@authhero/adapter-interfaces 2.3.0 → 2.4.0

package/dist/adapter-interfaces.mjs

@@ -1,25 +1,25 @@
 import { z as e } from "@hono/zod-openapi";
-const a = e.object({
+const s = e.object({
   created_at: e.string(),
   updated_at: e.string()
-}), j = e.object({
+}), F = e.object({
   id: e.string(),
   version: e.string().optional()
-}), k = e.object({
+}), D = e.object({
   name: e.string(),
   version: e.string()
-}), R = e.object({
+}), U = e.object({
   name: e.string(),
   // Optional on writes so PATCH callers can omit the value to preserve the
   // existing secret. The adapter merges by name when value is missing.
   value: e.string().optional()
-}), v = e.object({
+}), w = e.object({
   name: e.string().max(255),
   code: e.string().max(1e5),
-  supported_triggers: e.array(j).optional(),
+  supported_triggers: e.array(F).optional(),
   runtime: e.string().max(50).optional(),
-  dependencies: e.array(k).optional(),
-  secrets: e.array(R).optional(),
+  dependencies: e.array(D).optional(),
+  secrets: e.array(U).optional(),
   // Marks this action as a shared template owned by the control-plane tenant.
   // Other tenants can opt-in by creating a row with the same `name` and
   // `inherit: true`; at execute time the loader reads code from this row.
@@ -28,10 +28,10 @@ const a = e.object({
   // read through from the control-plane system action with a matching name.
   // The local `secrets` still override (local-first then upstream fallback).
   inherit: e.boolean().optional()
-}), sn = v.partial().extend({
+}), ln = w.partial().extend({
   status: e.enum(["draft", "built"]).optional(),
   deployed_at: e.string().optional()
-}), rn = v.extend({
+}), cn = w.extend({
   id: e.string(),
   tenant_id: e.string(),
   status: e.enum(["draft", "built"]).default("built"),
@@ -43,63 +43,63 @@ const a = e.object({
       value: e.string().optional()
     })
   ).optional(),
-  ...a.shape
-}), ee = e.string(), te = e.enum([
+  ...s.shape
+}), te = e.string(), oe = e.enum([
   "unspecified",
   "pending",
   "final",
   "partial",
   "canceled",
   "suspended"
-]), oe = e.object({
+]), ne = e.object({
   id: e.string(),
   msg: e.string(),
   url: e.string().optional()
-}), ne = e.object({
+}), ie = e.object({
   action_name: e.string(),
-  error: oe.nullable(),
+  error: ne.nullable(),
   started_at: e.string(),
   ended_at: e.string()
-}), ie = e.object({
+}), ae = e.object({
   level: e.enum(["log", "info", "warn", "error", "debug"]),
   message: e.string()
-}), ae = e.array(
+}), se = e.array(
   e.object({
     action_name: e.string(),
-    lines: e.array(ie)
+    lines: e.array(ae)
   })
-), se = e.object({
+), re = e.object({
   id: e.string(),
   tenant_id: e.string(),
-  trigger_id: ee,
-  status: te,
-  results: e.array(ne),
-  logs: ae.optional(),
+  trigger_id: te,
+  status: oe,
+  results: e.array(ie),
+  logs: se.optional(),
   created_at: e.string(),
   updated_at: e.string()
-}), ln = se.omit({
+}), pn = re.omit({
   tenant_id: !0,
   created_at: !0,
   updated_at: !0
-}), re = e.object({
+}), le = e.object({
   action_id: e.string(),
   code: e.string().max(1e5),
   runtime: e.string().max(50).optional(),
-  dependencies: e.array(k).optional(),
-  secrets: e.array(R).optional(),
-  supported_triggers: e.array(j).optional(),
+  dependencies: e.array(D).optional(),
+  secrets: e.array(U).optional(),
+  supported_triggers: e.array(F).optional(),
   deployed: e.boolean().default(!0)
-}), cn = re.extend({
+}), _n = le.extend({
   id: e.string(),
   tenant_id: e.string(),
   number: e.number().int(),
-  ...a.shape
-}), le = e.enum([
+  ...s.shape
+}), ce = e.enum([
   "user_action",
   "admin_action",
   "system",
   "api"
-]), ce = e.object({
+]), pe = e.object({
   type: e.enum(["user", "admin", "system", "api_key", "client_credentials"]),
   id: e.string().optional(),
   email: e.string().optional(),
@@ -107,7 +107,7 @@ const a = e.object({
   org_name: e.string().optional(),
   scopes: e.array(e.string()).optional(),
   client_id: e.string().optional()
-}), pe = e.object({
+}), _e = e.object({
   type: e.string(),
   id: e.string(),
   before: e.record(e.unknown()).optional(),
@@ -121,56 +121,56 @@ const a = e.object({
   ip: e.string(),
   user_agent: e.string().optional(),
   correlation_id: e.string().optional()
-}), _e = e.object({
+}), ge = e.object({
   status_code: e.number(),
   body: e.unknown().optional()
-}), ge = e.object({
+}), ue = e.object({
   country_code: e.string(),
   city_name: e.string(),
   latitude: e.string(),
   longitude: e.string(),
   time_zone: e.string(),
   continent_code: e.string()
-}), ue = e.object({
+}), me = e.object({
   name: e.string(),
   version: e.string(),
   env: e.record(e.string()).optional()
-}), me = e.object({
+}), Ee = e.object({
   tenant_id: e.string(),
   event_type: e.string(),
   log_type: e.string(),
   description: e.string().optional(),
-  category: le,
-  actor: ce,
-  target: pe,
+  category: ce,
+  actor: pe,
+  target: _e,
   request: de,
-  response: _e.optional(),
+  response: ge.optional(),
   connection: e.string().optional(),
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
   audience: e.string().optional(),
   scope: e.string().optional(),
-  location: ge.optional(),
-  auth0_client: ue.optional(),
+  location: ue.optional(),
+  auth0_client: me.optional(),
   hostname: e.string(),
   is_mobile: e.boolean().optional(),
   timestamp: e.string()
-}), pn = me.extend({
+}), dn = Ee.extend({
   id: e.string()
-}), dn = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), _n = e.enum([
+}), gn = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), un = e.enum([
   "CREATE_USER",
   "GET_USER",
   "UPDATE_USER",
   "SEND_REQUEST",
   "SEND_EMAIL"
-]), gn = e.enum(["VERIFY_EMAIL"]), he = e.object({
+]), mn = e.enum(["VERIFY_EMAIL"]), Se = e.object({
   require_mx_record: e.boolean().optional(),
   block_aliases: e.boolean().optional(),
   block_free_emails: e.boolean().optional(),
   block_disposable_emails: e.boolean().optional(),
   blocklist: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional()
-}), be = e.object({
+}), he = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("AUTH0"),
@@ -182,7 +182,7 @@ const a = e.object({
     user_id: e.string(),
     changes: e.record(e.string(), e.any())
   })
-}), fe = e.object({
+}), be = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("EMAIL"),
@@ -191,9 +191,9 @@ const a = e.object({
   mask_output: e.boolean().optional(),
   params: e.object({
     email: e.string(),
-    rules: he.optional()
+    rules: Se.optional()
   })
-}), Se = e.enum(["change-email", "account", "custom"]), Ee = e.object({
+}), Ae = e.enum(["change-email", "account", "custom"]), fe = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("REDIRECT"),
@@ -201,39 +201,39 @@ const a = e.object({
   allow_failure: e.boolean().optional(),
   mask_output: e.boolean().optional(),
   params: e.object({
-    target: Se.openapi({
+    target: Ae.openapi({
       description: "The predefined target to redirect to, or 'custom' for a custom URL"
     }),
     custom_url: e.string().optional().openapi({
       description: "Custom URL to redirect to when target is 'custom'"
     })
   })
-}), ye = e.union([
+}), Ie = e.union([
+  he,
   be,
-  fe,
-  Ee
-]), Ae = e.object({
+  fe
+]), Ce = e.object({
   name: e.string().min(1).max(150).openapi({
     description: "The name of the flow"
   }),
   // Actions is an array of action steps (Auth0 stores as JSON blob)
-  actions: e.array(ye).optional().default([]).openapi({
+  actions: e.array(Ie).optional().default([]).openapi({
     description: "The list of actions to execute in sequence"
   })
-}), un = Ae.extend({
-  ...a.shape,
+}), En = Ce.extend({
+  ...s.shape,
   id: e.string().openapi({
     description: "Unique identifier for the flow",
     example: "af_12tMpdJ3iek7svMyZkSh5M"
   })
-}), mn = e.object({
-  page: e.string().min(0).optional().default("0").transform((t) => parseInt(t, 10)).openapi({
+}), Sn = e.object({
+  page: e.string().min(0).optional().default("0").transform((o) => parseInt(o, 10)).openapi({
     description: "The page number where 0 is the first page"
   }),
-  per_page: e.string().min(1).optional().default("10").transform((t) => parseInt(t, 10)).openapi({
+  per_page: e.string().min(1).optional().default("10").transform((o) => parseInt(o, 10)).openapi({
     description: "The number of items per page"
   }),
-  include_totals: e.string().optional().default("false").transform((t) => t === "true").openapi({
+  include_totals: e.string().optional().default("false").transform((o) => o === "true").openapi({
     description: "If the total number of items should be included in the response"
   }),
   sort: e.string().regex(/^.+:(-1|1)$/).optional().openapi({
@@ -247,7 +247,7 @@ const a = e.object({
   limit: e.number(),
   length: e.number(),
   total: e.number().optional()
-}), Ie = e.object({
+}), Oe = e.object({
   email: e.string().optional(),
   email_verified: e.boolean().optional(),
   name: e.string().optional(),
@@ -256,7 +256,7 @@ const a = e.object({
   phone_number: e.string().optional(),
   phone_verified: e.boolean().optional(),
   family_name: e.string().optional()
-}).catchall(e.any()), Ce = e.object({
+}).catchall(e.any()), Te = e.object({
   connection: e.string(),
   user_id: e.string(),
   provider: e.string(),
@@ -269,8 +269,8 @@ const a = e.object({
   access_token: e.string().optional(),
   access_token_secret: e.string().optional(),
   refresh_token: e.string().optional(),
-  profileData: Ie.optional()
-}), Te = e.object({
+  profileData: Oe.optional()
+}), Ne = e.object({
   formatted: e.string().optional(),
   // Full mailing address
   street_address: e.string().optional(),
@@ -283,9 +283,9 @@ const a = e.object({
   // Zip code or postal code
   country: e.string().optional()
   // Country name
-}).optional(), D = e.object({
-  email: e.string().optional().transform((t) => t && t.toLowerCase()),
-  username: e.string().refine((t) => !t.includes("@"), {
+}).optional(), k = e.object({
+  email: e.string().optional().transform((o) => o && o.toLowerCase()),
+  username: e.string().refine((o) => !o.includes("@"), {
     message: 'Usernames must not contain "@". Use the email field for email addresses.'
   }).optional(),
   phone_number: e.string().optional(),
@@ -315,8 +315,8 @@ const a = e.object({
   zoneinfo: e.string().optional(),
   // e.g., "Europe/Paris"
   // OIDC address claim (OIDC Core 5.1.1)
-  address: Te
-}), Oe = D.extend({
+  address: Ne
+}), ye = k.extend({
   email_verified: e.boolean().default(!1),
   verify_email: e.boolean().optional(),
   last_ip: e.string().optional(),
@@ -339,31 +339,31 @@ const a = e.object({
     hash: e.string(),
     algorithm: e.string()
   }).optional()
-}), we = e.object({
-  ...Oe.omit({ password: !0 }).shape,
-  ...a.shape,
+}), Re = e.object({
+  ...ye.omit({ password: !0 }).shape,
+  ...s.shape,
   user_id: e.string(),
   provider: e.string(),
   is_social: e.boolean(),
   email: e.string().optional(),
   login_count: e.number().default(0),
-  identities: e.array(Ce).optional()
-}), bn = we.omit({
+  identities: e.array(Te).optional()
+}), bn = Re.omit({
   registration_completed_at: !0
-}), fn = D.extend({
+}), An = k.extend({
   login_count: e.number(),
   multifactor: e.array(e.string()).optional(),
   last_ip: e.string().optional(),
   last_login: e.string().optional(),
   user_id: e.string()
 }).catchall(e.any());
-let Ne = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", je = (t = 21) => {
-  let o = "", n = crypto.getRandomValues(new Uint8Array(t |= 0));
-  for (; t--; )
-    o += Ne[n[t] & 63];
-  return o;
+let Le = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Fe = (o = 21) => {
+  let n = "", i = crypto.getRandomValues(new Uint8Array(o |= 0));
+  for (; o--; )
+    n += Le[i[o] & 63];
+  return n;
 };
-const ke = e.object({
+const De = e.object({
   client_id: e.string().optional().openapi({
     description: "ID of this client. Generated server-side if omitted (Auth0 behavior)."
   }),
@@ -376,7 +376,7 @@ const ke = e.object({
   global: e.boolean().default(!1).openapi({
     description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)."
   }),
-  client_secret: e.string().default(() => je()).optional().openapi({
+  client_secret: e.string().default(() => Fe()).optional().openapi({
     description: "Client secret (which you must not make public)."
   }),
   app_type: e.enum([
@@ -584,14 +584,14 @@ const ke = e.object({
   user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({
     description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies."
   })
-}), Sn = e.object({
+}), fn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
-  ...ke.shape,
+  ...De.shape,
   // Insert allows omitting (server-generated to match Auth0). The read schema
   // always has it — the row in storage is non-null.
   client_id: e.string()
-}), Re = e.object({
+}), Ue = e.object({
   client_id: e.string().min(1).openapi({
     description: "ID of the client."
   }),
@@ -616,37 +616,37 @@ const ke = e.object({
   authorization_details_types: e.array(e.string()).optional().openapi({
     description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement."
   })
-}), ve = e.object({
+}), we = e.object({
   id: e.string().openapi({
     description: "ID of the client grant."
   }),
-  ...Re.shape,
+  ...Ue.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), En = e.array(ve), De = e.enum(["iat", "rat"]), Le = e.object({
+}), In = e.array(we), ke = e.enum(["iat", "rat"]), je = e.object({
   id: e.string(),
   token_hash: e.string(),
-  type: De,
+  type: ke,
   client_id: e.string().optional(),
   sub: e.string().optional(),
   constraints: e.record(e.unknown()).optional(),
   single_use: e.boolean().default(!1),
   expires_at: e.string().optional()
-}), yn = e.object({
+}), Cn = e.object({
   created_at: e.string(),
   used_at: e.string().optional(),
   revoked_at: e.string().optional(),
-  ...Le.shape
-}), m = e.object({
+  ...je.shape
+}), E = e.object({
   x: e.number(),
   y: e.number()
 });
-var L = /* @__PURE__ */ ((t) => (t.RICH_TEXT = "RICH_TEXT", t.NEXT_BUTTON = "NEXT_BUTTON", t.BACK_BUTTON = "BACK_BUTTON", t.SUBMIT_BUTTON = "SUBMIT_BUTTON", t.DIVIDER = "DIVIDER", t.TEXT = "TEXT", t.EMAIL = "EMAIL", t.PASSWORD = "PASSWORD", t.NUMBER = "NUMBER", t.PHONE = "PHONE", t.DATE = "DATE", t.CHECKBOX = "CHECKBOX", t.RADIO = "RADIO", t.SELECT = "SELECT", t.HIDDEN = "HIDDEN", t.LEGAL = "LEGAL", t))(L || {}), x = /* @__PURE__ */ ((t) => (t.BLOCK = "BLOCK", t.FIELD = "FIELD", t))(x || {});
-const C = e.object({
+var j = /* @__PURE__ */ ((o) => (o.RICH_TEXT = "RICH_TEXT", o.NEXT_BUTTON = "NEXT_BUTTON", o.BACK_BUTTON = "BACK_BUTTON", o.SUBMIT_BUTTON = "SUBMIT_BUTTON", o.DIVIDER = "DIVIDER", o.TEXT = "TEXT", o.EMAIL = "EMAIL", o.PASSWORD = "PASSWORD", o.NUMBER = "NUMBER", o.PHONE = "PHONE", o.DATE = "DATE", o.CHECKBOX = "CHECKBOX", o.RADIO = "RADIO", o.SELECT = "SELECT", o.HIDDEN = "HIDDEN", o.LEGAL = "LEGAL", o))(j || {}), M = /* @__PURE__ */ ((o) => (o.BLOCK = "BLOCK", o.FIELD = "FIELD", o))(M || {});
+const T = e.object({
   id: e.string(),
-  category: e.nativeEnum(x),
-  type: e.nativeEnum(L)
-}), xe = C.extend({
+  category: e.nativeEnum(M),
+  type: e.nativeEnum(j)
+}), Me = T.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -658,7 +658,7 @@ const C = e.object({
   config: e.object({
     content: e.string()
   }).passthrough()
-}), Ue = C.extend({
+}), ve = T.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -680,7 +680,7 @@ const C = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), Fe = C.extend({
+}), Pe = T.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -694,7 +694,7 @@ const C = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), Pe = C.extend({
+}), xe = T.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -747,28 +747,28 @@ const C = e.object({
     label: e.string().optional(),
     placeholder: e.string().optional()
   }).passthrough()
-}), Me = e.object({
+}), He = e.object({
   id: e.string(),
   category: e.string(),
   type: e.string()
-}).passthrough(), He = e.union([
-  xe,
-  Ue,
-  Fe,
+}).passthrough(), Ge = e.union([
+  Me,
+  ve,
   Pe,
-  Me
+  xe,
+  He
 ]);
-var Ge = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(Ge || {});
-const Be = e.object({
+var Be = /* @__PURE__ */ ((o) => (o.STEP = "STEP", o.FLOW = "FLOW", o.CONDITION = "CONDITION", o.ACTION = "ACTION", o))(Be || {});
+const Ke = e.object({
   id: e.string(),
   type: e.literal(
     "STEP"
     /* STEP */
   ),
-  coordinates: m,
+  coordinates: E,
   alias: e.string().optional(),
   config: e.object({
-    components: e.array(He),
+    components: e.array(Ge),
     next_node: e.string()
   }).passthrough()
 }), We = e.object({
@@ -777,19 +777,19 @@ const Be = e.object({
     "FLOW"
     /* FLOW */
   ),
-  coordinates: m,
+  coordinates: E,
   alias: e.string().optional(),
   config: e.object({
     flow_id: e.string(),
     next_node: e.string()
   })
-}), Ke = e.object({
+}), Ve = e.object({
   id: e.string(),
   type: e.literal(
     "ACTION"
     /* ACTION */
   ),
-  coordinates: m,
+  coordinates: E,
   alias: e.string().optional(),
   config: e.object({
     action_type: e.enum(["REDIRECT"]).openapi({
@@ -805,43 +805,43 @@ const Be = e.object({
       description: "The next node to navigate to after action (for non-redirect actions)"
     })
   }).passthrough()
-}), ze = e.object({
+}), Xe = e.object({
   id: e.string(),
   type: e.string(),
-  coordinates: m
+  coordinates: E
 }).passthrough(), qe = e.union([
-  Be,
-  We,
   Ke,
-  ze
-]), Xe = e.object({
+  We,
+  Ve,
+  Xe
+]), ze = e.object({
   next_node: e.string(),
-  coordinates: m
-}).passthrough(), Ve = e.object({
-  resume_flow: e.boolean().optional(),
-  coordinates: m
+  coordinates: E
 }).passthrough(), Ye = e.object({
+  resume_flow: e.boolean().optional(),
+  coordinates: E
+}).passthrough(), Qe = e.object({
   id: e.string(),
   name: e.string(),
   languages: e.object({
     primary: e.string()
   }).passthrough(),
   nodes: e.array(qe),
-  start: Xe,
-  ending: Ve,
+  start: ze,
+  ending: Ye,
   created_at: e.string(),
   updated_at: e.string(),
   links: e.object({
     sdkSrc: e.string().optional(),
     sdk_src: e.string().optional()
   }).passthrough()
-}).passthrough(), An = Ye.omit({
+}).passthrough(), On = Qe.omit({
   id: !0,
   created_at: !0,
   updated_at: !0
 });
-var U = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.ID_TOKEN = "id_token", t.TOKEN_ID_TOKEN = "id_token token", t.CODE = "code", t.CODE_ID_TOKEN = "code id_token", t.CODE_TOKEN = "code token", t.CODE_ID_TOKEN_TOKEN = "code id_token token", t))(U || {}), F = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(F || {}), P = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(P || {});
-const N = e.union([
+var v = /* @__PURE__ */ ((o) => (o.TOKEN = "token", o.ID_TOKEN = "id_token", o.TOKEN_ID_TOKEN = "id_token token", o.CODE = "code", o.CODE_ID_TOKEN = "code id_token", o.CODE_TOKEN = "code token", o.CODE_ID_TOKEN_TOKEN = "code id_token token", o))(v || {}), P = /* @__PURE__ */ ((o) => (o.QUERY = "query", o.FRAGMENT = "fragment", o.FORM_POST = "form_post", o.WEB_MESSAGE = "web_message", o.SAML_POST = "saml_post", o))(P || {}), x = /* @__PURE__ */ ((o) => (o.S256 = "S256", o.Plain = "plain", o))(x || {});
+const L = e.union([
   e.null(),
   e.object({
     essential: e.boolean().optional(),
@@ -849,13 +849,13 @@ const N = e.union([
     values: e.array(e.unknown()).optional()
   })
 ]).nullable(), Ze = e.object({
-  userinfo: e.record(e.string(), N).optional(),
-  id_token: e.record(e.string(), N).optional()
-}), Qe = e.object({
+  userinfo: e.record(e.string(), L).optional(),
+  id_token: e.record(e.string(), L).optional()
+}), Je = e.object({
   client_id: e.string(),
   act_as: e.string().optional(),
-  response_type: e.nativeEnum(U).optional(),
-  response_mode: e.nativeEnum(F).optional(),
+  response_type: e.nativeEnum(v).optional(),
+  response_mode: e.nativeEnum(P).optional(),
   redirect_uri: e.string().optional(),
   audience: e.string().optional(),
   organization: e.string().optional(),
@@ -863,7 +863,7 @@ const N = e.union([
   nonce: e.string().optional(),
   scope: e.string().optional(),
   prompt: e.string().optional(),
-  code_challenge_method: e.nativeEnum(P).optional(),
+  code_challenge_method: e.nativeEnum(x).optional(),
   code_challenge: e.string().optional(),
   username: e.string().optional(),
   ui_locales: e.string().optional(),
@@ -878,7 +878,7 @@ const N = e.union([
   claims: Ze.optional(),
   // The following fields are not available in Auth0
   vendor_id: e.string().optional()
-}), In = e.object({
+}), Tn = e.object({
   colors: e.object({
     primary: e.string(),
     // Auth0 supports either a hex color string ("#ffffff") or a gradient
@@ -911,7 +911,7 @@ const N = e.union([
   "authorization_code",
   "oauth2_state",
   "ticket"
-]), Je = e.object({
+]), et = e.object({
   code_id: e.string().openapi({
     description: "The code that will be used in for instance an email verification flow"
   }),
@@ -946,10 +946,10 @@ const N = e.union([
   expires_at: e.string(),
   used_at: e.string().optional(),
   user_id: e.string().optional()
-}), Cn = e.object({
-  ...Je.shape,
+}), Nn = e.object({
+  ...et.shape,
   created_at: e.string()
-}), et = e.object({
+}), tt = e.object({
   kid: e.string().optional(),
   team_id: e.string().optional(),
   realms: e.string().optional(),
@@ -1088,27 +1088,27 @@ const N = e.union([
   // Controls when root user attributes are updated from external IdP
   set_user_root_attributes: e.enum(["on_each_login", "on_first_login", "never_on_login"]).optional()
 });
-function T(t) {
-  if (t !== null) {
-    if (Array.isArray(t))
-      return t.filter((o) => o !== null).map(T);
-    if (t && typeof t == "object") {
-      const o = {};
-      for (const [n, h] of Object.entries(t))
-        h !== null && (o[n] = T(h));
-      return o;
+function N(o) {
+  if (o !== null) {
+    if (Array.isArray(o))
+      return o.filter((n) => n !== null).map(N);
+    if (o && typeof o == "object") {
+      const n = {};
+      for (const [i, S] of Object.entries(o))
+        S !== null && (n[i] = N(S));
+      return n;
     }
-    return t;
+    return o;
   }
 }
-const tt = e.object({
+const ot = e.object({
   id: e.string().optional(),
   name: e.string(),
   display_name: e.string().optional(),
   strategy: e.string(),
   options: e.preprocess(
-    (t) => t === null ? {} : T(t),
-    et
+    (o) => o === null ? {} : N(o),
+    tt
   ).default({}),
   enabled_clients: e.array(e.string()).default([]).optional(),
   response_type: e.custom().optional(),
@@ -1117,11 +1117,11 @@ const tt = e.object({
   show_as_button: e.boolean().optional(),
   metadata: e.record(e.any()).optional(),
   is_system: e.boolean().optional()
-}), Tn = e.object({
+}), yn = e.object({
   id: e.string(),
-  created_at: e.string().transform((t) => t === null ? "" : t),
-  updated_at: e.string().transform((t) => t === null ? "" : t)
-}).extend(tt.shape), ot = e.object({
+  created_at: e.string().transform((o) => o === null ? "" : o),
+  updated_at: e.string().transform((o) => o === null ? "" : o)
+}).extend(ot.shape), nt = e.object({
   domain: e.string(),
   custom_domain_id: e.string().optional(),
   type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -1135,7 +1135,7 @@ const tt = e.object({
     "null"
   ]).optional(),
   domain_metadata: e.record(e.string().max(255)).optional()
-}), nt = e.discriminatedUnion("name", [
+}), it = e.discriminatedUnion("name", [
   e.object({
     name: e.literal("txt"),
     record: e.string(),
@@ -1146,35 +1146,35 @@ const tt = e.object({
     http_body: e.string(),
     http_url: e.string()
   })
-]), it = e.object({
-  ...ot.shape,
+]), at = e.object({
+  ...nt.shape,
   custom_domain_id: e.string(),
   primary: e.boolean(),
   status: e.enum(["disabled", "pending", "pending_verification", "ready"]),
   origin_domain_name: e.string().optional(),
   verification: e.object({
-    methods: e.array(nt)
+    methods: e.array(it)
   }).optional(),
   tls_policy: e.string().optional()
-}), On = it.extend({
+}), Rn = at.extend({
   tenant_id: e.string()
-}), O = e.object({
+}), y = e.object({
   id: e.string(),
   order: e.number().optional(),
   visible: e.boolean().optional().default(!0)
-}), l = O.extend({
+}), c = y.extend({
   category: e.literal("BLOCK").optional()
-}), at = l.extend({
+}), st = c.extend({
   type: e.literal("DIVIDER"),
   config: e.object({
     text: e.string().optional()
   }).optional()
-}), st = l.extend({
+}), rt = c.extend({
   type: e.literal("HTML"),
   config: e.object({
     content: e.string().optional()
   }).optional()
-}), rt = l.extend({
+}), lt = c.extend({
   type: e.literal("IMAGE"),
   config: e.object({
     src: e.string().optional(),
@@ -1182,55 +1182,55 @@ const tt = e.object({
     width: e.number().optional(),
     height: e.number().optional()
   }).optional()
-}), lt = l.extend({
+}), ct = c.extend({
   type: e.literal("JUMP_BUTTON"),
   config: e.object({
     text: e.string().optional(),
     target_step: e.string().optional()
   })
-}), ct = l.extend({
+}), pt = c.extend({
   type: e.literal("RESEND_BUTTON"),
   config: e.object({
     text: e.string().optional(),
     resend_action: e.string().optional()
   })
-}), pt = l.extend({
+}), _t = c.extend({
   type: e.literal("NEXT_BUTTON"),
   config: e.object({
     text: e.string().optional()
   })
-}), dt = l.extend({
+}), dt = c.extend({
   type: e.literal("PREVIOUS_BUTTON"),
   config: e.object({
     text: e.string().optional()
   })
-}), _t = l.extend({
+}), gt = c.extend({
   type: e.literal("RICH_TEXT"),
   config: e.object({
     content: e.string().optional()
   }).optional()
-}), w = O.extend({
+}), R = y.extend({
   category: e.literal("WIDGET").optional(),
   label: e.string().min(1).optional(),
   hint: e.string().min(1).max(500).optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), gt = w.extend({
+}), ut = R.extend({
   type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
   config: e.object({
     credential_type: e.string().optional()
   })
-}), ut = w.extend({
+}), mt = R.extend({
   type: e.literal("GMAPS_ADDRESS"),
   config: e.object({
     api_key: e.string().optional()
   })
-}), mt = w.extend({
+}), Et = R.extend({
   type: e.literal("RECAPTCHA"),
   config: e.object({
     site_key: e.string().optional()
   })
-}), i = O.extend({
+}), a = y.extend({
   category: e.literal("FIELD").optional(),
   label: e.string().min(1).optional(),
   hint: e.string().min(1).max(500).optional(),
@@ -1243,12 +1243,12 @@ const tt = e.object({
   ).optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), ht = i.extend({
+}), St = a.extend({
   type: e.literal("BOOLEAN"),
   config: e.object({
     default_value: e.boolean().optional()
   }).optional()
-}), bt = i.extend({
+}), ht = a.extend({
   type: e.literal("CARDS"),
   config: e.object({
     options: e.array(
@@ -1261,7 +1261,7 @@ const tt = e.object({
     ).optional(),
     multi_select: e.boolean().optional()
   }).optional()
-}), ft = i.extend({
+}), bt = a.extend({
   type: e.literal("CHOICE"),
   config: e.object({
     options: e.array(
@@ -1274,7 +1274,7 @@ const tt = e.object({
     multiple: e.boolean().optional(),
     default_value: e.union([e.string(), e.array(e.string())]).optional()
   }).optional()
-}), St = i.extend({
+}), At = a.extend({
   type: e.literal("CUSTOM"),
   config: e.object({
     component: e.string().optional(),
@@ -1282,7 +1282,7 @@ const tt = e.object({
     schema: e.record(e.any()).optional(),
     code: e.string().optional()
   })
-}), Et = i.extend({
+}), ft = a.extend({
   type: e.literal("DATE"),
   config: e.object({
     format: e.string().optional(),
@@ -1290,7 +1290,7 @@ const tt = e.object({
     max: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), yt = i.extend({
+}), It = a.extend({
   type: e.literal("DROPDOWN"),
   config: e.object({
     options: e.array(
@@ -1304,26 +1304,26 @@ const tt = e.object({
     multiple: e.boolean().optional(),
     default_value: e.union([e.string(), e.array(e.string())]).optional()
   }).optional()
-}), At = i.extend({
+}), Ct = a.extend({
   type: e.literal("EMAIL"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), It = i.extend({
+}), Ot = a.extend({
   type: e.literal("FILE"),
   config: e.object({
     accept: e.string().optional(),
     max_size: e.number().optional(),
     multiple: e.boolean().optional()
   }).optional()
-}), Ct = i.extend({
+}), Tt = a.extend({
   type: e.literal("LEGAL"),
   config: e.object({
     text: e.string(),
     html: e.boolean().optional()
   }).optional()
-}), Tt = i.extend({
+}), Nt = a.extend({
   type: e.literal("NUMBER"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1332,7 +1332,7 @@ const tt = e.object({
     step: e.number().optional(),
     default_value: e.string().optional()
   }).optional()
-}), Ot = i.extend({
+}), yt = a.extend({
   type: e.literal("PASSWORD"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1341,13 +1341,13 @@ const tt = e.object({
     forgot_password_link: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), wt = i.extend({
+}), Rt = a.extend({
   type: e.literal("PAYMENT"),
   config: e.object({
     provider: e.string().optional(),
     currency: e.string().optional()
   }).optional()
-}), Nt = i.extend({
+}), Lt = a.extend({
   type: e.literal("SOCIAL"),
   config: e.object({
     providers: e.array(e.string()).optional(),
@@ -1362,7 +1362,7 @@ const tt = e.object({
       })
     ).optional()
   }).optional()
-}), jt = i.extend({
+}), Ft = a.extend({
   type: e.literal("TEL"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1370,7 +1370,7 @@ const tt = e.object({
     default_value: e.string().optional(),
     allow_email: e.boolean().optional()
   }).optional()
-}), kt = i.extend({
+}), Dt = a.extend({
   type: e.literal("TEXT"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1378,54 +1378,54 @@ const tt = e.object({
     max_length: e.number().optional(),
     default_value: e.string().optional()
   }).optional()
-}), Rt = i.extend({
+}), Ut = a.extend({
   type: e.literal("COUNTRY"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), vt = i.extend({
+}), wt = a.extend({
   type: e.literal("URL"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), Dt = e.discriminatedUnion("type", [
-  at,
+}), kt = e.discriminatedUnion("type", [
   st,
   rt,
   lt,
   ct,
   pt,
+  _t,
   dt,
-  _t
-]), Lt = e.discriminatedUnion("type", [
-  gt,
+  gt
+]), jt = e.discriminatedUnion("type", [
   ut,
-  mt
-]), xt = e.discriminatedUnion("type", [
+  mt,
+  Et
+]), Mt = e.discriminatedUnion("type", [
+  St,
   ht,
   bt,
-  ft,
-  Rt,
-  St,
-  Et,
-  yt,
+  Ut,
   At,
+  ft,
   It,
   Ct,
-  Tt,
   Ot,
-  wt,
+  Tt,
   Nt,
-  jt,
-  kt,
-  vt
-]), M = e.union([
-  Dt,
+  yt,
+  Rt,
   Lt,
-  xt
-]), wn = /* @__PURE__ */ new Set([
+  Ft,
+  Dt,
+  wt
+]), H = e.union([
+  kt,
+  jt,
+  Mt
+]), Ln = /* @__PURE__ */ new Set([
   "BOOLEAN",
   "CARDS",
   "CHOICE",
@@ -1439,7 +1439,7 @@ const tt = e.object({
   "TEL",
   "TEXT",
   "URL"
-]), Nn = e.object({
+]), Fn = e.object({
   id: e.string(),
   type: e.literal("submit"),
   label: e.string(),
@@ -1448,22 +1448,22 @@ const tt = e.object({
   order: e.number().optional(),
   visible: e.boolean().optional().default(!0),
   customizations: e.record(e.string(), e.any()).optional()
-}), S = e.object({
+}), A = e.object({
   x: e.number(),
   y: e.number()
-}), Ut = e.object({
+}), vt = e.object({
   id: e.string(),
   type: e.literal("FLOW"),
-  coordinates: S,
+  coordinates: A,
   alias: e.string().min(1).max(150).optional(),
   config: e.object({
     flow_id: e.string().max(30),
     next_node: e.string().optional()
   })
-}), Ft = e.object({
+}), Pt = e.object({
   id: e.string(),
   type: e.literal("ROUTER"),
-  coordinates: S,
+  coordinates: A,
   alias: e.string().min(1).max(150),
   config: e.object({
     rules: e.array(
@@ -1476,20 +1476,20 @@ const tt = e.object({
     ),
     fallback: e.string()
   })
-}), Pt = e.object({
+}), xt = e.object({
   id: e.string(),
   type: e.literal("STEP"),
-  coordinates: S,
+  coordinates: A,
   alias: e.string().min(1).max(150).optional(),
   config: e.object({
-    components: e.array(M),
+    components: e.array(H),
     next_node: e.string().optional()
   })
-}), Mt = e.discriminatedUnion("type", [
-  Ut,
-  Ft,
-  Pt
-]), Ht = e.object({
+}), Ht = e.discriminatedUnion("type", [
+  vt,
+  Pt,
+  xt
+]), Gt = e.object({
   name: e.string().openapi({
     description: "The name of the form"
   }),
@@ -1502,11 +1502,11 @@ const tt = e.object({
     default: e.string().optional()
   }).optional(),
   translations: e.record(e.string(), e.any()).optional(),
-  nodes: e.array(Mt).optional(),
+  nodes: e.array(Ht).optional(),
   start: e.object({
     hidden_fields: e.array(e.object({ key: e.string(), value: e.string() })).optional(),
     next_node: e.string().optional(),
-    coordinates: S.optional()
+    coordinates: A.optional()
   }).optional(),
   ending: e.object({
     redirection: e.object({
@@ -1514,7 +1514,7 @@ const tt = e.object({
       target: e.string().optional()
     }).optional(),
     after_submit: e.object({ flow_id: e.string().optional() }).optional(),
-    coordinates: S.optional(),
+    coordinates: A.optional(),
     resume_flow: e.boolean().optional()
   }).optional(),
   style: e.object({ css: e.string().optional() }).optional(),
@@ -1524,42 +1524,42 @@ const tt = e.object({
   }).optional()
 }).openapi({
   description: "Schema for flow-based forms (matches Auth0 Forms structure)"
-}), jn = e.object({
-  ...a.shape,
-  ...Ht.shape,
+}), Dn = e.object({
+  ...s.shape,
+  ...Gt.shape,
   id: e.string()
-}), Gt = e.object({
+}), Bt = e.object({
   id: e.number().optional(),
   text: e.string(),
   type: e.enum(["info", "error", "success", "warning"])
-}), Bt = e.object({
+}), Kt = e.object({
   id: e.string().optional(),
   text: e.string(),
   href: e.string(),
   linkText: e.string().optional()
-}), kn = e.object({
+}), Un = e.object({
   /** Screen identifier for CSS targeting (e.g., 'identifier', 'enter-password', 'signup') */
   name: e.string().optional(),
   action: e.string(),
   method: e.enum(["POST", "GET"]),
   title: e.string().optional(),
   description: e.string().optional(),
-  components: e.array(M),
-  messages: e.array(Gt).optional(),
-  links: e.array(Bt).optional(),
+  components: e.array(H),
+  messages: e.array(Bt).optional(),
+  links: e.array(Kt).optional(),
   /** Footer HTML content displayed at the very bottom of the widget (e.g., terms and conditions) */
   footer: e.string().optional()
 });
-function Rn(t) {
-  return t.category === "BLOCK";
+function wn(o) {
+  return o.category === "BLOCK";
 }
-function vn(t) {
-  return t.category === "WIDGET";
+function kn(o) {
+  return o.category === "WIDGET";
 }
-function Dn(t) {
-  return t.category === "FIELD";
+function jn(o) {
+  return o.category === "FIELD";
 }
-const H = e.enum([
+const G = e.enum([
   "pre-user-registration",
   "post-user-registration",
   "post-user-login",
@@ -1568,14 +1568,14 @@ const H = e.enum([
   "pre-user-deletion",
   "post-user-deletion"
   // Potentially other triggers specific to webhooks in the future
-]), G = e.enum([
+]), B = e.enum([
   "pre-user-registration",
   "post-user-registration",
   "post-user-login",
   "validate-registration-username",
   "pre-user-deletion",
   "post-user-deletion"
-]), B = e.enum([
+]), K = e.enum([
   "post-user-login",
   "post-user-registration",
   "post-user-update",
@@ -1585,11 +1585,11 @@ const H = e.enum([
   "credentials-exchange",
   "pre-user-registration",
   "post-user-registration"
-]), K = e.enum([
+]), V = e.enum([
   "ensure-username",
   "set-preferred-username",
   "account-linking"
-]), Ln = {
+]), Mn = {
   "ensure-username": {
     name: "Ensure Username",
     description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1609,7 +1609,7 @@ const H = e.enum([
       "post-user-update"
     ]
   }
-}, c = {
+}, p = {
   enabled: e.boolean().default(!1),
   synchronous: e.boolean().default(!1),
   priority: e.number().optional(),
@@ -1627,70 +1627,70 @@ const H = e.enum([
    */
   metadata: e.record(e.unknown()).optional()
 }, Wt = e.object({
-  ...c,
-  trigger_id: H,
-  url: e.string()
-}), Kt = e.object({
-  ...c,
+  ...p,
   trigger_id: G,
-  form_id: e.string()
-}), zt = e.object({
-  ...c,
+  url: e.string()
+}), Vt = e.object({
+  ...p,
   trigger_id: B,
-  template_id: K
+  form_id: e.string()
+}), Xt = e.object({
+  ...p,
+  trigger_id: K,
+  template_id: V
 }), qt = e.object({
-  ...c,
+  ...p,
   trigger_id: W,
   code_id: e.string()
-}), xn = e.union([
+}), vn = e.union([
   Wt,
-  Kt,
-  zt,
+  Vt,
+  Xt,
   qt
-]), Xt = e.object({
-  ...c,
-  trigger_id: H,
-  ...a.shape,
-  hook_id: e.string(),
-  url: e.string()
-}), Vt = e.object({
-  ...c,
+]), zt = e.object({
+  ...p,
   trigger_id: G,
-  ...a.shape,
+  ...s.shape,
   hook_id: e.string(),
-  form_id: e.string()
+  url: e.string()
 }), Yt = e.object({
-  ...c,
+  ...p,
   trigger_id: B,
-  ...a.shape,
+  ...s.shape,
+  hook_id: e.string(),
+  form_id: e.string()
+}), Qt = e.object({
+  ...p,
+  trigger_id: K,
+  ...s.shape,
   hook_id: e.string(),
-  template_id: K
+  template_id: V
 }), Zt = e.object({
-  ...c,
+  ...p,
   trigger_id: W,
-  ...a.shape,
+  ...s.shape,
   hook_id: e.string(),
   code_id: e.string()
-}), Un = e.union([
-  Xt,
-  Vt,
+}), Pn = e.union([
+  zt,
   Yt,
+  Qt,
   Zt
-]), Qt = e.object({
+]), Jt = e.object({
   code: e.string().max(1e5),
   secrets: e.record(e.string()).optional()
-}), Fn = Qt.extend({
+}), xn = Jt.extend({
   id: e.string(),
   tenant_id: e.string(),
-  ...a.shape
+  ...s.shape
 }), $t = e.object({
   name: e.string().optional()
-}), Jt = e.object({
-  email: e.string().optional()
 }), eo = e.object({
+  email: e.string().optional()
+}), to = e.object({
   organization_id: e.string().max(50),
   inviter: $t,
-  invitee: Jt,
+  invitee: eo,
   invitation_url: e.string().url(),
   client_id: e.string(),
   connection_id: e.string().optional(),
@@ -1699,13 +1699,13 @@ const H = e.enum([
   ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
   roles: e.array(e.string()).default([]).optional(),
   send_invitation_email: e.boolean().default(!0).optional()
-}), Pn = e.object({
+}), Hn = e.object({
   id: e.string(),
   organization_id: e.string().max(50),
   created_at: e.string().datetime(),
   expires_at: e.string().datetime(),
   ticket_id: e.string().optional()
-}).extend(eo.shape), to = e.object({
+}).extend(to.shape), oo = e.object({
   alg: e.enum([
     "RS256",
     "RS384",
@@ -1729,24 +1729,24 @@ const H = e.enum([
   y: e.string().optional(),
   x5t: e.string().optional(),
   x5c: e.array(e.string()).optional()
-}).superRefine((t, o) => {
-  if (t.kty === "RSA")
-    for (const n of ["n", "e"])
-      t[n] || o.addIssue({
+}).superRefine((o, n) => {
+  if (o.kty === "RSA")
+    for (const i of ["n", "e"])
+      o[i] || n.addIssue({
         code: e.ZodIssueCode.custom,
-        path: [n],
-        message: `RSA JWK is missing required member '${n}'`
+        path: [i],
+        message: `RSA JWK is missing required member '${i}'`
       });
-  else if (t.kty === "EC")
-    for (const n of ["crv", "x", "y"])
-      t[n] || o.addIssue({
+  else if (o.kty === "EC")
+    for (const i of ["crv", "x", "y"])
+      o[i] || n.addIssue({
         code: e.ZodIssueCode.custom,
-        path: [n],
-        message: `EC JWK is missing required member '${n}'`
+        path: [i],
+        message: `EC JWK is missing required member '${i}'`
       });
-}), Mn = e.object({
-  keys: e.array(to)
-}), Hn = e.object({
+}), Gn = e.object({
+  keys: e.array(oo)
+}), Bn = e.object({
   issuer: e.string(),
   authorization_endpoint: e.string(),
   token_endpoint: e.string(),
@@ -1770,21 +1770,21 @@ const H = e.enum([
   request_object_signing_alg_values_supported: e.array(e.string()).optional(),
   token_endpoint_auth_signing_alg_values_supported: e.array(e.string())
 });
-var z = /* @__PURE__ */ ((t) => (t.PENDING = "pending", t.AUTHENTICATED = "authenticated", t.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", t.AWAITING_MFA = "awaiting_mfa", t.AWAITING_HOOK = "awaiting_hook", t.AWAITING_CONTINUATION = "awaiting_continuation", t.COMPLETED = "completed", t.FAILED = "failed", t.EXPIRED = "expired", t))(z || {});
-const oo = e.nativeEnum(z), no = e.object({
+var X = /* @__PURE__ */ ((o) => (o.PENDING = "pending", o.AUTHENTICATED = "authenticated", o.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", o.AWAITING_MFA = "awaiting_mfa", o.AWAITING_HOOK = "awaiting_hook", o.AWAITING_CONTINUATION = "awaiting_continuation", o.COMPLETED = "completed", o.FAILED = "failed", o.EXPIRED = "expired", o))(X || {});
+const no = e.nativeEnum(X), io = e.object({
   strategy: e.string(),
   strategy_type: e.string()
-}), io = e.object({
+}), ao = e.object({
   csrf_token: e.string(),
   auth0Client: e.string().optional(),
-  authParams: Qe,
+  authParams: Je,
   expires_at: e.string(),
   deleted_at: e.string().optional(),
   ip: e.string().optional(),
   useragent: e.string().optional(),
   session_id: e.string().optional(),
   authorization_url: e.string().optional(),
-  state: oo.optional().default(
+  state: no.optional().default(
     "pending"
     /* PENDING */
   ),
@@ -1795,19 +1795,19 @@ const oo = e.nativeEnum(z), no = e.object({
   // Set once user is authenticated
   auth_connection: e.string().optional(),
   // The connection used to authenticate (may differ from primary user's connection)
-  auth_strategy: no.optional(),
+  auth_strategy: io.optional(),
   authenticated_at: e.string().optional()
   // ISO timestamp persisted for audit/metadata; not used to reject resumed sessions
 }).openapi({
   description: "This represents a login sesion"
-}), Gn = e.object({
-  ...io.shape,
+}), Kn = e.object({
+  ...ao.shape,
   id: e.string().openapi({
     description: "This is is used as the state in the universal login"
   }),
   created_at: e.string(),
   updated_at: e.string()
-}), ao = {
+}), t = {
   // Network & System
   ACLS_SUMMARY: "acls_summary",
   ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
@@ -1911,6 +1911,8 @@ const oo = e.nativeEnum(z), no = e.object({
   BLOCKED_IP_ADDRESS: "limit_mu",
   BLOCKED_ACCOUNT_IP: "limit_sul",
   BLOCKED_ACCOUNT_EMAIL: "limit_wc",
+  // Generic information
+  INFORMATION: "i",
   // MFA & My Account
   MFA_REQUIRED: "mfar",
   MANAGEMENT_API_READ_OPERATION: "mgmt_api_read",
@@ -1984,22 +1986,191 @@ const oo = e.nativeEnum(z), no = e.object({
   WARNING_SENDING_NOTIFICATION: "wn",
   WARNING_USER_MANAGEMENT: "wum"
 }, so = e.string().refine(
-  (t) => Object.values(ao).includes(t),
+  (o) => Object.values(t).includes(o),
   { message: "Invalid log type" }
-), ro = e.object({
+), ro = {
+  [t.ACLS_SUMMARY]: "ACLs Summary",
+  [t.ACTIONS_EXECUTION_FAILED]: "Actions Execution Failed",
+  [t.API_LIMIT]: "API Rate Limit Reached",
+  [t.API_LIMIT_WARNING]: "API Rate Limit Warning",
+  [t.APPI]: "API Operation",
+  [t.CIBA_EXCHANGE_FAILED]: "CIBA Exchange Failed",
+  [t.CIBA_EXCHANGE_SUCCEEDED]: "CIBA Exchange Succeeded",
+  [t.CIBA_START_FAILED]: "CIBA Start Failed",
+  [t.CIBA_START_SUCCEEDED]: "CIBA Start Succeeded",
+  [t.CODE_LINK_SENT]: "Code/Link Sent",
+  [t.CODE_SENT]: "Code Sent",
+  [t.DEPRECATION_NOTICE]: "Deprecation Notice",
+  [t.FAILED_LOGIN]: "Failed Login",
+  [t.FAILED_BY_CONNECTOR]: "Failed by Connector",
+  [t.FAILED_CHANGE_EMAIL]: "Failed Change Email",
+  [t.FAILED_BY_CORS]: "Failed by CORS",
+  [t.FAILED_CROSS_ORIGIN_AUTHENTICATION]: "Failed Cross Origin Authentication",
+  [t.FAILED_CHANGE_PASSWORD]: "Failed Change Password",
+  [t.FAILED_POST_CHANGE_PASSWORD_HOOK]: "Failed Post-Change Password Hook",
+  [t.FAILED_CHANGE_PHONE_NUMBER]: "Failed Change Phone Number",
+  [t.FAILED_CHANGE_PASSWORD_REQUEST]: "Failed Change Password Request",
+  [t.FAILED_CONNECTOR_PROVISIONING]: "Failed Connector Provisioning",
+  [t.FAILED_CHANGE_USERNAME]: "Failed Change Username",
+  [t.FAILED_DELEGATION]: "Failed Delegation",
+  [t.FAILED_DEVICE_ACTIVATION]: "Failed Device Activation",
+  [t.FAILED_DEVICE_AUTHORIZATION_REQUEST]: "Failed Device Authorization Request",
+  [t.USER_CANCELED_DEVICE_CONFIRMATION]: "User Canceled Device Confirmation",
+  [t.FAILED_USER_DELETION]: "Failed User Deletion",
+  [t.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Authorization Code for Access Token",
+  [t.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Failed Exchange Access Token for Client Credentials",
+  [t.FAILED_EXCHANGE_CUSTOM_TOKEN]: "Failed Exchange Custom Token",
+  [t.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Device Code for Access Token",
+  [t.FAILED_FEDERATED_LOGOUT]: "Failed Federated Logout",
+  [t.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Failed Exchange Native Social Login",
+  [t.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Failed Exchange Password OOB for Access Token",
+  [t.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Password OTP for Access Token",
+  [t.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Failed Exchange Password for Access Token",
+  [t.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Passwordless OTP for Access Token",
+  [t.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Failed Exchange Password MFA Recovery for Access Token",
+  [t.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN]: "Failed Exchange Rotating Refresh Token",
+  [t.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Refresh Token for Access Token",
+  [t.FAILED_HOOK]: "Failed Hook",
+  [t.FAILED_IMPERSONATION]: "Failed Impersonation",
+  [t.FAILED_INVITE_ACCEPT]: "Failed Invite Accept",
+  [t.FAILED_LOGOUT]: "Failed Logout",
+  [t.FLOWS_EXECUTION_COMPLETED]: "Flows Execution Completed",
+  [t.FLOWS_EXECUTION_FAILED]: "Flows Execution Failed",
+  [t.FAILED_SENDING_NOTIFICATION]: "Failed Sending Notification",
+  [t.FORMS_SUBMISSION_FAILED]: "Forms Submission Failed",
+  [t.FORMS_SUBMISSION_SUCCEEDED]: "Forms Submission Succeeded",
+  [t.FAILED_LOGIN_INCORRECT_PASSWORD]: "Failed Login - Incorrect Password",
+  [t.FAILED_PUSHED_AUTHORIZATION_REQUEST]: "Failed Pushed Authorization Request",
+  [t.FAILED_POST_USER_REGISTRATION_HOOK]: "Failed Post-User Registration Hook",
+  [t.FAILED_SIGNUP]: "Failed Signup",
+  [t.FAILED_SILENT_AUTH]: "Failed Silent Auth",
+  [t.FAILED_LOGIN_INVALID_EMAIL_USERNAME]: "Failed Login - Invalid Email/Username",
+  [t.FAILED_USERS_IMPORT]: "Failed Users Import",
+  [t.FAILED_VERIFICATION_EMAIL]: "Failed Verification Email",
+  [t.FAILED_VERIFICATION_EMAIL_REQUEST]: "Failed Verification Email Request",
+  [t.EMAIL_VERIFICATION_CONFIRMED]: "Email Verification Confirmed",
+  [t.EMAIL_VERIFICATION_FAILED]: "Email Verification Failed",
+  [t.MFA_AUTH_FAILED]: "MFA Auth Failed",
+  [t.MFA_AUTH_REJECTED]: "MFA Auth Rejected",
+  [t.MFA_AUTH_SUCCESS]: "MFA Auth Success",
+  [t.MFA_ENROLLMENT_COMPLETE]: "MFA Enrollment Complete",
+  [t.TOO_MANY_MFA_FAILURES]: "Too Many MFA Failures",
+  [t.MFA_RECOVERY_FAILED]: "MFA Recovery Failed",
+  [t.MFA_RECOVERY_RATE_LIMIT_EXCEED]: "MFA Recovery Rate Limit Exceeded",
+  [t.MFA_RECOVERY_SUCCESS]: "MFA Recovery Success",
+  [t.MFA_EMAIL_SENT]: "MFA Email Sent",
+  [t.EMAIL_VERIFICATION_SENT]: "Email Verification Sent",
+  [t.EMAIL_VERIFICATION_SEND_FAILURE]: "Email Verification Send Failure",
+  [t.PUSH_NOTIFICATION_SENT]: "Push Notification Sent",
+  [t.ERROR_SENDING_MFA_PUSH_NOTIFICATION]: "Error Sending MFA Push Notification",
+  [t.MFA_SMS_SENT]: "MFA SMS Sent",
+  [t.ERROR_SENDING_MFA_SMS]: "Error Sending MFA SMS",
+  [t.MFA_VOICE_CALL_SUCCESS]: "MFA Voice Call Success",
+  [t.MFA_VOICE_CALL_FAILED]: "MFA Voice Call Failed",
+  [t.SECOND_FACTOR_STARTED]: "Second Factor Started",
+  [t.MFA_ENROLL_STARTED]: "MFA Enroll Started",
+  [t.MFA_ENROLLMENT_FAILED]: "MFA Enrollment Failed",
+  [t.GUARDIAN_TENANT_UPDATE]: "Guardian Tenant Update",
+  [t.UNENROLL_DEVICE_ACCOUNT]: "Unenroll Device Account",
+  [t.UPDATE_DEVICE_ACCOUNT]: "Update Device Account",
+  [t.WEBAUTHN_CHALLENGE_FAILED]: "WebAuthn Challenge Failed",
+  [t.WEBAUTHN_ENROLLMENT_FAILED]: "WebAuthn Enrollment Failed",
+  [t.FAILED_KMS_API_OPERATION]: "Failed KMS API Operation",
+  [t.SUCCESS_KMS_API_OPERATION]: "Success KMS API Operation",
+  [t.KMS_KEY_STATE_CHANGED]: "KMS Key State Changed",
+  [t.TOO_MANY_CALLS_TO_DELEGATION]: "Too Many Calls to Delegation",
+  [t.BLOCKED_IP_ADDRESS]: "Blocked IP Address",
+  [t.BLOCKED_ACCOUNT_IP]: "Blocked Account (IP)",
+  [t.BLOCKED_ACCOUNT_EMAIL]: "Blocked Account (Email)",
+  [t.INFORMATION]: "Information",
+  [t.MFA_REQUIRED]: "MFA Required",
+  [t.MANAGEMENT_API_READ_OPERATION]: "Management API Read Operation",
+  [t.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Failed Authentication Method Operation (My Account)",
+  [t.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Successful Authentication Method Operation (My Account)",
+  [t.FAILED_OIDC_BACKCHANNEL_LOGOUT]: "Failed OIDC Backchannel Logout",
+  [t.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT]: "Successful OIDC Backchannel Logout",
+  [t.ORGANIZATION_MEMBER_ADDED]: "Organization Member Added",
+  [t.PASSKEY_CHALLENGE_FAILED]: "Passkey Challenge Failed",
+  [t.PASSKEY_CHALLENGE_STARTED]: "Passkey Challenge Started",
+  [t.PRE_LOGIN_ASSESSMENT]: "Pre-Login Assessment",
+  [t.BREACHED_PASSWORD]: "Breached Password",
+  [t.BREACHED_PASSWORD_ON_RESET]: "Breached Password on Reset",
+  [t.SUCCESS_RESOURCE_CLEANUP]: "Success Resource Cleanup",
+  [t.RICH_CONSENTS_ACCESS_ERROR]: "Rich Consents Access Error",
+  [t.SUCCESS_LOGIN]: "Success Login",
+  [t.SUCCESS_API_OPERATION]: "Success API Operation",
+  [t.FAILED_API_OPERATION]: "Failed API Operation",
+  [t.SUCCESS_CHANGE_EMAIL]: "Success Change Email",
+  [t.SUCCESS_CROSS_ORIGIN_AUTHENTICATION]: "Success Cross Origin Authentication",
+  [t.SUCCESS_CHANGE_PASSWORD]: "Success Change Password",
+  [t.SUCCESS_CHANGE_PHONE_NUMBER]: "Success Change Phone Number",
+  [t.SUCCESS_CHANGE_PASSWORD_REQUEST]: "Success Change Password Request",
+  [t.SUCCESS_CHANGE_USERNAME]: "Success Change Username",
+  [t.SUCCESS_CREDENTIAL_VALIDATION]: "Success Credential Validation",
+  [t.SUCCESS_DELEGATION]: "Success Delegation",
+  [t.SUCCESS_USER_DELETION]: "Success User Deletion",
+  [t.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Authorization Code for Access Token",
+  [t.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Success Exchange Access Token for Client Credentials",
+  [t.SUCCESS_EXCHANGE_CUSTOM_TOKEN]: "Success Exchange Custom Token",
+  [t.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Device Code for Access Token",
+  [t.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Success Exchange Native Social Login",
+  [t.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Password OOB for Access Token",
+  [t.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Password OTP for Access Token",
+  [t.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Success Exchange Password for Access Token",
+  [t.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OOB for Access Token",
+  [t.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OTP for Access Token",
+  [t.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Passkey MFA Recovery for Access Token",
+  [t.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Password MFA Recovery for Access Token",
+  [t.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Refresh Token for Access Token",
+  [t.SUCCESS_IMPERSONATION]: "Success Impersonation",
+  [t.SUCCESSFULLY_ACCEPTED_USER_INVITE]: "Successfully Accepted User Invite",
+  [t.BREACHED_PASSWORD_ON_SIGNUP]: "Breached Password on Signup",
+  [t.SUCCESS_LOGOUT]: "Success Logout",
+  [t.SUCCESS_HOOK]: "Success Hook",
+  [t.SUCCESS_PASSWORD_MIGRATION]: "Success Password Migration",
+  [t.SUCCESS_REVOCATION]: "Success Revocation",
+  [t.SUCCESS_SIGNUP]: "Success Signup",
+  [t.FAILED_SS_SSO_OPERATION]: "Failed SS SSO Operation",
+  [t.INFORMATION_FROM_SS_SSO_OPERATION]: "Information from SS SSO Operation",
+  [t.SUCCESS_SS_SSO_OPERATION]: "Success SS SSO Operation",
+  [t.SUCCESS_SILENT_AUTH]: "Success Silent Auth",
+  [t.SUCCESSFUL_SCIM_OPERATION]: "Successful SCIM Operation",
+  [t.SUCCESSFULLY_IMPORTED_USERS]: "Successfully Imported Users",
+  [t.SUCCESS_VERIFICATION_EMAIL]: "Success Verification Email",
+  [t.SUCCESS_VERIFICATION_EMAIL_REQUEST]: "Success Verification Email Request",
+  [t.MAX_AMOUNT_OF_AUTHENTICATORS]: "Max Amount of Authenticators",
+  [t.USER_LOGIN_BLOCK_RELEASED]: "User Login Block Released",
+  [t.FAILED_UNIVERSAL_LOGOUT]: "Failed Universal Logout",
+  [t.SUCCESSFUL_UNIVERSAL_LOGOUT]: "Successful Universal Logout",
+  [t.WARNING_DURING_LOGIN]: "Warning During Login",
+  [t.WARNING_SENDING_NOTIFICATION]: "Warning Sending Notification",
+  [t.WARNING_USER_MANAGEMENT]: "Warning User Management"
+}, lo = (() => {
+  const o = {};
+  for (const [n, i] of Object.entries(t))
+    n.startsWith("SUCCESS_") || n.startsWith("SUCCESSFUL_") || n.startsWith("SUCCESSFULLY_") ? o[i] = "success" : n.startsWith("FAILED_") || n.startsWith("ERROR_") || n.startsWith("BREACHED_") || n.startsWith("BLOCKED_") || n === "MFA_AUTH_FAILED" || n === "MFA_AUTH_REJECTED" || n === "MFA_RECOVERY_FAILED" || n === "MFA_ENROLLMENT_FAILED" || n === "EMAIL_VERIFICATION_FAILED" || n === "WEBAUTHN_CHALLENGE_FAILED" || n === "WEBAUTHN_ENROLLMENT_FAILED" || n === "PASSKEY_CHALLENGE_FAILED" || n === "FLOWS_EXECUTION_FAILED" || n === "FORMS_SUBMISSION_FAILED" || n === "CIBA_EXCHANGE_FAILED" || n === "CIBA_START_FAILED" || n === "ACTIONS_EXECUTION_FAILED" || n === "RICH_CONSENTS_ACCESS_ERROR" || n === "USER_CANCELED_DEVICE_CONFIRMATION" || n === "TOO_MANY_MFA_FAILURES" || n === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || n === "API_LIMIT" || n === "MAX_AMOUNT_OF_AUTHENTICATORS" ? o[i] = "failure" : n.startsWith("WARNING_") || n === "API_LIMIT_WARNING" || n === "DEPRECATION_NOTICE" || n === "PRE_LOGIN_ASSESSMENT" ? o[i] = "warning" : n === "CODE_SENT" || n === "CODE_LINK_SENT" || n === "MFA_EMAIL_SENT" || n === "MFA_SMS_SENT" || n === "EMAIL_VERIFICATION_SENT" || n === "PUSH_NOTIFICATION_SENT" ? o[i] = "code_sent" : n === "INFORMATION" || n === "INFORMATION_FROM_SS_SSO_OPERATION" || n === "MANAGEMENT_API_READ_OPERATION" || n === "APPI" || n === "ACLS_SUMMARY" || n === "ORGANIZATION_MEMBER_ADDED" ? o[i] = "info" : o[i] = "other";
+  return o;
+})();
+function Wn(o) {
+  return ro[o] ?? o;
+}
+function Vn(o) {
+  return lo[o] ?? "other";
+}
+const co = e.object({
   name: e.string(),
   version: e.string(),
   env: e.object({
     node: e.string().optional()
   }).optional()
-}), lo = e.object({
+}), po = e.object({
   country_code: e.string().length(2),
   city_name: e.string(),
   latitude: e.string(),
   longitude: e.string(),
   time_zone: e.string(),
   continent_code: e.string()
-}), co = e.object({
+}), _o = e.object({
   type: so,
   date: e.string(),
   description: e.string().optional(),
@@ -2019,40 +2190,40 @@ const oo = e.nativeEnum(z), no = e.object({
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
   hostname: e.string().optional(),
-  auth0_client: ro.optional(),
+  auth0_client: co.optional(),
   log_id: e.string().optional(),
-  location_info: lo.optional()
-}), Bn = e.object({
-  ...co.shape,
+  location_info: po.optional()
+}), Xn = e.object({
+  ..._o.shape,
   log_id: e.string()
-}), po = e.enum([
+}), go = e.enum([
   "http",
   "eventbridge",
   "eventgrid",
   "splunk",
   "datadog",
   "sumo"
-]), q = e.enum(["active", "paused", "suspended"]), _o = e.object({
+]), q = e.enum(["active", "paused", "suspended"]), uo = e.object({
   type: e.string(),
   name: e.string()
-}), go = e.object({
+}), mo = e.object({
   name: e.string(),
-  type: po,
+  type: go,
   status: q.optional(),
   sink: e.record(e.string(), e.unknown()),
-  filters: e.array(_o).optional(),
+  filters: e.array(uo).optional(),
   isPriority: e.boolean().optional()
-}), Wn = go.extend({
+}), qn = mo.extend({
   id: e.string(),
   status: q,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), uo = e.enum([
+}), Eo = e.enum([
   "auth0",
   "cognito",
   "okta",
   "oidc"
-]), mo = e.object({
+]), So = e.object({
   domain: e.string(),
   client_id: e.string(),
   client_secret: e.string(),
@@ -2061,11 +2232,11 @@ const oo = e.nativeEnum(z), no = e.object({
 }), ho = e.object({
   id: e.string().optional(),
   name: e.string(),
-  provider: uo,
+  provider: Eo,
   connection: e.string(),
   enabled: e.boolean().default(!0),
-  credentials: mo
-}), Kn = e.object({
+  credentials: So
+}), zn = e.object({
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
@@ -2082,13 +2253,13 @@ const oo = e.nativeEnum(z), no = e.object({
       shields: e.array(e.string()).optional()
     }).optional()
   }).optional()
-}), fo = e.object({
+}), Ao = e.object({
   enabled: e.boolean().optional(),
   shields: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional(),
   mode: e.string().optional(),
   max_attempts: e.number().optional()
-}), So = e.object({
+}), fo = e.object({
   enabled: e.boolean().optional(),
   shields: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional(),
@@ -2102,28 +2273,28 @@ const oo = e.nativeEnum(z), no = e.object({
       rate: e.number().optional()
     }).optional()
   }).optional()
-}), Eo = e.object({
+}), Io = e.object({
   breached_password_detection: bo.optional(),
-  brute_force_protection: fo.optional(),
-  suspicious_ip_throttling: So.optional()
-}), yo = e.object({
+  brute_force_protection: Ao.optional(),
+  suspicious_ip_throttling: fo.optional()
+}), Co = e.object({
   id: e.string().optional(),
   user_id: e.string(),
   password: e.string(),
   algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
   is_current: e.boolean().default(!0)
-}), zn = yo.extend({
+}), Yn = Co.extend({
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
-}), X = e.object({
+}), z = e.object({
   initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
   initial_ip: e.string().describe("First IP address associated with this session"),
   initial_asn: e.string().describe("First autonomous system number associated with this session"),
   last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
   last_ip: e.string().describe("Last IP address from which this user logged in"),
   last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), Ao = e.object({
+}), Oo = e.object({
   id: e.string(),
   revoked_at: e.string().optional(),
   used_at: e.string().optional(),
@@ -2131,17 +2302,17 @@ const oo = e.nativeEnum(z), no = e.object({
   expires_at: e.string().optional(),
   login_session_id: e.string(),
   idle_expires_at: e.string().optional(),
-  device: X.describe(
+  device: z.describe(
     "Metadata related to the device used in the session"
   ),
   clients: e.array(e.string()).describe("List of client details for the session")
-}), qn = e.object({
+}), Qn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   authenticated_at: e.string(),
   last_interaction_at: e.string(),
-  ...Ao.shape
-}), Xn = e.object({
+  ...Oo.shape
+}), Zn = e.object({
   kid: e.string().openapi({ description: "The key id of the signing key" }),
   tenant_id: e.string().optional().openapi({
     description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped."
@@ -2169,7 +2340,7 @@ const oo = e.nativeEnum(z), no = e.object({
   type: e.enum(["jwt_signing", "saml_encryption"]).openapi({
     description: "The type of the signing key"
   })
-}), Io = e.object({
+}), To = e.object({
   id: e.string().optional(),
   // Basic settings
   audience: e.string(),
@@ -2235,10 +2406,10 @@ const oo = e.nativeEnum(z), no = e.object({
     // `/connect/start` despite not being loopback. Off by default.
     allow_http_return_to: e.array(
       e.string().refine(
-        (t) => {
+        (o) => {
           try {
-            const o = new URL(t);
-            return o.protocol === "http:" && (o.pathname === "" || o.pathname === "/") && !o.search && !o.hash && t === o.origin;
+            const n = new URL(o);
+            return n.protocol === "http:" && (n.pathname === "" || n.pathname === "/") && !n.search && !n.hash && o === n.origin;
           } catch {
             return !1;
           }
@@ -2322,7 +2493,7 @@ const oo = e.nativeEnum(z), no = e.object({
   pushed_authorization_requests_supported: e.boolean().optional(),
   authorization_response_iss_parameter_supported: e.boolean().optional(),
   // Attack-protection config (singleton, exposed via /api/v2/attack-protection)
-  attack_protection: Eo.optional(),
+  attack_protection: Io.optional(),
   // Guardian MFA Factors configuration (internal storage, exposed via /guardian API)
   mfa: e.object({
     // MFA policy: "never" = MFA disabled, "always" = MFA required for all logins
@@ -2354,10 +2525,10 @@ const oo = e.nativeEnum(z), no = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), Vn = e.object({
-  created_at: e.string().nullable().transform((t) => t ?? ""),
-  updated_at: e.string().nullable().transform((t) => t ?? ""),
-  ...Io.shape,
+}), Jn = e.object({
+  created_at: e.string().nullable().transform((o) => o ?? ""),
+  updated_at: e.string().nullable().transform((o) => o ?? ""),
+  ...To.shape,
   id: e.string(),
   // Computed server-side: true when this tenant is the deployment's control
   // plane (either `multiTenancyConfig.controlPlaneTenantId` matches the
@@ -2365,8 +2536,8 @@ const oo = e.nativeEnum(z), no = e.object({
   // deployment). Not persisted; ignored on writes.
   is_control_plane: e.boolean().optional()
 });
-var Co = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(Co || {});
-const Yn = e.object({
+var No = /* @__PURE__ */ ((o) => (o.RefreshToken = "refresh_token", o.AuthorizationCode = "authorization_code", o.ClientCredential = "client_credentials", o.Passwordless = "passwordless", o.Password = "password", o.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", o))(No || {});
+const $n = e.object({
   access_token: e.string(),
   id_token: e.string().optional(),
   scope: e.string().optional(),
@@ -2379,7 +2550,7 @@ e.object({
   code: e.string(),
   state: e.string().optional()
 });
-const To = e.object({
+const yo = e.object({
   button_border_radius: e.number(),
   button_border_weight: e.number(),
   buttons_style: e.enum(["pill", "rounded", "sharp"]),
@@ -2389,7 +2560,7 @@ const To = e.object({
   show_widget_shadow: e.boolean(),
   widget_border_weight: e.number(),
   widget_corner_radius: e.number()
-}), Oo = e.object({
+}), Ro = e.object({
   base_focus_color: e.string(),
   base_hover_color: e.string(),
   body_text: e.string(),
@@ -2409,20 +2580,20 @@ const To = e.object({
   success: e.string(),
   widget_background: e.string(),
   widget_border: e.string()
-}), u = e.object({
+}), m = e.object({
   bold: e.boolean(),
   size: e.number()
-}), wo = e.object({
-  body_text: u,
-  buttons_text: u,
+}), Lo = e.object({
+  body_text: m,
+  buttons_text: m,
   font_url: e.string(),
-  input_labels: u,
-  links: u,
+  input_labels: m,
+  links: m,
   links_style: e.enum(["normal", "underlined"]),
   reference_text_size: e.number(),
-  subtitle: u,
-  title: u
-}), No = e.object({
+  subtitle: m,
+  title: m
+}), Fo = e.object({
   background_color: e.string(),
   background_image_url: e.string(),
   page_layout: e.enum(["center", "left", "right"]),
@@ -2435,33 +2606,33 @@ const To = e.object({
    * Optional for backwards compatibility; absent values mean "widget".
    */
   logo_placement: e.enum(["widget", "chip", "none"]).optional()
-}), jo = e.object({
+}), Do = e.object({
   header_text_alignment: e.enum(["center", "left", "right"]),
   logo_height: e.number(),
   logo_position: e.enum(["center", "left", "none", "right"]),
   logo_url: e.string(),
   social_buttons_layout: e.enum(["bottom", "top"])
-}), ko = e.object({
-  borders: To,
-  colors: Oo,
+}), Uo = e.object({
+  borders: yo,
+  colors: Ro,
   displayName: e.string(),
-  fonts: wo,
-  page_background: No,
-  widget: jo
-}), Zn = ko.extend({
+  fonts: Lo,
+  page_background: Fo,
+  widget: Do
+}), ei = Uo.extend({
   themeId: e.string()
-}), Qn = e.object({
+}), ti = e.object({
   universal_login_experience: e.enum(["new", "classic"]).default("new"),
   identifier_first: e.boolean().default(!0),
   password_first: e.boolean().default(!1),
   webauthn_platform_first_factor: e.boolean()
-}), $n = e.object({
+}), oi = e.object({
   name: e.string(),
   enabled: e.boolean().optional().default(!0),
   default_from_address: e.string().optional(),
   credentials: e.record(e.string(), e.unknown()),
   settings: e.object({}).optional()
-}), Ro = e.enum([
+}), wo = e.enum([
   "verify_email",
   "verify_email_by_code",
   "reset_email",
@@ -2474,8 +2645,8 @@ const To = e.object({
   "change_password",
   "password_reset",
   "user_invitation"
-]), Jn = e.object({
-  template: Ro,
+]), ni = e.object({
+  template: wo,
   body: e.string(),
   from: e.string(),
   subject: e.string(),
@@ -2484,7 +2655,7 @@ const To = e.object({
   urlLifetimeInSeconds: e.number().int().nonnegative().optional(),
   includeEmailInRedirect: e.boolean().default(!1),
   enabled: e.boolean().default(!0)
-}), vo = e.object({
+}), ko = e.object({
   // Internal primary key (ULID). Never sent to clients in the new wire format.
   id: e.string(),
   // Link to the login session
@@ -2497,7 +2668,7 @@ const To = e.object({
   idle_expires_at: e.string().optional(),
   // When the token was last used.
   last_exchanged_at: e.string().optional(),
-  device: X,
+  device: z,
   resource_servers: e.array(
     e.object({
       audience: e.string(),
@@ -2518,23 +2689,23 @@ const To = e.object({
   // ISO of the *first* rotation. Anchors the leeway window so siblings minted
   // within the window don't extend the parent's exposure.
   rotated_at: e.string().optional()
-}), ei = e.object({
+}), ii = e.object({
   // When the refresh token record was created.
   created_at: e.string(),
   // When the token was explicitly revoked (null = still active).
   revoked_at: e.string().optional(),
   // Spread in the rest of the refresh token properties.
-  ...vo.shape
-}), ti = e.object({
+  ...ko.shape
+}), ai = e.object({
   to: e.string(),
   message: e.string()
-}), oi = e.object({
+}), si = e.object({
   name: e.string(),
   options: e.object({})
-}), Do = e.object({
+}), jo = e.object({
   value: e.string(),
   description: e.string().optional()
-}), Lo = e.object({
+}), Mo = e.object({
   token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
   enforce_policies: e.boolean().optional(),
   allow_skipping_userinfo: e.boolean().optional(),
@@ -2544,11 +2715,11 @@ const To = e.object({
   mtls: e.object({
     bound_access_tokens: e.boolean().optional()
   }).optional()
-}), xo = e.object({
+}), vo = e.object({
   id: e.string().optional(),
   name: e.string(),
   identifier: e.string(),
-  scopes: e.array(Do).optional(),
+  scopes: e.array(jo).optional(),
   signing_alg: e.string().optional(),
   signing_secret: e.string().optional(),
   token_lifetime: e.number().default(86400),
@@ -2556,30 +2727,30 @@ const To = e.object({
   skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
   allow_offline_access: e.boolean().optional(),
   verificationKey: e.string().optional(),
-  options: Lo.optional(),
+  options: Mo.optional(),
   is_system: e.boolean().optional(),
   metadata: e.record(e.any()).optional()
-}), Uo = e.object({
-  ...xo.shape,
+}), Po = e.object({
+  ...vo.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), ni = e.array(Uo), Fo = e.object({
+}), ri = e.array(Po), xo = e.object({
   role_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string()
-}), Po = e.object({
-  ...Fo.shape,
+}), Ho = e.object({
+  ...xo.shape,
   created_at: e.string()
-}), ii = e.array(Po), Mo = e.object({
+}), li = e.array(Ho), Go = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string(),
   organization_id: e.string().optional()
-}), Ho = e.object({
-  ...Mo.shape,
+}), Bo = e.object({
+  ...Go.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), ai = e.array(Ho), Go = e.object({
+}), ci = e.array(Bo), Ko = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   resource_server_name: e.string(),
@@ -2587,17 +2758,17 @@ const To = e.object({
   description: e.string().nullable().optional(),
   created_at: e.string().optional(),
   organization_id: e.string().optional()
-}), si = e.array(
-  Go
-), Bo = e.object({
+}), pi = e.array(
+  Ko
+), Wo = e.object({
   user_id: e.string(),
   role_id: e.string(),
   organization_id: e.string().optional()
-}), Wo = e.object({
-  ...Bo.shape,
+}), Vo = e.object({
+  ...Wo.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), ri = e.array(Wo), Ko = e.object({
+}), _i = e.array(Vo), Xo = e.object({
   id: e.string().optional().openapi({
     description: "The unique identifier of the role. If not provided, one will be generated."
   }),
@@ -2611,13 +2782,13 @@ const To = e.object({
   metadata: e.record(e.any()).optional().openapi({
     description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios."
   })
-}), zo = Ko.extend({
+}), qo = Xo.extend({
   id: e.string().openapi({
     description: "The unique identifier of the role"
   }),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), li = e.array(zo), qo = e.object({
+}), di = e.array(qo), zo = e.object({
   logo_url: e.string().optional().openapi({
     description: "URL of the organization's logo"
   }),
@@ -2629,7 +2800,7 @@ const To = e.object({
       description: "Page background color in hex format (e.g., #FFFFFF)"
     })
   }).optional()
-}).optional(), Xo = e.object({
+}).optional(), Yo = e.object({
   connection_id: e.string().openapi({
     description: "ID of the connection"
   }),
@@ -2642,7 +2813,7 @@ const To = e.object({
   is_signup_enabled: e.boolean().default(!0).openapi({
     description: "Whether signup is enabled for this connection"
   })
-}), Vo = e.object({
+}), Qo = e.object({
   client_credentials: e.object({
     enforce: e.boolean().default(!1).openapi({
       description: "Whether to enforce token quota limits"
@@ -2654,7 +2825,7 @@ const To = e.object({
       description: "Maximum tokens per hour (0 = unlimited)"
     })
   }).optional()
-}).optional(), Yo = e.object({
+}).optional(), Zo = e.object({
   id: e.string().optional(),
   name: e.string().min(1).regex(/^[a-z0-9_-]+$/, {
     message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores"
@@ -2664,31 +2835,31 @@ const To = e.object({
   display_name: e.string().optional().openapi({
     description: "The display name of the organization"
   }),
-  branding: qo,
+  branding: zo,
   metadata: e.record(e.any()).default({}).optional().openapi({
     description: "Custom metadata for the organization"
   }),
-  enabled_connections: e.array(Xo).default([]).optional().openapi({
+  enabled_connections: e.array(Yo).default([]).optional().openapi({
     description: "List of enabled connections for the organization"
   }),
-  token_quota: Vo
-}), ci = e.object({
-  ...Yo.shape,
-  ...a.shape,
+  token_quota: Qo
+}), gi = e.object({
+  ...Zo.shape,
+  ...s.shape,
   id: e.string(),
   // Override name to be lenient when reading from database (to support existing uppercase names)
   name: e.string().min(1).openapi({
     description: "The name of the organization"
   })
-}), Zo = e.object({
+}), Jo = e.object({
   connection_id: e.string().openapi({
     description: "ID of the tenant-level connection to enable for the org."
   }),
   assign_membership_on_login: e.boolean().optional().default(!1),
   show_as_button: e.boolean().optional().default(!0),
   is_signup_enabled: e.boolean().optional().default(!0)
-}), Qo = e.object({
-  ...Zo.shape,
+}), $o = e.object({
+  ...Jo.shape,
   // Auth0 includes the embedded connection in GET responses.
   connection: e.object({
     name: e.string().optional(),
@@ -2696,20 +2867,20 @@ const To = e.object({
   }).optional(),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), pi = e.array(
-  Qo
-), $o = e.object({
+}), ui = e.array(
+  $o
+), en = e.object({
   user_id: e.string().openapi({
     description: "ID of the user"
   }),
   organization_id: e.string().openapi({
     description: "ID of the organization"
   })
-}), di = e.object({
-  ...$o.shape,
-  ...a.shape,
+}), mi = e.object({
+  ...en.shape,
+  ...s.shape,
   id: e.string()
-}), _i = e.object({
+}), Ei = e.object({
   // Session settings
   idle_session_lifetime: e.number().default(72),
   session_lifetime: e.number().default(168),
@@ -2809,7 +2980,7 @@ const To = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), gi = e.object({
+}), Si = e.object({
   date: e.string().openapi({
     description: "Date these events occurred in ISO 8601 format",
     example: "2025-12-19"
@@ -2834,40 +3005,40 @@ const To = e.object({
     description: "Approximate date and time the first event occurred in ISO 8601 format",
     example: "2025-12-19T00:00:00.000Z"
   })
-}), ui = e.number().openapi({
+}), hi = e.number().openapi({
   description: "Number of active users in the last 30 days",
   example: 1234
-}), mi = e.enum([
+}), bi = e.enum([
   "active-users",
   "logins",
   "signups",
   "refresh-tokens",
   "sessions"
-]), hi = e.enum(["hour", "day", "week", "month"]), bi = e.enum([
+]), Ai = e.enum(["hour", "day", "week", "month"]), fi = e.enum([
   "time",
   "connection",
   "client_id",
   "user_type",
   "event"
-]), fi = e.enum([
+]), Ii = e.enum([
   "password",
   "social",
   "passwordless",
   "enterprise"
-]), Jo = e.object({
+]), tn = e.object({
   name: e.string(),
   type: e.string()
-}), en = e.object({
+}), on = e.object({
   elapsed: e.number(),
   rows_read: e.number().optional(),
   bytes_read: e.number().optional()
-}), Si = e.object({
-  meta: e.array(Jo),
+}), Ci = e.object({
+  meta: e.array(tn),
   data: e.array(e.record(e.string(), e.any())),
   rows: e.number(),
   rows_before_limit_at_least: e.number().optional(),
-  statistics: en.optional()
-}), tn = e.enum([
+  statistics: on.optional()
+}), nn = e.enum([
   "login",
   "login-id",
   "login-password",
@@ -2896,17 +3067,17 @@ const To = e.object({
   "custom-form",
   "login-passwordless",
   "mfa-login-options"
-]), on = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+]), an = e.record(e.string(), e.record(e.string(), e.string())).openapi({
   type: "object",
   additionalProperties: {
     type: "object",
     additionalProperties: { type: "string" }
   }
-}), Ei = e.object({
-  prompt: tn,
+}), Oi = e.object({
+  prompt: nn,
   language: e.string(),
-  custom_text: on
-}), yi = {
+  custom_text: an
+}), Ti = {
   EMAIL: "email",
   SMS: "sms",
   USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2921,11 +3092,11 @@ const To = e.object({
   SAMLP: "samlp",
   WAAD: "waad",
   ADFS: "adfs"
-}, Ai = {
+}, Ni = {
   DATABASE: "database",
   SOCIAL: "social",
   PASSWORDLESS: "passwordless"
-}, nn = e.enum([
+}, sn = e.enum([
   "phone",
   "totp",
   "email",
@@ -2933,9 +3104,9 @@ const To = e.object({
   "webauthn-roaming",
   "webauthn-platform",
   "passkey"
-]), V = e.object({
+]), Y = e.object({
   user_id: e.string(),
-  type: nn,
+  type: sn,
   // Phone-specific
   phone_number: e.string().optional(),
   // TOTP-specific
@@ -2950,327 +3121,331 @@ const To = e.object({
   // Common
   confirmed: e.boolean().default(!1)
 });
-function Y(t, o) {
-  t.type === "phone" && !t.phone_number && o.addIssue({
+function Q(o, n) {
+  o.type === "phone" && !o.phone_number && n.addIssue({
     code: e.ZodIssueCode.custom,
     message: "phone_number is required when type is 'phone'",
     path: ["phone_number"]
-  }), t.type === "totp" && !t.totp_secret && o.addIssue({
+  }), o.type === "totp" && !o.totp_secret && n.addIssue({
     code: e.ZodIssueCode.custom,
     message: "totp_secret is required when type is 'totp'",
     path: ["totp_secret"]
-  }), ["webauthn-roaming", "webauthn-platform", "passkey"].includes(t.type) && (t.credential_id || o.addIssue({
+  }), ["webauthn-roaming", "webauthn-platform", "passkey"].includes(o.type) && (o.credential_id || n.addIssue({
     code: e.ZodIssueCode.custom,
-    message: `credential_id is required when type is '${t.type}'`,
+    message: `credential_id is required when type is '${o.type}'`,
     path: ["credential_id"]
-  }), t.public_key || o.addIssue({
+  }), o.public_key || n.addIssue({
     code: e.ZodIssueCode.custom,
-    message: `public_key is required when type is '${t.type}'`,
+    message: `public_key is required when type is '${o.type}'`,
     path: ["public_key"]
   }));
 }
-const Ii = V.superRefine(Y), Ci = e.object({
-  ...V.shape,
+const yi = Y.superRefine(Q), Ri = e.object({
+  ...Y.shape,
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
-}).superRefine(Y);
-function Ti(t) {
-  const [o, n] = t.split("|");
-  if (!o || !n)
-    throw new Error(`Invalid user_id: ${t}`);
-  return { connection: o, id: n };
+}).superRefine(Q);
+function Li(o) {
+  const [n, i] = o.split("|");
+  if (!n || !i)
+    throw new Error(`Invalid user_id: ${o}`);
+  return { connection: n, id: i };
 }
-function Oi(t) {
+function Fi(o) {
   const {
-    primary: o,
-    secondaries: n,
-    syncMethods: h = ["create", "rawCreate", "update", "remove", "delete", "set"]
-  } = t, E = {
-    get(p, s) {
-      if (typeof s == "symbol")
-        return p[s];
-      const d = p[s];
-      return typeof d != "function" ? d : h.includes(s) ? async (..._) => {
-        const y = await d.apply(p, _), g = [];
-        for (const r of n) {
-          const b = r.adapter[s];
-          if (typeof b != "function")
+    primary: n,
+    secondaries: i,
+    syncMethods: S = ["create", "rawCreate", "update", "remove", "delete", "set"]
+  } = o, f = {
+    get(_, r) {
+      if (typeof r == "symbol")
+        return _[r];
+      const d = _[r];
+      return typeof d != "function" ? d : S.includes(r) ? async (...g) => {
+        const I = await d.apply(_, g), u = [];
+        for (const l of i) {
+          const h = l.adapter[r];
+          if (typeof h != "function")
             continue;
-          const A = (async () => {
+          const C = (async () => {
             try {
-              await b.apply(r.adapter, _);
-            } catch (f) {
+              await h.apply(l.adapter, g);
+            } catch (b) {
               try {
-                r.onError ? r.onError(f, s, _) : console.error(
-                  `Passthrough adapter: secondary write failed for ${s}:`,
-                  f
+                l.onError ? l.onError(b, r, g) : console.error(
+                  `Passthrough adapter: secondary write failed for ${r}:`,
+                  b
                 );
-              } catch (I) {
+              } catch (O) {
                 console.error(
-                  `Passthrough adapter: onError handler threw for ${s}:`,
-                  I
+                  `Passthrough adapter: onError handler threw for ${r}:`,
+                  O
                 );
               }
             }
           })();
-          r.blocking && g.push(A);
+          l.blocking && u.push(C);
         }
-        return g.length > 0 && await Promise.all(g), y;
-      } : d.bind(p);
+        return u.length > 0 && await Promise.all(u), I;
+      } : d.bind(_);
     }
   };
-  return new Proxy(o, E);
+  return new Proxy(n, f);
 }
-function wi(t) {
-  return t;
+function Di(o) {
+  return o;
 }
-function Ni(t) {
-  var E, p, s, d, _, y, g, r, b, A, f, I;
-  const o = t == null ? void 0 : t.options;
-  if (!o)
+function Ui(o) {
+  var f, _, r, d, g, I, u, l, h, C, b, O;
+  const n = o == null ? void 0 : o.options;
+  if (!n)
     return {
       usernameIdentifierActive: !1,
       emailIdentifierActive: !0,
       usernameMinLength: 1,
       usernameMaxLength: 15
     };
-  const n = o.attributes;
-  if (n) {
-    const Z = ((p = (E = n.username) == null ? void 0 : E.identifier) == null ? void 0 : p.active) === !0, Q = ((d = (s = n.email) == null ? void 0 : s.identifier) == null ? void 0 : d.active) !== !1, $ = ((y = (_ = n.username) == null ? void 0 : _.validation) == null ? void 0 : y.min_length) ?? 1, J = ((r = (g = n.username) == null ? void 0 : g.validation) == null ? void 0 : r.max_length) ?? 15;
+  const i = n.attributes;
+  if (i) {
+    const Z = ((_ = (f = i.username) == null ? void 0 : f.identifier) == null ? void 0 : _.active) === !0, J = ((d = (r = i.email) == null ? void 0 : r.identifier) == null ? void 0 : d.active) !== !1, $ = ((I = (g = i.username) == null ? void 0 : g.validation) == null ? void 0 : I.min_length) ?? 1, ee = ((l = (u = i.username) == null ? void 0 : u.validation) == null ? void 0 : l.max_length) ?? 15;
     return {
       usernameIdentifierActive: Z,
-      emailIdentifierActive: Q,
+      emailIdentifierActive: J,
       usernameMinLength: $,
-      usernameMaxLength: J
+      usernameMaxLength: ee
     };
   }
   return {
-    usernameIdentifierActive: o.requires_username === !0,
+    usernameIdentifierActive: n.requires_username === !0,
     emailIdentifierActive: !0,
-    usernameMinLength: ((A = (b = o.validation) == null ? void 0 : b.username) == null ? void 0 : A.min) ?? 1,
-    usernameMaxLength: ((I = (f = o.validation) == null ? void 0 : f.username) == null ? void 0 : I.max) ?? 15
+    usernameMinLength: ((C = (h = n.validation) == null ? void 0 : h.username) == null ? void 0 : C.min) ?? 1,
+    usernameMaxLength: ((O = (b = n.validation) == null ? void 0 : b.username) == null ? void 0 : O.max) ?? 15
   };
 }
-function ji(t) {
-  return typeof t == "object" && t !== null && !Array.isArray(t);
+function wi(o) {
+  return typeof o == "object" && o !== null && !Array.isArray(o);
 }
 export {
-  _n as Auth0ActionEnum,
-  ro as Auth0Client,
-  F as AuthorizationResponseMode,
-  U as AuthorizationResponseType,
-  P as CodeChallengeMethod,
-  x as ComponentCategory,
-  L as ComponentType,
-  gn as EmailActionEnum,
-  wn as FORM_FIELD_TYPES,
-  dn as FlowActionTypeEnum,
-  Co as GrantType,
-  lo as LocationInfo,
-  ao as LogTypes,
-  z as LoginSessionState,
-  Ge as NodeType,
-  Se as RedirectTargetEnum,
-  yi as Strategy,
-  Ai as StrategyType,
-  k as actionDependencySchema,
-  oe as actionExecutionErrorSchema,
-  ln as actionExecutionInsertSchema,
-  ie as actionExecutionLogEntrySchema,
-  ae as actionExecutionLogsSchema,
-  ne as actionExecutionResultSchema,
-  se as actionExecutionSchema,
-  te as actionExecutionStatusSchema,
-  ee as actionExecutionTriggerIdSchema,
-  v as actionInsertSchema,
-  Ke as actionNodeSchema,
-  rn as actionSchema,
-  R as actionSecretSchema,
-  j as actionTriggerSchema,
-  sn as actionUpdateSchema,
-  re as actionVersionInsertSchema,
-  cn as actionVersionSchema,
-  ui as activeUsersResponseSchema,
-  ce as actorSchema,
-  Te as addressSchema,
-  Jo as analyticsColumnMetaSchema,
-  bi as analyticsGroupBySchema,
-  hi as analyticsIntervalSchema,
-  Si as analyticsQueryResponseSchema,
-  mi as analyticsResourceSchema,
-  en as analyticsStatisticsSchema,
-  fi as analyticsUserTypeSchema,
-  Eo as attackProtectionSchema,
-  le as auditCategorySchema,
-  me as auditEventInsertSchema,
-  pn as auditEventSchema,
-  ue as auth0ClientSchema,
-  An as auth0FlowInsertSchema,
-  Ye as auth0FlowSchema,
-  mn as auth0QuerySchema,
-  be as auth0UpdateUserActionSchema,
+  un as Auth0ActionEnum,
+  co as Auth0Client,
+  P as AuthorizationResponseMode,
+  v as AuthorizationResponseType,
+  x as CodeChallengeMethod,
+  M as ComponentCategory,
+  j as ComponentType,
+  mn as EmailActionEnum,
+  Ln as FORM_FIELD_TYPES,
+  gn as FlowActionTypeEnum,
+  No as GrantType,
+  po as LocationInfo,
+  t as LogTypes,
+  X as LoginSessionState,
+  Be as NodeType,
+  Ae as RedirectTargetEnum,
+  Ti as Strategy,
+  Ni as StrategyType,
+  D as actionDependencySchema,
+  ne as actionExecutionErrorSchema,
+  pn as actionExecutionInsertSchema,
+  ae as actionExecutionLogEntrySchema,
+  se as actionExecutionLogsSchema,
+  ie as actionExecutionResultSchema,
+  re as actionExecutionSchema,
+  oe as actionExecutionStatusSchema,
+  te as actionExecutionTriggerIdSchema,
+  w as actionInsertSchema,
+  Ve as actionNodeSchema,
+  cn as actionSchema,
+  U as actionSecretSchema,
+  F as actionTriggerSchema,
+  ln as actionUpdateSchema,
+  le as actionVersionInsertSchema,
+  _n as actionVersionSchema,
+  hi as activeUsersResponseSchema,
+  pe as actorSchema,
+  Ne as addressSchema,
+  tn as analyticsColumnMetaSchema,
+  fi as analyticsGroupBySchema,
+  Ai as analyticsIntervalSchema,
+  Ci as analyticsQueryResponseSchema,
+  bi as analyticsResourceSchema,
+  on as analyticsStatisticsSchema,
+  Ii as analyticsUserTypeSchema,
+  Io as attackProtectionSchema,
+  ce as auditCategorySchema,
+  Ee as auditEventInsertSchema,
+  dn as auditEventSchema,
+  me as auth0ClientSchema,
+  On as auth0FlowInsertSchema,
+  Qe as auth0FlowSchema,
+  Sn as auth0QuerySchema,
+  he as auth0UpdateUserActionSchema,
   bn as auth0UserResponseSchema,
-  Qe as authParamsSchema,
-  Ii as authenticationMethodInsertSchema,
-  Ci as authenticationMethodSchema,
-  nn as authenticationMethodTypeSchema,
-  D as baseUserSchema,
-  Dt as blockComponentSchema,
-  To as bordersSchema,
-  In as brandingSchema,
+  Je as authParamsSchema,
+  yi as authenticationMethodInsertSchema,
+  Ri as authenticationMethodSchema,
+  sn as authenticationMethodTypeSchema,
+  k as baseUserSchema,
+  kt as blockComponentSchema,
+  yo as bordersSchema,
+  Tn as brandingSchema,
   bo as breachedPasswordDetectionSchema,
-  fo as bruteForceProtectionSchema,
-  Ue as buttonComponentSchema,
+  Ao as bruteForceProtectionSchema,
+  ve as buttonComponentSchema,
   Ze as claimsRequestSchema,
-  Re as clientGrantInsertSchema,
-  En as clientGrantListSchema,
-  ve as clientGrantSchema,
-  ke as clientInsertSchema,
-  Le as clientRegistrationTokenInsertSchema,
-  yn as clientRegistrationTokenSchema,
-  De as clientRegistrationTokenTypeSchema,
-  Sn as clientSchema,
-  Je as codeInsertSchema,
-  Cn as codeSchema,
+  Ue as clientGrantInsertSchema,
+  In as clientGrantListSchema,
+  we as clientGrantSchema,
+  De as clientInsertSchema,
+  je as clientRegistrationTokenInsertSchema,
+  Cn as clientRegistrationTokenSchema,
+  ke as clientRegistrationTokenTypeSchema,
+  fn as clientSchema,
+  et as codeInsertSchema,
+  Nn as codeSchema,
   $e as codeTypeSchema,
-  Oo as colorsSchema,
-  Gt as componentMessageSchema,
-  He as componentSchema,
-  tt as connectionInsertSchema,
-  et as connectionOptionsSchema,
-  Tn as connectionSchema,
-  m as coordinatesSchema,
-  Oi as createPassthroughAdapter,
-  wi as createWriteOnlyAdapter,
-  ot as customDomainInsertSchema,
-  it as customDomainSchema,
-  On as customDomainWithTenantIdSchema,
-  Ei as customTextEntrySchema,
-  on as customTextSchema,
-  gi as dailyStatsSchema,
-  $n as emailProviderSchema,
-  Ro as emailTemplateNameSchema,
-  Jn as emailTemplateSchema,
-  he as emailVerificationRulesSchema,
-  fe as emailVerifyActionSchema,
-  Ve as endingSchema,
-  xt as fieldComponentSchema,
-  ye as flowActionStepSchema,
-  Ae as flowInsertSchema,
-  un as flowSchema,
-  Pe as flowsFieldComponentSchema,
+  Ro as colorsSchema,
+  Bt as componentMessageSchema,
+  Ge as componentSchema,
+  ot as connectionInsertSchema,
+  tt as connectionOptionsSchema,
+  yn as connectionSchema,
+  E as coordinatesSchema,
+  Fi as createPassthroughAdapter,
+  Di as createWriteOnlyAdapter,
+  nt as customDomainInsertSchema,
+  at as customDomainSchema,
+  Rn as customDomainWithTenantIdSchema,
+  Oi as customTextEntrySchema,
+  an as customTextSchema,
+  Si as dailyStatsSchema,
+  oi as emailProviderSchema,
+  wo as emailTemplateNameSchema,
+  ni as emailTemplateSchema,
+  Se as emailVerificationRulesSchema,
+  be as emailVerifyActionSchema,
+  Ye as endingSchema,
+  Mt as fieldComponentSchema,
+  Ie as flowActionStepSchema,
+  Ce as flowInsertSchema,
+  En as flowSchema,
+  xe as flowsFieldComponentSchema,
   We as flowsFlowNodeSchema,
-  Be as flowsStepNodeSchema,
-  u as fontDetailsSchema,
-  wo as fontsSchema,
-  Nn as formControlSchema,
-  Ht as formInsertSchema,
-  M as formNodeComponentDefinition,
-  Mt as formNodeSchema,
-  jn as formSchema,
-  Me as genericComponentSchema,
-  ze as genericNodeSchema,
-  Ni as getConnectionIdentifierConfig,
-  Qt as hookCodeInsertSchema,
-  Fn as hookCodeSchema,
-  xn as hookInsertSchema,
-  Un as hookSchema,
-  K as hookTemplateId,
-  Ln as hookTemplates,
-  Ce as identitySchema,
-  eo as inviteInsertSchema,
-  Pn as inviteSchema,
-  Jt as inviteeSchema,
+  Ke as flowsStepNodeSchema,
+  m as fontDetailsSchema,
+  Lo as fontsSchema,
+  Fn as formControlSchema,
+  Gt as formInsertSchema,
+  H as formNodeComponentDefinition,
+  Ht as formNodeSchema,
+  Dn as formSchema,
+  He as genericComponentSchema,
+  Xe as genericNodeSchema,
+  Ui as getConnectionIdentifierConfig,
+  Vn as getLogTypeCategory,
+  Wn as getLogTypeDescription,
+  Jt as hookCodeInsertSchema,
+  xn as hookCodeSchema,
+  vn as hookInsertSchema,
+  Pn as hookSchema,
+  V as hookTemplateId,
+  Mn as hookTemplates,
+  Te as identitySchema,
+  to as inviteInsertSchema,
+  Hn as inviteSchema,
+  eo as inviteeSchema,
   $t as inviterSchema,
-  Rn as isBlockComponent,
-  Dn as isFieldComponent,
-  ji as isPlainObject,
-  vn as isWidgetComponent,
-  Mn as jwksKeySchema,
-  to as jwksSchema,
-  Fe as legalComponentSchema,
-  ge as locationInfoSchema,
-  co as logInsertSchema,
-  Bn as logSchema,
-  _o as logStreamFilterSchema,
-  go as logStreamInsertSchema,
-  Wn as logStreamSchema,
+  wn as isBlockComponent,
+  jn as isFieldComponent,
+  wi as isPlainObject,
+  kn as isWidgetComponent,
+  Gn as jwksKeySchema,
+  oo as jwksSchema,
+  Pe as legalComponentSchema,
+  ue as locationInfoSchema,
+  _o as logInsertSchema,
+  Xn as logSchema,
+  uo as logStreamFilterSchema,
+  mo as logStreamInsertSchema,
+  qn as logStreamSchema,
   q as logStreamStatusSchema,
-  po as logStreamTypeSchema,
-  no as loginSessionAuthStrategySchema,
-  io as loginSessionInsertSchema,
-  Gn as loginSessionSchema,
-  oo as loginSessionStateSchema,
-  uo as migrationProviderTypeSchema,
-  mo as migrationSourceCredentialsSchema,
+  go as logStreamTypeSchema,
+  lo as logTypeCategories,
+  ro as logTypeDescriptions,
+  io as loginSessionAuthStrategySchema,
+  ao as loginSessionInsertSchema,
+  Kn as loginSessionSchema,
+  no as loginSessionStateSchema,
+  Eo as migrationProviderTypeSchema,
+  So as migrationSourceCredentialsSchema,
   ho as migrationSourceInsertSchema,
-  Kn as migrationSourceSchema,
+  zn as migrationSourceSchema,
   qe as nodeSchema,
-  Hn as openIDConfigurationSchema,
-  qo as organizationBrandingSchema,
-  Zo as organizationConnectionInsertSchema,
-  pi as organizationConnectionListSchema,
-  Qo as organizationConnectionSchema,
-  Xo as organizationEnabledConnectionSchema,
-  Yo as organizationInsertSchema,
-  ci as organizationSchema,
-  Vo as organizationTokenQuotaSchema,
-  No as pageBackgroundSchema,
-  Ti as parseUserId,
-  yo as passwordInsertSchema,
-  zn as passwordSchema,
-  Ie as profileDataSchema,
-  tn as promptScreenSchema,
-  Qn as promptSettingSchema,
-  Ee as redirectActionSchema,
-  vo as refreshTokenInsertSchema,
-  ei as refreshTokenSchema,
+  Bn as openIDConfigurationSchema,
+  zo as organizationBrandingSchema,
+  Jo as organizationConnectionInsertSchema,
+  ui as organizationConnectionListSchema,
+  $o as organizationConnectionSchema,
+  Yo as organizationEnabledConnectionSchema,
+  Zo as organizationInsertSchema,
+  gi as organizationSchema,
+  Qo as organizationTokenQuotaSchema,
+  Fo as pageBackgroundSchema,
+  Li as parseUserId,
+  Co as passwordInsertSchema,
+  Yn as passwordSchema,
+  Oe as profileDataSchema,
+  nn as promptScreenSchema,
+  ti as promptSettingSchema,
+  fe as redirectActionSchema,
+  ko as refreshTokenInsertSchema,
+  ii as refreshTokenSchema,
   de as requestContextSchema,
-  xo as resourceServerInsertSchema,
-  ni as resourceServerListSchema,
-  Lo as resourceServerOptionsSchema,
-  Uo as resourceServerSchema,
-  Do as resourceServerScopeSchema,
-  _e as responseContextSchema,
-  xe as richTextComponentSchema,
-  Ko as roleInsertSchema,
-  li as roleListSchema,
-  Fo as rolePermissionInsertSchema,
-  ii as rolePermissionListSchema,
-  Po as rolePermissionSchema,
-  zo as roleSchema,
-  Bt as screenLinkSchema,
-  Ao as sessionInsertSchema,
-  qn as sessionSchema,
-  Xn as signingKeySchema,
-  oi as smsProviderSchema,
-  ti as smsSendParamsSchema,
-  Xe as startSchema,
-  So as suspiciousIpThrottlingSchema,
-  pe as targetSchema,
-  Io as tenantInsertSchema,
-  Vn as tenantSchema,
-  _i as tenantSettingsSchema,
-  ko as themeInsertSchema,
-  Zn as themeSchema,
-  Yn as tokenResponseSchema,
+  vo as resourceServerInsertSchema,
+  ri as resourceServerListSchema,
+  Mo as resourceServerOptionsSchema,
+  Po as resourceServerSchema,
+  jo as resourceServerScopeSchema,
+  ge as responseContextSchema,
+  Me as richTextComponentSchema,
+  Xo as roleInsertSchema,
+  di as roleListSchema,
+  xo as rolePermissionInsertSchema,
+  li as rolePermissionListSchema,
+  Ho as rolePermissionSchema,
+  qo as roleSchema,
+  Kt as screenLinkSchema,
+  Oo as sessionInsertSchema,
+  Qn as sessionSchema,
+  Zn as signingKeySchema,
+  si as smsProviderSchema,
+  ai as smsSendParamsSchema,
+  ze as startSchema,
+  fo as suspiciousIpThrottlingSchema,
+  _e as targetSchema,
+  To as tenantInsertSchema,
+  Jn as tenantSchema,
+  Ei as tenantSettingsSchema,
+  Uo as themeInsertSchema,
+  ei as themeSchema,
+  $n as tokenResponseSchema,
   hn as totalsSchema,
-  kn as uiScreenSchema,
-  Oe as userInsertSchema,
-  $o as userOrganizationInsertSchema,
-  di as userOrganizationSchema,
-  Mo as userPermissionInsertSchema,
-  ai as userPermissionListSchema,
-  Ho as userPermissionSchema,
-  si as userPermissionWithDetailsListSchema,
-  Go as userPermissionWithDetailsSchema,
-  fn as userResponseSchema,
-  Bo as userRoleInsertSchema,
-  ri as userRoleListSchema,
-  Wo as userRoleSchema,
-  we as userSchema,
-  nt as verificationMethodsSchema,
-  Lt as widgetComponentSchema,
-  jo as widgetSchema
+  Un as uiScreenSchema,
+  ye as userInsertSchema,
+  en as userOrganizationInsertSchema,
+  mi as userOrganizationSchema,
+  Go as userPermissionInsertSchema,
+  ci as userPermissionListSchema,
+  Bo as userPermissionSchema,
+  pi as userPermissionWithDetailsListSchema,
+  Ko as userPermissionWithDetailsSchema,
+  An as userResponseSchema,
+  Wo as userRoleInsertSchema,
+  _i as userRoleListSchema,
+  Vo as userRoleSchema,
+  Re as userSchema,
+  it as verificationMethodsSchema,
+  jt as widgetComponentSchema,
+  Do as widgetSchema
 };