@authhero/adapter-interfaces 1.4.0 → 1.5.0

package/dist/adapter-interfaces.mjs

@@ -2,23 +2,26 @@ import { z as e } from "@hono/zod-openapi";
 const s = e.object({
   created_at: e.string(),
   updated_at: e.string()
-}), X = e.object({
+}), V = e.object({
   id: e.string(),
   version: e.string().optional()
-}), V = e.object({
+}), Y = e.object({
   name: e.string(),
   version: e.string()
-}), Y = e.object({
+}), Q = e.object({
   name: e.string(),
   value: e.string()
-}), Q = e.object({
+}), N = e.object({
   name: e.string().max(255),
   code: e.string().max(1e5),
-  supported_triggers: e.array(X).optional(),
+  supported_triggers: e.array(V).optional(),
   runtime: e.string().max(50).optional(),
-  dependencies: e.array(V).optional(),
-  secrets: e.array(Y).optional()
-}), jt = Q.extend({
+  dependencies: e.array(Y).optional(),
+  secrets: e.array(Q).optional()
+}), Ro = N.partial().extend({
+  status: e.enum(["draft", "built"]).optional(),
+  deployed_at: e.string().optional()
+}), Do = N.extend({
   id: e.string(),
   tenant_id: e.string(),
   status: e.enum(["draft", "built"]).default("built"),
@@ -58,10 +61,10 @@ const s = e.object({
   ip: e.string(),
   user_agent: e.string().optional(),
   correlation_id: e.string().optional()
-}), oe = e.object({
+}), te = e.object({
   status_code: e.number(),
   body: e.unknown().optional()
-}), te = e.object({
+}), oe = e.object({
   country_code: e.string(),
   city_name: e.string(),
   latitude: e.string(),
@@ -81,24 +84,24 @@ const s = e.object({
   actor: $,
   target: J,
   request: ee,
-  response: oe.optional(),
+  response: te.optional(),
   connection: e.string().optional(),
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
-  location: te.optional(),
+  location: oe.optional(),
   auth0_client: ne.optional(),
   hostname: e.string(),
   is_mobile: e.boolean().optional(),
   timestamp: e.string()
-}), Rt = ie.extend({
+}), Lo = ie.extend({
   id: e.string()
-}), Dt = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), Lt = e.enum([
+}), vo = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), ko = e.enum([
   "CREATE_USER",
   "GET_USER",
   "UPDATE_USER",
   "SEND_REQUEST",
   "SEND_EMAIL"
-]), vt = e.enum(["VERIFY_EMAIL"]), ae = e.object({
+]), Uo = e.enum(["VERIFY_EMAIL"]), ae = e.object({
   require_mx_record: e.boolean().optional(),
   block_aliases: e.boolean().optional(),
   block_free_emails: e.boolean().optional(),
@@ -155,20 +158,20 @@ const s = e.object({
   actions: e.array(pe).optional().default([]).openapi({
     description: "The list of actions to execute in sequence"
   })
-}), kt = _e.extend({
+}), Fo = _e.extend({
   ...s.shape,
   id: e.string().openapi({
     description: "Unique identifier for the flow",
     example: "af_12tMpdJ3iek7svMyZkSh5M"
   })
-}), Ut = e.object({
-  page: e.string().min(0).optional().default("0").transform((o) => parseInt(o, 10)).openapi({
+}), xo = e.object({
+  page: e.string().min(0).optional().default("0").transform((t) => parseInt(t, 10)).openapi({
     description: "The page number where 0 is the first page"
   }),
-  per_page: e.string().min(1).optional().default("10").transform((o) => parseInt(o, 10)).openapi({
+  per_page: e.string().min(1).optional().default("10").transform((t) => parseInt(t, 10)).openapi({
     description: "The number of items per page"
   }),
-  include_totals: e.string().optional().default("false").transform((o) => o === "true").openapi({
+  include_totals: e.string().optional().default("false").transform((t) => t === "true").openapi({
     description: "If the total number of items should be included in the response"
   }),
   sort: e.string().regex(/^.+:(-1|1)$/).optional().openapi({
@@ -177,7 +180,7 @@ const s = e.object({
   q: e.string().optional().openapi({
     description: "A lucene query string used to filter the results"
   })
-}), Ft = e.object({
+}), Po = e.object({
   start: e.number(),
   limit: e.number(),
   length: e.number(),
@@ -218,9 +221,9 @@ const s = e.object({
   // Zip code or postal code
   country: e.string().optional()
   // Country name
-}).optional(), N = e.object({
-  email: e.string().optional().transform((o) => o && o.toLowerCase()),
-  username: e.string().refine((o) => !o.includes("@"), {
+}).optional(), w = e.object({
+  email: e.string().optional().transform((t) => t && t.toLowerCase()),
+  username: e.string().refine((t) => !t.includes("@"), {
     message: 'Usernames must not contain "@". Use the email field for email addresses.'
   }).optional(),
   phone_number: e.string().optional(),
@@ -251,7 +254,7 @@ const s = e.object({
   // e.g., "Europe/Paris"
   // OIDC address claim (OIDC Core 5.1.1)
   address: ue
-}), me = N.extend({
+}), me = w.extend({
   email_verified: e.boolean().default(!1),
   verify_email: e.boolean().optional(),
   last_ip: e.string().optional(),
@@ -283,18 +286,20 @@ const s = e.object({
   email: e.string().optional(),
   login_count: e.number().default(0),
   identities: e.array(ge).optional()
-}), xt = he, Pt = N.extend({
+}), Mo = he.omit({
+  registration_completed_at: !0
+}), Ho = w.extend({
   login_count: e.number(),
   multifactor: e.array(e.string()).optional(),
   last_ip: e.string().optional(),
   last_login: e.string().optional(),
   user_id: e.string()
 }).catchall(e.any());
-let be = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", fe = (o = 21) => {
-  let t = "", i = crypto.getRandomValues(new Uint8Array(o |= 0));
-  for (; o--; )
-    t += be[i[o] & 63];
-  return t;
+let be = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", fe = (t = 21) => {
+  let o = "", i = crypto.getRandomValues(new Uint8Array(t |= 0));
+  for (; t--; )
+    o += be[i[t] & 63];
+  return o;
 };
 const Ee = e.object({
   client_id: e.string().openapi({
@@ -469,7 +474,7 @@ const Ee = e.object({
     description: "Specifies how long, in seconds, a Pushed Authorization Request URI remains valid"
   }),
   token_quota: e.record(e.any()).default({}).optional()
-}), Mt = e.object({
+}), Go = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   ...Ee.shape
@@ -505,15 +510,15 @@ const Ee = e.object({
   ...Se.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Ht = e.array(Ae), m = e.object({
+}), Bo = e.array(Ae), m = e.object({
   x: e.number(),
   y: e.number()
 });
-var w = /* @__PURE__ */ ((o) => (o.RICH_TEXT = "RICH_TEXT", o.NEXT_BUTTON = "NEXT_BUTTON", o.BACK_BUTTON = "BACK_BUTTON", o.SUBMIT_BUTTON = "SUBMIT_BUTTON", o.DIVIDER = "DIVIDER", o.TEXT = "TEXT", o.EMAIL = "EMAIL", o.PASSWORD = "PASSWORD", o.NUMBER = "NUMBER", o.PHONE = "PHONE", o.DATE = "DATE", o.CHECKBOX = "CHECKBOX", o.RADIO = "RADIO", o.SELECT = "SELECT", o.HIDDEN = "HIDDEN", o.LEGAL = "LEGAL", o))(w || {}), j = /* @__PURE__ */ ((o) => (o.BLOCK = "BLOCK", o.FIELD = "FIELD", o))(j || {});
+var j = /* @__PURE__ */ ((t) => (t.RICH_TEXT = "RICH_TEXT", t.NEXT_BUTTON = "NEXT_BUTTON", t.BACK_BUTTON = "BACK_BUTTON", t.SUBMIT_BUTTON = "SUBMIT_BUTTON", t.DIVIDER = "DIVIDER", t.TEXT = "TEXT", t.EMAIL = "EMAIL", t.PASSWORD = "PASSWORD", t.NUMBER = "NUMBER", t.PHONE = "PHONE", t.DATE = "DATE", t.CHECKBOX = "CHECKBOX", t.RADIO = "RADIO", t.SELECT = "SELECT", t.HIDDEN = "HIDDEN", t.LEGAL = "LEGAL", t))(j || {}), R = /* @__PURE__ */ ((t) => (t.BLOCK = "BLOCK", t.FIELD = "FIELD", t))(R || {});
 const I = e.object({
   id: e.string(),
-  category: e.nativeEnum(j),
-  type: e.nativeEnum(w)
+  category: e.nativeEnum(R),
+  type: e.nativeEnum(j)
 }), ye = I.extend({
   category: e.literal(
     "BLOCK"
@@ -626,7 +631,7 @@ const I = e.object({
   Te,
   Oe
 ]);
-var we = /* @__PURE__ */ ((o) => (o.STEP = "STEP", o.FLOW = "FLOW", o.CONDITION = "CONDITION", o.ACTION = "ACTION", o))(we || {});
+var we = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(we || {});
 const je = e.object({
   id: e.string(),
   type: e.literal(
@@ -703,17 +708,17 @@ const je = e.object({
     sdkSrc: e.string().optional(),
     sdk_src: e.string().optional()
   }).passthrough()
-}).passthrough(), Gt = Fe.omit({
+}).passthrough(), Wo = Fe.omit({
   id: !0,
   created_at: !0,
   updated_at: !0
 });
-var R = /* @__PURE__ */ ((o) => (o.TOKEN = "token", o.ID_TOKEN = "id_token", o.TOKEN_ID_TOKEN = "token id_token", o.CODE = "code", o))(R || {}), D = /* @__PURE__ */ ((o) => (o.QUERY = "query", o.FRAGMENT = "fragment", o.FORM_POST = "form_post", o.WEB_MESSAGE = "web_message", o.SAML_POST = "saml_post", o))(D || {}), L = /* @__PURE__ */ ((o) => (o.S256 = "S256", o.Plain = "plain", o))(L || {});
+var D = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.ID_TOKEN = "id_token", t.TOKEN_ID_TOKEN = "token id_token", t.CODE = "code", t))(D || {}), L = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(L || {}), v = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(v || {});
 const xe = e.object({
   client_id: e.string(),
   act_as: e.string().optional(),
-  response_type: e.nativeEnum(R).optional(),
-  response_mode: e.nativeEnum(D).optional(),
+  response_type: e.nativeEnum(D).optional(),
+  response_mode: e.nativeEnum(L).optional(),
   redirect_uri: e.string().optional(),
   audience: e.string().optional(),
   organization: e.string().optional(),
@@ -721,7 +726,7 @@ const xe = e.object({
   nonce: e.string().optional(),
   scope: e.string().optional(),
   prompt: e.string().optional(),
-  code_challenge_method: e.nativeEnum(L).optional(),
+  code_challenge_method: e.nativeEnum(v).optional(),
   code_challenge: e.string().optional(),
   username: e.string().optional(),
   ui_locales: e.string().optional(),
@@ -733,7 +738,7 @@ const xe = e.object({
   acr_values: e.string().optional(),
   // The following fields are not available in Auth0
   vendor_id: e.string().optional()
-}), Bt = e.object({
+}), Ko = e.object({
   colors: e.object({
     primary: e.string(),
     page_background: e.object({
@@ -792,7 +797,7 @@ const xe = e.object({
   expires_at: e.string(),
   used_at: e.string().optional(),
   user_id: e.string().optional()
-}), Wt = e.object({
+}), zo = e.object({
   ...Me.shape,
   created_at: e.string()
 }), He = e.object({
@@ -920,10 +925,10 @@ const xe = e.object({
   show_as_button: e.boolean().optional(),
   metadata: e.record(e.any()).optional(),
   is_system: e.boolean().optional()
-}), Kt = e.object({
+}), qo = e.object({
   id: e.string(),
-  created_at: e.string().transform((o) => o === null ? "" : o),
-  updated_at: e.string().transform((o) => o === null ? "" : o)
+  created_at: e.string().transform((t) => t === null ? "" : t),
+  updated_at: e.string().transform((t) => t === null ? "" : t)
 }).extend(Ge.shape), Be = e.object({
   domain: e.string(),
   custom_domain_id: e.string().optional(),
@@ -959,7 +964,7 @@ const xe = e.object({
     methods: e.array(We)
   }).optional(),
   tls_policy: e.string().optional()
-}), zt = Ke.extend({
+}), Xo = Ke.extend({
   tenant_id: e.string()
 }), C = e.object({
   id: e.string(),
@@ -1023,12 +1028,12 @@ const xe = e.object({
   config: e.object({
     credential_type: e.string().optional()
   })
-}), eo = T.extend({
+}), et = T.extend({
   type: e.literal("GMAPS_ADDRESS"),
   config: e.object({
     api_key: e.string().optional()
   })
-}), oo = T.extend({
+}), tt = T.extend({
   type: e.literal("RECAPTCHA"),
   config: e.object({
     site_key: e.string().optional()
@@ -1046,12 +1051,12 @@ const xe = e.object({
   ).optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), to = n.extend({
+}), ot = n.extend({
   type: e.literal("BOOLEAN"),
   config: e.object({
     default_value: e.boolean().optional()
   }).optional()
-}), no = n.extend({
+}), nt = n.extend({
   type: e.literal("CARDS"),
   config: e.object({
     options: e.array(
@@ -1064,7 +1069,7 @@ const xe = e.object({
     ).optional(),
     multi_select: e.boolean().optional()
   }).optional()
-}), io = n.extend({
+}), it = n.extend({
   type: e.literal("CHOICE"),
   config: e.object({
     options: e.array(
@@ -1077,7 +1082,7 @@ const xe = e.object({
     multiple: e.boolean().optional(),
     default_value: e.union([e.string(), e.array(e.string())]).optional()
   }).optional()
-}), ao = n.extend({
+}), at = n.extend({
   type: e.literal("CUSTOM"),
   config: e.object({
     component: e.string().optional(),
@@ -1085,7 +1090,7 @@ const xe = e.object({
     schema: e.record(e.any()).optional(),
     code: e.string().optional()
   })
-}), so = n.extend({
+}), st = n.extend({
   type: e.literal("DATE"),
   config: e.object({
     format: e.string().optional(),
@@ -1093,7 +1098,7 @@ const xe = e.object({
     max: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), ro = n.extend({
+}), rt = n.extend({
   type: e.literal("DROPDOWN"),
   config: e.object({
     options: e.array(
@@ -1107,26 +1112,26 @@ const xe = e.object({
     multiple: e.boolean().optional(),
     default_value: e.union([e.string(), e.array(e.string())]).optional()
   }).optional()
-}), lo = n.extend({
+}), lt = n.extend({
   type: e.literal("EMAIL"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), co = n.extend({
+}), ct = n.extend({
   type: e.literal("FILE"),
   config: e.object({
     accept: e.string().optional(),
     max_size: e.number().optional(),
     multiple: e.boolean().optional()
   }).optional()
-}), po = n.extend({
+}), pt = n.extend({
   type: e.literal("LEGAL"),
   config: e.object({
     text: e.string(),
     html: e.boolean().optional()
   }).optional()
-}), _o = n.extend({
+}), _t = n.extend({
   type: e.literal("NUMBER"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1135,7 +1140,7 @@ const xe = e.object({
     step: e.number().optional(),
     default_value: e.string().optional()
   }).optional()
-}), go = n.extend({
+}), dt = n.extend({
   type: e.literal("PASSWORD"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1144,13 +1149,13 @@ const xe = e.object({
     forgot_password_link: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), uo = n.extend({
+}), gt = n.extend({
   type: e.literal("PAYMENT"),
   config: e.object({
     provider: e.string().optional(),
     currency: e.string().optional()
   }).optional()
-}), mo = n.extend({
+}), ut = n.extend({
   type: e.literal("SOCIAL"),
   config: e.object({
     providers: e.array(e.string()).optional(),
@@ -1165,7 +1170,7 @@ const xe = e.object({
       })
     ).optional()
   }).optional()
-}), ho = n.extend({
+}), mt = n.extend({
   type: e.literal("TEL"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1173,7 +1178,7 @@ const xe = e.object({
     default_value: e.string().optional(),
     allow_email: e.boolean().optional()
   }).optional()
-}), bo = n.extend({
+}), ht = n.extend({
   type: e.literal("TEXT"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1181,19 +1186,19 @@ const xe = e.object({
     max_length: e.number().optional(),
     default_value: e.string().optional()
   }).optional()
-}), fo = n.extend({
+}), bt = n.extend({
   type: e.literal("COUNTRY"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), Eo = n.extend({
+}), ft = n.extend({
   type: e.literal("URL"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), So = e.discriminatedUnion("type", [
+}), Et = e.discriminatedUnion("type", [
   ze,
   qe,
   Xe,
@@ -1202,33 +1207,33 @@ const xe = e.object({
   Qe,
   Ze,
   $e
-]), Ao = e.discriminatedUnion("type", [
+]), St = e.discriminatedUnion("type", [
   Je,
-  eo,
-  oo
-]), yo = e.discriminatedUnion("type", [
-  to,
-  no,
-  io,
-  fo,
-  ao,
-  so,
-  ro,
-  lo,
-  co,
-  po,
-  _o,
-  go,
-  uo,
-  mo,
-  ho,
-  bo,
-  Eo
-]), v = e.union([
-  So,
-  Ao,
-  yo
-]), qt = /* @__PURE__ */ new Set([
+  et,
+  tt
+]), At = e.discriminatedUnion("type", [
+  ot,
+  nt,
+  it,
+  bt,
+  at,
+  st,
+  rt,
+  lt,
+  ct,
+  pt,
+  _t,
+  dt,
+  gt,
+  ut,
+  mt,
+  ht,
+  ft
+]), k = e.union([
+  Et,
+  St,
+  At
+]), Vo = /* @__PURE__ */ new Set([
   "BOOLEAN",
   "CARDS",
   "CHOICE",
@@ -1242,7 +1247,7 @@ const xe = e.object({
   "TEL",
   "TEXT",
   "URL"
-]), Xt = e.object({
+]), Yo = e.object({
   id: e.string(),
   type: e.literal("submit"),
   label: e.string(),
@@ -1254,7 +1259,7 @@ const xe = e.object({
 }), f = e.object({
   x: e.number(),
   y: e.number()
-}), Io = e.object({
+}), yt = e.object({
   id: e.string(),
   type: e.literal("FLOW"),
   coordinates: f,
@@ -1263,7 +1268,7 @@ const xe = e.object({
     flow_id: e.string().max(30),
     next_node: e.string().optional()
   })
-}), Co = e.object({
+}), It = e.object({
   id: e.string(),
   type: e.literal("ROUTER"),
   coordinates: f,
@@ -1279,20 +1284,20 @@ const xe = e.object({
     ),
     fallback: e.string()
   })
-}), To = e.object({
+}), Ct = e.object({
   id: e.string(),
   type: e.literal("STEP"),
   coordinates: f,
   alias: e.string().min(1).max(150).optional(),
   config: e.object({
-    components: e.array(v),
+    components: e.array(k),
     next_node: e.string().optional()
   })
-}), Oo = e.discriminatedUnion("type", [
-  Io,
-  Co,
-  To
-]), No = e.object({
+}), Tt = e.discriminatedUnion("type", [
+  yt,
+  It,
+  Ct
+]), Ot = e.object({
   name: e.string().openapi({
     description: "The name of the form"
   }),
@@ -1305,7 +1310,7 @@ const xe = e.object({
     default: e.string().optional()
   }).optional(),
   translations: e.record(e.string(), e.any()).optional(),
-  nodes: e.array(Oo).optional(),
+  nodes: e.array(Tt).optional(),
   start: e.object({
     hidden_fields: e.array(e.object({ key: e.string(), value: e.string() })).optional(),
     next_node: e.string().optional(),
@@ -1327,42 +1332,42 @@ const xe = e.object({
   }).optional()
 }).openapi({
   description: "Schema for flow-based forms (matches Auth0 Forms structure)"
-}), Vt = e.object({
+}), Qo = e.object({
   ...s.shape,
-  ...No.shape,
+  ...Ot.shape,
   id: e.string()
-}), wo = e.object({
+}), Nt = e.object({
   id: e.number().optional(),
   text: e.string(),
   type: e.enum(["info", "error", "success", "warning"])
-}), jo = e.object({
+}), wt = e.object({
   id: e.string().optional(),
   text: e.string(),
   href: e.string(),
   linkText: e.string().optional()
-}), Yt = e.object({
+}), Zo = e.object({
   /** Screen identifier for CSS targeting (e.g., 'identifier', 'enter-password', 'signup') */
   name: e.string().optional(),
   action: e.string(),
   method: e.enum(["POST", "GET"]),
   title: e.string().optional(),
   description: e.string().optional(),
-  components: e.array(v),
-  messages: e.array(wo).optional(),
-  links: e.array(jo).optional(),
+  components: e.array(k),
+  messages: e.array(Nt).optional(),
+  links: e.array(wt).optional(),
   /** Footer HTML content displayed at the very bottom of the widget (e.g., terms and conditions) */
   footer: e.string().optional()
 });
-function Qt(o) {
-  return o.category === "BLOCK";
+function $o(t) {
+  return t.category === "BLOCK";
 }
-function Zt(o) {
-  return o.category === "WIDGET";
+function Jo(t) {
+  return t.category === "WIDGET";
 }
-function $t(o) {
-  return o.category === "FIELD";
+function en(t) {
+  return t.category === "FIELD";
 }
-const k = e.enum([
+const U = e.enum([
   "pre-user-registration",
   "post-user-registration",
   "post-user-login",
@@ -1370,25 +1375,25 @@ const k = e.enum([
   "pre-user-deletion",
   "post-user-deletion"
   // Potentially other triggers specific to webhooks in the future
-]), U = e.enum([
+]), F = e.enum([
   "pre-user-registration",
   "post-user-registration",
   "post-user-login",
   "validate-registration-username",
   "pre-user-deletion",
   "post-user-deletion"
-]), F = e.enum([
+]), x = e.enum([
   "post-user-login",
   "credentials-exchange"
-]), x = e.enum([
+]), P = e.enum([
   "post-user-login",
   "credentials-exchange",
   "pre-user-registration",
   "post-user-registration"
-]), P = e.enum([
+]), M = e.enum([
   "ensure-username",
   "set-preferred-username"
-]), Jt = {
+]), tn = {
   "ensure-username": {
     name: "Ensure Username",
     description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1404,71 +1409,71 @@ const k = e.enum([
   synchronous: e.boolean().default(!1),
   priority: e.number().optional(),
   hook_id: e.string().optional()
-}, Ro = e.object({
-  ...c,
-  trigger_id: k,
-  url: e.string()
-}), Do = e.object({
+}, jt = e.object({
   ...c,
   trigger_id: U,
-  form_id: e.string()
-}), Lo = e.object({
+  url: e.string()
+}), Rt = e.object({
   ...c,
   trigger_id: F,
-  template_id: P
-}), vo = e.object({
+  form_id: e.string()
+}), Dt = e.object({
   ...c,
   trigger_id: x,
+  template_id: M
+}), Lt = e.object({
+  ...c,
+  trigger_id: P,
   code_id: e.string()
-}), en = e.union([
-  Ro,
-  Do,
-  Lo,
-  vo
-]), ko = e.object({
+}), on = e.union([
+  jt,
+  Rt,
+  Dt,
+  Lt
+]), vt = e.object({
   ...c,
-  trigger_id: k,
+  trigger_id: U,
   ...s.shape,
   hook_id: e.string(),
   url: e.string()
-}), Uo = e.object({
+}), kt = e.object({
   ...c,
-  trigger_id: U,
+  trigger_id: F,
   ...s.shape,
   hook_id: e.string(),
   form_id: e.string()
-}), Fo = e.object({
+}), Ut = e.object({
   ...c,
-  trigger_id: F,
+  trigger_id: x,
   ...s.shape,
   hook_id: e.string(),
-  template_id: P
-}), xo = e.object({
+  template_id: M
+}), Ft = e.object({
   ...c,
-  trigger_id: x,
+  trigger_id: P,
   ...s.shape,
   hook_id: e.string(),
   code_id: e.string()
-}), on = e.union([
-  ko,
-  Uo,
-  Fo,
-  xo
-]), Po = e.object({
+}), nn = e.union([
+  vt,
+  kt,
+  Ut,
+  Ft
+]), xt = e.object({
   code: e.string().max(1e5),
   secrets: e.record(e.string()).optional()
-}), tn = Po.extend({
+}), an = xt.extend({
   id: e.string(),
   tenant_id: e.string(),
   ...s.shape
-}), Mo = e.object({
+}), Pt = e.object({
   name: e.string().optional()
-}), Ho = e.object({
+}), Mt = e.object({
   email: e.string().optional()
-}), Go = e.object({
+}), Ht = e.object({
   organization_id: e.string().max(50),
-  inviter: Mo,
-  invitee: Ho,
+  inviter: Pt,
+  invitee: Mt,
   invitation_url: e.string().url(),
   client_id: e.string(),
   connection_id: e.string().optional(),
@@ -1477,13 +1482,13 @@ const k = e.enum([
   ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
   roles: e.array(e.string()).default([]).optional(),
   send_invitation_email: e.boolean().default(!0).optional()
-}), nn = e.object({
+}), sn = e.object({
   id: e.string(),
   organization_id: e.string().max(50),
   created_at: e.string().datetime(),
   expires_at: e.string().datetime(),
   ticket_id: e.string().optional()
-}).extend(Go.shape), Bo = e.object({
+}).extend(Ht.shape), Gt = e.object({
   alg: e.enum([
     "RS256",
     "RS384",
@@ -1502,9 +1507,9 @@ const k = e.enum([
   x5t: e.string().optional(),
   x5c: e.array(e.string()).optional(),
   use: e.enum(["sig", "enc"]).optional()
-}), an = e.object({
-  keys: e.array(Bo)
-}), sn = e.object({
+}), rn = e.object({
+  keys: e.array(Gt)
+}), ln = e.object({
   issuer: e.string(),
   authorization_endpoint: e.string(),
   token_endpoint: e.string(),
@@ -1526,8 +1531,11 @@ const k = e.enum([
   request_parameter_supported: e.boolean(),
   token_endpoint_auth_signing_alg_values_supported: e.array(e.string())
 });
-var M = /* @__PURE__ */ ((o) => (o.PENDING = "pending", o.AUTHENTICATED = "authenticated", o.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", o.AWAITING_MFA = "awaiting_mfa", o.AWAITING_HOOK = "awaiting_hook", o.AWAITING_CONTINUATION = "awaiting_continuation", o.COMPLETED = "completed", o.FAILED = "failed", o.EXPIRED = "expired", o))(M || {});
-const Wo = e.nativeEnum(M), Ko = e.object({
+var H = /* @__PURE__ */ ((t) => (t.PENDING = "pending", t.AUTHENTICATED = "authenticated", t.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", t.AWAITING_MFA = "awaiting_mfa", t.AWAITING_HOOK = "awaiting_hook", t.AWAITING_CONTINUATION = "awaiting_continuation", t.COMPLETED = "completed", t.FAILED = "failed", t.EXPIRED = "expired", t))(H || {});
+const Bt = e.nativeEnum(H), Wt = e.object({
+  strategy: e.string(),
+  strategy_type: e.string()
+}), Kt = e.object({
   csrf_token: e.string(),
   auth0Client: e.string().optional(),
   authParams: xe,
@@ -1537,7 +1545,7 @@ const Wo = e.nativeEnum(M), Ko = e.object({
   useragent: e.string().optional(),
   session_id: e.string().optional(),
   authorization_url: e.string().optional(),
-  state: Wo.optional().default(
+  state: Bt.optional().default(
     "pending"
     /* PENDING */
   ),
@@ -1546,18 +1554,21 @@ const Wo = e.nativeEnum(M), Ko = e.object({
   failure_reason: e.string().optional(),
   user_id: e.string().optional(),
   // Set once user is authenticated
-  auth_connection: e.string().optional()
+  auth_connection: e.string().optional(),
   // The connection used to authenticate (may differ from primary user's connection)
+  auth_strategy: Wt.optional(),
+  authenticated_at: e.string().optional()
+  // ISO timestamp persisted for audit/metadata; not used to reject resumed sessions
 }).openapi({
   description: "This represents a login sesion"
-}), rn = e.object({
-  ...Ko.shape,
+}), cn = e.object({
+  ...Kt.shape,
   id: e.string().openapi({
     description: "This is is used as the state in the universal login"
   }),
   created_at: e.string(),
   updated_at: e.string()
-}), zo = {
+}), zt = {
   // Network & System
   ACLS_SUMMARY: "acls_summary",
   ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
@@ -1729,24 +1740,24 @@ const Wo = e.nativeEnum(M), Ko = e.object({
   WARNING_DURING_LOGIN: "w",
   WARNING_SENDING_NOTIFICATION: "wn",
   WARNING_USER_MANAGEMENT: "wum"
-}, qo = e.string().refine(
-  (o) => Object.values(zo).includes(o),
+}, qt = e.string().refine(
+  (t) => Object.values(zt).includes(t),
   { message: "Invalid log type" }
-), Xo = e.object({
+), Xt = e.object({
   name: e.string(),
   version: e.string(),
   env: e.object({
     node: e.string().optional()
   }).optional()
-}), Vo = e.object({
+}), Vt = e.object({
   country_code: e.string().length(2),
   city_name: e.string(),
   latitude: e.string(),
   longitude: e.string(),
   time_zone: e.string(),
   continent_code: e.string()
-}), Yo = e.object({
-  type: qo,
+}), Yt = e.object({
+  type: qt,
   date: e.string(),
   description: e.string().optional(),
   ip: e.string().optional(),
@@ -1765,30 +1776,30 @@ const Wo = e.nativeEnum(M), Ko = e.object({
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
   hostname: e.string().optional(),
-  auth0_client: Xo.optional(),
+  auth0_client: Xt.optional(),
   log_id: e.string().optional(),
-  location_info: Vo.optional()
-}), ln = e.object({
-  ...Yo.shape,
+  location_info: Vt.optional()
+}), pn = e.object({
+  ...Yt.shape,
   log_id: e.string()
-}), Qo = e.object({
+}), Qt = e.object({
   id: e.string().optional(),
   user_id: e.string(),
   password: e.string(),
   algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
   is_current: e.boolean().default(!0)
-}), cn = Qo.extend({
+}), _n = Qt.extend({
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
-}), H = e.object({
+}), G = e.object({
   initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
   initial_ip: e.string().describe("First IP address associated with this session"),
   initial_asn: e.string().describe("First autonomous system number associated with this session"),
   last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
   last_ip: e.string().describe("Last IP address from which this user logged in"),
   last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), Zo = e.object({
+}), Zt = e.object({
   id: e.string(),
   revoked_at: e.string().optional(),
   used_at: e.string().optional(),
@@ -1796,17 +1807,17 @@ const Wo = e.nativeEnum(M), Ko = e.object({
   expires_at: e.string().optional(),
   login_session_id: e.string(),
   idle_expires_at: e.string().optional(),
-  device: H.describe(
+  device: G.describe(
     "Metadata related to the device used in the session"
   ),
   clients: e.array(e.string()).describe("List of client details for the session")
-}), pn = e.object({
+}), dn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   authenticated_at: e.string(),
   last_interaction_at: e.string(),
-  ...Zo.shape
-}), _n = e.object({
+  ...Zt.shape
+}), gn = e.object({
   kid: e.string().openapi({ description: "The key id of the signing key" }),
   cert: e.string().openapi({ description: "The public certificate of the signing key" }),
   fingerprint: e.string().openapi({ description: "The cert fingerprint" }),
@@ -1831,7 +1842,7 @@ const Wo = e.nativeEnum(M), Ko = e.object({
   type: e.enum(["jwt_signing", "saml_encryption"]).openapi({
     description: "The type of the signing key"
   })
-}), $o = e.object({
+}), $t = e.object({
   id: e.string().optional(),
   // Basic settings
   audience: e.string(),
@@ -1986,14 +1997,14 @@ const Wo = e.nativeEnum(M), Ko = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), dn = e.object({
-  created_at: e.string().nullable().transform((o) => o ?? ""),
-  updated_at: e.string().nullable().transform((o) => o ?? ""),
-  ...$o.shape,
+}), un = e.object({
+  created_at: e.string().nullable().transform((t) => t ?? ""),
+  updated_at: e.string().nullable().transform((t) => t ?? ""),
+  ...$t.shape,
   id: e.string()
 });
-var Jo = /* @__PURE__ */ ((o) => (o.RefreshToken = "refresh_token", o.AuthorizationCode = "authorization_code", o.ClientCredential = "client_credentials", o.Passwordless = "passwordless", o.Password = "password", o.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", o))(Jo || {});
-const gn = e.object({
+var Jt = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(Jt || {});
+const mn = e.object({
   access_token: e.string(),
   id_token: e.string().optional(),
   scope: e.string().optional(),
@@ -2006,7 +2017,7 @@ e.object({
   code: e.string(),
   state: e.string().optional()
 });
-const et = e.object({
+const eo = e.object({
   button_border_radius: e.number(),
   button_border_weight: e.number(),
   buttons_style: e.enum(["pill", "rounded", "sharp"]),
@@ -2016,7 +2027,7 @@ const et = e.object({
   show_widget_shadow: e.boolean(),
   widget_border_weight: e.number(),
   widget_corner_radius: e.number()
-}), ot = e.object({
+}), to = e.object({
   base_focus_color: e.string(),
   base_hover_color: e.string(),
   body_text: e.string(),
@@ -2039,7 +2050,7 @@ const et = e.object({
 }), u = e.object({
   bold: e.boolean(),
   size: e.number()
-}), tt = e.object({
+}), oo = e.object({
   body_text: u,
   buttons_text: u,
   font_url: e.string(),
@@ -2049,31 +2060,31 @@ const et = e.object({
   reference_text_size: e.number(),
   subtitle: u,
   title: u
-}), nt = e.object({
+}), no = e.object({
   background_color: e.string(),
   background_image_url: e.string(),
   page_layout: e.enum(["center", "left", "right"])
-}), it = e.object({
+}), io = e.object({
   header_text_alignment: e.enum(["center", "left", "right"]),
   logo_height: e.number(),
   logo_position: e.enum(["center", "left", "none", "right"]),
   logo_url: e.string(),
   social_buttons_layout: e.enum(["bottom", "top"])
-}), at = e.object({
-  borders: et,
-  colors: ot,
+}), ao = e.object({
+  borders: eo,
+  colors: to,
   displayName: e.string(),
-  fonts: tt,
-  page_background: nt,
-  widget: it
-}), un = at.extend({
+  fonts: oo,
+  page_background: no,
+  widget: io
+}), hn = ao.extend({
   themeId: e.string()
-}), mn = e.object({
+}), bn = e.object({
   universal_login_experience: e.enum(["new", "classic"]).default("new"),
   identifier_first: e.boolean().default(!0),
   password_first: e.boolean().default(!1),
   webauthn_platform_first_factor: e.boolean()
-}), hn = e.object({
+}), fn = e.object({
   name: e.string(),
   enabled: e.boolean().optional().default(!0),
   default_from_address: e.string().optional(),
@@ -2103,7 +2114,7 @@ const et = e.object({
     })
   ]),
   settings: e.object({}).optional()
-}), st = e.object({
+}), so = e.object({
   // The actual refresh token value (primary key).
   id: e.string(),
   // Link to the login session
@@ -2116,7 +2127,7 @@ const et = e.object({
   idle_expires_at: e.string().optional(),
   // When the token was last used.
   last_exchanged_at: e.string().optional(),
-  device: H,
+  device: G,
   resource_servers: e.array(
     e.object({
       audience: e.string(),
@@ -2124,21 +2135,21 @@ const et = e.object({
     })
   ),
   rotating: e.boolean()
-}), bn = e.object({
+}), En = e.object({
   // When the refresh token record was created.
   created_at: e.string(),
   // Spread in the rest of the refresh token properties.
-  ...st.shape
-}), fn = e.object({
+  ...so.shape
+}), Sn = e.object({
   to: e.string(),
   message: e.string()
-}), En = e.object({
+}), An = e.object({
   name: e.string(),
   options: e.object({})
-}), rt = e.object({
+}), ro = e.object({
   value: e.string(),
   description: e.string().optional()
-}), lt = e.object({
+}), lo = e.object({
   token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
   enforce_policies: e.boolean().optional(),
   allow_skipping_userinfo: e.boolean().optional(),
@@ -2148,11 +2159,11 @@ const et = e.object({
   mtls: e.object({
     bound_access_tokens: e.boolean().optional()
   }).optional()
-}), ct = e.object({
+}), co = e.object({
   id: e.string().optional(),
   name: e.string(),
   identifier: e.string(),
-  scopes: e.array(rt).optional(),
+  scopes: e.array(ro).optional(),
   signing_alg: e.string().optional(),
   signing_secret: e.string().optional(),
   token_lifetime: e.number().default(86400),
@@ -2160,30 +2171,30 @@ const et = e.object({
   skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
   allow_offline_access: e.boolean().optional(),
   verificationKey: e.string().optional(),
-  options: lt.optional(),
+  options: lo.optional(),
   is_system: e.boolean().optional(),
   metadata: e.record(e.any()).optional()
-}), pt = e.object({
-  ...ct.shape,
+}), po = e.object({
+  ...co.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Sn = e.array(pt), _t = e.object({
+}), yn = e.array(po), _o = e.object({
   role_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string()
-}), dt = e.object({
-  ..._t.shape,
+}), go = e.object({
+  ..._o.shape,
   created_at: e.string()
-}), An = e.array(dt), gt = e.object({
+}), In = e.array(go), uo = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string(),
   organization_id: e.string().optional()
-}), ut = e.object({
-  ...gt.shape,
+}), mo = e.object({
+  ...uo.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), yn = e.array(ut), mt = e.object({
+}), Cn = e.array(mo), ho = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   resource_server_name: e.string(),
@@ -2191,17 +2202,17 @@ const et = e.object({
   description: e.string().nullable().optional(),
   created_at: e.string().optional(),
   organization_id: e.string().optional()
-}), In = e.array(
-  mt
-), ht = e.object({
+}), Tn = e.array(
+  ho
+), bo = e.object({
   user_id: e.string(),
   role_id: e.string(),
   organization_id: e.string().optional()
-}), bt = e.object({
-  ...ht.shape,
+}), fo = e.object({
+  ...bo.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), Cn = e.array(bt), ft = e.object({
+}), On = e.array(fo), Eo = e.object({
   id: e.string().optional().openapi({
     description: "The unique identifier of the role. If not provided, one will be generated."
   }),
@@ -2215,13 +2226,13 @@ const et = e.object({
   metadata: e.record(e.any()).optional().openapi({
     description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios."
   })
-}), Et = ft.extend({
+}), So = Eo.extend({
   id: e.string().openapi({
     description: "The unique identifier of the role"
   }),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Tn = e.array(Et), St = e.object({
+}), Nn = e.array(So), Ao = e.object({
   logo_url: e.string().optional().openapi({
     description: "URL of the organization's logo"
   }),
@@ -2233,7 +2244,7 @@ const et = e.object({
       description: "Page background color in hex format (e.g., #FFFFFF)"
     })
   }).optional()
-}).optional(), At = e.object({
+}).optional(), yo = e.object({
   connection_id: e.string().openapi({
     description: "ID of the connection"
   }),
@@ -2246,7 +2257,7 @@ const et = e.object({
   is_signup_enabled: e.boolean().default(!0).openapi({
     description: "Whether signup is enabled for this connection"
   })
-}), yt = e.object({
+}), Io = e.object({
   client_credentials: e.object({
     enforce: e.boolean().default(!1).openapi({
       description: "Whether to enforce token quota limits"
@@ -2258,7 +2269,7 @@ const et = e.object({
       description: "Maximum tokens per hour (0 = unlimited)"
     })
   }).optional()
-}).optional(), It = e.object({
+}).optional(), Co = e.object({
   id: e.string().optional(),
   name: e.string().min(1).regex(/^[a-z0-9_-]+$/, {
     message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores"
@@ -2268,34 +2279,34 @@ const et = e.object({
   display_name: e.string().optional().openapi({
     description: "The display name of the organization"
   }),
-  branding: St,
+  branding: Ao,
   metadata: e.record(e.any()).default({}).optional().openapi({
     description: "Custom metadata for the organization"
   }),
-  enabled_connections: e.array(At).default([]).optional().openapi({
+  enabled_connections: e.array(yo).default([]).optional().openapi({
     description: "List of enabled connections for the organization"
   }),
-  token_quota: yt
-}), On = e.object({
-  ...It.shape,
+  token_quota: Io
+}), wn = e.object({
+  ...Co.shape,
   ...s.shape,
   id: e.string(),
   // Override name to be lenient when reading from database (to support existing uppercase names)
   name: e.string().min(1).openapi({
     description: "The name of the organization"
   })
-}), Ct = e.object({
+}), To = e.object({
   user_id: e.string().openapi({
     description: "ID of the user"
   }),
   organization_id: e.string().openapi({
     description: "ID of the organization"
   })
-}), Nn = e.object({
-  ...Ct.shape,
+}), jn = e.object({
+  ...To.shape,
   ...s.shape,
   id: e.string()
-}), wn = e.object({
+}), Rn = e.object({
   // Session settings
   idle_session_lifetime: e.number().default(72),
   session_lifetime: e.number().default(168),
@@ -2395,7 +2406,7 @@ const et = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), jn = e.object({
+}), Dn = e.object({
   date: e.string().openapi({
     description: "Date these events occurred in ISO 8601 format",
     example: "2025-12-19"
@@ -2420,10 +2431,10 @@ const et = e.object({
     description: "Approximate date and time the first event occurred in ISO 8601 format",
     example: "2025-12-19T00:00:00.000Z"
   })
-}), Rn = e.number().openapi({
+}), Ln = e.number().openapi({
   description: "Number of active users in the last 30 days",
   example: 1234
-}), Tt = e.enum([
+}), Oo = e.enum([
   "login",
   "login-id",
   "login-password",
@@ -2452,17 +2463,17 @@ const et = e.object({
   "custom-form",
   "login-passwordless",
   "mfa-login-options"
-]), Ot = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+]), No = e.record(e.string(), e.record(e.string(), e.string())).openapi({
   type: "object",
   additionalProperties: {
     type: "object",
     additionalProperties: { type: "string" }
   }
-}), Dn = e.object({
-  prompt: Tt,
+}), vn = e.object({
+  prompt: Oo,
   language: e.string(),
-  custom_text: Ot
-}), Ln = {
+  custom_text: No
+}), kn = {
   EMAIL: "email",
   SMS: "sms",
   USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2477,11 +2488,11 @@ const et = e.object({
   SAMLP: "samlp",
   WAAD: "waad",
   ADFS: "adfs"
-}, vn = {
+}, Un = {
   DATABASE: "database",
   SOCIAL: "social",
   PASSWORDLESS: "passwordless"
-}, Nt = e.enum([
+}, wo = e.enum([
   "phone",
   "totp",
   "email",
@@ -2489,9 +2500,9 @@ const et = e.object({
   "webauthn-roaming",
   "webauthn-platform",
   "passkey"
-]), G = e.object({
+]), B = e.object({
   user_id: e.string(),
-  type: Nt,
+  type: wo,
   // Phone-specific
   phone_number: e.string().optional(),
   // TOTP-specific
@@ -2506,43 +2517,43 @@ const et = e.object({
   // Common
   confirmed: e.boolean().default(!1)
 });
-function B(o, t) {
-  o.type === "phone" && !o.phone_number && t.addIssue({
+function W(t, o) {
+  t.type === "phone" && !t.phone_number && o.addIssue({
     code: e.ZodIssueCode.custom,
     message: "phone_number is required when type is 'phone'",
     path: ["phone_number"]
-  }), o.type === "totp" && !o.totp_secret && t.addIssue({
+  }), t.type === "totp" && !t.totp_secret && o.addIssue({
     code: e.ZodIssueCode.custom,
     message: "totp_secret is required when type is 'totp'",
     path: ["totp_secret"]
-  }), ["webauthn-roaming", "webauthn-platform", "passkey"].includes(o.type) && (o.credential_id || t.addIssue({
+  }), ["webauthn-roaming", "webauthn-platform", "passkey"].includes(t.type) && (t.credential_id || o.addIssue({
     code: e.ZodIssueCode.custom,
-    message: `credential_id is required when type is '${o.type}'`,
+    message: `credential_id is required when type is '${t.type}'`,
     path: ["credential_id"]
-  }), o.public_key || t.addIssue({
+  }), t.public_key || o.addIssue({
     code: e.ZodIssueCode.custom,
-    message: `public_key is required when type is '${o.type}'`,
+    message: `public_key is required when type is '${t.type}'`,
     path: ["public_key"]
   }));
 }
-const kn = G.superRefine(B), Un = e.object({
-  ...G.shape,
+const Fn = B.superRefine(W), xn = e.object({
+  ...B.shape,
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
-}).superRefine(B);
-function Fn(o) {
-  const [t, i] = o.split("|");
-  if (!t || !i)
-    throw new Error(`Invalid user_id: ${o}`);
-  return { connection: t, id: i };
+}).superRefine(W);
+function Pn(t) {
+  const [o, i] = t.split("|");
+  if (!o || !i)
+    throw new Error(`Invalid user_id: ${t}`);
+  return { connection: o, id: i };
 }
-function xn(o) {
+function Mn(t) {
   const {
-    primary: t,
+    primary: o,
     secondaries: i,
     syncMethods: O = ["create", "rawCreate", "update", "remove", "delete", "set"]
-  } = o, E = {
+  } = t, E = {
     get(p, a) {
       if (typeof a == "symbol")
         return p[a];
@@ -2576,212 +2587,214 @@ function xn(o) {
       } : _.bind(p);
     }
   };
-  return new Proxy(t, E);
+  return new Proxy(o, E);
 }
-function Pn(o) {
-  return o;
+function Hn(t) {
+  return t;
 }
-function Mn(o) {
+function Gn(t) {
   var E, p, a, _, d, S, g, r, h, A, b, y;
-  const t = o == null ? void 0 : o.options;
-  if (!t)
+  const o = t == null ? void 0 : t.options;
+  if (!o)
     return {
       usernameIdentifierActive: !1,
       emailIdentifierActive: !0,
       usernameMinLength: 1,
       usernameMaxLength: 15
     };
-  const i = t.attributes;
+  const i = o.attributes;
   if (i) {
-    const W = ((p = (E = i.username) == null ? void 0 : E.identifier) == null ? void 0 : p.active) === !0, K = ((_ = (a = i.email) == null ? void 0 : a.identifier) == null ? void 0 : _.active) !== !1, z = ((S = (d = i.username) == null ? void 0 : d.validation) == null ? void 0 : S.min_length) ?? 1, q = ((r = (g = i.username) == null ? void 0 : g.validation) == null ? void 0 : r.max_length) ?? 15;
+    const K = ((p = (E = i.username) == null ? void 0 : E.identifier) == null ? void 0 : p.active) === !0, z = ((_ = (a = i.email) == null ? void 0 : a.identifier) == null ? void 0 : _.active) !== !1, q = ((S = (d = i.username) == null ? void 0 : d.validation) == null ? void 0 : S.min_length) ?? 1, X = ((r = (g = i.username) == null ? void 0 : g.validation) == null ? void 0 : r.max_length) ?? 15;
     return {
-      usernameIdentifierActive: W,
-      emailIdentifierActive: K,
-      usernameMinLength: z,
-      usernameMaxLength: q
+      usernameIdentifierActive: K,
+      emailIdentifierActive: z,
+      usernameMinLength: q,
+      usernameMaxLength: X
     };
   }
   return {
-    usernameIdentifierActive: t.requires_username === !0,
+    usernameIdentifierActive: o.requires_username === !0,
     emailIdentifierActive: !0,
-    usernameMinLength: ((A = (h = t.validation) == null ? void 0 : h.username) == null ? void 0 : A.min) ?? 1,
-    usernameMaxLength: ((y = (b = t.validation) == null ? void 0 : b.username) == null ? void 0 : y.max) ?? 15
+    usernameMinLength: ((A = (h = o.validation) == null ? void 0 : h.username) == null ? void 0 : A.min) ?? 1,
+    usernameMaxLength: ((y = (b = o.validation) == null ? void 0 : b.username) == null ? void 0 : y.max) ?? 15
   };
 }
 export {
-  Lt as Auth0ActionEnum,
-  Xo as Auth0Client,
-  D as AuthorizationResponseMode,
-  R as AuthorizationResponseType,
-  L as CodeChallengeMethod,
-  j as ComponentCategory,
-  w as ComponentType,
-  vt as EmailActionEnum,
-  qt as FORM_FIELD_TYPES,
-  Dt as FlowActionTypeEnum,
-  Jo as GrantType,
-  Vo as LocationInfo,
-  zo as LogTypes,
-  M as LoginSessionState,
+  ko as Auth0ActionEnum,
+  Xt as Auth0Client,
+  L as AuthorizationResponseMode,
+  D as AuthorizationResponseType,
+  v as CodeChallengeMethod,
+  R as ComponentCategory,
+  j as ComponentType,
+  Uo as EmailActionEnum,
+  Vo as FORM_FIELD_TYPES,
+  vo as FlowActionTypeEnum,
+  Jt as GrantType,
+  Vt as LocationInfo,
+  zt as LogTypes,
+  H as LoginSessionState,
   we as NodeType,
   le as RedirectTargetEnum,
-  Ln as Strategy,
-  vn as StrategyType,
-  V as actionDependencySchema,
-  Q as actionInsertSchema,
+  kn as Strategy,
+  Un as StrategyType,
+  Y as actionDependencySchema,
+  N as actionInsertSchema,
   De as actionNodeSchema,
-  jt as actionSchema,
-  Y as actionSecretSchema,
-  X as actionTriggerSchema,
-  Rn as activeUsersResponseSchema,
+  Do as actionSchema,
+  Q as actionSecretSchema,
+  V as actionTriggerSchema,
+  Ro as actionUpdateSchema,
+  Ln as activeUsersResponseSchema,
   $ as actorSchema,
   ue as addressSchema,
   Z as auditCategorySchema,
   ie as auditEventInsertSchema,
-  Rt as auditEventSchema,
+  Lo as auditEventSchema,
   ne as auth0ClientSchema,
-  Gt as auth0FlowInsertSchema,
+  Wo as auth0FlowInsertSchema,
   Fe as auth0FlowSchema,
-  Ut as auth0QuerySchema,
+  xo as auth0QuerySchema,
   se as auth0UpdateUserActionSchema,
-  xt as auth0UserResponseSchema,
+  Mo as auth0UserResponseSchema,
   xe as authParamsSchema,
-  kn as authenticationMethodInsertSchema,
-  Un as authenticationMethodSchema,
-  Nt as authenticationMethodTypeSchema,
-  N as baseUserSchema,
-  So as blockComponentSchema,
-  et as bordersSchema,
-  Bt as brandingSchema,
+  Fn as authenticationMethodInsertSchema,
+  xn as authenticationMethodSchema,
+  wo as authenticationMethodTypeSchema,
+  w as baseUserSchema,
+  Et as blockComponentSchema,
+  eo as bordersSchema,
+  Ko as brandingSchema,
   Ie as buttonComponentSchema,
   Se as clientGrantInsertSchema,
-  Ht as clientGrantListSchema,
+  Bo as clientGrantListSchema,
   Ae as clientGrantSchema,
   Ee as clientInsertSchema,
-  Mt as clientSchema,
+  Go as clientSchema,
   Me as codeInsertSchema,
-  Wt as codeSchema,
+  zo as codeSchema,
   Pe as codeTypeSchema,
-  ot as colorsSchema,
-  wo as componentMessageSchema,
+  to as colorsSchema,
+  Nt as componentMessageSchema,
   Ne as componentSchema,
   Ge as connectionInsertSchema,
   He as connectionOptionsSchema,
-  Kt as connectionSchema,
+  qo as connectionSchema,
   m as coordinatesSchema,
-  xn as createPassthroughAdapter,
-  Pn as createWriteOnlyAdapter,
+  Mn as createPassthroughAdapter,
+  Hn as createWriteOnlyAdapter,
   Be as customDomainInsertSchema,
   Ke as customDomainSchema,
-  zt as customDomainWithTenantIdSchema,
-  Dn as customTextEntrySchema,
-  Ot as customTextSchema,
-  jn as dailyStatsSchema,
-  hn as emailProviderSchema,
+  Xo as customDomainWithTenantIdSchema,
+  vn as customTextEntrySchema,
+  No as customTextSchema,
+  Dn as dailyStatsSchema,
+  fn as emailProviderSchema,
   ae as emailVerificationRulesSchema,
   re as emailVerifyActionSchema,
   Ue as endingSchema,
-  yo as fieldComponentSchema,
+  At as fieldComponentSchema,
   pe as flowActionStepSchema,
   _e as flowInsertSchema,
-  kt as flowSchema,
+  Fo as flowSchema,
   Te as flowsFieldComponentSchema,
   Re as flowsFlowNodeSchema,
   je as flowsStepNodeSchema,
   u as fontDetailsSchema,
-  tt as fontsSchema,
-  Xt as formControlSchema,
-  No as formInsertSchema,
-  v as formNodeComponentDefinition,
-  Oo as formNodeSchema,
-  Vt as formSchema,
+  oo as fontsSchema,
+  Yo as formControlSchema,
+  Ot as formInsertSchema,
+  k as formNodeComponentDefinition,
+  Tt as formNodeSchema,
+  Qo as formSchema,
   Oe as genericComponentSchema,
   Le as genericNodeSchema,
-  Mn as getConnectionIdentifierConfig,
-  Po as hookCodeInsertSchema,
-  tn as hookCodeSchema,
-  en as hookInsertSchema,
-  on as hookSchema,
-  P as hookTemplateId,
-  Jt as hookTemplates,
+  Gn as getConnectionIdentifierConfig,
+  xt as hookCodeInsertSchema,
+  an as hookCodeSchema,
+  on as hookInsertSchema,
+  nn as hookSchema,
+  M as hookTemplateId,
+  tn as hookTemplates,
   ge as identitySchema,
-  Go as inviteInsertSchema,
-  nn as inviteSchema,
-  Ho as inviteeSchema,
-  Mo as inviterSchema,
-  Qt as isBlockComponent,
-  $t as isFieldComponent,
-  Zt as isWidgetComponent,
-  an as jwksKeySchema,
-  Bo as jwksSchema,
+  Ht as inviteInsertSchema,
+  sn as inviteSchema,
+  Mt as inviteeSchema,
+  Pt as inviterSchema,
+  $o as isBlockComponent,
+  en as isFieldComponent,
+  Jo as isWidgetComponent,
+  rn as jwksKeySchema,
+  Gt as jwksSchema,
   Ce as legalComponentSchema,
-  te as locationInfoSchema,
-  Yo as logInsertSchema,
-  ln as logSchema,
-  Ko as loginSessionInsertSchema,
-  rn as loginSessionSchema,
-  Wo as loginSessionStateSchema,
+  oe as locationInfoSchema,
+  Yt as logInsertSchema,
+  pn as logSchema,
+  Wt as loginSessionAuthStrategySchema,
+  Kt as loginSessionInsertSchema,
+  cn as loginSessionSchema,
+  Bt as loginSessionStateSchema,
   ve as nodeSchema,
-  sn as openIDConfigurationSchema,
-  St as organizationBrandingSchema,
-  At as organizationEnabledConnectionSchema,
-  It as organizationInsertSchema,
-  On as organizationSchema,
-  yt as organizationTokenQuotaSchema,
-  nt as pageBackgroundSchema,
-  Fn as parseUserId,
-  Qo as passwordInsertSchema,
-  cn as passwordSchema,
+  ln as openIDConfigurationSchema,
+  Ao as organizationBrandingSchema,
+  yo as organizationEnabledConnectionSchema,
+  Co as organizationInsertSchema,
+  wn as organizationSchema,
+  Io as organizationTokenQuotaSchema,
+  no as pageBackgroundSchema,
+  Pn as parseUserId,
+  Qt as passwordInsertSchema,
+  _n as passwordSchema,
   de as profileDataSchema,
-  Tt as promptScreenSchema,
-  mn as promptSettingSchema,
+  Oo as promptScreenSchema,
+  bn as promptSettingSchema,
   ce as redirectActionSchema,
-  st as refreshTokenInsertSchema,
-  bn as refreshTokenSchema,
+  so as refreshTokenInsertSchema,
+  En as refreshTokenSchema,
   ee as requestContextSchema,
-  ct as resourceServerInsertSchema,
-  Sn as resourceServerListSchema,
-  lt as resourceServerOptionsSchema,
-  pt as resourceServerSchema,
-  rt as resourceServerScopeSchema,
-  oe as responseContextSchema,
+  co as resourceServerInsertSchema,
+  yn as resourceServerListSchema,
+  lo as resourceServerOptionsSchema,
+  po as resourceServerSchema,
+  ro as resourceServerScopeSchema,
+  te as responseContextSchema,
   ye as richTextComponentSchema,
-  ft as roleInsertSchema,
-  Tn as roleListSchema,
-  _t as rolePermissionInsertSchema,
-  An as rolePermissionListSchema,
-  dt as rolePermissionSchema,
-  Et as roleSchema,
-  jo as screenLinkSchema,
-  Zo as sessionInsertSchema,
-  pn as sessionSchema,
-  _n as signingKeySchema,
-  En as smsProviderSchema,
-  fn as smsSendParamsSchema,
+  Eo as roleInsertSchema,
+  Nn as roleListSchema,
+  _o as rolePermissionInsertSchema,
+  In as rolePermissionListSchema,
+  go as rolePermissionSchema,
+  So as roleSchema,
+  wt as screenLinkSchema,
+  Zt as sessionInsertSchema,
+  dn as sessionSchema,
+  gn as signingKeySchema,
+  An as smsProviderSchema,
+  Sn as smsSendParamsSchema,
   ke as startSchema,
   J as targetSchema,
-  $o as tenantInsertSchema,
-  dn as tenantSchema,
-  wn as tenantSettingsSchema,
-  at as themeInsertSchema,
-  un as themeSchema,
-  gn as tokenResponseSchema,
-  Ft as totalsSchema,
-  Yt as uiScreenSchema,
+  $t as tenantInsertSchema,
+  un as tenantSchema,
+  Rn as tenantSettingsSchema,
+  ao as themeInsertSchema,
+  hn as themeSchema,
+  mn as tokenResponseSchema,
+  Po as totalsSchema,
+  Zo as uiScreenSchema,
   me as userInsertSchema,
-  Ct as userOrganizationInsertSchema,
-  Nn as userOrganizationSchema,
-  gt as userPermissionInsertSchema,
-  yn as userPermissionListSchema,
-  ut as userPermissionSchema,
-  In as userPermissionWithDetailsListSchema,
-  mt as userPermissionWithDetailsSchema,
-  Pt as userResponseSchema,
-  ht as userRoleInsertSchema,
-  Cn as userRoleListSchema,
-  bt as userRoleSchema,
+  To as userOrganizationInsertSchema,
+  jn as userOrganizationSchema,
+  uo as userPermissionInsertSchema,
+  Cn as userPermissionListSchema,
+  mo as userPermissionSchema,
+  Tn as userPermissionWithDetailsListSchema,
+  ho as userPermissionWithDetailsSchema,
+  Ho as userResponseSchema,
+  bo as userRoleInsertSchema,
+  On as userRoleListSchema,
+  fo as userRoleSchema,
   he as userSchema,
   We as verificationMethodsSchema,
-  Ao as widgetComponentSchema,
-  it as widgetSchema
+  St as widgetComponentSchema,
+  io as widgetSchema
 };