@authhero/adapter-interfaces 2.0.0 → 2.1.0

package/dist/adapter-interfaces.mjs

@@ -28,10 +28,10 @@ const a = e.object({
   // read through from the control-plane system action with a matching name.
   // The local `secrets` still override (local-first then upstream fallback).
   inherit: e.boolean().optional()
-}), en = v.partial().extend({
+}), sn = v.partial().extend({
   status: e.enum(["draft", "built"]).optional(),
   deployed_at: e.string().optional()
-}), tn = v.extend({
+}), rn = v.extend({
   id: e.string(),
   tenant_id: e.string(),
   status: e.enum(["draft", "built"]).default("built"),
@@ -68,7 +68,7 @@ const a = e.object({
     action_name: e.string(),
     lines: e.array(ie)
   })
-), re = e.object({
+), se = e.object({
   id: e.string(),
   tenant_id: e.string(),
   trigger_id: ee,
@@ -77,11 +77,11 @@ const a = e.object({
   logs: ae.optional(),
   created_at: e.string(),
   updated_at: e.string()
-}), on = re.omit({
+}), ln = se.omit({
   tenant_id: !0,
   created_at: !0,
   updated_at: !0
-}), se = e.object({
+}), re = e.object({
   action_id: e.string(),
   code: e.string().max(1e5),
   runtime: e.string().max(50).optional(),
@@ -89,7 +89,7 @@ const a = e.object({
   secrets: e.array(R).optional(),
   supported_triggers: e.array(j).optional(),
   deployed: e.boolean().default(!0)
-}), nn = se.extend({
+}), cn = re.extend({
   id: e.string(),
   tenant_id: e.string(),
   number: e.number().int(),
@@ -155,15 +155,15 @@ const a = e.object({
   hostname: e.string(),
   is_mobile: e.boolean().optional(),
   timestamp: e.string()
-}), an = me.extend({
+}), pn = me.extend({
   id: e.string()
-}), rn = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), sn = e.enum([
+}), dn = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), _n = e.enum([
   "CREATE_USER",
   "GET_USER",
   "UPDATE_USER",
   "SEND_REQUEST",
   "SEND_EMAIL"
-]), ln = e.enum(["VERIFY_EMAIL"]), he = e.object({
+]), gn = e.enum(["VERIFY_EMAIL"]), he = e.object({
   require_mx_record: e.boolean().optional(),
   block_aliases: e.boolean().optional(),
   block_free_emails: e.boolean().optional(),
@@ -193,7 +193,7 @@ const a = e.object({
     email: e.string(),
     rules: he.optional()
   })
-}), Ee = e.enum(["change-email", "account", "custom"]), Se = e.object({
+}), Se = e.enum(["change-email", "account", "custom"]), Ee = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("REDIRECT"),
@@ -201,7 +201,7 @@ const a = e.object({
   allow_failure: e.boolean().optional(),
   mask_output: e.boolean().optional(),
   params: e.object({
-    target: Ee.openapi({
+    target: Se.openapi({
       description: "The predefined target to redirect to, or 'custom' for a custom URL"
     }),
     custom_url: e.string().optional().openapi({
@@ -211,7 +211,7 @@ const a = e.object({
 }), ye = e.union([
   be,
   fe,
-  Se
+  Ee
 ]), Ae = e.object({
   name: e.string().min(1).max(150).openapi({
     description: "The name of the flow"
@@ -220,13 +220,13 @@ const a = e.object({
   actions: e.array(ye).optional().default([]).openapi({
     description: "The list of actions to execute in sequence"
   })
-}), cn = Ae.extend({
+}), un = Ae.extend({
   ...a.shape,
   id: e.string().openapi({
     description: "Unique identifier for the flow",
     example: "af_12tMpdJ3iek7svMyZkSh5M"
   })
-}), pn = e.object({
+}), mn = e.object({
   page: e.string().min(0).optional().default("0").transform((t) => parseInt(t, 10)).openapi({
     description: "The page number where 0 is the first page"
   }),
@@ -242,7 +242,7 @@ const a = e.object({
   q: e.string().optional().openapi({
     description: "A lucene query string used to filter the results"
   })
-}), dn = e.object({
+}), hn = e.object({
   start: e.number(),
   limit: e.number(),
   length: e.number(),
@@ -339,7 +339,7 @@ const a = e.object({
     hash: e.string(),
     algorithm: e.string()
   }).optional()
-}), Ne = e.object({
+}), we = e.object({
   ...Oe.omit({ password: !0 }).shape,
   ...a.shape,
   user_id: e.string(),
@@ -348,19 +348,19 @@ const a = e.object({
   email: e.string().optional(),
   login_count: e.number().default(0),
   identities: e.array(Ce).optional()
-}), _n = Ne.omit({
+}), bn = we.omit({
   registration_completed_at: !0
-}), gn = D.extend({
+}), fn = D.extend({
   login_count: e.number(),
   multifactor: e.array(e.string()).optional(),
   last_ip: e.string().optional(),
   last_login: e.string().optional(),
   user_id: e.string()
 }).catchall(e.any());
-let we = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", je = (t = 21) => {
+let Ne = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", je = (t = 21) => {
   let o = "", n = crypto.getRandomValues(new Uint8Array(t |= 0));
   for (; t--; )
-    o += we[n[t] & 63];
+    o += Ne[n[t] & 63];
   return o;
 };
 const ke = e.object({
@@ -584,7 +584,7 @@ const ke = e.object({
   user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({
     description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies."
   })
-}), un = e.object({
+}), Sn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   ...ke.shape,
@@ -623,7 +623,7 @@ const ke = e.object({
   ...Re.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), mn = e.array(ve), De = e.enum(["iat", "rat"]), Le = e.object({
+}), En = e.array(ve), De = e.enum(["iat", "rat"]), Le = e.object({
   id: e.string(),
   token_hash: e.string(),
   type: De,
@@ -632,7 +632,7 @@ const ke = e.object({
   constraints: e.record(e.unknown()).optional(),
   single_use: e.boolean().default(!1),
   expires_at: e.string().optional()
-}), hn = e.object({
+}), yn = e.object({
   created_at: e.string(),
   used_at: e.string().optional(),
   revoked_at: e.string().optional(),
@@ -835,13 +835,13 @@ const Be = e.object({
     sdkSrc: e.string().optional(),
     sdk_src: e.string().optional()
   }).passthrough()
-}).passthrough(), bn = Ye.omit({
+}).passthrough(), An = Ye.omit({
   id: !0,
   created_at: !0,
   updated_at: !0
 });
 var U = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.ID_TOKEN = "id_token", t.TOKEN_ID_TOKEN = "id_token token", t.CODE = "code", t.CODE_ID_TOKEN = "code id_token", t.CODE_TOKEN = "code token", t.CODE_ID_TOKEN_TOKEN = "code id_token token", t))(U || {}), F = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(F || {}), P = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(P || {});
-const w = e.union([
+const N = e.union([
   e.null(),
   e.object({
     essential: e.boolean().optional(),
@@ -849,8 +849,8 @@ const w = e.union([
     values: e.array(e.unknown()).optional()
   })
 ]).nullable(), Ze = e.object({
-  userinfo: e.record(e.string(), w).optional(),
-  id_token: e.record(e.string(), w).optional()
+  userinfo: e.record(e.string(), N).optional(),
+  id_token: e.record(e.string(), N).optional()
 }), Qe = e.object({
   client_id: e.string(),
   act_as: e.string().optional(),
@@ -878,7 +878,7 @@ const w = e.union([
   claims: Ze.optional(),
   // The following fields are not available in Auth0
   vendor_id: e.string().optional()
-}), fn = e.object({
+}), In = e.object({
   colors: e.object({
     primary: e.string(),
     // Auth0 supports either a hex color string ("#ffffff") or a gradient
@@ -946,7 +946,7 @@ const w = e.union([
   expires_at: e.string(),
   used_at: e.string().optional(),
   user_id: e.string().optional()
-}), En = e.object({
+}), Cn = e.object({
   ...Je.shape,
   created_at: e.string()
 }), et = e.object({
@@ -1114,7 +1114,7 @@ const tt = e.object({
   show_as_button: e.boolean().optional(),
   metadata: e.record(e.any()).optional(),
   is_system: e.boolean().optional()
-}), Sn = e.object({
+}), Tn = e.object({
   id: e.string(),
   created_at: e.string().transform((t) => t === null ? "" : t),
   updated_at: e.string().transform((t) => t === null ? "" : t)
@@ -1153,7 +1153,7 @@ const tt = e.object({
     methods: e.array(nt)
   }).optional(),
   tls_policy: e.string().optional()
-}), yn = it.extend({
+}), On = it.extend({
   tenant_id: e.string()
 }), O = e.object({
   id: e.string(),
@@ -1166,12 +1166,12 @@ const tt = e.object({
   config: e.object({
     text: e.string().optional()
   }).optional()
-}), rt = l.extend({
+}), st = l.extend({
   type: e.literal("HTML"),
   config: e.object({
     content: e.string().optional()
   }).optional()
-}), st = l.extend({
+}), rt = l.extend({
   type: e.literal("IMAGE"),
   config: e.object({
     src: e.string().optional(),
@@ -1206,23 +1206,23 @@ const tt = e.object({
   config: e.object({
     content: e.string().optional()
   }).optional()
-}), N = O.extend({
+}), w = O.extend({
   category: e.literal("WIDGET").optional(),
   label: e.string().min(1).optional(),
   hint: e.string().min(1).max(500).optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), gt = N.extend({
+}), gt = w.extend({
   type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
   config: e.object({
     credential_type: e.string().optional()
   })
-}), ut = N.extend({
+}), ut = w.extend({
   type: e.literal("GMAPS_ADDRESS"),
   config: e.object({
     api_key: e.string().optional()
   })
-}), mt = N.extend({
+}), mt = w.extend({
   type: e.literal("RECAPTCHA"),
   config: e.object({
     site_key: e.string().optional()
@@ -1271,7 +1271,7 @@ const tt = e.object({
     multiple: e.boolean().optional(),
     default_value: e.union([e.string(), e.array(e.string())]).optional()
   }).optional()
-}), Et = i.extend({
+}), St = i.extend({
   type: e.literal("CUSTOM"),
   config: e.object({
     component: e.string().optional(),
@@ -1279,7 +1279,7 @@ const tt = e.object({
     schema: e.record(e.any()).optional(),
     code: e.string().optional()
   })
-}), St = i.extend({
+}), Et = i.extend({
   type: e.literal("DATE"),
   config: e.object({
     format: e.string().optional(),
@@ -1338,13 +1338,13 @@ const tt = e.object({
     forgot_password_link: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), Nt = i.extend({
+}), wt = i.extend({
   type: e.literal("PAYMENT"),
   config: e.object({
     provider: e.string().optional(),
     currency: e.string().optional()
   }).optional()
-}), wt = i.extend({
+}), Nt = i.extend({
   type: e.literal("SOCIAL"),
   config: e.object({
     providers: e.array(e.string()).optional(),
@@ -1389,8 +1389,8 @@ const tt = e.object({
   }).optional()
 }), Dt = e.discriminatedUnion("type", [
   at,
-  rt,
   st,
+  rt,
   lt,
   ct,
   pt,
@@ -1405,16 +1405,16 @@ const tt = e.object({
   bt,
   ft,
   Rt,
-  Et,
   St,
+  Et,
   yt,
   At,
   It,
   Ct,
   Tt,
   Ot,
-  Nt,
   wt,
+  Nt,
   jt,
   kt,
   vt
@@ -1422,7 +1422,7 @@ const tt = e.object({
   Dt,
   Lt,
   xt
-]), An = /* @__PURE__ */ new Set([
+]), wn = /* @__PURE__ */ new Set([
   "BOOLEAN",
   "CARDS",
   "CHOICE",
@@ -1436,7 +1436,7 @@ const tt = e.object({
   "TEL",
   "TEXT",
   "URL"
-]), In = e.object({
+]), Nn = e.object({
   id: e.string(),
   type: e.literal("submit"),
   label: e.string(),
@@ -1445,13 +1445,13 @@ const tt = e.object({
   order: e.number().optional(),
   visible: e.boolean().optional().default(!0),
   customizations: e.record(e.string(), e.any()).optional()
-}), E = e.object({
+}), S = e.object({
   x: e.number(),
   y: e.number()
 }), Ut = e.object({
   id: e.string(),
   type: e.literal("FLOW"),
-  coordinates: E,
+  coordinates: S,
   alias: e.string().min(1).max(150).optional(),
   config: e.object({
     flow_id: e.string().max(30),
@@ -1460,7 +1460,7 @@ const tt = e.object({
 }), Ft = e.object({
   id: e.string(),
   type: e.literal("ROUTER"),
-  coordinates: E,
+  coordinates: S,
   alias: e.string().min(1).max(150),
   config: e.object({
     rules: e.array(
@@ -1476,7 +1476,7 @@ const tt = e.object({
 }), Pt = e.object({
   id: e.string(),
   type: e.literal("STEP"),
-  coordinates: E,
+  coordinates: S,
   alias: e.string().min(1).max(150).optional(),
   config: e.object({
     components: e.array(M),
@@ -1503,7 +1503,7 @@ const tt = e.object({
   start: e.object({
     hidden_fields: e.array(e.object({ key: e.string(), value: e.string() })).optional(),
     next_node: e.string().optional(),
-    coordinates: E.optional()
+    coordinates: S.optional()
   }).optional(),
   ending: e.object({
     redirection: e.object({
@@ -1511,7 +1511,7 @@ const tt = e.object({
       target: e.string().optional()
     }).optional(),
     after_submit: e.object({ flow_id: e.string().optional() }).optional(),
-    coordinates: E.optional(),
+    coordinates: S.optional(),
     resume_flow: e.boolean().optional()
   }).optional(),
   style: e.object({ css: e.string().optional() }).optional(),
@@ -1521,7 +1521,7 @@ const tt = e.object({
   }).optional()
 }).openapi({
   description: "Schema for flow-based forms (matches Auth0 Forms structure)"
-}), Cn = e.object({
+}), jn = e.object({
   ...a.shape,
   ...Ht.shape,
   id: e.string()
@@ -1534,7 +1534,7 @@ const tt = e.object({
   text: e.string(),
   href: e.string(),
   linkText: e.string().optional()
-}), Tn = e.object({
+}), kn = e.object({
   /** Screen identifier for CSS targeting (e.g., 'identifier', 'enter-password', 'signup') */
   name: e.string().optional(),
   action: e.string(),
@@ -1547,13 +1547,13 @@ const tt = e.object({
   /** Footer HTML content displayed at the very bottom of the widget (e.g., terms and conditions) */
   footer: e.string().optional()
 });
-function On(t) {
+function Rn(t) {
   return t.category === "BLOCK";
 }
-function Nn(t) {
+function vn(t) {
   return t.category === "WIDGET";
 }
-function wn(t) {
+function Dn(t) {
   return t.category === "FIELD";
 }
 const H = e.enum([
@@ -1586,7 +1586,7 @@ const H = e.enum([
   "ensure-username",
   "set-preferred-username",
   "account-linking"
-]), jn = {
+]), Ln = {
   "ensure-username": {
     name: "Ensure Username",
     description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1639,7 +1639,7 @@ const H = e.enum([
   ...c,
   trigger_id: W,
   code_id: e.string()
-}), kn = e.union([
+}), xn = e.union([
   Wt,
   Kt,
   zt,
@@ -1668,7 +1668,7 @@ const H = e.enum([
   ...a.shape,
   hook_id: e.string(),
   code_id: e.string()
-}), Rn = e.union([
+}), Un = e.union([
   Xt,
   Vt,
   Yt,
@@ -1676,7 +1676,7 @@ const H = e.enum([
 ]), Qt = e.object({
   code: e.string().max(1e5),
   secrets: e.record(e.string()).optional()
-}), vn = Qt.extend({
+}), Fn = Qt.extend({
   id: e.string(),
   tenant_id: e.string(),
   ...a.shape
@@ -1696,7 +1696,7 @@ const H = e.enum([
   ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
   roles: e.array(e.string()).default([]).optional(),
   send_invitation_email: e.boolean().default(!0).optional()
-}), Dn = e.object({
+}), Pn = e.object({
   id: e.string(),
   organization_id: e.string().max(50),
   created_at: e.string().datetime(),
@@ -1741,9 +1741,9 @@ const H = e.enum([
         path: [n],
         message: `EC JWK is missing required member '${n}'`
       });
-}), Ln = e.object({
+}), Mn = e.object({
   keys: e.array(to)
-}), xn = e.object({
+}), Hn = e.object({
   issuer: e.string(),
   authorization_endpoint: e.string(),
   token_endpoint: e.string(),
@@ -1797,7 +1797,7 @@ const oo = e.nativeEnum(z), no = e.object({
   // ISO timestamp persisted for audit/metadata; not used to reject resumed sessions
 }).openapi({
   description: "This represents a login sesion"
-}), Un = e.object({
+}), Gn = e.object({
   ...io.shape,
   id: e.string().openapi({
     description: "This is is used as the state in the universal login"
@@ -1978,10 +1978,10 @@ const oo = e.nativeEnum(z), no = e.object({
   WARNING_DURING_LOGIN: "w",
   WARNING_SENDING_NOTIFICATION: "wn",
   WARNING_USER_MANAGEMENT: "wum"
-}, ro = e.string().refine(
+}, so = e.string().refine(
   (t) => Object.values(ao).includes(t),
   { message: "Invalid log type" }
-), so = e.object({
+), ro = e.object({
   name: e.string(),
   version: e.string(),
   env: e.object({
@@ -1995,7 +1995,7 @@ const oo = e.nativeEnum(z), no = e.object({
   time_zone: e.string(),
   continent_code: e.string()
 }), co = e.object({
-  type: ro,
+  type: so,
   date: e.string(),
   description: e.string().optional(),
   ip: e.string().optional(),
@@ -2014,10 +2014,10 @@ const oo = e.nativeEnum(z), no = e.object({
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
   hostname: e.string().optional(),
-  auth0_client: so.optional(),
+  auth0_client: ro.optional(),
   log_id: e.string().optional(),
   location_info: lo.optional()
-}), Fn = e.object({
+}), Bn = e.object({
   ...co.shape,
   log_id: e.string()
 }), po = e.enum([
@@ -2027,11 +2027,7 @@ const oo = e.nativeEnum(z), no = e.object({
   "splunk",
   "datadog",
   "sumo"
-]), q = e.enum([
-  "active",
-  "paused",
-  "suspended"
-]), _o = e.object({
+]), q = e.enum(["active", "paused", "suspended"]), _o = e.object({
   type: e.string(),
   name: e.string()
 }), go = e.object({
@@ -2041,12 +2037,34 @@ const oo = e.nativeEnum(z), no = e.object({
   sink: e.record(e.string(), e.unknown()),
   filters: e.array(_o).optional(),
   isPriority: e.boolean().optional()
-}), Pn = go.extend({
+}), Wn = go.extend({
   id: e.string(),
   status: q,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), uo = e.object({
+}), uo = e.enum([
+  "auth0",
+  "cognito",
+  "okta",
+  "oidc"
+]), mo = e.object({
+  domain: e.string(),
+  client_id: e.string(),
+  client_secret: e.string(),
+  audience: e.string().optional(),
+  scope: e.string().optional()
+}), ho = e.object({
+  id: e.string().optional(),
+  name: e.string(),
+  provider: uo,
+  connection: e.string(),
+  enabled: e.boolean().default(!0),
+  credentials: mo
+}), Kn = e.object({
+  id: e.string(),
+  created_at: e.string(),
+  updated_at: e.string()
+}).extend(ho.shape), bo = e.object({
   enabled: e.boolean().optional(),
   shields: e.array(e.string()).optional(),
   admin_notification_frequency: e.array(e.string()).optional(),
@@ -2059,13 +2077,13 @@ const oo = e.nativeEnum(z), no = e.object({
       shields: e.array(e.string()).optional()
     }).optional()
   }).optional()
-}), mo = e.object({
+}), fo = e.object({
   enabled: e.boolean().optional(),
   shields: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional(),
   mode: e.string().optional(),
   max_attempts: e.number().optional()
-}), ho = e.object({
+}), So = e.object({
   enabled: e.boolean().optional(),
   shields: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional(),
@@ -2079,17 +2097,17 @@ const oo = e.nativeEnum(z), no = e.object({
       rate: e.number().optional()
     }).optional()
   }).optional()
-}), bo = e.object({
-  breached_password_detection: uo.optional(),
-  brute_force_protection: mo.optional(),
-  suspicious_ip_throttling: ho.optional()
-}), fo = e.object({
+}), Eo = e.object({
+  breached_password_detection: bo.optional(),
+  brute_force_protection: fo.optional(),
+  suspicious_ip_throttling: So.optional()
+}), yo = e.object({
   id: e.string().optional(),
   user_id: e.string(),
   password: e.string(),
   algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
   is_current: e.boolean().default(!0)
-}), Mn = fo.extend({
+}), zn = yo.extend({
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
@@ -2100,7 +2118,7 @@ const oo = e.nativeEnum(z), no = e.object({
   last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
   last_ip: e.string().describe("Last IP address from which this user logged in"),
   last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), Eo = e.object({
+}), Ao = e.object({
   id: e.string(),
   revoked_at: e.string().optional(),
   used_at: e.string().optional(),
@@ -2112,13 +2130,13 @@ const oo = e.nativeEnum(z), no = e.object({
     "Metadata related to the device used in the session"
   ),
   clients: e.array(e.string()).describe("List of client details for the session")
-}), Hn = e.object({
+}), qn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   authenticated_at: e.string(),
   last_interaction_at: e.string(),
-  ...Eo.shape
-}), Gn = e.object({
+  ...Ao.shape
+}), Xn = e.object({
   kid: e.string().openapi({ description: "The key id of the signing key" }),
   tenant_id: e.string().optional().openapi({
     description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped."
@@ -2146,7 +2164,7 @@ const oo = e.nativeEnum(z), no = e.object({
   type: e.enum(["jwt_signing", "saml_encryption"]).openapi({
     description: "The type of the signing key"
   })
-}), So = e.object({
+}), Io = e.object({
   id: e.string().optional(),
   // Basic settings
   audience: e.string(),
@@ -2299,7 +2317,7 @@ const oo = e.nativeEnum(z), no = e.object({
   pushed_authorization_requests_supported: e.boolean().optional(),
   authorization_response_iss_parameter_supported: e.boolean().optional(),
   // Attack-protection config (singleton, exposed via /api/v2/attack-protection)
-  attack_protection: bo.optional(),
+  attack_protection: Eo.optional(),
   // Guardian MFA Factors configuration (internal storage, exposed via /guardian API)
   mfa: e.object({
     // MFA policy: "never" = MFA disabled, "always" = MFA required for all logins
@@ -2331,14 +2349,14 @@ const oo = e.nativeEnum(z), no = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), Bn = e.object({
+}), Vn = e.object({
   created_at: e.string().nullable().transform((t) => t ?? ""),
   updated_at: e.string().nullable().transform((t) => t ?? ""),
-  ...So.shape,
+  ...Io.shape,
   id: e.string()
 });
-var yo = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(yo || {});
-const Wn = e.object({
+var Co = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(Co || {});
+const Yn = e.object({
   access_token: e.string(),
   id_token: e.string().optional(),
   scope: e.string().optional(),
@@ -2351,7 +2369,7 @@ e.object({
   code: e.string(),
   state: e.string().optional()
 });
-const Ao = e.object({
+const To = e.object({
   button_border_radius: e.number(),
   button_border_weight: e.number(),
   buttons_style: e.enum(["pill", "rounded", "sharp"]),
@@ -2361,7 +2379,7 @@ const Ao = e.object({
   show_widget_shadow: e.boolean(),
   widget_border_weight: e.number(),
   widget_corner_radius: e.number()
-}), Io = e.object({
+}), Oo = e.object({
   base_focus_color: e.string(),
   base_hover_color: e.string(),
   body_text: e.string(),
@@ -2384,7 +2402,7 @@ const Ao = e.object({
 }), u = e.object({
   bold: e.boolean(),
   size: e.number()
-}), Co = e.object({
+}), wo = e.object({
   body_text: u,
   buttons_text: u,
   font_url: e.string(),
@@ -2394,7 +2412,7 @@ const Ao = e.object({
   reference_text_size: e.number(),
   subtitle: u,
   title: u
-}), To = e.object({
+}), No = e.object({
   background_color: e.string(),
   background_image_url: e.string(),
   page_layout: e.enum(["center", "left", "right"]),
@@ -2407,33 +2425,33 @@ const Ao = e.object({
    * Optional for backwards compatibility; absent values mean "widget".
    */
   logo_placement: e.enum(["widget", "chip", "none"]).optional()
-}), Oo = e.object({
+}), jo = e.object({
   header_text_alignment: e.enum(["center", "left", "right"]),
   logo_height: e.number(),
   logo_position: e.enum(["center", "left", "none", "right"]),
   logo_url: e.string(),
   social_buttons_layout: e.enum(["bottom", "top"])
-}), No = e.object({
-  borders: Ao,
-  colors: Io,
+}), ko = e.object({
+  borders: To,
+  colors: Oo,
   displayName: e.string(),
-  fonts: Co,
-  page_background: To,
-  widget: Oo
-}), Kn = No.extend({
+  fonts: wo,
+  page_background: No,
+  widget: jo
+}), Zn = ko.extend({
   themeId: e.string()
-}), zn = e.object({
+}), Qn = e.object({
   universal_login_experience: e.enum(["new", "classic"]).default("new"),
   identifier_first: e.boolean().default(!0),
   password_first: e.boolean().default(!1),
   webauthn_platform_first_factor: e.boolean()
-}), qn = e.object({
+}), $n = e.object({
   name: e.string(),
   enabled: e.boolean().optional().default(!0),
   default_from_address: e.string().optional(),
   credentials: e.record(e.string(), e.unknown()),
   settings: e.object({}).optional()
-}), wo = e.enum([
+}), Ro = e.enum([
   "verify_email",
   "verify_email_by_code",
   "reset_email",
@@ -2446,8 +2464,8 @@ const Ao = e.object({
   "change_password",
   "password_reset",
   "user_invitation"
-]), Xn = e.object({
-  template: wo,
+]), Jn = e.object({
+  template: Ro,
   body: e.string(),
   from: e.string(),
   subject: e.string(),
@@ -2456,7 +2474,7 @@ const Ao = e.object({
   urlLifetimeInSeconds: e.number().int().nonnegative().optional(),
   includeEmailInRedirect: e.boolean().default(!1),
   enabled: e.boolean().default(!0)
-}), jo = e.object({
+}), vo = e.object({
   // Internal primary key (ULID). Never sent to clients in the new wire format.
   id: e.string(),
   // Link to the login session
@@ -2490,23 +2508,23 @@ const Ao = e.object({
   // ISO of the *first* rotation. Anchors the leeway window so siblings minted
   // within the window don't extend the parent's exposure.
   rotated_at: e.string().optional()
-}), Vn = e.object({
+}), ei = e.object({
   // When the refresh token record was created.
   created_at: e.string(),
   // When the token was explicitly revoked (null = still active).
   revoked_at: e.string().optional(),
   // Spread in the rest of the refresh token properties.
-  ...jo.shape
-}), Yn = e.object({
+  ...vo.shape
+}), ti = e.object({
   to: e.string(),
   message: e.string()
-}), Zn = e.object({
+}), oi = e.object({
   name: e.string(),
   options: e.object({})
-}), ko = e.object({
+}), Do = e.object({
   value: e.string(),
   description: e.string().optional()
-}), Ro = e.object({
+}), Lo = e.object({
   token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
   enforce_policies: e.boolean().optional(),
   allow_skipping_userinfo: e.boolean().optional(),
@@ -2516,11 +2534,11 @@ const Ao = e.object({
   mtls: e.object({
     bound_access_tokens: e.boolean().optional()
   }).optional()
-}), vo = e.object({
+}), xo = e.object({
   id: e.string().optional(),
   name: e.string(),
   identifier: e.string(),
-  scopes: e.array(ko).optional(),
+  scopes: e.array(Do).optional(),
   signing_alg: e.string().optional(),
   signing_secret: e.string().optional(),
   token_lifetime: e.number().default(86400),
@@ -2528,30 +2546,30 @@ const Ao = e.object({
   skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
   allow_offline_access: e.boolean().optional(),
   verificationKey: e.string().optional(),
-  options: Ro.optional(),
+  options: Lo.optional(),
   is_system: e.boolean().optional(),
   metadata: e.record(e.any()).optional()
-}), Do = e.object({
-  ...vo.shape,
+}), Uo = e.object({
+  ...xo.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), Qn = e.array(Do), Lo = e.object({
+}), ni = e.array(Uo), Fo = e.object({
   role_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string()
-}), xo = e.object({
-  ...Lo.shape,
+}), Po = e.object({
+  ...Fo.shape,
   created_at: e.string()
-}), $n = e.array(xo), Uo = e.object({
+}), ii = e.array(Po), Mo = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string(),
   organization_id: e.string().optional()
-}), Fo = e.object({
-  ...Uo.shape,
+}), Ho = e.object({
+  ...Mo.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), Jn = e.array(Fo), Po = e.object({
+}), ai = e.array(Ho), Go = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   resource_server_name: e.string(),
@@ -2559,17 +2577,17 @@ const Ao = e.object({
   description: e.string().nullable().optional(),
   created_at: e.string().optional(),
   organization_id: e.string().optional()
-}), ei = e.array(
-  Po
-), Mo = e.object({
+}), si = e.array(
+  Go
+), Bo = e.object({
   user_id: e.string(),
   role_id: e.string(),
   organization_id: e.string().optional()
-}), Ho = e.object({
-  ...Mo.shape,
+}), Wo = e.object({
+  ...Bo.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), ti = e.array(Ho), Go = e.object({
+}), ri = e.array(Wo), Ko = e.object({
   id: e.string().optional().openapi({
     description: "The unique identifier of the role. If not provided, one will be generated."
   }),
@@ -2583,13 +2601,13 @@ const Ao = e.object({
   metadata: e.record(e.any()).optional().openapi({
     description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios."
   })
-}), Bo = Go.extend({
+}), zo = Ko.extend({
   id: e.string().openapi({
     description: "The unique identifier of the role"
   }),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), oi = e.array(Bo), Wo = e.object({
+}), li = e.array(zo), qo = e.object({
   logo_url: e.string().optional().openapi({
     description: "URL of the organization's logo"
   }),
@@ -2601,7 +2619,7 @@ const Ao = e.object({
       description: "Page background color in hex format (e.g., #FFFFFF)"
     })
   }).optional()
-}).optional(), Ko = e.object({
+}).optional(), Xo = e.object({
   connection_id: e.string().openapi({
     description: "ID of the connection"
   }),
@@ -2614,7 +2632,7 @@ const Ao = e.object({
   is_signup_enabled: e.boolean().default(!0).openapi({
     description: "Whether signup is enabled for this connection"
   })
-}), zo = e.object({
+}), Vo = e.object({
   client_credentials: e.object({
     enforce: e.boolean().default(!1).openapi({
       description: "Whether to enforce token quota limits"
@@ -2626,7 +2644,7 @@ const Ao = e.object({
       description: "Maximum tokens per hour (0 = unlimited)"
     })
   }).optional()
-}).optional(), qo = e.object({
+}).optional(), Yo = e.object({
   id: e.string().optional(),
   name: e.string().min(1).regex(/^[a-z0-9_-]+$/, {
     message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores"
@@ -2636,31 +2654,31 @@ const Ao = e.object({
   display_name: e.string().optional().openapi({
     description: "The display name of the organization"
   }),
-  branding: Wo,
+  branding: qo,
   metadata: e.record(e.any()).default({}).optional().openapi({
     description: "Custom metadata for the organization"
   }),
-  enabled_connections: e.array(Ko).default([]).optional().openapi({
+  enabled_connections: e.array(Xo).default([]).optional().openapi({
     description: "List of enabled connections for the organization"
   }),
-  token_quota: zo
-}), ni = e.object({
-  ...qo.shape,
+  token_quota: Vo
+}), ci = e.object({
+  ...Yo.shape,
   ...a.shape,
   id: e.string(),
   // Override name to be lenient when reading from database (to support existing uppercase names)
   name: e.string().min(1).openapi({
     description: "The name of the organization"
   })
-}), Xo = e.object({
+}), Zo = e.object({
   connection_id: e.string().openapi({
     description: "ID of the tenant-level connection to enable for the org."
   }),
   assign_membership_on_login: e.boolean().optional().default(!1),
   show_as_button: e.boolean().optional().default(!0),
   is_signup_enabled: e.boolean().optional().default(!0)
-}), Vo = e.object({
-  ...Xo.shape,
+}), Qo = e.object({
+  ...Zo.shape,
   // Auth0 includes the embedded connection in GET responses.
   connection: e.object({
     name: e.string().optional(),
@@ -2668,20 +2686,20 @@ const Ao = e.object({
   }).optional(),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), ii = e.array(
-  Vo
-), Yo = e.object({
+}), pi = e.array(
+  Qo
+), $o = e.object({
   user_id: e.string().openapi({
     description: "ID of the user"
   }),
   organization_id: e.string().openapi({
     description: "ID of the organization"
   })
-}), ai = e.object({
-  ...Yo.shape,
+}), di = e.object({
+  ...$o.shape,
   ...a.shape,
   id: e.string()
-}), ri = e.object({
+}), _i = e.object({
   // Session settings
   idle_session_lifetime: e.number().default(72),
   session_lifetime: e.number().default(168),
@@ -2781,7 +2799,7 @@ const Ao = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), si = e.object({
+}), gi = e.object({
   date: e.string().openapi({
     description: "Date these events occurred in ISO 8601 format",
     example: "2025-12-19"
@@ -2806,10 +2824,40 @@ const Ao = e.object({
     description: "Approximate date and time the first event occurred in ISO 8601 format",
     example: "2025-12-19T00:00:00.000Z"
   })
-}), li = e.number().openapi({
+}), ui = e.number().openapi({
   description: "Number of active users in the last 30 days",
   example: 1234
-}), Zo = e.enum([
+}), mi = e.enum([
+  "active-users",
+  "logins",
+  "signups",
+  "refresh-tokens",
+  "sessions"
+]), hi = e.enum(["hour", "day", "week", "month"]), bi = e.enum([
+  "time",
+  "connection",
+  "client_id",
+  "user_type",
+  "event"
+]), fi = e.enum([
+  "password",
+  "social",
+  "passwordless",
+  "enterprise"
+]), Jo = e.object({
+  name: e.string(),
+  type: e.string()
+}), en = e.object({
+  elapsed: e.number(),
+  rows_read: e.number().optional(),
+  bytes_read: e.number().optional()
+}), Si = e.object({
+  meta: e.array(Jo),
+  data: e.array(e.record(e.string(), e.any())),
+  rows: e.number(),
+  rows_before_limit_at_least: e.number().optional(),
+  statistics: en.optional()
+}), tn = e.enum([
   "login",
   "login-id",
   "login-password",
@@ -2838,17 +2886,17 @@ const Ao = e.object({
   "custom-form",
   "login-passwordless",
   "mfa-login-options"
-]), Qo = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+]), on = e.record(e.string(), e.record(e.string(), e.string())).openapi({
   type: "object",
   additionalProperties: {
     type: "object",
     additionalProperties: { type: "string" }
   }
-}), ci = e.object({
-  prompt: Zo,
+}), Ei = e.object({
+  prompt: tn,
   language: e.string(),
-  custom_text: Qo
-}), pi = {
+  custom_text: on
+}), yi = {
   EMAIL: "email",
   SMS: "sms",
   USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2863,11 +2911,11 @@ const Ao = e.object({
   SAMLP: "samlp",
   WAAD: "waad",
   ADFS: "adfs"
-}, di = {
+}, Ai = {
   DATABASE: "database",
   SOCIAL: "social",
   PASSWORDLESS: "passwordless"
-}, $o = e.enum([
+}, nn = e.enum([
   "phone",
   "totp",
   "email",
@@ -2877,7 +2925,7 @@ const Ao = e.object({
   "passkey"
 ]), V = e.object({
   user_id: e.string(),
-  type: $o,
+  type: nn,
   // Phone-specific
   phone_number: e.string().optional(),
   // TOTP-specific
@@ -2911,64 +2959,64 @@ function Y(t, o) {
     path: ["public_key"]
   }));
 }
-const _i = V.superRefine(Y), gi = e.object({
+const Ii = V.superRefine(Y), Ci = e.object({
   ...V.shape,
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
 }).superRefine(Y);
-function ui(t) {
+function Ti(t) {
   const [o, n] = t.split("|");
   if (!o || !n)
     throw new Error(`Invalid user_id: ${t}`);
   return { connection: o, id: n };
 }
-function mi(t) {
+function Oi(t) {
   const {
     primary: o,
     secondaries: n,
     syncMethods: h = ["create", "rawCreate", "update", "remove", "delete", "set"]
-  } = t, S = {
-    get(p, r) {
-      if (typeof r == "symbol")
-        return p[r];
-      const d = p[r];
-      return typeof d != "function" ? d : h.includes(r) ? async (..._) => {
+  } = t, E = {
+    get(p, s) {
+      if (typeof s == "symbol")
+        return p[s];
+      const d = p[s];
+      return typeof d != "function" ? d : h.includes(s) ? async (..._) => {
         const y = await d.apply(p, _), g = [];
-        for (const s of n) {
-          const b = s.adapter[r];
+        for (const r of n) {
+          const b = r.adapter[s];
           if (typeof b != "function")
             continue;
           const A = (async () => {
             try {
-              await b.apply(s.adapter, _);
+              await b.apply(r.adapter, _);
             } catch (f) {
               try {
-                s.onError ? s.onError(f, r, _) : console.error(
-                  `Passthrough adapter: secondary write failed for ${r}:`,
+                r.onError ? r.onError(f, s, _) : console.error(
+                  `Passthrough adapter: secondary write failed for ${s}:`,
                   f
                 );
               } catch (I) {
                 console.error(
-                  `Passthrough adapter: onError handler threw for ${r}:`,
+                  `Passthrough adapter: onError handler threw for ${s}:`,
                   I
                 );
               }
             }
           })();
-          s.blocking && g.push(A);
+          r.blocking && g.push(A);
         }
         return g.length > 0 && await Promise.all(g), y;
       } : d.bind(p);
     }
   };
-  return new Proxy(o, S);
+  return new Proxy(o, E);
 }
-function hi(t) {
+function wi(t) {
   return t;
 }
-function bi(t) {
-  var S, p, r, d, _, y, g, s, b, A, f, I;
+function Ni(t) {
+  var E, p, s, d, _, y, g, r, b, A, f, I;
   const o = t == null ? void 0 : t.options;
   if (!o)
     return {
@@ -2979,7 +3027,7 @@ function bi(t) {
     };
   const n = o.attributes;
   if (n) {
-    const Z = ((p = (S = n.username) == null ? void 0 : S.identifier) == null ? void 0 : p.active) === !0, Q = ((d = (r = n.email) == null ? void 0 : r.identifier) == null ? void 0 : d.active) !== !1, $ = ((y = (_ = n.username) == null ? void 0 : _.validation) == null ? void 0 : y.min_length) ?? 1, J = ((s = (g = n.username) == null ? void 0 : g.validation) == null ? void 0 : s.max_length) ?? 15;
+    const Z = ((p = (E = n.username) == null ? void 0 : E.identifier) == null ? void 0 : p.active) === !0, Q = ((d = (s = n.email) == null ? void 0 : s.identifier) == null ? void 0 : d.active) !== !1, $ = ((y = (_ = n.username) == null ? void 0 : _.validation) == null ? void 0 : y.min_length) ?? 1, J = ((r = (g = n.username) == null ? void 0 : g.validation) == null ? void 0 : r.max_length) ?? 15;
     return {
       usernameIdentifierActive: Z,
       emailIdentifierActive: Q,
@@ -2994,214 +3042,225 @@ function bi(t) {
     usernameMaxLength: ((I = (f = o.validation) == null ? void 0 : f.username) == null ? void 0 : I.max) ?? 15
   };
 }
-function fi(t) {
+function ji(t) {
   return typeof t == "object" && t !== null && !Array.isArray(t);
 }
 export {
-  sn as Auth0ActionEnum,
-  so as Auth0Client,
+  _n as Auth0ActionEnum,
+  ro as Auth0Client,
   F as AuthorizationResponseMode,
   U as AuthorizationResponseType,
   P as CodeChallengeMethod,
   x as ComponentCategory,
   L as ComponentType,
-  ln as EmailActionEnum,
-  An as FORM_FIELD_TYPES,
-  rn as FlowActionTypeEnum,
-  yo as GrantType,
+  gn as EmailActionEnum,
+  wn as FORM_FIELD_TYPES,
+  dn as FlowActionTypeEnum,
+  Co as GrantType,
   lo as LocationInfo,
   ao as LogTypes,
   z as LoginSessionState,
   Ge as NodeType,
-  Ee as RedirectTargetEnum,
-  pi as Strategy,
-  di as StrategyType,
+  Se as RedirectTargetEnum,
+  yi as Strategy,
+  Ai as StrategyType,
   k as actionDependencySchema,
   oe as actionExecutionErrorSchema,
-  on as actionExecutionInsertSchema,
+  ln as actionExecutionInsertSchema,
   ie as actionExecutionLogEntrySchema,
   ae as actionExecutionLogsSchema,
   ne as actionExecutionResultSchema,
-  re as actionExecutionSchema,
+  se as actionExecutionSchema,
   te as actionExecutionStatusSchema,
   ee as actionExecutionTriggerIdSchema,
   v as actionInsertSchema,
   Ke as actionNodeSchema,
-  tn as actionSchema,
+  rn as actionSchema,
   R as actionSecretSchema,
   j as actionTriggerSchema,
-  en as actionUpdateSchema,
-  se as actionVersionInsertSchema,
-  nn as actionVersionSchema,
-  li as activeUsersResponseSchema,
+  sn as actionUpdateSchema,
+  re as actionVersionInsertSchema,
+  cn as actionVersionSchema,
+  ui as activeUsersResponseSchema,
   ce as actorSchema,
   Te as addressSchema,
-  bo as attackProtectionSchema,
+  Jo as analyticsColumnMetaSchema,
+  bi as analyticsGroupBySchema,
+  hi as analyticsIntervalSchema,
+  Si as analyticsQueryResponseSchema,
+  mi as analyticsResourceSchema,
+  en as analyticsStatisticsSchema,
+  fi as analyticsUserTypeSchema,
+  Eo as attackProtectionSchema,
   le as auditCategorySchema,
   me as auditEventInsertSchema,
-  an as auditEventSchema,
+  pn as auditEventSchema,
   ue as auth0ClientSchema,
-  bn as auth0FlowInsertSchema,
+  An as auth0FlowInsertSchema,
   Ye as auth0FlowSchema,
-  pn as auth0QuerySchema,
+  mn as auth0QuerySchema,
   be as auth0UpdateUserActionSchema,
-  _n as auth0UserResponseSchema,
+  bn as auth0UserResponseSchema,
   Qe as authParamsSchema,
-  _i as authenticationMethodInsertSchema,
-  gi as authenticationMethodSchema,
-  $o as authenticationMethodTypeSchema,
+  Ii as authenticationMethodInsertSchema,
+  Ci as authenticationMethodSchema,
+  nn as authenticationMethodTypeSchema,
   D as baseUserSchema,
   Dt as blockComponentSchema,
-  Ao as bordersSchema,
-  fn as brandingSchema,
-  uo as breachedPasswordDetectionSchema,
-  mo as bruteForceProtectionSchema,
+  To as bordersSchema,
+  In as brandingSchema,
+  bo as breachedPasswordDetectionSchema,
+  fo as bruteForceProtectionSchema,
   Ue as buttonComponentSchema,
   Ze as claimsRequestSchema,
   Re as clientGrantInsertSchema,
-  mn as clientGrantListSchema,
+  En as clientGrantListSchema,
   ve as clientGrantSchema,
   ke as clientInsertSchema,
   Le as clientRegistrationTokenInsertSchema,
-  hn as clientRegistrationTokenSchema,
+  yn as clientRegistrationTokenSchema,
   De as clientRegistrationTokenTypeSchema,
-  un as clientSchema,
+  Sn as clientSchema,
   Je as codeInsertSchema,
-  En as codeSchema,
+  Cn as codeSchema,
   $e as codeTypeSchema,
-  Io as colorsSchema,
+  Oo as colorsSchema,
   Gt as componentMessageSchema,
   He as componentSchema,
   tt as connectionInsertSchema,
   et as connectionOptionsSchema,
-  Sn as connectionSchema,
+  Tn as connectionSchema,
   m as coordinatesSchema,
-  mi as createPassthroughAdapter,
-  hi as createWriteOnlyAdapter,
+  Oi as createPassthroughAdapter,
+  wi as createWriteOnlyAdapter,
   ot as customDomainInsertSchema,
   it as customDomainSchema,
-  yn as customDomainWithTenantIdSchema,
-  ci as customTextEntrySchema,
-  Qo as customTextSchema,
-  si as dailyStatsSchema,
-  qn as emailProviderSchema,
-  wo as emailTemplateNameSchema,
-  Xn as emailTemplateSchema,
+  On as customDomainWithTenantIdSchema,
+  Ei as customTextEntrySchema,
+  on as customTextSchema,
+  gi as dailyStatsSchema,
+  $n as emailProviderSchema,
+  Ro as emailTemplateNameSchema,
+  Jn as emailTemplateSchema,
   he as emailVerificationRulesSchema,
   fe as emailVerifyActionSchema,
   Ve as endingSchema,
   xt as fieldComponentSchema,
   ye as flowActionStepSchema,
   Ae as flowInsertSchema,
-  cn as flowSchema,
+  un as flowSchema,
   Pe as flowsFieldComponentSchema,
   We as flowsFlowNodeSchema,
   Be as flowsStepNodeSchema,
   u as fontDetailsSchema,
-  Co as fontsSchema,
-  In as formControlSchema,
+  wo as fontsSchema,
+  Nn as formControlSchema,
   Ht as formInsertSchema,
   M as formNodeComponentDefinition,
   Mt as formNodeSchema,
-  Cn as formSchema,
+  jn as formSchema,
   Me as genericComponentSchema,
   ze as genericNodeSchema,
-  bi as getConnectionIdentifierConfig,
+  Ni as getConnectionIdentifierConfig,
   Qt as hookCodeInsertSchema,
-  vn as hookCodeSchema,
-  kn as hookInsertSchema,
-  Rn as hookSchema,
+  Fn as hookCodeSchema,
+  xn as hookInsertSchema,
+  Un as hookSchema,
   K as hookTemplateId,
-  jn as hookTemplates,
+  Ln as hookTemplates,
   Ce as identitySchema,
   eo as inviteInsertSchema,
-  Dn as inviteSchema,
+  Pn as inviteSchema,
   Jt as inviteeSchema,
   $t as inviterSchema,
-  On as isBlockComponent,
-  wn as isFieldComponent,
-  fi as isPlainObject,
-  Nn as isWidgetComponent,
-  Ln as jwksKeySchema,
+  Rn as isBlockComponent,
+  Dn as isFieldComponent,
+  ji as isPlainObject,
+  vn as isWidgetComponent,
+  Mn as jwksKeySchema,
   to as jwksSchema,
   Fe as legalComponentSchema,
   ge as locationInfoSchema,
   co as logInsertSchema,
-  Fn as logSchema,
+  Bn as logSchema,
   _o as logStreamFilterSchema,
   go as logStreamInsertSchema,
-  Pn as logStreamSchema,
+  Wn as logStreamSchema,
   q as logStreamStatusSchema,
   po as logStreamTypeSchema,
   no as loginSessionAuthStrategySchema,
   io as loginSessionInsertSchema,
-  Un as loginSessionSchema,
+  Gn as loginSessionSchema,
   oo as loginSessionStateSchema,
+  uo as migrationProviderTypeSchema,
+  mo as migrationSourceCredentialsSchema,
+  ho as migrationSourceInsertSchema,
+  Kn as migrationSourceSchema,
   qe as nodeSchema,
-  xn as openIDConfigurationSchema,
-  Wo as organizationBrandingSchema,
-  Xo as organizationConnectionInsertSchema,
-  ii as organizationConnectionListSchema,
-  Vo as organizationConnectionSchema,
-  Ko as organizationEnabledConnectionSchema,
-  qo as organizationInsertSchema,
-  ni as organizationSchema,
-  zo as organizationTokenQuotaSchema,
-  To as pageBackgroundSchema,
-  ui as parseUserId,
-  fo as passwordInsertSchema,
-  Mn as passwordSchema,
+  Hn as openIDConfigurationSchema,
+  qo as organizationBrandingSchema,
+  Zo as organizationConnectionInsertSchema,
+  pi as organizationConnectionListSchema,
+  Qo as organizationConnectionSchema,
+  Xo as organizationEnabledConnectionSchema,
+  Yo as organizationInsertSchema,
+  ci as organizationSchema,
+  Vo as organizationTokenQuotaSchema,
+  No as pageBackgroundSchema,
+  Ti as parseUserId,
+  yo as passwordInsertSchema,
+  zn as passwordSchema,
   Ie as profileDataSchema,
-  Zo as promptScreenSchema,
-  zn as promptSettingSchema,
-  Se as redirectActionSchema,
-  jo as refreshTokenInsertSchema,
-  Vn as refreshTokenSchema,
+  tn as promptScreenSchema,
+  Qn as promptSettingSchema,
+  Ee as redirectActionSchema,
+  vo as refreshTokenInsertSchema,
+  ei as refreshTokenSchema,
   de as requestContextSchema,
-  vo as resourceServerInsertSchema,
-  Qn as resourceServerListSchema,
-  Ro as resourceServerOptionsSchema,
-  Do as resourceServerSchema,
-  ko as resourceServerScopeSchema,
+  xo as resourceServerInsertSchema,
+  ni as resourceServerListSchema,
+  Lo as resourceServerOptionsSchema,
+  Uo as resourceServerSchema,
+  Do as resourceServerScopeSchema,
   _e as responseContextSchema,
   xe as richTextComponentSchema,
-  Go as roleInsertSchema,
-  oi as roleListSchema,
-  Lo as rolePermissionInsertSchema,
-  $n as rolePermissionListSchema,
-  xo as rolePermissionSchema,
-  Bo as roleSchema,
+  Ko as roleInsertSchema,
+  li as roleListSchema,
+  Fo as rolePermissionInsertSchema,
+  ii as rolePermissionListSchema,
+  Po as rolePermissionSchema,
+  zo as roleSchema,
   Bt as screenLinkSchema,
-  Eo as sessionInsertSchema,
-  Hn as sessionSchema,
-  Gn as signingKeySchema,
-  Zn as smsProviderSchema,
-  Yn as smsSendParamsSchema,
+  Ao as sessionInsertSchema,
+  qn as sessionSchema,
+  Xn as signingKeySchema,
+  oi as smsProviderSchema,
+  ti as smsSendParamsSchema,
   Xe as startSchema,
-  ho as suspiciousIpThrottlingSchema,
+  So as suspiciousIpThrottlingSchema,
   pe as targetSchema,
-  So as tenantInsertSchema,
-  Bn as tenantSchema,
-  ri as tenantSettingsSchema,
-  No as themeInsertSchema,
-  Kn as themeSchema,
-  Wn as tokenResponseSchema,
-  dn as totalsSchema,
-  Tn as uiScreenSchema,
+  Io as tenantInsertSchema,
+  Vn as tenantSchema,
+  _i as tenantSettingsSchema,
+  ko as themeInsertSchema,
+  Zn as themeSchema,
+  Yn as tokenResponseSchema,
+  hn as totalsSchema,
+  kn as uiScreenSchema,
   Oe as userInsertSchema,
-  Yo as userOrganizationInsertSchema,
-  ai as userOrganizationSchema,
-  Uo as userPermissionInsertSchema,
-  Jn as userPermissionListSchema,
-  Fo as userPermissionSchema,
-  ei as userPermissionWithDetailsListSchema,
-  Po as userPermissionWithDetailsSchema,
-  gn as userResponseSchema,
-  Mo as userRoleInsertSchema,
-  ti as userRoleListSchema,
-  Ho as userRoleSchema,
-  Ne as userSchema,
+  $o as userOrganizationInsertSchema,
+  di as userOrganizationSchema,
+  Mo as userPermissionInsertSchema,
+  ai as userPermissionListSchema,
+  Ho as userPermissionSchema,
+  si as userPermissionWithDetailsListSchema,
+  Go as userPermissionWithDetailsSchema,
+  fn as userResponseSchema,
+  Bo as userRoleInsertSchema,
+  ri as userRoleListSchema,
+  Wo as userRoleSchema,
+  we as userSchema,
   nt as verificationMethodsSchema,
   Lt as widgetComponentSchema,
-  Oo as widgetSchema
+  jo as widgetSchema
 };