@authhero/adapter-interfaces 2.10.0 → 2.12.0

package/dist/adapter-interfaces.d.ts

@@ -7992,6 +7992,8 @@ declare enum LoginSessionState {
     AWAITING_HOOK = "awaiting_hook",
     /** Waiting for user to complete action on continuation page (change-email, account, etc.) */
     AWAITING_CONTINUATION = "awaiting_continuation",
+    /** Waiting for user to approve OAuth consent for a third-party client */
+    AWAITING_CONSENT = "awaiting_consent",
     /** Tokens issued successfully */
     COMPLETED = "completed",
     /** Authentication failed (wrong password, blocked, etc.) */
@@ -8164,6 +8166,7 @@ declare const LogTypes: {
     readonly FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN: "fercft";
     readonly FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN: "ferrt";
     readonly FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN: "fertft";
+    readonly FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN: "festft";
     readonly FAILED_HOOK: "fh";
     readonly FAILED_IMPERSONATION: "fimp";
     readonly FAILED_INVITE_ACCEPT: "fi";
@@ -8257,6 +8260,7 @@ declare const LogTypes: {
     readonly SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN: "sepkrcft";
     readonly SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN: "sercft";
     readonly SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN: "sertft";
+    readonly SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN: "sestft";
     readonly SUCCESS_IMPERSONATION: "simp";
     readonly SUCCESSFULLY_ACCEPTED_USER_INVITE: "si";
     readonly BREACHED_PASSWORD_ON_SIGNUP: "signup_pwd_leak";
@@ -8303,7 +8307,7 @@ declare const LocationInfo: z.ZodObject<{
     continent_code: z.ZodString;
 }, z.core.$strip>;
 declare const logInsertSchema: z.ZodObject<{
-    type: z.ZodString & z.ZodType<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string, z.core.$ZodTypeInternals<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string>>;
+    type: z.ZodString & z.ZodType<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string, z.core.$ZodTypeInternals<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string>>;
     date: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
     ip: z.ZodOptional<z.ZodString>;
@@ -8340,7 +8344,7 @@ declare const logInsertSchema: z.ZodObject<{
 }, z.core.$strip>;
 type LogInsert = z.infer<typeof logInsertSchema>;
 declare const logSchema: z.ZodObject<{
-    type: z.ZodString & z.ZodType<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string, z.core.$ZodTypeInternals<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string>>;
+    type: z.ZodString & z.ZodType<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string, z.core.$ZodTypeInternals<"fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum", string>>;
     date: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
     ip: z.ZodOptional<z.ZodString>;
@@ -9048,7 +9052,8 @@ declare enum GrantType {
     ClientCredential = "client_credentials",
     Passwordless = "passwordless",
     Password = "password",
-    OTP = "http://auth0.com/oauth/grant-type/passwordless/otp"
+    OTP = "http://auth0.com/oauth/grant-type/passwordless/otp",
+    TokenExchange = "urn:ietf:params:oauth:grant-type:token-exchange"
 }
 declare const tokenResponseSchema: z.ZodObject<{
     access_token: z.ZodString;
@@ -9432,6 +9437,7 @@ declare const handlerConfigSchema: z.ZodObject<{
 }, z.core.$strip>;
 type HandlerConfig = z.infer<typeof handlerConfigSchema>;
 declare const proxyRouteInsertSchema: z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
     custom_domain_id: z.ZodString;
     priority: z.ZodDefault<z.ZodNumber>;
     match: z.ZodObject<{
@@ -9748,6 +9754,22 @@ declare const rolePermissionListSchema: z.ZodArray<z.ZodObject<{
 }, z.core.$strip>>;
 type RolePermissionList = z.infer<typeof rolePermissionListSchema>;
 
+declare const grantInsertSchema: z.ZodObject<{
+    user_id: z.ZodString;
+    clientID: z.ZodString;
+    audience: z.ZodOptional<z.ZodString>;
+    scope: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+type GrantInsert = z.input<typeof grantInsertSchema>;
+declare const grantSchema: z.ZodObject<{
+    user_id: z.ZodString;
+    clientID: z.ZodString;
+    audience: z.ZodOptional<z.ZodString>;
+    scope: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    id: z.ZodString;
+}, z.core.$strip>;
+type Grant = z.infer<typeof grantSchema>;
+
 declare const userPermissionInsertSchema: z.ZodObject<{
     user_id: z.ZodString;
     resource_server_identifier: z.ZodString;
@@ -10897,6 +10919,22 @@ interface RolePermissionsAdapter {
     list(tenant_id: string, role_id: string, params?: ListParams): Promise<RolePermissionList>;
 }
 
+interface ListGrantsResponse extends Totals {
+    grants: Grant[];
+}
+interface GrantsAdapter {
+    /**
+     * Upsert a grant. If a row already exists for
+     * (tenant_id, user_id, clientID, audience) the supplied scopes are unioned
+     * into the stored scope array; otherwise a new row is created.
+     */
+    create: (tenant_id: string, grant: GrantInsert) => Promise<Grant>;
+    get: (tenant_id: string, user_id: string, clientID: string, audience?: string) => Promise<Grant | null>;
+    list: (tenant_id: string, params?: ListParams) => Promise<ListGrantsResponse>;
+    remove: (tenant_id: string, id: string) => Promise<boolean>;
+    removeByUser: (tenant_id: string, user_id: string) => Promise<boolean>;
+}
+
 interface UserPermissionsAdapter {
     create(tenant_id: string, user_id: string, permission: UserPermissionInsert, organization_id?: string): Promise<boolean>;
     remove(tenant_id: string, user_id: string, permission: Pick<UserPermissionInsert, "resource_server_identifier" | "permission_name">, organization_id?: string): Promise<boolean>;
@@ -11288,6 +11326,19 @@ interface DataAdapters {
     refreshTokens: RefreshTokensAdapter;
     resourceServers: ResourceServersAdapter;
     rolePermissions: RolePermissionsAdapter;
+    /**
+     * Optional store for per-(user, client) OAuth grants. When set,
+     * third-party clients (`is_first_party=false`) must have a grant
+     * covering the requested non-basic scopes; without it, silent auth returns
+     * `consent_required` and interactive auth redirects to the consent screen.
+     * When undefined, the consent gate fails closed for third-party clients —
+     * deployments that don't ship this adapter effectively can't run third-party
+     * clients through the standard authorize flow.
+     *
+     * Auth0 parity: surfaced as `/api/v2/grants` (distinct from M2M
+     * `/api/v2/client-grants`, which is `clientGrants` above).
+     */
+    grants?: GrantsAdapter;
     userPermissions: UserPermissionsAdapter;
     roles: RolesAdapter;
     sessions: SessionsAdapter;
@@ -11361,5 +11412,5 @@ interface DataAdapters {
     };
 }
 
-export { Auth0ActionEnum, Auth0Client, AuthorizationResponseMode, AuthorizationResponseType, CodeChallengeMethod, ComponentCategory, ComponentType, EmailActionEnum, FORM_FIELD_TYPES, FlowActionTypeEnum, GrantType, LocationInfo, LogTypes, LoginSessionState, NodeType, RedirectTargetEnum, Strategy, StrategyType, actionDependencySchema, actionExecutionErrorSchema, actionExecutionInsertSchema, actionExecutionLogEntrySchema, actionExecutionLogsSchema, actionExecutionResultSchema, actionExecutionSchema, actionExecutionStatusSchema, actionExecutionTriggerIdSchema, actionInsertSchema, actionNodeSchema, actionSchema, actionSecretSchema, actionTriggerSchema, actionUpdateSchema, actionVersionInsertSchema, actionVersionSchema, activeUsersResponseSchema, actorSchema, addressSchema, analyticsColumnMetaSchema, analyticsGroupBySchema, analyticsIntervalSchema, analyticsQueryResponseSchema, analyticsResourceSchema, analyticsStatisticsSchema, analyticsUserTypeSchema, attackProtectionSchema, auditCategorySchema, auditEventInsertSchema, auditEventSchema, auth0ClientSchema, auth0FlowInsertSchema, auth0FlowSchema, auth0QuerySchema, auth0UpdateUserActionSchema, auth0UserResponseSchema, authParamsSchema, authenticationMethodInsertSchema, authenticationMethodSchema, authenticationMethodTypeSchema, baseUserSchema, blockComponentSchema, bordersSchema, brandingSchema, breachedPasswordDetectionSchema, bruteForceProtectionSchema, buttonComponentSchema, claimsRequestSchema, clientGrantInsertSchema, clientGrantListSchema, clientGrantSchema, clientInsertSchema, clientRegistrationTokenInsertSchema, clientRegistrationTokenSchema, clientRegistrationTokenTypeSchema, clientSchema, codeInsertSchema, codeSchema, codeTypeSchema, colorsSchema, componentMessageSchema, componentSchema, connectionInsertSchema, connectionOptionsSchema, connectionSchema, coordinatesSchema, createPassthroughAdapter, createWriteOnlyAdapter, customDomainCertificateUploadSchema, customDomainInsertSchema, customDomainSchema, customDomainWithTenantIdSchema, customTextEntrySchema, customTextSchema, dailyStatsSchema, emailProviderSchema, emailTemplateNameSchema, emailTemplateSchema, emailVerificationRulesSchema, emailVerifyActionSchema, endingSchema, fieldComponentSchema, flowActionStepSchema, flowInsertSchema, flowSchema, fieldComponentSchema$1 as flowsFieldComponentSchema, flowNodeSchema$1 as flowsFlowNodeSchema, stepNodeSchema$1 as flowsStepNodeSchema, fontDetailsSchema, fontsSchema, formControlSchema, formInsertSchema, formNodeComponentDefinition, formNodeSchema, formSchema, genericComponentSchema, genericNodeSchema, getConnectionIdentifierConfig, getLogTypeCategory, getLogTypeDescription, handlerConfigSchema, hookCodeInsertSchema, hookCodeSchema, hookInsertSchema, hookSchema, hookTemplateId, hookTemplates, identitySchema, inviteInsertSchema, inviteSchema, inviteeSchema, inviterSchema, isBlockComponent, isFieldComponent, isPlainObject, isWidgetComponent, jwksKeySchema, jwksSchema, legalComponentSchema, locationInfoSchema, logInsertSchema, logSchema, logStreamFilterSchema, logStreamInsertSchema, logStreamSchema, logStreamStatusSchema, logStreamTypeSchema, logTypeCategories, logTypeDescriptions, loginSessionAuthStrategySchema, loginSessionInsertSchema, loginSessionSchema, loginSessionStateSchema, matchSchema, migrationProviderTypeSchema, migrationSourceCredentialsSchema, migrationSourceInsertSchema, migrationSourceSchema, nodeSchema, openIDConfigurationSchema, organizationBrandingSchema, organizationConnectionInsertSchema, organizationConnectionListSchema, organizationConnectionSchema, organizationEnabledConnectionSchema, organizationInsertSchema, organizationSchema, organizationTokenQuotaSchema, pageBackgroundSchema, parseUserId, passwordInsertSchema, passwordSchema, profileDataSchema, promptScreenSchema, promptSettingSchema, proxyRouteInsertSchema, proxyRouteSchema, proxyRouteUpdateSchema, redirectActionSchema, refreshTokenInsertSchema, refreshTokenSchema, requestContextSchema, resourceServerInsertSchema, resourceServerListSchema, resourceServerOptionsSchema, resourceServerSchema, resourceServerScopeSchema, responseContextSchema, richTextComponentSchema, roleInsertSchema, roleListSchema, rolePermissionInsertSchema, rolePermissionListSchema, rolePermissionSchema, roleSchema, screenLinkSchema, sessionInsertSchema, sessionSchema, signingKeySchema, smsProviderSchema, smsSendParamsSchema, startSchema, suspiciousIpThrottlingSchema, targetSchema, tenantInsertSchema, tenantSchema, tenantSettingsSchema, themeInsertSchema, themeSchema, tokenResponseSchema, totalsSchema, uiScreenSchema, userInsertSchema, userOrganizationInsertSchema, userOrganizationSchema, userPermissionInsertSchema, userPermissionListSchema, userPermissionSchema, userPermissionWithDetailsListSchema, userPermissionWithDetailsSchema, userResponseSchema, userRoleInsertSchema, userRoleListSchema, userRoleSchema, userSchema, verificationMethodsSchema, widgetComponentSchema, widgetSchema };
-export type { Action, ActionExecution, ActionExecutionError, ActionExecutionInsert, ActionExecutionLogEntry, ActionExecutionLogs, ActionExecutionResult, ActionExecutionStatus, ActionExecutionsAdapter, ActionInsert, ActionNode, ActionUpdate, ActionVersion, ActionVersionInsert, ActionVersionsAdapter, ActionsAdapter, ActiveUsersResponse, Actor, Address, AnalyticsAdapter, AnalyticsColumnMeta, AnalyticsFilters, AnalyticsGroupBy, AnalyticsInterval, AnalyticsQueryParams, AnalyticsQueryResponse, AnalyticsResource, AnalyticsUserType, AttackProtection, AuditCategory, AuditEvent, AuditEventInsert, Auth0Flow, Auth0FlowInsert, Auth0UpdateUserAction, AuthParams, AuthenticationMethod, AuthenticationMethodInsert, AuthenticationMethodType, AuthenticationMethodUpdate, AuthenticationMethodsAdapter, BaseUser, BlockComponent, BooleanField, Branding, BrandingAdapter, BreachedPasswordDetection, BruteForceProtection, ButtonComponent, CacheAdapter, CacheItem, CardsField, ChoiceField, ClaimsRequest, Client, ClientConnectionsAdapter, ClientGrant, ClientGrantInsert, ClientGrantList, ClientGrantsAdapter, ClientInsert, ClientRegistrationToken, ClientRegistrationTokenInsert, ClientRegistrationTokenType, ClientRegistrationTokensAdapter, ClientWithTenantId, ClientsAdapter, Code, CodeExecutionLog, CodeExecutionResult, CodeExecutor, CodeInsert, CodeResponse, CodeType, CodesAdapter, Component, ComponentMessage, Connection, ConnectionInsert, ConnectionsAdapter, ContinuationScope, Coordinates, CountryField, CreateServiceTokenFn, CreateServiceTokenParams, CreateTenantParams, CustomDomain, CustomDomainCertificateUpload, CustomDomainInsert, CustomDomainWithTenantId, CustomDomainsAdapter, CustomField, CustomText, CustomTextAdapter, CustomTextEntry, DailyStats, DataAdapters, DateField, DividerComponent, DropdownField, EmailField, EmailProvider, EmailProvidersAdapter, EmailServiceAdapter, EmailServiceSendParams, EmailTemplate, EmailTemplateName, EmailTemplatesAdapter, EmailVerificationRules, EmailVerifyAction, Ending, FieldComponent, FileField, Flow, FlowActionStep, FlowActionType, FlowInsert, FlowNode, FlowsAdapter, FieldComponent$1 as FlowsFieldComponent, FlowNode$1 as FlowsFlowNode, StepNode$1 as FlowsStepNode, Form, FormControl, FormInsert, FormNode, FormNodeComponent, FormsAdapter, GenericComponent, GenericNode, GeoAdapter, GeoInfo, GmapsAddressWidget, HandlerConfig, Hook, HookCode, HookCodeAdapter, HookCodeInsert, HookInsert, HookTemplateId, HooksAdapter, HtmlComponent, Identity, ImageComponent, Invite, InviteInsert, Invitee, Inviter, InvitesAdapter, JumpButtonComponent, Jwk, Jwks, KeysAdapter, LegalComponent, LegalField, ListActionVersionsResponse, ListActionsResponse, ListClientGrantsResponse, ListCodesResponse, ListConnectionsResponse, ListFailedEventsResponse, ListFlowsResponse, ListFormsResponse, ListHooksResponse, ListInvitesResponse, ListKeysResponse, ListOrganizationsResponse, ListParams, ListProxyRoutesParams, ListProxyRoutesResult, ListRefreshTokenResponse, ListResourceServersResponse, ListRolesResponse, ListSesssionsResponse, ListUserRolesResponse, ListUsersResponse, Log, LogCategory, LogInsert, LogStream, LogStreamInsert, LogStreamsAdapter, LogType, LoginSession, LoginSessionAuthStrategy, LoginSessionInsert, LoginSessionsAdapter, LogsDataAdapter, MigrationProviderType, MigrationSource, MigrationSourceCredentials, MigrationSourceInsert, MigrationSourcesAdapter, NextButtonComponent, Node, NumberField, Organization, OrganizationConnection, OrganizationConnectionInsert, OrganizationConnectionList, OrganizationConnectionsAdapter, OrganizationInsert, OrganizationsAdapter, OutboxAdapter, OutboxEvent, PassthroughConfig, Password, PasswordField, PasswordInsert, PasswordsAdapter, PaymentField, PostUsersBody, PreviousButtonComponent, PromptScreen, PromptSetting, PromptSettingsAdapter, ProxyRoute, ProxyRouteInsert, ProxyRouteUpdate, ProxyRoutesAdapter, RateLimitAdapter, RateLimitDecision, RateLimitScope, RecaptchaWidget, RedirectAction, RedirectTarget, RefreshToken, RefreshTokenInsert, RefreshTokensAdapter, RequestContext, ResendButtonComponent, ResourceServer, ResourceServerInsert, ResourceServerList, ResourceServerOptions, ResourceServerScope, ResourceServersAdapter, ResponseContext, RichTextComponent, Role, RoleInsert, RoleList, RolePermission, RolePermissionInsert, RolePermissionList, RolePermissionsAdapter, RolesAdapter, RouteMatch, RouterNode, RuntimeComponent, ScreenLink, SecondaryAdapterConfig, Session, SessionCleanupParams, SessionInsert, SessionsAdapter, SigningKey, SmsProvider, SmsSendParams, SmsServiceAdapter, SmsServiceSendParams, SocialField, Start, StatsAdapter, StatsListParams, StepNode, SuspiciousIpThrottling, Target, TelField, Tenant, TenantSettings, TenantSettingsAdapter, TenantsDataAdapter, TextField, Theme, ThemeInsert, ThemesAdapter, TokenResponse, Totals, UiScreen, UniversalLoginTemplate, UniversalLoginTemplatesAdapter, UpdateRefreshTokenOptions, UrlField, User, UserDataAdapter, UserInsert, UserOrganization, UserOrganizationInsert, UserOrganizationsAdapter, UserPermission, UserPermissionInsert, UserPermissionList, UserPermissionWithDetails, UserPermissionWithDetailsList, UserPermissionsAdapter, UserResponse, UserRole, UserRoleInsert, UserRoleList, UserRolesAdapter, VerifiableCredentialsWidget, VerificationMethods, WidgetComponent };
+export { Auth0ActionEnum, Auth0Client, AuthorizationResponseMode, AuthorizationResponseType, CodeChallengeMethod, ComponentCategory, ComponentType, EmailActionEnum, FORM_FIELD_TYPES, FlowActionTypeEnum, GrantType, LocationInfo, LogTypes, LoginSessionState, NodeType, RedirectTargetEnum, Strategy, StrategyType, actionDependencySchema, actionExecutionErrorSchema, actionExecutionInsertSchema, actionExecutionLogEntrySchema, actionExecutionLogsSchema, actionExecutionResultSchema, actionExecutionSchema, actionExecutionStatusSchema, actionExecutionTriggerIdSchema, actionInsertSchema, actionNodeSchema, actionSchema, actionSecretSchema, actionTriggerSchema, actionUpdateSchema, actionVersionInsertSchema, actionVersionSchema, activeUsersResponseSchema, actorSchema, addressSchema, analyticsColumnMetaSchema, analyticsGroupBySchema, analyticsIntervalSchema, analyticsQueryResponseSchema, analyticsResourceSchema, analyticsStatisticsSchema, analyticsUserTypeSchema, attackProtectionSchema, auditCategorySchema, auditEventInsertSchema, auditEventSchema, auth0ClientSchema, auth0FlowInsertSchema, auth0FlowSchema, auth0QuerySchema, auth0UpdateUserActionSchema, auth0UserResponseSchema, authParamsSchema, authenticationMethodInsertSchema, authenticationMethodSchema, authenticationMethodTypeSchema, baseUserSchema, blockComponentSchema, bordersSchema, brandingSchema, breachedPasswordDetectionSchema, bruteForceProtectionSchema, buttonComponentSchema, claimsRequestSchema, clientGrantInsertSchema, clientGrantListSchema, clientGrantSchema, clientInsertSchema, clientRegistrationTokenInsertSchema, clientRegistrationTokenSchema, clientRegistrationTokenTypeSchema, clientSchema, codeInsertSchema, codeSchema, codeTypeSchema, colorsSchema, componentMessageSchema, componentSchema, connectionInsertSchema, connectionOptionsSchema, connectionSchema, coordinatesSchema, createPassthroughAdapter, createWriteOnlyAdapter, customDomainCertificateUploadSchema, customDomainInsertSchema, customDomainSchema, customDomainWithTenantIdSchema, customTextEntrySchema, customTextSchema, dailyStatsSchema, emailProviderSchema, emailTemplateNameSchema, emailTemplateSchema, emailVerificationRulesSchema, emailVerifyActionSchema, endingSchema, fieldComponentSchema, flowActionStepSchema, flowInsertSchema, flowSchema, fieldComponentSchema$1 as flowsFieldComponentSchema, flowNodeSchema$1 as flowsFlowNodeSchema, stepNodeSchema$1 as flowsStepNodeSchema, fontDetailsSchema, fontsSchema, formControlSchema, formInsertSchema, formNodeComponentDefinition, formNodeSchema, formSchema, genericComponentSchema, genericNodeSchema, getConnectionIdentifierConfig, getLogTypeCategory, getLogTypeDescription, grantInsertSchema, grantSchema, handlerConfigSchema, hookCodeInsertSchema, hookCodeSchema, hookInsertSchema, hookSchema, hookTemplateId, hookTemplates, identitySchema, inviteInsertSchema, inviteSchema, inviteeSchema, inviterSchema, isBlockComponent, isFieldComponent, isPlainObject, isWidgetComponent, jwksKeySchema, jwksSchema, legalComponentSchema, locationInfoSchema, logInsertSchema, logSchema, logStreamFilterSchema, logStreamInsertSchema, logStreamSchema, logStreamStatusSchema, logStreamTypeSchema, logTypeCategories, logTypeDescriptions, loginSessionAuthStrategySchema, loginSessionInsertSchema, loginSessionSchema, loginSessionStateSchema, matchSchema, migrationProviderTypeSchema, migrationSourceCredentialsSchema, migrationSourceInsertSchema, migrationSourceSchema, nodeSchema, openIDConfigurationSchema, organizationBrandingSchema, organizationConnectionInsertSchema, organizationConnectionListSchema, organizationConnectionSchema, organizationEnabledConnectionSchema, organizationInsertSchema, organizationSchema, organizationTokenQuotaSchema, pageBackgroundSchema, parseUserId, passwordInsertSchema, passwordSchema, profileDataSchema, promptScreenSchema, promptSettingSchema, proxyRouteInsertSchema, proxyRouteSchema, proxyRouteUpdateSchema, redirectActionSchema, refreshTokenInsertSchema, refreshTokenSchema, requestContextSchema, resourceServerInsertSchema, resourceServerListSchema, resourceServerOptionsSchema, resourceServerSchema, resourceServerScopeSchema, responseContextSchema, richTextComponentSchema, roleInsertSchema, roleListSchema, rolePermissionInsertSchema, rolePermissionListSchema, rolePermissionSchema, roleSchema, screenLinkSchema, sessionInsertSchema, sessionSchema, signingKeySchema, smsProviderSchema, smsSendParamsSchema, startSchema, suspiciousIpThrottlingSchema, targetSchema, tenantInsertSchema, tenantSchema, tenantSettingsSchema, themeInsertSchema, themeSchema, tokenResponseSchema, totalsSchema, uiScreenSchema, userInsertSchema, userOrganizationInsertSchema, userOrganizationSchema, userPermissionInsertSchema, userPermissionListSchema, userPermissionSchema, userPermissionWithDetailsListSchema, userPermissionWithDetailsSchema, userResponseSchema, userRoleInsertSchema, userRoleListSchema, userRoleSchema, userSchema, verificationMethodsSchema, widgetComponentSchema, widgetSchema };
+export type { Action, ActionExecution, ActionExecutionError, ActionExecutionInsert, ActionExecutionLogEntry, ActionExecutionLogs, ActionExecutionResult, ActionExecutionStatus, ActionExecutionsAdapter, ActionInsert, ActionNode, ActionUpdate, ActionVersion, ActionVersionInsert, ActionVersionsAdapter, ActionsAdapter, ActiveUsersResponse, Actor, Address, AnalyticsAdapter, AnalyticsColumnMeta, AnalyticsFilters, AnalyticsGroupBy, AnalyticsInterval, AnalyticsQueryParams, AnalyticsQueryResponse, AnalyticsResource, AnalyticsUserType, AttackProtection, AuditCategory, AuditEvent, AuditEventInsert, Auth0Flow, Auth0FlowInsert, Auth0UpdateUserAction, AuthParams, AuthenticationMethod, AuthenticationMethodInsert, AuthenticationMethodType, AuthenticationMethodUpdate, AuthenticationMethodsAdapter, BaseUser, BlockComponent, BooleanField, Branding, BrandingAdapter, BreachedPasswordDetection, BruteForceProtection, ButtonComponent, CacheAdapter, CacheItem, CardsField, ChoiceField, ClaimsRequest, Client, ClientConnectionsAdapter, ClientGrant, ClientGrantInsert, ClientGrantList, ClientGrantsAdapter, ClientInsert, ClientRegistrationToken, ClientRegistrationTokenInsert, ClientRegistrationTokenType, ClientRegistrationTokensAdapter, ClientWithTenantId, ClientsAdapter, Code, CodeExecutionLog, CodeExecutionResult, CodeExecutor, CodeInsert, CodeResponse, CodeType, CodesAdapter, Component, ComponentMessage, Connection, ConnectionInsert, ConnectionsAdapter, ContinuationScope, Coordinates, CountryField, CreateServiceTokenFn, CreateServiceTokenParams, CreateTenantParams, CustomDomain, CustomDomainCertificateUpload, CustomDomainInsert, CustomDomainWithTenantId, CustomDomainsAdapter, CustomField, CustomText, CustomTextAdapter, CustomTextEntry, DailyStats, DataAdapters, DateField, DividerComponent, DropdownField, EmailField, EmailProvider, EmailProvidersAdapter, EmailServiceAdapter, EmailServiceSendParams, EmailTemplate, EmailTemplateName, EmailTemplatesAdapter, EmailVerificationRules, EmailVerifyAction, Ending, FieldComponent, FileField, Flow, FlowActionStep, FlowActionType, FlowInsert, FlowNode, FlowsAdapter, FieldComponent$1 as FlowsFieldComponent, FlowNode$1 as FlowsFlowNode, StepNode$1 as FlowsStepNode, Form, FormControl, FormInsert, FormNode, FormNodeComponent, FormsAdapter, GenericComponent, GenericNode, GeoAdapter, GeoInfo, GmapsAddressWidget, Grant, GrantInsert, GrantsAdapter, HandlerConfig, Hook, HookCode, HookCodeAdapter, HookCodeInsert, HookInsert, HookTemplateId, HooksAdapter, HtmlComponent, Identity, ImageComponent, Invite, InviteInsert, Invitee, Inviter, InvitesAdapter, JumpButtonComponent, Jwk, Jwks, KeysAdapter, LegalComponent, LegalField, ListActionVersionsResponse, ListActionsResponse, ListClientGrantsResponse, ListCodesResponse, ListConnectionsResponse, ListFailedEventsResponse, ListFlowsResponse, ListFormsResponse, ListGrantsResponse, ListHooksResponse, ListInvitesResponse, ListKeysResponse, ListOrganizationsResponse, ListParams, ListProxyRoutesParams, ListProxyRoutesResult, ListRefreshTokenResponse, ListResourceServersResponse, ListRolesResponse, ListSesssionsResponse, ListUserRolesResponse, ListUsersResponse, Log, LogCategory, LogInsert, LogStream, LogStreamInsert, LogStreamsAdapter, LogType, LoginSession, LoginSessionAuthStrategy, LoginSessionInsert, LoginSessionsAdapter, LogsDataAdapter, MigrationProviderType, MigrationSource, MigrationSourceCredentials, MigrationSourceInsert, MigrationSourcesAdapter, NextButtonComponent, Node, NumberField, Organization, OrganizationConnection, OrganizationConnectionInsert, OrganizationConnectionList, OrganizationConnectionsAdapter, OrganizationInsert, OrganizationsAdapter, OutboxAdapter, OutboxEvent, PassthroughConfig, Password, PasswordField, PasswordInsert, PasswordsAdapter, PaymentField, PostUsersBody, PreviousButtonComponent, PromptScreen, PromptSetting, PromptSettingsAdapter, ProxyRoute, ProxyRouteInsert, ProxyRouteUpdate, ProxyRoutesAdapter, RateLimitAdapter, RateLimitDecision, RateLimitScope, RecaptchaWidget, RedirectAction, RedirectTarget, RefreshToken, RefreshTokenInsert, RefreshTokensAdapter, RequestContext, ResendButtonComponent, ResourceServer, ResourceServerInsert, ResourceServerList, ResourceServerOptions, ResourceServerScope, ResourceServersAdapter, ResponseContext, RichTextComponent, Role, RoleInsert, RoleList, RolePermission, RolePermissionInsert, RolePermissionList, RolePermissionsAdapter, RolesAdapter, RouteMatch, RouterNode, RuntimeComponent, ScreenLink, SecondaryAdapterConfig, Session, SessionCleanupParams, SessionInsert, SessionsAdapter, SigningKey, SmsProvider, SmsSendParams, SmsServiceAdapter, SmsServiceSendParams, SocialField, Start, StatsAdapter, StatsListParams, StepNode, SuspiciousIpThrottling, Target, TelField, Tenant, TenantSettings, TenantSettingsAdapter, TenantsDataAdapter, TextField, Theme, ThemeInsert, ThemesAdapter, TokenResponse, Totals, UiScreen, UniversalLoginTemplate, UniversalLoginTemplatesAdapter, UpdateRefreshTokenOptions, UrlField, User, UserDataAdapter, UserInsert, UserOrganization, UserOrganizationInsert, UserOrganizationsAdapter, UserPermission, UserPermissionInsert, UserPermissionList, UserPermissionWithDetails, UserPermissionWithDetailsList, UserPermissionsAdapter, UserResponse, UserRole, UserRoleInsert, UserRoleList, UserRolesAdapter, VerifiableCredentialsWidget, VerificationMethods, WidgetComponent };

package/dist/adapter-interfaces.mjs

@@ -351,7 +351,7 @@ var t = e.object({
 		"oag"
 	]).default("regular_web").optional().openapi({ description: "The type of application this client represents" }),
 	logo_uri: e.string().url().optional().openapi({ description: "URL of the logo to display for this client. Recommended size is 150x150 pixels." }),
-	is_first_party: e.boolean().default(!1).openapi({ description: "Whether this client a first party client (true) or not (false)." }),
+	is_first_party: e.boolean().default(!0).openapi({ description: "Whether this client is a first party client (true) or not (false). First-party clients skip the consent screen; third-party clients require explicit user consent for non-basic scopes." }),
 	oidc_conformant: e.boolean().default(!0).openapi({ description: "Whether this client conforms to strict OIDC specifications (true) or uses legacy features (false)." }),
 	auth0_conformant: e.boolean().default(!0).openapi({ description: "Whether this client follows Auth0-compatible behavior (true) or strict OIDC behavior (false). When true, profile/email claims are included in the ID token when scopes are requested. When false, these claims are only available from the userinfo endpoint (strict OIDC 5.4 compliance)." }),
 	callbacks: e.array(e.string()).default([]).optional().openapi({ description: "Comma-separated list of URLs whitelisted for Auth0 to use as a callback to the client after authentication." }),
@@ -1412,7 +1412,7 @@ var Kt = e.enum([
 	token_endpoint_auth_signing_alg_values_supported: e.array(e.string()),
 	client_id_metadata_document_supported: e.boolean().optional()
 }), _n = /* @__PURE__ */ function(e) {
-	return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
+	return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.AWAITING_CONSENT = "awaiting_consent", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
 }({}), vn = e.nativeEnum(_n), yn = e.object({
 	strategy: e.string(),
 	strategy_type: e.string()
@@ -1479,6 +1479,7 @@ var Kt = e.enum([
 	FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN: "fercft",
 	FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN: "ferrt",
 	FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN: "fertft",
+	FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN: "festft",
 	FAILED_HOOK: "fh",
 	FAILED_IMPERSONATION: "fimp",
 	FAILED_INVITE_ACCEPT: "fi",
@@ -1572,6 +1573,7 @@ var Kt = e.enum([
 	SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN: "sepkrcft",
 	SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN: "sercft",
 	SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN: "sertft",
+	SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN: "sestft",
 	SUCCESS_IMPERSONATION: "simp",
 	SUCCESSFULLY_ACCEPTED_USER_INVITE: "si",
 	BREACHED_PASSWORD_ON_SIGNUP: "signup_pwd_leak",
@@ -1637,6 +1639,7 @@ var Kt = e.enum([
 	[X.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Failed Exchange Password MFA Recovery for Access Token",
 	[X.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN]: "Failed Exchange Rotating Refresh Token",
 	[X.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Refresh Token for Access Token",
+	[X.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Subject Token for Access Token",
 	[X.FAILED_HOOK]: "Failed Hook",
 	[X.FAILED_IMPERSONATION]: "Failed Impersonation",
 	[X.FAILED_INVITE_ACCEPT]: "Failed Invite Accept",
@@ -1730,6 +1733,7 @@ var Kt = e.enum([
 	[X.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Passkey MFA Recovery for Access Token",
 	[X.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Password MFA Recovery for Access Token",
 	[X.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Refresh Token for Access Token",
+	[X.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Subject Token for Access Token",
 	[X.SUCCESS_IMPERSONATION]: "Success Impersonation",
 	[X.SUCCESSFULLY_ACCEPTED_USER_INVITE]: "Successfully Accepted User Invite",
 	[X.BREACHED_PASSWORD_ON_SIGNUP]: "Breached Password on Signup",
@@ -2060,7 +2064,7 @@ var Dn = e.object({
 	id: e.string(),
 	is_control_plane: e.boolean().optional()
 }), Zn = /* @__PURE__ */ function(e) {
-	return e.RefreshToken = "refresh_token", e.AuthorizationCode = "authorization_code", e.ClientCredential = "client_credentials", e.Passwordless = "passwordless", e.Password = "password", e.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", e;
+	return e.RefreshToken = "refresh_token", e.AuthorizationCode = "authorization_code", e.ClientCredential = "client_credentials", e.Passwordless = "passwordless", e.Password = "password", e.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", e.TokenExchange = "urn:ietf:params:oauth:grant-type:token-exchange", e;
 }({}), Qn = e.object({
 	access_token: e.string(),
 	id_token: e.string().optional(),
@@ -2181,6 +2185,7 @@ var $n = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
 }), $ = e.object({
+	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
 	match: sr,
@@ -2190,7 +2195,10 @@ var $n = e.object({
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), ur = $.partial().omit({ custom_domain_id: !0 }), dr = e.object({
+}), ur = $.partial().omit({
+	id: !0,
+	custom_domain_id: !0
+}), dr = e.object({
 	name: e.string(),
 	enabled: e.boolean().optional().default(!0),
 	default_from_address: e.string().optional(),
@@ -2281,14 +2289,19 @@ var $n = e.object({
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
 }), wr = Cr.extend({ created_at: e.string() }), Tr = e.array(wr), Er = e.object({
+	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
+	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
+	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
+	scope: e.array(e.string()).default([]).openapi({ description: "The list of OAuth scopes the user has consented to" })
+}), Dr = Er.extend({ id: e.string() }), Or = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
 	organization_id: e.string().optional()
-}), Dr = Er.extend({
+}), kr = Or.extend({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
-}), Or = e.array(Dr), kr = e.object({
+}), Ar = e.array(kr), jr = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -2296,65 +2309,65 @@ var $n = e.object({
 	description: e.string().nullable().optional(),
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
-}), Ar = e.array(kr), jr = e.object({
+}), Mr = e.array(jr), Nr = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
-}), Mr = jr.extend({
+}), Pr = Nr.extend({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
-}), Nr = e.array(Mr), Pr = e.object({
+}), Fr = e.array(Pr), Ir = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional().openapi({ description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios." })
-}), Fr = Pr.extend({
+}), Lr = Ir.extend({
 	id: e.string().openapi({ description: "The unique identifier of the role" }),
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Ir = e.array(Fr), Lr = e.object({
+}), Rr = e.array(Lr), zr = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), Rr = e.object({
+}).optional(), Br = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), zr = e.object({ client_credentials: e.object({
+}), Vr = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
-}).optional() }).optional(), Br = e.object({
+}).optional() }).optional(), Hr = e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: Lr,
+	branding: zr,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(Rr).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: zr
-}), Vr = Br.extend(t.shape).extend({
+	enabled_connections: e.array(Br).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: Vr
+}), Ur = Hr.extend(t.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
-}), Hr = e.object({
+}), Wr = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
 	is_signup_enabled: e.boolean().optional().default(!0)
-}), Ur = Hr.extend({
+}), Gr = Wr.extend({
 	connection: e.object({
 		name: e.string().optional(),
 		strategy: e.string().optional()
 	}).optional(),
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Wr = e.array(Ur), Gr = e.object({
+}), Kr = e.array(Gr), qr = e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
-}), Kr = Gr.extend(t.shape).extend({ id: e.string() }), qr = e.object({
+}), Jr = qr.extend(t.shape).extend({ id: e.string() }), Yr = e.object({
 	idle_session_lifetime: e.number().default(72),
 	session_lifetime: e.number().default(168),
 	session_cookie: e.object({ mode: e.enum(["persistent", "non-persistent"]).optional() }).optional(),
@@ -2433,7 +2446,7 @@ var $n = e.object({
 		}).optional(),
 		phone_message: e.object({ message: e.string().optional() }).optional()
 	}).optional()
-}), Jr = e.object({
+}), Xr = e.object({
 	date: e.string().openapi({
 		description: "Date these events occurred in ISO 8601 format",
 		example: "2025-12-19"
@@ -2458,55 +2471,55 @@ var $n = e.object({
 		description: "Approximate date and time the first event occurred in ISO 8601 format",
 		example: "2025-12-19T00:00:00.000Z"
 	})
-}), Yr = e.number().openapi({
+}), Zr = e.number().openapi({
 	description: "Number of active users in the last 30 days",
 	example: 1234
-}), Xr = e.enum([
+}), Qr = e.enum([
 	"active-users",
 	"logins",
 	"signups",
 	"refresh-tokens",
 	"sessions"
-]), Zr = e.enum([
+]), $r = e.enum([
 	"hour",
 	"day",
 	"week",
 	"month"
-]), Qr = e.enum([
+]), ei = e.enum([
 	"time",
 	"connection",
 	"client_id",
 	"user_type",
 	"event"
-]), $r = e.enum([
+]), ti = e.enum([
 	"password",
 	"social",
 	"passwordless",
 	"enterprise"
-]), ei = e.object({
+]), ni = e.object({
 	name: e.string(),
 	type: e.string()
-}), ti = e.object({
+}), ri = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
-}), ni = e.object({
-	meta: e.array(ei),
+}), ii = e.object({
+	meta: e.array(ni),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: ti.optional()
-}), ri = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), ii = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+	statistics: ri.optional()
+}), ai = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), oi = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
 		additionalProperties: { type: "string" }
 	}
-}), ai = e.object({
-	prompt: ri,
+}), si = e.object({
+	prompt: ai,
 	language: e.string(),
-	custom_text: ii
-}), oi = {
+	custom_text: oi
+}), ci = {
 	EMAIL: "email",
 	SMS: "sms",
 	USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2521,11 +2534,11 @@ var $n = e.object({
 	SAMLP: "samlp",
 	WAAD: "waad",
 	ADFS: "adfs"
-}, si = {
+}, li = {
 	DATABASE: "database",
 	SOCIAL: "social",
 	PASSWORDLESS: "passwordless"
-}, ci = e.enum([
+}, ui = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -2533,9 +2546,9 @@ var $n = e.object({
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), li = e.object({
+]), di = e.object({
 	user_id: e.string(),
-	type: ci,
+	type: ui,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
 	credential_id: e.string().optional(),
@@ -2546,7 +2559,7 @@ var $n = e.object({
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function ui(t, n) {
+function fi(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -2569,14 +2582,14 @@ function ui(t, n) {
 		path: ["public_key"]
 	}));
 }
-var di = li.superRefine(ui), fi = li.extend({
+var pi = di.superRefine(fi), mi = di.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(ui);
+}).superRefine(fi);
 //#endregion
 //#region src/utils/user-id.ts
-function pi(e) {
+function hi(e) {
 	let [t, n] = e.split("|");
 	if (!t || !n) throw Error(`Invalid user_id: ${e}`);
 	return {
@@ -2586,7 +2599,7 @@ function pi(e) {
 }
 //#endregion
 //#region src/utils/passthrough.ts
-function mi(e) {
+function gi(e) {
 	let { primary: t, secondaries: n, syncMethods: r = [
 		"create",
 		"rawCreate",
@@ -2620,12 +2633,12 @@ function mi(e) {
 		} : i.bind(e) : i;
 	} });
 }
-function hi(e) {
+function _i(e) {
 	return e;
 }
 //#endregion
 //#region src/utils/connection-attributes.ts
-function gi(e) {
+function vi(e) {
 	let t = e?.options;
 	if (!t) return {
 		usernameIdentifierActive: !1,
@@ -2648,8 +2661,8 @@ function gi(e) {
 }
 //#endregion
 //#region src/utils/guards.ts
-function _i(e) {
+function yi(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
 //#endregion
-export { he as Auth0ActionEnum, Dn as Auth0Client, Re as AuthorizationResponseMode, Le as AuthorizationResponseType, ze as CodeChallengeMethod, M as ComponentCategory, j as ComponentType, ge as EmailActionEnum, Mt as FORM_FIELD_TYPES, me as FlowActionTypeEnum, Zn as GrantType, On as LocationInfo, X as LogTypes, _n as LoginSessionState, Oe as NodeType, g as RedirectTargetEnum, oi as Strategy, si as StrategyType, r as actionDependencySchema, l as actionExecutionErrorSchema, ae as actionExecutionInsertSchema, ne as actionExecutionLogEntrySchema, re as actionExecutionLogsSchema, te as actionExecutionResultSchema, ie as actionExecutionSchema, c as actionExecutionStatusSchema, s as actionExecutionTriggerIdSchema, a as actionInsertSchema, Ae as actionNodeSchema, ee as actionSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, u as actionVersionInsertSchema, oe as actionVersionSchema, Yr as activeUsersResponseSchema, ce as actorSchema, x as addressSchema, ei as analyticsColumnMetaSchema, Qr as analyticsGroupBySchema, Zr as analyticsIntervalSchema, ni as analyticsQueryResponseSchema, Xr as analyticsResourceSchema, ti as analyticsStatisticsSchema, $r as analyticsUserTypeSchema, Hn as attackProtectionSchema, se as auditCategorySchema, f as auditEventInsertSchema, pe as auditEventSchema, d as auth0ClientSchema, Ie as auth0FlowInsertSchema, Fe as auth0FlowSchema, ve as auth0QuerySchema, m as auth0UpdateUserActionSchema, xe as auth0UserResponseSchema, He as authParamsSchema, di as authenticationMethodInsertSchema, fi as authenticationMethodSchema, ci as authenticationMethodTypeSchema, S as baseUserSchema, kt as blockComponentSchema, $n as bordersSchema, Ue as brandingSchema, zn as breachedPasswordDetectionSchema, Bn as bruteForceProtectionSchema, F as buttonComponentSchema, Ve as claimsRequestSchema, E as clientGrantInsertSchema, Ee as clientGrantListSchema, D as clientGrantSchema, T as clientInsertSchema, k as clientRegistrationTokenInsertSchema, De as clientRegistrationTokenSchema, O as clientRegistrationTokenTypeSchema, Te as clientSchema, Ge as codeInsertSchema, Ke as codeSchema, We as codeTypeSchema, er as colorsSchema, Bt as componentMessageSchema, z as componentSchema, Je as connectionInsertSchema, qe as connectionOptionsSchema, Ye as connectionSchema, A as coordinatesSchema, mi as createPassthroughAdapter, hi as createWriteOnlyAdapter, et as customDomainCertificateUploadSchema, Xe as customDomainInsertSchema, Qe as customDomainSchema, $e as customDomainWithTenantIdSchema, ai as customTextEntrySchema, ii as customTextSchema, Jr as dailyStatsSchema, dr as emailProviderSchema, fr as emailTemplateNameSchema, pr as emailTemplateSchema, p as emailVerificationRulesSchema, h as emailVerifyActionSchema, Pe as endingSchema, jt as fieldComponentSchema, v as flowActionStepSchema, y as flowInsertSchema, _e as flowSchema, L as flowsFieldComponentSchema, ke as flowsFlowNodeSchema, B as flowsStepNodeSchema, Q as fontDetailsSchema, tr as fontsSchema, Nt as formControlSchema, Rt as formInsertSchema, K as formNodeComponentDefinition, Lt as formNodeSchema, zt as formSchema, R as genericComponentSchema, je as genericNodeSchema, gi as getConnectionIdentifierConfig, En as getLogTypeCategory, Tn as getLogTypeDescription, cr as handlerConfigSchema, cn as hookCodeInsertSchema, ln as hookCodeSchema, tn as hookInsertSchema, sn as hookSchema, J as hookTemplateId, Xt as hookTemplates, b as identitySchema, fn as inviteInsertSchema, pn as inviteSchema, dn as inviteeSchema, un as inviterSchema, Ut as isBlockComponent, Gt as isFieldComponent, _i as isPlainObject, Wt as isWidgetComponent, hn as jwksKeySchema, mn as jwksSchema, I as legalComponentSchema, fe as locationInfoSchema, kn as logInsertSchema, An as logSchema, Mn as logStreamFilterSchema, Nn as logStreamInsertSchema, Pn as logStreamSchema, Z as logStreamStatusSchema, jn as logStreamTypeSchema, wn as logTypeCategories, Cn as logTypeDescriptions, yn as loginSessionAuthStrategySchema, bn as loginSessionInsertSchema, xn as loginSessionSchema, vn as loginSessionStateSchema, sr as matchSchema, Fn as migrationProviderTypeSchema, In as migrationSourceCredentialsSchema, Ln as migrationSourceInsertSchema, Rn as migrationSourceSchema, Me as nodeSchema, gn as openIDConfigurationSchema, Lr as organizationBrandingSchema, Hr as organizationConnectionInsertSchema, Wr as organizationConnectionListSchema, Ur as organizationConnectionSchema, Rr as organizationEnabledConnectionSchema, Br as organizationInsertSchema, Vr as organizationSchema, zr as organizationTokenQuotaSchema, nr as pageBackgroundSchema, pi as parseUserId, Un as passwordInsertSchema, Wn as passwordSchema, be as profileDataSchema, ri as promptScreenSchema, or as promptSettingSchema, $ as proxyRouteInsertSchema, lr as proxyRouteSchema, ur as proxyRouteUpdateSchema, _ as redirectActionSchema, mr as refreshTokenInsertSchema, hr as refreshTokenSchema, ue as requestContextSchema, br as resourceServerInsertSchema, Sr as resourceServerListSchema, yr as resourceServerOptionsSchema, xr as resourceServerSchema, vr as resourceServerScopeSchema, de as responseContextSchema, P as richTextComponentSchema, Pr as roleInsertSchema, Ir as roleListSchema, Cr as rolePermissionInsertSchema, Tr as rolePermissionListSchema, wr as rolePermissionSchema, Fr as roleSchema, Vt as screenLinkSchema, Kn as sessionInsertSchema, qn as sessionSchema, Jn as signingKeySchema, _r as smsProviderSchema, gr as smsSendParamsSchema, Ne as startSchema, Vn as suspiciousIpThrottlingSchema, le as targetSchema, Yn as tenantInsertSchema, Xn as tenantSchema, qr as tenantSettingsSchema, ir as themeInsertSchema, ar as themeSchema, Qn as tokenResponseSchema, ye as totalsSchema, Ht as uiScreenSchema, C as userInsertSchema, Gr as userOrganizationInsertSchema, Kr as userOrganizationSchema, Er as userPermissionInsertSchema, Or as userPermissionListSchema, Dr as userPermissionSchema, Ar as userPermissionWithDetailsListSchema, kr as userPermissionWithDetailsSchema, Se as userResponseSchema, jr as userRoleInsertSchema, Nr as userRoleListSchema, Mr as userRoleSchema, w as userSchema, Ze as verificationMethodsSchema, At as widgetComponentSchema, rr as widgetSchema };
+export { he as Auth0ActionEnum, Dn as Auth0Client, Re as AuthorizationResponseMode, Le as AuthorizationResponseType, ze as CodeChallengeMethod, M as ComponentCategory, j as ComponentType, ge as EmailActionEnum, Mt as FORM_FIELD_TYPES, me as FlowActionTypeEnum, Zn as GrantType, On as LocationInfo, X as LogTypes, _n as LoginSessionState, Oe as NodeType, g as RedirectTargetEnum, ci as Strategy, li as StrategyType, r as actionDependencySchema, l as actionExecutionErrorSchema, ae as actionExecutionInsertSchema, ne as actionExecutionLogEntrySchema, re as actionExecutionLogsSchema, te as actionExecutionResultSchema, ie as actionExecutionSchema, c as actionExecutionStatusSchema, s as actionExecutionTriggerIdSchema, a as actionInsertSchema, Ae as actionNodeSchema, ee as actionSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, u as actionVersionInsertSchema, oe as actionVersionSchema, Zr as activeUsersResponseSchema, ce as actorSchema, x as addressSchema, ni as analyticsColumnMetaSchema, ei as analyticsGroupBySchema, $r as analyticsIntervalSchema, ii as analyticsQueryResponseSchema, Qr as analyticsResourceSchema, ri as analyticsStatisticsSchema, ti as analyticsUserTypeSchema, Hn as attackProtectionSchema, se as auditCategorySchema, f as auditEventInsertSchema, pe as auditEventSchema, d as auth0ClientSchema, Ie as auth0FlowInsertSchema, Fe as auth0FlowSchema, ve as auth0QuerySchema, m as auth0UpdateUserActionSchema, xe as auth0UserResponseSchema, He as authParamsSchema, pi as authenticationMethodInsertSchema, mi as authenticationMethodSchema, ui as authenticationMethodTypeSchema, S as baseUserSchema, kt as blockComponentSchema, $n as bordersSchema, Ue as brandingSchema, zn as breachedPasswordDetectionSchema, Bn as bruteForceProtectionSchema, F as buttonComponentSchema, Ve as claimsRequestSchema, E as clientGrantInsertSchema, Ee as clientGrantListSchema, D as clientGrantSchema, T as clientInsertSchema, k as clientRegistrationTokenInsertSchema, De as clientRegistrationTokenSchema, O as clientRegistrationTokenTypeSchema, Te as clientSchema, Ge as codeInsertSchema, Ke as codeSchema, We as codeTypeSchema, er as colorsSchema, Bt as componentMessageSchema, z as componentSchema, Je as connectionInsertSchema, qe as connectionOptionsSchema, Ye as connectionSchema, A as coordinatesSchema, gi as createPassthroughAdapter, _i as createWriteOnlyAdapter, et as customDomainCertificateUploadSchema, Xe as customDomainInsertSchema, Qe as customDomainSchema, $e as customDomainWithTenantIdSchema, si as customTextEntrySchema, oi as customTextSchema, Xr as dailyStatsSchema, dr as emailProviderSchema, fr as emailTemplateNameSchema, pr as emailTemplateSchema, p as emailVerificationRulesSchema, h as emailVerifyActionSchema, Pe as endingSchema, jt as fieldComponentSchema, v as flowActionStepSchema, y as flowInsertSchema, _e as flowSchema, L as flowsFieldComponentSchema, ke as flowsFlowNodeSchema, B as flowsStepNodeSchema, Q as fontDetailsSchema, tr as fontsSchema, Nt as formControlSchema, Rt as formInsertSchema, K as formNodeComponentDefinition, Lt as formNodeSchema, zt as formSchema, R as genericComponentSchema, je as genericNodeSchema, vi as getConnectionIdentifierConfig, En as getLogTypeCategory, Tn as getLogTypeDescription, Er as grantInsertSchema, Dr as grantSchema, cr as handlerConfigSchema, cn as hookCodeInsertSchema, ln as hookCodeSchema, tn as hookInsertSchema, sn as hookSchema, J as hookTemplateId, Xt as hookTemplates, b as identitySchema, fn as inviteInsertSchema, pn as inviteSchema, dn as inviteeSchema, un as inviterSchema, Ut as isBlockComponent, Gt as isFieldComponent, yi as isPlainObject, Wt as isWidgetComponent, hn as jwksKeySchema, mn as jwksSchema, I as legalComponentSchema, fe as locationInfoSchema, kn as logInsertSchema, An as logSchema, Mn as logStreamFilterSchema, Nn as logStreamInsertSchema, Pn as logStreamSchema, Z as logStreamStatusSchema, jn as logStreamTypeSchema, wn as logTypeCategories, Cn as logTypeDescriptions, yn as loginSessionAuthStrategySchema, bn as loginSessionInsertSchema, xn as loginSessionSchema, vn as loginSessionStateSchema, sr as matchSchema, Fn as migrationProviderTypeSchema, In as migrationSourceCredentialsSchema, Ln as migrationSourceInsertSchema, Rn as migrationSourceSchema, Me as nodeSchema, gn as openIDConfigurationSchema, zr as organizationBrandingSchema, Wr as organizationConnectionInsertSchema, Kr as organizationConnectionListSchema, Gr as organizationConnectionSchema, Br as organizationEnabledConnectionSchema, Hr as organizationInsertSchema, Ur as organizationSchema, Vr as organizationTokenQuotaSchema, nr as pageBackgroundSchema, hi as parseUserId, Un as passwordInsertSchema, Wn as passwordSchema, be as profileDataSchema, ai as promptScreenSchema, or as promptSettingSchema, $ as proxyRouteInsertSchema, lr as proxyRouteSchema, ur as proxyRouteUpdateSchema, _ as redirectActionSchema, mr as refreshTokenInsertSchema, hr as refreshTokenSchema, ue as requestContextSchema, br as resourceServerInsertSchema, Sr as resourceServerListSchema, yr as resourceServerOptionsSchema, xr as resourceServerSchema, vr as resourceServerScopeSchema, de as responseContextSchema, P as richTextComponentSchema, Ir as roleInsertSchema, Rr as roleListSchema, Cr as rolePermissionInsertSchema, Tr as rolePermissionListSchema, wr as rolePermissionSchema, Lr as roleSchema, Vt as screenLinkSchema, Kn as sessionInsertSchema, qn as sessionSchema, Jn as signingKeySchema, _r as smsProviderSchema, gr as smsSendParamsSchema, Ne as startSchema, Vn as suspiciousIpThrottlingSchema, le as targetSchema, Yn as tenantInsertSchema, Xn as tenantSchema, Yr as tenantSettingsSchema, ir as themeInsertSchema, ar as themeSchema, Qn as tokenResponseSchema, ye as totalsSchema, Ht as uiScreenSchema, C as userInsertSchema, qr as userOrganizationInsertSchema, Jr as userOrganizationSchema, Or as userPermissionInsertSchema, Ar as userPermissionListSchema, kr as userPermissionSchema, Mr as userPermissionWithDetailsListSchema, jr as userPermissionWithDetailsSchema, Se as userResponseSchema, Nr as userRoleInsertSchema, Fr as userRoleListSchema, Pr as userRoleSchema, w as userSchema, Ze as verificationMethodsSchema, At as widgetComponentSchema, rr as widgetSchema };