@authhero/adapter-interfaces 1.15.0 → 1.17.0

package/dist/adapter-interfaces.mjs

@@ -1,29 +1,29 @@
 import { z as e } from "@hono/zod-openapi";
-const r = e.object({
+const a = e.object({
   created_at: e.string(),
   updated_at: e.string()
-}), Z = e.object({
+}), w = e.object({
   id: e.string(),
   version: e.string().optional()
-}), Q = e.object({
+}), j = e.object({
   name: e.string(),
   version: e.string()
-}), $ = e.object({
+}), R = e.object({
   name: e.string(),
   // Optional on writes so PATCH callers can omit the value to preserve the
   // existing secret. The adapter merges by name when value is missing.
   value: e.string().optional()
-}), w = e.object({
+}), k = e.object({
   name: e.string().max(255),
   code: e.string().max(1e5),
-  supported_triggers: e.array(Z).optional(),
+  supported_triggers: e.array(w).optional(),
   runtime: e.string().max(50).optional(),
-  dependencies: e.array(Q).optional(),
-  secrets: e.array($).optional()
-}), Wo = w.partial().extend({
+  dependencies: e.array(j).optional(),
+  secrets: e.array(R).optional()
+}), zo = k.partial().extend({
   status: e.enum(["draft", "built"]).optional(),
   deployed_at: e.string().optional()
-}), Ko = w.extend({
+}), qo = k.extend({
   id: e.string(),
   tenant_id: e.string(),
   status: e.enum(["draft", "built"]).default("built"),
@@ -35,13 +35,26 @@ const r = e.object({
       value: e.string().optional()
     })
   ).optional(),
-  ...r.shape
-}), J = e.enum([
+  ...a.shape
+}), J = e.object({
+  action_id: e.string(),
+  code: e.string().max(1e5),
+  runtime: e.string().max(50).optional(),
+  dependencies: e.array(j).optional(),
+  secrets: e.array(R).optional(),
+  supported_triggers: e.array(w).optional(),
+  deployed: e.boolean().default(!0)
+}), Vo = J.extend({
+  id: e.string(),
+  tenant_id: e.string(),
+  number: e.number().int(),
+  ...a.shape
+}), ee = e.enum([
   "user_action",
   "admin_action",
   "system",
   "api"
-]), ee = e.object({
+]), te = e.object({
   type: e.enum(["user", "admin", "system", "api_key", "client_credentials"]),
   id: e.string().optional(),
   email: e.string().optional(),
@@ -49,13 +62,13 @@ const r = e.object({
   org_name: e.string().optional(),
   scopes: e.array(e.string()).optional(),
   client_id: e.string().optional()
-}), te = e.object({
+}), oe = e.object({
   type: e.string(),
   id: e.string(),
   before: e.record(e.unknown()).optional(),
   after: e.record(e.unknown()).optional(),
   diff: e.record(e.object({ old: e.unknown(), new: e.unknown() })).optional()
-}), oe = e.object({
+}), ne = e.object({
   method: e.string(),
   path: e.string(),
   query: e.record(e.string()).optional(),
@@ -63,56 +76,56 @@ const r = e.object({
   ip: e.string(),
   user_agent: e.string().optional(),
   correlation_id: e.string().optional()
-}), ne = e.object({
+}), ie = e.object({
   status_code: e.number(),
   body: e.unknown().optional()
-}), ie = e.object({
+}), ae = e.object({
   country_code: e.string(),
   city_name: e.string(),
   latitude: e.string(),
   longitude: e.string(),
   time_zone: e.string(),
   continent_code: e.string()
-}), ae = e.object({
+}), re = e.object({
   name: e.string(),
   version: e.string(),
   env: e.record(e.string()).optional()
-}), re = e.object({
+}), se = e.object({
   tenant_id: e.string(),
   event_type: e.string(),
   log_type: e.string(),
   description: e.string().optional(),
-  category: J,
-  actor: ee,
-  target: te,
-  request: oe,
-  response: ne.optional(),
+  category: ee,
+  actor: te,
+  target: oe,
+  request: ne,
+  response: ie.optional(),
   connection: e.string().optional(),
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
   audience: e.string().optional(),
   scope: e.string().optional(),
-  location: ie.optional(),
-  auth0_client: ae.optional(),
+  location: ae.optional(),
+  auth0_client: re.optional(),
   hostname: e.string(),
   is_mobile: e.boolean().optional(),
   timestamp: e.string()
-}), zo = re.extend({
+}), Xo = se.extend({
   id: e.string()
-}), qo = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), Xo = e.enum([
+}), Yo = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), Zo = e.enum([
   "CREATE_USER",
   "GET_USER",
   "UPDATE_USER",
   "SEND_REQUEST",
   "SEND_EMAIL"
-]), Vo = e.enum(["VERIFY_EMAIL"]), se = e.object({
+]), Qo = e.enum(["VERIFY_EMAIL"]), le = e.object({
   require_mx_record: e.boolean().optional(),
   block_aliases: e.boolean().optional(),
   block_free_emails: e.boolean().optional(),
   block_disposable_emails: e.boolean().optional(),
   blocklist: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional()
-}), le = e.object({
+}), pe = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("AUTH0"),
@@ -124,7 +137,7 @@ const r = e.object({
     user_id: e.string(),
     changes: e.record(e.string(), e.any())
   })
-}), pe = e.object({
+}), ce = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("EMAIL"),
@@ -133,9 +146,9 @@ const r = e.object({
   mask_output: e.boolean().optional(),
   params: e.object({
     email: e.string(),
-    rules: se.optional()
+    rules: le.optional()
   })
-}), ce = e.enum(["change-email", "account", "custom"]), de = e.object({
+}), de = e.enum(["change-email", "account", "custom"]), _e = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("REDIRECT"),
@@ -143,32 +156,32 @@ const r = e.object({
   allow_failure: e.boolean().optional(),
   mask_output: e.boolean().optional(),
   params: e.object({
-    target: ce.openapi({
+    target: de.openapi({
       description: "The predefined target to redirect to, or 'custom' for a custom URL"
     }),
     custom_url: e.string().optional().openapi({
       description: "Custom URL to redirect to when target is 'custom'"
     })
   })
-}), _e = e.union([
-  le,
+}), ge = e.union([
   pe,
-  de
-]), ge = e.object({
+  ce,
+  _e
+]), ue = e.object({
   name: e.string().min(1).max(150).openapi({
     description: "The name of the flow"
   }),
   // Actions is an array of action steps (Auth0 stores as JSON blob)
-  actions: e.array(_e).optional().default([]).openapi({
+  actions: e.array(ge).optional().default([]).openapi({
     description: "The list of actions to execute in sequence"
   })
-}), Yo = ge.extend({
-  ...r.shape,
+}), $o = ue.extend({
+  ...a.shape,
   id: e.string().openapi({
     description: "Unique identifier for the flow",
     example: "af_12tMpdJ3iek7svMyZkSh5M"
   })
-}), Zo = e.object({
+}), Jo = e.object({
   page: e.string().min(0).optional().default("0").transform((t) => parseInt(t, 10)).openapi({
     description: "The page number where 0 is the first page"
   }),
@@ -184,12 +197,12 @@ const r = e.object({
   q: e.string().optional().openapi({
     description: "A lucene query string used to filter the results"
   })
-}), Qo = e.object({
+}), en = e.object({
   start: e.number(),
   limit: e.number(),
   length: e.number(),
   total: e.number().optional()
-}), ue = e.object({
+}), me = e.object({
   email: e.string().optional(),
   email_verified: e.boolean().optional(),
   name: e.string().optional(),
@@ -198,7 +211,7 @@ const r = e.object({
   phone_number: e.string().optional(),
   phone_verified: e.boolean().optional(),
   family_name: e.string().optional()
-}).catchall(e.any()), me = e.object({
+}).catchall(e.any()), he = e.object({
   connection: e.string(),
   user_id: e.string(),
   provider: e.string(),
@@ -211,8 +224,8 @@ const r = e.object({
   access_token: e.string().optional(),
   access_token_secret: e.string().optional(),
   refresh_token: e.string().optional(),
-  profileData: ue.optional()
-}), he = e.object({
+  profileData: me.optional()
+}), be = e.object({
   formatted: e.string().optional(),
   // Full mailing address
   street_address: e.string().optional(),
@@ -225,7 +238,7 @@ const r = e.object({
   // Zip code or postal code
   country: e.string().optional()
   // Country name
-}).optional(), j = e.object({
+}).optional(), v = e.object({
   email: e.string().optional().transform((t) => t && t.toLowerCase()),
   username: e.string().refine((t) => !t.includes("@"), {
     message: 'Usernames must not contain "@". Use the email field for email addresses.'
@@ -257,8 +270,8 @@ const r = e.object({
   zoneinfo: e.string().optional(),
   // e.g., "Europe/Paris"
   // OIDC address claim (OIDC Core 5.1.1)
-  address: he
-}), be = j.extend({
+  address: be
+}), fe = v.extend({
   email_verified: e.boolean().default(!1),
   verify_email: e.boolean().optional(),
   last_ip: e.string().optional(),
@@ -281,31 +294,31 @@ const r = e.object({
     hash: e.string(),
     algorithm: e.string()
   }).optional()
-}), fe = e.object({
-  ...be.omit({ password: !0 }).shape,
-  ...r.shape,
+}), Ee = e.object({
+  ...fe.omit({ password: !0 }).shape,
+  ...a.shape,
   user_id: e.string(),
   provider: e.string(),
   is_social: e.boolean(),
   email: e.string().optional(),
   login_count: e.number().default(0),
-  identities: e.array(me).optional()
-}), $o = fe.omit({
+  identities: e.array(he).optional()
+}), tn = Ee.omit({
   registration_completed_at: !0
-}), Jo = j.extend({
+}), on = v.extend({
   login_count: e.number(),
   multifactor: e.array(e.string()).optional(),
   last_ip: e.string().optional(),
   last_login: e.string().optional(),
   user_id: e.string()
 }).catchall(e.any());
-let Ee = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Se = (t = 21) => {
+let Se = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", ye = (t = 21) => {
   let o = "", n = crypto.getRandomValues(new Uint8Array(t |= 0));
   for (; t--; )
-    o += Ee[n[t] & 63];
+    o += Se[n[t] & 63];
   return o;
 };
-const ye = e.object({
+const Ae = e.object({
   client_id: e.string().optional().openapi({
     description: "ID of this client. Generated server-side if omitted (Auth0 behavior)."
   }),
@@ -318,7 +331,7 @@ const ye = e.object({
   global: e.boolean().default(!1).openapi({
     description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)."
   }),
-  client_secret: e.string().default(() => Se()).optional().openapi({
+  client_secret: e.string().default(() => ye()).optional().openapi({
     description: "Client secret (which you must not make public)."
   }),
   app_type: e.enum([
@@ -523,14 +536,14 @@ const ye = e.object({
   user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({
     description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies."
   })
-}), en = e.object({
+}), nn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
-  ...ye.shape,
+  ...Ae.shape,
   // Insert allows omitting (server-generated to match Auth0). The read schema
   // always has it — the row in storage is non-null.
   client_id: e.string()
-}), Ae = e.object({
+}), Ie = e.object({
   client_id: e.string().min(1).openapi({
     description: "ID of the client."
   }),
@@ -555,37 +568,37 @@ const ye = e.object({
   authorization_details_types: e.array(e.string()).optional().openapi({
     description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement."
   })
-}), Ie = e.object({
+}), Ce = e.object({
   id: e.string().openapi({
     description: "ID of the client grant."
   }),
-  ...Ae.shape,
+  ...Ie.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), tn = e.array(Ie), Ce = e.enum(["iat", "rat"]), Te = e.object({
+}), an = e.array(Ce), Te = e.enum(["iat", "rat"]), Oe = e.object({
   id: e.string(),
   token_hash: e.string(),
-  type: Ce,
+  type: Te,
   client_id: e.string().optional(),
   sub: e.string().optional(),
   constraints: e.record(e.unknown()).optional(),
   single_use: e.boolean().default(!1),
   expires_at: e.string().optional()
-}), on = e.object({
+}), rn = e.object({
   created_at: e.string(),
   used_at: e.string().optional(),
   revoked_at: e.string().optional(),
-  ...Te.shape
+  ...Oe.shape
 }), m = e.object({
   x: e.number(),
   y: e.number()
 });
-var R = /* @__PURE__ */ ((t) => (t.RICH_TEXT = "RICH_TEXT", t.NEXT_BUTTON = "NEXT_BUTTON", t.BACK_BUTTON = "BACK_BUTTON", t.SUBMIT_BUTTON = "SUBMIT_BUTTON", t.DIVIDER = "DIVIDER", t.TEXT = "TEXT", t.EMAIL = "EMAIL", t.PASSWORD = "PASSWORD", t.NUMBER = "NUMBER", t.PHONE = "PHONE", t.DATE = "DATE", t.CHECKBOX = "CHECKBOX", t.RADIO = "RADIO", t.SELECT = "SELECT", t.HIDDEN = "HIDDEN", t.LEGAL = "LEGAL", t))(R || {}), k = /* @__PURE__ */ ((t) => (t.BLOCK = "BLOCK", t.FIELD = "FIELD", t))(k || {});
+var D = /* @__PURE__ */ ((t) => (t.RICH_TEXT = "RICH_TEXT", t.NEXT_BUTTON = "NEXT_BUTTON", t.BACK_BUTTON = "BACK_BUTTON", t.SUBMIT_BUTTON = "SUBMIT_BUTTON", t.DIVIDER = "DIVIDER", t.TEXT = "TEXT", t.EMAIL = "EMAIL", t.PASSWORD = "PASSWORD", t.NUMBER = "NUMBER", t.PHONE = "PHONE", t.DATE = "DATE", t.CHECKBOX = "CHECKBOX", t.RADIO = "RADIO", t.SELECT = "SELECT", t.HIDDEN = "HIDDEN", t.LEGAL = "LEGAL", t))(D || {}), L = /* @__PURE__ */ ((t) => (t.BLOCK = "BLOCK", t.FIELD = "FIELD", t))(L || {});
 const C = e.object({
   id: e.string(),
-  category: e.nativeEnum(k),
-  type: e.nativeEnum(R)
-}), Oe = C.extend({
+  category: e.nativeEnum(L),
+  type: e.nativeEnum(D)
+}), Ne = C.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -597,7 +610,7 @@ const C = e.object({
   config: e.object({
     content: e.string()
   }).passthrough()
-}), Ne = C.extend({
+}), we = C.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -619,7 +632,7 @@ const C = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), we = C.extend({
+}), je = C.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -633,7 +646,7 @@ const C = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), je = C.extend({
+}), Re = C.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -686,19 +699,19 @@ const C = e.object({
     label: e.string().optional(),
     placeholder: e.string().optional()
   }).passthrough()
-}), Re = e.object({
+}), ke = e.object({
   id: e.string(),
   category: e.string(),
   type: e.string()
-}).passthrough(), ke = e.union([
-  Oe,
+}).passthrough(), ve = e.union([
   Ne,
   we,
   je,
-  Re
+  Re,
+  ke
 ]);
-var ve = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(ve || {});
-const De = e.object({
+var De = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(De || {});
+const Le = e.object({
   id: e.string(),
   type: e.literal(
     "STEP"
@@ -707,10 +720,10 @@ const De = e.object({
   coordinates: m,
   alias: e.string().optional(),
   config: e.object({
-    components: e.array(ke),
+    components: e.array(ve),
     next_node: e.string()
   }).passthrough()
-}), Le = e.object({
+}), Ue = e.object({
   id: e.string(),
   type: e.literal(
     "FLOW"
@@ -722,7 +735,7 @@ const De = e.object({
     flow_id: e.string(),
     next_node: e.string()
   })
-}), Ue = e.object({
+}), xe = e.object({
   id: e.string(),
   type: e.literal(
     "ACTION"
@@ -744,47 +757,47 @@ const De = e.object({
       description: "The next node to navigate to after action (for non-redirect actions)"
     })
   }).passthrough()
-}), xe = e.object({
+}), Fe = e.object({
   id: e.string(),
   type: e.string(),
   coordinates: m
-}).passthrough(), Fe = e.union([
-  De,
+}).passthrough(), Pe = e.union([
   Le,
   Ue,
-  xe
-]), Pe = e.object({
+  xe,
+  Fe
+]), Me = e.object({
   next_node: e.string(),
   coordinates: m
-}).passthrough(), Me = e.object({
+}).passthrough(), He = e.object({
   resume_flow: e.boolean().optional(),
   coordinates: m
-}).passthrough(), He = e.object({
+}).passthrough(), Ge = e.object({
   id: e.string(),
   name: e.string(),
   languages: e.object({
     primary: e.string()
   }).passthrough(),
-  nodes: e.array(Fe),
-  start: Pe,
-  ending: Me,
+  nodes: e.array(Pe),
+  start: Me,
+  ending: He,
   created_at: e.string(),
   updated_at: e.string(),
   links: e.object({
     sdkSrc: e.string().optional(),
     sdk_src: e.string().optional()
   }).passthrough()
-}).passthrough(), nn = He.omit({
+}).passthrough(), sn = Ge.omit({
   id: !0,
   created_at: !0,
   updated_at: !0
 });
-var v = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.ID_TOKEN = "id_token", t.TOKEN_ID_TOKEN = "token id_token", t.CODE = "code", t))(v || {}), D = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(D || {}), L = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(L || {});
-const Ge = e.object({
+var U = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.ID_TOKEN = "id_token", t.TOKEN_ID_TOKEN = "id_token token", t.CODE = "code", t))(U || {}), x = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(x || {}), F = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(F || {});
+const Be = e.object({
   client_id: e.string(),
   act_as: e.string().optional(),
-  response_type: e.nativeEnum(v).optional(),
-  response_mode: e.nativeEnum(D).optional(),
+  response_type: e.nativeEnum(U).optional(),
+  response_mode: e.nativeEnum(x).optional(),
   redirect_uri: e.string().optional(),
   audience: e.string().optional(),
   organization: e.string().optional(),
@@ -792,7 +805,7 @@ const Ge = e.object({
   nonce: e.string().optional(),
   scope: e.string().optional(),
   prompt: e.string().optional(),
-  code_challenge_method: e.nativeEnum(L).optional(),
+  code_challenge_method: e.nativeEnum(F).optional(),
   code_challenge: e.string().optional(),
   username: e.string().optional(),
   ui_locales: e.string().optional(),
@@ -804,7 +817,7 @@ const Ge = e.object({
   acr_values: e.string().optional(),
   // The following fields are not available in Auth0
   vendor_id: e.string().optional()
-}), an = e.object({
+}), ln = e.object({
   colors: e.object({
     primary: e.string(),
     // Auth0 supports either a hex color string ("#ffffff") or a gradient
@@ -825,7 +838,7 @@ const Ge = e.object({
   font: e.object({
     url: e.string()
   }).optional()
-}), Be = e.enum([
+}), We = e.enum([
   "password_reset",
   "email_verification",
   "otp",
@@ -833,7 +846,7 @@ const Ge = e.object({
   "authorization_code",
   "oauth2_state",
   "ticket"
-]), We = e.object({
+]), Ke = e.object({
   code_id: e.string().openapi({
     description: "The code that will be used in for instance an email verification flow"
   }),
@@ -843,7 +856,7 @@ const Ge = e.object({
   connection_id: e.string().optional().openapi({
     description: "The connection that the code is connected to"
   }),
-  code_type: Be,
+  code_type: We,
   code_verifier: e.string().optional().openapi({
     description: "The code verifier used in PKCE in outbound flows"
   }),
@@ -868,10 +881,10 @@ const Ge = e.object({
   expires_at: e.string(),
   used_at: e.string().optional(),
   user_id: e.string().optional()
-}), rn = e.object({
-  ...We.shape,
+}), pn = e.object({
+  ...Ke.shape,
   created_at: e.string()
-}), Ke = e.object({
+}), ze = e.object({
   kid: e.string().optional(),
   team_id: e.string().optional(),
   realms: e.string().optional(),
@@ -1005,14 +1018,14 @@ function T(t) {
     return t;
   }
 }
-const ze = e.object({
+const qe = e.object({
   id: e.string().optional(),
   name: e.string(),
   display_name: e.string().optional(),
   strategy: e.string(),
   options: e.preprocess(
     (t) => t === null ? {} : T(t),
-    Ke
+    ze
   ).default({}),
   enabled_clients: e.array(e.string()).default([]).optional(),
   response_type: e.custom().optional(),
@@ -1021,11 +1034,11 @@ const ze = e.object({
   show_as_button: e.boolean().optional(),
   metadata: e.record(e.any()).optional(),
   is_system: e.boolean().optional()
-}), sn = e.object({
+}), cn = e.object({
   id: e.string(),
   created_at: e.string().transform((t) => t === null ? "" : t),
   updated_at: e.string().transform((t) => t === null ? "" : t)
-}).extend(ze.shape), qe = e.object({
+}).extend(qe.shape), Ve = e.object({
   domain: e.string(),
   custom_domain_id: e.string().optional(),
   type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -1050,8 +1063,8 @@ const ze = e.object({
     http_body: e.string(),
     http_url: e.string()
   })
-]), Ve = e.object({
-  ...qe.shape,
+]), Ye = e.object({
+  ...Ve.shape,
   custom_domain_id: e.string(),
   primary: e.boolean(),
   status: e.enum(["disabled", "pending", "pending_verification", "ready"]),
@@ -1060,7 +1073,7 @@ const ze = e.object({
     methods: e.array(Xe)
   }).optional(),
   tls_policy: e.string().optional()
-}), ln = Ve.extend({
+}), dn = Ye.extend({
   tenant_id: e.string()
 }), O = e.object({
   id: e.string(),
@@ -1068,17 +1081,17 @@ const ze = e.object({
   visible: e.boolean().optional().default(!0)
 }), l = O.extend({
   category: e.literal("BLOCK").optional()
-}), Ye = l.extend({
+}), Ze = l.extend({
   type: e.literal("DIVIDER"),
   config: e.object({
     text: e.string().optional()
   }).optional()
-}), Ze = l.extend({
+}), Qe = l.extend({
   type: e.literal("HTML"),
   config: e.object({
     content: e.string().optional()
   }).optional()
-}), Qe = l.extend({
+}), $e = l.extend({
   type: e.literal("IMAGE"),
   config: e.object({
     src: e.string().optional(),
@@ -1086,29 +1099,29 @@ const ze = e.object({
     width: e.number().optional(),
     height: e.number().optional()
   }).optional()
-}), $e = l.extend({
+}), Je = l.extend({
   type: e.literal("JUMP_BUTTON"),
   config: e.object({
     text: e.string().optional(),
     target_step: e.string().optional()
   })
-}), Je = l.extend({
+}), et = l.extend({
   type: e.literal("RESEND_BUTTON"),
   config: e.object({
     text: e.string().optional(),
     resend_action: e.string().optional()
   })
-}), et = l.extend({
+}), tt = l.extend({
   type: e.literal("NEXT_BUTTON"),
   config: e.object({
     text: e.string().optional()
   })
-}), tt = l.extend({
+}), ot = l.extend({
   type: e.literal("PREVIOUS_BUTTON"),
   config: e.object({
     text: e.string().optional()
   })
-}), ot = l.extend({
+}), nt = l.extend({
   type: e.literal("RICH_TEXT"),
   config: e.object({
     content: e.string().optional()
@@ -1119,17 +1132,17 @@ const ze = e.object({
   hint: e.string().min(1).max(500).optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), nt = N.extend({
+}), it = N.extend({
   type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
   config: e.object({
     credential_type: e.string().optional()
   })
-}), it = N.extend({
+}), at = N.extend({
   type: e.literal("GMAPS_ADDRESS"),
   config: e.object({
     api_key: e.string().optional()
   })
-}), at = N.extend({
+}), rt = N.extend({
   type: e.literal("RECAPTCHA"),
   config: e.object({
     site_key: e.string().optional()
@@ -1147,12 +1160,12 @@ const ze = e.object({
   ).optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), rt = i.extend({
+}), st = i.extend({
   type: e.literal("BOOLEAN"),
   config: e.object({
     default_value: e.boolean().optional()
   }).optional()
-}), st = i.extend({
+}), lt = i.extend({
   type: e.literal("CARDS"),
   config: e.object({
     options: e.array(
@@ -1165,7 +1178,7 @@ const ze = e.object({
     ).optional(),
     multi_select: e.boolean().optional()
   }).optional()
-}), lt = i.extend({
+}), pt = i.extend({
   type: e.literal("CHOICE"),
   config: e.object({
     options: e.array(
@@ -1178,7 +1191,7 @@ const ze = e.object({
     multiple: e.boolean().optional(),
     default_value: e.union([e.string(), e.array(e.string())]).optional()
   }).optional()
-}), pt = i.extend({
+}), ct = i.extend({
   type: e.literal("CUSTOM"),
   config: e.object({
     component: e.string().optional(),
@@ -1186,7 +1199,7 @@ const ze = e.object({
     schema: e.record(e.any()).optional(),
     code: e.string().optional()
   })
-}), ct = i.extend({
+}), dt = i.extend({
   type: e.literal("DATE"),
   config: e.object({
     format: e.string().optional(),
@@ -1194,7 +1207,7 @@ const ze = e.object({
     max: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), dt = i.extend({
+}), _t = i.extend({
   type: e.literal("DROPDOWN"),
   config: e.object({
     options: e.array(
@@ -1208,26 +1221,26 @@ const ze = e.object({
     multiple: e.boolean().optional(),
     default_value: e.union([e.string(), e.array(e.string())]).optional()
   }).optional()
-}), _t = i.extend({
+}), gt = i.extend({
   type: e.literal("EMAIL"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), gt = i.extend({
+}), ut = i.extend({
   type: e.literal("FILE"),
   config: e.object({
     accept: e.string().optional(),
     max_size: e.number().optional(),
     multiple: e.boolean().optional()
   }).optional()
-}), ut = i.extend({
+}), mt = i.extend({
   type: e.literal("LEGAL"),
   config: e.object({
     text: e.string(),
     html: e.boolean().optional()
   }).optional()
-}), mt = i.extend({
+}), ht = i.extend({
   type: e.literal("NUMBER"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1236,7 +1249,7 @@ const ze = e.object({
     step: e.number().optional(),
     default_value: e.string().optional()
   }).optional()
-}), ht = i.extend({
+}), bt = i.extend({
   type: e.literal("PASSWORD"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1245,13 +1258,13 @@ const ze = e.object({
     forgot_password_link: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), bt = i.extend({
+}), ft = i.extend({
   type: e.literal("PAYMENT"),
   config: e.object({
     provider: e.string().optional(),
     currency: e.string().optional()
   }).optional()
-}), ft = i.extend({
+}), Et = i.extend({
   type: e.literal("SOCIAL"),
   config: e.object({
     providers: e.array(e.string()).optional(),
@@ -1266,7 +1279,7 @@ const ze = e.object({
       })
     ).optional()
   }).optional()
-}), Et = i.extend({
+}), St = i.extend({
   type: e.literal("TEL"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1274,7 +1287,7 @@ const ze = e.object({
     default_value: e.string().optional(),
     allow_email: e.boolean().optional()
   }).optional()
-}), St = i.extend({
+}), yt = i.extend({
   type: e.literal("TEXT"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1282,37 +1295,36 @@ const ze = e.object({
     max_length: e.number().optional(),
     default_value: e.string().optional()
   }).optional()
-}), yt = i.extend({
+}), At = i.extend({
   type: e.literal("COUNTRY"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), At = i.extend({
+}), It = i.extend({
   type: e.literal("URL"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), It = e.discriminatedUnion("type", [
-  Ye,
+}), Ct = e.discriminatedUnion("type", [
   Ze,
   Qe,
   $e,
   Je,
   et,
   tt,
-  ot
-]), Ct = e.discriminatedUnion("type", [
-  nt,
-  it,
-  at
+  ot,
+  nt
 ]), Tt = e.discriminatedUnion("type", [
-  rt,
+  it,
+  at,
+  rt
+]), Ot = e.discriminatedUnion("type", [
   st,
   lt,
-  yt,
   pt,
+  At,
   ct,
   dt,
   _t,
@@ -1324,12 +1336,13 @@ const ze = e.object({
   ft,
   Et,
   St,
-  At
-]), U = e.union([
-  It,
+  yt,
+  It
+]), P = e.union([
   Ct,
-  Tt
-]), pn = /* @__PURE__ */ new Set([
+  Tt,
+  Ot
+]), _n = /* @__PURE__ */ new Set([
   "BOOLEAN",
   "CARDS",
   "CHOICE",
@@ -1343,7 +1356,7 @@ const ze = e.object({
   "TEL",
   "TEXT",
   "URL"
-]), cn = e.object({
+]), gn = e.object({
   id: e.string(),
   type: e.literal("submit"),
   label: e.string(),
@@ -1355,7 +1368,7 @@ const ze = e.object({
 }), E = e.object({
   x: e.number(),
   y: e.number()
-}), Ot = e.object({
+}), Nt = e.object({
   id: e.string(),
   type: e.literal("FLOW"),
   coordinates: E,
@@ -1364,7 +1377,7 @@ const ze = e.object({
     flow_id: e.string().max(30),
     next_node: e.string().optional()
   })
-}), Nt = e.object({
+}), wt = e.object({
   id: e.string(),
   type: e.literal("ROUTER"),
   coordinates: E,
@@ -1380,20 +1393,20 @@ const ze = e.object({
     ),
     fallback: e.string()
   })
-}), wt = e.object({
+}), jt = e.object({
   id: e.string(),
   type: e.literal("STEP"),
   coordinates: E,
   alias: e.string().min(1).max(150).optional(),
   config: e.object({
-    components: e.array(U),
+    components: e.array(P),
     next_node: e.string().optional()
   })
-}), jt = e.discriminatedUnion("type", [
-  Ot,
+}), Rt = e.discriminatedUnion("type", [
   Nt,
-  wt
-]), Rt = e.object({
+  wt,
+  jt
+]), kt = e.object({
   name: e.string().openapi({
     description: "The name of the form"
   }),
@@ -1406,7 +1419,7 @@ const ze = e.object({
     default: e.string().optional()
   }).optional(),
   translations: e.record(e.string(), e.any()).optional(),
-  nodes: e.array(jt).optional(),
+  nodes: e.array(Rt).optional(),
   start: e.object({
     hidden_fields: e.array(e.object({ key: e.string(), value: e.string() })).optional(),
     next_node: e.string().optional(),
@@ -1428,42 +1441,42 @@ const ze = e.object({
   }).optional()
 }).openapi({
   description: "Schema for flow-based forms (matches Auth0 Forms structure)"
-}), dn = e.object({
-  ...r.shape,
-  ...Rt.shape,
+}), un = e.object({
+  ...a.shape,
+  ...kt.shape,
   id: e.string()
-}), kt = e.object({
+}), vt = e.object({
   id: e.number().optional(),
   text: e.string(),
   type: e.enum(["info", "error", "success", "warning"])
-}), vt = e.object({
+}), Dt = e.object({
   id: e.string().optional(),
   text: e.string(),
   href: e.string(),
   linkText: e.string().optional()
-}), _n = e.object({
+}), mn = e.object({
   /** Screen identifier for CSS targeting (e.g., 'identifier', 'enter-password', 'signup') */
   name: e.string().optional(),
   action: e.string(),
   method: e.enum(["POST", "GET"]),
   title: e.string().optional(),
   description: e.string().optional(),
-  components: e.array(U),
-  messages: e.array(kt).optional(),
-  links: e.array(vt).optional(),
+  components: e.array(P),
+  messages: e.array(vt).optional(),
+  links: e.array(Dt).optional(),
   /** Footer HTML content displayed at the very bottom of the widget (e.g., terms and conditions) */
   footer: e.string().optional()
 });
-function gn(t) {
+function hn(t) {
   return t.category === "BLOCK";
 }
-function un(t) {
+function bn(t) {
   return t.category === "WIDGET";
 }
-function mn(t) {
+function fn(t) {
   return t.category === "FIELD";
 }
-const x = e.enum([
+const M = e.enum([
   "pre-user-registration",
   "post-user-registration",
   "post-user-login",
@@ -1472,28 +1485,28 @@ const x = e.enum([
   "pre-user-deletion",
   "post-user-deletion"
   // Potentially other triggers specific to webhooks in the future
-]), F = e.enum([
+]), H = e.enum([
   "pre-user-registration",
   "post-user-registration",
   "post-user-login",
   "validate-registration-username",
   "pre-user-deletion",
   "post-user-deletion"
-]), P = e.enum([
+]), G = e.enum([
   "post-user-login",
   "post-user-registration",
   "post-user-update",
   "credentials-exchange"
-]), M = e.enum([
+]), B = e.enum([
   "post-user-login",
   "credentials-exchange",
   "pre-user-registration",
   "post-user-registration"
-]), H = e.enum([
+]), W = e.enum([
   "ensure-username",
   "set-preferred-username",
   "account-linking"
-]), hn = {
+]), En = {
   "ensure-username": {
     name: "Ensure Username",
     description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1530,71 +1543,71 @@ const x = e.enum([
    * Everything else is opaque to the runtime. Persisted as JSON.
    */
   metadata: e.record(e.unknown()).optional()
-}, Dt = e.object({
+}, Lt = e.object({
   ...p,
-  trigger_id: x,
+  trigger_id: M,
   url: e.string()
-}), Lt = e.object({
-  ...p,
-  trigger_id: F,
-  form_id: e.string()
 }), Ut = e.object({
   ...p,
-  trigger_id: P,
-  template_id: H
+  trigger_id: H,
+  form_id: e.string()
 }), xt = e.object({
   ...p,
-  trigger_id: M,
+  trigger_id: G,
+  template_id: W
+}), Ft = e.object({
+  ...p,
+  trigger_id: B,
   code_id: e.string()
-}), bn = e.union([
-  Dt,
+}), Sn = e.union([
   Lt,
   Ut,
-  xt
-]), Ft = e.object({
+  xt,
+  Ft
+]), Pt = e.object({
   ...p,
-  trigger_id: x,
-  ...r.shape,
+  trigger_id: M,
+  ...a.shape,
   hook_id: e.string(),
   url: e.string()
-}), Pt = e.object({
+}), Mt = e.object({
   ...p,
-  trigger_id: F,
-  ...r.shape,
+  trigger_id: H,
+  ...a.shape,
   hook_id: e.string(),
   form_id: e.string()
-}), Mt = e.object({
+}), Ht = e.object({
   ...p,
-  trigger_id: P,
-  ...r.shape,
+  trigger_id: G,
+  ...a.shape,
   hook_id: e.string(),
-  template_id: H
-}), Ht = e.object({
+  template_id: W
+}), Gt = e.object({
   ...p,
-  trigger_id: M,
-  ...r.shape,
+  trigger_id: B,
+  ...a.shape,
   hook_id: e.string(),
   code_id: e.string()
-}), fn = e.union([
-  Ft,
+}), yn = e.union([
   Pt,
   Mt,
-  Ht
-]), Gt = e.object({
+  Ht,
+  Gt
+]), Bt = e.object({
   code: e.string().max(1e5),
   secrets: e.record(e.string()).optional()
-}), En = Gt.extend({
+}), An = Bt.extend({
   id: e.string(),
   tenant_id: e.string(),
-  ...r.shape
-}), Bt = e.object({
-  name: e.string().optional()
+  ...a.shape
 }), Wt = e.object({
-  email: e.string().optional()
+  name: e.string().optional()
 }), Kt = e.object({
+  email: e.string().optional()
+}), zt = e.object({
   organization_id: e.string().max(50),
-  inviter: Bt,
-  invitee: Wt,
+  inviter: Wt,
+  invitee: Kt,
   invitation_url: e.string().url(),
   client_id: e.string(),
   connection_id: e.string().optional(),
@@ -1603,13 +1616,13 @@ const x = e.enum([
   ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
   roles: e.array(e.string()).default([]).optional(),
   send_invitation_email: e.boolean().default(!0).optional()
-}), Sn = e.object({
+}), In = e.object({
   id: e.string(),
   organization_id: e.string().max(50),
   created_at: e.string().datetime(),
   expires_at: e.string().datetime(),
   ticket_id: e.string().optional()
-}).extend(Kt.shape), zt = e.object({
+}).extend(zt.shape), qt = e.object({
   alg: e.enum([
     "RS256",
     "RS384",
@@ -1648,15 +1661,13 @@ const x = e.enum([
         path: [n],
         message: `EC JWK is missing required member '${n}'`
       });
-}), yn = e.object({
-  keys: e.array(zt)
-}), An = e.object({
+}), Cn = e.object({
+  keys: e.array(qt)
+}), Tn = e.object({
   issuer: e.string(),
   authorization_endpoint: e.string(),
   token_endpoint: e.string(),
-  device_authorization_endpoint: e.string(),
   userinfo_endpoint: e.string(),
-  mfa_challenge_endpoint: e.string(),
   jwks_uri: e.string(),
   registration_endpoint: e.string().optional(),
   revocation_endpoint: e.string(),
@@ -1675,21 +1686,21 @@ const x = e.enum([
   request_object_signing_alg_values_supported: e.array(e.string()).optional(),
   token_endpoint_auth_signing_alg_values_supported: e.array(e.string())
 });
-var G = /* @__PURE__ */ ((t) => (t.PENDING = "pending", t.AUTHENTICATED = "authenticated", t.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", t.AWAITING_MFA = "awaiting_mfa", t.AWAITING_HOOK = "awaiting_hook", t.AWAITING_CONTINUATION = "awaiting_continuation", t.COMPLETED = "completed", t.FAILED = "failed", t.EXPIRED = "expired", t))(G || {});
-const qt = e.nativeEnum(G), Xt = e.object({
+var K = /* @__PURE__ */ ((t) => (t.PENDING = "pending", t.AUTHENTICATED = "authenticated", t.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", t.AWAITING_MFA = "awaiting_mfa", t.AWAITING_HOOK = "awaiting_hook", t.AWAITING_CONTINUATION = "awaiting_continuation", t.COMPLETED = "completed", t.FAILED = "failed", t.EXPIRED = "expired", t))(K || {});
+const Vt = e.nativeEnum(K), Xt = e.object({
   strategy: e.string(),
   strategy_type: e.string()
-}), Vt = e.object({
+}), Yt = e.object({
   csrf_token: e.string(),
   auth0Client: e.string().optional(),
-  authParams: Ge,
+  authParams: Be,
   expires_at: e.string(),
   deleted_at: e.string().optional(),
   ip: e.string().optional(),
   useragent: e.string().optional(),
   session_id: e.string().optional(),
   authorization_url: e.string().optional(),
-  state: qt.optional().default(
+  state: Vt.optional().default(
     "pending"
     /* PENDING */
   ),
@@ -1705,14 +1716,14 @@ const qt = e.nativeEnum(G), Xt = e.object({
   // ISO timestamp persisted for audit/metadata; not used to reject resumed sessions
 }).openapi({
   description: "This represents a login sesion"
-}), In = e.object({
-  ...Vt.shape,
+}), On = e.object({
+  ...Yt.shape,
   id: e.string().openapi({
     description: "This is is used as the state in the universal login"
   }),
   created_at: e.string(),
   updated_at: e.string()
-}), Yt = {
+}), Zt = {
   // Network & System
   ACLS_SUMMARY: "acls_summary",
   ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
@@ -1886,24 +1897,24 @@ const qt = e.nativeEnum(G), Xt = e.object({
   WARNING_DURING_LOGIN: "w",
   WARNING_SENDING_NOTIFICATION: "wn",
   WARNING_USER_MANAGEMENT: "wum"
-}, Zt = e.string().refine(
-  (t) => Object.values(Yt).includes(t),
+}, Qt = e.string().refine(
+  (t) => Object.values(Zt).includes(t),
   { message: "Invalid log type" }
-), Qt = e.object({
+), $t = e.object({
   name: e.string(),
   version: e.string(),
   env: e.object({
     node: e.string().optional()
   }).optional()
-}), $t = e.object({
+}), Jt = e.object({
   country_code: e.string().length(2),
   city_name: e.string(),
   latitude: e.string(),
   longitude: e.string(),
   time_zone: e.string(),
   continent_code: e.string()
-}), Jt = e.object({
-  type: Zt,
+}), eo = e.object({
+  type: Qt,
   date: e.string(),
   description: e.string().optional(),
   ip: e.string().optional(),
@@ -1922,39 +1933,39 @@ const qt = e.nativeEnum(G), Xt = e.object({
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
   hostname: e.string().optional(),
-  auth0_client: Qt.optional(),
+  auth0_client: $t.optional(),
   log_id: e.string().optional(),
-  location_info: $t.optional()
-}), Cn = e.object({
-  ...Jt.shape,
+  location_info: Jt.optional()
+}), Nn = e.object({
+  ...eo.shape,
   log_id: e.string()
-}), eo = e.enum([
+}), to = e.enum([
   "http",
   "eventbridge",
   "eventgrid",
   "splunk",
   "datadog",
   "sumo"
-]), B = e.enum([
+]), z = e.enum([
   "active",
   "paused",
   "suspended"
-]), to = e.object({
+]), oo = e.object({
   type: e.string(),
   name: e.string()
-}), oo = e.object({
+}), no = e.object({
   name: e.string(),
-  type: eo,
-  status: B.optional(),
+  type: to,
+  status: z.optional(),
   sink: e.record(e.string(), e.unknown()),
-  filters: e.array(to).optional(),
+  filters: e.array(oo).optional(),
   isPriority: e.boolean().optional()
-}), Tn = oo.extend({
+}), wn = no.extend({
   id: e.string(),
-  status: B,
+  status: z,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), no = e.object({
+}), io = e.object({
   enabled: e.boolean().optional(),
   shields: e.array(e.string()).optional(),
   admin_notification_frequency: e.array(e.string()).optional(),
@@ -1967,13 +1978,13 @@ const qt = e.nativeEnum(G), Xt = e.object({
       shields: e.array(e.string()).optional()
     }).optional()
   }).optional()
-}), io = e.object({
+}), ao = e.object({
   enabled: e.boolean().optional(),
   shields: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional(),
   mode: e.string().optional(),
   max_attempts: e.number().optional()
-}), ao = e.object({
+}), ro = e.object({
   enabled: e.boolean().optional(),
   shields: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional(),
@@ -1987,28 +1998,28 @@ const qt = e.nativeEnum(G), Xt = e.object({
       rate: e.number().optional()
     }).optional()
   }).optional()
-}), ro = e.object({
-  breached_password_detection: no.optional(),
-  brute_force_protection: io.optional(),
-  suspicious_ip_throttling: ao.optional()
 }), so = e.object({
+  breached_password_detection: io.optional(),
+  brute_force_protection: ao.optional(),
+  suspicious_ip_throttling: ro.optional()
+}), lo = e.object({
   id: e.string().optional(),
   user_id: e.string(),
   password: e.string(),
   algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
   is_current: e.boolean().default(!0)
-}), On = so.extend({
+}), jn = lo.extend({
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
-}), W = e.object({
+}), q = e.object({
   initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
   initial_ip: e.string().describe("First IP address associated with this session"),
   initial_asn: e.string().describe("First autonomous system number associated with this session"),
   last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
   last_ip: e.string().describe("Last IP address from which this user logged in"),
   last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), lo = e.object({
+}), po = e.object({
   id: e.string(),
   revoked_at: e.string().optional(),
   used_at: e.string().optional(),
@@ -2016,18 +2027,21 @@ const qt = e.nativeEnum(G), Xt = e.object({
   expires_at: e.string().optional(),
   login_session_id: e.string(),
   idle_expires_at: e.string().optional(),
-  device: W.describe(
+  device: q.describe(
     "Metadata related to the device used in the session"
   ),
   clients: e.array(e.string()).describe("List of client details for the session")
-}), Nn = e.object({
+}), Rn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   authenticated_at: e.string(),
   last_interaction_at: e.string(),
-  ...lo.shape
-}), wn = e.object({
+  ...po.shape
+}), kn = e.object({
   kid: e.string().openapi({ description: "The key id of the signing key" }),
+  tenant_id: e.string().optional().openapi({
+    description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped."
+  }),
   cert: e.string().openapi({ description: "The public certificate of the signing key" }),
   fingerprint: e.string().openapi({ description: "The cert fingerprint" }),
   thumbprint: e.string().openapi({ description: "The cert thumbprint" }),
@@ -2051,7 +2065,7 @@ const qt = e.nativeEnum(G), Xt = e.object({
   type: e.enum(["jwt_signing", "saml_encryption"]).openapi({
     description: "The type of the signing key"
   })
-}), po = e.object({
+}), co = e.object({
   id: e.string().optional(),
   // Basic settings
   audience: e.string(),
@@ -2204,7 +2218,7 @@ const qt = e.nativeEnum(G), Xt = e.object({
   pushed_authorization_requests_supported: e.boolean().optional(),
   authorization_response_iss_parameter_supported: e.boolean().optional(),
   // Attack-protection config (singleton, exposed via /api/v2/attack-protection)
-  attack_protection: ro.optional(),
+  attack_protection: so.optional(),
   // Guardian MFA Factors configuration (internal storage, exposed via /guardian API)
   mfa: e.object({
     // MFA policy: "never" = MFA disabled, "always" = MFA required for all logins
@@ -2236,14 +2250,14 @@ const qt = e.nativeEnum(G), Xt = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), jn = e.object({
+}), vn = e.object({
   created_at: e.string().nullable().transform((t) => t ?? ""),
   updated_at: e.string().nullable().transform((t) => t ?? ""),
-  ...po.shape,
+  ...co.shape,
   id: e.string()
 });
-var co = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(co || {});
-const Rn = e.object({
+var _o = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(_o || {});
+const Dn = e.object({
   access_token: e.string(),
   id_token: e.string().optional(),
   scope: e.string().optional(),
@@ -2256,7 +2270,7 @@ e.object({
   code: e.string(),
   state: e.string().optional()
 });
-const _o = e.object({
+const go = e.object({
   button_border_radius: e.number(),
   button_border_weight: e.number(),
   buttons_style: e.enum(["pill", "rounded", "sharp"]),
@@ -2266,7 +2280,7 @@ const _o = e.object({
   show_widget_shadow: e.boolean(),
   widget_border_weight: e.number(),
   widget_corner_radius: e.number()
-}), go = e.object({
+}), uo = e.object({
   base_focus_color: e.string(),
   base_hover_color: e.string(),
   body_text: e.string(),
@@ -2289,7 +2303,7 @@ const _o = e.object({
 }), u = e.object({
   bold: e.boolean(),
   size: e.number()
-}), uo = e.object({
+}), mo = e.object({
   body_text: u,
   buttons_text: u,
   font_url: e.string(),
@@ -2299,7 +2313,7 @@ const _o = e.object({
   reference_text_size: e.number(),
   subtitle: u,
   title: u
-}), mo = e.object({
+}), ho = e.object({
   background_color: e.string(),
   background_image_url: e.string(),
   page_layout: e.enum(["center", "left", "right"]),
@@ -2312,33 +2326,56 @@ const _o = e.object({
    * Optional for backwards compatibility; absent values mean "widget".
    */
   logo_placement: e.enum(["widget", "chip", "none"]).optional()
-}), ho = e.object({
+}), bo = e.object({
   header_text_alignment: e.enum(["center", "left", "right"]),
   logo_height: e.number(),
   logo_position: e.enum(["center", "left", "none", "right"]),
   logo_url: e.string(),
   social_buttons_layout: e.enum(["bottom", "top"])
-}), bo = e.object({
-  borders: _o,
-  colors: go,
+}), fo = e.object({
+  borders: go,
+  colors: uo,
   displayName: e.string(),
-  fonts: uo,
-  page_background: mo,
-  widget: ho
-}), kn = bo.extend({
+  fonts: mo,
+  page_background: ho,
+  widget: bo
+}), Ln = fo.extend({
   themeId: e.string()
-}), vn = e.object({
+}), Un = e.object({
   universal_login_experience: e.enum(["new", "classic"]).default("new"),
   identifier_first: e.boolean().default(!0),
   password_first: e.boolean().default(!1),
   webauthn_platform_first_factor: e.boolean()
-}), Dn = e.object({
+}), xn = e.object({
   name: e.string(),
   enabled: e.boolean().optional().default(!0),
   default_from_address: e.string().optional(),
   credentials: e.record(e.string(), e.unknown()),
   settings: e.object({}).optional()
-}), fo = e.object({
+}), Eo = e.enum([
+  "verify_email",
+  "verify_email_by_code",
+  "reset_email",
+  "reset_email_by_code",
+  "welcome_email",
+  "blocked_account",
+  "stolen_credentials",
+  "enrollment_email",
+  "mfa_oob_code",
+  "change_password",
+  "password_reset",
+  "user_invitation"
+]), Fn = e.object({
+  template: Eo,
+  body: e.string(),
+  from: e.string(),
+  subject: e.string(),
+  syntax: e.literal("liquid").default("liquid"),
+  resultUrl: e.string().optional(),
+  urlLifetimeInSeconds: e.number().int().nonnegative().optional(),
+  includeEmailInRedirect: e.boolean().default(!1),
+  enabled: e.boolean().default(!0)
+}), So = e.object({
   // Internal primary key (ULID). Never sent to clients in the new wire format.
   id: e.string(),
   // Link to the login session
@@ -2351,7 +2388,7 @@ const _o = e.object({
   idle_expires_at: e.string().optional(),
   // When the token was last used.
   last_exchanged_at: e.string().optional(),
-  device: W,
+  device: q,
   resource_servers: e.array(
     e.object({
       audience: e.string(),
@@ -2372,23 +2409,23 @@ const _o = e.object({
   // ISO of the *first* rotation. Anchors the leeway window so siblings minted
   // within the window don't extend the parent's exposure.
   rotated_at: e.string().optional()
-}), Ln = e.object({
+}), Pn = e.object({
   // When the refresh token record was created.
   created_at: e.string(),
   // When the token was explicitly revoked (null = still active).
   revoked_at: e.string().optional(),
   // Spread in the rest of the refresh token properties.
-  ...fo.shape
-}), Un = e.object({
+  ...So.shape
+}), Mn = e.object({
   to: e.string(),
   message: e.string()
-}), xn = e.object({
+}), Hn = e.object({
   name: e.string(),
   options: e.object({})
-}), Eo = e.object({
+}), yo = e.object({
   value: e.string(),
   description: e.string().optional()
-}), So = e.object({
+}), Ao = e.object({
   token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
   enforce_policies: e.boolean().optional(),
   allow_skipping_userinfo: e.boolean().optional(),
@@ -2398,11 +2435,11 @@ const _o = e.object({
   mtls: e.object({
     bound_access_tokens: e.boolean().optional()
   }).optional()
-}), yo = e.object({
+}), Io = e.object({
   id: e.string().optional(),
   name: e.string(),
   identifier: e.string(),
-  scopes: e.array(Eo).optional(),
+  scopes: e.array(yo).optional(),
   signing_alg: e.string().optional(),
   signing_secret: e.string().optional(),
   token_lifetime: e.number().default(86400),
@@ -2410,30 +2447,30 @@ const _o = e.object({
   skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
   allow_offline_access: e.boolean().optional(),
   verificationKey: e.string().optional(),
-  options: So.optional(),
+  options: Ao.optional(),
   is_system: e.boolean().optional(),
   metadata: e.record(e.any()).optional()
-}), Ao = e.object({
-  ...yo.shape,
+}), Co = e.object({
+  ...Io.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Fn = e.array(Ao), Io = e.object({
+}), Gn = e.array(Co), To = e.object({
   role_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string()
-}), Co = e.object({
-  ...Io.shape,
+}), Oo = e.object({
+  ...To.shape,
   created_at: e.string()
-}), Pn = e.array(Co), To = e.object({
+}), Bn = e.array(Oo), No = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string(),
   organization_id: e.string().optional()
-}), Oo = e.object({
-  ...To.shape,
+}), wo = e.object({
+  ...No.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), Mn = e.array(Oo), No = e.object({
+}), Wn = e.array(wo), jo = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   resource_server_name: e.string(),
@@ -2441,17 +2478,17 @@ const _o = e.object({
   description: e.string().nullable().optional(),
   created_at: e.string().optional(),
   organization_id: e.string().optional()
-}), Hn = e.array(
-  No
-), wo = e.object({
+}), Kn = e.array(
+  jo
+), Ro = e.object({
   user_id: e.string(),
   role_id: e.string(),
   organization_id: e.string().optional()
-}), jo = e.object({
-  ...wo.shape,
+}), ko = e.object({
+  ...Ro.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), Gn = e.array(jo), Ro = e.object({
+}), zn = e.array(ko), vo = e.object({
   id: e.string().optional().openapi({
     description: "The unique identifier of the role. If not provided, one will be generated."
   }),
@@ -2465,13 +2502,13 @@ const _o = e.object({
   metadata: e.record(e.any()).optional().openapi({
     description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios."
   })
-}), ko = Ro.extend({
+}), Do = vo.extend({
   id: e.string().openapi({
     description: "The unique identifier of the role"
   }),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Bn = e.array(ko), vo = e.object({
+}), qn = e.array(Do), Lo = e.object({
   logo_url: e.string().optional().openapi({
     description: "URL of the organization's logo"
   }),
@@ -2483,7 +2520,7 @@ const _o = e.object({
       description: "Page background color in hex format (e.g., #FFFFFF)"
     })
   }).optional()
-}).optional(), Do = e.object({
+}).optional(), Uo = e.object({
   connection_id: e.string().openapi({
     description: "ID of the connection"
   }),
@@ -2496,7 +2533,7 @@ const _o = e.object({
   is_signup_enabled: e.boolean().default(!0).openapi({
     description: "Whether signup is enabled for this connection"
   })
-}), Lo = e.object({
+}), xo = e.object({
   client_credentials: e.object({
     enforce: e.boolean().default(!1).openapi({
       description: "Whether to enforce token quota limits"
@@ -2508,7 +2545,7 @@ const _o = e.object({
       description: "Maximum tokens per hour (0 = unlimited)"
     })
   }).optional()
-}).optional(), Uo = e.object({
+}).optional(), Fo = e.object({
   id: e.string().optional(),
   name: e.string().min(1).regex(/^[a-z0-9_-]+$/, {
     message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores"
@@ -2518,31 +2555,31 @@ const _o = e.object({
   display_name: e.string().optional().openapi({
     description: "The display name of the organization"
   }),
-  branding: vo,
+  branding: Lo,
   metadata: e.record(e.any()).default({}).optional().openapi({
     description: "Custom metadata for the organization"
   }),
-  enabled_connections: e.array(Do).default([]).optional().openapi({
+  enabled_connections: e.array(Uo).default([]).optional().openapi({
     description: "List of enabled connections for the organization"
   }),
-  token_quota: Lo
-}), Wn = e.object({
-  ...Uo.shape,
-  ...r.shape,
+  token_quota: xo
+}), Vn = e.object({
+  ...Fo.shape,
+  ...a.shape,
   id: e.string(),
   // Override name to be lenient when reading from database (to support existing uppercase names)
   name: e.string().min(1).openapi({
     description: "The name of the organization"
   })
-}), xo = e.object({
+}), Po = e.object({
   connection_id: e.string().openapi({
     description: "ID of the tenant-level connection to enable for the org."
   }),
   assign_membership_on_login: e.boolean().optional().default(!1),
   show_as_button: e.boolean().optional().default(!0),
   is_signup_enabled: e.boolean().optional().default(!0)
-}), Fo = e.object({
-  ...xo.shape,
+}), Mo = e.object({
+  ...Po.shape,
   // Auth0 includes the embedded connection in GET responses.
   connection: e.object({
     name: e.string().optional(),
@@ -2550,20 +2587,20 @@ const _o = e.object({
   }).optional(),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Kn = e.array(
-  Fo
-), Po = e.object({
+}), Xn = e.array(
+  Mo
+), Ho = e.object({
   user_id: e.string().openapi({
     description: "ID of the user"
   }),
   organization_id: e.string().openapi({
     description: "ID of the organization"
   })
-}), zn = e.object({
-  ...Po.shape,
-  ...r.shape,
+}), Yn = e.object({
+  ...Ho.shape,
+  ...a.shape,
   id: e.string()
-}), qn = e.object({
+}), Zn = e.object({
   // Session settings
   idle_session_lifetime: e.number().default(72),
   session_lifetime: e.number().default(168),
@@ -2663,7 +2700,7 @@ const _o = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), Xn = e.object({
+}), Qn = e.object({
   date: e.string().openapi({
     description: "Date these events occurred in ISO 8601 format",
     example: "2025-12-19"
@@ -2688,10 +2725,10 @@ const _o = e.object({
     description: "Approximate date and time the first event occurred in ISO 8601 format",
     example: "2025-12-19T00:00:00.000Z"
   })
-}), Vn = e.number().openapi({
+}), $n = e.number().openapi({
   description: "Number of active users in the last 30 days",
   example: 1234
-}), Mo = e.enum([
+}), Go = e.enum([
   "login",
   "login-id",
   "login-password",
@@ -2720,17 +2757,17 @@ const _o = e.object({
   "custom-form",
   "login-passwordless",
   "mfa-login-options"
-]), Ho = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+]), Bo = e.record(e.string(), e.record(e.string(), e.string())).openapi({
   type: "object",
   additionalProperties: {
     type: "object",
     additionalProperties: { type: "string" }
   }
-}), Yn = e.object({
-  prompt: Mo,
+}), Jn = e.object({
+  prompt: Go,
   language: e.string(),
-  custom_text: Ho
-}), Zn = {
+  custom_text: Bo
+}), ei = {
   EMAIL: "email",
   SMS: "sms",
   USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2746,11 +2783,11 @@ const _o = e.object({
   WAAD: "waad",
   ADFS: "adfs",
   AUTH0: "auth0"
-}, Qn = {
+}, ti = {
   DATABASE: "database",
   SOCIAL: "social",
   PASSWORDLESS: "passwordless"
-}, Go = e.enum([
+}, Wo = e.enum([
   "phone",
   "totp",
   "email",
@@ -2758,9 +2795,9 @@ const _o = e.object({
   "webauthn-roaming",
   "webauthn-platform",
   "passkey"
-]), K = e.object({
+]), V = e.object({
   user_id: e.string(),
-  type: Go,
+  type: Wo,
   // Phone-specific
   phone_number: e.string().optional(),
   // TOTP-specific
@@ -2775,7 +2812,7 @@ const _o = e.object({
   // Common
   confirmed: e.boolean().default(!1)
 });
-function z(t, o) {
+function X(t, o) {
   t.type === "phone" && !t.phone_number && o.addIssue({
     code: e.ZodIssueCode.custom,
     message: "phone_number is required when type is 'phone'",
@@ -2794,32 +2831,32 @@ function z(t, o) {
     path: ["public_key"]
   }));
 }
-const $n = K.superRefine(z), Jn = e.object({
-  ...K.shape,
+const oi = V.superRefine(X), ni = e.object({
+  ...V.shape,
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
-}).superRefine(z);
-function ei(t) {
+}).superRefine(X);
+function ii(t) {
   const [o, n] = t.split("|");
   if (!o || !n)
     throw new Error(`Invalid user_id: ${t}`);
   return { connection: o, id: n };
 }
-function ti(t) {
+function ai(t) {
   const {
     primary: o,
     secondaries: n,
     syncMethods: h = ["create", "rawCreate", "update", "remove", "delete", "set"]
   } = t, S = {
-    get(c, a) {
-      if (typeof a == "symbol")
-        return c[a];
-      const d = c[a];
-      return typeof d != "function" ? d : h.includes(a) ? async (..._) => {
+    get(c, r) {
+      if (typeof r == "symbol")
+        return c[r];
+      const d = c[r];
+      return typeof d != "function" ? d : h.includes(r) ? async (..._) => {
         const y = await d.apply(c, _), g = [];
         for (const s of n) {
-          const b = s.adapter[a];
+          const b = s.adapter[r];
           if (typeof b != "function")
             continue;
           const A = (async () => {
@@ -2827,13 +2864,13 @@ function ti(t) {
               await b.apply(s.adapter, _);
             } catch (f) {
               try {
-                s.onError ? s.onError(f, a, _) : console.error(
-                  `Passthrough adapter: secondary write failed for ${a}:`,
+                s.onError ? s.onError(f, r, _) : console.error(
+                  `Passthrough adapter: secondary write failed for ${r}:`,
                   f
                 );
               } catch (I) {
                 console.error(
-                  `Passthrough adapter: onError handler threw for ${a}:`,
+                  `Passthrough adapter: onError handler threw for ${r}:`,
                   I
                 );
               }
@@ -2847,11 +2884,11 @@ function ti(t) {
   };
   return new Proxy(o, S);
 }
-function oi(t) {
+function ri(t) {
   return t;
 }
-function ni(t) {
-  var S, c, a, d, _, y, g, s, b, A, f, I;
+function si(t) {
+  var S, c, r, d, _, y, g, s, b, A, f, I;
   const o = t == null ? void 0 : t.options;
   if (!o)
     return {
@@ -2862,12 +2899,12 @@ function ni(t) {
     };
   const n = o.attributes;
   if (n) {
-    const q = ((c = (S = n.username) == null ? void 0 : S.identifier) == null ? void 0 : c.active) === !0, X = ((d = (a = n.email) == null ? void 0 : a.identifier) == null ? void 0 : d.active) !== !1, V = ((y = (_ = n.username) == null ? void 0 : _.validation) == null ? void 0 : y.min_length) ?? 1, Y = ((s = (g = n.username) == null ? void 0 : g.validation) == null ? void 0 : s.max_length) ?? 15;
+    const Y = ((c = (S = n.username) == null ? void 0 : S.identifier) == null ? void 0 : c.active) === !0, Z = ((d = (r = n.email) == null ? void 0 : r.identifier) == null ? void 0 : d.active) !== !1, Q = ((y = (_ = n.username) == null ? void 0 : _.validation) == null ? void 0 : y.min_length) ?? 1, $ = ((s = (g = n.username) == null ? void 0 : g.validation) == null ? void 0 : s.max_length) ?? 15;
     return {
-      usernameIdentifierActive: q,
-      emailIdentifierActive: X,
-      usernameMinLength: V,
-      usernameMaxLength: Y
+      usernameIdentifierActive: Y,
+      emailIdentifierActive: Z,
+      usernameMinLength: Q,
+      usernameMaxLength: $
     };
   }
   return {
@@ -2877,201 +2914,205 @@ function ni(t) {
     usernameMaxLength: ((I = (f = o.validation) == null ? void 0 : f.username) == null ? void 0 : I.max) ?? 15
   };
 }
-function ii(t) {
+function li(t) {
   return typeof t == "object" && t !== null && !Array.isArray(t);
 }
 export {
-  Xo as Auth0ActionEnum,
-  Qt as Auth0Client,
-  D as AuthorizationResponseMode,
-  v as AuthorizationResponseType,
-  L as CodeChallengeMethod,
-  k as ComponentCategory,
-  R as ComponentType,
-  Vo as EmailActionEnum,
-  pn as FORM_FIELD_TYPES,
-  qo as FlowActionTypeEnum,
-  co as GrantType,
-  $t as LocationInfo,
-  Yt as LogTypes,
-  G as LoginSessionState,
-  ve as NodeType,
-  ce as RedirectTargetEnum,
-  Zn as Strategy,
-  Qn as StrategyType,
-  Q as actionDependencySchema,
-  w as actionInsertSchema,
-  Ue as actionNodeSchema,
-  Ko as actionSchema,
-  $ as actionSecretSchema,
-  Z as actionTriggerSchema,
-  Wo as actionUpdateSchema,
-  Vn as activeUsersResponseSchema,
-  ee as actorSchema,
-  he as addressSchema,
-  ro as attackProtectionSchema,
-  J as auditCategorySchema,
-  re as auditEventInsertSchema,
-  zo as auditEventSchema,
-  ae as auth0ClientSchema,
-  nn as auth0FlowInsertSchema,
-  He as auth0FlowSchema,
-  Zo as auth0QuerySchema,
-  le as auth0UpdateUserActionSchema,
-  $o as auth0UserResponseSchema,
-  Ge as authParamsSchema,
-  $n as authenticationMethodInsertSchema,
-  Jn as authenticationMethodSchema,
-  Go as authenticationMethodTypeSchema,
-  j as baseUserSchema,
-  It as blockComponentSchema,
-  _o as bordersSchema,
-  an as brandingSchema,
-  no as breachedPasswordDetectionSchema,
-  io as bruteForceProtectionSchema,
-  Ne as buttonComponentSchema,
-  Ae as clientGrantInsertSchema,
-  tn as clientGrantListSchema,
-  Ie as clientGrantSchema,
-  ye as clientInsertSchema,
-  Te as clientRegistrationTokenInsertSchema,
-  on as clientRegistrationTokenSchema,
-  Ce as clientRegistrationTokenTypeSchema,
-  en as clientSchema,
-  We as codeInsertSchema,
-  rn as codeSchema,
-  Be as codeTypeSchema,
-  go as colorsSchema,
-  kt as componentMessageSchema,
-  ke as componentSchema,
-  ze as connectionInsertSchema,
-  Ke as connectionOptionsSchema,
-  sn as connectionSchema,
+  Zo as Auth0ActionEnum,
+  $t as Auth0Client,
+  x as AuthorizationResponseMode,
+  U as AuthorizationResponseType,
+  F as CodeChallengeMethod,
+  L as ComponentCategory,
+  D as ComponentType,
+  Qo as EmailActionEnum,
+  _n as FORM_FIELD_TYPES,
+  Yo as FlowActionTypeEnum,
+  _o as GrantType,
+  Jt as LocationInfo,
+  Zt as LogTypes,
+  K as LoginSessionState,
+  De as NodeType,
+  de as RedirectTargetEnum,
+  ei as Strategy,
+  ti as StrategyType,
+  j as actionDependencySchema,
+  k as actionInsertSchema,
+  xe as actionNodeSchema,
+  qo as actionSchema,
+  R as actionSecretSchema,
+  w as actionTriggerSchema,
+  zo as actionUpdateSchema,
+  J as actionVersionInsertSchema,
+  Vo as actionVersionSchema,
+  $n as activeUsersResponseSchema,
+  te as actorSchema,
+  be as addressSchema,
+  so as attackProtectionSchema,
+  ee as auditCategorySchema,
+  se as auditEventInsertSchema,
+  Xo as auditEventSchema,
+  re as auth0ClientSchema,
+  sn as auth0FlowInsertSchema,
+  Ge as auth0FlowSchema,
+  Jo as auth0QuerySchema,
+  pe as auth0UpdateUserActionSchema,
+  tn as auth0UserResponseSchema,
+  Be as authParamsSchema,
+  oi as authenticationMethodInsertSchema,
+  ni as authenticationMethodSchema,
+  Wo as authenticationMethodTypeSchema,
+  v as baseUserSchema,
+  Ct as blockComponentSchema,
+  go as bordersSchema,
+  ln as brandingSchema,
+  io as breachedPasswordDetectionSchema,
+  ao as bruteForceProtectionSchema,
+  we as buttonComponentSchema,
+  Ie as clientGrantInsertSchema,
+  an as clientGrantListSchema,
+  Ce as clientGrantSchema,
+  Ae as clientInsertSchema,
+  Oe as clientRegistrationTokenInsertSchema,
+  rn as clientRegistrationTokenSchema,
+  Te as clientRegistrationTokenTypeSchema,
+  nn as clientSchema,
+  Ke as codeInsertSchema,
+  pn as codeSchema,
+  We as codeTypeSchema,
+  uo as colorsSchema,
+  vt as componentMessageSchema,
+  ve as componentSchema,
+  qe as connectionInsertSchema,
+  ze as connectionOptionsSchema,
+  cn as connectionSchema,
   m as coordinatesSchema,
-  ti as createPassthroughAdapter,
-  oi as createWriteOnlyAdapter,
-  qe as customDomainInsertSchema,
-  Ve as customDomainSchema,
-  ln as customDomainWithTenantIdSchema,
-  Yn as customTextEntrySchema,
-  Ho as customTextSchema,
-  Xn as dailyStatsSchema,
-  Dn as emailProviderSchema,
-  se as emailVerificationRulesSchema,
-  pe as emailVerifyActionSchema,
-  Me as endingSchema,
-  Tt as fieldComponentSchema,
-  _e as flowActionStepSchema,
-  ge as flowInsertSchema,
-  Yo as flowSchema,
-  je as flowsFieldComponentSchema,
-  Le as flowsFlowNodeSchema,
-  De as flowsStepNodeSchema,
+  ai as createPassthroughAdapter,
+  ri as createWriteOnlyAdapter,
+  Ve as customDomainInsertSchema,
+  Ye as customDomainSchema,
+  dn as customDomainWithTenantIdSchema,
+  Jn as customTextEntrySchema,
+  Bo as customTextSchema,
+  Qn as dailyStatsSchema,
+  xn as emailProviderSchema,
+  Eo as emailTemplateNameSchema,
+  Fn as emailTemplateSchema,
+  le as emailVerificationRulesSchema,
+  ce as emailVerifyActionSchema,
+  He as endingSchema,
+  Ot as fieldComponentSchema,
+  ge as flowActionStepSchema,
+  ue as flowInsertSchema,
+  $o as flowSchema,
+  Re as flowsFieldComponentSchema,
+  Ue as flowsFlowNodeSchema,
+  Le as flowsStepNodeSchema,
   u as fontDetailsSchema,
-  uo as fontsSchema,
-  cn as formControlSchema,
-  Rt as formInsertSchema,
-  U as formNodeComponentDefinition,
-  jt as formNodeSchema,
-  dn as formSchema,
-  Re as genericComponentSchema,
-  xe as genericNodeSchema,
-  ni as getConnectionIdentifierConfig,
-  Gt as hookCodeInsertSchema,
-  En as hookCodeSchema,
-  bn as hookInsertSchema,
-  fn as hookSchema,
-  H as hookTemplateId,
-  hn as hookTemplates,
-  me as identitySchema,
-  Kt as inviteInsertSchema,
-  Sn as inviteSchema,
-  Wt as inviteeSchema,
-  Bt as inviterSchema,
-  gn as isBlockComponent,
-  mn as isFieldComponent,
-  ii as isPlainObject,
-  un as isWidgetComponent,
-  yn as jwksKeySchema,
-  zt as jwksSchema,
-  we as legalComponentSchema,
-  ie as locationInfoSchema,
-  Jt as logInsertSchema,
-  Cn as logSchema,
-  to as logStreamFilterSchema,
-  oo as logStreamInsertSchema,
-  Tn as logStreamSchema,
-  B as logStreamStatusSchema,
-  eo as logStreamTypeSchema,
+  mo as fontsSchema,
+  gn as formControlSchema,
+  kt as formInsertSchema,
+  P as formNodeComponentDefinition,
+  Rt as formNodeSchema,
+  un as formSchema,
+  ke as genericComponentSchema,
+  Fe as genericNodeSchema,
+  si as getConnectionIdentifierConfig,
+  Bt as hookCodeInsertSchema,
+  An as hookCodeSchema,
+  Sn as hookInsertSchema,
+  yn as hookSchema,
+  W as hookTemplateId,
+  En as hookTemplates,
+  he as identitySchema,
+  zt as inviteInsertSchema,
+  In as inviteSchema,
+  Kt as inviteeSchema,
+  Wt as inviterSchema,
+  hn as isBlockComponent,
+  fn as isFieldComponent,
+  li as isPlainObject,
+  bn as isWidgetComponent,
+  Cn as jwksKeySchema,
+  qt as jwksSchema,
+  je as legalComponentSchema,
+  ae as locationInfoSchema,
+  eo as logInsertSchema,
+  Nn as logSchema,
+  oo as logStreamFilterSchema,
+  no as logStreamInsertSchema,
+  wn as logStreamSchema,
+  z as logStreamStatusSchema,
+  to as logStreamTypeSchema,
   Xt as loginSessionAuthStrategySchema,
-  Vt as loginSessionInsertSchema,
-  In as loginSessionSchema,
-  qt as loginSessionStateSchema,
-  Fe as nodeSchema,
-  An as openIDConfigurationSchema,
-  vo as organizationBrandingSchema,
-  xo as organizationConnectionInsertSchema,
-  Kn as organizationConnectionListSchema,
-  Fo as organizationConnectionSchema,
-  Do as organizationEnabledConnectionSchema,
-  Uo as organizationInsertSchema,
-  Wn as organizationSchema,
-  Lo as organizationTokenQuotaSchema,
-  mo as pageBackgroundSchema,
-  ei as parseUserId,
-  so as passwordInsertSchema,
-  On as passwordSchema,
-  ue as profileDataSchema,
-  Mo as promptScreenSchema,
-  vn as promptSettingSchema,
-  de as redirectActionSchema,
-  fo as refreshTokenInsertSchema,
-  Ln as refreshTokenSchema,
-  oe as requestContextSchema,
-  yo as resourceServerInsertSchema,
-  Fn as resourceServerListSchema,
-  So as resourceServerOptionsSchema,
-  Ao as resourceServerSchema,
-  Eo as resourceServerScopeSchema,
-  ne as responseContextSchema,
-  Oe as richTextComponentSchema,
-  Ro as roleInsertSchema,
-  Bn as roleListSchema,
-  Io as rolePermissionInsertSchema,
-  Pn as rolePermissionListSchema,
-  Co as rolePermissionSchema,
-  ko as roleSchema,
-  vt as screenLinkSchema,
-  lo as sessionInsertSchema,
-  Nn as sessionSchema,
-  wn as signingKeySchema,
-  xn as smsProviderSchema,
-  Un as smsSendParamsSchema,
-  Pe as startSchema,
-  ao as suspiciousIpThrottlingSchema,
-  te as targetSchema,
-  po as tenantInsertSchema,
-  jn as tenantSchema,
-  qn as tenantSettingsSchema,
-  bo as themeInsertSchema,
-  kn as themeSchema,
-  Rn as tokenResponseSchema,
-  Qo as totalsSchema,
-  _n as uiScreenSchema,
-  be as userInsertSchema,
-  Po as userOrganizationInsertSchema,
-  zn as userOrganizationSchema,
-  To as userPermissionInsertSchema,
-  Mn as userPermissionListSchema,
-  Oo as userPermissionSchema,
-  Hn as userPermissionWithDetailsListSchema,
-  No as userPermissionWithDetailsSchema,
-  Jo as userResponseSchema,
-  wo as userRoleInsertSchema,
-  Gn as userRoleListSchema,
-  jo as userRoleSchema,
-  fe as userSchema,
+  Yt as loginSessionInsertSchema,
+  On as loginSessionSchema,
+  Vt as loginSessionStateSchema,
+  Pe as nodeSchema,
+  Tn as openIDConfigurationSchema,
+  Lo as organizationBrandingSchema,
+  Po as organizationConnectionInsertSchema,
+  Xn as organizationConnectionListSchema,
+  Mo as organizationConnectionSchema,
+  Uo as organizationEnabledConnectionSchema,
+  Fo as organizationInsertSchema,
+  Vn as organizationSchema,
+  xo as organizationTokenQuotaSchema,
+  ho as pageBackgroundSchema,
+  ii as parseUserId,
+  lo as passwordInsertSchema,
+  jn as passwordSchema,
+  me as profileDataSchema,
+  Go as promptScreenSchema,
+  Un as promptSettingSchema,
+  _e as redirectActionSchema,
+  So as refreshTokenInsertSchema,
+  Pn as refreshTokenSchema,
+  ne as requestContextSchema,
+  Io as resourceServerInsertSchema,
+  Gn as resourceServerListSchema,
+  Ao as resourceServerOptionsSchema,
+  Co as resourceServerSchema,
+  yo as resourceServerScopeSchema,
+  ie as responseContextSchema,
+  Ne as richTextComponentSchema,
+  vo as roleInsertSchema,
+  qn as roleListSchema,
+  To as rolePermissionInsertSchema,
+  Bn as rolePermissionListSchema,
+  Oo as rolePermissionSchema,
+  Do as roleSchema,
+  Dt as screenLinkSchema,
+  po as sessionInsertSchema,
+  Rn as sessionSchema,
+  kn as signingKeySchema,
+  Hn as smsProviderSchema,
+  Mn as smsSendParamsSchema,
+  Me as startSchema,
+  ro as suspiciousIpThrottlingSchema,
+  oe as targetSchema,
+  co as tenantInsertSchema,
+  vn as tenantSchema,
+  Zn as tenantSettingsSchema,
+  fo as themeInsertSchema,
+  Ln as themeSchema,
+  Dn as tokenResponseSchema,
+  en as totalsSchema,
+  mn as uiScreenSchema,
+  fe as userInsertSchema,
+  Ho as userOrganizationInsertSchema,
+  Yn as userOrganizationSchema,
+  No as userPermissionInsertSchema,
+  Wn as userPermissionListSchema,
+  wo as userPermissionSchema,
+  Kn as userPermissionWithDetailsListSchema,
+  jo as userPermissionWithDetailsSchema,
+  on as userResponseSchema,
+  Ro as userRoleInsertSchema,
+  zn as userRoleListSchema,
+  ko as userRoleSchema,
+  Ee as userSchema,
   Xe as verificationMethodsSchema,
-  Ct as widgetComponentSchema,
-  ho as widgetSchema
+  Tt as widgetComponentSchema,
+  bo as widgetSchema
 };