@authhero/adapter-interfaces 2.2.0 → 2.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/dist/adapter-interfaces.cjs +1 -1
  2. package/dist/adapter-interfaces.d.ts +37 -5
  3. package/dist/adapter-interfaces.mjs +895 -713
  4. package/package.json +1 -1
package/dist/adapter-interfaces.mjs CHANGED
@@ -1,25 +1,25 @@
1
1
  import { z as e } from "@hono/zod-openapi";
2
- const a = e.object({
2
+ const s = e.object({
3
3
  created_at: e.string(),
4
4
  updated_at: e.string()
5
- }), j = e.object({
5
+ }), F = e.object({
6
6
  id: e.string(),
7
7
  version: e.string().optional()
8
- }), k = e.object({
8
+ }), D = e.object({
9
9
  name: e.string(),
10
10
  version: e.string()
11
- }), R = e.object({
11
+ }), U = e.object({
12
12
  name: e.string(),
13
13
  // Optional on writes so PATCH callers can omit the value to preserve the
14
14
  // existing secret. The adapter merges by name when value is missing.
15
15
  value: e.string().optional()
16
- }), v = e.object({
16
+ }), w = e.object({
17
17
  name: e.string().max(255),
18
18
  code: e.string().max(1e5),
19
- supported_triggers: e.array(j).optional(),
19
+ supported_triggers: e.array(F).optional(),
20
20
  runtime: e.string().max(50).optional(),
21
- dependencies: e.array(k).optional(),
22
- secrets: e.array(R).optional(),
21
+ dependencies: e.array(D).optional(),
22
+ secrets: e.array(U).optional(),
23
23
  // Marks this action as a shared template owned by the control-plane tenant.
24
24
  // Other tenants can opt-in by creating a row with the same `name` and
25
25
  // `inherit: true`; at execute time the loader reads code from this row.
@@ -28,10 +28,10 @@ const a = e.object({
28
28
  // read through from the control-plane system action with a matching name.
29
29
  // The local `secrets` still override (local-first then upstream fallback).
30
30
  inherit: e.boolean().optional()
31
- }), rn = v.partial().extend({
31
+ }), ln = w.partial().extend({
32
32
  status: e.enum(["draft", "built"]).optional(),
33
33
  deployed_at: e.string().optional()
34
- }), sn = v.extend({
34
+ }), cn = w.extend({
35
35
  id: e.string(),
36
36
  tenant_id: e.string(),
37
37
  status: e.enum(["draft", "built"]).default("built"),
@@ -43,63 +43,63 @@ const a = e.object({
43
43
  value: e.string().optional()
44
44
  })
45
45
  ).optional(),
46
- ...a.shape
47
- }), ee = e.string(), te = e.enum([
46
+ ...s.shape
47
+ }), te = e.string(), oe = e.enum([
48
48
  "unspecified",
49
49
  "pending",
50
50
  "final",
51
51
  "partial",
52
52
  "canceled",
53
53
  "suspended"
54
- ]), oe = e.object({
54
+ ]), ne = e.object({
55
55
  id: e.string(),
56
56
  msg: e.string(),
57
57
  url: e.string().optional()
58
- }), ne = e.object({
58
+ }), ie = e.object({
59
59
  action_name: e.string(),
60
- error: oe.nullable(),
60
+ error: ne.nullable(),
61
61
  started_at: e.string(),
62
62
  ended_at: e.string()
63
- }), ie = e.object({
63
+ }), ae = e.object({
64
64
  level: e.enum(["log", "info", "warn", "error", "debug"]),
65
65
  message: e.string()
66
- }), ae = e.array(
66
+ }), se = e.array(
67
67
  e.object({
68
68
  action_name: e.string(),
69
- lines: e.array(ie)
69
+ lines: e.array(ae)
70
70
  })
71
71
  ), re = e.object({
72
72
  id: e.string(),
73
73
  tenant_id: e.string(),
74
- trigger_id: ee,
75
- status: te,
76
- results: e.array(ne),
77
- logs: ae.optional(),
74
+ trigger_id: te,
75
+ status: oe,
76
+ results: e.array(ie),
77
+ logs: se.optional(),
78
78
  created_at: e.string(),
79
79
  updated_at: e.string()
80
- }), ln = re.omit({
80
+ }), pn = re.omit({
81
81
  tenant_id: !0,
82
82
  created_at: !0,
83
83
  updated_at: !0
84
- }), se = e.object({
84
+ }), le = e.object({
85
85
  action_id: e.string(),
86
86
  code: e.string().max(1e5),
87
87
  runtime: e.string().max(50).optional(),
88
- dependencies: e.array(k).optional(),
89
- secrets: e.array(R).optional(),
90
- supported_triggers: e.array(j).optional(),
88
+ dependencies: e.array(D).optional(),
89
+ secrets: e.array(U).optional(),
90
+ supported_triggers: e.array(F).optional(),
91
91
  deployed: e.boolean().default(!0)
92
- }), cn = se.extend({
92
+ }), _n = le.extend({
93
93
  id: e.string(),
94
94
  tenant_id: e.string(),
95
95
  number: e.number().int(),
96
- ...a.shape
97
- }), le = e.enum([
96
+ ...s.shape
97
+ }), ce = e.enum([
98
98
  "user_action",
99
99
  "admin_action",
100
100
  "system",
101
101
  "api"
102
- ]), ce = e.object({
102
+ ]), pe = e.object({
103
103
  type: e.enum(["user", "admin", "system", "api_key", "client_credentials"]),
104
104
  id: e.string().optional(),
105
105
  email: e.string().optional(),
@@ -107,7 +107,7 @@ const a = e.object({
107
107
  org_name: e.string().optional(),
108
108
  scopes: e.array(e.string()).optional(),
109
109
  client_id: e.string().optional()
110
- }), pe = e.object({
110
+ }), _e = e.object({
111
111
  type: e.string(),
112
112
  id: e.string(),
113
113
  before: e.record(e.unknown()).optional(),
@@ -121,56 +121,56 @@ const a = e.object({
121
121
  ip: e.string(),
122
122
  user_agent: e.string().optional(),
123
123
  correlation_id: e.string().optional()
124
- }), _e = e.object({
124
+ }), ge = e.object({
125
125
  status_code: e.number(),
126
126
  body: e.unknown().optional()
127
- }), ge = e.object({
127
+ }), ue = e.object({
128
128
  country_code: e.string(),
129
129
  city_name: e.string(),
130
130
  latitude: e.string(),
131
131
  longitude: e.string(),
132
132
  time_zone: e.string(),
133
133
  continent_code: e.string()
134
- }), ue = e.object({
134
+ }), me = e.object({
135
135
  name: e.string(),
136
136
  version: e.string(),
137
137
  env: e.record(e.string()).optional()
138
- }), me = e.object({
138
+ }), Ee = e.object({
139
139
  tenant_id: e.string(),
140
140
  event_type: e.string(),
141
141
  log_type: e.string(),
142
142
  description: e.string().optional(),
143
- category: le,
144
- actor: ce,
145
- target: pe,
143
+ category: ce,
144
+ actor: pe,
145
+ target: _e,
146
146
  request: de,
147
- response: _e.optional(),
147
+ response: ge.optional(),
148
148
  connection: e.string().optional(),
149
149
  strategy: e.string().optional(),
150
150
  strategy_type: e.string().optional(),
151
151
  audience: e.string().optional(),
152
152
  scope: e.string().optional(),
153
- location: ge.optional(),
154
- auth0_client: ue.optional(),
153
+ location: ue.optional(),
154
+ auth0_client: me.optional(),
155
155
  hostname: e.string(),
156
156
  is_mobile: e.boolean().optional(),
157
157
  timestamp: e.string()
158
- }), pn = me.extend({
158
+ }), dn = Ee.extend({
159
159
  id: e.string()
160
- }), dn = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), _n = e.enum([
160
+ }), gn = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), un = e.enum([
161
161
  "CREATE_USER",
162
162
  "GET_USER",
163
163
  "UPDATE_USER",
164
164
  "SEND_REQUEST",
165
165
  "SEND_EMAIL"
166
- ]), gn = e.enum(["VERIFY_EMAIL"]), he = e.object({
166
+ ]), mn = e.enum(["VERIFY_EMAIL"]), Se = e.object({
167
167
  require_mx_record: e.boolean().optional(),
168
168
  block_aliases: e.boolean().optional(),
169
169
  block_free_emails: e.boolean().optional(),
170
170
  block_disposable_emails: e.boolean().optional(),
171
171
  blocklist: e.array(e.string()).optional(),
172
172
  allowlist: e.array(e.string()).optional()
173
- }), be = e.object({
173
+ }), he = e.object({
174
174
  id: e.string(),
175
175
  alias: e.string().max(100).optional(),
176
176
  type: e.literal("AUTH0"),
@@ -182,7 +182,7 @@ const a = e.object({
182
182
  user_id: e.string(),
183
183
  changes: e.record(e.string(), e.any())
184
184
  })
185
- }), fe = e.object({
185
+ }), be = e.object({
186
186
  id: e.string(),
187
187
  alias: e.string().max(100).optional(),
188
188
  type: e.literal("EMAIL"),
@@ -191,9 +191,9 @@ const a = e.object({
191
191
  mask_output: e.boolean().optional(),
192
192
  params: e.object({
193
193
  email: e.string(),
194
- rules: he.optional()
194
+ rules: Se.optional()
195
195
  })
196
- }), Se = e.enum(["change-email", "account", "custom"]), Ee = e.object({
196
+ }), Ae = e.enum(["change-email", "account", "custom"]), fe = e.object({
197
197
  id: e.string(),
198
198
  alias: e.string().max(100).optional(),
199
199
  type: e.literal("REDIRECT"),
@@ -201,39 +201,39 @@ const a = e.object({
201
201
  allow_failure: e.boolean().optional(),
202
202
  mask_output: e.boolean().optional(),
203
203
  params: e.object({
204
- target: Se.openapi({
204
+ target: Ae.openapi({
205
205
  description: "The predefined target to redirect to, or 'custom' for a custom URL"
206
206
  }),
207
207
  custom_url: e.string().optional().openapi({
208
208
  description: "Custom URL to redirect to when target is 'custom'"
209
209
  })
210
210
  })
211
- }), ye = e.union([
211
+ }), Ie = e.union([
212
+ he,
212
213
  be,
213
- fe,
214
- Ee
215
- ]), Ae = e.object({
214
+ fe
215
+ ]), Ce = e.object({
216
216
  name: e.string().min(1).max(150).openapi({
217
217
  description: "The name of the flow"
218
218
  }),
219
219
  // Actions is an array of action steps (Auth0 stores as JSON blob)
220
- actions: e.array(ye).optional().default([]).openapi({
220
+ actions: e.array(Ie).optional().default([]).openapi({
221
221
  description: "The list of actions to execute in sequence"
222
222
  })
223
- }), un = Ae.extend({
224
- ...a.shape,
223
+ }), En = Ce.extend({
224
+ ...s.shape,
225
225
  id: e.string().openapi({
226
226
  description: "Unique identifier for the flow",
227
227
  example: "af_12tMpdJ3iek7svMyZkSh5M"
228
228
  })
229
- }), mn = e.object({
230
- page: e.string().min(0).optional().default("0").transform((t) => parseInt(t, 10)).openapi({
229
+ }), Sn = e.object({
230
+ page: e.string().min(0).optional().default("0").transform((o) => parseInt(o, 10)).openapi({
231
231
  description: "The page number where 0 is the first page"
232
232
  }),
233
- per_page: e.string().min(1).optional().default("10").transform((t) => parseInt(t, 10)).openapi({
233
+ per_page: e.string().min(1).optional().default("10").transform((o) => parseInt(o, 10)).openapi({
234
234
  description: "The number of items per page"
235
235
  }),
236
- include_totals: e.string().optional().default("false").transform((t) => t === "true").openapi({
236
+ include_totals: e.string().optional().default("false").transform((o) => o === "true").openapi({
237
237
  description: "If the total number of items should be included in the response"
238
238
  }),
239
239
  sort: e.string().regex(/^.+:(-1|1)$/).optional().openapi({
@@ -247,7 +247,7 @@ const a = e.object({
247
247
  limit: e.number(),
248
248
  length: e.number(),
249
249
  total: e.number().optional()
250
- }), Ie = e.object({
250
+ }), Oe = e.object({
251
251
  email: e.string().optional(),
252
252
  email_verified: e.boolean().optional(),
253
253
  name: e.string().optional(),
@@ -256,7 +256,7 @@ const a = e.object({
256
256
  phone_number: e.string().optional(),
257
257
  phone_verified: e.boolean().optional(),
258
258
  family_name: e.string().optional()
259
- }).catchall(e.any()), Ce = e.object({
259
+ }).catchall(e.any()), Te = e.object({
260
260
  connection: e.string(),
261
261
  user_id: e.string(),
262
262
  provider: e.string(),
@@ -269,8 +269,8 @@ const a = e.object({
269
269
  access_token: e.string().optional(),
270
270
  access_token_secret: e.string().optional(),
271
271
  refresh_token: e.string().optional(),
272
- profileData: Ie.optional()
273
- }), Te = e.object({
272
+ profileData: Oe.optional()
273
+ }), Ne = e.object({
274
274
  formatted: e.string().optional(),
275
275
  // Full mailing address
276
276
  street_address: e.string().optional(),
@@ -283,9 +283,9 @@ const a = e.object({
283
283
  // Zip code or postal code
284
284
  country: e.string().optional()
285
285
  // Country name
286
- }).optional(), D = e.object({
287
- email: e.string().optional().transform((t) => t && t.toLowerCase()),
288
- username: e.string().refine((t) => !t.includes("@"), {
286
+ }).optional(), k = e.object({
287
+ email: e.string().optional().transform((o) => o && o.toLowerCase()),
288
+ username: e.string().refine((o) => !o.includes("@"), {
289
289
  message: 'Usernames must not contain "@". Use the email field for email addresses.'
290
290
  }).optional(),
291
291
  phone_number: e.string().optional(),
@@ -315,8 +315,8 @@ const a = e.object({
315
315
  zoneinfo: e.string().optional(),
316
316
  // e.g., "Europe/Paris"
317
317
  // OIDC address claim (OIDC Core 5.1.1)
318
- address: Te
319
- }), Oe = D.extend({
318
+ address: Ne
319
+ }), ye = k.extend({
320
320
  email_verified: e.boolean().default(!1),
321
321
  verify_email: e.boolean().optional(),
322
322
  last_ip: e.string().optional(),
@@ -339,31 +339,31 @@ const a = e.object({
339
339
  hash: e.string(),
340
340
  algorithm: e.string()
341
341
  }).optional()
342
- }), we = e.object({
343
- ...Oe.omit({ password: !0 }).shape,
344
- ...a.shape,
342
+ }), Re = e.object({
343
+ ...ye.omit({ password: !0 }).shape,
344
+ ...s.shape,
345
345
  user_id: e.string(),
346
346
  provider: e.string(),
347
347
  is_social: e.boolean(),
348
348
  email: e.string().optional(),
349
349
  login_count: e.number().default(0),
350
- identities: e.array(Ce).optional()
351
- }), bn = we.omit({
350
+ identities: e.array(Te).optional()
351
+ }), bn = Re.omit({
352
352
  registration_completed_at: !0
353
- }), fn = D.extend({
353
+ }), An = k.extend({
354
354
  login_count: e.number(),
355
355
  multifactor: e.array(e.string()).optional(),
356
356
  last_ip: e.string().optional(),
357
357
  last_login: e.string().optional(),
358
358
  user_id: e.string()
359
359
  }).catchall(e.any());
360
- let Ne = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", je = (t = 21) => {
361
- let o = "", n = crypto.getRandomValues(new Uint8Array(t |= 0));
362
- for (; t--; )
363
- o += Ne[n[t] & 63];
364
- return o;
360
+ let Le = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Fe = (o = 21) => {
361
+ let n = "", i = crypto.getRandomValues(new Uint8Array(o |= 0));
362
+ for (; o--; )
363
+ n += Le[i[o] & 63];
364
+ return n;
365
365
  };
366
- const ke = e.object({
366
+ const De = e.object({
367
367
  client_id: e.string().optional().openapi({
368
368
  description: "ID of this client. Generated server-side if omitted (Auth0 behavior)."
369
369
  }),
@@ -376,7 +376,7 @@ const ke = e.object({
376
376
  global: e.boolean().default(!1).openapi({
377
377
  description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)."
378
378
  }),
379
- client_secret: e.string().default(() => je()).optional().openapi({
379
+ client_secret: e.string().default(() => Fe()).optional().openapi({
380
380
  description: "Client secret (which you must not make public)."
381
381
  }),
382
382
  app_type: e.enum([
@@ -584,14 +584,14 @@ const ke = e.object({
584
584
  user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({
585
585
  description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies."
586
586
  })
587
- }), Sn = e.object({
587
+ }), fn = e.object({
588
588
  created_at: e.string(),
589
589
  updated_at: e.string(),
590
- ...ke.shape,
590
+ ...De.shape,
591
591
  // Insert allows omitting (server-generated to match Auth0). The read schema
592
592
  // always has it — the row in storage is non-null.
593
593
  client_id: e.string()
594
- }), Re = e.object({
594
+ }), Ue = e.object({
595
595
  client_id: e.string().min(1).openapi({
596
596
  description: "ID of the client."
597
597
  }),
@@ -616,37 +616,37 @@ const ke = e.object({
616
616
  authorization_details_types: e.array(e.string()).optional().openapi({
617
617
  description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement."
618
618
  })
619
- }), ve = e.object({
619
+ }), we = e.object({
620
620
  id: e.string().openapi({
621
621
  description: "ID of the client grant."
622
622
  }),
623
- ...Re.shape,
623
+ ...Ue.shape,
624
624
  created_at: e.string().optional(),
625
625
  updated_at: e.string().optional()
626
- }), En = e.array(ve), De = e.enum(["iat", "rat"]), Le = e.object({
626
+ }), In = e.array(we), ke = e.enum(["iat", "rat"]), je = e.object({
627
627
  id: e.string(),
628
628
  token_hash: e.string(),
629
- type: De,
629
+ type: ke,
630
630
  client_id: e.string().optional(),
631
631
  sub: e.string().optional(),
632
632
  constraints: e.record(e.unknown()).optional(),
633
633
  single_use: e.boolean().default(!1),
634
634
  expires_at: e.string().optional()
635
- }), yn = e.object({
635
+ }), Cn = e.object({
636
636
  created_at: e.string(),
637
637
  used_at: e.string().optional(),
638
638
  revoked_at: e.string().optional(),
639
- ...Le.shape
640
- }), m = e.object({
639
+ ...je.shape
640
+ }), E = e.object({
641
641
  x: e.number(),
642
642
  y: e.number()
643
643
  });
644
- var L = /* @__PURE__ */ ((t) => (t.RICH_TEXT = "RICH_TEXT", t.NEXT_BUTTON = "NEXT_BUTTON", t.BACK_BUTTON = "BACK_BUTTON", t.SUBMIT_BUTTON = "SUBMIT_BUTTON", t.DIVIDER = "DIVIDER", t.TEXT = "TEXT", t.EMAIL = "EMAIL", t.PASSWORD = "PASSWORD", t.NUMBER = "NUMBER", t.PHONE = "PHONE", t.DATE = "DATE", t.CHECKBOX = "CHECKBOX", t.RADIO = "RADIO", t.SELECT = "SELECT", t.HIDDEN = "HIDDEN", t.LEGAL = "LEGAL", t))(L || {}), x = /* @__PURE__ */ ((t) => (t.BLOCK = "BLOCK", t.FIELD = "FIELD", t))(x || {});
645
- const C = e.object({
644
+ var j = /* @__PURE__ */ ((o) => (o.RICH_TEXT = "RICH_TEXT", o.NEXT_BUTTON = "NEXT_BUTTON", o.BACK_BUTTON = "BACK_BUTTON", o.SUBMIT_BUTTON = "SUBMIT_BUTTON", o.DIVIDER = "DIVIDER", o.TEXT = "TEXT", o.EMAIL = "EMAIL", o.PASSWORD = "PASSWORD", o.NUMBER = "NUMBER", o.PHONE = "PHONE", o.DATE = "DATE", o.CHECKBOX = "CHECKBOX", o.RADIO = "RADIO", o.SELECT = "SELECT", o.HIDDEN = "HIDDEN", o.LEGAL = "LEGAL", o))(j || {}), M = /* @__PURE__ */ ((o) => (o.BLOCK = "BLOCK", o.FIELD = "FIELD", o))(M || {});
645
+ const T = e.object({
646
646
  id: e.string(),
647
- category: e.nativeEnum(x),
648
- type: e.nativeEnum(L)
649
- }), xe = C.extend({
647
+ category: e.nativeEnum(M),
648
+ type: e.nativeEnum(j)
649
+ }), Me = T.extend({
650
650
  category: e.literal(
651
651
  "BLOCK"
652
652
  /* BLOCK */
@@ -658,7 +658,7 @@ const C = e.object({
658
658
  config: e.object({
659
659
  content: e.string()
660
660
  }).passthrough()
661
- }), Ue = C.extend({
661
+ }), ve = T.extend({
662
662
  category: e.literal(
663
663
  "BLOCK"
664
664
  /* BLOCK */
@@ -680,7 +680,7 @@ const C = e.object({
680
680
  config: e.object({
681
681
  text: e.string()
682
682
  }).passthrough()
683
- }), Fe = C.extend({
683
+ }), Pe = T.extend({
684
684
  category: e.literal(
685
685
  "FIELD"
686
686
  /* FIELD */
@@ -694,7 +694,7 @@ const C = e.object({
694
694
  config: e.object({
695
695
  text: e.string()
696
696
  }).passthrough()
697
- }), Pe = C.extend({
697
+ }), xe = T.extend({
698
698
  category: e.literal(
699
699
  "FIELD"
700
700
  /* FIELD */
@@ -747,28 +747,28 @@ const C = e.object({
747
747
  label: e.string().optional(),
748
748
  placeholder: e.string().optional()
749
749
  }).passthrough()
750
- }), Me = e.object({
750
+ }), He = e.object({
751
751
  id: e.string(),
752
752
  category: e.string(),
753
753
  type: e.string()
754
- }).passthrough(), He = e.union([
755
- xe,
756
- Ue,
757
- Fe,
754
+ }).passthrough(), Ge = e.union([
755
+ Me,
756
+ ve,
758
757
  Pe,
759
- Me
758
+ xe,
759
+ He
760
760
  ]);
761
- var Ge = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(Ge || {});
762
- const Be = e.object({
761
+ var Be = /* @__PURE__ */ ((o) => (o.STEP = "STEP", o.FLOW = "FLOW", o.CONDITION = "CONDITION", o.ACTION = "ACTION", o))(Be || {});
762
+ const Ke = e.object({
763
763
  id: e.string(),
764
764
  type: e.literal(
765
765
  "STEP"
766
766
  /* STEP */
767
767
  ),
768
- coordinates: m,
768
+ coordinates: E,
769
769
  alias: e.string().optional(),
770
770
  config: e.object({
771
- components: e.array(He),
771
+ components: e.array(Ge),
772
772
  next_node: e.string()
773
773
  }).passthrough()
774
774
  }), We = e.object({
@@ -777,19 +777,19 @@ const Be = e.object({
777
777
  "FLOW"
778
778
  /* FLOW */
779
779
  ),
780
- coordinates: m,
780
+ coordinates: E,
781
781
  alias: e.string().optional(),
782
782
  config: e.object({
783
783
  flow_id: e.string(),
784
784
  next_node: e.string()
785
785
  })
786
- }), Ke = e.object({
786
+ }), Ve = e.object({
787
787
  id: e.string(),
788
788
  type: e.literal(
789
789
  "ACTION"
790
790
  /* ACTION */
791
791
  ),
792
- coordinates: m,
792
+ coordinates: E,
793
793
  alias: e.string().optional(),
794
794
  config: e.object({
795
795
  action_type: e.enum(["REDIRECT"]).openapi({
@@ -805,43 +805,43 @@ const Be = e.object({
805
805
  description: "The next node to navigate to after action (for non-redirect actions)"
806
806
  })
807
807
  }).passthrough()
808
- }), ze = e.object({
808
+ }), Xe = e.object({
809
809
  id: e.string(),
810
810
  type: e.string(),
811
- coordinates: m
811
+ coordinates: E
812
812
  }).passthrough(), qe = e.union([
813
- Be,
814
- We,
815
813
  Ke,
816
- ze
817
- ]), Xe = e.object({
814
+ We,
815
+ Ve,
816
+ Xe
817
+ ]), ze = e.object({
818
818
  next_node: e.string(),
819
- coordinates: m
820
- }).passthrough(), Ve = e.object({
821
- resume_flow: e.boolean().optional(),
822
- coordinates: m
819
+ coordinates: E
823
820
  }).passthrough(), Ye = e.object({
821
+ resume_flow: e.boolean().optional(),
822
+ coordinates: E
823
+ }).passthrough(), Qe = e.object({
824
824
  id: e.string(),
825
825
  name: e.string(),
826
826
  languages: e.object({
827
827
  primary: e.string()
828
828
  }).passthrough(),
829
829
  nodes: e.array(qe),
830
- start: Xe,
831
- ending: Ve,
830
+ start: ze,
831
+ ending: Ye,
832
832
  created_at: e.string(),
833
833
  updated_at: e.string(),
834
834
  links: e.object({
835
835
  sdkSrc: e.string().optional(),
836
836
  sdk_src: e.string().optional()
837
837
  }).passthrough()
838
- }).passthrough(), An = Ye.omit({
838
+ }).passthrough(), On = Qe.omit({
839
839
  id: !0,
840
840
  created_at: !0,
841
841
  updated_at: !0
842
842
  });
843
- var U = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.ID_TOKEN = "id_token", t.TOKEN_ID_TOKEN = "id_token token", t.CODE = "code", t.CODE_ID_TOKEN = "code id_token", t.CODE_TOKEN = "code token", t.CODE_ID_TOKEN_TOKEN = "code id_token token", t))(U || {}), F = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(F || {}), P = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(P || {});
844
- const N = e.union([
843
+ var v = /* @__PURE__ */ ((o) => (o.TOKEN = "token", o.ID_TOKEN = "id_token", o.TOKEN_ID_TOKEN = "id_token token", o.CODE = "code", o.CODE_ID_TOKEN = "code id_token", o.CODE_TOKEN = "code token", o.CODE_ID_TOKEN_TOKEN = "code id_token token", o))(v || {}), P = /* @__PURE__ */ ((o) => (o.QUERY = "query", o.FRAGMENT = "fragment", o.FORM_POST = "form_post", o.WEB_MESSAGE = "web_message", o.SAML_POST = "saml_post", o))(P || {}), x = /* @__PURE__ */ ((o) => (o.S256 = "S256", o.Plain = "plain", o))(x || {});
844
+ const L = e.union([
845
845
  e.null(),
846
846
  e.object({
847
847
  essential: e.boolean().optional(),
@@ -849,13 +849,13 @@ const N = e.union([
849
849
  values: e.array(e.unknown()).optional()
850
850
  })
851
851
  ]).nullable(), Ze = e.object({
852
- userinfo: e.record(e.string(), N).optional(),
853
- id_token: e.record(e.string(), N).optional()
854
- }), Qe = e.object({
852
+ userinfo: e.record(e.string(), L).optional(),
853
+ id_token: e.record(e.string(), L).optional()
854
+ }), Je = e.object({
855
855
  client_id: e.string(),
856
856
  act_as: e.string().optional(),
857
- response_type: e.nativeEnum(U).optional(),
858
- response_mode: e.nativeEnum(F).optional(),
857
+ response_type: e.nativeEnum(v).optional(),
858
+ response_mode: e.nativeEnum(P).optional(),
859
859
  redirect_uri: e.string().optional(),
860
860
  audience: e.string().optional(),
861
861
  organization: e.string().optional(),
@@ -863,7 +863,7 @@ const N = e.union([
863
863
  nonce: e.string().optional(),
864
864
  scope: e.string().optional(),
865
865
  prompt: e.string().optional(),
866
- code_challenge_method: e.nativeEnum(P).optional(),
866
+ code_challenge_method: e.nativeEnum(x).optional(),
867
867
  code_challenge: e.string().optional(),
868
868
  username: e.string().optional(),
869
869
  ui_locales: e.string().optional(),
@@ -878,7 +878,7 @@ const N = e.union([
878
878
  claims: Ze.optional(),
879
879
  // The following fields are not available in Auth0
880
880
  vendor_id: e.string().optional()
881
- }), In = e.object({
881
+ }), Tn = e.object({
882
882
  colors: e.object({
883
883
  primary: e.string(),
884
884
  // Auth0 supports either a hex color string ("#ffffff") or a gradient
@@ -911,7 +911,7 @@ const N = e.union([
911
911
  "authorization_code",
912
912
  "oauth2_state",
913
913
  "ticket"
914
- ]), Je = e.object({
914
+ ]), et = e.object({
915
915
  code_id: e.string().openapi({
916
916
  description: "The code that will be used in for instance an email verification flow"
917
917
  }),
@@ -946,10 +946,10 @@ const N = e.union([
946
946
  expires_at: e.string(),
947
947
  used_at: e.string().optional(),
948
948
  user_id: e.string().optional()
949
- }), Cn = e.object({
950
- ...Je.shape,
949
+ }), Nn = e.object({
950
+ ...et.shape,
951
951
  created_at: e.string()
952
- }), et = e.object({
952
+ }), tt = e.object({
953
953
  kid: e.string().optional(),
954
954
  team_id: e.string().optional(),
955
955
  realms: e.string().optional(),
@@ -1088,27 +1088,27 @@ const N = e.union([
1088
1088
  // Controls when root user attributes are updated from external IdP
1089
1089
  set_user_root_attributes: e.enum(["on_each_login", "on_first_login", "never_on_login"]).optional()
1090
1090
  });
1091
- function T(t) {
1092
- if (t !== null) {
1093
- if (Array.isArray(t))
1094
- return t.filter((o) => o !== null).map(T);
1095
- if (t && typeof t == "object") {
1096
- const o = {};
1097
- for (const [n, h] of Object.entries(t))
1098
- h !== null && (o[n] = T(h));
1099
- return o;
1091
+ function N(o) {
1092
+ if (o !== null) {
1093
+ if (Array.isArray(o))
1094
+ return o.filter((n) => n !== null).map(N);
1095
+ if (o && typeof o == "object") {
1096
+ const n = {};
1097
+ for (const [i, S] of Object.entries(o))
1098
+ S !== null && (n[i] = N(S));
1099
+ return n;
1100
1100
  }
1101
- return t;
1101
+ return o;
1102
1102
  }
1103
1103
  }
1104
- const tt = e.object({
1104
+ const ot = e.object({
1105
1105
  id: e.string().optional(),
1106
1106
  name: e.string(),
1107
1107
  display_name: e.string().optional(),
1108
1108
  strategy: e.string(),
1109
1109
  options: e.preprocess(
1110
- (t) => t === null ? {} : T(t),
1111
- et
1110
+ (o) => o === null ? {} : N(o),
1111
+ tt
1112
1112
  ).default({}),
1113
1113
  enabled_clients: e.array(e.string()).default([]).optional(),
1114
1114
  response_type: e.custom().optional(),
@@ -1117,11 +1117,11 @@ const tt = e.object({
1117
1117
  show_as_button: e.boolean().optional(),
1118
1118
  metadata: e.record(e.any()).optional(),
1119
1119
  is_system: e.boolean().optional()
1120
- }), Tn = e.object({
1120
+ }), yn = e.object({
1121
1121
  id: e.string(),
1122
- created_at: e.string().transform((t) => t === null ? "" : t),
1123
- updated_at: e.string().transform((t) => t === null ? "" : t)
1124
- }).extend(tt.shape), ot = e.object({
1122
+ created_at: e.string().transform((o) => o === null ? "" : o),
1123
+ updated_at: e.string().transform((o) => o === null ? "" : o)
1124
+ }).extend(ot.shape), nt = e.object({
1125
1125
  domain: e.string(),
1126
1126
  custom_domain_id: e.string().optional(),
1127
1127
  type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -1135,7 +1135,7 @@ const tt = e.object({
1135
1135
  "null"
1136
1136
  ]).optional(),
1137
1137
  domain_metadata: e.record(e.string().max(255)).optional()
1138
- }), nt = e.discriminatedUnion("name", [
1138
+ }), it = e.discriminatedUnion("name", [
1139
1139
  e.object({
1140
1140
  name: e.literal("txt"),
1141
1141
  record: e.string(),
@@ -1146,35 +1146,35 @@ const tt = e.object({
1146
1146
  http_body: e.string(),
1147
1147
  http_url: e.string()
1148
1148
  })
1149
- ]), it = e.object({
1150
- ...ot.shape,
1149
+ ]), at = e.object({
1150
+ ...nt.shape,
1151
1151
  custom_domain_id: e.string(),
1152
1152
  primary: e.boolean(),
1153
1153
  status: e.enum(["disabled", "pending", "pending_verification", "ready"]),
1154
1154
  origin_domain_name: e.string().optional(),
1155
1155
  verification: e.object({
1156
- methods: e.array(nt)
1156
+ methods: e.array(it)
1157
1157
  }).optional(),
1158
1158
  tls_policy: e.string().optional()
1159
- }), On = it.extend({
1159
+ }), Rn = at.extend({
1160
1160
  tenant_id: e.string()
1161
- }), O = e.object({
1161
+ }), y = e.object({
1162
1162
  id: e.string(),
1163
1163
  order: e.number().optional(),
1164
1164
  visible: e.boolean().optional().default(!0)
1165
- }), l = O.extend({
1165
+ }), c = y.extend({
1166
1166
  category: e.literal("BLOCK").optional()
1167
- }), at = l.extend({
1167
+ }), st = c.extend({
1168
1168
  type: e.literal("DIVIDER"),
1169
1169
  config: e.object({
1170
1170
  text: e.string().optional()
1171
1171
  }).optional()
1172
- }), rt = l.extend({
1172
+ }), rt = c.extend({
1173
1173
  type: e.literal("HTML"),
1174
1174
  config: e.object({
1175
1175
  content: e.string().optional()
1176
1176
  }).optional()
1177
- }), st = l.extend({
1177
+ }), lt = c.extend({
1178
1178
  type: e.literal("IMAGE"),
1179
1179
  config: e.object({
1180
1180
  src: e.string().optional(),
@@ -1182,55 +1182,55 @@ const tt = e.object({
1182
1182
  width: e.number().optional(),
1183
1183
  height: e.number().optional()
1184
1184
  }).optional()
1185
- }), lt = l.extend({
1185
+ }), ct = c.extend({
1186
1186
  type: e.literal("JUMP_BUTTON"),
1187
1187
  config: e.object({
1188
1188
  text: e.string().optional(),
1189
1189
  target_step: e.string().optional()
1190
1190
  })
1191
- }), ct = l.extend({
1191
+ }), pt = c.extend({
1192
1192
  type: e.literal("RESEND_BUTTON"),
1193
1193
  config: e.object({
1194
1194
  text: e.string().optional(),
1195
1195
  resend_action: e.string().optional()
1196
1196
  })
1197
- }), pt = l.extend({
1197
+ }), _t = c.extend({
1198
1198
  type: e.literal("NEXT_BUTTON"),
1199
1199
  config: e.object({
1200
1200
  text: e.string().optional()
1201
1201
  })
1202
- }), dt = l.extend({
1202
+ }), dt = c.extend({
1203
1203
  type: e.literal("PREVIOUS_BUTTON"),
1204
1204
  config: e.object({
1205
1205
  text: e.string().optional()
1206
1206
  })
1207
- }), _t = l.extend({
1207
+ }), gt = c.extend({
1208
1208
  type: e.literal("RICH_TEXT"),
1209
1209
  config: e.object({
1210
1210
  content: e.string().optional()
1211
1211
  }).optional()
1212
- }), w = O.extend({
1212
+ }), R = y.extend({
1213
1213
  category: e.literal("WIDGET").optional(),
1214
1214
  label: e.string().min(1).optional(),
1215
1215
  hint: e.string().min(1).max(500).optional(),
1216
1216
  required: e.boolean().optional(),
1217
1217
  sensitive: e.boolean().optional()
1218
- }), gt = w.extend({
1218
+ }), ut = R.extend({
1219
1219
  type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
1220
1220
  config: e.object({
1221
1221
  credential_type: e.string().optional()
1222
1222
  })
1223
- }), ut = w.extend({
1223
+ }), mt = R.extend({
1224
1224
  type: e.literal("GMAPS_ADDRESS"),
1225
1225
  config: e.object({
1226
1226
  api_key: e.string().optional()
1227
1227
  })
1228
- }), mt = w.extend({
1228
+ }), Et = R.extend({
1229
1229
  type: e.literal("RECAPTCHA"),
1230
1230
  config: e.object({
1231
1231
  site_key: e.string().optional()
1232
1232
  })
1233
- }), i = O.extend({
1233
+ }), a = y.extend({
1234
1234
  category: e.literal("FIELD").optional(),
1235
1235
  label: e.string().min(1).optional(),
1236
1236
  hint: e.string().min(1).max(500).optional(),
@@ -1243,12 +1243,12 @@ const tt = e.object({
1243
1243
  ).optional(),
1244
1244
  required: e.boolean().optional(),
1245
1245
  sensitive: e.boolean().optional()
1246
- }), ht = i.extend({
1246
+ }), St = a.extend({
1247
1247
  type: e.literal("BOOLEAN"),
1248
1248
  config: e.object({
1249
1249
  default_value: e.boolean().optional()
1250
1250
  }).optional()
1251
- }), bt = i.extend({
1251
+ }), ht = a.extend({
1252
1252
  type: e.literal("CARDS"),
1253
1253
  config: e.object({
1254
1254
  options: e.array(
@@ -1261,7 +1261,7 @@ const tt = e.object({
1261
1261
  ).optional(),
1262
1262
  multi_select: e.boolean().optional()
1263
1263
  }).optional()
1264
- }), ft = i.extend({
1264
+ }), bt = a.extend({
1265
1265
  type: e.literal("CHOICE"),
1266
1266
  config: e.object({
1267
1267
  options: e.array(
@@ -1274,7 +1274,7 @@ const tt = e.object({
1274
1274
  multiple: e.boolean().optional(),
1275
1275
  default_value: e.union([e.string(), e.array(e.string())]).optional()
1276
1276
  }).optional()
1277
- }), St = i.extend({
1277
+ }), At = a.extend({
1278
1278
  type: e.literal("CUSTOM"),
1279
1279
  config: e.object({
1280
1280
  component: e.string().optional(),
@@ -1282,7 +1282,7 @@ const tt = e.object({
1282
1282
  schema: e.record(e.any()).optional(),
1283
1283
  code: e.string().optional()
1284
1284
  })
1285
- }), Et = i.extend({
1285
+ }), ft = a.extend({
1286
1286
  type: e.literal("DATE"),
1287
1287
  config: e.object({
1288
1288
  format: e.string().optional(),
@@ -1290,7 +1290,7 @@ const tt = e.object({
1290
1290
  max: e.string().optional(),
1291
1291
  default_value: e.string().optional()
1292
1292
  }).optional()
1293
- }), yt = i.extend({
1293
+ }), It = a.extend({
1294
1294
  type: e.literal("DROPDOWN"),
1295
1295
  config: e.object({
1296
1296
  options: e.array(
@@ -1304,26 +1304,26 @@ const tt = e.object({
1304
1304
  multiple: e.boolean().optional(),
1305
1305
  default_value: e.union([e.string(), e.array(e.string())]).optional()
1306
1306
  }).optional()
1307
- }), At = i.extend({
1307
+ }), Ct = a.extend({
1308
1308
  type: e.literal("EMAIL"),
1309
1309
  config: e.object({
1310
1310
  placeholder: e.string().optional(),
1311
1311
  default_value: e.string().optional()
1312
1312
  }).optional()
1313
- }), It = i.extend({
1313
+ }), Ot = a.extend({
1314
1314
  type: e.literal("FILE"),
1315
1315
  config: e.object({
1316
1316
  accept: e.string().optional(),
1317
1317
  max_size: e.number().optional(),
1318
1318
  multiple: e.boolean().optional()
1319
1319
  }).optional()
1320
- }), Ct = i.extend({
1320
+ }), Tt = a.extend({
1321
1321
  type: e.literal("LEGAL"),
1322
1322
  config: e.object({
1323
1323
  text: e.string(),
1324
1324
  html: e.boolean().optional()
1325
1325
  }).optional()
1326
- }), Tt = i.extend({
1326
+ }), Nt = a.extend({
1327
1327
  type: e.literal("NUMBER"),
1328
1328
  config: e.object({
1329
1329
  placeholder: e.string().optional(),
@@ -1332,7 +1332,7 @@ const tt = e.object({
1332
1332
  step: e.number().optional(),
1333
1333
  default_value: e.string().optional()
1334
1334
  }).optional()
1335
- }), Ot = i.extend({
1335
+ }), yt = a.extend({
1336
1336
  type: e.literal("PASSWORD"),
1337
1337
  config: e.object({
1338
1338
  placeholder: e.string().optional(),
@@ -1341,13 +1341,13 @@ const tt = e.object({
1341
1341
  forgot_password_link: e.string().optional(),
1342
1342
  default_value: e.string().optional()
1343
1343
  }).optional()
1344
- }), wt = i.extend({
1344
+ }), Rt = a.extend({
1345
1345
  type: e.literal("PAYMENT"),
1346
1346
  config: e.object({
1347
1347
  provider: e.string().optional(),
1348
1348
  currency: e.string().optional()
1349
1349
  }).optional()
1350
- }), Nt = i.extend({
1350
+ }), Lt = a.extend({
1351
1351
  type: e.literal("SOCIAL"),
1352
1352
  config: e.object({
1353
1353
  providers: e.array(e.string()).optional(),
@@ -1362,7 +1362,7 @@ const tt = e.object({
1362
1362
  })
1363
1363
  ).optional()
1364
1364
  }).optional()
1365
- }), jt = i.extend({
1365
+ }), Ft = a.extend({
1366
1366
  type: e.literal("TEL"),
1367
1367
  config: e.object({
1368
1368
  placeholder: e.string().optional(),
@@ -1370,7 +1370,7 @@ const tt = e.object({
1370
1370
  default_value: e.string().optional(),
1371
1371
  allow_email: e.boolean().optional()
1372
1372
  }).optional()
1373
- }), kt = i.extend({
1373
+ }), Dt = a.extend({
1374
1374
  type: e.literal("TEXT"),
1375
1375
  config: e.object({
1376
1376
  placeholder: e.string().optional(),
@@ -1378,54 +1378,54 @@ const tt = e.object({
1378
1378
  max_length: e.number().optional(),
1379
1379
  default_value: e.string().optional()
1380
1380
  }).optional()
1381
- }), Rt = i.extend({
1381
+ }), Ut = a.extend({
1382
1382
  type: e.literal("COUNTRY"),
1383
1383
  config: e.object({
1384
1384
  placeholder: e.string().optional(),
1385
1385
  default_value: e.string().optional()
1386
1386
  }).optional()
1387
- }), vt = i.extend({
1387
+ }), wt = a.extend({
1388
1388
  type: e.literal("URL"),
1389
1389
  config: e.object({
1390
1390
  placeholder: e.string().optional(),
1391
1391
  default_value: e.string().optional()
1392
1392
  }).optional()
1393
- }), Dt = e.discriminatedUnion("type", [
1394
- at,
1395
- rt,
1393
+ }), kt = e.discriminatedUnion("type", [
1396
1394
  st,
1395
+ rt,
1397
1396
  lt,
1398
1397
  ct,
1399
1398
  pt,
1399
+ _t,
1400
1400
  dt,
1401
- _t
1402
- ]), Lt = e.discriminatedUnion("type", [
1403
- gt,
1401
+ gt
1402
+ ]), jt = e.discriminatedUnion("type", [
1404
1403
  ut,
1405
- mt
1406
- ]), xt = e.discriminatedUnion("type", [
1404
+ mt,
1405
+ Et
1406
+ ]), Mt = e.discriminatedUnion("type", [
1407
+ St,
1407
1408
  ht,
1408
1409
  bt,
1409
- ft,
1410
- Rt,
1411
- St,
1412
- Et,
1413
- yt,
1410
+ Ut,
1414
1411
  At,
1412
+ ft,
1415
1413
  It,
1416
1414
  Ct,
1417
- Tt,
1418
1415
  Ot,
1419
- wt,
1416
+ Tt,
1420
1417
  Nt,
1421
- jt,
1422
- kt,
1423
- vt
1424
- ]), M = e.union([
1425
- Dt,
1418
+ yt,
1419
+ Rt,
1426
1420
  Lt,
1427
- xt
1428
- ]), wn = /* @__PURE__ */ new Set([
1421
+ Ft,
1422
+ Dt,
1423
+ wt
1424
+ ]), H = e.union([
1425
+ kt,
1426
+ jt,
1427
+ Mt
1428
+ ]), Ln = /* @__PURE__ */ new Set([
1429
1429
  "BOOLEAN",
1430
1430
  "CARDS",
1431
1431
  "CHOICE",
@@ -1439,7 +1439,7 @@ const tt = e.object({
1439
1439
  "TEL",
1440
1440
  "TEXT",
1441
1441
  "URL"
1442
- ]), Nn = e.object({
1442
+ ]), Fn = e.object({
1443
1443
  id: e.string(),
1444
1444
  type: e.literal("submit"),
1445
1445
  label: e.string(),
@@ -1448,22 +1448,22 @@ const tt = e.object({
1448
1448
  order: e.number().optional(),
1449
1449
  visible: e.boolean().optional().default(!0),
1450
1450
  customizations: e.record(e.string(), e.any()).optional()
1451
- }), S = e.object({
1451
+ }), A = e.object({
1452
1452
  x: e.number(),
1453
1453
  y: e.number()
1454
- }), Ut = e.object({
1454
+ }), vt = e.object({
1455
1455
  id: e.string(),
1456
1456
  type: e.literal("FLOW"),
1457
- coordinates: S,
1457
+ coordinates: A,
1458
1458
  alias: e.string().min(1).max(150).optional(),
1459
1459
  config: e.object({
1460
1460
  flow_id: e.string().max(30),
1461
1461
  next_node: e.string().optional()
1462
1462
  })
1463
- }), Ft = e.object({
1463
+ }), Pt = e.object({
1464
1464
  id: e.string(),
1465
1465
  type: e.literal("ROUTER"),
1466
- coordinates: S,
1466
+ coordinates: A,
1467
1467
  alias: e.string().min(1).max(150),
1468
1468
  config: e.object({
1469
1469
  rules: e.array(
@@ -1476,20 +1476,20 @@ const tt = e.object({
1476
1476
  ),
1477
1477
  fallback: e.string()
1478
1478
  })
1479
- }), Pt = e.object({
1479
+ }), xt = e.object({
1480
1480
  id: e.string(),
1481
1481
  type: e.literal("STEP"),
1482
- coordinates: S,
1482
+ coordinates: A,
1483
1483
  alias: e.string().min(1).max(150).optional(),
1484
1484
  config: e.object({
1485
- components: e.array(M),
1485
+ components: e.array(H),
1486
1486
  next_node: e.string().optional()
1487
1487
  })
1488
- }), Mt = e.discriminatedUnion("type", [
1489
- Ut,
1490
- Ft,
1491
- Pt
1492
- ]), Ht = e.object({
1488
+ }), Ht = e.discriminatedUnion("type", [
1489
+ vt,
1490
+ Pt,
1491
+ xt
1492
+ ]), Gt = e.object({
1493
1493
  name: e.string().openapi({
1494
1494
  description: "The name of the form"
1495
1495
  }),
@@ -1502,11 +1502,11 @@ const tt = e.object({
1502
1502
  default: e.string().optional()
1503
1503
  }).optional(),
1504
1504
  translations: e.record(e.string(), e.any()).optional(),
1505
- nodes: e.array(Mt).optional(),
1505
+ nodes: e.array(Ht).optional(),
1506
1506
  start: e.object({
1507
1507
  hidden_fields: e.array(e.object({ key: e.string(), value: e.string() })).optional(),
1508
1508
  next_node: e.string().optional(),
1509
- coordinates: S.optional()
1509
+ coordinates: A.optional()
1510
1510
  }).optional(),
1511
1511
  ending: e.object({
1512
1512
  redirection: e.object({
@@ -1514,7 +1514,7 @@ const tt = e.object({
1514
1514
  target: e.string().optional()
1515
1515
  }).optional(),
1516
1516
  after_submit: e.object({ flow_id: e.string().optional() }).optional(),
1517
- coordinates: S.optional(),
1517
+ coordinates: A.optional(),
1518
1518
  resume_flow: e.boolean().optional()
1519
1519
  }).optional(),
1520
1520
  style: e.object({ css: e.string().optional() }).optional(),
@@ -1524,42 +1524,42 @@ const tt = e.object({
1524
1524
  }).optional()
1525
1525
  }).openapi({
1526
1526
  description: "Schema for flow-based forms (matches Auth0 Forms structure)"
1527
- }), jn = e.object({
1528
- ...a.shape,
1529
- ...Ht.shape,
1527
+ }), Dn = e.object({
1528
+ ...s.shape,
1529
+ ...Gt.shape,
1530
1530
  id: e.string()
1531
- }), Gt = e.object({
1531
+ }), Bt = e.object({
1532
1532
  id: e.number().optional(),
1533
1533
  text: e.string(),
1534
1534
  type: e.enum(["info", "error", "success", "warning"])
1535
- }), Bt = e.object({
1535
+ }), Kt = e.object({
1536
1536
  id: e.string().optional(),
1537
1537
  text: e.string(),
1538
1538
  href: e.string(),
1539
1539
  linkText: e.string().optional()
1540
- }), kn = e.object({
1540
+ }), Un = e.object({
1541
1541
  /** Screen identifier for CSS targeting (e.g., 'identifier', 'enter-password', 'signup') */
1542
1542
  name: e.string().optional(),
1543
1543
  action: e.string(),
1544
1544
  method: e.enum(["POST", "GET"]),
1545
1545
  title: e.string().optional(),
1546
1546
  description: e.string().optional(),
1547
- components: e.array(M),
1548
- messages: e.array(Gt).optional(),
1549
- links: e.array(Bt).optional(),
1547
+ components: e.array(H),
1548
+ messages: e.array(Bt).optional(),
1549
+ links: e.array(Kt).optional(),
1550
1550
  /** Footer HTML content displayed at the very bottom of the widget (e.g., terms and conditions) */
1551
1551
  footer: e.string().optional()
1552
1552
  });
1553
- function Rn(t) {
1554
- return t.category === "BLOCK";
1553
+ function wn(o) {
1554
+ return o.category === "BLOCK";
1555
1555
  }
1556
- function vn(t) {
1557
- return t.category === "WIDGET";
1556
+ function kn(o) {
1557
+ return o.category === "WIDGET";
1558
1558
  }
1559
- function Dn(t) {
1560
- return t.category === "FIELD";
1559
+ function jn(o) {
1560
+ return o.category === "FIELD";
1561
1561
  }
1562
- const H = e.enum([
1562
+ const G = e.enum([
1563
1563
  "pre-user-registration",
1564
1564
  "post-user-registration",
1565
1565
  "post-user-login",
@@ -1568,14 +1568,14 @@ const H = e.enum([
1568
1568
  "pre-user-deletion",
1569
1569
  "post-user-deletion"
1570
1570
  // Potentially other triggers specific to webhooks in the future
1571
- ]), G = e.enum([
1571
+ ]), B = e.enum([
1572
1572
  "pre-user-registration",
1573
1573
  "post-user-registration",
1574
1574
  "post-user-login",
1575
1575
  "validate-registration-username",
1576
1576
  "pre-user-deletion",
1577
1577
  "post-user-deletion"
1578
- ]), B = e.enum([
1578
+ ]), K = e.enum([
1579
1579
  "post-user-login",
1580
1580
  "post-user-registration",
1581
1581
  "post-user-update",
@@ -1585,11 +1585,11 @@ const H = e.enum([
1585
1585
  "credentials-exchange",
1586
1586
  "pre-user-registration",
1587
1587
  "post-user-registration"
1588
- ]), K = e.enum([
1588
+ ]), V = e.enum([
1589
1589
  "ensure-username",
1590
1590
  "set-preferred-username",
1591
1591
  "account-linking"
1592
- ]), Ln = {
1592
+ ]), Mn = {
1593
1593
  "ensure-username": {
1594
1594
  name: "Ensure Username",
1595
1595
  description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1609,7 +1609,7 @@ const H = e.enum([
1609
1609
  "post-user-update"
1610
1610
  ]
1611
1611
  }
1612
- }, c = {
1612
+ }, p = {
1613
1613
  enabled: e.boolean().default(!1),
1614
1614
  synchronous: e.boolean().default(!1),
1615
1615
  priority: e.number().optional(),
@@ -1627,70 +1627,70 @@ const H = e.enum([
1627
1627
  */
1628
1628
  metadata: e.record(e.unknown()).optional()
1629
1629
  }, Wt = e.object({
1630
- ...c,
1631
- trigger_id: H,
1632
- url: e.string()
1633
- }), Kt = e.object({
1634
- ...c,
1630
+ ...p,
1635
1631
  trigger_id: G,
1636
- form_id: e.string()
1637
- }), zt = e.object({
1638
- ...c,
1632
+ url: e.string()
1633
+ }), Vt = e.object({
1634
+ ...p,
1639
1635
  trigger_id: B,
1640
- template_id: K
1636
+ form_id: e.string()
1637
+ }), Xt = e.object({
1638
+ ...p,
1639
+ trigger_id: K,
1640
+ template_id: V
1641
1641
  }), qt = e.object({
1642
- ...c,
1642
+ ...p,
1643
1643
  trigger_id: W,
1644
1644
  code_id: e.string()
1645
- }), xn = e.union([
1645
+ }), vn = e.union([
1646
1646
  Wt,
1647
- Kt,
1648
- zt,
1647
+ Vt,
1648
+ Xt,
1649
1649
  qt
1650
- ]), Xt = e.object({
1651
- ...c,
1652
- trigger_id: H,
1653
- ...a.shape,
1654
- hook_id: e.string(),
1655
- url: e.string()
1656
- }), Vt = e.object({
1657
- ...c,
1650
+ ]), zt = e.object({
1651
+ ...p,
1658
1652
  trigger_id: G,
1659
- ...a.shape,
1653
+ ...s.shape,
1660
1654
  hook_id: e.string(),
1661
- form_id: e.string()
1655
+ url: e.string()
1662
1656
  }), Yt = e.object({
1663
- ...c,
1657
+ ...p,
1664
1658
  trigger_id: B,
1665
- ...a.shape,
1659
+ ...s.shape,
1660
+ hook_id: e.string(),
1661
+ form_id: e.string()
1662
+ }), Qt = e.object({
1663
+ ...p,
1664
+ trigger_id: K,
1665
+ ...s.shape,
1666
1666
  hook_id: e.string(),
1667
- template_id: K
1667
+ template_id: V
1668
1668
  }), Zt = e.object({
1669
- ...c,
1669
+ ...p,
1670
1670
  trigger_id: W,
1671
- ...a.shape,
1671
+ ...s.shape,
1672
1672
  hook_id: e.string(),
1673
1673
  code_id: e.string()
1674
- }), Un = e.union([
1675
- Xt,
1676
- Vt,
1674
+ }), Pn = e.union([
1675
+ zt,
1677
1676
  Yt,
1677
+ Qt,
1678
1678
  Zt
1679
- ]), Qt = e.object({
1679
+ ]), Jt = e.object({
1680
1680
  code: e.string().max(1e5),
1681
1681
  secrets: e.record(e.string()).optional()
1682
- }), Fn = Qt.extend({
1682
+ }), xn = Jt.extend({
1683
1683
  id: e.string(),
1684
1684
  tenant_id: e.string(),
1685
- ...a.shape
1685
+ ...s.shape
1686
1686
  }), $t = e.object({
1687
1687
  name: e.string().optional()
1688
- }), Jt = e.object({
1689
- email: e.string().optional()
1690
1688
  }), eo = e.object({
1689
+ email: e.string().optional()
1690
+ }), to = e.object({
1691
1691
  organization_id: e.string().max(50),
1692
1692
  inviter: $t,
1693
- invitee: Jt,
1693
+ invitee: eo,
1694
1694
  invitation_url: e.string().url(),
1695
1695
  client_id: e.string(),
1696
1696
  connection_id: e.string().optional(),
@@ -1699,13 +1699,13 @@ const H = e.enum([
1699
1699
  ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
1700
1700
  roles: e.array(e.string()).default([]).optional(),
1701
1701
  send_invitation_email: e.boolean().default(!0).optional()
1702
- }), Pn = e.object({
1702
+ }), Hn = e.object({
1703
1703
  id: e.string(),
1704
1704
  organization_id: e.string().max(50),
1705
1705
  created_at: e.string().datetime(),
1706
1706
  expires_at: e.string().datetime(),
1707
1707
  ticket_id: e.string().optional()
1708
- }).extend(eo.shape), to = e.object({
1708
+ }).extend(to.shape), oo = e.object({
1709
1709
  alg: e.enum([
1710
1710
  "RS256",
1711
1711
  "RS384",
@@ -1729,24 +1729,24 @@ const H = e.enum([
1729
1729
  y: e.string().optional(),
1730
1730
  x5t: e.string().optional(),
1731
1731
  x5c: e.array(e.string()).optional()
1732
- }).superRefine((t, o) => {
1733
- if (t.kty === "RSA")
1734
- for (const n of ["n", "e"])
1735
- t[n] || o.addIssue({
1732
+ }).superRefine((o, n) => {
1733
+ if (o.kty === "RSA")
1734
+ for (const i of ["n", "e"])
1735
+ o[i] || n.addIssue({
1736
1736
  code: e.ZodIssueCode.custom,
1737
- path: [n],
1738
- message: `RSA JWK is missing required member '${n}'`
1737
+ path: [i],
1738
+ message: `RSA JWK is missing required member '${i}'`
1739
1739
  });
1740
- else if (t.kty === "EC")
1741
- for (const n of ["crv", "x", "y"])
1742
- t[n] || o.addIssue({
1740
+ else if (o.kty === "EC")
1741
+ for (const i of ["crv", "x", "y"])
1742
+ o[i] || n.addIssue({
1743
1743
  code: e.ZodIssueCode.custom,
1744
- path: [n],
1745
- message: `EC JWK is missing required member '${n}'`
1744
+ path: [i],
1745
+ message: `EC JWK is missing required member '${i}'`
1746
1746
  });
1747
- }), Mn = e.object({
1748
- keys: e.array(to)
1749
- }), Hn = e.object({
1747
+ }), Gn = e.object({
1748
+ keys: e.array(oo)
1749
+ }), Bn = e.object({
1750
1750
  issuer: e.string(),
1751
1751
  authorization_endpoint: e.string(),
1752
1752
  token_endpoint: e.string(),
@@ -1770,21 +1770,21 @@ const H = e.enum([
1770
1770
  request_object_signing_alg_values_supported: e.array(e.string()).optional(),
1771
1771
  token_endpoint_auth_signing_alg_values_supported: e.array(e.string())
1772
1772
  });
1773
- var z = /* @__PURE__ */ ((t) => (t.PENDING = "pending", t.AUTHENTICATED = "authenticated", t.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", t.AWAITING_MFA = "awaiting_mfa", t.AWAITING_HOOK = "awaiting_hook", t.AWAITING_CONTINUATION = "awaiting_continuation", t.COMPLETED = "completed", t.FAILED = "failed", t.EXPIRED = "expired", t))(z || {});
1774
- const oo = e.nativeEnum(z), no = e.object({
1773
+ var X = /* @__PURE__ */ ((o) => (o.PENDING = "pending", o.AUTHENTICATED = "authenticated", o.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", o.AWAITING_MFA = "awaiting_mfa", o.AWAITING_HOOK = "awaiting_hook", o.AWAITING_CONTINUATION = "awaiting_continuation", o.COMPLETED = "completed", o.FAILED = "failed", o.EXPIRED = "expired", o))(X || {});
1774
+ const no = e.nativeEnum(X), io = e.object({
1775
1775
  strategy: e.string(),
1776
1776
  strategy_type: e.string()
1777
- }), io = e.object({
1777
+ }), ao = e.object({
1778
1778
  csrf_token: e.string(),
1779
1779
  auth0Client: e.string().optional(),
1780
- authParams: Qe,
1780
+ authParams: Je,
1781
1781
  expires_at: e.string(),
1782
1782
  deleted_at: e.string().optional(),
1783
1783
  ip: e.string().optional(),
1784
1784
  useragent: e.string().optional(),
1785
1785
  session_id: e.string().optional(),
1786
1786
  authorization_url: e.string().optional(),
1787
- state: oo.optional().default(
1787
+ state: no.optional().default(
1788
1788
  "pending"
1789
1789
  /* PENDING */
1790
1790
  ),
@@ -1795,19 +1795,19 @@ const oo = e.nativeEnum(z), no = e.object({
1795
1795
  // Set once user is authenticated
1796
1796
  auth_connection: e.string().optional(),
1797
1797
  // The connection used to authenticate (may differ from primary user's connection)
1798
- auth_strategy: no.optional(),
1798
+ auth_strategy: io.optional(),
1799
1799
  authenticated_at: e.string().optional()
1800
1800
  // ISO timestamp persisted for audit/metadata; not used to reject resumed sessions
1801
1801
  }).openapi({
1802
1802
  description: "This represents a login sesion"
1803
- }), Gn = e.object({
1804
- ...io.shape,
1803
+ }), Kn = e.object({
1804
+ ...ao.shape,
1805
1805
  id: e.string().openapi({
1806
1806
  description: "This is is used as the state in the universal login"
1807
1807
  }),
1808
1808
  created_at: e.string(),
1809
1809
  updated_at: e.string()
1810
- }), ao = {
1810
+ }), t = {
1811
1811
  // Network & System
1812
1812
  ACLS_SUMMARY: "acls_summary",
1813
1813
  ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
@@ -1911,6 +1911,8 @@ const oo = e.nativeEnum(z), no = e.object({
1911
1911
  BLOCKED_IP_ADDRESS: "limit_mu",
1912
1912
  BLOCKED_ACCOUNT_IP: "limit_sul",
1913
1913
  BLOCKED_ACCOUNT_EMAIL: "limit_wc",
1914
+ // Generic information
1915
+ INFORMATION: "i",
1914
1916
  // MFA & My Account
1915
1917
  MFA_REQUIRED: "mfar",
1916
1918
  MANAGEMENT_API_READ_OPERATION: "mgmt_api_read",
@@ -1963,6 +1965,8 @@ const oo = e.nativeEnum(z), no = e.object({
1963
1965
  SUCCESS_LOGOUT: "slo",
1964
1966
  SUCCESS_HOOK: "sh",
1965
1967
  // Custom AuthHero-specific
1968
+ SUCCESS_PASSWORD_MIGRATION: "spm",
1969
+ // Custom AuthHero-specific: upstream password successfully imported
1966
1970
  SUCCESS_REVOCATION: "srrt",
1967
1971
  SUCCESS_SIGNUP: "ss",
1968
1972
  FAILED_SS_SSO_OPERATION: "ss_sso_failure",
@@ -1981,24 +1985,193 @@ const oo = e.nativeEnum(z), no = e.object({
1981
1985
  WARNING_DURING_LOGIN: "w",
1982
1986
  WARNING_SENDING_NOTIFICATION: "wn",
1983
1987
  WARNING_USER_MANAGEMENT: "wum"
1984
- }, ro = e.string().refine(
1985
- (t) => Object.values(ao).includes(t),
1988
+ }, so = e.string().refine(
1989
+ (o) => Object.values(t).includes(o),
1986
1990
  { message: "Invalid log type" }
1987
- ), so = e.object({
1991
+ ), ro = {
1992
+ [t.ACLS_SUMMARY]: "ACLs Summary",
1993
+ [t.ACTIONS_EXECUTION_FAILED]: "Actions Execution Failed",
1994
+ [t.API_LIMIT]: "API Rate Limit Reached",
1995
+ [t.API_LIMIT_WARNING]: "API Rate Limit Warning",
1996
+ [t.APPI]: "API Operation",
1997
+ [t.CIBA_EXCHANGE_FAILED]: "CIBA Exchange Failed",
1998
+ [t.CIBA_EXCHANGE_SUCCEEDED]: "CIBA Exchange Succeeded",
1999
+ [t.CIBA_START_FAILED]: "CIBA Start Failed",
2000
+ [t.CIBA_START_SUCCEEDED]: "CIBA Start Succeeded",
2001
+ [t.CODE_LINK_SENT]: "Code/Link Sent",
2002
+ [t.CODE_SENT]: "Code Sent",
2003
+ [t.DEPRECATION_NOTICE]: "Deprecation Notice",
2004
+ [t.FAILED_LOGIN]: "Failed Login",
2005
+ [t.FAILED_BY_CONNECTOR]: "Failed by Connector",
2006
+ [t.FAILED_CHANGE_EMAIL]: "Failed Change Email",
2007
+ [t.FAILED_BY_CORS]: "Failed by CORS",
2008
+ [t.FAILED_CROSS_ORIGIN_AUTHENTICATION]: "Failed Cross Origin Authentication",
2009
+ [t.FAILED_CHANGE_PASSWORD]: "Failed Change Password",
2010
+ [t.FAILED_POST_CHANGE_PASSWORD_HOOK]: "Failed Post-Change Password Hook",
2011
+ [t.FAILED_CHANGE_PHONE_NUMBER]: "Failed Change Phone Number",
2012
+ [t.FAILED_CHANGE_PASSWORD_REQUEST]: "Failed Change Password Request",
2013
+ [t.FAILED_CONNECTOR_PROVISIONING]: "Failed Connector Provisioning",
2014
+ [t.FAILED_CHANGE_USERNAME]: "Failed Change Username",
2015
+ [t.FAILED_DELEGATION]: "Failed Delegation",
2016
+ [t.FAILED_DEVICE_ACTIVATION]: "Failed Device Activation",
2017
+ [t.FAILED_DEVICE_AUTHORIZATION_REQUEST]: "Failed Device Authorization Request",
2018
+ [t.USER_CANCELED_DEVICE_CONFIRMATION]: "User Canceled Device Confirmation",
2019
+ [t.FAILED_USER_DELETION]: "Failed User Deletion",
2020
+ [t.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Authorization Code for Access Token",
2021
+ [t.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Failed Exchange Access Token for Client Credentials",
2022
+ [t.FAILED_EXCHANGE_CUSTOM_TOKEN]: "Failed Exchange Custom Token",
2023
+ [t.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Device Code for Access Token",
2024
+ [t.FAILED_FEDERATED_LOGOUT]: "Failed Federated Logout",
2025
+ [t.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Failed Exchange Native Social Login",
2026
+ [t.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Failed Exchange Password OOB for Access Token",
2027
+ [t.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Password OTP for Access Token",
2028
+ [t.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Failed Exchange Password for Access Token",
2029
+ [t.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Passwordless OTP for Access Token",
2030
+ [t.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Failed Exchange Password MFA Recovery for Access Token",
2031
+ [t.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN]: "Failed Exchange Rotating Refresh Token",
2032
+ [t.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Refresh Token for Access Token",
2033
+ [t.FAILED_HOOK]: "Failed Hook",
2034
+ [t.FAILED_IMPERSONATION]: "Failed Impersonation",
2035
+ [t.FAILED_INVITE_ACCEPT]: "Failed Invite Accept",
2036
+ [t.FAILED_LOGOUT]: "Failed Logout",
2037
+ [t.FLOWS_EXECUTION_COMPLETED]: "Flows Execution Completed",
2038
+ [t.FLOWS_EXECUTION_FAILED]: "Flows Execution Failed",
2039
+ [t.FAILED_SENDING_NOTIFICATION]: "Failed Sending Notification",
2040
+ [t.FORMS_SUBMISSION_FAILED]: "Forms Submission Failed",
2041
+ [t.FORMS_SUBMISSION_SUCCEEDED]: "Forms Submission Succeeded",
2042
+ [t.FAILED_LOGIN_INCORRECT_PASSWORD]: "Failed Login - Incorrect Password",
2043
+ [t.FAILED_PUSHED_AUTHORIZATION_REQUEST]: "Failed Pushed Authorization Request",
2044
+ [t.FAILED_POST_USER_REGISTRATION_HOOK]: "Failed Post-User Registration Hook",
2045
+ [t.FAILED_SIGNUP]: "Failed Signup",
2046
+ [t.FAILED_SILENT_AUTH]: "Failed Silent Auth",
2047
+ [t.FAILED_LOGIN_INVALID_EMAIL_USERNAME]: "Failed Login - Invalid Email/Username",
2048
+ [t.FAILED_USERS_IMPORT]: "Failed Users Import",
2049
+ [t.FAILED_VERIFICATION_EMAIL]: "Failed Verification Email",
2050
+ [t.FAILED_VERIFICATION_EMAIL_REQUEST]: "Failed Verification Email Request",
2051
+ [t.EMAIL_VERIFICATION_CONFIRMED]: "Email Verification Confirmed",
2052
+ [t.EMAIL_VERIFICATION_FAILED]: "Email Verification Failed",
2053
+ [t.MFA_AUTH_FAILED]: "MFA Auth Failed",
2054
+ [t.MFA_AUTH_REJECTED]: "MFA Auth Rejected",
2055
+ [t.MFA_AUTH_SUCCESS]: "MFA Auth Success",
2056
+ [t.MFA_ENROLLMENT_COMPLETE]: "MFA Enrollment Complete",
2057
+ [t.TOO_MANY_MFA_FAILURES]: "Too Many MFA Failures",
2058
+ [t.MFA_RECOVERY_FAILED]: "MFA Recovery Failed",
2059
+ [t.MFA_RECOVERY_RATE_LIMIT_EXCEED]: "MFA Recovery Rate Limit Exceeded",
2060
+ [t.MFA_RECOVERY_SUCCESS]: "MFA Recovery Success",
2061
+ [t.MFA_EMAIL_SENT]: "MFA Email Sent",
2062
+ [t.EMAIL_VERIFICATION_SENT]: "Email Verification Sent",
2063
+ [t.EMAIL_VERIFICATION_SEND_FAILURE]: "Email Verification Send Failure",
2064
+ [t.PUSH_NOTIFICATION_SENT]: "Push Notification Sent",
2065
+ [t.ERROR_SENDING_MFA_PUSH_NOTIFICATION]: "Error Sending MFA Push Notification",
2066
+ [t.MFA_SMS_SENT]: "MFA SMS Sent",
2067
+ [t.ERROR_SENDING_MFA_SMS]: "Error Sending MFA SMS",
2068
+ [t.MFA_VOICE_CALL_SUCCESS]: "MFA Voice Call Success",
2069
+ [t.MFA_VOICE_CALL_FAILED]: "MFA Voice Call Failed",
2070
+ [t.SECOND_FACTOR_STARTED]: "Second Factor Started",
2071
+ [t.MFA_ENROLL_STARTED]: "MFA Enroll Started",
2072
+ [t.MFA_ENROLLMENT_FAILED]: "MFA Enrollment Failed",
2073
+ [t.GUARDIAN_TENANT_UPDATE]: "Guardian Tenant Update",
2074
+ [t.UNENROLL_DEVICE_ACCOUNT]: "Unenroll Device Account",
2075
+ [t.UPDATE_DEVICE_ACCOUNT]: "Update Device Account",
2076
+ [t.WEBAUTHN_CHALLENGE_FAILED]: "WebAuthn Challenge Failed",
2077
+ [t.WEBAUTHN_ENROLLMENT_FAILED]: "WebAuthn Enrollment Failed",
2078
+ [t.FAILED_KMS_API_OPERATION]: "Failed KMS API Operation",
2079
+ [t.SUCCESS_KMS_API_OPERATION]: "Success KMS API Operation",
2080
+ [t.KMS_KEY_STATE_CHANGED]: "KMS Key State Changed",
2081
+ [t.TOO_MANY_CALLS_TO_DELEGATION]: "Too Many Calls to Delegation",
2082
+ [t.BLOCKED_IP_ADDRESS]: "Blocked IP Address",
2083
+ [t.BLOCKED_ACCOUNT_IP]: "Blocked Account (IP)",
2084
+ [t.BLOCKED_ACCOUNT_EMAIL]: "Blocked Account (Email)",
2085
+ [t.INFORMATION]: "Information",
2086
+ [t.MFA_REQUIRED]: "MFA Required",
2087
+ [t.MANAGEMENT_API_READ_OPERATION]: "Management API Read Operation",
2088
+ [t.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Failed Authentication Method Operation (My Account)",
2089
+ [t.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Successful Authentication Method Operation (My Account)",
2090
+ [t.FAILED_OIDC_BACKCHANNEL_LOGOUT]: "Failed OIDC Backchannel Logout",
2091
+ [t.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT]: "Successful OIDC Backchannel Logout",
2092
+ [t.ORGANIZATION_MEMBER_ADDED]: "Organization Member Added",
2093
+ [t.PASSKEY_CHALLENGE_FAILED]: "Passkey Challenge Failed",
2094
+ [t.PASSKEY_CHALLENGE_STARTED]: "Passkey Challenge Started",
2095
+ [t.PRE_LOGIN_ASSESSMENT]: "Pre-Login Assessment",
2096
+ [t.BREACHED_PASSWORD]: "Breached Password",
2097
+ [t.BREACHED_PASSWORD_ON_RESET]: "Breached Password on Reset",
2098
+ [t.SUCCESS_RESOURCE_CLEANUP]: "Success Resource Cleanup",
2099
+ [t.RICH_CONSENTS_ACCESS_ERROR]: "Rich Consents Access Error",
2100
+ [t.SUCCESS_LOGIN]: "Success Login",
2101
+ [t.SUCCESS_API_OPERATION]: "Success API Operation",
2102
+ [t.FAILED_API_OPERATION]: "Failed API Operation",
2103
+ [t.SUCCESS_CHANGE_EMAIL]: "Success Change Email",
2104
+ [t.SUCCESS_CROSS_ORIGIN_AUTHENTICATION]: "Success Cross Origin Authentication",
2105
+ [t.SUCCESS_CHANGE_PASSWORD]: "Success Change Password",
2106
+ [t.SUCCESS_CHANGE_PHONE_NUMBER]: "Success Change Phone Number",
2107
+ [t.SUCCESS_CHANGE_PASSWORD_REQUEST]: "Success Change Password Request",
2108
+ [t.SUCCESS_CHANGE_USERNAME]: "Success Change Username",
2109
+ [t.SUCCESS_CREDENTIAL_VALIDATION]: "Success Credential Validation",
2110
+ [t.SUCCESS_DELEGATION]: "Success Delegation",
2111
+ [t.SUCCESS_USER_DELETION]: "Success User Deletion",
2112
+ [t.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Authorization Code for Access Token",
2113
+ [t.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Success Exchange Access Token for Client Credentials",
2114
+ [t.SUCCESS_EXCHANGE_CUSTOM_TOKEN]: "Success Exchange Custom Token",
2115
+ [t.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Device Code for Access Token",
2116
+ [t.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Success Exchange Native Social Login",
2117
+ [t.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Password OOB for Access Token",
2118
+ [t.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Password OTP for Access Token",
2119
+ [t.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Success Exchange Password for Access Token",
2120
+ [t.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OOB for Access Token",
2121
+ [t.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OTP for Access Token",
2122
+ [t.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Passkey MFA Recovery for Access Token",
2123
+ [t.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Password MFA Recovery for Access Token",
2124
+ [t.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Refresh Token for Access Token",
2125
+ [t.SUCCESS_IMPERSONATION]: "Success Impersonation",
2126
+ [t.SUCCESSFULLY_ACCEPTED_USER_INVITE]: "Successfully Accepted User Invite",
2127
+ [t.BREACHED_PASSWORD_ON_SIGNUP]: "Breached Password on Signup",
2128
+ [t.SUCCESS_LOGOUT]: "Success Logout",
2129
+ [t.SUCCESS_HOOK]: "Success Hook",
2130
+ [t.SUCCESS_PASSWORD_MIGRATION]: "Success Password Migration",
2131
+ [t.SUCCESS_REVOCATION]: "Success Revocation",
2132
+ [t.SUCCESS_SIGNUP]: "Success Signup",
2133
+ [t.FAILED_SS_SSO_OPERATION]: "Failed SS SSO Operation",
2134
+ [t.INFORMATION_FROM_SS_SSO_OPERATION]: "Information from SS SSO Operation",
2135
+ [t.SUCCESS_SS_SSO_OPERATION]: "Success SS SSO Operation",
2136
+ [t.SUCCESS_SILENT_AUTH]: "Success Silent Auth",
2137
+ [t.SUCCESSFUL_SCIM_OPERATION]: "Successful SCIM Operation",
2138
+ [t.SUCCESSFULLY_IMPORTED_USERS]: "Successfully Imported Users",
2139
+ [t.SUCCESS_VERIFICATION_EMAIL]: "Success Verification Email",
2140
+ [t.SUCCESS_VERIFICATION_EMAIL_REQUEST]: "Success Verification Email Request",
2141
+ [t.MAX_AMOUNT_OF_AUTHENTICATORS]: "Max Amount of Authenticators",
2142
+ [t.USER_LOGIN_BLOCK_RELEASED]: "User Login Block Released",
2143
+ [t.FAILED_UNIVERSAL_LOGOUT]: "Failed Universal Logout",
2144
+ [t.SUCCESSFUL_UNIVERSAL_LOGOUT]: "Successful Universal Logout",
2145
+ [t.WARNING_DURING_LOGIN]: "Warning During Login",
2146
+ [t.WARNING_SENDING_NOTIFICATION]: "Warning Sending Notification",
2147
+ [t.WARNING_USER_MANAGEMENT]: "Warning User Management"
2148
+ }, lo = (() => {
2149
+ const o = {};
2150
+ for (const [n, i] of Object.entries(t))
2151
+ n.startsWith("SUCCESS_") || n.startsWith("SUCCESSFUL_") || n.startsWith("SUCCESSFULLY_") ? o[i] = "success" : n.startsWith("FAILED_") || n.startsWith("ERROR_") || n.startsWith("BREACHED_") || n.startsWith("BLOCKED_") || n === "MFA_AUTH_FAILED" || n === "MFA_AUTH_REJECTED" || n === "MFA_RECOVERY_FAILED" || n === "MFA_ENROLLMENT_FAILED" || n === "EMAIL_VERIFICATION_FAILED" || n === "WEBAUTHN_CHALLENGE_FAILED" || n === "WEBAUTHN_ENROLLMENT_FAILED" || n === "PASSKEY_CHALLENGE_FAILED" || n === "FLOWS_EXECUTION_FAILED" || n === "FORMS_SUBMISSION_FAILED" || n === "CIBA_EXCHANGE_FAILED" || n === "CIBA_START_FAILED" || n === "ACTIONS_EXECUTION_FAILED" || n === "RICH_CONSENTS_ACCESS_ERROR" || n === "USER_CANCELED_DEVICE_CONFIRMATION" || n === "TOO_MANY_MFA_FAILURES" || n === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || n === "API_LIMIT" || n === "MAX_AMOUNT_OF_AUTHENTICATORS" ? o[i] = "failure" : n.startsWith("WARNING_") || n === "API_LIMIT_WARNING" || n === "DEPRECATION_NOTICE" || n === "PRE_LOGIN_ASSESSMENT" ? o[i] = "warning" : n === "CODE_SENT" || n === "CODE_LINK_SENT" || n === "MFA_EMAIL_SENT" || n === "MFA_SMS_SENT" || n === "EMAIL_VERIFICATION_SENT" || n === "PUSH_NOTIFICATION_SENT" ? o[i] = "code_sent" : n === "INFORMATION" || n === "INFORMATION_FROM_SS_SSO_OPERATION" || n === "MANAGEMENT_API_READ_OPERATION" || n === "APPI" || n === "ACLS_SUMMARY" || n === "ORGANIZATION_MEMBER_ADDED" ? o[i] = "info" : o[i] = "other";
2152
+ return o;
2153
+ })();
2154
+ function Wn(o) {
2155
+ return ro[o] ?? o;
2156
+ }
2157
+ function Vn(o) {
2158
+ return lo[o] ?? "other";
2159
+ }
2160
+ const co = e.object({
1988
2161
  name: e.string(),
1989
2162
  version: e.string(),
1990
2163
  env: e.object({
1991
2164
  node: e.string().optional()
1992
2165
  }).optional()
1993
- }), lo = e.object({
2166
+ }), po = e.object({
1994
2167
  country_code: e.string().length(2),
1995
2168
  city_name: e.string(),
1996
2169
  latitude: e.string(),
1997
2170
  longitude: e.string(),
1998
2171
  time_zone: e.string(),
1999
2172
  continent_code: e.string()
2000
- }), co = e.object({
2001
- type: ro,
2173
+ }), _o = e.object({
2174
+ type: so,
2002
2175
  date: e.string(),
2003
2176
  description: e.string().optional(),
2004
2177
  ip: e.string().optional(),
@@ -2017,40 +2190,40 @@ const oo = e.nativeEnum(z), no = e.object({
2017
2190
  strategy: e.string().optional(),
2018
2191
  strategy_type: e.string().optional(),
2019
2192
  hostname: e.string().optional(),
2020
- auth0_client: so.optional(),
2193
+ auth0_client: co.optional(),
2021
2194
  log_id: e.string().optional(),
2022
- location_info: lo.optional()
2023
- }), Bn = e.object({
2024
- ...co.shape,
2195
+ location_info: po.optional()
2196
+ }), Xn = e.object({
2197
+ ..._o.shape,
2025
2198
  log_id: e.string()
2026
- }), po = e.enum([
2199
+ }), go = e.enum([
2027
2200
  "http",
2028
2201
  "eventbridge",
2029
2202
  "eventgrid",
2030
2203
  "splunk",
2031
2204
  "datadog",
2032
2205
  "sumo"
2033
- ]), q = e.enum(["active", "paused", "suspended"]), _o = e.object({
2206
+ ]), q = e.enum(["active", "paused", "suspended"]), uo = e.object({
2034
2207
  type: e.string(),
2035
2208
  name: e.string()
2036
- }), go = e.object({
2209
+ }), mo = e.object({
2037
2210
  name: e.string(),
2038
- type: po,
2211
+ type: go,
2039
2212
  status: q.optional(),
2040
2213
  sink: e.record(e.string(), e.unknown()),
2041
- filters: e.array(_o).optional(),
2214
+ filters: e.array(uo).optional(),
2042
2215
  isPriority: e.boolean().optional()
2043
- }), Wn = go.extend({
2216
+ }), qn = mo.extend({
2044
2217
  id: e.string(),
2045
2218
  status: q,
2046
2219
  created_at: e.string().optional(),
2047
2220
  updated_at: e.string().optional()
2048
- }), uo = e.enum([
2221
+ }), Eo = e.enum([
2049
2222
  "auth0",
2050
2223
  "cognito",
2051
2224
  "okta",
2052
2225
  "oidc"
2053
- ]), mo = e.object({
2226
+ ]), So = e.object({
2054
2227
  domain: e.string(),
2055
2228
  client_id: e.string(),
2056
2229
  client_secret: e.string(),
@@ -2059,11 +2232,11 @@ const oo = e.nativeEnum(z), no = e.object({
2059
2232
  }), ho = e.object({
2060
2233
  id: e.string().optional(),
2061
2234
  name: e.string(),
2062
- provider: uo,
2235
+ provider: Eo,
2063
2236
  connection: e.string(),
2064
2237
  enabled: e.boolean().default(!0),
2065
- credentials: mo
2066
- }), Kn = e.object({
2238
+ credentials: So
2239
+ }), zn = e.object({
2067
2240
  id: e.string(),
2068
2241
  created_at: e.string(),
2069
2242
  updated_at: e.string()
@@ -2080,13 +2253,13 @@ const oo = e.nativeEnum(z), no = e.object({
2080
2253
  shields: e.array(e.string()).optional()
2081
2254
  }).optional()
2082
2255
  }).optional()
2083
- }), fo = e.object({
2256
+ }), Ao = e.object({
2084
2257
  enabled: e.boolean().optional(),
2085
2258
  shields: e.array(e.string()).optional(),
2086
2259
  allowlist: e.array(e.string()).optional(),
2087
2260
  mode: e.string().optional(),
2088
2261
  max_attempts: e.number().optional()
2089
- }), So = e.object({
2262
+ }), fo = e.object({
2090
2263
  enabled: e.boolean().optional(),
2091
2264
  shields: e.array(e.string()).optional(),
2092
2265
  allowlist: e.array(e.string()).optional(),
@@ -2100,28 +2273,28 @@ const oo = e.nativeEnum(z), no = e.object({
2100
2273
  rate: e.number().optional()
2101
2274
  }).optional()
2102
2275
  }).optional()
2103
- }), Eo = e.object({
2276
+ }), Io = e.object({
2104
2277
  breached_password_detection: bo.optional(),
2105
- brute_force_protection: fo.optional(),
2106
- suspicious_ip_throttling: So.optional()
2107
- }), yo = e.object({
2278
+ brute_force_protection: Ao.optional(),
2279
+ suspicious_ip_throttling: fo.optional()
2280
+ }), Co = e.object({
2108
2281
  id: e.string().optional(),
2109
2282
  user_id: e.string(),
2110
2283
  password: e.string(),
2111
2284
  algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
2112
2285
  is_current: e.boolean().default(!0)
2113
- }), zn = yo.extend({
2286
+ }), Yn = Co.extend({
2114
2287
  id: e.string(),
2115
2288
  created_at: e.string(),
2116
2289
  updated_at: e.string()
2117
- }), X = e.object({
2290
+ }), z = e.object({
2118
2291
  initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
2119
2292
  initial_ip: e.string().describe("First IP address associated with this session"),
2120
2293
  initial_asn: e.string().describe("First autonomous system number associated with this session"),
2121
2294
  last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
2122
2295
  last_ip: e.string().describe("Last IP address from which this user logged in"),
2123
2296
  last_asn: e.string().describe("Last autonomous system number from which this user logged in")
2124
- }), Ao = e.object({
2297
+ }), Oo = e.object({
2125
2298
  id: e.string(),
2126
2299
  revoked_at: e.string().optional(),
2127
2300
  used_at: e.string().optional(),
@@ -2129,17 +2302,17 @@ const oo = e.nativeEnum(z), no = e.object({
2129
2302
  expires_at: e.string().optional(),
2130
2303
  login_session_id: e.string(),
2131
2304
  idle_expires_at: e.string().optional(),
2132
- device: X.describe(
2305
+ device: z.describe(
2133
2306
  "Metadata related to the device used in the session"
2134
2307
  ),
2135
2308
  clients: e.array(e.string()).describe("List of client details for the session")
2136
- }), qn = e.object({
2309
+ }), Qn = e.object({
2137
2310
  created_at: e.string(),
2138
2311
  updated_at: e.string(),
2139
2312
  authenticated_at: e.string(),
2140
2313
  last_interaction_at: e.string(),
2141
- ...Ao.shape
2142
- }), Xn = e.object({
2314
+ ...Oo.shape
2315
+ }), Zn = e.object({
2143
2316
  kid: e.string().openapi({ description: "The key id of the signing key" }),
2144
2317
  tenant_id: e.string().optional().openapi({
2145
2318
  description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped."
@@ -2167,7 +2340,7 @@ const oo = e.nativeEnum(z), no = e.object({
2167
2340
  type: e.enum(["jwt_signing", "saml_encryption"]).openapi({
2168
2341
  description: "The type of the signing key"
2169
2342
  })
2170
- }), Io = e.object({
2343
+ }), To = e.object({
2171
2344
  id: e.string().optional(),
2172
2345
  // Basic settings
2173
2346
  audience: e.string(),
@@ -2233,10 +2406,10 @@ const oo = e.nativeEnum(z), no = e.object({
2233
2406
  // `/connect/start` despite not being loopback. Off by default.
2234
2407
  allow_http_return_to: e.array(
2235
2408
  e.string().refine(
2236
- (t) => {
2409
+ (o) => {
2237
2410
  try {
2238
- const o = new URL(t);
2239
- return o.protocol === "http:" && (o.pathname === "" || o.pathname === "/") && !o.search && !o.hash && t === o.origin;
2411
+ const n = new URL(o);
2412
+ return n.protocol === "http:" && (n.pathname === "" || n.pathname === "/") && !n.search && !n.hash && o === n.origin;
2240
2413
  } catch {
2241
2414
  return !1;
2242
2415
  }
@@ -2320,7 +2493,7 @@ const oo = e.nativeEnum(z), no = e.object({
2320
2493
  pushed_authorization_requests_supported: e.boolean().optional(),
2321
2494
  authorization_response_iss_parameter_supported: e.boolean().optional(),
2322
2495
  // Attack-protection config (singleton, exposed via /api/v2/attack-protection)
2323
- attack_protection: Eo.optional(),
2496
+ attack_protection: Io.optional(),
2324
2497
  // Guardian MFA Factors configuration (internal storage, exposed via /guardian API)
2325
2498
  mfa: e.object({
2326
2499
  // MFA policy: "never" = MFA disabled, "always" = MFA required for all logins
@@ -2352,14 +2525,19 @@ const oo = e.nativeEnum(z), no = e.object({
2352
2525
  message: e.string().optional()
2353
2526
  }).optional()
2354
2527
  }).optional()
2355
- }), Vn = e.object({
2356
- created_at: e.string().nullable().transform((t) => t ?? ""),
2357
- updated_at: e.string().nullable().transform((t) => t ?? ""),
2358
- ...Io.shape,
2359
- id: e.string()
2528
+ }), Jn = e.object({
2529
+ created_at: e.string().nullable().transform((o) => o ?? ""),
2530
+ updated_at: e.string().nullable().transform((o) => o ?? ""),
2531
+ ...To.shape,
2532
+ id: e.string(),
2533
+ // Computed server-side: true when this tenant is the deployment's control
2534
+ // plane (either `multiTenancyConfig.controlPlaneTenantId` matches the
2535
+ // tenant id, or no multi-tenancy config is set — i.e. single-tenant
2536
+ // deployment). Not persisted; ignored on writes.
2537
+ is_control_plane: e.boolean().optional()
2360
2538
  });
2361
- var Co = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(Co || {});
2362
- const Yn = e.object({
2539
+ var No = /* @__PURE__ */ ((o) => (o.RefreshToken = "refresh_token", o.AuthorizationCode = "authorization_code", o.ClientCredential = "client_credentials", o.Passwordless = "passwordless", o.Password = "password", o.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", o))(No || {});
2540
+ const $n = e.object({
2363
2541
  access_token: e.string(),
2364
2542
  id_token: e.string().optional(),
2365
2543
  scope: e.string().optional(),
@@ -2372,7 +2550,7 @@ e.object({
2372
2550
  code: e.string(),
2373
2551
  state: e.string().optional()
2374
2552
  });
2375
- const To = e.object({
2553
+ const yo = e.object({
2376
2554
  button_border_radius: e.number(),
2377
2555
  button_border_weight: e.number(),
2378
2556
  buttons_style: e.enum(["pill", "rounded", "sharp"]),
@@ -2382,7 +2560,7 @@ const To = e.object({
2382
2560
  show_widget_shadow: e.boolean(),
2383
2561
  widget_border_weight: e.number(),
2384
2562
  widget_corner_radius: e.number()
2385
- }), Oo = e.object({
2563
+ }), Ro = e.object({
2386
2564
  base_focus_color: e.string(),
2387
2565
  base_hover_color: e.string(),
2388
2566
  body_text: e.string(),
@@ -2402,20 +2580,20 @@ const To = e.object({
2402
2580
  success: e.string(),
2403
2581
  widget_background: e.string(),
2404
2582
  widget_border: e.string()
2405
- }), u = e.object({
2583
+ }), m = e.object({
2406
2584
  bold: e.boolean(),
2407
2585
  size: e.number()
2408
- }), wo = e.object({
2409
- body_text: u,
2410
- buttons_text: u,
2586
+ }), Lo = e.object({
2587
+ body_text: m,
2588
+ buttons_text: m,
2411
2589
  font_url: e.string(),
2412
- input_labels: u,
2413
- links: u,
2590
+ input_labels: m,
2591
+ links: m,
2414
2592
  links_style: e.enum(["normal", "underlined"]),
2415
2593
  reference_text_size: e.number(),
2416
- subtitle: u,
2417
- title: u
2418
- }), No = e.object({
2594
+ subtitle: m,
2595
+ title: m
2596
+ }), Fo = e.object({
2419
2597
  background_color: e.string(),
2420
2598
  background_image_url: e.string(),
2421
2599
  page_layout: e.enum(["center", "left", "right"]),
@@ -2428,33 +2606,33 @@ const To = e.object({
2428
2606
  * Optional for backwards compatibility; absent values mean "widget".
2429
2607
  */
2430
2608
  logo_placement: e.enum(["widget", "chip", "none"]).optional()
2431
- }), jo = e.object({
2609
+ }), Do = e.object({
2432
2610
  header_text_alignment: e.enum(["center", "left", "right"]),
2433
2611
  logo_height: e.number(),
2434
2612
  logo_position: e.enum(["center", "left", "none", "right"]),
2435
2613
  logo_url: e.string(),
2436
2614
  social_buttons_layout: e.enum(["bottom", "top"])
2437
- }), ko = e.object({
2438
- borders: To,
2439
- colors: Oo,
2615
+ }), Uo = e.object({
2616
+ borders: yo,
2617
+ colors: Ro,
2440
2618
  displayName: e.string(),
2441
- fonts: wo,
2442
- page_background: No,
2443
- widget: jo
2444
- }), Zn = ko.extend({
2619
+ fonts: Lo,
2620
+ page_background: Fo,
2621
+ widget: Do
2622
+ }), ei = Uo.extend({
2445
2623
  themeId: e.string()
2446
- }), Qn = e.object({
2624
+ }), ti = e.object({
2447
2625
  universal_login_experience: e.enum(["new", "classic"]).default("new"),
2448
2626
  identifier_first: e.boolean().default(!0),
2449
2627
  password_first: e.boolean().default(!1),
2450
2628
  webauthn_platform_first_factor: e.boolean()
2451
- }), $n = e.object({
2629
+ }), oi = e.object({
2452
2630
  name: e.string(),
2453
2631
  enabled: e.boolean().optional().default(!0),
2454
2632
  default_from_address: e.string().optional(),
2455
2633
  credentials: e.record(e.string(), e.unknown()),
2456
2634
  settings: e.object({}).optional()
2457
- }), Ro = e.enum([
2635
+ }), wo = e.enum([
2458
2636
  "verify_email",
2459
2637
  "verify_email_by_code",
2460
2638
  "reset_email",
@@ -2467,8 +2645,8 @@ const To = e.object({
2467
2645
  "change_password",
2468
2646
  "password_reset",
2469
2647
  "user_invitation"
2470
- ]), Jn = e.object({
2471
- template: Ro,
2648
+ ]), ni = e.object({
2649
+ template: wo,
2472
2650
  body: e.string(),
2473
2651
  from: e.string(),
2474
2652
  subject: e.string(),
@@ -2477,7 +2655,7 @@ const To = e.object({
2477
2655
  urlLifetimeInSeconds: e.number().int().nonnegative().optional(),
2478
2656
  includeEmailInRedirect: e.boolean().default(!1),
2479
2657
  enabled: e.boolean().default(!0)
2480
- }), vo = e.object({
2658
+ }), ko = e.object({
2481
2659
  // Internal primary key (ULID). Never sent to clients in the new wire format.
2482
2660
  id: e.string(),
2483
2661
  // Link to the login session
@@ -2490,7 +2668,7 @@ const To = e.object({
2490
2668
  idle_expires_at: e.string().optional(),
2491
2669
  // When the token was last used.
2492
2670
  last_exchanged_at: e.string().optional(),
2493
- device: X,
2671
+ device: z,
2494
2672
  resource_servers: e.array(
2495
2673
  e.object({
2496
2674
  audience: e.string(),
@@ -2511,23 +2689,23 @@ const To = e.object({
2511
2689
  // ISO of the *first* rotation. Anchors the leeway window so siblings minted
2512
2690
  // within the window don't extend the parent's exposure.
2513
2691
  rotated_at: e.string().optional()
2514
- }), ei = e.object({
2692
+ }), ii = e.object({
2515
2693
  // When the refresh token record was created.
2516
2694
  created_at: e.string(),
2517
2695
  // When the token was explicitly revoked (null = still active).
2518
2696
  revoked_at: e.string().optional(),
2519
2697
  // Spread in the rest of the refresh token properties.
2520
- ...vo.shape
2521
- }), ti = e.object({
2698
+ ...ko.shape
2699
+ }), ai = e.object({
2522
2700
  to: e.string(),
2523
2701
  message: e.string()
2524
- }), oi = e.object({
2702
+ }), si = e.object({
2525
2703
  name: e.string(),
2526
2704
  options: e.object({})
2527
- }), Do = e.object({
2705
+ }), jo = e.object({
2528
2706
  value: e.string(),
2529
2707
  description: e.string().optional()
2530
- }), Lo = e.object({
2708
+ }), Mo = e.object({
2531
2709
  token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
2532
2710
  enforce_policies: e.boolean().optional(),
2533
2711
  allow_skipping_userinfo: e.boolean().optional(),
@@ -2537,11 +2715,11 @@ const To = e.object({
2537
2715
  mtls: e.object({
2538
2716
  bound_access_tokens: e.boolean().optional()
2539
2717
  }).optional()
2540
- }), xo = e.object({
2718
+ }), vo = e.object({
2541
2719
  id: e.string().optional(),
2542
2720
  name: e.string(),
2543
2721
  identifier: e.string(),
2544
- scopes: e.array(Do).optional(),
2722
+ scopes: e.array(jo).optional(),
2545
2723
  signing_alg: e.string().optional(),
2546
2724
  signing_secret: e.string().optional(),
2547
2725
  token_lifetime: e.number().default(86400),
@@ -2549,30 +2727,30 @@ const To = e.object({
2549
2727
  skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
2550
2728
  allow_offline_access: e.boolean().optional(),
2551
2729
  verificationKey: e.string().optional(),
2552
- options: Lo.optional(),
2730
+ options: Mo.optional(),
2553
2731
  is_system: e.boolean().optional(),
2554
2732
  metadata: e.record(e.any()).optional()
2555
- }), Uo = e.object({
2556
- ...xo.shape,
2733
+ }), Po = e.object({
2734
+ ...vo.shape,
2557
2735
  created_at: e.string().optional(),
2558
2736
  updated_at: e.string().optional()
2559
- }), ni = e.array(Uo), Fo = e.object({
2737
+ }), ri = e.array(Po), xo = e.object({
2560
2738
  role_id: e.string(),
2561
2739
  resource_server_identifier: e.string(),
2562
2740
  permission_name: e.string()
2563
- }), Po = e.object({
2564
- ...Fo.shape,
2741
+ }), Ho = e.object({
2742
+ ...xo.shape,
2565
2743
  created_at: e.string()
2566
- }), ii = e.array(Po), Mo = e.object({
2744
+ }), li = e.array(Ho), Go = e.object({
2567
2745
  user_id: e.string(),
2568
2746
  resource_server_identifier: e.string(),
2569
2747
  permission_name: e.string(),
2570
2748
  organization_id: e.string().optional()
2571
- }), Ho = e.object({
2572
- ...Mo.shape,
2749
+ }), Bo = e.object({
2750
+ ...Go.shape,
2573
2751
  tenant_id: e.string(),
2574
2752
  created_at: e.string().optional()
2575
- }), ai = e.array(Ho), Go = e.object({
2753
+ }), ci = e.array(Bo), Ko = e.object({
2576
2754
  user_id: e.string(),
2577
2755
  resource_server_identifier: e.string(),
2578
2756
  resource_server_name: e.string(),
@@ -2580,17 +2758,17 @@ const To = e.object({
2580
2758
  description: e.string().nullable().optional(),
2581
2759
  created_at: e.string().optional(),
2582
2760
  organization_id: e.string().optional()
2583
- }), ri = e.array(
2584
- Go
2585
- ), Bo = e.object({
2761
+ }), pi = e.array(
2762
+ Ko
2763
+ ), Wo = e.object({
2586
2764
  user_id: e.string(),
2587
2765
  role_id: e.string(),
2588
2766
  organization_id: e.string().optional()
2589
- }), Wo = e.object({
2590
- ...Bo.shape,
2767
+ }), Vo = e.object({
2768
+ ...Wo.shape,
2591
2769
  tenant_id: e.string(),
2592
2770
  created_at: e.string().optional()
2593
- }), si = e.array(Wo), Ko = e.object({
2771
+ }), _i = e.array(Vo), Xo = e.object({
2594
2772
  id: e.string().optional().openapi({
2595
2773
  description: "The unique identifier of the role. If not provided, one will be generated."
2596
2774
  }),
@@ -2604,13 +2782,13 @@ const To = e.object({
2604
2782
  metadata: e.record(e.any()).optional().openapi({
2605
2783
  description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios."
2606
2784
  })
2607
- }), zo = Ko.extend({
2785
+ }), qo = Xo.extend({
2608
2786
  id: e.string().openapi({
2609
2787
  description: "The unique identifier of the role"
2610
2788
  }),
2611
2789
  created_at: e.string().optional(),
2612
2790
  updated_at: e.string().optional()
2613
- }), li = e.array(zo), qo = e.object({
2791
+ }), di = e.array(qo), zo = e.object({
2614
2792
  logo_url: e.string().optional().openapi({
2615
2793
  description: "URL of the organization's logo"
2616
2794
  }),
@@ -2622,7 +2800,7 @@ const To = e.object({
2622
2800
  description: "Page background color in hex format (e.g., #FFFFFF)"
2623
2801
  })
2624
2802
  }).optional()
2625
- }).optional(), Xo = e.object({
2803
+ }).optional(), Yo = e.object({
2626
2804
  connection_id: e.string().openapi({
2627
2805
  description: "ID of the connection"
2628
2806
  }),
@@ -2635,7 +2813,7 @@ const To = e.object({
2635
2813
  is_signup_enabled: e.boolean().default(!0).openapi({
2636
2814
  description: "Whether signup is enabled for this connection"
2637
2815
  })
2638
- }), Vo = e.object({
2816
+ }), Qo = e.object({
2639
2817
  client_credentials: e.object({
2640
2818
  enforce: e.boolean().default(!1).openapi({
2641
2819
  description: "Whether to enforce token quota limits"
@@ -2647,7 +2825,7 @@ const To = e.object({
2647
2825
  description: "Maximum tokens per hour (0 = unlimited)"
2648
2826
  })
2649
2827
  }).optional()
2650
- }).optional(), Yo = e.object({
2828
+ }).optional(), Zo = e.object({
2651
2829
  id: e.string().optional(),
2652
2830
  name: e.string().min(1).regex(/^[a-z0-9_-]+$/, {
2653
2831
  message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores"
@@ -2657,31 +2835,31 @@ const To = e.object({
2657
2835
  display_name: e.string().optional().openapi({
2658
2836
  description: "The display name of the organization"
2659
2837
  }),
2660
- branding: qo,
2838
+ branding: zo,
2661
2839
  metadata: e.record(e.any()).default({}).optional().openapi({
2662
2840
  description: "Custom metadata for the organization"
2663
2841
  }),
2664
- enabled_connections: e.array(Xo).default([]).optional().openapi({
2842
+ enabled_connections: e.array(Yo).default([]).optional().openapi({
2665
2843
  description: "List of enabled connections for the organization"
2666
2844
  }),
2667
- token_quota: Vo
2668
- }), ci = e.object({
2669
- ...Yo.shape,
2670
- ...a.shape,
2845
+ token_quota: Qo
2846
+ }), gi = e.object({
2847
+ ...Zo.shape,
2848
+ ...s.shape,
2671
2849
  id: e.string(),
2672
2850
  // Override name to be lenient when reading from database (to support existing uppercase names)
2673
2851
  name: e.string().min(1).openapi({
2674
2852
  description: "The name of the organization"
2675
2853
  })
2676
- }), Zo = e.object({
2854
+ }), Jo = e.object({
2677
2855
  connection_id: e.string().openapi({
2678
2856
  description: "ID of the tenant-level connection to enable for the org."
2679
2857
  }),
2680
2858
  assign_membership_on_login: e.boolean().optional().default(!1),
2681
2859
  show_as_button: e.boolean().optional().default(!0),
2682
2860
  is_signup_enabled: e.boolean().optional().default(!0)
2683
- }), Qo = e.object({
2684
- ...Zo.shape,
2861
+ }), $o = e.object({
2862
+ ...Jo.shape,
2685
2863
  // Auth0 includes the embedded connection in GET responses.
2686
2864
  connection: e.object({
2687
2865
  name: e.string().optional(),
@@ -2689,20 +2867,20 @@ const To = e.object({
2689
2867
  }).optional(),
2690
2868
  created_at: e.string().optional(),
2691
2869
  updated_at: e.string().optional()
2692
- }), pi = e.array(
2693
- Qo
2694
- ), $o = e.object({
2870
+ }), ui = e.array(
2871
+ $o
2872
+ ), en = e.object({
2695
2873
  user_id: e.string().openapi({
2696
2874
  description: "ID of the user"
2697
2875
  }),
2698
2876
  organization_id: e.string().openapi({
2699
2877
  description: "ID of the organization"
2700
2878
  })
2701
- }), di = e.object({
2702
- ...$o.shape,
2703
- ...a.shape,
2879
+ }), mi = e.object({
2880
+ ...en.shape,
2881
+ ...s.shape,
2704
2882
  id: e.string()
2705
- }), _i = e.object({
2883
+ }), Ei = e.object({
2706
2884
  // Session settings
2707
2885
  idle_session_lifetime: e.number().default(72),
2708
2886
  session_lifetime: e.number().default(168),
@@ -2802,7 +2980,7 @@ const To = e.object({
2802
2980
  message: e.string().optional()
2803
2981
  }).optional()
2804
2982
  }).optional()
2805
- }), gi = e.object({
2983
+ }), Si = e.object({
2806
2984
  date: e.string().openapi({
2807
2985
  description: "Date these events occurred in ISO 8601 format",
2808
2986
  example: "2025-12-19"
@@ -2827,40 +3005,40 @@ const To = e.object({
2827
3005
  description: "Approximate date and time the first event occurred in ISO 8601 format",
2828
3006
  example: "2025-12-19T00:00:00.000Z"
2829
3007
  })
2830
- }), ui = e.number().openapi({
3008
+ }), hi = e.number().openapi({
2831
3009
  description: "Number of active users in the last 30 days",
2832
3010
  example: 1234
2833
- }), mi = e.enum([
3011
+ }), bi = e.enum([
2834
3012
  "active-users",
2835
3013
  "logins",
2836
3014
  "signups",
2837
3015
  "refresh-tokens",
2838
3016
  "sessions"
2839
- ]), hi = e.enum(["hour", "day", "week", "month"]), bi = e.enum([
3017
+ ]), Ai = e.enum(["hour", "day", "week", "month"]), fi = e.enum([
2840
3018
  "time",
2841
3019
  "connection",
2842
3020
  "client_id",
2843
3021
  "user_type",
2844
3022
  "event"
2845
- ]), fi = e.enum([
3023
+ ]), Ii = e.enum([
2846
3024
  "password",
2847
3025
  "social",
2848
3026
  "passwordless",
2849
3027
  "enterprise"
2850
- ]), Jo = e.object({
3028
+ ]), tn = e.object({
2851
3029
  name: e.string(),
2852
3030
  type: e.string()
2853
- }), en = e.object({
3031
+ }), on = e.object({
2854
3032
  elapsed: e.number(),
2855
3033
  rows_read: e.number().optional(),
2856
3034
  bytes_read: e.number().optional()
2857
- }), Si = e.object({
2858
- meta: e.array(Jo),
3035
+ }), Ci = e.object({
3036
+ meta: e.array(tn),
2859
3037
  data: e.array(e.record(e.string(), e.any())),
2860
3038
  rows: e.number(),
2861
3039
  rows_before_limit_at_least: e.number().optional(),
2862
- statistics: en.optional()
2863
- }), tn = e.enum([
3040
+ statistics: on.optional()
3041
+ }), nn = e.enum([
2864
3042
  "login",
2865
3043
  "login-id",
2866
3044
  "login-password",
@@ -2889,17 +3067,17 @@ const To = e.object({
2889
3067
  "custom-form",
2890
3068
  "login-passwordless",
2891
3069
  "mfa-login-options"
2892
- ]), on = e.record(e.string(), e.record(e.string(), e.string())).openapi({
3070
+ ]), an = e.record(e.string(), e.record(e.string(), e.string())).openapi({
2893
3071
  type: "object",
2894
3072
  additionalProperties: {
2895
3073
  type: "object",
2896
3074
  additionalProperties: { type: "string" }
2897
3075
  }
2898
- }), Ei = e.object({
2899
- prompt: tn,
3076
+ }), Oi = e.object({
3077
+ prompt: nn,
2900
3078
  language: e.string(),
2901
- custom_text: on
2902
- }), yi = {
3079
+ custom_text: an
3080
+ }), Ti = {
2903
3081
  EMAIL: "email",
2904
3082
  SMS: "sms",
2905
3083
  USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2914,11 +3092,11 @@ const To = e.object({
2914
3092
  SAMLP: "samlp",
2915
3093
  WAAD: "waad",
2916
3094
  ADFS: "adfs"
2917
- }, Ai = {
3095
+ }, Ni = {
2918
3096
  DATABASE: "database",
2919
3097
  SOCIAL: "social",
2920
3098
  PASSWORDLESS: "passwordless"
2921
- }, nn = e.enum([
3099
+ }, sn = e.enum([
2922
3100
  "phone",
2923
3101
  "totp",
2924
3102
  "email",
@@ -2926,9 +3104,9 @@ const To = e.object({
2926
3104
  "webauthn-roaming",
2927
3105
  "webauthn-platform",
2928
3106
  "passkey"
2929
- ]), V = e.object({
3107
+ ]), Y = e.object({
2930
3108
  user_id: e.string(),
2931
- type: nn,
3109
+ type: sn,
2932
3110
  // Phone-specific
2933
3111
  phone_number: e.string().optional(),
2934
3112
  // TOTP-specific
@@ -2943,327 +3121,331 @@ const To = e.object({
2943
3121
  // Common
2944
3122
  confirmed: e.boolean().default(!1)
2945
3123
  });
2946
- function Y(t, o) {
2947
- t.type === "phone" && !t.phone_number && o.addIssue({
3124
+ function Q(o, n) {
3125
+ o.type === "phone" && !o.phone_number && n.addIssue({
2948
3126
  code: e.ZodIssueCode.custom,
2949
3127
  message: "phone_number is required when type is 'phone'",
2950
3128
  path: ["phone_number"]
2951
- }), t.type === "totp" && !t.totp_secret && o.addIssue({
3129
+ }), o.type === "totp" && !o.totp_secret && n.addIssue({
2952
3130
  code: e.ZodIssueCode.custom,
2953
3131
  message: "totp_secret is required when type is 'totp'",
2954
3132
  path: ["totp_secret"]
2955
- }), ["webauthn-roaming", "webauthn-platform", "passkey"].includes(t.type) && (t.credential_id || o.addIssue({
3133
+ }), ["webauthn-roaming", "webauthn-platform", "passkey"].includes(o.type) && (o.credential_id || n.addIssue({
2956
3134
  code: e.ZodIssueCode.custom,
2957
- message: `credential_id is required when type is '${t.type}'`,
3135
+ message: `credential_id is required when type is '${o.type}'`,
2958
3136
  path: ["credential_id"]
2959
- }), t.public_key || o.addIssue({
3137
+ }), o.public_key || n.addIssue({
2960
3138
  code: e.ZodIssueCode.custom,
2961
- message: `public_key is required when type is '${t.type}'`,
3139
+ message: `public_key is required when type is '${o.type}'`,
2962
3140
  path: ["public_key"]
2963
3141
  }));
2964
3142
  }
2965
- const Ii = V.superRefine(Y), Ci = e.object({
2966
- ...V.shape,
3143
+ const yi = Y.superRefine(Q), Ri = e.object({
3144
+ ...Y.shape,
2967
3145
  id: e.string(),
2968
3146
  created_at: e.string(),
2969
3147
  updated_at: e.string()
2970
- }).superRefine(Y);
2971
- function Ti(t) {
2972
- const [o, n] = t.split("|");
2973
- if (!o || !n)
2974
- throw new Error(`Invalid user_id: ${t}`);
2975
- return { connection: o, id: n };
3148
+ }).superRefine(Q);
3149
+ function Li(o) {
3150
+ const [n, i] = o.split("|");
3151
+ if (!n || !i)
3152
+ throw new Error(`Invalid user_id: ${o}`);
3153
+ return { connection: n, id: i };
2976
3154
  }
2977
- function Oi(t) {
3155
+ function Fi(o) {
2978
3156
  const {
2979
- primary: o,
2980
- secondaries: n,
2981
- syncMethods: h = ["create", "rawCreate", "update", "remove", "delete", "set"]
2982
- } = t, E = {
2983
- get(p, r) {
3157
+ primary: n,
3158
+ secondaries: i,
3159
+ syncMethods: S = ["create", "rawCreate", "update", "remove", "delete", "set"]
3160
+ } = o, f = {
3161
+ get(_, r) {
2984
3162
  if (typeof r == "symbol")
2985
- return p[r];
2986
- const d = p[r];
2987
- return typeof d != "function" ? d : h.includes(r) ? async (..._) => {
2988
- const y = await d.apply(p, _), g = [];
2989
- for (const s of n) {
2990
- const b = s.adapter[r];
2991
- if (typeof b != "function")
3163
+ return _[r];
3164
+ const d = _[r];
3165
+ return typeof d != "function" ? d : S.includes(r) ? async (...g) => {
3166
+ const I = await d.apply(_, g), u = [];
3167
+ for (const l of i) {
3168
+ const h = l.adapter[r];
3169
+ if (typeof h != "function")
2992
3170
  continue;
2993
- const A = (async () => {
3171
+ const C = (async () => {
2994
3172
  try {
2995
- await b.apply(s.adapter, _);
2996
- } catch (f) {
3173
+ await h.apply(l.adapter, g);
3174
+ } catch (b) {
2997
3175
  try {
2998
- s.onError ? s.onError(f, r, _) : console.error(
3176
+ l.onError ? l.onError(b, r, g) : console.error(
2999
3177
  `Passthrough adapter: secondary write failed for ${r}:`,
3000
- f
3178
+ b
3001
3179
  );
3002
- } catch (I) {
3180
+ } catch (O) {
3003
3181
  console.error(
3004
3182
  `Passthrough adapter: onError handler threw for ${r}:`,
3005
- I
3183
+ O
3006
3184
  );
3007
3185
  }
3008
3186
  }
3009
3187
  })();
3010
- s.blocking && g.push(A);
3188
+ l.blocking && u.push(C);
3011
3189
  }
3012
- return g.length > 0 && await Promise.all(g), y;
3013
- } : d.bind(p);
3190
+ return u.length > 0 && await Promise.all(u), I;
3191
+ } : d.bind(_);
3014
3192
  }
3015
3193
  };
3016
- return new Proxy(o, E);
3194
+ return new Proxy(n, f);
3017
3195
  }
3018
- function wi(t) {
3019
- return t;
3196
+ function Di(o) {
3197
+ return o;
3020
3198
  }
3021
- function Ni(t) {
3022
- var E, p, r, d, _, y, g, s, b, A, f, I;
3023
- const o = t == null ? void 0 : t.options;
3024
- if (!o)
3199
+ function Ui(o) {
3200
+ var f, _, r, d, g, I, u, l, h, C, b, O;
3201
+ const n = o == null ? void 0 : o.options;
3202
+ if (!n)
3025
3203
  return {
3026
3204
  usernameIdentifierActive: !1,
3027
3205
  emailIdentifierActive: !0,
3028
3206
  usernameMinLength: 1,
3029
3207
  usernameMaxLength: 15
3030
3208
  };
3031
- const n = o.attributes;
3032
- if (n) {
3033
- const Z = ((p = (E = n.username) == null ? void 0 : E.identifier) == null ? void 0 : p.active) === !0, Q = ((d = (r = n.email) == null ? void 0 : r.identifier) == null ? void 0 : d.active) !== !1, $ = ((y = (_ = n.username) == null ? void 0 : _.validation) == null ? void 0 : y.min_length) ?? 1, J = ((s = (g = n.username) == null ? void 0 : g.validation) == null ? void 0 : s.max_length) ?? 15;
3209
+ const i = n.attributes;
3210
+ if (i) {
3211
+ const Z = ((_ = (f = i.username) == null ? void 0 : f.identifier) == null ? void 0 : _.active) === !0, J = ((d = (r = i.email) == null ? void 0 : r.identifier) == null ? void 0 : d.active) !== !1, $ = ((I = (g = i.username) == null ? void 0 : g.validation) == null ? void 0 : I.min_length) ?? 1, ee = ((l = (u = i.username) == null ? void 0 : u.validation) == null ? void 0 : l.max_length) ?? 15;
3034
3212
  return {
3035
3213
  usernameIdentifierActive: Z,
3036
- emailIdentifierActive: Q,
3214
+ emailIdentifierActive: J,
3037
3215
  usernameMinLength: $,
3038
- usernameMaxLength: J
3216
+ usernameMaxLength: ee
3039
3217
  };
3040
3218
  }
3041
3219
  return {
3042
- usernameIdentifierActive: o.requires_username === !0,
3220
+ usernameIdentifierActive: n.requires_username === !0,
3043
3221
  emailIdentifierActive: !0,
3044
- usernameMinLength: ((A = (b = o.validation) == null ? void 0 : b.username) == null ? void 0 : A.min) ?? 1,
3045
- usernameMaxLength: ((I = (f = o.validation) == null ? void 0 : f.username) == null ? void 0 : I.max) ?? 15
3222
+ usernameMinLength: ((C = (h = n.validation) == null ? void 0 : h.username) == null ? void 0 : C.min) ?? 1,
3223
+ usernameMaxLength: ((O = (b = n.validation) == null ? void 0 : b.username) == null ? void 0 : O.max) ?? 15
3046
3224
  };
3047
3225
  }
3048
- function ji(t) {
3049
- return typeof t == "object" && t !== null && !Array.isArray(t);
3226
+ function wi(o) {
3227
+ return typeof o == "object" && o !== null && !Array.isArray(o);
3050
3228
  }
3051
3229
  export {
3052
- _n as Auth0ActionEnum,
3053
- so as Auth0Client,
3054
- F as AuthorizationResponseMode,
3055
- U as AuthorizationResponseType,
3056
- P as CodeChallengeMethod,
3057
- x as ComponentCategory,
3058
- L as ComponentType,
3059
- gn as EmailActionEnum,
3060
- wn as FORM_FIELD_TYPES,
3061
- dn as FlowActionTypeEnum,
3062
- Co as GrantType,
3063
- lo as LocationInfo,
3064
- ao as LogTypes,
3065
- z as LoginSessionState,
3066
- Ge as NodeType,
3067
- Se as RedirectTargetEnum,
3068
- yi as Strategy,
3069
- Ai as StrategyType,
3070
- k as actionDependencySchema,
3071
- oe as actionExecutionErrorSchema,
3072
- ln as actionExecutionInsertSchema,
3073
- ie as actionExecutionLogEntrySchema,
3074
- ae as actionExecutionLogsSchema,
3075
- ne as actionExecutionResultSchema,
3230
+ un as Auth0ActionEnum,
3231
+ co as Auth0Client,
3232
+ P as AuthorizationResponseMode,
3233
+ v as AuthorizationResponseType,
3234
+ x as CodeChallengeMethod,
3235
+ M as ComponentCategory,
3236
+ j as ComponentType,
3237
+ mn as EmailActionEnum,
3238
+ Ln as FORM_FIELD_TYPES,
3239
+ gn as FlowActionTypeEnum,
3240
+ No as GrantType,
3241
+ po as LocationInfo,
3242
+ t as LogTypes,
3243
+ X as LoginSessionState,
3244
+ Be as NodeType,
3245
+ Ae as RedirectTargetEnum,
3246
+ Ti as Strategy,
3247
+ Ni as StrategyType,
3248
+ D as actionDependencySchema,
3249
+ ne as actionExecutionErrorSchema,
3250
+ pn as actionExecutionInsertSchema,
3251
+ ae as actionExecutionLogEntrySchema,
3252
+ se as actionExecutionLogsSchema,
3253
+ ie as actionExecutionResultSchema,
3076
3254
  re as actionExecutionSchema,
3077
- te as actionExecutionStatusSchema,
3078
- ee as actionExecutionTriggerIdSchema,
3079
- v as actionInsertSchema,
3080
- Ke as actionNodeSchema,
3081
- sn as actionSchema,
3082
- R as actionSecretSchema,
3083
- j as actionTriggerSchema,
3084
- rn as actionUpdateSchema,
3085
- se as actionVersionInsertSchema,
3086
- cn as actionVersionSchema,
3087
- ui as activeUsersResponseSchema,
3088
- ce as actorSchema,
3089
- Te as addressSchema,
3090
- Jo as analyticsColumnMetaSchema,
3091
- bi as analyticsGroupBySchema,
3092
- hi as analyticsIntervalSchema,
3093
- Si as analyticsQueryResponseSchema,
3094
- mi as analyticsResourceSchema,
3095
- en as analyticsStatisticsSchema,
3096
- fi as analyticsUserTypeSchema,
3097
- Eo as attackProtectionSchema,
3098
- le as auditCategorySchema,
3099
- me as auditEventInsertSchema,
3100
- pn as auditEventSchema,
3101
- ue as auth0ClientSchema,
3102
- An as auth0FlowInsertSchema,
3103
- Ye as auth0FlowSchema,
3104
- mn as auth0QuerySchema,
3105
- be as auth0UpdateUserActionSchema,
3255
+ oe as actionExecutionStatusSchema,
3256
+ te as actionExecutionTriggerIdSchema,
3257
+ w as actionInsertSchema,
3258
+ Ve as actionNodeSchema,
3259
+ cn as actionSchema,
3260
+ U as actionSecretSchema,
3261
+ F as actionTriggerSchema,
3262
+ ln as actionUpdateSchema,
3263
+ le as actionVersionInsertSchema,
3264
+ _n as actionVersionSchema,
3265
+ hi as activeUsersResponseSchema,
3266
+ pe as actorSchema,
3267
+ Ne as addressSchema,
3268
+ tn as analyticsColumnMetaSchema,
3269
+ fi as analyticsGroupBySchema,
3270
+ Ai as analyticsIntervalSchema,
3271
+ Ci as analyticsQueryResponseSchema,
3272
+ bi as analyticsResourceSchema,
3273
+ on as analyticsStatisticsSchema,
3274
+ Ii as analyticsUserTypeSchema,
3275
+ Io as attackProtectionSchema,
3276
+ ce as auditCategorySchema,
3277
+ Ee as auditEventInsertSchema,
3278
+ dn as auditEventSchema,
3279
+ me as auth0ClientSchema,
3280
+ On as auth0FlowInsertSchema,
3281
+ Qe as auth0FlowSchema,
3282
+ Sn as auth0QuerySchema,
3283
+ he as auth0UpdateUserActionSchema,
3106
3284
  bn as auth0UserResponseSchema,
3107
- Qe as authParamsSchema,
3108
- Ii as authenticationMethodInsertSchema,
3109
- Ci as authenticationMethodSchema,
3110
- nn as authenticationMethodTypeSchema,
3111
- D as baseUserSchema,
3112
- Dt as blockComponentSchema,
3113
- To as bordersSchema,
3114
- In as brandingSchema,
3285
+ Je as authParamsSchema,
3286
+ yi as authenticationMethodInsertSchema,
3287
+ Ri as authenticationMethodSchema,
3288
+ sn as authenticationMethodTypeSchema,
3289
+ k as baseUserSchema,
3290
+ kt as blockComponentSchema,
3291
+ yo as bordersSchema,
3292
+ Tn as brandingSchema,
3115
3293
  bo as breachedPasswordDetectionSchema,
3116
- fo as bruteForceProtectionSchema,
3117
- Ue as buttonComponentSchema,
3294
+ Ao as bruteForceProtectionSchema,
3295
+ ve as buttonComponentSchema,
3118
3296
  Ze as claimsRequestSchema,
3119
- Re as clientGrantInsertSchema,
3120
- En as clientGrantListSchema,
3121
- ve as clientGrantSchema,
3122
- ke as clientInsertSchema,
3123
- Le as clientRegistrationTokenInsertSchema,
3124
- yn as clientRegistrationTokenSchema,
3125
- De as clientRegistrationTokenTypeSchema,
3126
- Sn as clientSchema,
3127
- Je as codeInsertSchema,
3128
- Cn as codeSchema,
3297
+ Ue as clientGrantInsertSchema,
3298
+ In as clientGrantListSchema,
3299
+ we as clientGrantSchema,
3300
+ De as clientInsertSchema,
3301
+ je as clientRegistrationTokenInsertSchema,
3302
+ Cn as clientRegistrationTokenSchema,
3303
+ ke as clientRegistrationTokenTypeSchema,
3304
+ fn as clientSchema,
3305
+ et as codeInsertSchema,
3306
+ Nn as codeSchema,
3129
3307
  $e as codeTypeSchema,
3130
- Oo as colorsSchema,
3131
- Gt as componentMessageSchema,
3132
- He as componentSchema,
3133
- tt as connectionInsertSchema,
3134
- et as connectionOptionsSchema,
3135
- Tn as connectionSchema,
3136
- m as coordinatesSchema,
3137
- Oi as createPassthroughAdapter,
3138
- wi as createWriteOnlyAdapter,
3139
- ot as customDomainInsertSchema,
3140
- it as customDomainSchema,
3141
- On as customDomainWithTenantIdSchema,
3142
- Ei as customTextEntrySchema,
3143
- on as customTextSchema,
3144
- gi as dailyStatsSchema,
3145
- $n as emailProviderSchema,
3146
- Ro as emailTemplateNameSchema,
3147
- Jn as emailTemplateSchema,
3148
- he as emailVerificationRulesSchema,
3149
- fe as emailVerifyActionSchema,
3150
- Ve as endingSchema,
3151
- xt as fieldComponentSchema,
3152
- ye as flowActionStepSchema,
3153
- Ae as flowInsertSchema,
3154
- un as flowSchema,
3155
- Pe as flowsFieldComponentSchema,
3308
+ Ro as colorsSchema,
3309
+ Bt as componentMessageSchema,
3310
+ Ge as componentSchema,
3311
+ ot as connectionInsertSchema,
3312
+ tt as connectionOptionsSchema,
3313
+ yn as connectionSchema,
3314
+ E as coordinatesSchema,
3315
+ Fi as createPassthroughAdapter,
3316
+ Di as createWriteOnlyAdapter,
3317
+ nt as customDomainInsertSchema,
3318
+ at as customDomainSchema,
3319
+ Rn as customDomainWithTenantIdSchema,
3320
+ Oi as customTextEntrySchema,
3321
+ an as customTextSchema,
3322
+ Si as dailyStatsSchema,
3323
+ oi as emailProviderSchema,
3324
+ wo as emailTemplateNameSchema,
3325
+ ni as emailTemplateSchema,
3326
+ Se as emailVerificationRulesSchema,
3327
+ be as emailVerifyActionSchema,
3328
+ Ye as endingSchema,
3329
+ Mt as fieldComponentSchema,
3330
+ Ie as flowActionStepSchema,
3331
+ Ce as flowInsertSchema,
3332
+ En as flowSchema,
3333
+ xe as flowsFieldComponentSchema,
3156
3334
  We as flowsFlowNodeSchema,
3157
- Be as flowsStepNodeSchema,
3158
- u as fontDetailsSchema,
3159
- wo as fontsSchema,
3160
- Nn as formControlSchema,
3161
- Ht as formInsertSchema,
3162
- M as formNodeComponentDefinition,
3163
- Mt as formNodeSchema,
3164
- jn as formSchema,
3165
- Me as genericComponentSchema,
3166
- ze as genericNodeSchema,
3167
- Ni as getConnectionIdentifierConfig,
3168
- Qt as hookCodeInsertSchema,
3169
- Fn as hookCodeSchema,
3170
- xn as hookInsertSchema,
3171
- Un as hookSchema,
3172
- K as hookTemplateId,
3173
- Ln as hookTemplates,
3174
- Ce as identitySchema,
3175
- eo as inviteInsertSchema,
3176
- Pn as inviteSchema,
3177
- Jt as inviteeSchema,
3335
+ Ke as flowsStepNodeSchema,
3336
+ m as fontDetailsSchema,
3337
+ Lo as fontsSchema,
3338
+ Fn as formControlSchema,
3339
+ Gt as formInsertSchema,
3340
+ H as formNodeComponentDefinition,
3341
+ Ht as formNodeSchema,
3342
+ Dn as formSchema,
3343
+ He as genericComponentSchema,
3344
+ Xe as genericNodeSchema,
3345
+ Ui as getConnectionIdentifierConfig,
3346
+ Vn as getLogTypeCategory,
3347
+ Wn as getLogTypeDescription,
3348
+ Jt as hookCodeInsertSchema,
3349
+ xn as hookCodeSchema,
3350
+ vn as hookInsertSchema,
3351
+ Pn as hookSchema,
3352
+ V as hookTemplateId,
3353
+ Mn as hookTemplates,
3354
+ Te as identitySchema,
3355
+ to as inviteInsertSchema,
3356
+ Hn as inviteSchema,
3357
+ eo as inviteeSchema,
3178
3358
  $t as inviterSchema,
3179
- Rn as isBlockComponent,
3180
- Dn as isFieldComponent,
3181
- ji as isPlainObject,
3182
- vn as isWidgetComponent,
3183
- Mn as jwksKeySchema,
3184
- to as jwksSchema,
3185
- Fe as legalComponentSchema,
3186
- ge as locationInfoSchema,
3187
- co as logInsertSchema,
3188
- Bn as logSchema,
3189
- _o as logStreamFilterSchema,
3190
- go as logStreamInsertSchema,
3191
- Wn as logStreamSchema,
3359
+ wn as isBlockComponent,
3360
+ jn as isFieldComponent,
3361
+ wi as isPlainObject,
3362
+ kn as isWidgetComponent,
3363
+ Gn as jwksKeySchema,
3364
+ oo as jwksSchema,
3365
+ Pe as legalComponentSchema,
3366
+ ue as locationInfoSchema,
3367
+ _o as logInsertSchema,
3368
+ Xn as logSchema,
3369
+ uo as logStreamFilterSchema,
3370
+ mo as logStreamInsertSchema,
3371
+ qn as logStreamSchema,
3192
3372
  q as logStreamStatusSchema,
3193
- po as logStreamTypeSchema,
3194
- no as loginSessionAuthStrategySchema,
3195
- io as loginSessionInsertSchema,
3196
- Gn as loginSessionSchema,
3197
- oo as loginSessionStateSchema,
3198
- uo as migrationProviderTypeSchema,
3199
- mo as migrationSourceCredentialsSchema,
3373
+ go as logStreamTypeSchema,
3374
+ lo as logTypeCategories,
3375
+ ro as logTypeDescriptions,
3376
+ io as loginSessionAuthStrategySchema,
3377
+ ao as loginSessionInsertSchema,
3378
+ Kn as loginSessionSchema,
3379
+ no as loginSessionStateSchema,
3380
+ Eo as migrationProviderTypeSchema,
3381
+ So as migrationSourceCredentialsSchema,
3200
3382
  ho as migrationSourceInsertSchema,
3201
- Kn as migrationSourceSchema,
3383
+ zn as migrationSourceSchema,
3202
3384
  qe as nodeSchema,
3203
- Hn as openIDConfigurationSchema,
3204
- qo as organizationBrandingSchema,
3205
- Zo as organizationConnectionInsertSchema,
3206
- pi as organizationConnectionListSchema,
3207
- Qo as organizationConnectionSchema,
3208
- Xo as organizationEnabledConnectionSchema,
3209
- Yo as organizationInsertSchema,
3210
- ci as organizationSchema,
3211
- Vo as organizationTokenQuotaSchema,
3212
- No as pageBackgroundSchema,
3213
- Ti as parseUserId,
3214
- yo as passwordInsertSchema,
3215
- zn as passwordSchema,
3216
- Ie as profileDataSchema,
3217
- tn as promptScreenSchema,
3218
- Qn as promptSettingSchema,
3219
- Ee as redirectActionSchema,
3220
- vo as refreshTokenInsertSchema,
3221
- ei as refreshTokenSchema,
3385
+ Bn as openIDConfigurationSchema,
3386
+ zo as organizationBrandingSchema,
3387
+ Jo as organizationConnectionInsertSchema,
3388
+ ui as organizationConnectionListSchema,
3389
+ $o as organizationConnectionSchema,
3390
+ Yo as organizationEnabledConnectionSchema,
3391
+ Zo as organizationInsertSchema,
3392
+ gi as organizationSchema,
3393
+ Qo as organizationTokenQuotaSchema,
3394
+ Fo as pageBackgroundSchema,
3395
+ Li as parseUserId,
3396
+ Co as passwordInsertSchema,
3397
+ Yn as passwordSchema,
3398
+ Oe as profileDataSchema,
3399
+ nn as promptScreenSchema,
3400
+ ti as promptSettingSchema,
3401
+ fe as redirectActionSchema,
3402
+ ko as refreshTokenInsertSchema,
3403
+ ii as refreshTokenSchema,
3222
3404
  de as requestContextSchema,
3223
- xo as resourceServerInsertSchema,
3224
- ni as resourceServerListSchema,
3225
- Lo as resourceServerOptionsSchema,
3226
- Uo as resourceServerSchema,
3227
- Do as resourceServerScopeSchema,
3228
- _e as responseContextSchema,
3229
- xe as richTextComponentSchema,
3230
- Ko as roleInsertSchema,
3231
- li as roleListSchema,
3232
- Fo as rolePermissionInsertSchema,
3233
- ii as rolePermissionListSchema,
3234
- Po as rolePermissionSchema,
3235
- zo as roleSchema,
3236
- Bt as screenLinkSchema,
3237
- Ao as sessionInsertSchema,
3238
- qn as sessionSchema,
3239
- Xn as signingKeySchema,
3240
- oi as smsProviderSchema,
3241
- ti as smsSendParamsSchema,
3242
- Xe as startSchema,
3243
- So as suspiciousIpThrottlingSchema,
3244
- pe as targetSchema,
3245
- Io as tenantInsertSchema,
3246
- Vn as tenantSchema,
3247
- _i as tenantSettingsSchema,
3248
- ko as themeInsertSchema,
3249
- Zn as themeSchema,
3250
- Yn as tokenResponseSchema,
3405
+ vo as resourceServerInsertSchema,
3406
+ ri as resourceServerListSchema,
3407
+ Mo as resourceServerOptionsSchema,
3408
+ Po as resourceServerSchema,
3409
+ jo as resourceServerScopeSchema,
3410
+ ge as responseContextSchema,
3411
+ Me as richTextComponentSchema,
3412
+ Xo as roleInsertSchema,
3413
+ di as roleListSchema,
3414
+ xo as rolePermissionInsertSchema,
3415
+ li as rolePermissionListSchema,
3416
+ Ho as rolePermissionSchema,
3417
+ qo as roleSchema,
3418
+ Kt as screenLinkSchema,
3419
+ Oo as sessionInsertSchema,
3420
+ Qn as sessionSchema,
3421
+ Zn as signingKeySchema,
3422
+ si as smsProviderSchema,
3423
+ ai as smsSendParamsSchema,
3424
+ ze as startSchema,
3425
+ fo as suspiciousIpThrottlingSchema,
3426
+ _e as targetSchema,
3427
+ To as tenantInsertSchema,
3428
+ Jn as tenantSchema,
3429
+ Ei as tenantSettingsSchema,
3430
+ Uo as themeInsertSchema,
3431
+ ei as themeSchema,
3432
+ $n as tokenResponseSchema,
3251
3433
  hn as totalsSchema,
3252
- kn as uiScreenSchema,
3253
- Oe as userInsertSchema,
3254
- $o as userOrganizationInsertSchema,
3255
- di as userOrganizationSchema,
3256
- Mo as userPermissionInsertSchema,
3257
- ai as userPermissionListSchema,
3258
- Ho as userPermissionSchema,
3259
- ri as userPermissionWithDetailsListSchema,
3260
- Go as userPermissionWithDetailsSchema,
3261
- fn as userResponseSchema,
3262
- Bo as userRoleInsertSchema,
3263
- si as userRoleListSchema,
3264
- Wo as userRoleSchema,
3265
- we as userSchema,
3266
- nt as verificationMethodsSchema,
3267
- Lt as widgetComponentSchema,
3268
- jo as widgetSchema
3434
+ Un as uiScreenSchema,
3435
+ ye as userInsertSchema,
3436
+ en as userOrganizationInsertSchema,
3437
+ mi as userOrganizationSchema,
3438
+ Go as userPermissionInsertSchema,
3439
+ ci as userPermissionListSchema,
3440
+ Bo as userPermissionSchema,
3441
+ pi as userPermissionWithDetailsListSchema,
3442
+ Ko as userPermissionWithDetailsSchema,
3443
+ An as userResponseSchema,
3444
+ Wo as userRoleInsertSchema,
3445
+ _i as userRoleListSchema,
3446
+ Vo as userRoleSchema,
3447
+ Re as userSchema,
3448
+ it as verificationMethodsSchema,
3449
+ jt as widgetComponentSchema,
3450
+ Do as widgetSchema
3269
3451
  };