@authhero/adapter-interfaces 1.14.0 → 1.16.0

package/dist/adapter-interfaces.mjs

@@ -20,10 +20,10 @@ const r = e.object({
   runtime: e.string().max(50).optional(),
   dependencies: e.array(Q).optional(),
   secrets: e.array($).optional()
-}), Wo = w.partial().extend({
+}), Ko = w.partial().extend({
   status: e.enum(["draft", "built"]).optional(),
   deployed_at: e.string().optional()
-}), Ko = w.extend({
+}), zo = w.extend({
   id: e.string(),
   tenant_id: e.string(),
   status: e.enum(["draft", "built"]).default("built"),
@@ -97,15 +97,15 @@ const r = e.object({
   hostname: e.string(),
   is_mobile: e.boolean().optional(),
   timestamp: e.string()
-}), zo = re.extend({
+}), qo = re.extend({
   id: e.string()
-}), qo = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), Xo = e.enum([
+}), Xo = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), Vo = e.enum([
   "CREATE_USER",
   "GET_USER",
   "UPDATE_USER",
   "SEND_REQUEST",
   "SEND_EMAIL"
-]), Vo = e.enum(["VERIFY_EMAIL"]), se = e.object({
+]), Yo = e.enum(["VERIFY_EMAIL"]), se = e.object({
   require_mx_record: e.boolean().optional(),
   block_aliases: e.boolean().optional(),
   block_free_emails: e.boolean().optional(),
@@ -162,13 +162,13 @@ const r = e.object({
   actions: e.array(_e).optional().default([]).openapi({
     description: "The list of actions to execute in sequence"
   })
-}), Yo = ge.extend({
+}), Zo = ge.extend({
   ...r.shape,
   id: e.string().openapi({
     description: "Unique identifier for the flow",
     example: "af_12tMpdJ3iek7svMyZkSh5M"
   })
-}), Zo = e.object({
+}), Qo = e.object({
   page: e.string().min(0).optional().default("0").transform((t) => parseInt(t, 10)).openapi({
     description: "The page number where 0 is the first page"
   }),
@@ -184,7 +184,7 @@ const r = e.object({
   q: e.string().optional().openapi({
     description: "A lucene query string used to filter the results"
   })
-}), Qo = e.object({
+}), $o = e.object({
   start: e.number(),
   limit: e.number(),
   length: e.number(),
@@ -290,9 +290,9 @@ const r = e.object({
   email: e.string().optional(),
   login_count: e.number().default(0),
   identities: e.array(me).optional()
-}), $o = fe.omit({
+}), Jo = fe.omit({
   registration_completed_at: !0
-}), Jo = j.extend({
+}), en = j.extend({
   login_count: e.number(),
   multifactor: e.array(e.string()).optional(),
   last_ip: e.string().optional(),
@@ -523,7 +523,7 @@ const ye = e.object({
   user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({
     description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies."
   })
-}), en = e.object({
+}), tn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   ...ye.shape,
@@ -562,7 +562,7 @@ const ye = e.object({
   ...Ae.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), tn = e.array(Ie), Ce = e.enum(["iat", "rat"]), Te = e.object({
+}), on = e.array(Ie), Ce = e.enum(["iat", "rat"]), Te = e.object({
   id: e.string(),
   token_hash: e.string(),
   type: Ce,
@@ -571,7 +571,7 @@ const ye = e.object({
   constraints: e.record(e.unknown()).optional(),
   single_use: e.boolean().default(!1),
   expires_at: e.string().optional()
-}), on = e.object({
+}), nn = e.object({
   created_at: e.string(),
   used_at: e.string().optional(),
   revoked_at: e.string().optional(),
@@ -774,12 +774,12 @@ const De = e.object({
     sdkSrc: e.string().optional(),
     sdk_src: e.string().optional()
   }).passthrough()
-}).passthrough(), nn = He.omit({
+}).passthrough(), an = He.omit({
   id: !0,
   created_at: !0,
   updated_at: !0
 });
-var v = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.ID_TOKEN = "id_token", t.TOKEN_ID_TOKEN = "token id_token", t.CODE = "code", t))(v || {}), D = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(D || {}), L = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(L || {});
+var v = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.ID_TOKEN = "id_token", t.TOKEN_ID_TOKEN = "id_token token", t.CODE = "code", t))(v || {}), D = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(D || {}), L = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(L || {});
 const Ge = e.object({
   client_id: e.string(),
   act_as: e.string().optional(),
@@ -804,7 +804,7 @@ const Ge = e.object({
   acr_values: e.string().optional(),
   // The following fields are not available in Auth0
   vendor_id: e.string().optional()
-}), an = e.object({
+}), rn = e.object({
   colors: e.object({
     primary: e.string(),
     // Auth0 supports either a hex color string ("#ffffff") or a gradient
@@ -868,7 +868,7 @@ const Ge = e.object({
   expires_at: e.string(),
   used_at: e.string().optional(),
   user_id: e.string().optional()
-}), rn = e.object({
+}), sn = e.object({
   ...We.shape,
   created_at: e.string()
 }), Ke = e.object({
@@ -1021,7 +1021,7 @@ const ze = e.object({
   show_as_button: e.boolean().optional(),
   metadata: e.record(e.any()).optional(),
   is_system: e.boolean().optional()
-}), sn = e.object({
+}), ln = e.object({
   id: e.string(),
   created_at: e.string().transform((t) => t === null ? "" : t),
   updated_at: e.string().transform((t) => t === null ? "" : t)
@@ -1060,7 +1060,7 @@ const ze = e.object({
     methods: e.array(Xe)
   }).optional(),
   tls_policy: e.string().optional()
-}), ln = Ve.extend({
+}), pn = Ve.extend({
   tenant_id: e.string()
 }), O = e.object({
   id: e.string(),
@@ -1329,7 +1329,7 @@ const ze = e.object({
   It,
   Ct,
   Tt
-]), pn = /* @__PURE__ */ new Set([
+]), cn = /* @__PURE__ */ new Set([
   "BOOLEAN",
   "CARDS",
   "CHOICE",
@@ -1343,7 +1343,7 @@ const ze = e.object({
   "TEL",
   "TEXT",
   "URL"
-]), cn = e.object({
+]), dn = e.object({
   id: e.string(),
   type: e.literal("submit"),
   label: e.string(),
@@ -1428,7 +1428,7 @@ const ze = e.object({
   }).optional()
 }).openapi({
   description: "Schema for flow-based forms (matches Auth0 Forms structure)"
-}), dn = e.object({
+}), _n = e.object({
   ...r.shape,
   ...Rt.shape,
   id: e.string()
@@ -1441,7 +1441,7 @@ const ze = e.object({
   text: e.string(),
   href: e.string(),
   linkText: e.string().optional()
-}), _n = e.object({
+}), gn = e.object({
   /** Screen identifier for CSS targeting (e.g., 'identifier', 'enter-password', 'signup') */
   name: e.string().optional(),
   action: e.string(),
@@ -1454,13 +1454,13 @@ const ze = e.object({
   /** Footer HTML content displayed at the very bottom of the widget (e.g., terms and conditions) */
   footer: e.string().optional()
 });
-function gn(t) {
+function un(t) {
   return t.category === "BLOCK";
 }
-function un(t) {
+function mn(t) {
   return t.category === "WIDGET";
 }
-function mn(t) {
+function hn(t) {
   return t.category === "FIELD";
 }
 const x = e.enum([
@@ -1493,7 +1493,7 @@ const x = e.enum([
   "ensure-username",
   "set-preferred-username",
   "account-linking"
-]), hn = {
+]), bn = {
   "ensure-username": {
     name: "Ensure Username",
     description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1546,7 +1546,7 @@ const x = e.enum([
   ...p,
   trigger_id: M,
   code_id: e.string()
-}), bn = e.union([
+}), fn = e.union([
   Dt,
   Lt,
   Ut,
@@ -1575,7 +1575,7 @@ const x = e.enum([
   ...r.shape,
   hook_id: e.string(),
   code_id: e.string()
-}), fn = e.union([
+}), En = e.union([
   Ft,
   Pt,
   Mt,
@@ -1583,7 +1583,7 @@ const x = e.enum([
 ]), Gt = e.object({
   code: e.string().max(1e5),
   secrets: e.record(e.string()).optional()
-}), En = Gt.extend({
+}), Sn = Gt.extend({
   id: e.string(),
   tenant_id: e.string(),
   ...r.shape
@@ -1603,7 +1603,7 @@ const x = e.enum([
   ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
   roles: e.array(e.string()).default([]).optional(),
   send_invitation_email: e.boolean().default(!0).optional()
-}), Sn = e.object({
+}), yn = e.object({
   id: e.string(),
   organization_id: e.string().max(50),
   created_at: e.string().datetime(),
@@ -1648,15 +1648,13 @@ const x = e.enum([
         path: [n],
         message: `EC JWK is missing required member '${n}'`
       });
-}), yn = e.object({
-  keys: e.array(zt)
 }), An = e.object({
+  keys: e.array(zt)
+}), In = e.object({
   issuer: e.string(),
   authorization_endpoint: e.string(),
   token_endpoint: e.string(),
-  device_authorization_endpoint: e.string(),
   userinfo_endpoint: e.string(),
-  mfa_challenge_endpoint: e.string(),
   jwks_uri: e.string(),
   registration_endpoint: e.string().optional(),
   revocation_endpoint: e.string(),
@@ -1705,7 +1703,7 @@ const qt = e.nativeEnum(G), Xt = e.object({
   // ISO timestamp persisted for audit/metadata; not used to reject resumed sessions
 }).openapi({
   description: "This represents a login sesion"
-}), In = e.object({
+}), Cn = e.object({
   ...Vt.shape,
   id: e.string().openapi({
     description: "This is is used as the state in the universal login"
@@ -1925,7 +1923,7 @@ const qt = e.nativeEnum(G), Xt = e.object({
   auth0_client: Qt.optional(),
   log_id: e.string().optional(),
   location_info: $t.optional()
-}), Cn = e.object({
+}), Tn = e.object({
   ...Jt.shape,
   log_id: e.string()
 }), eo = e.enum([
@@ -1949,7 +1947,7 @@ const qt = e.nativeEnum(G), Xt = e.object({
   sink: e.record(e.string(), e.unknown()),
   filters: e.array(to).optional(),
   isPriority: e.boolean().optional()
-}), Tn = oo.extend({
+}), On = oo.extend({
   id: e.string(),
   status: B,
   created_at: e.string().optional(),
@@ -1997,7 +1995,7 @@ const qt = e.nativeEnum(G), Xt = e.object({
   password: e.string(),
   algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
   is_current: e.boolean().default(!0)
-}), On = so.extend({
+}), Nn = so.extend({
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
@@ -2020,14 +2018,17 @@ const qt = e.nativeEnum(G), Xt = e.object({
     "Metadata related to the device used in the session"
   ),
   clients: e.array(e.string()).describe("List of client details for the session")
-}), Nn = e.object({
+}), wn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   authenticated_at: e.string(),
   last_interaction_at: e.string(),
   ...lo.shape
-}), wn = e.object({
+}), jn = e.object({
   kid: e.string().openapi({ description: "The key id of the signing key" }),
+  tenant_id: e.string().optional().openapi({
+    description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped."
+  }),
   cert: e.string().openapi({ description: "The public certificate of the signing key" }),
   fingerprint: e.string().openapi({ description: "The cert fingerprint" }),
   thumbprint: e.string().openapi({ description: "The cert thumbprint" }),
@@ -2236,14 +2237,14 @@ const qt = e.nativeEnum(G), Xt = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), jn = e.object({
+}), Rn = e.object({
   created_at: e.string().nullable().transform((t) => t ?? ""),
   updated_at: e.string().nullable().transform((t) => t ?? ""),
   ...po.shape,
   id: e.string()
 });
 var co = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(co || {});
-const Rn = e.object({
+const kn = e.object({
   access_token: e.string(),
   id_token: e.string().optional(),
   scope: e.string().optional(),
@@ -2325,20 +2326,43 @@ const _o = e.object({
   fonts: uo,
   page_background: mo,
   widget: ho
-}), kn = bo.extend({
+}), vn = bo.extend({
   themeId: e.string()
-}), vn = e.object({
+}), Dn = e.object({
   universal_login_experience: e.enum(["new", "classic"]).default("new"),
   identifier_first: e.boolean().default(!0),
   password_first: e.boolean().default(!1),
   webauthn_platform_first_factor: e.boolean()
-}), Dn = e.object({
+}), Ln = e.object({
   name: e.string(),
   enabled: e.boolean().optional().default(!0),
   default_from_address: e.string().optional(),
   credentials: e.record(e.string(), e.unknown()),
   settings: e.object({}).optional()
-}), fo = e.object({
+}), fo = e.enum([
+  "verify_email",
+  "verify_email_by_code",
+  "reset_email",
+  "reset_email_by_code",
+  "welcome_email",
+  "blocked_account",
+  "stolen_credentials",
+  "enrollment_email",
+  "mfa_oob_code",
+  "change_password",
+  "password_reset",
+  "user_invitation"
+]), Un = e.object({
+  template: fo,
+  body: e.string(),
+  from: e.string(),
+  subject: e.string(),
+  syntax: e.literal("liquid").default("liquid"),
+  resultUrl: e.string().optional(),
+  urlLifetimeInSeconds: e.number().int().nonnegative().optional(),
+  includeEmailInRedirect: e.boolean().default(!1),
+  enabled: e.boolean().default(!0)
+}), Eo = e.object({
   // Internal primary key (ULID). Never sent to clients in the new wire format.
   id: e.string(),
   // Link to the login session
@@ -2372,23 +2396,23 @@ const _o = e.object({
   // ISO of the *first* rotation. Anchors the leeway window so siblings minted
   // within the window don't extend the parent's exposure.
   rotated_at: e.string().optional()
-}), Ln = e.object({
+}), xn = e.object({
   // When the refresh token record was created.
   created_at: e.string(),
   // When the token was explicitly revoked (null = still active).
   revoked_at: e.string().optional(),
   // Spread in the rest of the refresh token properties.
-  ...fo.shape
-}), Un = e.object({
+  ...Eo.shape
+}), Fn = e.object({
   to: e.string(),
   message: e.string()
-}), xn = e.object({
+}), Pn = e.object({
   name: e.string(),
   options: e.object({})
-}), Eo = e.object({
+}), So = e.object({
   value: e.string(),
   description: e.string().optional()
-}), So = e.object({
+}), yo = e.object({
   token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
   enforce_policies: e.boolean().optional(),
   allow_skipping_userinfo: e.boolean().optional(),
@@ -2398,11 +2422,11 @@ const _o = e.object({
   mtls: e.object({
     bound_access_tokens: e.boolean().optional()
   }).optional()
-}), yo = e.object({
+}), Ao = e.object({
   id: e.string().optional(),
   name: e.string(),
   identifier: e.string(),
-  scopes: e.array(Eo).optional(),
+  scopes: e.array(So).optional(),
   signing_alg: e.string().optional(),
   signing_secret: e.string().optional(),
   token_lifetime: e.number().default(86400),
@@ -2410,30 +2434,30 @@ const _o = e.object({
   skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
   allow_offline_access: e.boolean().optional(),
   verificationKey: e.string().optional(),
-  options: So.optional(),
+  options: yo.optional(),
   is_system: e.boolean().optional(),
   metadata: e.record(e.any()).optional()
-}), Ao = e.object({
-  ...yo.shape,
+}), Io = e.object({
+  ...Ao.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Fn = e.array(Ao), Io = e.object({
+}), Mn = e.array(Io), Co = e.object({
   role_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string()
-}), Co = e.object({
-  ...Io.shape,
+}), To = e.object({
+  ...Co.shape,
   created_at: e.string()
-}), Pn = e.array(Co), To = e.object({
+}), Hn = e.array(To), Oo = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string(),
   organization_id: e.string().optional()
-}), Oo = e.object({
-  ...To.shape,
+}), No = e.object({
+  ...Oo.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), Mn = e.array(Oo), No = e.object({
+}), Gn = e.array(No), wo = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   resource_server_name: e.string(),
@@ -2441,17 +2465,17 @@ const _o = e.object({
   description: e.string().nullable().optional(),
   created_at: e.string().optional(),
   organization_id: e.string().optional()
-}), Hn = e.array(
-  No
-), wo = e.object({
+}), Bn = e.array(
+  wo
+), jo = e.object({
   user_id: e.string(),
   role_id: e.string(),
   organization_id: e.string().optional()
-}), jo = e.object({
-  ...wo.shape,
+}), Ro = e.object({
+  ...jo.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), Gn = e.array(jo), Ro = e.object({
+}), Wn = e.array(Ro), ko = e.object({
   id: e.string().optional().openapi({
     description: "The unique identifier of the role. If not provided, one will be generated."
   }),
@@ -2465,13 +2489,13 @@ const _o = e.object({
   metadata: e.record(e.any()).optional().openapi({
     description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios."
   })
-}), ko = Ro.extend({
+}), vo = ko.extend({
   id: e.string().openapi({
     description: "The unique identifier of the role"
   }),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Bn = e.array(ko), vo = e.object({
+}), Kn = e.array(vo), Do = e.object({
   logo_url: e.string().optional().openapi({
     description: "URL of the organization's logo"
   }),
@@ -2483,7 +2507,7 @@ const _o = e.object({
       description: "Page background color in hex format (e.g., #FFFFFF)"
     })
   }).optional()
-}).optional(), Do = e.object({
+}).optional(), Lo = e.object({
   connection_id: e.string().openapi({
     description: "ID of the connection"
   }),
@@ -2496,7 +2520,7 @@ const _o = e.object({
   is_signup_enabled: e.boolean().default(!0).openapi({
     description: "Whether signup is enabled for this connection"
   })
-}), Lo = e.object({
+}), Uo = e.object({
   client_credentials: e.object({
     enforce: e.boolean().default(!1).openapi({
       description: "Whether to enforce token quota limits"
@@ -2508,7 +2532,7 @@ const _o = e.object({
       description: "Maximum tokens per hour (0 = unlimited)"
     })
   }).optional()
-}).optional(), Uo = e.object({
+}).optional(), xo = e.object({
   id: e.string().optional(),
   name: e.string().min(1).regex(/^[a-z0-9_-]+$/, {
     message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores"
@@ -2518,31 +2542,31 @@ const _o = e.object({
   display_name: e.string().optional().openapi({
     description: "The display name of the organization"
   }),
-  branding: vo,
+  branding: Do,
   metadata: e.record(e.any()).default({}).optional().openapi({
     description: "Custom metadata for the organization"
   }),
-  enabled_connections: e.array(Do).default([]).optional().openapi({
+  enabled_connections: e.array(Lo).default([]).optional().openapi({
     description: "List of enabled connections for the organization"
   }),
-  token_quota: Lo
-}), Wn = e.object({
-  ...Uo.shape,
+  token_quota: Uo
+}), zn = e.object({
+  ...xo.shape,
   ...r.shape,
   id: e.string(),
   // Override name to be lenient when reading from database (to support existing uppercase names)
   name: e.string().min(1).openapi({
     description: "The name of the organization"
   })
-}), xo = e.object({
+}), Fo = e.object({
   connection_id: e.string().openapi({
     description: "ID of the tenant-level connection to enable for the org."
   }),
   assign_membership_on_login: e.boolean().optional().default(!1),
   show_as_button: e.boolean().optional().default(!0),
   is_signup_enabled: e.boolean().optional().default(!0)
-}), Fo = e.object({
-  ...xo.shape,
+}), Po = e.object({
+  ...Fo.shape,
   // Auth0 includes the embedded connection in GET responses.
   connection: e.object({
     name: e.string().optional(),
@@ -2550,20 +2574,20 @@ const _o = e.object({
   }).optional(),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Kn = e.array(
-  Fo
-), Po = e.object({
+}), qn = e.array(
+  Po
+), Mo = e.object({
   user_id: e.string().openapi({
     description: "ID of the user"
   }),
   organization_id: e.string().openapi({
     description: "ID of the organization"
   })
-}), zn = e.object({
-  ...Po.shape,
+}), Xn = e.object({
+  ...Mo.shape,
   ...r.shape,
   id: e.string()
-}), qn = e.object({
+}), Vn = e.object({
   // Session settings
   idle_session_lifetime: e.number().default(72),
   session_lifetime: e.number().default(168),
@@ -2663,7 +2687,7 @@ const _o = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), Xn = e.object({
+}), Yn = e.object({
   date: e.string().openapi({
     description: "Date these events occurred in ISO 8601 format",
     example: "2025-12-19"
@@ -2688,10 +2712,10 @@ const _o = e.object({
     description: "Approximate date and time the first event occurred in ISO 8601 format",
     example: "2025-12-19T00:00:00.000Z"
   })
-}), Vn = e.number().openapi({
+}), Zn = e.number().openapi({
   description: "Number of active users in the last 30 days",
   example: 1234
-}), Mo = e.enum([
+}), Ho = e.enum([
   "login",
   "login-id",
   "login-password",
@@ -2720,17 +2744,17 @@ const _o = e.object({
   "custom-form",
   "login-passwordless",
   "mfa-login-options"
-]), Ho = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+]), Go = e.record(e.string(), e.record(e.string(), e.string())).openapi({
   type: "object",
   additionalProperties: {
     type: "object",
     additionalProperties: { type: "string" }
   }
-}), Yn = e.object({
-  prompt: Mo,
+}), Qn = e.object({
+  prompt: Ho,
   language: e.string(),
-  custom_text: Ho
-}), Zn = {
+  custom_text: Go
+}), $n = {
   EMAIL: "email",
   SMS: "sms",
   USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2744,12 +2768,13 @@ const _o = e.object({
   OAUTH2: "oauth2",
   SAMLP: "samlp",
   WAAD: "waad",
-  ADFS: "adfs"
-}, Qn = {
+  ADFS: "adfs",
+  AUTH0: "auth0"
+}, Jn = {
   DATABASE: "database",
   SOCIAL: "social",
   PASSWORDLESS: "passwordless"
-}, Go = e.enum([
+}, Bo = e.enum([
   "phone",
   "totp",
   "email",
@@ -2759,7 +2784,7 @@ const _o = e.object({
   "passkey"
 ]), K = e.object({
   user_id: e.string(),
-  type: Go,
+  type: Bo,
   // Phone-specific
   phone_number: e.string().optional(),
   // TOTP-specific
@@ -2793,19 +2818,19 @@ function z(t, o) {
     path: ["public_key"]
   }));
 }
-const $n = K.superRefine(z), Jn = e.object({
+const ei = K.superRefine(z), ti = e.object({
   ...K.shape,
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
 }).superRefine(z);
-function ei(t) {
+function oi(t) {
   const [o, n] = t.split("|");
   if (!o || !n)
     throw new Error(`Invalid user_id: ${t}`);
   return { connection: o, id: n };
 }
-function ti(t) {
+function ni(t) {
   const {
     primary: o,
     secondaries: n,
@@ -2846,10 +2871,10 @@ function ti(t) {
   };
   return new Proxy(o, S);
 }
-function oi(t) {
+function ii(t) {
   return t;
 }
-function ni(t) {
+function ai(t) {
   var S, c, a, d, _, y, g, s, b, A, f, I;
   const o = t == null ? void 0 : t.options;
   if (!o)
@@ -2876,199 +2901,201 @@ function ni(t) {
     usernameMaxLength: ((I = (f = o.validation) == null ? void 0 : f.username) == null ? void 0 : I.max) ?? 15
   };
 }
-function ii(t) {
+function ri(t) {
   return typeof t == "object" && t !== null && !Array.isArray(t);
 }
 export {
-  Xo as Auth0ActionEnum,
+  Vo as Auth0ActionEnum,
   Qt as Auth0Client,
   D as AuthorizationResponseMode,
   v as AuthorizationResponseType,
   L as CodeChallengeMethod,
   k as ComponentCategory,
   R as ComponentType,
-  Vo as EmailActionEnum,
-  pn as FORM_FIELD_TYPES,
-  qo as FlowActionTypeEnum,
+  Yo as EmailActionEnum,
+  cn as FORM_FIELD_TYPES,
+  Xo as FlowActionTypeEnum,
   co as GrantType,
   $t as LocationInfo,
   Yt as LogTypes,
   G as LoginSessionState,
   ve as NodeType,
   ce as RedirectTargetEnum,
-  Zn as Strategy,
-  Qn as StrategyType,
+  $n as Strategy,
+  Jn as StrategyType,
   Q as actionDependencySchema,
   w as actionInsertSchema,
   Ue as actionNodeSchema,
-  Ko as actionSchema,
+  zo as actionSchema,
   $ as actionSecretSchema,
   Z as actionTriggerSchema,
-  Wo as actionUpdateSchema,
-  Vn as activeUsersResponseSchema,
+  Ko as actionUpdateSchema,
+  Zn as activeUsersResponseSchema,
   ee as actorSchema,
   he as addressSchema,
   ro as attackProtectionSchema,
   J as auditCategorySchema,
   re as auditEventInsertSchema,
-  zo as auditEventSchema,
+  qo as auditEventSchema,
   ae as auth0ClientSchema,
-  nn as auth0FlowInsertSchema,
+  an as auth0FlowInsertSchema,
   He as auth0FlowSchema,
-  Zo as auth0QuerySchema,
+  Qo as auth0QuerySchema,
   le as auth0UpdateUserActionSchema,
-  $o as auth0UserResponseSchema,
+  Jo as auth0UserResponseSchema,
   Ge as authParamsSchema,
-  $n as authenticationMethodInsertSchema,
-  Jn as authenticationMethodSchema,
-  Go as authenticationMethodTypeSchema,
+  ei as authenticationMethodInsertSchema,
+  ti as authenticationMethodSchema,
+  Bo as authenticationMethodTypeSchema,
   j as baseUserSchema,
   It as blockComponentSchema,
   _o as bordersSchema,
-  an as brandingSchema,
+  rn as brandingSchema,
   no as breachedPasswordDetectionSchema,
   io as bruteForceProtectionSchema,
   Ne as buttonComponentSchema,
   Ae as clientGrantInsertSchema,
-  tn as clientGrantListSchema,
+  on as clientGrantListSchema,
   Ie as clientGrantSchema,
   ye as clientInsertSchema,
   Te as clientRegistrationTokenInsertSchema,
-  on as clientRegistrationTokenSchema,
+  nn as clientRegistrationTokenSchema,
   Ce as clientRegistrationTokenTypeSchema,
-  en as clientSchema,
+  tn as clientSchema,
   We as codeInsertSchema,
-  rn as codeSchema,
+  sn as codeSchema,
   Be as codeTypeSchema,
   go as colorsSchema,
   kt as componentMessageSchema,
   ke as componentSchema,
   ze as connectionInsertSchema,
   Ke as connectionOptionsSchema,
-  sn as connectionSchema,
+  ln as connectionSchema,
   m as coordinatesSchema,
-  ti as createPassthroughAdapter,
-  oi as createWriteOnlyAdapter,
+  ni as createPassthroughAdapter,
+  ii as createWriteOnlyAdapter,
   qe as customDomainInsertSchema,
   Ve as customDomainSchema,
-  ln as customDomainWithTenantIdSchema,
-  Yn as customTextEntrySchema,
-  Ho as customTextSchema,
-  Xn as dailyStatsSchema,
-  Dn as emailProviderSchema,
+  pn as customDomainWithTenantIdSchema,
+  Qn as customTextEntrySchema,
+  Go as customTextSchema,
+  Yn as dailyStatsSchema,
+  Ln as emailProviderSchema,
+  fo as emailTemplateNameSchema,
+  Un as emailTemplateSchema,
   se as emailVerificationRulesSchema,
   pe as emailVerifyActionSchema,
   Me as endingSchema,
   Tt as fieldComponentSchema,
   _e as flowActionStepSchema,
   ge as flowInsertSchema,
-  Yo as flowSchema,
+  Zo as flowSchema,
   je as flowsFieldComponentSchema,
   Le as flowsFlowNodeSchema,
   De as flowsStepNodeSchema,
   u as fontDetailsSchema,
   uo as fontsSchema,
-  cn as formControlSchema,
+  dn as formControlSchema,
   Rt as formInsertSchema,
   U as formNodeComponentDefinition,
   jt as formNodeSchema,
-  dn as formSchema,
+  _n as formSchema,
   Re as genericComponentSchema,
   xe as genericNodeSchema,
-  ni as getConnectionIdentifierConfig,
+  ai as getConnectionIdentifierConfig,
   Gt as hookCodeInsertSchema,
-  En as hookCodeSchema,
-  bn as hookInsertSchema,
-  fn as hookSchema,
+  Sn as hookCodeSchema,
+  fn as hookInsertSchema,
+  En as hookSchema,
   H as hookTemplateId,
-  hn as hookTemplates,
+  bn as hookTemplates,
   me as identitySchema,
   Kt as inviteInsertSchema,
-  Sn as inviteSchema,
+  yn as inviteSchema,
   Wt as inviteeSchema,
   Bt as inviterSchema,
-  gn as isBlockComponent,
-  mn as isFieldComponent,
-  ii as isPlainObject,
-  un as isWidgetComponent,
-  yn as jwksKeySchema,
+  un as isBlockComponent,
+  hn as isFieldComponent,
+  ri as isPlainObject,
+  mn as isWidgetComponent,
+  An as jwksKeySchema,
   zt as jwksSchema,
   we as legalComponentSchema,
   ie as locationInfoSchema,
   Jt as logInsertSchema,
-  Cn as logSchema,
+  Tn as logSchema,
   to as logStreamFilterSchema,
   oo as logStreamInsertSchema,
-  Tn as logStreamSchema,
+  On as logStreamSchema,
   B as logStreamStatusSchema,
   eo as logStreamTypeSchema,
   Xt as loginSessionAuthStrategySchema,
   Vt as loginSessionInsertSchema,
-  In as loginSessionSchema,
+  Cn as loginSessionSchema,
   qt as loginSessionStateSchema,
   Fe as nodeSchema,
-  An as openIDConfigurationSchema,
-  vo as organizationBrandingSchema,
-  xo as organizationConnectionInsertSchema,
-  Kn as organizationConnectionListSchema,
-  Fo as organizationConnectionSchema,
-  Do as organizationEnabledConnectionSchema,
-  Uo as organizationInsertSchema,
-  Wn as organizationSchema,
-  Lo as organizationTokenQuotaSchema,
+  In as openIDConfigurationSchema,
+  Do as organizationBrandingSchema,
+  Fo as organizationConnectionInsertSchema,
+  qn as organizationConnectionListSchema,
+  Po as organizationConnectionSchema,
+  Lo as organizationEnabledConnectionSchema,
+  xo as organizationInsertSchema,
+  zn as organizationSchema,
+  Uo as organizationTokenQuotaSchema,
   mo as pageBackgroundSchema,
-  ei as parseUserId,
+  oi as parseUserId,
   so as passwordInsertSchema,
-  On as passwordSchema,
+  Nn as passwordSchema,
   ue as profileDataSchema,
-  Mo as promptScreenSchema,
-  vn as promptSettingSchema,
+  Ho as promptScreenSchema,
+  Dn as promptSettingSchema,
   de as redirectActionSchema,
-  fo as refreshTokenInsertSchema,
-  Ln as refreshTokenSchema,
+  Eo as refreshTokenInsertSchema,
+  xn as refreshTokenSchema,
   oe as requestContextSchema,
-  yo as resourceServerInsertSchema,
-  Fn as resourceServerListSchema,
-  So as resourceServerOptionsSchema,
-  Ao as resourceServerSchema,
-  Eo as resourceServerScopeSchema,
+  Ao as resourceServerInsertSchema,
+  Mn as resourceServerListSchema,
+  yo as resourceServerOptionsSchema,
+  Io as resourceServerSchema,
+  So as resourceServerScopeSchema,
   ne as responseContextSchema,
   Oe as richTextComponentSchema,
-  Ro as roleInsertSchema,
-  Bn as roleListSchema,
-  Io as rolePermissionInsertSchema,
-  Pn as rolePermissionListSchema,
-  Co as rolePermissionSchema,
-  ko as roleSchema,
+  ko as roleInsertSchema,
+  Kn as roleListSchema,
+  Co as rolePermissionInsertSchema,
+  Hn as rolePermissionListSchema,
+  To as rolePermissionSchema,
+  vo as roleSchema,
   vt as screenLinkSchema,
   lo as sessionInsertSchema,
-  Nn as sessionSchema,
-  wn as signingKeySchema,
-  xn as smsProviderSchema,
-  Un as smsSendParamsSchema,
+  wn as sessionSchema,
+  jn as signingKeySchema,
+  Pn as smsProviderSchema,
+  Fn as smsSendParamsSchema,
   Pe as startSchema,
   ao as suspiciousIpThrottlingSchema,
   te as targetSchema,
   po as tenantInsertSchema,
-  jn as tenantSchema,
-  qn as tenantSettingsSchema,
+  Rn as tenantSchema,
+  Vn as tenantSettingsSchema,
   bo as themeInsertSchema,
-  kn as themeSchema,
-  Rn as tokenResponseSchema,
-  Qo as totalsSchema,
-  _n as uiScreenSchema,
+  vn as themeSchema,
+  kn as tokenResponseSchema,
+  $o as totalsSchema,
+  gn as uiScreenSchema,
   be as userInsertSchema,
-  Po as userOrganizationInsertSchema,
-  zn as userOrganizationSchema,
-  To as userPermissionInsertSchema,
-  Mn as userPermissionListSchema,
-  Oo as userPermissionSchema,
-  Hn as userPermissionWithDetailsListSchema,
-  No as userPermissionWithDetailsSchema,
-  Jo as userResponseSchema,
-  wo as userRoleInsertSchema,
-  Gn as userRoleListSchema,
-  jo as userRoleSchema,
+  Mo as userOrganizationInsertSchema,
+  Xn as userOrganizationSchema,
+  Oo as userPermissionInsertSchema,
+  Gn as userPermissionListSchema,
+  No as userPermissionSchema,
+  Bn as userPermissionWithDetailsListSchema,
+  wo as userPermissionWithDetailsSchema,
+  en as userResponseSchema,
+  jo as userRoleInsertSchema,
+  Wn as userRoleListSchema,
+  Ro as userRoleSchema,
   fe as userSchema,
   Xe as verificationMethodsSchema,
   Ct as widgetComponentSchema,