@authhero/adapter-interfaces 1.19.0 → 2.1.0

package/dist/adapter-interfaces.mjs

@@ -19,11 +19,19 @@ const a = e.object({
   supported_triggers: e.array(j).optional(),
   runtime: e.string().max(50).optional(),
   dependencies: e.array(k).optional(),
-  secrets: e.array(R).optional()
-}), en = v.partial().extend({
+  secrets: e.array(R).optional(),
+  // Marks this action as a shared template owned by the control-plane tenant.
+  // Other tenants can opt-in by creating a row with the same `name` and
+  // `inherit: true`; at execute time the loader reads code from this row.
+  is_system: e.boolean().optional(),
+  // On a non-control-plane tenant, indicates the action's `code` should be
+  // read through from the control-plane system action with a matching name.
+  // The local `secrets` still override (local-first then upstream fallback).
+  inherit: e.boolean().optional()
+}), sn = v.partial().extend({
   status: e.enum(["draft", "built"]).optional(),
   deployed_at: e.string().optional()
-}), tn = v.extend({
+}), rn = v.extend({
   id: e.string(),
   tenant_id: e.string(),
   status: e.enum(["draft", "built"]).default("built"),
@@ -69,7 +77,7 @@ const a = e.object({
   logs: ae.optional(),
   created_at: e.string(),
   updated_at: e.string()
-}), on = se.omit({
+}), ln = se.omit({
   tenant_id: !0,
   created_at: !0,
   updated_at: !0
@@ -81,7 +89,7 @@ const a = e.object({
   secrets: e.array(R).optional(),
   supported_triggers: e.array(j).optional(),
   deployed: e.boolean().default(!0)
-}), nn = re.extend({
+}), cn = re.extend({
   id: e.string(),
   tenant_id: e.string(),
   number: e.number().int(),
@@ -147,15 +155,15 @@ const a = e.object({
   hostname: e.string(),
   is_mobile: e.boolean().optional(),
   timestamp: e.string()
-}), an = me.extend({
+}), pn = me.extend({
   id: e.string()
-}), sn = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), rn = e.enum([
+}), dn = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), _n = e.enum([
   "CREATE_USER",
   "GET_USER",
   "UPDATE_USER",
   "SEND_REQUEST",
   "SEND_EMAIL"
-]), ln = e.enum(["VERIFY_EMAIL"]), he = e.object({
+]), gn = e.enum(["VERIFY_EMAIL"]), he = e.object({
   require_mx_record: e.boolean().optional(),
   block_aliases: e.boolean().optional(),
   block_free_emails: e.boolean().optional(),
@@ -185,7 +193,7 @@ const a = e.object({
     email: e.string(),
     rules: he.optional()
   })
-}), Ee = e.enum(["change-email", "account", "custom"]), Se = e.object({
+}), Se = e.enum(["change-email", "account", "custom"]), Ee = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("REDIRECT"),
@@ -193,7 +201,7 @@ const a = e.object({
   allow_failure: e.boolean().optional(),
   mask_output: e.boolean().optional(),
   params: e.object({
-    target: Ee.openapi({
+    target: Se.openapi({
       description: "The predefined target to redirect to, or 'custom' for a custom URL"
     }),
     custom_url: e.string().optional().openapi({
@@ -203,7 +211,7 @@ const a = e.object({
 }), ye = e.union([
   be,
   fe,
-  Se
+  Ee
 ]), Ae = e.object({
   name: e.string().min(1).max(150).openapi({
     description: "The name of the flow"
@@ -212,13 +220,13 @@ const a = e.object({
   actions: e.array(ye).optional().default([]).openapi({
     description: "The list of actions to execute in sequence"
   })
-}), cn = Ae.extend({
+}), un = Ae.extend({
   ...a.shape,
   id: e.string().openapi({
     description: "Unique identifier for the flow",
     example: "af_12tMpdJ3iek7svMyZkSh5M"
   })
-}), pn = e.object({
+}), mn = e.object({
   page: e.string().min(0).optional().default("0").transform((t) => parseInt(t, 10)).openapi({
     description: "The page number where 0 is the first page"
   }),
@@ -234,7 +242,7 @@ const a = e.object({
   q: e.string().optional().openapi({
     description: "A lucene query string used to filter the results"
   })
-}), dn = e.object({
+}), hn = e.object({
   start: e.number(),
   limit: e.number(),
   length: e.number(),
@@ -331,7 +339,7 @@ const a = e.object({
     hash: e.string(),
     algorithm: e.string()
   }).optional()
-}), Ne = e.object({
+}), we = e.object({
   ...Oe.omit({ password: !0 }).shape,
   ...a.shape,
   user_id: e.string(),
@@ -340,19 +348,19 @@ const a = e.object({
   email: e.string().optional(),
   login_count: e.number().default(0),
   identities: e.array(Ce).optional()
-}), _n = Ne.omit({
+}), bn = we.omit({
   registration_completed_at: !0
-}), gn = D.extend({
+}), fn = D.extend({
   login_count: e.number(),
   multifactor: e.array(e.string()).optional(),
   last_ip: e.string().optional(),
   last_login: e.string().optional(),
   user_id: e.string()
 }).catchall(e.any());
-let we = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", je = (t = 21) => {
+let Ne = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", je = (t = 21) => {
   let o = "", n = crypto.getRandomValues(new Uint8Array(t |= 0));
   for (; t--; )
-    o += we[n[t] & 63];
+    o += Ne[n[t] & 63];
   return o;
 };
 const ke = e.object({
@@ -490,11 +498,8 @@ const ke = e.object({
   client_metadata: e.record(e.string().max(255)).default({}).optional().openapi({
     description: 'Metadata associated with the client, in the form of an object with string values (max 255 chars). Maximum of 10 metadata properties allowed. Field names (max 255 chars) are alphanumeric and may only include the following special characters: :,-+=_*?"/()<>@ [Tab][Space]'
   }),
-  disable_sign_ups: e.boolean().default(!1).optional().openapi({
-    description: "When true, blocks new user sign-ups via this client. The identifier/signup screen rejects emails that don't match an existing user with `User account does not exist` (unless `hide_sign_up_disabled_error` is also set). Existing users — including those signing in via a federated connection that links to an existing account — are unaffected."
-  }),
   hide_sign_up_disabled_error: e.boolean().default(!1).optional().openapi({
-    description: "Enumeration-safe variant of `disable_sign_ups`. When both are true, the identifier screen does not reveal that an email is unknown — it advances to the OTP/password challenge as if the account existed and fails at credential check. Mitigates email enumeration at the cost of UX: users without an account see a generic credential failure instead of an explicit signup-disabled message."
+    description: "Enumeration-safe variant of the connection-level `disable_signup` flag. When a signup is blocked by the password connection and this is true, the identifier screen does not reveal that an email is unknown — it advances to the OTP/password challenge as if the account existed and fails at credential check. Mitigates email enumeration at the cost of UX: users without an account see a generic credential failure instead of an explicit signup-disabled message."
   }),
   mobile: e.record(e.any()).default({}).optional().openapi({
     description: "Additional configuration for native mobile apps."
@@ -579,7 +584,7 @@ const ke = e.object({
   user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({
     description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies."
   })
-}), un = e.object({
+}), Sn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   ...ke.shape,
@@ -618,7 +623,7 @@ const ke = e.object({
   ...Re.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), mn = e.array(ve), De = e.enum(["iat", "rat"]), Le = e.object({
+}), En = e.array(ve), De = e.enum(["iat", "rat"]), Le = e.object({
   id: e.string(),
   token_hash: e.string(),
   type: De,
@@ -627,7 +632,7 @@ const ke = e.object({
   constraints: e.record(e.unknown()).optional(),
   single_use: e.boolean().default(!1),
   expires_at: e.string().optional()
-}), hn = e.object({
+}), yn = e.object({
   created_at: e.string(),
   used_at: e.string().optional(),
   revoked_at: e.string().optional(),
@@ -754,7 +759,7 @@ const C = e.object({
   Me
 ]);
 var Ge = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(Ge || {});
-const We = e.object({
+const Be = e.object({
   id: e.string(),
   type: e.literal(
     "STEP"
@@ -766,7 +771,7 @@ const We = e.object({
     components: e.array(He),
     next_node: e.string()
   }).passthrough()
-}), Be = e.object({
+}), We = e.object({
   id: e.string(),
   type: e.literal(
     "FLOW"
@@ -805,8 +810,8 @@ const We = e.object({
   type: e.string(),
   coordinates: m
 }).passthrough(), qe = e.union([
-  We,
   Be,
+  We,
   Ke,
   ze
 ]), Xe = e.object({
@@ -830,13 +835,13 @@ const We = e.object({
     sdkSrc: e.string().optional(),
     sdk_src: e.string().optional()
   }).passthrough()
-}).passthrough(), bn = Ye.omit({
+}).passthrough(), An = Ye.omit({
   id: !0,
   created_at: !0,
   updated_at: !0
 });
 var U = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.ID_TOKEN = "id_token", t.TOKEN_ID_TOKEN = "id_token token", t.CODE = "code", t.CODE_ID_TOKEN = "code id_token", t.CODE_TOKEN = "code token", t.CODE_ID_TOKEN_TOKEN = "code id_token token", t))(U || {}), F = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(F || {}), P = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(P || {});
-const w = e.union([
+const N = e.union([
   e.null(),
   e.object({
     essential: e.boolean().optional(),
@@ -844,8 +849,8 @@ const w = e.union([
     values: e.array(e.unknown()).optional()
   })
 ]).nullable(), Ze = e.object({
-  userinfo: e.record(e.string(), w).optional(),
-  id_token: e.record(e.string(), w).optional()
+  userinfo: e.record(e.string(), N).optional(),
+  id_token: e.record(e.string(), N).optional()
 }), Qe = e.object({
   client_id: e.string(),
   act_as: e.string().optional(),
@@ -873,7 +878,7 @@ const w = e.union([
   claims: Ze.optional(),
   // The following fields are not available in Auth0
   vendor_id: e.string().optional()
-}), fn = e.object({
+}), In = e.object({
   colors: e.object({
     primary: e.string(),
     // Auth0 supports either a hex color string ("#ffffff") or a gradient
@@ -941,7 +946,7 @@ const w = e.union([
   expires_at: e.string(),
   used_at: e.string().optional(),
   user_id: e.string().optional()
-}), En = e.object({
+}), Cn = e.object({
   ...Je.shape,
   created_at: e.string()
 }), et = e.object({
@@ -996,8 +1001,19 @@ const w = e.union([
   disable_signup: e.boolean().optional(),
   // Brute force protection
   brute_force_protection: e.boolean().optional(),
-  // Import mode
+  // Import mode (Auth0 custom-DB semantics): when true and a successful
+  // upstream verification occurs, the user/password row is created locally
+  // so subsequent logins are served entirely from authhero.
   import_mode: e.boolean().optional(),
+  // Upstream migration credentials. Mirrors Auth0's
+  // `options.configuration` (encrypted env-vars accessed from custom
+  // scripts). For lazy migration, set when `import_mode: true`.
+  configuration: e.object({
+    token_endpoint: e.string().optional(),
+    userinfo_endpoint: e.string().optional(),
+    client_id: e.string().optional(),
+    client_secret: e.string().optional()
+  }).optional(),
   // Flexible Identifiers: attributes schema (replaces legacy requires_username)
   attributes: e.object({
     email: e.object({
@@ -1098,7 +1114,7 @@ const tt = e.object({
   show_as_button: e.boolean().optional(),
   metadata: e.record(e.any()).optional(),
   is_system: e.boolean().optional()
-}), Sn = e.object({
+}), Tn = e.object({
   id: e.string(),
   created_at: e.string().transform((t) => t === null ? "" : t),
   updated_at: e.string().transform((t) => t === null ? "" : t)
@@ -1137,7 +1153,7 @@ const tt = e.object({
     methods: e.array(nt)
   }).optional(),
   tls_policy: e.string().optional()
-}), yn = it.extend({
+}), On = it.extend({
   tenant_id: e.string()
 }), O = e.object({
   id: e.string(),
@@ -1190,23 +1206,23 @@ const tt = e.object({
   config: e.object({
     content: e.string().optional()
   }).optional()
-}), N = O.extend({
+}), w = O.extend({
   category: e.literal("WIDGET").optional(),
   label: e.string().min(1).optional(),
   hint: e.string().min(1).max(500).optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), gt = N.extend({
+}), gt = w.extend({
   type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
   config: e.object({
     credential_type: e.string().optional()
   })
-}), ut = N.extend({
+}), ut = w.extend({
   type: e.literal("GMAPS_ADDRESS"),
   config: e.object({
     api_key: e.string().optional()
   })
-}), mt = N.extend({
+}), mt = w.extend({
   type: e.literal("RECAPTCHA"),
   config: e.object({
     site_key: e.string().optional()
@@ -1255,7 +1271,7 @@ const tt = e.object({
     multiple: e.boolean().optional(),
     default_value: e.union([e.string(), e.array(e.string())]).optional()
   }).optional()
-}), Et = i.extend({
+}), St = i.extend({
   type: e.literal("CUSTOM"),
   config: e.object({
     component: e.string().optional(),
@@ -1263,7 +1279,7 @@ const tt = e.object({
     schema: e.record(e.any()).optional(),
     code: e.string().optional()
   })
-}), St = i.extend({
+}), Et = i.extend({
   type: e.literal("DATE"),
   config: e.object({
     format: e.string().optional(),
@@ -1322,13 +1338,13 @@ const tt = e.object({
     forgot_password_link: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), Nt = i.extend({
+}), wt = i.extend({
   type: e.literal("PAYMENT"),
   config: e.object({
     provider: e.string().optional(),
     currency: e.string().optional()
   }).optional()
-}), wt = i.extend({
+}), Nt = i.extend({
   type: e.literal("SOCIAL"),
   config: e.object({
     providers: e.array(e.string()).optional(),
@@ -1389,16 +1405,16 @@ const tt = e.object({
   bt,
   ft,
   Rt,
-  Et,
   St,
+  Et,
   yt,
   At,
   It,
   Ct,
   Tt,
   Ot,
-  Nt,
   wt,
+  Nt,
   jt,
   kt,
   vt
@@ -1406,7 +1422,7 @@ const tt = e.object({
   Dt,
   Lt,
   xt
-]), An = /* @__PURE__ */ new Set([
+]), wn = /* @__PURE__ */ new Set([
   "BOOLEAN",
   "CARDS",
   "CHOICE",
@@ -1420,7 +1436,7 @@ const tt = e.object({
   "TEL",
   "TEXT",
   "URL"
-]), In = e.object({
+]), Nn = e.object({
   id: e.string(),
   type: e.literal("submit"),
   label: e.string(),
@@ -1429,13 +1445,13 @@ const tt = e.object({
   order: e.number().optional(),
   visible: e.boolean().optional().default(!0),
   customizations: e.record(e.string(), e.any()).optional()
-}), E = e.object({
+}), S = e.object({
   x: e.number(),
   y: e.number()
 }), Ut = e.object({
   id: e.string(),
   type: e.literal("FLOW"),
-  coordinates: E,
+  coordinates: S,
   alias: e.string().min(1).max(150).optional(),
   config: e.object({
     flow_id: e.string().max(30),
@@ -1444,7 +1460,7 @@ const tt = e.object({
 }), Ft = e.object({
   id: e.string(),
   type: e.literal("ROUTER"),
-  coordinates: E,
+  coordinates: S,
   alias: e.string().min(1).max(150),
   config: e.object({
     rules: e.array(
@@ -1460,7 +1476,7 @@ const tt = e.object({
 }), Pt = e.object({
   id: e.string(),
   type: e.literal("STEP"),
-  coordinates: E,
+  coordinates: S,
   alias: e.string().min(1).max(150).optional(),
   config: e.object({
     components: e.array(M),
@@ -1487,7 +1503,7 @@ const tt = e.object({
   start: e.object({
     hidden_fields: e.array(e.object({ key: e.string(), value: e.string() })).optional(),
     next_node: e.string().optional(),
-    coordinates: E.optional()
+    coordinates: S.optional()
   }).optional(),
   ending: e.object({
     redirection: e.object({
@@ -1495,7 +1511,7 @@ const tt = e.object({
       target: e.string().optional()
     }).optional(),
     after_submit: e.object({ flow_id: e.string().optional() }).optional(),
-    coordinates: E.optional(),
+    coordinates: S.optional(),
     resume_flow: e.boolean().optional()
   }).optional(),
   style: e.object({ css: e.string().optional() }).optional(),
@@ -1505,7 +1521,7 @@ const tt = e.object({
   }).optional()
 }).openapi({
   description: "Schema for flow-based forms (matches Auth0 Forms structure)"
-}), Cn = e.object({
+}), jn = e.object({
   ...a.shape,
   ...Ht.shape,
   id: e.string()
@@ -1513,12 +1529,12 @@ const tt = e.object({
   id: e.number().optional(),
   text: e.string(),
   type: e.enum(["info", "error", "success", "warning"])
-}), Wt = e.object({
+}), Bt = e.object({
   id: e.string().optional(),
   text: e.string(),
   href: e.string(),
   linkText: e.string().optional()
-}), Tn = e.object({
+}), kn = e.object({
   /** Screen identifier for CSS targeting (e.g., 'identifier', 'enter-password', 'signup') */
   name: e.string().optional(),
   action: e.string(),
@@ -1527,17 +1543,17 @@ const tt = e.object({
   description: e.string().optional(),
   components: e.array(M),
   messages: e.array(Gt).optional(),
-  links: e.array(Wt).optional(),
+  links: e.array(Bt).optional(),
   /** Footer HTML content displayed at the very bottom of the widget (e.g., terms and conditions) */
   footer: e.string().optional()
 });
-function On(t) {
+function Rn(t) {
   return t.category === "BLOCK";
 }
-function Nn(t) {
+function vn(t) {
   return t.category === "WIDGET";
 }
-function wn(t) {
+function Dn(t) {
   return t.category === "FIELD";
 }
 const H = e.enum([
@@ -1556,12 +1572,12 @@ const H = e.enum([
   "validate-registration-username",
   "pre-user-deletion",
   "post-user-deletion"
-]), W = e.enum([
+]), B = e.enum([
   "post-user-login",
   "post-user-registration",
   "post-user-update",
   "credentials-exchange"
-]), B = e.enum([
+]), W = e.enum([
   "post-user-login",
   "credentials-exchange",
   "pre-user-registration",
@@ -1570,7 +1586,7 @@ const H = e.enum([
   "ensure-username",
   "set-preferred-username",
   "account-linking"
-]), jn = {
+]), Ln = {
   "ensure-username": {
     name: "Ensure Username",
     description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1607,7 +1623,7 @@ const H = e.enum([
    * Everything else is opaque to the runtime. Persisted as JSON.
    */
   metadata: e.record(e.unknown()).optional()
-}, Bt = e.object({
+}, Wt = e.object({
   ...c,
   trigger_id: H,
   url: e.string()
@@ -1617,14 +1633,14 @@ const H = e.enum([
   form_id: e.string()
 }), zt = e.object({
   ...c,
-  trigger_id: W,
+  trigger_id: B,
   template_id: K
 }), qt = e.object({
   ...c,
-  trigger_id: B,
+  trigger_id: W,
   code_id: e.string()
-}), kn = e.union([
-  Bt,
+}), xn = e.union([
+  Wt,
   Kt,
   zt,
   qt
@@ -1642,17 +1658,17 @@ const H = e.enum([
   form_id: e.string()
 }), Yt = e.object({
   ...c,
-  trigger_id: W,
+  trigger_id: B,
   ...a.shape,
   hook_id: e.string(),
   template_id: K
 }), Zt = e.object({
   ...c,
-  trigger_id: B,
+  trigger_id: W,
   ...a.shape,
   hook_id: e.string(),
   code_id: e.string()
-}), Rn = e.union([
+}), Un = e.union([
   Xt,
   Vt,
   Yt,
@@ -1660,7 +1676,7 @@ const H = e.enum([
 ]), Qt = e.object({
   code: e.string().max(1e5),
   secrets: e.record(e.string()).optional()
-}), vn = Qt.extend({
+}), Fn = Qt.extend({
   id: e.string(),
   tenant_id: e.string(),
   ...a.shape
@@ -1680,7 +1696,7 @@ const H = e.enum([
   ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
   roles: e.array(e.string()).default([]).optional(),
   send_invitation_email: e.boolean().default(!0).optional()
-}), Dn = e.object({
+}), Pn = e.object({
   id: e.string(),
   organization_id: e.string().max(50),
   created_at: e.string().datetime(),
@@ -1725,9 +1741,9 @@ const H = e.enum([
         path: [n],
         message: `EC JWK is missing required member '${n}'`
       });
-}), Ln = e.object({
+}), Mn = e.object({
   keys: e.array(to)
-}), xn = e.object({
+}), Hn = e.object({
   issuer: e.string(),
   authorization_endpoint: e.string(),
   token_endpoint: e.string(),
@@ -1781,7 +1797,7 @@ const oo = e.nativeEnum(z), no = e.object({
   // ISO timestamp persisted for audit/metadata; not used to reject resumed sessions
 }).openapi({
   description: "This represents a login sesion"
-}), Un = e.object({
+}), Gn = e.object({
   ...io.shape,
   id: e.string().openapi({
     description: "This is is used as the state in the universal login"
@@ -2001,7 +2017,7 @@ const oo = e.nativeEnum(z), no = e.object({
   auth0_client: ro.optional(),
   log_id: e.string().optional(),
   location_info: lo.optional()
-}), Fn = e.object({
+}), Bn = e.object({
   ...co.shape,
   log_id: e.string()
 }), po = e.enum([
@@ -2011,11 +2027,7 @@ const oo = e.nativeEnum(z), no = e.object({
   "splunk",
   "datadog",
   "sumo"
-]), q = e.enum([
-  "active",
-  "paused",
-  "suspended"
-]), _o = e.object({
+]), q = e.enum(["active", "paused", "suspended"]), _o = e.object({
   type: e.string(),
   name: e.string()
 }), go = e.object({
@@ -2025,12 +2037,34 @@ const oo = e.nativeEnum(z), no = e.object({
   sink: e.record(e.string(), e.unknown()),
   filters: e.array(_o).optional(),
   isPriority: e.boolean().optional()
-}), Pn = go.extend({
+}), Wn = go.extend({
   id: e.string(),
   status: q,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), uo = e.object({
+}), uo = e.enum([
+  "auth0",
+  "cognito",
+  "okta",
+  "oidc"
+]), mo = e.object({
+  domain: e.string(),
+  client_id: e.string(),
+  client_secret: e.string(),
+  audience: e.string().optional(),
+  scope: e.string().optional()
+}), ho = e.object({
+  id: e.string().optional(),
+  name: e.string(),
+  provider: uo,
+  connection: e.string(),
+  enabled: e.boolean().default(!0),
+  credentials: mo
+}), Kn = e.object({
+  id: e.string(),
+  created_at: e.string(),
+  updated_at: e.string()
+}).extend(ho.shape), bo = e.object({
   enabled: e.boolean().optional(),
   shields: e.array(e.string()).optional(),
   admin_notification_frequency: e.array(e.string()).optional(),
@@ -2043,13 +2077,13 @@ const oo = e.nativeEnum(z), no = e.object({
       shields: e.array(e.string()).optional()
     }).optional()
   }).optional()
-}), mo = e.object({
+}), fo = e.object({
   enabled: e.boolean().optional(),
   shields: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional(),
   mode: e.string().optional(),
   max_attempts: e.number().optional()
-}), ho = e.object({
+}), So = e.object({
   enabled: e.boolean().optional(),
   shields: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional(),
@@ -2063,17 +2097,17 @@ const oo = e.nativeEnum(z), no = e.object({
       rate: e.number().optional()
     }).optional()
   }).optional()
-}), bo = e.object({
-  breached_password_detection: uo.optional(),
-  brute_force_protection: mo.optional(),
-  suspicious_ip_throttling: ho.optional()
-}), fo = e.object({
+}), Eo = e.object({
+  breached_password_detection: bo.optional(),
+  brute_force_protection: fo.optional(),
+  suspicious_ip_throttling: So.optional()
+}), yo = e.object({
   id: e.string().optional(),
   user_id: e.string(),
   password: e.string(),
   algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
   is_current: e.boolean().default(!0)
-}), Mn = fo.extend({
+}), zn = yo.extend({
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
@@ -2084,7 +2118,7 @@ const oo = e.nativeEnum(z), no = e.object({
   last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
   last_ip: e.string().describe("Last IP address from which this user logged in"),
   last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), Eo = e.object({
+}), Ao = e.object({
   id: e.string(),
   revoked_at: e.string().optional(),
   used_at: e.string().optional(),
@@ -2096,13 +2130,13 @@ const oo = e.nativeEnum(z), no = e.object({
     "Metadata related to the device used in the session"
   ),
   clients: e.array(e.string()).describe("List of client details for the session")
-}), Hn = e.object({
+}), qn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   authenticated_at: e.string(),
   last_interaction_at: e.string(),
-  ...Eo.shape
-}), Gn = e.object({
+  ...Ao.shape
+}), Xn = e.object({
   kid: e.string().openapi({ description: "The key id of the signing key" }),
   tenant_id: e.string().optional().openapi({
     description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped."
@@ -2130,7 +2164,7 @@ const oo = e.nativeEnum(z), no = e.object({
   type: e.enum(["jwt_signing", "saml_encryption"]).openapi({
     description: "The type of the signing key"
   })
-}), So = e.object({
+}), Io = e.object({
   id: e.string().optional(),
   // Basic settings
   audience: e.string(),
@@ -2283,7 +2317,7 @@ const oo = e.nativeEnum(z), no = e.object({
   pushed_authorization_requests_supported: e.boolean().optional(),
   authorization_response_iss_parameter_supported: e.boolean().optional(),
   // Attack-protection config (singleton, exposed via /api/v2/attack-protection)
-  attack_protection: bo.optional(),
+  attack_protection: Eo.optional(),
   // Guardian MFA Factors configuration (internal storage, exposed via /guardian API)
   mfa: e.object({
     // MFA policy: "never" = MFA disabled, "always" = MFA required for all logins
@@ -2315,14 +2349,14 @@ const oo = e.nativeEnum(z), no = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), Wn = e.object({
+}), Vn = e.object({
   created_at: e.string().nullable().transform((t) => t ?? ""),
   updated_at: e.string().nullable().transform((t) => t ?? ""),
-  ...So.shape,
+  ...Io.shape,
   id: e.string()
 });
-var yo = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(yo || {});
-const Bn = e.object({
+var Co = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(Co || {});
+const Yn = e.object({
   access_token: e.string(),
   id_token: e.string().optional(),
   scope: e.string().optional(),
@@ -2335,7 +2369,7 @@ e.object({
   code: e.string(),
   state: e.string().optional()
 });
-const Ao = e.object({
+const To = e.object({
   button_border_radius: e.number(),
   button_border_weight: e.number(),
   buttons_style: e.enum(["pill", "rounded", "sharp"]),
@@ -2345,7 +2379,7 @@ const Ao = e.object({
   show_widget_shadow: e.boolean(),
   widget_border_weight: e.number(),
   widget_corner_radius: e.number()
-}), Io = e.object({
+}), Oo = e.object({
   base_focus_color: e.string(),
   base_hover_color: e.string(),
   body_text: e.string(),
@@ -2368,7 +2402,7 @@ const Ao = e.object({
 }), u = e.object({
   bold: e.boolean(),
   size: e.number()
-}), Co = e.object({
+}), wo = e.object({
   body_text: u,
   buttons_text: u,
   font_url: e.string(),
@@ -2378,7 +2412,7 @@ const Ao = e.object({
   reference_text_size: e.number(),
   subtitle: u,
   title: u
-}), To = e.object({
+}), No = e.object({
   background_color: e.string(),
   background_image_url: e.string(),
   page_layout: e.enum(["center", "left", "right"]),
@@ -2391,33 +2425,33 @@ const Ao = e.object({
    * Optional for backwards compatibility; absent values mean "widget".
    */
   logo_placement: e.enum(["widget", "chip", "none"]).optional()
-}), Oo = e.object({
+}), jo = e.object({
   header_text_alignment: e.enum(["center", "left", "right"]),
   logo_height: e.number(),
   logo_position: e.enum(["center", "left", "none", "right"]),
   logo_url: e.string(),
   social_buttons_layout: e.enum(["bottom", "top"])
-}), No = e.object({
-  borders: Ao,
-  colors: Io,
+}), ko = e.object({
+  borders: To,
+  colors: Oo,
   displayName: e.string(),
-  fonts: Co,
-  page_background: To,
-  widget: Oo
-}), Kn = No.extend({
+  fonts: wo,
+  page_background: No,
+  widget: jo
+}), Zn = ko.extend({
   themeId: e.string()
-}), zn = e.object({
+}), Qn = e.object({
   universal_login_experience: e.enum(["new", "classic"]).default("new"),
   identifier_first: e.boolean().default(!0),
   password_first: e.boolean().default(!1),
   webauthn_platform_first_factor: e.boolean()
-}), qn = e.object({
+}), $n = e.object({
   name: e.string(),
   enabled: e.boolean().optional().default(!0),
   default_from_address: e.string().optional(),
   credentials: e.record(e.string(), e.unknown()),
   settings: e.object({}).optional()
-}), wo = e.enum([
+}), Ro = e.enum([
   "verify_email",
   "verify_email_by_code",
   "reset_email",
@@ -2430,8 +2464,8 @@ const Ao = e.object({
   "change_password",
   "password_reset",
   "user_invitation"
-]), Xn = e.object({
-  template: wo,
+]), Jn = e.object({
+  template: Ro,
   body: e.string(),
   from: e.string(),
   subject: e.string(),
@@ -2440,7 +2474,7 @@ const Ao = e.object({
   urlLifetimeInSeconds: e.number().int().nonnegative().optional(),
   includeEmailInRedirect: e.boolean().default(!1),
   enabled: e.boolean().default(!0)
-}), jo = e.object({
+}), vo = e.object({
   // Internal primary key (ULID). Never sent to clients in the new wire format.
   id: e.string(),
   // Link to the login session
@@ -2474,23 +2508,23 @@ const Ao = e.object({
   // ISO of the *first* rotation. Anchors the leeway window so siblings minted
   // within the window don't extend the parent's exposure.
   rotated_at: e.string().optional()
-}), Vn = e.object({
+}), ei = e.object({
   // When the refresh token record was created.
   created_at: e.string(),
   // When the token was explicitly revoked (null = still active).
   revoked_at: e.string().optional(),
   // Spread in the rest of the refresh token properties.
-  ...jo.shape
-}), Yn = e.object({
+  ...vo.shape
+}), ti = e.object({
   to: e.string(),
   message: e.string()
-}), Zn = e.object({
+}), oi = e.object({
   name: e.string(),
   options: e.object({})
-}), ko = e.object({
+}), Do = e.object({
   value: e.string(),
   description: e.string().optional()
-}), Ro = e.object({
+}), Lo = e.object({
   token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
   enforce_policies: e.boolean().optional(),
   allow_skipping_userinfo: e.boolean().optional(),
@@ -2500,11 +2534,11 @@ const Ao = e.object({
   mtls: e.object({
     bound_access_tokens: e.boolean().optional()
   }).optional()
-}), vo = e.object({
+}), xo = e.object({
   id: e.string().optional(),
   name: e.string(),
   identifier: e.string(),
-  scopes: e.array(ko).optional(),
+  scopes: e.array(Do).optional(),
   signing_alg: e.string().optional(),
   signing_secret: e.string().optional(),
   token_lifetime: e.number().default(86400),
@@ -2512,30 +2546,30 @@ const Ao = e.object({
   skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
   allow_offline_access: e.boolean().optional(),
   verificationKey: e.string().optional(),
-  options: Ro.optional(),
+  options: Lo.optional(),
   is_system: e.boolean().optional(),
   metadata: e.record(e.any()).optional()
-}), Do = e.object({
-  ...vo.shape,
+}), Uo = e.object({
+  ...xo.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Qn = e.array(Do), Lo = e.object({
+}), ni = e.array(Uo), Fo = e.object({
   role_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string()
-}), xo = e.object({
-  ...Lo.shape,
+}), Po = e.object({
+  ...Fo.shape,
   created_at: e.string()
-}), $n = e.array(xo), Uo = e.object({
+}), ii = e.array(Po), Mo = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string(),
   organization_id: e.string().optional()
-}), Fo = e.object({
-  ...Uo.shape,
+}), Ho = e.object({
+  ...Mo.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), Jn = e.array(Fo), Po = e.object({
+}), ai = e.array(Ho), Go = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   resource_server_name: e.string(),
@@ -2543,17 +2577,17 @@ const Ao = e.object({
   description: e.string().nullable().optional(),
   created_at: e.string().optional(),
   organization_id: e.string().optional()
-}), ei = e.array(
-  Po
-), Mo = e.object({
+}), si = e.array(
+  Go
+), Bo = e.object({
   user_id: e.string(),
   role_id: e.string(),
   organization_id: e.string().optional()
-}), Ho = e.object({
-  ...Mo.shape,
+}), Wo = e.object({
+  ...Bo.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), ti = e.array(Ho), Go = e.object({
+}), ri = e.array(Wo), Ko = e.object({
   id: e.string().optional().openapi({
     description: "The unique identifier of the role. If not provided, one will be generated."
   }),
@@ -2567,13 +2601,13 @@ const Ao = e.object({
   metadata: e.record(e.any()).optional().openapi({
     description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios."
   })
-}), Wo = Go.extend({
+}), zo = Ko.extend({
   id: e.string().openapi({
     description: "The unique identifier of the role"
   }),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), oi = e.array(Wo), Bo = e.object({
+}), li = e.array(zo), qo = e.object({
   logo_url: e.string().optional().openapi({
     description: "URL of the organization's logo"
   }),
@@ -2585,7 +2619,7 @@ const Ao = e.object({
       description: "Page background color in hex format (e.g., #FFFFFF)"
     })
   }).optional()
-}).optional(), Ko = e.object({
+}).optional(), Xo = e.object({
   connection_id: e.string().openapi({
     description: "ID of the connection"
   }),
@@ -2598,7 +2632,7 @@ const Ao = e.object({
   is_signup_enabled: e.boolean().default(!0).openapi({
     description: "Whether signup is enabled for this connection"
   })
-}), zo = e.object({
+}), Vo = e.object({
   client_credentials: e.object({
     enforce: e.boolean().default(!1).openapi({
       description: "Whether to enforce token quota limits"
@@ -2610,7 +2644,7 @@ const Ao = e.object({
       description: "Maximum tokens per hour (0 = unlimited)"
     })
   }).optional()
-}).optional(), qo = e.object({
+}).optional(), Yo = e.object({
   id: e.string().optional(),
   name: e.string().min(1).regex(/^[a-z0-9_-]+$/, {
     message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores"
@@ -2620,31 +2654,31 @@ const Ao = e.object({
   display_name: e.string().optional().openapi({
     description: "The display name of the organization"
   }),
-  branding: Bo,
+  branding: qo,
   metadata: e.record(e.any()).default({}).optional().openapi({
     description: "Custom metadata for the organization"
   }),
-  enabled_connections: e.array(Ko).default([]).optional().openapi({
+  enabled_connections: e.array(Xo).default([]).optional().openapi({
     description: "List of enabled connections for the organization"
   }),
-  token_quota: zo
-}), ni = e.object({
-  ...qo.shape,
+  token_quota: Vo
+}), ci = e.object({
+  ...Yo.shape,
   ...a.shape,
   id: e.string(),
   // Override name to be lenient when reading from database (to support existing uppercase names)
   name: e.string().min(1).openapi({
     description: "The name of the organization"
   })
-}), Xo = e.object({
+}), Zo = e.object({
   connection_id: e.string().openapi({
     description: "ID of the tenant-level connection to enable for the org."
   }),
   assign_membership_on_login: e.boolean().optional().default(!1),
   show_as_button: e.boolean().optional().default(!0),
   is_signup_enabled: e.boolean().optional().default(!0)
-}), Vo = e.object({
-  ...Xo.shape,
+}), Qo = e.object({
+  ...Zo.shape,
   // Auth0 includes the embedded connection in GET responses.
   connection: e.object({
     name: e.string().optional(),
@@ -2652,20 +2686,20 @@ const Ao = e.object({
   }).optional(),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), ii = e.array(
-  Vo
-), Yo = e.object({
+}), pi = e.array(
+  Qo
+), $o = e.object({
   user_id: e.string().openapi({
     description: "ID of the user"
   }),
   organization_id: e.string().openapi({
     description: "ID of the organization"
   })
-}), ai = e.object({
-  ...Yo.shape,
+}), di = e.object({
+  ...$o.shape,
   ...a.shape,
   id: e.string()
-}), si = e.object({
+}), _i = e.object({
   // Session settings
   idle_session_lifetime: e.number().default(72),
   session_lifetime: e.number().default(168),
@@ -2765,7 +2799,7 @@ const Ao = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), ri = e.object({
+}), gi = e.object({
   date: e.string().openapi({
     description: "Date these events occurred in ISO 8601 format",
     example: "2025-12-19"
@@ -2790,10 +2824,40 @@ const Ao = e.object({
     description: "Approximate date and time the first event occurred in ISO 8601 format",
     example: "2025-12-19T00:00:00.000Z"
   })
-}), li = e.number().openapi({
+}), ui = e.number().openapi({
   description: "Number of active users in the last 30 days",
   example: 1234
-}), Zo = e.enum([
+}), mi = e.enum([
+  "active-users",
+  "logins",
+  "signups",
+  "refresh-tokens",
+  "sessions"
+]), hi = e.enum(["hour", "day", "week", "month"]), bi = e.enum([
+  "time",
+  "connection",
+  "client_id",
+  "user_type",
+  "event"
+]), fi = e.enum([
+  "password",
+  "social",
+  "passwordless",
+  "enterprise"
+]), Jo = e.object({
+  name: e.string(),
+  type: e.string()
+}), en = e.object({
+  elapsed: e.number(),
+  rows_read: e.number().optional(),
+  bytes_read: e.number().optional()
+}), Si = e.object({
+  meta: e.array(Jo),
+  data: e.array(e.record(e.string(), e.any())),
+  rows: e.number(),
+  rows_before_limit_at_least: e.number().optional(),
+  statistics: en.optional()
+}), tn = e.enum([
   "login",
   "login-id",
   "login-password",
@@ -2822,17 +2886,17 @@ const Ao = e.object({
   "custom-form",
   "login-passwordless",
   "mfa-login-options"
-]), Qo = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+]), on = e.record(e.string(), e.record(e.string(), e.string())).openapi({
   type: "object",
   additionalProperties: {
     type: "object",
     additionalProperties: { type: "string" }
   }
-}), ci = e.object({
-  prompt: Zo,
+}), Ei = e.object({
+  prompt: tn,
   language: e.string(),
-  custom_text: Qo
-}), pi = {
+  custom_text: on
+}), yi = {
   EMAIL: "email",
   SMS: "sms",
   USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2846,13 +2910,12 @@ const Ao = e.object({
   OAUTH2: "oauth2",
   SAMLP: "samlp",
   WAAD: "waad",
-  ADFS: "adfs",
-  AUTH0: "auth0"
-}, di = {
+  ADFS: "adfs"
+}, Ai = {
   DATABASE: "database",
   SOCIAL: "social",
   PASSWORDLESS: "passwordless"
-}, $o = e.enum([
+}, nn = e.enum([
   "phone",
   "totp",
   "email",
@@ -2862,7 +2925,7 @@ const Ao = e.object({
   "passkey"
 ]), V = e.object({
   user_id: e.string(),
-  type: $o,
+  type: nn,
   // Phone-specific
   phone_number: e.string().optional(),
   // TOTP-specific
@@ -2896,24 +2959,24 @@ function Y(t, o) {
     path: ["public_key"]
   }));
 }
-const _i = V.superRefine(Y), gi = e.object({
+const Ii = V.superRefine(Y), Ci = e.object({
   ...V.shape,
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
 }).superRefine(Y);
-function ui(t) {
+function Ti(t) {
   const [o, n] = t.split("|");
   if (!o || !n)
     throw new Error(`Invalid user_id: ${t}`);
   return { connection: o, id: n };
 }
-function mi(t) {
+function Oi(t) {
   const {
     primary: o,
     secondaries: n,
     syncMethods: h = ["create", "rawCreate", "update", "remove", "delete", "set"]
-  } = t, S = {
+  } = t, E = {
     get(p, s) {
       if (typeof s == "symbol")
         return p[s];
@@ -2947,13 +3010,13 @@ function mi(t) {
       } : d.bind(p);
     }
   };
-  return new Proxy(o, S);
+  return new Proxy(o, E);
 }
-function hi(t) {
+function wi(t) {
   return t;
 }
-function bi(t) {
-  var S, p, s, d, _, y, g, r, b, A, f, I;
+function Ni(t) {
+  var E, p, s, d, _, y, g, r, b, A, f, I;
   const o = t == null ? void 0 : t.options;
   if (!o)
     return {
@@ -2964,7 +3027,7 @@ function bi(t) {
     };
   const n = o.attributes;
   if (n) {
-    const Z = ((p = (S = n.username) == null ? void 0 : S.identifier) == null ? void 0 : p.active) === !0, Q = ((d = (s = n.email) == null ? void 0 : s.identifier) == null ? void 0 : d.active) !== !1, $ = ((y = (_ = n.username) == null ? void 0 : _.validation) == null ? void 0 : y.min_length) ?? 1, J = ((r = (g = n.username) == null ? void 0 : g.validation) == null ? void 0 : r.max_length) ?? 15;
+    const Z = ((p = (E = n.username) == null ? void 0 : E.identifier) == null ? void 0 : p.active) === !0, Q = ((d = (s = n.email) == null ? void 0 : s.identifier) == null ? void 0 : d.active) !== !1, $ = ((y = (_ = n.username) == null ? void 0 : _.validation) == null ? void 0 : y.min_length) ?? 1, J = ((r = (g = n.username) == null ? void 0 : g.validation) == null ? void 0 : r.max_length) ?? 15;
     return {
       usernameIdentifierActive: Z,
       emailIdentifierActive: Q,
@@ -2979,31 +3042,31 @@ function bi(t) {
     usernameMaxLength: ((I = (f = o.validation) == null ? void 0 : f.username) == null ? void 0 : I.max) ?? 15
   };
 }
-function fi(t) {
+function ji(t) {
   return typeof t == "object" && t !== null && !Array.isArray(t);
 }
 export {
-  rn as Auth0ActionEnum,
+  _n as Auth0ActionEnum,
   ro as Auth0Client,
   F as AuthorizationResponseMode,
   U as AuthorizationResponseType,
   P as CodeChallengeMethod,
   x as ComponentCategory,
   L as ComponentType,
-  ln as EmailActionEnum,
-  An as FORM_FIELD_TYPES,
-  sn as FlowActionTypeEnum,
-  yo as GrantType,
+  gn as EmailActionEnum,
+  wn as FORM_FIELD_TYPES,
+  dn as FlowActionTypeEnum,
+  Co as GrantType,
   lo as LocationInfo,
   ao as LogTypes,
   z as LoginSessionState,
   Ge as NodeType,
-  Ee as RedirectTargetEnum,
-  pi as Strategy,
-  di as StrategyType,
+  Se as RedirectTargetEnum,
+  yi as Strategy,
+  Ai as StrategyType,
   k as actionDependencySchema,
   oe as actionExecutionErrorSchema,
-  on as actionExecutionInsertSchema,
+  ln as actionExecutionInsertSchema,
   ie as actionExecutionLogEntrySchema,
   ae as actionExecutionLogsSchema,
   ne as actionExecutionResultSchema,
@@ -3012,181 +3075,192 @@ export {
   ee as actionExecutionTriggerIdSchema,
   v as actionInsertSchema,
   Ke as actionNodeSchema,
-  tn as actionSchema,
+  rn as actionSchema,
   R as actionSecretSchema,
   j as actionTriggerSchema,
-  en as actionUpdateSchema,
+  sn as actionUpdateSchema,
   re as actionVersionInsertSchema,
-  nn as actionVersionSchema,
-  li as activeUsersResponseSchema,
+  cn as actionVersionSchema,
+  ui as activeUsersResponseSchema,
   ce as actorSchema,
   Te as addressSchema,
-  bo as attackProtectionSchema,
+  Jo as analyticsColumnMetaSchema,
+  bi as analyticsGroupBySchema,
+  hi as analyticsIntervalSchema,
+  Si as analyticsQueryResponseSchema,
+  mi as analyticsResourceSchema,
+  en as analyticsStatisticsSchema,
+  fi as analyticsUserTypeSchema,
+  Eo as attackProtectionSchema,
   le as auditCategorySchema,
   me as auditEventInsertSchema,
-  an as auditEventSchema,
+  pn as auditEventSchema,
   ue as auth0ClientSchema,
-  bn as auth0FlowInsertSchema,
+  An as auth0FlowInsertSchema,
   Ye as auth0FlowSchema,
-  pn as auth0QuerySchema,
+  mn as auth0QuerySchema,
   be as auth0UpdateUserActionSchema,
-  _n as auth0UserResponseSchema,
+  bn as auth0UserResponseSchema,
   Qe as authParamsSchema,
-  _i as authenticationMethodInsertSchema,
-  gi as authenticationMethodSchema,
-  $o as authenticationMethodTypeSchema,
+  Ii as authenticationMethodInsertSchema,
+  Ci as authenticationMethodSchema,
+  nn as authenticationMethodTypeSchema,
   D as baseUserSchema,
   Dt as blockComponentSchema,
-  Ao as bordersSchema,
-  fn as brandingSchema,
-  uo as breachedPasswordDetectionSchema,
-  mo as bruteForceProtectionSchema,
+  To as bordersSchema,
+  In as brandingSchema,
+  bo as breachedPasswordDetectionSchema,
+  fo as bruteForceProtectionSchema,
   Ue as buttonComponentSchema,
   Ze as claimsRequestSchema,
   Re as clientGrantInsertSchema,
-  mn as clientGrantListSchema,
+  En as clientGrantListSchema,
   ve as clientGrantSchema,
   ke as clientInsertSchema,
   Le as clientRegistrationTokenInsertSchema,
-  hn as clientRegistrationTokenSchema,
+  yn as clientRegistrationTokenSchema,
   De as clientRegistrationTokenTypeSchema,
-  un as clientSchema,
+  Sn as clientSchema,
   Je as codeInsertSchema,
-  En as codeSchema,
+  Cn as codeSchema,
   $e as codeTypeSchema,
-  Io as colorsSchema,
+  Oo as colorsSchema,
   Gt as componentMessageSchema,
   He as componentSchema,
   tt as connectionInsertSchema,
   et as connectionOptionsSchema,
-  Sn as connectionSchema,
+  Tn as connectionSchema,
   m as coordinatesSchema,
-  mi as createPassthroughAdapter,
-  hi as createWriteOnlyAdapter,
+  Oi as createPassthroughAdapter,
+  wi as createWriteOnlyAdapter,
   ot as customDomainInsertSchema,
   it as customDomainSchema,
-  yn as customDomainWithTenantIdSchema,
-  ci as customTextEntrySchema,
-  Qo as customTextSchema,
-  ri as dailyStatsSchema,
-  qn as emailProviderSchema,
-  wo as emailTemplateNameSchema,
-  Xn as emailTemplateSchema,
+  On as customDomainWithTenantIdSchema,
+  Ei as customTextEntrySchema,
+  on as customTextSchema,
+  gi as dailyStatsSchema,
+  $n as emailProviderSchema,
+  Ro as emailTemplateNameSchema,
+  Jn as emailTemplateSchema,
   he as emailVerificationRulesSchema,
   fe as emailVerifyActionSchema,
   Ve as endingSchema,
   xt as fieldComponentSchema,
   ye as flowActionStepSchema,
   Ae as flowInsertSchema,
-  cn as flowSchema,
+  un as flowSchema,
   Pe as flowsFieldComponentSchema,
-  Be as flowsFlowNodeSchema,
-  We as flowsStepNodeSchema,
+  We as flowsFlowNodeSchema,
+  Be as flowsStepNodeSchema,
   u as fontDetailsSchema,
-  Co as fontsSchema,
-  In as formControlSchema,
+  wo as fontsSchema,
+  Nn as formControlSchema,
   Ht as formInsertSchema,
   M as formNodeComponentDefinition,
   Mt as formNodeSchema,
-  Cn as formSchema,
+  jn as formSchema,
   Me as genericComponentSchema,
   ze as genericNodeSchema,
-  bi as getConnectionIdentifierConfig,
+  Ni as getConnectionIdentifierConfig,
   Qt as hookCodeInsertSchema,
-  vn as hookCodeSchema,
-  kn as hookInsertSchema,
-  Rn as hookSchema,
+  Fn as hookCodeSchema,
+  xn as hookInsertSchema,
+  Un as hookSchema,
   K as hookTemplateId,
-  jn as hookTemplates,
+  Ln as hookTemplates,
   Ce as identitySchema,
   eo as inviteInsertSchema,
-  Dn as inviteSchema,
+  Pn as inviteSchema,
   Jt as inviteeSchema,
   $t as inviterSchema,
-  On as isBlockComponent,
-  wn as isFieldComponent,
-  fi as isPlainObject,
-  Nn as isWidgetComponent,
-  Ln as jwksKeySchema,
+  Rn as isBlockComponent,
+  Dn as isFieldComponent,
+  ji as isPlainObject,
+  vn as isWidgetComponent,
+  Mn as jwksKeySchema,
   to as jwksSchema,
   Fe as legalComponentSchema,
   ge as locationInfoSchema,
   co as logInsertSchema,
-  Fn as logSchema,
+  Bn as logSchema,
   _o as logStreamFilterSchema,
   go as logStreamInsertSchema,
-  Pn as logStreamSchema,
+  Wn as logStreamSchema,
   q as logStreamStatusSchema,
   po as logStreamTypeSchema,
   no as loginSessionAuthStrategySchema,
   io as loginSessionInsertSchema,
-  Un as loginSessionSchema,
+  Gn as loginSessionSchema,
   oo as loginSessionStateSchema,
+  uo as migrationProviderTypeSchema,
+  mo as migrationSourceCredentialsSchema,
+  ho as migrationSourceInsertSchema,
+  Kn as migrationSourceSchema,
   qe as nodeSchema,
-  xn as openIDConfigurationSchema,
-  Bo as organizationBrandingSchema,
-  Xo as organizationConnectionInsertSchema,
-  ii as organizationConnectionListSchema,
-  Vo as organizationConnectionSchema,
-  Ko as organizationEnabledConnectionSchema,
-  qo as organizationInsertSchema,
-  ni as organizationSchema,
-  zo as organizationTokenQuotaSchema,
-  To as pageBackgroundSchema,
-  ui as parseUserId,
-  fo as passwordInsertSchema,
-  Mn as passwordSchema,
+  Hn as openIDConfigurationSchema,
+  qo as organizationBrandingSchema,
+  Zo as organizationConnectionInsertSchema,
+  pi as organizationConnectionListSchema,
+  Qo as organizationConnectionSchema,
+  Xo as organizationEnabledConnectionSchema,
+  Yo as organizationInsertSchema,
+  ci as organizationSchema,
+  Vo as organizationTokenQuotaSchema,
+  No as pageBackgroundSchema,
+  Ti as parseUserId,
+  yo as passwordInsertSchema,
+  zn as passwordSchema,
   Ie as profileDataSchema,
-  Zo as promptScreenSchema,
-  zn as promptSettingSchema,
-  Se as redirectActionSchema,
-  jo as refreshTokenInsertSchema,
-  Vn as refreshTokenSchema,
+  tn as promptScreenSchema,
+  Qn as promptSettingSchema,
+  Ee as redirectActionSchema,
+  vo as refreshTokenInsertSchema,
+  ei as refreshTokenSchema,
   de as requestContextSchema,
-  vo as resourceServerInsertSchema,
-  Qn as resourceServerListSchema,
-  Ro as resourceServerOptionsSchema,
-  Do as resourceServerSchema,
-  ko as resourceServerScopeSchema,
+  xo as resourceServerInsertSchema,
+  ni as resourceServerListSchema,
+  Lo as resourceServerOptionsSchema,
+  Uo as resourceServerSchema,
+  Do as resourceServerScopeSchema,
   _e as responseContextSchema,
   xe as richTextComponentSchema,
-  Go as roleInsertSchema,
-  oi as roleListSchema,
-  Lo as rolePermissionInsertSchema,
-  $n as rolePermissionListSchema,
-  xo as rolePermissionSchema,
-  Wo as roleSchema,
-  Wt as screenLinkSchema,
-  Eo as sessionInsertSchema,
-  Hn as sessionSchema,
-  Gn as signingKeySchema,
-  Zn as smsProviderSchema,
-  Yn as smsSendParamsSchema,
+  Ko as roleInsertSchema,
+  li as roleListSchema,
+  Fo as rolePermissionInsertSchema,
+  ii as rolePermissionListSchema,
+  Po as rolePermissionSchema,
+  zo as roleSchema,
+  Bt as screenLinkSchema,
+  Ao as sessionInsertSchema,
+  qn as sessionSchema,
+  Xn as signingKeySchema,
+  oi as smsProviderSchema,
+  ti as smsSendParamsSchema,
   Xe as startSchema,
-  ho as suspiciousIpThrottlingSchema,
+  So as suspiciousIpThrottlingSchema,
   pe as targetSchema,
-  So as tenantInsertSchema,
-  Wn as tenantSchema,
-  si as tenantSettingsSchema,
-  No as themeInsertSchema,
-  Kn as themeSchema,
-  Bn as tokenResponseSchema,
-  dn as totalsSchema,
-  Tn as uiScreenSchema,
+  Io as tenantInsertSchema,
+  Vn as tenantSchema,
+  _i as tenantSettingsSchema,
+  ko as themeInsertSchema,
+  Zn as themeSchema,
+  Yn as tokenResponseSchema,
+  hn as totalsSchema,
+  kn as uiScreenSchema,
   Oe as userInsertSchema,
-  Yo as userOrganizationInsertSchema,
-  ai as userOrganizationSchema,
-  Uo as userPermissionInsertSchema,
-  Jn as userPermissionListSchema,
-  Fo as userPermissionSchema,
-  ei as userPermissionWithDetailsListSchema,
-  Po as userPermissionWithDetailsSchema,
-  gn as userResponseSchema,
-  Mo as userRoleInsertSchema,
-  ti as userRoleListSchema,
-  Ho as userRoleSchema,
-  Ne as userSchema,
+  $o as userOrganizationInsertSchema,
+  di as userOrganizationSchema,
+  Mo as userPermissionInsertSchema,
+  ai as userPermissionListSchema,
+  Ho as userPermissionSchema,
+  si as userPermissionWithDetailsListSchema,
+  Go as userPermissionWithDetailsSchema,
+  fn as userResponseSchema,
+  Bo as userRoleInsertSchema,
+  ri as userRoleListSchema,
+  Wo as userRoleSchema,
+  we as userSchema,
   nt as verificationMethodsSchema,
   Lt as widgetComponentSchema,
-  Oo as widgetSchema
+  jo as widgetSchema
 };