+ status: B,
1920
+ created_at: e.string().optional(),
1921
+ updated_at: e.string().optional()
1922
+ }), no = e.object({
1923
+ enabled: e.boolean().optional(),
1924
+ shields: e.array(e.string()).optional(),
1925
+ admin_notification_frequency: e.array(e.string()).optional(),
1926
+ method: e.string().optional(),
1927
+ stage: e.object({
1928
+ "pre-user-registration": e.object({
1929
+ shields: e.array(e.string()).optional()
1930
+ }).optional(),
1931
+ "pre-change-password": e.object({
1932
+ shields: e.array(e.string()).optional()
1933
+ }).optional()
1934
+ }).optional()
1935
+ }), io = e.object({
1936
+ enabled: e.boolean().optional(),
1937
+ shields: e.array(e.string()).optional(),
1938
+ allowlist: e.array(e.string()).optional(),
1939
+ mode: e.string().optional(),
1940
+ max_attempts: e.number().optional()
1941
+ }), ao = e.object({
1942
+ enabled: e.boolean().optional(),
1943
+ shields: e.array(e.string()).optional(),
1944
+ allowlist: e.array(e.string()).optional(),
1945
+ stage: e.object({
1946
+ "pre-login": e.object({
1947
+ max_attempts: e.number().optional(),
1948
+ rate: e.number().optional()
1949
+ }).optional(),
1950
+ "pre-user-registration": e.object({
1951
+ max_attempts: e.number().optional(),
1952
+ rate: e.number().optional()
1953
+ }).optional()
1954
+ }).optional()
1955
+ }), ro = e.object({
1956
+ breached_password_detection: no.optional(),
1957
+ brute_force_protection: io.optional(),
1958
+ suspicious_ip_throttling: ao.optional()
1959
+ }), so = e.object({
1841
1960
  id: e.string().optional(),
1842
1961
  user_id: e.string(),
1843
1962
  password: e.string(),
1844
1963
  algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
1845
1964
  is_current: e.boolean().default(!0)
1846
- }), un = $t.extend({
1965
+ }), On = so.extend({
1847
1966
  id: e.string(),
1848
1967
  created_at: e.string(),
1849
1968
  updated_at: e.string()
1850
- }), G = e.object({
1969
+ }), W = e.object({
1851
1970
  initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
1852
1971
  initial_ip: e.string().describe("First IP address associated with this session"),
1853
1972
  initial_asn: e.string().describe("First autonomous system number associated with this session"),
1854
1973
  last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
1855
1974
  last_ip: e.string().describe("Last IP address from which this user logged in"),
1856
1975
  last_asn: e.string().describe("Last autonomous system number from which this user logged in")
1857
- }), Jt = e.object({
1976
+ }), lo = e.object({
1858
1977
  id: e.string(),
1859
1978
  revoked_at: e.string().optional(),
1860
1979
  used_at: e.string().optional(),
@@ -1862,17 +1981,17 @@ const Kt = e.nativeEnum(H), zt = e.object({
1862
1981
  expires_at: e.string().optional(),
1863
1982
  login_session_id: e.string(),
1864
1983
  idle_expires_at: e.string().optional(),
1865
- device: G.describe(
1984
+ device: W.describe(
1866
1985
  "Metadata related to the device used in the session"
1867
1986
  ),
1868
1987
  clients: e.array(e.string()).describe("List of client details for the session")
1869
- }), mn = e.object({
1988
+ }), Nn = e.object({
1870
1989
  created_at: e.string(),
1871
1990
  updated_at: e.string(),
1872
1991
  authenticated_at: e.string(),
1873
1992
  last_interaction_at: e.string(),
1874
- ...Jt.shape
1875
- }), hn = e.object({
1993
+ ...lo.shape
1994
+ }), wn = e.object({
1876
1995
  kid: e.string().openapi({ description: "The key id of the signing key" }),
1877
1996
  cert: e.string().openapi({ description: "The public certificate of the signing key" }),
1878
1997
  fingerprint: e.string().openapi({ description: "The cert fingerprint" }),
@@ -1897,7 +2016,7 @@ const Kt = e.nativeEnum(H), zt = e.object({
1897
2016
  type: e.enum(["jwt_signing", "saml_encryption"]).openapi({
1898
2017
  description: "The type of the signing key"
1899
2018
  })
1900
- }), eo = e.object({
2019
+ }), po = e.object({
1901
2020
  id: e.string().optional(),
1902
2021
  // Basic settings
1903
2022
  audience: e.string(),
@@ -1921,6 +2040,11 @@ const Kt = e.nativeEnum(H), zt = e.object({
1921
2040
  allowed_logout_urls: e.array(e.string()).optional(),
1922
2041
  // Universal Login settings
1923
2042
  default_redirection_uri: e.string().optional(),
2043
+ // Anchor client used for tenant-level flows that aren't tied to a specific
2044
+ // application (e.g. /connect/start DCR consent). When unset, /connect/start
2045
+ // falls back to the first available client. Roughly analogous to Auth0's
2046
+ // "Default App" / Global Client.
2047
+ default_client_id: e.string().optional(),
1924
2048
  // Advanced settings
1925
2049
  enabled_locales: e.array(e.string()).optional(),
1926
2050
  default_directory: e.string().optional(),
@@ -1928,7 +2052,7 @@ const Kt = e.nativeEnum(H), zt = e.object({
1928
2052
  html: e.string().optional(),
1929
2053
  show_log_link: e.boolean().optional(),
1930
2054
  url: e.string().optional()
1931
- }).optional(),
2055
+ }).nullish(),
1932
2056
  // Flags
1933
2057
  flags: e.object({
1934
2058
  allow_changing_enable_sso: e.boolean().optional(),
@@ -2018,7 +2142,7 @@ const Kt = e.nativeEnum(H), zt = e.object({
2018
2142
  organizations: e.object({
2019
2143
  client_credentials: e.record(e.any()).optional()
2020
2144
  }).optional()
2021
- }).optional(),
2145
+ }).nullish(),
2022
2146
  // Default audience
2023
2147
  default_audience: e.string().optional(),
2024
2148
  // Default organization
@@ -2040,10 +2164,12 @@ const Kt = e.nativeEnum(H), zt = e.object({
2040
2164
  // mTLS settings
2041
2165
  mtls: e.object({
2042
2166
  enable_endpoint_aliases: e.boolean().optional()
2043
- }).optional(),
2167
+ }).nullish(),
2044
2168
  // Authorization settings
2045
2169
  pushed_authorization_requests_supported: e.boolean().optional(),
2046
2170
  authorization_response_iss_parameter_supported: e.boolean().optional(),
2171
+ // Attack-protection config (singleton, exposed via /api/v2/attack-protection)
2172
+ attack_protection: ro.optional(),
2047
2173
  // Guardian MFA Factors configuration (internal storage, exposed via /guardian API)
2048
2174
  mfa: e.object({
2049
2175
  // MFA policy: "never" = MFA disabled, "always" = MFA required for all logins
@@ -2075,14 +2201,14 @@ const Kt = e.nativeEnum(H), zt = e.object({
2075
2201
  message: e.string().optional()
2076
2202
  }).optional()
2077
2203
  }).optional()
2078
- }), bn = e.object({
2204
+ }), jn = e.object({
2079
2205
  created_at: e.string().nullable().transform((t) => t ?? ""),
2080
2206
  updated_at: e.string().nullable().transform((t) => t ?? ""),
2081
- ...eo.shape,
2207
+ ...po.shape,
2082
2208
  id: e.string()
2083
2209
  });
2084
- var to = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(to || {});
2085
- const fn = e.object({
2210
+ var co = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(co || {});
2211
+ const Rn = e.object({
2086
2212
  access_token: e.string(),
2087
2213
  id_token: e.string().optional(),
2088
2214
  scope: e.string().optional(),
@@ -2095,7 +2221,7 @@ e.object({
2095
2221
  code: e.string(),
2096
2222
  state: e.string().optional()
2097
2223
  });
2098
- const oo = e.object({
2224
+ const _o = e.object({
2099
2225
  button_border_radius: e.number(),
2100
2226
  button_border_weight: e.number(),
2101
2227
  buttons_style: e.enum(["pill", "rounded", "sharp"]),
@@ -2105,7 +2231,7 @@ const oo = e.object({
2105
2231
  show_widget_shadow: e.boolean(),
2106
2232
  widget_border_weight: e.number(),
2107
2233
  widget_corner_radius: e.number()
2108
- }), no = e.object({
2234
+ }), go = e.object({
2109
2235
  base_focus_color: e.string(),
2110
2236
  base_hover_color: e.string(),
2111
2237
  body_text: e.string(),
@@ -2128,7 +2254,7 @@ const oo = e.object({
2128
2254
  }), u = e.object({
2129
2255
  bold: e.boolean(),
2130
2256
  size: e.number()
2131
- }), io = e.object({
2257
+ }), uo = e.object({
2132
2258
  body_text: u,
2133
2259
  buttons_text: u,
2134
2260
  font_url: e.string(),
@@ -2138,62 +2264,47 @@ const oo = e.object({
2138
2264
  reference_text_size: e.number(),
2139
2265
  subtitle: u,
2140
2266
  title: u
2141
- }), ao = e.object({
2267
+ }), mo = e.object({
2142
2268
  background_color: e.string(),
2143
2269
  background_image_url: e.string(),
2144
- page_layout: e.enum(["center", "left", "right"])
2145
- }), so = e.object({
2270
+ page_layout: e.enum(["center", "left", "right"]),
2271
+ /**
2272
+ * Where the tenant logo renders on the page.
2273
+ * - "widget" (default): inside the widget card via the widget's own header.
2274
+ * - "chip": as a floating pill in the top-left page corner. The widget's
2275
+ * internal logo is suppressed when this is selected.
2276
+ * - "none": no logo on the page or in the widget.
2277
+ * Optional for backwards compatibility; absent values mean "widget".
2278
+ */
2279
+ logo_placement: e.enum(["widget", "chip", "none"]).optional()
2280
+ }), ho = e.object({
2146
2281
  header_text_alignment: e.enum(["center", "left", "right"]),
2147
2282
  logo_height: e.number(),
2148
2283
  logo_position: e.enum(["center", "left", "none", "right"]),
2149
2284
  logo_url: e.string(),
2150
2285
  social_buttons_layout: e.enum(["bottom", "top"])
2151
- }), ro = e.object({
2152
- borders: oo,
2153
- colors: no,
2286
+ }), bo = e.object({
2287
+ borders: _o,
2288
+ colors: go,
2154
2289
  displayName: e.string(),
2155
- fonts: io,
2156
- page_background: ao,
2157
- widget: so
2158
- }), En = ro.extend({
2290
+ fonts: uo,
2291
+ page_background: mo,
2292
+ widget: ho
2293
+ }), kn = bo.extend({
2159
2294
  themeId: e.string()
2160
- }), Sn = e.object({
2295
+ }), Dn = e.object({
2161
2296
  universal_login_experience: e.enum(["new", "classic"]).default("new"),
2162
2297
  identifier_first: e.boolean().default(!0),
2163
2298
  password_first: e.boolean().default(!1),
2164
2299
  webauthn_platform_first_factor: e.boolean()
2165
- }), yn = e.object({
2300
+ }), vn = e.object({
2166
2301
  name: e.string(),
2167
2302
  enabled: e.boolean().optional().default(!0),
2168
2303
  default_from_address: e.string().optional(),
2169
- credentials: e.union([
2170
- e.object({
2171
- accessKeyId: e.string(),
2172
- secretAccessKey: e.string(),
2173
- region: e.string()
2174
- }),
2175
- e.object({
2176
- smtp_host: e.array(e.string()),
2177
- smtp_port: e.number(),
2178
- smtp_user: e.string(),
2179
- smtp_pass: e.string()
2180
- }),
2181
- e.object({
2182
- api_key: e.string(),
2183
- domain: e.string().optional()
2184
- }),
2185
- e.object({
2186
- connectionString: e.string()
2187
- }),
2188
- e.object({
2189
- tenantId: e.string(),
2190
- clientId: e.string(),
2191
- clientSecret: e.string()
2192
- })
2193
- ]),
2304
+ credentials: e.record(e.string(), e.unknown()),
2194
2305
  settings: e.object({}).optional()
2195
- }), lo = e.object({
2196
- // The actual refresh token value (primary key).
2306
+ }), fo = e.object({
2307
+ // Internal primary key (ULID). Never sent to clients in the new wire format.
2197
2308
  id: e.string(),
2198
2309
  // Link to the login session
2199
2310
  login_id: e.string(),
@@ -2205,31 +2316,44 @@ const oo = e.object({
2205
2316
  idle_expires_at: e.string().optional(),
2206
2317
  // When the token was last used.
2207
2318
  last_exchanged_at: e.string().optional(),
2208
- device: G,
2319
+ device: W,
2209
2320
  resource_servers: e.array(
2210
2321
  e.object({
2211
2322
  audience: e.string(),
2212
2323
  scopes: e.string()
2213
2324
  })
2214
2325
  ),
2215
- rotating: e.boolean()
2216
- }), An = e.object({
2326
+ rotating: e.boolean(),
2327
+ // Plaintext lookup slice extracted from the wire token. Indexed for the
2328
+ // refresh-grant path. NULL on legacy (pre-hashing) rows.
2329
+ token_lookup: e.string().optional(),
2330
+ // SHA-256 hex of the secret part of the wire token. NULL on legacy rows.
2331
+ token_hash: e.string().optional(),
2332
+ // Root token id of the rotation chain. NULL on legacy rows; for the first
2333
+ // token in a chain it equals `id`.
2334
+ family_id: e.string().optional(),
2335
+ // Most recently issued child id (debug/traceability). NULL until rotated.
2336
+ rotated_to: e.string().optional(),
2337
+ // ISO of the *first* rotation. Anchors the leeway window so siblings minted
2338
+ // within the window don't extend the parent's exposure.
2339
+ rotated_at: e.string().optional()
2340
+ }), Ln = e.object({
2217
2341
  // When the refresh token record was created.
2218
2342
  created_at: e.string(),
2219
2343
  // When the token was explicitly revoked (null = still active).
2220
2344
  revoked_at: e.string().optional(),
2221
2345
  // Spread in the rest of the refresh token properties.
2222
- ...lo.shape
2223
- }), In = e.object({
2346
+ ...fo.shape
2347
+ }), Un = e.object({
2224
2348
  to: e.string(),
2225
2349
  message: e.string()
2226
- }), Cn = e.object({
2350
+ }), xn = e.object({
2227
2351
  name: e.string(),
2228
2352
  options: e.object({})
2229
- }), co = e.object({
2353
+ }), Eo = e.object({
2230
2354
  value: e.string(),
2231
2355
  description: e.string().optional()
2232
- }), po = e.object({
2356
+ }), So = e.object({
2233
2357
  token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
2234
2358
  enforce_policies: e.boolean().optional(),
2235
2359
  allow_skipping_userinfo: e.boolean().optional(),
@@ -2239,11 +2363,11 @@ const oo = e.object({
2239
2363
  mtls: e.object({
2240
2364
  bound_access_tokens: e.boolean().optional()
2241
2365
  }).optional()
2242
- }), _o = e.object({
2366
+ }), yo = e.object({
2243
2367
  id: e.string().optional(),
2244
2368
  name: e.string(),
2245
2369
  identifier: e.string(),
2246
- scopes: e.array(co).optional(),
2370
+ scopes: e.array(Eo).optional(),
2247
2371
  signing_alg: e.string().optional(),
2248
2372
  signing_secret: e.string().optional(),
2249
2373
  token_lifetime: e.number().default(86400),
@@ -2251,30 +2375,30 @@ const oo = e.object({
2251
2375
  skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
2252
2376
  allow_offline_access: e.boolean().optional(),
2253
2377
  verificationKey: e.string().optional(),
2254
- options: po.optional(),
2378
+ options: So.optional(),
2255
2379
  is_system: e.boolean().optional(),
2256
2380
  metadata: e.record(e.any()).optional()
2257
- }), go = e.object({
2258
- ..._o.shape,
2381
+ }), Ao = e.object({
2382
+ ...yo.shape,
2259
2383
  created_at: e.string().optional(),
2260
2384
  updated_at: e.string().optional()
2261
- }), Tn = e.array(go), uo = e.object({
2385
+ }), Fn = e.array(Ao), Io = e.object({
2262
2386
  role_id: e.string(),
2263
2387
  resource_server_identifier: e.string(),
2264
2388
  permission_name: e.string()
2265
- }), mo = e.object({
2266
- ...uo.shape,
2389
+ }), Co = e.object({
2390
+ ...Io.shape,
2267
2391
  created_at: e.string()
2268
- }), On = e.array(mo), ho = e.object({
2392
+ }), Pn = e.array(Co), To = e.object({
2269
2393
  user_id: e.string(),
2270
2394
  resource_server_identifier: e.string(),
2271
2395
  permission_name: e.string(),
2272
2396
  organization_id: e.string().optional()
2273
- }), bo = e.object({
2274
- ...ho.shape,
2397
+ }), Oo = e.object({
2398
+ ...To.shape,
2275
2399
  tenant_id: e.string(),
2276
2400
  created_at: e.string().optional()
2277
- }), Nn = e.array(bo), fo = e.object({
2401
+ }), Mn = e.array(Oo), No = e.object({
2278
2402
  user_id: e.string(),
2279
2403
  resource_server_identifier: e.string(),
2280
2404
  resource_server_name: e.string(),
@@ -2282,17 +2406,17 @@ const oo = e.object({
2282
2406
  description: e.string().nullable().optional(),
2283
2407
  created_at: e.string().optional(),
2284
2408
  organization_id: e.string().optional()
2285
- }), wn = e.array(
2286
- fo
2287
- ), Eo = e.object({
2409
+ }), Hn = e.array(
2410
+ No
2411
+ ), wo = e.object({
2288
2412
  user_id: e.string(),
2289
2413
  role_id: e.string(),
2290
2414
  organization_id: e.string().optional()
2291
- }), So = e.object({
2292
- ...Eo.shape,
2415
+ }), jo = e.object({
2416
+ ...wo.shape,
2293
2417
  tenant_id: e.string(),
2294
2418
  created_at: e.string().optional()
2295
- }), jn = e.array(So), yo = e.object({
2419
+ }), Gn = e.array(jo), Ro = e.object({
2296
2420
  id: e.string().optional().openapi({
2297
2421
  description: "The unique identifier of the role. If not provided, one will be generated."
2298
2422
  }),
@@ -2306,13 +2430,13 @@ const oo = e.object({
2306
2430
  metadata: e.record(e.any()).optional().openapi({
2307
2431
  description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios."
2308
2432
  })
2309
- }), Ao = yo.extend({
2433
+ }), ko = Ro.extend({
2310
2434
  id: e.string().openapi({
2311
2435
  description: "The unique identifier of the role"
2312
2436
  }),
2313
2437
  created_at: e.string().optional(),
2314
2438
  updated_at: e.string().optional()
2315
- }), Rn = e.array(Ao), Io = e.object({
2439
+ }), Bn = e.array(ko), Do = e.object({
2316
2440
  logo_url: e.string().optional().openapi({
2317
2441
  description: "URL of the organization's logo"
2318
2442
  }),
@@ -2324,7 +2448,7 @@ const oo = e.object({
2324
2448
  description: "Page background color in hex format (e.g., #FFFFFF)"
2325
2449
  })
2326
2450
  }).optional()
2327
- }).optional(), Co = e.object({
2451
+ }).optional(), vo = e.object({
2328
2452
  connection_id: e.string().openapi({
2329
2453
  description: "ID of the connection"
2330
2454
  }),
@@ -2337,7 +2461,7 @@ const oo = e.object({
2337
2461
  is_signup_enabled: e.boolean().default(!0).openapi({
2338
2462
  description: "Whether signup is enabled for this connection"
2339
2463
  })
2340
- }), To = e.object({
2464
+ }), Lo = e.object({
2341
2465
  client_credentials: e.object({
2342
2466
  enforce: e.boolean().default(!1).openapi({
2343
2467
  description: "Whether to enforce token quota limits"
@@ -2349,7 +2473,7 @@ const oo = e.object({
2349
2473
  description: "Maximum tokens per hour (0 = unlimited)"
2350
2474
  })
2351
2475
  }).optional()
2352
- }).optional(), Oo = e.object({
2476
+ }).optional(), Uo = e.object({
2353
2477
  id: e.string().optional(),
2354
2478
  name: e.string().min(1).regex(/^[a-z0-9_-]+$/, {
2355
2479
  message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores"
@@ -2359,34 +2483,52 @@ const oo = e.object({
2359
2483
  display_name: e.string().optional().openapi({
2360
2484
  description: "The display name of the organization"
2361
2485
  }),
2362
- branding: Io,
2486
+ branding: Do,
2363
2487
  metadata: e.record(e.any()).default({}).optional().openapi({
2364
2488
  description: "Custom metadata for the organization"
2365
2489
  }),
2366
- enabled_connections: e.array(Co).default([]).optional().openapi({
2490
+ enabled_connections: e.array(vo).default([]).optional().openapi({
2367
2491
  description: "List of enabled connections for the organization"
2368
2492
  }),
2369
- token_quota: To
2370
- }), Dn = e.object({
2371
- ...Oo.shape,
2372
- ...s.shape,
2493
+ token_quota: Lo
2494
+ }), Wn = e.object({
2495
+ ...Uo.shape,
2496
+ ...r.shape,
2373
2497
  id: e.string(),
2374
2498
  // Override name to be lenient when reading from database (to support existing uppercase names)
2375
2499
  name: e.string().min(1).openapi({
2376
2500
  description: "The name of the organization"
2377
2501
  })
2378
- }), No = e.object({
2502
+ }), xo = e.object({
2503
+ connection_id: e.string().openapi({
2504
+ description: "ID of the tenant-level connection to enable for the org."
2505
+ }),
2506
+ assign_membership_on_login: e.boolean().optional().default(!1),
2507
+ show_as_button: e.boolean().optional().default(!0),
2508
+ is_signup_enabled: e.boolean().optional().default(!0)
2509
+ }), Fo = e.object({
2510
+ ...xo.shape,
2511
+ // Auth0 includes the embedded connection in GET responses.
2512
+ connection: e.object({
2513
+ name: e.string().optional(),
2514
+ strategy: e.string().optional()
2515
+ }).optional(),
2516
+ created_at: e.string().optional(),
2517
+ updated_at: e.string().optional()
2518
+ }), zn = e.array(
2519
+ Fo
2520
+ ), Po = e.object({
2379
2521
  user_id: e.string().openapi({
2380
2522
  description: "ID of the user"
2381
2523
  }),
2382
2524
  organization_id: e.string().openapi({
2383
2525
  description: "ID of the organization"
2384
2526
  })
2385
- }), Ln = e.object({
2386
- ...No.shape,
2387
- ...s.shape,
2527
+ }), Kn = e.object({
2528
+ ...Po.shape,
2529
+ ...r.shape,
2388
2530
  id: e.string()
2389
- }), vn = e.object({
2531
+ }), qn = e.object({
2390
2532
  // Session settings
2391
2533
  idle_session_lifetime: e.number().default(72),
2392
2534
  session_lifetime: e.number().default(168),
@@ -2486,7 +2628,7 @@ const oo = e.object({
2486
2628
  message: e.string().optional()
2487
2629
  }).optional()
2488
2630
  }).optional()
2489
- }), kn = e.object({
2631
+ }), Xn = e.object({
2490
2632
  date: e.string().openapi({
2491
2633
  description: "Date these events occurred in ISO 8601 format",
2492
2634
  example: "2025-12-19"
@@ -2511,10 +2653,10 @@ const oo = e.object({
2511
2653
  description: "Approximate date and time the first event occurred in ISO 8601 format",
2512
2654
  example: "2025-12-19T00:00:00.000Z"
2513
2655
  })
2514
- }), Un = e.number().openapi({
2656
+ }), Vn = e.number().openapi({
2515
2657
  description: "Number of active users in the last 30 days",
2516
2658
  example: 1234
2517
- }), wo = e.enum([
2659
+ }), Mo = e.enum([
2518
2660
  "login",
2519
2661
  "login-id",
2520
2662
  "login-password",
@@ -2543,17 +2685,17 @@ const oo = e.object({
2543
2685
  "custom-form",
2544
2686
  "login-passwordless",
2545
2687
  "mfa-login-options"
2546
- ]), jo = e.record(e.string(), e.record(e.string(), e.string())).openapi({
2688
+ ]), Ho = e.record(e.string(), e.record(e.string(), e.string())).openapi({
2547
2689
  type: "object",
2548
2690
  additionalProperties: {
2549
2691
  type: "object",
2550
2692
  additionalProperties: { type: "string" }
2551
2693
  }
2552
- }), Fn = e.object({
2553
- prompt: wo,
2694
+ }), Yn = e.object({
2695
+ prompt: Mo,
2554
2696
  language: e.string(),
2555
- custom_text: jo
2556
- }), xn = {
2697
+ custom_text: Ho
2698
+ }), Qn = {
2557
2699
  EMAIL: "email",
2558
2700
  SMS: "sms",
2559
2701
  USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2568,11 +2710,11 @@ const oo = e.object({
2568
2710
  SAMLP: "samlp",
2569
2711
  WAAD: "waad",
2570
2712
  ADFS: "adfs"
2571
- }, Pn = {
2713
+ }, Zn = {
2572
2714
  DATABASE: "database",
2573
2715
  SOCIAL: "social",
2574
2716
  PASSWORDLESS: "passwordless"
2575
- }, Ro = e.enum([
2717
+ }, Go = e.enum([
2576
2718
  "phone",
2577
2719
  "totp",
2578
2720
  "email",
@@ -2580,9 +2722,9 @@ const oo = e.object({
2580
2722
  "webauthn-roaming",
2581
2723
  "webauthn-platform",
2582
2724
  "passkey"
2583
- ]), B = e.object({
2725
+ ]), z = e.object({
2584
2726
  user_id: e.string(),
2585
- type: Ro,
2727
+ type: Go,
2586
2728
  // Phone-specific
2587
2729
  phone_number: e.string().optional(),
2588
2730
  // TOTP-specific
@@ -2597,7 +2739,7 @@ const oo = e.object({
2597
2739
  // Common
2598
2740
  confirmed: e.boolean().default(!1)
2599
2741
  });
2600
- function W(t, o) {
2742
+ function K(t, o) {
2601
2743
  t.type === "phone" && !t.phone_number && o.addIssue({
2602
2744
  code: e.ZodIssueCode.custom,
2603
2745
  message: "phone_number is required when type is 'phone'",
@@ -2616,64 +2758,64 @@ function W(t, o) {
2616
2758
  path: ["public_key"]
2617
2759
  }));
2618
2760
  }
2619
- const Mn = B.superRefine(W), Hn = e.object({
2620
- ...B.shape,
2761
+ const $n = z.superRefine(K), Jn = e.object({
2762
+ ...z.shape,
2621
2763
  id: e.string(),
2622
2764
  created_at: e.string(),
2623
2765
  updated_at: e.string()
2624
- }).superRefine(W);
2625
- function Gn(t) {
2766
+ }).superRefine(K);
2767
+ function ei(t) {
2626
2768
  const [o, i] = t.split("|");
2627
2769
  if (!o || !i)
2628
2770
  throw new Error(`Invalid user_id: ${t}`);
2629
2771
  return { connection: o, id: i };
2630
2772
  }
2631
- function Bn(t) {
2773
+ function ti(t) {
2632
2774
  const {
2633
2775
  primary: o,
2634
2776
  secondaries: i,
2635
- syncMethods: O = ["create", "rawCreate", "update", "remove", "delete", "set"]
2636
- } = t, E = {
2637
- get(p, a) {
2777
+ syncMethods: h = ["create", "rawCreate", "update", "remove", "delete", "set"]
2778
+ } = t, S = {
2779
+ get(c, a) {
2638
2780
  if (typeof a == "symbol")
2639
- return p[a];
2640
- const _ = p[a];
2641
- return typeof _ != "function" ? _ : O.includes(a) ? async (...d) => {
2642
- const S = await _.apply(p, d), g = [];
2643
- for (const r of i) {
2644
- const h = r.adapter[a];
2645
- if (typeof h != "function")
2781
+ return c[a];
2782
+ const d = c[a];
2783
+ return typeof d != "function" ? d : h.includes(a) ? async (..._) => {
2784
+ const y = await d.apply(c, _), g = [];
2785
+ for (const s of i) {
2786
+ const b = s.adapter[a];
2787
+ if (typeof b != "function")
2646
2788
  continue;
2647
- const y = (async () => {
2789
+ const A = (async () => {
2648
2790
  try {
2649
- await h.apply(r.adapter, d);
2650
- } catch (b) {
2791
+ await b.apply(s.adapter, _);
2792
+ } catch (f) {
2651
2793
  try {
2652
- r.onError ? r.onError(b, a, d) : console.error(
2794
+ s.onError ? s.onError(f, a, _) : console.error(
2653
2795
  `Passthrough adapter: secondary write failed for ${a}:`,
2654
- b
2796
+ f
2655
2797
  );
2656
- } catch (A) {
2798
+ } catch (I) {
2657
2799
  console.error(
2658
2800
  `Passthrough adapter: onError handler threw for ${a}:`,
2659
- A
2801
+ I
2660
2802
  );
2661
2803
  }
2662
2804
  }
2663
2805
  })();
2664
- r.blocking && g.push(y);
2806
+ s.blocking && g.push(A);
2665
2807
  }
2666
- return g.length > 0 && await Promise.all(g), S;
2667
- } : _.bind(p);
2808
+ return g.length > 0 && await Promise.all(g), y;
2809
+ } : d.bind(c);
2668
2810
  }
2669
2811
  };
2670
- return new Proxy(o, E);
2812
+ return new Proxy(o, S);
2671
2813
  }
2672
- function Wn(t) {
2814
+ function oi(t) {
2673
2815
  return t;
2674
2816
  }
2675
- function Kn(t) {
2676
- var E, p, a, _, d, S, g, r, h, y, b, A;
2817
+ function ni(t) {
2818
+ var S, c, a, d, _, y, g, s, b, A, f, I;
2677
2819
  const o = t == null ? void 0 : t.options;
2678
2820
  if (!o)
2679
2821
  return {
@@ -2684,204 +2826,216 @@ function Kn(t) {
2684
2826
  };
2685
2827
  const i = o.attributes;
2686
2828
  if (i) {
2687
- const K = ((p = (E = i.username) == null ? void 0 : E.identifier) == null ? void 0 : p.active) === !0, z = ((_ = (a = i.email) == null ? void 0 : a.identifier) == null ? void 0 : _.active) !== !1, q = ((S = (d = i.username) == null ? void 0 : d.validation) == null ? void 0 : S.min_length) ?? 1, X = ((r = (g = i.username) == null ? void 0 : g.validation) == null ? void 0 : r.max_length) ?? 15;
2829
+ const q = ((c = (S = i.username) == null ? void 0 : S.identifier) == null ? void 0 : c.active) === !0, X = ((d = (a = i.email) == null ? void 0 : a.identifier) == null ? void 0 : d.active) !== !1, V = ((y = (_ = i.username) == null ? void 0 : _.validation) == null ? void 0 : y.min_length) ?? 1, Y = ((s = (g = i.username) == null ? void 0 : g.validation) == null ? void 0 : s.max_length) ?? 15;
2688
2830
  return {
2689
- usernameIdentifierActive: K,
2690
- emailIdentifierActive: z,
2691
- usernameMinLength: q,
2692
- usernameMaxLength: X
2831
+ usernameIdentifierActive: q,
2832
+ emailIdentifierActive: X,
2833
+ usernameMinLength: V,
2834
+ usernameMaxLength: Y
2693
2835
  };
2694
2836
  }
2695
2837
  return {
2696
2838
  usernameIdentifierActive: o.requires_username === !0,
2697
2839
  emailIdentifierActive: !0,
2698
- usernameMinLength: ((y = (h = o.validation) == null ? void 0 : h.username) == null ? void 0 : y.min) ?? 1,
2699
- usernameMaxLength: ((A = (b = o.validation) == null ? void 0 : b.username) == null ? void 0 : A.max) ?? 15
2840
+ usernameMinLength: ((A = (b = o.validation) == null ? void 0 : b.username) == null ? void 0 : A.min) ?? 1,
2841
+ usernameMaxLength: ((I = (f = o.validation) == null ? void 0 : f.username) == null ? void 0 : I.max) ?? 15
2700
2842
  };
2701
2843
  }
2702
- function zn(t) {
2844
+ function ii(t) {
2703
2845
  return typeof t == "object" && t !== null && !Array.isArray(t);
2704
2846
  }
2705
2847
  export {
2706
- Fo as Auth0ActionEnum,
2707
- Yt as Auth0Client,
2708
- L as AuthorizationResponseMode,
2848
+ Xo as Auth0ActionEnum,
2849
+ Zt as Auth0Client,
2850
+ v as AuthorizationResponseMode,
2709
2851
  D as AuthorizationResponseType,
2710
- v as CodeChallengeMethod,
2711
- R as ComponentCategory,
2712
- j as ComponentType,
2713
- xo as EmailActionEnum,
2714
- Zo as FORM_FIELD_TYPES,
2715
- Uo as FlowActionTypeEnum,
2716
- to as GrantType,
2717
- Qt as LocationInfo,
2718
- Xt as LogTypes,
2719
- H as LoginSessionState,
2720
- Re as NodeType,
2721
- le as RedirectTargetEnum,
2722
- xn as Strategy,
2723
- Pn as StrategyType,
2724
- Y as actionDependencySchema,
2725
- N as actionInsertSchema,
2726
- ve as actionNodeSchema,
2727
- vo as actionSchema,
2728
- Q as actionSecretSchema,
2729
- V as actionTriggerSchema,
2730
- Lo as actionUpdateSchema,
2731
- Un as activeUsersResponseSchema,
2732
- $ as actorSchema,
2733
- ue as addressSchema,
2734
- Z as auditCategorySchema,
2735
- ie as auditEventInsertSchema,
2736
- ko as auditEventSchema,
2737
- ne as auth0ClientSchema,
2738
- qo as auth0FlowInsertSchema,
2739
- Pe as auth0FlowSchema,
2740
- Mo as auth0QuerySchema,
2741
- se as auth0UpdateUserActionSchema,
2742
- Go as auth0UserResponseSchema,
2743
- Me as authParamsSchema,
2744
- Mn as authenticationMethodInsertSchema,
2745
- Hn as authenticationMethodSchema,
2746
- Ro as authenticationMethodTypeSchema,
2747
- w as baseUserSchema,
2748
- yt as blockComponentSchema,
2749
- oo as bordersSchema,
2750
- Xo as brandingSchema,
2751
- Te as buttonComponentSchema,
2752
- Se as clientGrantInsertSchema,
2753
- Ko as clientGrantListSchema,
2754
- ye as clientGrantSchema,
2755
- Ee as clientInsertSchema,
2756
- Ie as clientRegistrationTokenInsertSchema,
2757
- zo as clientRegistrationTokenSchema,
2758
- Ae as clientRegistrationTokenTypeSchema,
2759
- Wo as clientSchema,
2760
- Ge as codeInsertSchema,
2761
- Vo as codeSchema,
2762
- He as codeTypeSchema,
2763
- no as colorsSchema,
2764
- jt as componentMessageSchema,
2765
- je as componentSchema,
2766
- We as connectionInsertSchema,
2767
- Be as connectionOptionsSchema,
2768
- Yo as connectionSchema,
2852
+ L as CodeChallengeMethod,
2853
+ k as ComponentCategory,
2854
+ R as ComponentType,
2855
+ Vo as EmailActionEnum,
2856
+ pn as FORM_FIELD_TYPES,
2857
+ qo as FlowActionTypeEnum,
2858
+ co as GrantType,
2859
+ $t as LocationInfo,
2860
+ Yt as LogTypes,
2861
+ G as LoginSessionState,
2862
+ De as NodeType,
2863
+ ce as RedirectTargetEnum,
2864
+ Qn as Strategy,
2865
+ Zn as StrategyType,
2866
+ Z as actionDependencySchema,
2867
+ w as actionInsertSchema,
2868
+ Ue as actionNodeSchema,
2869
+ zo as actionSchema,
2870
+ $ as actionSecretSchema,
2871
+ Q as actionTriggerSchema,
2872
+ Wo as actionUpdateSchema,
2873
+ Vn as activeUsersResponseSchema,
2874
+ ee as actorSchema,
2875
+ he as addressSchema,
2876
+ ro as attackProtectionSchema,
2877
+ J as auditCategorySchema,
2878
+ re as auditEventInsertSchema,
2879
+ Ko as auditEventSchema,
2880
+ ae as auth0ClientSchema,
2881
+ nn as auth0FlowInsertSchema,
2882
+ He as auth0FlowSchema,
2883
+ Qo as auth0QuerySchema,
2884
+ le as auth0UpdateUserActionSchema,
2885
+ $o as auth0UserResponseSchema,
2886
+ Ge as authParamsSchema,
2887
+ $n as authenticationMethodInsertSchema,
2888
+ Jn as authenticationMethodSchema,
2889
+ Go as authenticationMethodTypeSchema,
2890
+ j as baseUserSchema,
2891
+ It as blockComponentSchema,
2892
+ _o as bordersSchema,
2893
+ an as brandingSchema,
2894
+ no as breachedPasswordDetectionSchema,
2895
+ io as bruteForceProtectionSchema,
2896
+ Ne as buttonComponentSchema,
2897
+ Ae as clientGrantInsertSchema,
2898
+ tn as clientGrantListSchema,
2899
+ Ie as clientGrantSchema,
2900
+ ye as clientInsertSchema,
2901
+ Te as clientRegistrationTokenInsertSchema,
2902
+ on as clientRegistrationTokenSchema,
2903
+ Ce as clientRegistrationTokenTypeSchema,
2904
+ en as clientSchema,
2905
+ We as codeInsertSchema,
2906
+ rn as codeSchema,
2907
+ Be as codeTypeSchema,
2908
+ go as colorsSchema,
2909
+ kt as componentMessageSchema,
2910
+ ke as componentSchema,
2911
+ Ke as connectionInsertSchema,
2912
+ ze as connectionOptionsSchema,
2913
+ sn as connectionSchema,
2769
2914
  m as coordinatesSchema,
2770
- Bn as createPassthroughAdapter,
2771
- Wn as createWriteOnlyAdapter,
2772
- Ke as customDomainInsertSchema,
2773
- qe as customDomainSchema,
2774
- Qo as customDomainWithTenantIdSchema,
2775
- Fn as customTextEntrySchema,
2776
- jo as customTextSchema,
2777
- kn as dailyStatsSchema,
2778
- yn as emailProviderSchema,
2779
- ae as emailVerificationRulesSchema,
2780
- re as emailVerifyActionSchema,
2781
- xe as endingSchema,
2782
- It as fieldComponentSchema,
2783
- pe as flowActionStepSchema,
2784
- _e as flowInsertSchema,
2785
- Po as flowSchema,
2786
- Ne as flowsFieldComponentSchema,
2915
+ ti as createPassthroughAdapter,
2916
+ oi as createWriteOnlyAdapter,
2917
+ qe as customDomainInsertSchema,
2918
+ Ve as customDomainSchema,
2919
+ ln as customDomainWithTenantIdSchema,
2920
+ Yn as customTextEntrySchema,
2921
+ Ho as customTextSchema,
2922
+ Xn as dailyStatsSchema,
2923
+ vn as emailProviderSchema,
2924
+ se as emailVerificationRulesSchema,
2925
+ pe as emailVerifyActionSchema,
2926
+ Me as endingSchema,
2927
+ Tt as fieldComponentSchema,
2928
+ _e as flowActionStepSchema,
2929
+ ge as flowInsertSchema,
2930
+ Yo as flowSchema,
2931
+ je as flowsFieldComponentSchema,
2787
2932
  Le as flowsFlowNodeSchema,
2788
- De as flowsStepNodeSchema,
2933
+ ve as flowsStepNodeSchema,
2789
2934
  u as fontDetailsSchema,
2790
- io as fontsSchema,
2791
- $o as formControlSchema,
2792
- wt as formInsertSchema,
2793
- k as formNodeComponentDefinition,
2794
- Nt as formNodeSchema,
2795
- Jo as formSchema,
2796
- we as genericComponentSchema,
2797
- ke as genericNodeSchema,
2798
- Kn as getConnectionIdentifierConfig,
2799
- Mt as hookCodeInsertSchema,
2800
- ln as hookCodeSchema,
2801
- sn as hookInsertSchema,
2802
- rn as hookSchema,
2803
- M as hookTemplateId,
2804
- an as hookTemplates,
2805
- ge as identitySchema,
2806
- Bt as inviteInsertSchema,
2807
- cn as inviteSchema,
2808
- Gt as inviteeSchema,
2809
- Ht as inviterSchema,
2810
- tn as isBlockComponent,
2811
- nn as isFieldComponent,
2812
- zn as isPlainObject,
2813
- on as isWidgetComponent,
2814
- pn as jwksKeySchema,
2815
- Wt as jwksSchema,
2816
- Oe as legalComponentSchema,
2817
- oe as locationInfoSchema,
2818
- Zt as logInsertSchema,
2819
- gn as logSchema,
2820
- zt as loginSessionAuthStrategySchema,
2821
- qt as loginSessionInsertSchema,
2822
- dn as loginSessionSchema,
2823
- Kt as loginSessionStateSchema,
2824
- Ue as nodeSchema,
2825
- _n as openIDConfigurationSchema,
2826
- Io as organizationBrandingSchema,
2827
- Co as organizationEnabledConnectionSchema,
2828
- Oo as organizationInsertSchema,
2829
- Dn as organizationSchema,
2830
- To as organizationTokenQuotaSchema,
2831
- ao as pageBackgroundSchema,
2832
- Gn as parseUserId,
2833
- $t as passwordInsertSchema,
2834
- un as passwordSchema,
2835
- de as profileDataSchema,
2836
- wo as promptScreenSchema,
2837
- Sn as promptSettingSchema,
2838
- ce as redirectActionSchema,
2839
- lo as refreshTokenInsertSchema,
2840
- An as refreshTokenSchema,
2841
- ee as requestContextSchema,
2842
- _o as resourceServerInsertSchema,
2843
- Tn as resourceServerListSchema,
2844
- po as resourceServerOptionsSchema,
2845
- go as resourceServerSchema,
2846
- co as resourceServerScopeSchema,
2847
- te as responseContextSchema,
2848
- Ce as richTextComponentSchema,
2849
- yo as roleInsertSchema,
2850
- Rn as roleListSchema,
2851
- uo as rolePermissionInsertSchema,
2852
- On as rolePermissionListSchema,
2853
- mo as rolePermissionSchema,
2854
- Ao as roleSchema,
2855
- Rt as screenLinkSchema,
2856
- Jt as sessionInsertSchema,
2857
- mn as sessionSchema,
2858
- hn as signingKeySchema,
2859
- Cn as smsProviderSchema,
2860
- In as smsSendParamsSchema,
2861
- Fe as startSchema,
2862
- J as targetSchema,
2863
- eo as tenantInsertSchema,
2864
- bn as tenantSchema,
2865
- vn as tenantSettingsSchema,
2866
- ro as themeInsertSchema,
2867
- En as themeSchema,
2868
- fn as tokenResponseSchema,
2869
- Ho as totalsSchema,
2870
- en as uiScreenSchema,
2871
- me as userInsertSchema,
2872
- No as userOrganizationInsertSchema,
2873
- Ln as userOrganizationSchema,
2874
- ho as userPermissionInsertSchema,
2875
- Nn as userPermissionListSchema,
2876
- bo as userPermissionSchema,
2877
- wn as userPermissionWithDetailsListSchema,
2878
- fo as userPermissionWithDetailsSchema,
2879
- Bo as userResponseSchema,
2880
- Eo as userRoleInsertSchema,
2881
- jn as userRoleListSchema,
2882
- So as userRoleSchema,
2883
- he as userSchema,
2884
- ze as verificationMethodsSchema,
2885
- At as widgetComponentSchema,
2886
- so as widgetSchema
2935
+ uo as fontsSchema,
2936
+ cn as formControlSchema,
2937
+ Rt as formInsertSchema,
2938
+ U as formNodeComponentDefinition,
2939
+ jt as formNodeSchema,
2940
+ dn as formSchema,
2941
+ Re as genericComponentSchema,
2942
+ xe as genericNodeSchema,
2943
+ ni as getConnectionIdentifierConfig,
2944
+ Gt as hookCodeInsertSchema,
2945
+ En as hookCodeSchema,
2946
+ bn as hookInsertSchema,
2947
+ fn as hookSchema,
2948
+ H as hookTemplateId,
2949
+ hn as hookTemplates,
2950
+ me as identitySchema,
2951
+ zt as inviteInsertSchema,
2952
+ Sn as inviteSchema,
2953
+ Wt as inviteeSchema,
2954
+ Bt as inviterSchema,
2955
+ gn as isBlockComponent,
2956
+ mn as isFieldComponent,
2957
+ ii as isPlainObject,
2958
+ un as isWidgetComponent,
2959
+ yn as jwksKeySchema,
2960
+ Kt as jwksSchema,
2961
+ we as legalComponentSchema,
2962
+ ie as locationInfoSchema,
2963
+ Jt as logInsertSchema,
2964
+ Cn as logSchema,
2965
+ to as logStreamFilterSchema,
2966
+ oo as logStreamInsertSchema,
2967
+ Tn as logStreamSchema,
2968
+ B as logStreamStatusSchema,
2969
+ eo as logStreamTypeSchema,
2970
+ Xt as loginSessionAuthStrategySchema,
2971
+ Vt as loginSessionInsertSchema,
2972
+ In as loginSessionSchema,
2973
+ qt as loginSessionStateSchema,
2974
+ Fe as nodeSchema,
2975
+ An as openIDConfigurationSchema,
2976
+ Do as organizationBrandingSchema,
2977
+ xo as organizationConnectionInsertSchema,
2978
+ zn as organizationConnectionListSchema,
2979
+ Fo as organizationConnectionSchema,
2980
+ vo as organizationEnabledConnectionSchema,
2981
+ Uo as organizationInsertSchema,
2982
+ Wn as organizationSchema,
2983
+ Lo as organizationTokenQuotaSchema,
2984
+ mo as pageBackgroundSchema,
2985
+ ei as parseUserId,
2986
+ so as passwordInsertSchema,
2987
+ On as passwordSchema,
2988
+ ue as profileDataSchema,
2989
+ Mo as promptScreenSchema,
2990
+ Dn as promptSettingSchema,
2991
+ de as redirectActionSchema,
2992
+ fo as refreshTokenInsertSchema,
2993
+ Ln as refreshTokenSchema,
2994
+ oe as requestContextSchema,
2995
+ yo as resourceServerInsertSchema,
2996
+ Fn as resourceServerListSchema,
2997
+ So as resourceServerOptionsSchema,
2998
+ Ao as resourceServerSchema,
2999
+ Eo as resourceServerScopeSchema,
3000
+ ne as responseContextSchema,
3001
+ Oe as richTextComponentSchema,
3002
+ Ro as roleInsertSchema,
3003
+ Bn as roleListSchema,
3004
+ Io as rolePermissionInsertSchema,
3005
+ Pn as rolePermissionListSchema,
3006
+ Co as rolePermissionSchema,
3007
+ ko as roleSchema,
3008
+ Dt as screenLinkSchema,
3009
+ lo as sessionInsertSchema,
3010
+ Nn as sessionSchema,
3011
+ wn as signingKeySchema,
3012
+ xn as smsProviderSchema,
3013
+ Un as smsSendParamsSchema,
3014
+ Pe as startSchema,
3015
+ ao as suspiciousIpThrottlingSchema,
3016
+ te as targetSchema,
3017
+ po as tenantInsertSchema,
3018
+ jn as tenantSchema,
3019
+ qn as tenantSettingsSchema,
3020
+ bo as themeInsertSchema,
3021
+ kn as themeSchema,
3022
+ Rn as tokenResponseSchema,
3023
+ Zo as totalsSchema,
3024
+ _n as uiScreenSchema,
3025
+ be as userInsertSchema,
3026
+ Po as userOrganizationInsertSchema,
3027
+ Kn as userOrganizationSchema,
3028
+ To as userPermissionInsertSchema,
3029
+ Mn as userPermissionListSchema,
3030
+ Oo as userPermissionSchema,
3031
+ Hn as userPermissionWithDetailsListSchema,
3032
+ No as userPermissionWithDetailsSchema,
3033
+ Jo as userResponseSchema,
3034
+ wo as userRoleInsertSchema,
3035
+ Gn as userRoleListSchema,
3036
+ jo as userRoleSchema,
3037
+ fe as userSchema,
3038
+ Xe as verificationMethodsSchema,
3039
+ Ct as widgetComponentSchema,
3040
+ ho as widgetSchema
2887
3041
  };