@authhero/adapter-interfaces 1.4.1 → 1.6.0

package/dist/adapter-interfaces.mjs

@@ -18,10 +18,10 @@ const s = e.object({
   runtime: e.string().max(50).optional(),
   dependencies: e.array(Y).optional(),
   secrets: e.array(Q).optional()
-}), jo = N.partial().extend({
+}), Ro = N.partial().extend({
   status: e.enum(["draft", "built"]).optional(),
   deployed_at: e.string().optional()
-}), Ro = N.extend({
+}), Do = N.extend({
   id: e.string(),
   tenant_id: e.string(),
   status: e.enum(["draft", "built"]).default("built"),
@@ -93,15 +93,15 @@ const s = e.object({
   hostname: e.string(),
   is_mobile: e.boolean().optional(),
   timestamp: e.string()
-}), Do = ie.extend({
+}), Lo = ie.extend({
   id: e.string()
-}), Lo = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), vo = e.enum([
+}), vo = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), ko = e.enum([
   "CREATE_USER",
   "GET_USER",
   "UPDATE_USER",
   "SEND_REQUEST",
   "SEND_EMAIL"
-]), ko = e.enum(["VERIFY_EMAIL"]), ae = e.object({
+]), Uo = e.enum(["VERIFY_EMAIL"]), ae = e.object({
   require_mx_record: e.boolean().optional(),
   block_aliases: e.boolean().optional(),
   block_free_emails: e.boolean().optional(),
@@ -158,13 +158,13 @@ const s = e.object({
   actions: e.array(pe).optional().default([]).openapi({
     description: "The list of actions to execute in sequence"
   })
-}), Uo = _e.extend({
+}), Fo = _e.extend({
   ...s.shape,
   id: e.string().openapi({
     description: "Unique identifier for the flow",
     example: "af_12tMpdJ3iek7svMyZkSh5M"
   })
-}), Fo = e.object({
+}), xo = e.object({
   page: e.string().min(0).optional().default("0").transform((t) => parseInt(t, 10)).openapi({
     description: "The page number where 0 is the first page"
   }),
@@ -180,7 +180,7 @@ const s = e.object({
   q: e.string().optional().openapi({
     description: "A lucene query string used to filter the results"
   })
-}), xo = e.object({
+}), Po = e.object({
   start: e.number(),
   limit: e.number(),
   length: e.number(),
@@ -286,9 +286,9 @@ const s = e.object({
   email: e.string().optional(),
   login_count: e.number().default(0),
   identities: e.array(ge).optional()
-}), Po = he.omit({
+}), Mo = he.omit({
   registration_completed_at: !0
-}), Mo = w.extend({
+}), Ho = w.extend({
   login_count: e.number(),
   multifactor: e.array(e.string()).optional(),
   last_ip: e.string().optional(),
@@ -474,7 +474,7 @@ const Ee = e.object({
     description: "Specifies how long, in seconds, a Pushed Authorization Request URI remains valid"
   }),
   token_quota: e.record(e.any()).default({}).optional()
-}), Ho = e.object({
+}), Go = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   ...Ee.shape
@@ -510,7 +510,7 @@ const Ee = e.object({
   ...Se.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Go = e.array(Ae), m = e.object({
+}), Bo = e.array(Ae), m = e.object({
   x: e.number(),
   y: e.number()
 });
@@ -708,7 +708,7 @@ const je = e.object({
     sdkSrc: e.string().optional(),
     sdk_src: e.string().optional()
   }).passthrough()
-}).passthrough(), Bo = Fe.omit({
+}).passthrough(), Wo = Fe.omit({
   id: !0,
   created_at: !0,
   updated_at: !0
@@ -738,7 +738,7 @@ const xe = e.object({
   acr_values: e.string().optional(),
   // The following fields are not available in Auth0
   vendor_id: e.string().optional()
-}), Wo = e.object({
+}), Ko = e.object({
   colors: e.object({
     primary: e.string(),
     page_background: e.object({
@@ -797,7 +797,7 @@ const xe = e.object({
   expires_at: e.string(),
   used_at: e.string().optional(),
   user_id: e.string().optional()
-}), Ko = e.object({
+}), zo = e.object({
   ...Me.shape,
   created_at: e.string()
 }), He = e.object({
@@ -925,7 +925,7 @@ const xe = e.object({
   show_as_button: e.boolean().optional(),
   metadata: e.record(e.any()).optional(),
   is_system: e.boolean().optional()
-}), zo = e.object({
+}), qo = e.object({
   id: e.string(),
   created_at: e.string().transform((t) => t === null ? "" : t),
   updated_at: e.string().transform((t) => t === null ? "" : t)
@@ -964,7 +964,7 @@ const xe = e.object({
     methods: e.array(We)
   }).optional(),
   tls_policy: e.string().optional()
-}), qo = Ke.extend({
+}), Xo = Ke.extend({
   tenant_id: e.string()
 }), C = e.object({
   id: e.string(),
@@ -1233,7 +1233,7 @@ const xe = e.object({
   Et,
   St,
   At
-]), Xo = /* @__PURE__ */ new Set([
+]), Vo = /* @__PURE__ */ new Set([
   "BOOLEAN",
   "CARDS",
   "CHOICE",
@@ -1247,7 +1247,7 @@ const xe = e.object({
   "TEL",
   "TEXT",
   "URL"
-]), Vo = e.object({
+]), Yo = e.object({
   id: e.string(),
   type: e.literal("submit"),
   label: e.string(),
@@ -1332,7 +1332,7 @@ const xe = e.object({
   }).optional()
 }).openapi({
   description: "Schema for flow-based forms (matches Auth0 Forms structure)"
-}), Yo = e.object({
+}), Qo = e.object({
   ...s.shape,
   ...Ot.shape,
   id: e.string()
@@ -1345,7 +1345,7 @@ const xe = e.object({
   text: e.string(),
   href: e.string(),
   linkText: e.string().optional()
-}), Qo = e.object({
+}), Zo = e.object({
   /** Screen identifier for CSS targeting (e.g., 'identifier', 'enter-password', 'signup') */
   name: e.string().optional(),
   action: e.string(),
@@ -1358,13 +1358,13 @@ const xe = e.object({
   /** Footer HTML content displayed at the very bottom of the widget (e.g., terms and conditions) */
   footer: e.string().optional()
 });
-function Zo(t) {
+function $o(t) {
   return t.category === "BLOCK";
 }
-function $o(t) {
+function Jo(t) {
   return t.category === "WIDGET";
 }
-function Jo(t) {
+function en(t) {
   return t.category === "FIELD";
 }
 const U = e.enum([
@@ -1393,7 +1393,7 @@ const U = e.enum([
 ]), M = e.enum([
   "ensure-username",
   "set-preferred-username"
-]), en = {
+]), tn = {
   "ensure-username": {
     name: "Ensure Username",
     description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1425,7 +1425,7 @@ const U = e.enum([
   ...c,
   trigger_id: P,
   code_id: e.string()
-}), tn = e.union([
+}), on = e.union([
   jt,
   Rt,
   Dt,
@@ -1454,7 +1454,7 @@ const U = e.enum([
   ...s.shape,
   hook_id: e.string(),
   code_id: e.string()
-}), on = e.union([
+}), nn = e.union([
   vt,
   kt,
   Ut,
@@ -1462,7 +1462,7 @@ const U = e.enum([
 ]), xt = e.object({
   code: e.string().max(1e5),
   secrets: e.record(e.string()).optional()
-}), nn = xt.extend({
+}), an = xt.extend({
   id: e.string(),
   tenant_id: e.string(),
   ...s.shape
@@ -1482,7 +1482,7 @@ const U = e.enum([
   ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
   roles: e.array(e.string()).default([]).optional(),
   send_invitation_email: e.boolean().default(!0).optional()
-}), an = e.object({
+}), sn = e.object({
   id: e.string(),
   organization_id: e.string().max(50),
   created_at: e.string().datetime(),
@@ -1507,9 +1507,9 @@ const U = e.enum([
   x5t: e.string().optional(),
   x5c: e.array(e.string()).optional(),
   use: e.enum(["sig", "enc"]).optional()
-}), sn = e.object({
-  keys: e.array(Gt)
 }), rn = e.object({
+  keys: e.array(Gt)
+}), ln = e.object({
   issuer: e.string(),
   authorization_endpoint: e.string(),
   token_endpoint: e.string(),
@@ -1533,6 +1533,9 @@ const U = e.enum([
 });
 var H = /* @__PURE__ */ ((t) => (t.PENDING = "pending", t.AUTHENTICATED = "authenticated", t.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", t.AWAITING_MFA = "awaiting_mfa", t.AWAITING_HOOK = "awaiting_hook", t.AWAITING_CONTINUATION = "awaiting_continuation", t.COMPLETED = "completed", t.FAILED = "failed", t.EXPIRED = "expired", t))(H || {});
 const Bt = e.nativeEnum(H), Wt = e.object({
+  strategy: e.string(),
+  strategy_type: e.string()
+}), Kt = e.object({
   csrf_token: e.string(),
   auth0Client: e.string().optional(),
   authParams: xe,
@@ -1551,18 +1554,21 @@ const Bt = e.nativeEnum(H), Wt = e.object({
   failure_reason: e.string().optional(),
   user_id: e.string().optional(),
   // Set once user is authenticated
-  auth_connection: e.string().optional()
+  auth_connection: e.string().optional(),
   // The connection used to authenticate (may differ from primary user's connection)
+  auth_strategy: Wt.optional(),
+  authenticated_at: e.string().optional()
+  // ISO timestamp persisted for audit/metadata; not used to reject resumed sessions
 }).openapi({
   description: "This represents a login sesion"
-}), ln = e.object({
-  ...Wt.shape,
+}), cn = e.object({
+  ...Kt.shape,
   id: e.string().openapi({
     description: "This is is used as the state in the universal login"
   }),
   created_at: e.string(),
   updated_at: e.string()
-}), Kt = {
+}), zt = {
   // Network & System
   ACLS_SUMMARY: "acls_summary",
   ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
@@ -1734,24 +1740,24 @@ const Bt = e.nativeEnum(H), Wt = e.object({
   WARNING_DURING_LOGIN: "w",
   WARNING_SENDING_NOTIFICATION: "wn",
   WARNING_USER_MANAGEMENT: "wum"
-}, zt = e.string().refine(
-  (t) => Object.values(Kt).includes(t),
+}, qt = e.string().refine(
+  (t) => Object.values(zt).includes(t),
   { message: "Invalid log type" }
-), qt = e.object({
+), Xt = e.object({
   name: e.string(),
   version: e.string(),
   env: e.object({
     node: e.string().optional()
   }).optional()
-}), Xt = e.object({
+}), Vt = e.object({
   country_code: e.string().length(2),
   city_name: e.string(),
   latitude: e.string(),
   longitude: e.string(),
   time_zone: e.string(),
   continent_code: e.string()
-}), Vt = e.object({
-  type: zt,
+}), Yt = e.object({
+  type: qt,
   date: e.string(),
   description: e.string().optional(),
   ip: e.string().optional(),
@@ -1770,19 +1776,19 @@ const Bt = e.nativeEnum(H), Wt = e.object({
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
   hostname: e.string().optional(),
-  auth0_client: qt.optional(),
+  auth0_client: Xt.optional(),
   log_id: e.string().optional(),
-  location_info: Xt.optional()
-}), cn = e.object({
-  ...Vt.shape,
+  location_info: Vt.optional()
+}), pn = e.object({
+  ...Yt.shape,
   log_id: e.string()
-}), Yt = e.object({
+}), Qt = e.object({
   id: e.string().optional(),
   user_id: e.string(),
   password: e.string(),
   algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
   is_current: e.boolean().default(!0)
-}), pn = Yt.extend({
+}), _n = Qt.extend({
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
@@ -1793,7 +1799,7 @@ const Bt = e.nativeEnum(H), Wt = e.object({
   last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
   last_ip: e.string().describe("Last IP address from which this user logged in"),
   last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), Qt = e.object({
+}), Zt = e.object({
   id: e.string(),
   revoked_at: e.string().optional(),
   used_at: e.string().optional(),
@@ -1805,13 +1811,13 @@ const Bt = e.nativeEnum(H), Wt = e.object({
     "Metadata related to the device used in the session"
   ),
   clients: e.array(e.string()).describe("List of client details for the session")
-}), _n = e.object({
+}), dn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   authenticated_at: e.string(),
   last_interaction_at: e.string(),
-  ...Qt.shape
-}), dn = e.object({
+  ...Zt.shape
+}), gn = e.object({
   kid: e.string().openapi({ description: "The key id of the signing key" }),
   cert: e.string().openapi({ description: "The public certificate of the signing key" }),
   fingerprint: e.string().openapi({ description: "The cert fingerprint" }),
@@ -1836,7 +1842,7 @@ const Bt = e.nativeEnum(H), Wt = e.object({
   type: e.enum(["jwt_signing", "saml_encryption"]).openapi({
     description: "The type of the signing key"
   })
-}), Zt = e.object({
+}), $t = e.object({
   id: e.string().optional(),
   // Basic settings
   audience: e.string(),
@@ -1991,14 +1997,14 @@ const Bt = e.nativeEnum(H), Wt = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), gn = e.object({
+}), un = e.object({
   created_at: e.string().nullable().transform((t) => t ?? ""),
   updated_at: e.string().nullable().transform((t) => t ?? ""),
-  ...Zt.shape,
+  ...$t.shape,
   id: e.string()
 });
-var $t = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))($t || {});
-const un = e.object({
+var Jt = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(Jt || {});
+const mn = e.object({
   access_token: e.string(),
   id_token: e.string().optional(),
   scope: e.string().optional(),
@@ -2011,7 +2017,7 @@ e.object({
   code: e.string(),
   state: e.string().optional()
 });
-const Jt = e.object({
+const eo = e.object({
   button_border_radius: e.number(),
   button_border_weight: e.number(),
   buttons_style: e.enum(["pill", "rounded", "sharp"]),
@@ -2021,7 +2027,7 @@ const Jt = e.object({
   show_widget_shadow: e.boolean(),
   widget_border_weight: e.number(),
   widget_corner_radius: e.number()
-}), eo = e.object({
+}), to = e.object({
   base_focus_color: e.string(),
   base_hover_color: e.string(),
   body_text: e.string(),
@@ -2044,7 +2050,7 @@ const Jt = e.object({
 }), u = e.object({
   bold: e.boolean(),
   size: e.number()
-}), to = e.object({
+}), oo = e.object({
   body_text: u,
   buttons_text: u,
   font_url: e.string(),
@@ -2054,31 +2060,31 @@ const Jt = e.object({
   reference_text_size: e.number(),
   subtitle: u,
   title: u
-}), oo = e.object({
+}), no = e.object({
   background_color: e.string(),
   background_image_url: e.string(),
   page_layout: e.enum(["center", "left", "right"])
-}), no = e.object({
+}), io = e.object({
   header_text_alignment: e.enum(["center", "left", "right"]),
   logo_height: e.number(),
   logo_position: e.enum(["center", "left", "none", "right"]),
   logo_url: e.string(),
   social_buttons_layout: e.enum(["bottom", "top"])
-}), io = e.object({
-  borders: Jt,
-  colors: eo,
+}), ao = e.object({
+  borders: eo,
+  colors: to,
   displayName: e.string(),
-  fonts: to,
-  page_background: oo,
-  widget: no
-}), mn = io.extend({
+  fonts: oo,
+  page_background: no,
+  widget: io
+}), hn = ao.extend({
   themeId: e.string()
-}), hn = e.object({
+}), bn = e.object({
   universal_login_experience: e.enum(["new", "classic"]).default("new"),
   identifier_first: e.boolean().default(!0),
   password_first: e.boolean().default(!1),
   webauthn_platform_first_factor: e.boolean()
-}), bn = e.object({
+}), fn = e.object({
   name: e.string(),
   enabled: e.boolean().optional().default(!0),
   default_from_address: e.string().optional(),
@@ -2108,7 +2114,7 @@ const Jt = e.object({
     })
   ]),
   settings: e.object({}).optional()
-}), ao = e.object({
+}), so = e.object({
   // The actual refresh token value (primary key).
   id: e.string(),
   // Link to the login session
@@ -2129,21 +2135,23 @@ const Jt = e.object({
     })
   ),
   rotating: e.boolean()
-}), fn = e.object({
+}), En = e.object({
   // When the refresh token record was created.
   created_at: e.string(),
+  // When the token was explicitly revoked (null = still active).
+  revoked_at: e.string().optional(),
   // Spread in the rest of the refresh token properties.
-  ...ao.shape
-}), En = e.object({
+  ...so.shape
+}), Sn = e.object({
   to: e.string(),
   message: e.string()
-}), Sn = e.object({
+}), An = e.object({
   name: e.string(),
   options: e.object({})
-}), so = e.object({
+}), ro = e.object({
   value: e.string(),
   description: e.string().optional()
-}), ro = e.object({
+}), lo = e.object({
   token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
   enforce_policies: e.boolean().optional(),
   allow_skipping_userinfo: e.boolean().optional(),
@@ -2153,11 +2161,11 @@ const Jt = e.object({
   mtls: e.object({
     bound_access_tokens: e.boolean().optional()
   }).optional()
-}), lo = e.object({
+}), co = e.object({
   id: e.string().optional(),
   name: e.string(),
   identifier: e.string(),
-  scopes: e.array(so).optional(),
+  scopes: e.array(ro).optional(),
   signing_alg: e.string().optional(),
   signing_secret: e.string().optional(),
   token_lifetime: e.number().default(86400),
@@ -2165,30 +2173,30 @@ const Jt = e.object({
   skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
   allow_offline_access: e.boolean().optional(),
   verificationKey: e.string().optional(),
-  options: ro.optional(),
+  options: lo.optional(),
   is_system: e.boolean().optional(),
   metadata: e.record(e.any()).optional()
-}), co = e.object({
-  ...lo.shape,
+}), po = e.object({
+  ...co.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), An = e.array(co), po = e.object({
+}), yn = e.array(po), _o = e.object({
   role_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string()
-}), _o = e.object({
-  ...po.shape,
+}), go = e.object({
+  ..._o.shape,
   created_at: e.string()
-}), yn = e.array(_o), go = e.object({
+}), In = e.array(go), uo = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string(),
   organization_id: e.string().optional()
-}), uo = e.object({
-  ...go.shape,
+}), mo = e.object({
+  ...uo.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), In = e.array(uo), mo = e.object({
+}), Cn = e.array(mo), ho = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   resource_server_name: e.string(),
@@ -2196,17 +2204,17 @@ const Jt = e.object({
   description: e.string().nullable().optional(),
   created_at: e.string().optional(),
   organization_id: e.string().optional()
-}), Cn = e.array(
-  mo
-), ho = e.object({
+}), Tn = e.array(
+  ho
+), bo = e.object({
   user_id: e.string(),
   role_id: e.string(),
   organization_id: e.string().optional()
-}), bo = e.object({
-  ...ho.shape,
+}), fo = e.object({
+  ...bo.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), Tn = e.array(bo), fo = e.object({
+}), On = e.array(fo), Eo = e.object({
   id: e.string().optional().openapi({
     description: "The unique identifier of the role. If not provided, one will be generated."
   }),
@@ -2220,13 +2228,13 @@ const Jt = e.object({
   metadata: e.record(e.any()).optional().openapi({
     description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios."
   })
-}), Eo = fo.extend({
+}), So = Eo.extend({
   id: e.string().openapi({
     description: "The unique identifier of the role"
   }),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), On = e.array(Eo), So = e.object({
+}), Nn = e.array(So), Ao = e.object({
   logo_url: e.string().optional().openapi({
     description: "URL of the organization's logo"
   }),
@@ -2238,7 +2246,7 @@ const Jt = e.object({
       description: "Page background color in hex format (e.g., #FFFFFF)"
     })
   }).optional()
-}).optional(), Ao = e.object({
+}).optional(), yo = e.object({
   connection_id: e.string().openapi({
     description: "ID of the connection"
   }),
@@ -2251,7 +2259,7 @@ const Jt = e.object({
   is_signup_enabled: e.boolean().default(!0).openapi({
     description: "Whether signup is enabled for this connection"
   })
-}), yo = e.object({
+}), Io = e.object({
   client_credentials: e.object({
     enforce: e.boolean().default(!1).openapi({
       description: "Whether to enforce token quota limits"
@@ -2263,7 +2271,7 @@ const Jt = e.object({
       description: "Maximum tokens per hour (0 = unlimited)"
     })
   }).optional()
-}).optional(), Io = e.object({
+}).optional(), Co = e.object({
   id: e.string().optional(),
   name: e.string().min(1).regex(/^[a-z0-9_-]+$/, {
     message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores"
@@ -2273,34 +2281,34 @@ const Jt = e.object({
   display_name: e.string().optional().openapi({
     description: "The display name of the organization"
   }),
-  branding: So,
+  branding: Ao,
   metadata: e.record(e.any()).default({}).optional().openapi({
     description: "Custom metadata for the organization"
   }),
-  enabled_connections: e.array(Ao).default([]).optional().openapi({
+  enabled_connections: e.array(yo).default([]).optional().openapi({
     description: "List of enabled connections for the organization"
   }),
-  token_quota: yo
-}), Nn = e.object({
-  ...Io.shape,
+  token_quota: Io
+}), wn = e.object({
+  ...Co.shape,
   ...s.shape,
   id: e.string(),
   // Override name to be lenient when reading from database (to support existing uppercase names)
   name: e.string().min(1).openapi({
     description: "The name of the organization"
   })
-}), Co = e.object({
+}), To = e.object({
   user_id: e.string().openapi({
     description: "ID of the user"
   }),
   organization_id: e.string().openapi({
     description: "ID of the organization"
   })
-}), wn = e.object({
-  ...Co.shape,
+}), jn = e.object({
+  ...To.shape,
   ...s.shape,
   id: e.string()
-}), jn = e.object({
+}), Rn = e.object({
   // Session settings
   idle_session_lifetime: e.number().default(72),
   session_lifetime: e.number().default(168),
@@ -2400,7 +2408,7 @@ const Jt = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), Rn = e.object({
+}), Dn = e.object({
   date: e.string().openapi({
     description: "Date these events occurred in ISO 8601 format",
     example: "2025-12-19"
@@ -2425,10 +2433,10 @@ const Jt = e.object({
     description: "Approximate date and time the first event occurred in ISO 8601 format",
     example: "2025-12-19T00:00:00.000Z"
   })
-}), Dn = e.number().openapi({
+}), Ln = e.number().openapi({
   description: "Number of active users in the last 30 days",
   example: 1234
-}), To = e.enum([
+}), Oo = e.enum([
   "login",
   "login-id",
   "login-password",
@@ -2457,17 +2465,17 @@ const Jt = e.object({
   "custom-form",
   "login-passwordless",
   "mfa-login-options"
-]), Oo = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+]), No = e.record(e.string(), e.record(e.string(), e.string())).openapi({
   type: "object",
   additionalProperties: {
     type: "object",
     additionalProperties: { type: "string" }
   }
-}), Ln = e.object({
-  prompt: To,
+}), vn = e.object({
+  prompt: Oo,
   language: e.string(),
-  custom_text: Oo
-}), vn = {
+  custom_text: No
+}), kn = {
   EMAIL: "email",
   SMS: "sms",
   USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2482,11 +2490,11 @@ const Jt = e.object({
   SAMLP: "samlp",
   WAAD: "waad",
   ADFS: "adfs"
-}, kn = {
+}, Un = {
   DATABASE: "database",
   SOCIAL: "social",
   PASSWORDLESS: "passwordless"
-}, No = e.enum([
+}, wo = e.enum([
   "phone",
   "totp",
   "email",
@@ -2496,7 +2504,7 @@ const Jt = e.object({
   "passkey"
 ]), B = e.object({
   user_id: e.string(),
-  type: No,
+  type: wo,
   // Phone-specific
   phone_number: e.string().optional(),
   // TOTP-specific
@@ -2530,19 +2538,19 @@ function W(t, o) {
     path: ["public_key"]
   }));
 }
-const Un = B.superRefine(W), Fn = e.object({
+const Fn = B.superRefine(W), xn = e.object({
   ...B.shape,
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
 }).superRefine(W);
-function xn(t) {
+function Pn(t) {
   const [o, i] = t.split("|");
   if (!o || !i)
     throw new Error(`Invalid user_id: ${t}`);
   return { connection: o, id: i };
 }
-function Pn(t) {
+function Mn(t) {
   const {
     primary: o,
     secondaries: i,
@@ -2583,10 +2591,10 @@ function Pn(t) {
   };
   return new Proxy(o, E);
 }
-function Mn(t) {
+function Hn(t) {
   return t;
 }
-function Hn(t) {
+function Gn(t) {
   var E, p, a, _, d, S, g, r, h, A, b, y;
   const o = t == null ? void 0 : t.options;
   if (!o)
@@ -2614,180 +2622,181 @@ function Hn(t) {
   };
 }
 export {
-  vo as Auth0ActionEnum,
-  qt as Auth0Client,
+  ko as Auth0ActionEnum,
+  Xt as Auth0Client,
   L as AuthorizationResponseMode,
   D as AuthorizationResponseType,
   v as CodeChallengeMethod,
   R as ComponentCategory,
   j as ComponentType,
-  ko as EmailActionEnum,
-  Xo as FORM_FIELD_TYPES,
-  Lo as FlowActionTypeEnum,
-  $t as GrantType,
-  Xt as LocationInfo,
-  Kt as LogTypes,
+  Uo as EmailActionEnum,
+  Vo as FORM_FIELD_TYPES,
+  vo as FlowActionTypeEnum,
+  Jt as GrantType,
+  Vt as LocationInfo,
+  zt as LogTypes,
   H as LoginSessionState,
   we as NodeType,
   le as RedirectTargetEnum,
-  vn as Strategy,
-  kn as StrategyType,
+  kn as Strategy,
+  Un as StrategyType,
   Y as actionDependencySchema,
   N as actionInsertSchema,
   De as actionNodeSchema,
-  Ro as actionSchema,
+  Do as actionSchema,
   Q as actionSecretSchema,
   V as actionTriggerSchema,
-  jo as actionUpdateSchema,
-  Dn as activeUsersResponseSchema,
+  Ro as actionUpdateSchema,
+  Ln as activeUsersResponseSchema,
   $ as actorSchema,
   ue as addressSchema,
   Z as auditCategorySchema,
   ie as auditEventInsertSchema,
-  Do as auditEventSchema,
+  Lo as auditEventSchema,
   ne as auth0ClientSchema,
-  Bo as auth0FlowInsertSchema,
+  Wo as auth0FlowInsertSchema,
   Fe as auth0FlowSchema,
-  Fo as auth0QuerySchema,
+  xo as auth0QuerySchema,
   se as auth0UpdateUserActionSchema,
-  Po as auth0UserResponseSchema,
+  Mo as auth0UserResponseSchema,
   xe as authParamsSchema,
-  Un as authenticationMethodInsertSchema,
-  Fn as authenticationMethodSchema,
-  No as authenticationMethodTypeSchema,
+  Fn as authenticationMethodInsertSchema,
+  xn as authenticationMethodSchema,
+  wo as authenticationMethodTypeSchema,
   w as baseUserSchema,
   Et as blockComponentSchema,
-  Jt as bordersSchema,
-  Wo as brandingSchema,
+  eo as bordersSchema,
+  Ko as brandingSchema,
   Ie as buttonComponentSchema,
   Se as clientGrantInsertSchema,
-  Go as clientGrantListSchema,
+  Bo as clientGrantListSchema,
   Ae as clientGrantSchema,
   Ee as clientInsertSchema,
-  Ho as clientSchema,
+  Go as clientSchema,
   Me as codeInsertSchema,
-  Ko as codeSchema,
+  zo as codeSchema,
   Pe as codeTypeSchema,
-  eo as colorsSchema,
+  to as colorsSchema,
   Nt as componentMessageSchema,
   Ne as componentSchema,
   Ge as connectionInsertSchema,
   He as connectionOptionsSchema,
-  zo as connectionSchema,
+  qo as connectionSchema,
   m as coordinatesSchema,
-  Pn as createPassthroughAdapter,
-  Mn as createWriteOnlyAdapter,
+  Mn as createPassthroughAdapter,
+  Hn as createWriteOnlyAdapter,
   Be as customDomainInsertSchema,
   Ke as customDomainSchema,
-  qo as customDomainWithTenantIdSchema,
-  Ln as customTextEntrySchema,
-  Oo as customTextSchema,
-  Rn as dailyStatsSchema,
-  bn as emailProviderSchema,
+  Xo as customDomainWithTenantIdSchema,
+  vn as customTextEntrySchema,
+  No as customTextSchema,
+  Dn as dailyStatsSchema,
+  fn as emailProviderSchema,
   ae as emailVerificationRulesSchema,
   re as emailVerifyActionSchema,
   Ue as endingSchema,
   At as fieldComponentSchema,
   pe as flowActionStepSchema,
   _e as flowInsertSchema,
-  Uo as flowSchema,
+  Fo as flowSchema,
   Te as flowsFieldComponentSchema,
   Re as flowsFlowNodeSchema,
   je as flowsStepNodeSchema,
   u as fontDetailsSchema,
-  to as fontsSchema,
-  Vo as formControlSchema,
+  oo as fontsSchema,
+  Yo as formControlSchema,
   Ot as formInsertSchema,
   k as formNodeComponentDefinition,
   Tt as formNodeSchema,
-  Yo as formSchema,
+  Qo as formSchema,
   Oe as genericComponentSchema,
   Le as genericNodeSchema,
-  Hn as getConnectionIdentifierConfig,
+  Gn as getConnectionIdentifierConfig,
   xt as hookCodeInsertSchema,
-  nn as hookCodeSchema,
-  tn as hookInsertSchema,
-  on as hookSchema,
+  an as hookCodeSchema,
+  on as hookInsertSchema,
+  nn as hookSchema,
   M as hookTemplateId,
-  en as hookTemplates,
+  tn as hookTemplates,
   ge as identitySchema,
   Ht as inviteInsertSchema,
-  an as inviteSchema,
+  sn as inviteSchema,
   Mt as inviteeSchema,
   Pt as inviterSchema,
-  Zo as isBlockComponent,
-  Jo as isFieldComponent,
-  $o as isWidgetComponent,
-  sn as jwksKeySchema,
+  $o as isBlockComponent,
+  en as isFieldComponent,
+  Jo as isWidgetComponent,
+  rn as jwksKeySchema,
   Gt as jwksSchema,
   Ce as legalComponentSchema,
   oe as locationInfoSchema,
-  Vt as logInsertSchema,
-  cn as logSchema,
-  Wt as loginSessionInsertSchema,
-  ln as loginSessionSchema,
+  Yt as logInsertSchema,
+  pn as logSchema,
+  Wt as loginSessionAuthStrategySchema,
+  Kt as loginSessionInsertSchema,
+  cn as loginSessionSchema,
   Bt as loginSessionStateSchema,
   ve as nodeSchema,
-  rn as openIDConfigurationSchema,
-  So as organizationBrandingSchema,
-  Ao as organizationEnabledConnectionSchema,
-  Io as organizationInsertSchema,
-  Nn as organizationSchema,
-  yo as organizationTokenQuotaSchema,
-  oo as pageBackgroundSchema,
-  xn as parseUserId,
-  Yt as passwordInsertSchema,
-  pn as passwordSchema,
+  ln as openIDConfigurationSchema,
+  Ao as organizationBrandingSchema,
+  yo as organizationEnabledConnectionSchema,
+  Co as organizationInsertSchema,
+  wn as organizationSchema,
+  Io as organizationTokenQuotaSchema,
+  no as pageBackgroundSchema,
+  Pn as parseUserId,
+  Qt as passwordInsertSchema,
+  _n as passwordSchema,
   de as profileDataSchema,
-  To as promptScreenSchema,
-  hn as promptSettingSchema,
+  Oo as promptScreenSchema,
+  bn as promptSettingSchema,
   ce as redirectActionSchema,
-  ao as refreshTokenInsertSchema,
-  fn as refreshTokenSchema,
+  so as refreshTokenInsertSchema,
+  En as refreshTokenSchema,
   ee as requestContextSchema,
-  lo as resourceServerInsertSchema,
-  An as resourceServerListSchema,
-  ro as resourceServerOptionsSchema,
-  co as resourceServerSchema,
-  so as resourceServerScopeSchema,
+  co as resourceServerInsertSchema,
+  yn as resourceServerListSchema,
+  lo as resourceServerOptionsSchema,
+  po as resourceServerSchema,
+  ro as resourceServerScopeSchema,
   te as responseContextSchema,
   ye as richTextComponentSchema,
-  fo as roleInsertSchema,
-  On as roleListSchema,
-  po as rolePermissionInsertSchema,
-  yn as rolePermissionListSchema,
-  _o as rolePermissionSchema,
-  Eo as roleSchema,
+  Eo as roleInsertSchema,
+  Nn as roleListSchema,
+  _o as rolePermissionInsertSchema,
+  In as rolePermissionListSchema,
+  go as rolePermissionSchema,
+  So as roleSchema,
   wt as screenLinkSchema,
-  Qt as sessionInsertSchema,
-  _n as sessionSchema,
-  dn as signingKeySchema,
-  Sn as smsProviderSchema,
-  En as smsSendParamsSchema,
+  Zt as sessionInsertSchema,
+  dn as sessionSchema,
+  gn as signingKeySchema,
+  An as smsProviderSchema,
+  Sn as smsSendParamsSchema,
   ke as startSchema,
   J as targetSchema,
-  Zt as tenantInsertSchema,
-  gn as tenantSchema,
-  jn as tenantSettingsSchema,
-  io as themeInsertSchema,
-  mn as themeSchema,
-  un as tokenResponseSchema,
-  xo as totalsSchema,
-  Qo as uiScreenSchema,
+  $t as tenantInsertSchema,
+  un as tenantSchema,
+  Rn as tenantSettingsSchema,
+  ao as themeInsertSchema,
+  hn as themeSchema,
+  mn as tokenResponseSchema,
+  Po as totalsSchema,
+  Zo as uiScreenSchema,
   me as userInsertSchema,
-  Co as userOrganizationInsertSchema,
-  wn as userOrganizationSchema,
-  go as userPermissionInsertSchema,
-  In as userPermissionListSchema,
-  uo as userPermissionSchema,
-  Cn as userPermissionWithDetailsListSchema,
-  mo as userPermissionWithDetailsSchema,
-  Mo as userResponseSchema,
-  ho as userRoleInsertSchema,
-  Tn as userRoleListSchema,
-  bo as userRoleSchema,
+  To as userOrganizationInsertSchema,
+  jn as userOrganizationSchema,
+  uo as userPermissionInsertSchema,
+  Cn as userPermissionListSchema,
+  mo as userPermissionSchema,
+  Tn as userPermissionWithDetailsListSchema,
+  ho as userPermissionWithDetailsSchema,
+  Ho as userResponseSchema,
+  bo as userRoleInsertSchema,
+  On as userRoleListSchema,
+  fo as userRoleSchema,
   he as userSchema,
   We as verificationMethodsSchema,
   St as widgetComponentSchema,
-  no as widgetSchema
+  io as widgetSchema
 };