npm - @authhero/adapter-interfaces - Versions diffs - 2.3.0 → 2.5.0 - Mend

@authhero/adapter-interfaces 2.3.0 → 2.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (4) hide show

package/dist/adapter-interfaces.cjs +1 -1
package/dist/adapter-interfaces.d.ts +18 -8
package/dist/adapter-interfaces.mjs +890 -712
package/package.json +1 -1

package/dist/adapter-interfaces.mjs CHANGED Viewed

@@ -1,25 +1,25 @@
 import { z as e } from "@hono/zod-openapi";
-const a = e.object({
+const s = e.object({
   created_at: e.string(),
   updated_at: e.string()
-}), j = e.object({
+}), D = e.object({
   id: e.string(),
   version: e.string().optional()
-}), k = e.object({
+}), F = e.object({
   name: e.string(),
   version: e.string()
-}), R = e.object({
+}), U = e.object({
   name: e.string(),
   // Optional on writes so PATCH callers can omit the value to preserve the
   // existing secret. The adapter merges by name when value is missing.
   value: e.string().optional()
-}), v = e.object({
+}), w = e.object({
   name: e.string().max(255),
   code: e.string().max(1e5),
-  supported_triggers: e.array(j).optional(),
+  supported_triggers: e.array(D).optional(),
   runtime: e.string().max(50).optional(),
-  dependencies: e.array(k).optional(),
-  secrets: e.array(R).optional(),
+  dependencies: e.array(F).optional(),
+  secrets: e.array(U).optional(),
   // Marks this action as a shared template owned by the control-plane tenant.
   // Other tenants can opt-in by creating a row with the same `name` and
   // `inherit: true`; at execute time the loader reads code from this row.
@@ -28,10 +28,10 @@ const a = e.object({
   // read through from the control-plane system action with a matching name.
   // The local `secrets` still override (local-first then upstream fallback).
   inherit: e.boolean().optional()
-}), sn = v.partial().extend({
+}), ln = w.partial().extend({
   status: e.enum(["draft", "built"]).optional(),
   deployed_at: e.string().optional()
-}), rn = v.extend({
+}), cn = w.extend({
   id: e.string(),
   tenant_id: e.string(),
   status: e.enum(["draft", "built"]).default("built"),
@@ -43,63 +43,63 @@ const a = e.object({
       value: e.string().optional()
     })
   ).optional(),
-  ...a.shape
-}), ee = e.string(), te = e.enum([
+  ...s.shape
+}), te = e.string(), oe = e.enum([
   "unspecified",
   "pending",
   "final",
   "partial",
   "canceled",
   "suspended"
-]), oe = e.object({
+]), ne = e.object({
   id: e.string(),
   msg: e.string(),
   url: e.string().optional()
-}), ne = e.object({
+}), ie = e.object({
   action_name: e.string(),
-  error: oe.nullable(),
+  error: ne.nullable(),
   started_at: e.string(),
   ended_at: e.string()
-}), ie = e.object({
+}), ae = e.object({
   level: e.enum(["log", "info", "warn", "error", "debug"]),
   message: e.string()
-}), ae = e.array(
+}), se = e.array(
   e.object({
     action_name: e.string(),
-    lines: e.array(ie)
+    lines: e.array(ae)
   })
-), se = e.object({
+), re = e.object({
   id: e.string(),
   tenant_id: e.string(),
-  trigger_id: ee,
-  status: te,
-  results: e.array(ne),
-  logs: ae.optional(),
+  trigger_id: te,
+  status: oe,
+  results: e.array(ie),
+  logs: se.optional(),
   created_at: e.string(),
   updated_at: e.string()
-}), ln = se.omit({
+}), pn = re.omit({
   tenant_id: !0,
   created_at: !0,
   updated_at: !0
-}), re = e.object({
+}), le = e.object({
   action_id: e.string(),
   code: e.string().max(1e5),
   runtime: e.string().max(50).optional(),
-  dependencies: e.array(k).optional(),
-  secrets: e.array(R).optional(),
-  supported_triggers: e.array(j).optional(),
+  dependencies: e.array(F).optional(),
+  secrets: e.array(U).optional(),
+  supported_triggers: e.array(D).optional(),
   deployed: e.boolean().default(!0)
-}), cn = re.extend({
+}), _n = le.extend({
   id: e.string(),
   tenant_id: e.string(),
   number: e.number().int(),
-  ...a.shape
-}), le = e.enum([
+  ...s.shape
+}), ce = e.enum([
   "user_action",
   "admin_action",
   "system",
   "api"
-]), ce = e.object({
+]), pe = e.object({
   type: e.enum(["user", "admin", "system", "api_key", "client_credentials"]),
   id: e.string().optional(),
   email: e.string().optional(),
@@ -107,7 +107,7 @@ const a = e.object({
   org_name: e.string().optional(),
   scopes: e.array(e.string()).optional(),
   client_id: e.string().optional()
-}), pe = e.object({
+}), _e = e.object({
   type: e.string(),
   id: e.string(),
   before: e.record(e.unknown()).optional(),
@@ -121,56 +121,56 @@ const a = e.object({
   ip: e.string(),
   user_agent: e.string().optional(),
   correlation_id: e.string().optional()
-}), _e = e.object({
+}), ge = e.object({
   status_code: e.number(),
   body: e.unknown().optional()
-}), ge = e.object({
+}), ue = e.object({
   country_code: e.string(),
   city_name: e.string(),
   latitude: e.string(),
   longitude: e.string(),
   time_zone: e.string(),
   continent_code: e.string()
-}), ue = e.object({
+}), me = e.object({
   name: e.string(),
   version: e.string(),
   env: e.record(e.string()).optional()
-}), me = e.object({
+}), Ee = e.object({
   tenant_id: e.string(),
   event_type: e.string(),
   log_type: e.string(),
   description: e.string().optional(),
-  category: le,
-  actor: ce,
-  target: pe,
+  category: ce,
+  actor: pe,
+  target: _e,
   request: de,
-  response: _e.optional(),
+  response: ge.optional(),
   connection: e.string().optional(),
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
   audience: e.string().optional(),
   scope: e.string().optional(),
-  location: ge.optional(),
-  auth0_client: ue.optional(),
+  location: ue.optional(),
+  auth0_client: me.optional(),
   hostname: e.string(),
   is_mobile: e.boolean().optional(),
   timestamp: e.string()
-}), pn = me.extend({
+}), dn = Ee.extend({
   id: e.string()
-}), dn = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), _n = e.enum([
+}), gn = e.enum(["AUTH0", "EMAIL", "REDIRECT"]), un = e.enum([
   "CREATE_USER",
   "GET_USER",
   "UPDATE_USER",
   "SEND_REQUEST",
   "SEND_EMAIL"
-]), gn = e.enum(["VERIFY_EMAIL"]), he = e.object({
+]), mn = e.enum(["VERIFY_EMAIL"]), Se = e.object({
   require_mx_record: e.boolean().optional(),
   block_aliases: e.boolean().optional(),
   block_free_emails: e.boolean().optional(),
   block_disposable_emails: e.boolean().optional(),
   blocklist: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional()
-}), be = e.object({
+}), he = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("AUTH0"),
@@ -182,7 +182,7 @@ const a = e.object({
     user_id: e.string(),
     changes: e.record(e.string(), e.any())
   })
-}), fe = e.object({
+}), be = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("EMAIL"),
@@ -191,9 +191,9 @@ const a = e.object({
   mask_output: e.boolean().optional(),
   params: e.object({
     email: e.string(),
-    rules: he.optional()
+    rules: Se.optional()
   })
-}), Se = e.enum(["change-email", "account", "custom"]), Ee = e.object({
+}), Ae = e.enum(["change-email", "account", "custom"]), fe = e.object({
   id: e.string(),
   alias: e.string().max(100).optional(),
   type: e.literal("REDIRECT"),
@@ -201,39 +201,39 @@ const a = e.object({
   allow_failure: e.boolean().optional(),
   mask_output: e.boolean().optional(),
   params: e.object({
-    target: Se.openapi({
+    target: Ae.openapi({
       description: "The predefined target to redirect to, or 'custom' for a custom URL"
     }),
     custom_url: e.string().optional().openapi({
       description: "Custom URL to redirect to when target is 'custom'"
     })
   })
-}), ye = e.union([
+}), Ce = e.union([
+  he,
   be,
-  fe,
-  Ee
-]), Ae = e.object({
+  fe
+]), Ie = e.object({
   name: e.string().min(1).max(150).openapi({
     description: "The name of the flow"
   }),
   // Actions is an array of action steps (Auth0 stores as JSON blob)
-  actions: e.array(ye).optional().default([]).openapi({
+  actions: e.array(Ce).optional().default([]).openapi({
     description: "The list of actions to execute in sequence"
   })
-}), un = Ae.extend({
-  ...a.shape,
+}), En = Ie.extend({
+  ...s.shape,
   id: e.string().openapi({
     description: "Unique identifier for the flow",
     example: "af_12tMpdJ3iek7svMyZkSh5M"
   })
-}), mn = e.object({
-  page: e.string().min(0).optional().default("0").transform((t) => parseInt(t, 10)).openapi({
+}), Sn = e.object({
+  page: e.string().min(0).optional().default("0").transform((o) => parseInt(o, 10)).openapi({
     description: "The page number where 0 is the first page"
   }),
-  per_page: e.string().min(1).optional().default("10").transform((t) => parseInt(t, 10)).openapi({
+  per_page: e.string().min(1).optional().default("10").transform((o) => parseInt(o, 10)).openapi({
     description: "The number of items per page"
   }),
-  include_totals: e.string().optional().default("false").transform((t) => t === "true").openapi({
+  include_totals: e.string().optional().default("false").transform((o) => o === "true").openapi({
     description: "If the total number of items should be included in the response"
   }),
   sort: e.string().regex(/^.+:(-1|1)$/).optional().openapi({
@@ -247,7 +247,7 @@ const a = e.object({
   limit: e.number(),
   length: e.number(),
   total: e.number().optional()
-}), Ie = e.object({
+}), Oe = e.object({
   email: e.string().optional(),
   email_verified: e.boolean().optional(),
   name: e.string().optional(),
@@ -256,7 +256,7 @@ const a = e.object({
   phone_number: e.string().optional(),
   phone_verified: e.boolean().optional(),
   family_name: e.string().optional()
-}).catchall(e.any()), Ce = e.object({
+}).catchall(e.any()), Te = e.object({
   connection: e.string(),
   user_id: e.string(),
   provider: e.string(),
@@ -269,8 +269,8 @@ const a = e.object({
   access_token: e.string().optional(),
   access_token_secret: e.string().optional(),
   refresh_token: e.string().optional(),
-  profileData: Ie.optional()
-}), Te = e.object({
+  profileData: Oe.optional()
+}), Ne = e.object({
   formatted: e.string().optional(),
   // Full mailing address
   street_address: e.string().optional(),
@@ -283,9 +283,9 @@ const a = e.object({
   // Zip code or postal code
   country: e.string().optional()
   // Country name
-}).optional(), D = e.object({
-  email: e.string().optional().transform((t) => t && t.toLowerCase()),
-  username: e.string().refine((t) => !t.includes("@"), {
+}).optional(), k = e.object({
+  email: e.string().optional().transform((o) => o && o.toLowerCase()),
+  username: e.string().refine((o) => !o.includes("@"), {
     message: 'Usernames must not contain "@". Use the email field for email addresses.'
   }).optional(),
   phone_number: e.string().optional(),
@@ -315,8 +315,8 @@ const a = e.object({
   zoneinfo: e.string().optional(),
   // e.g., "Europe/Paris"
   // OIDC address claim (OIDC Core 5.1.1)
-  address: Te
-}), Oe = D.extend({
+  address: Ne
+}), ye = k.extend({
   email_verified: e.boolean().default(!1),
   verify_email: e.boolean().optional(),
   last_ip: e.string().optional(),
@@ -339,31 +339,31 @@ const a = e.object({
     hash: e.string(),
     algorithm: e.string()
   }).optional()
-}), we = e.object({
-  ...Oe.omit({ password: !0 }).shape,
-  ...a.shape,
+}), Re = e.object({
+  ...ye.omit({ password: !0 }).shape,
+  ...s.shape,
   user_id: e.string(),
   provider: e.string(),
   is_social: e.boolean(),
   email: e.string().optional(),
   login_count: e.number().default(0),
-  identities: e.array(Ce).optional()
-}), bn = we.omit({
+  identities: e.array(Te).optional()
+}), bn = Re.omit({
   registration_completed_at: !0
-}), fn = D.extend({
+}), An = k.extend({
   login_count: e.number(),
   multifactor: e.array(e.string()).optional(),
   last_ip: e.string().optional(),
   last_login: e.string().optional(),
   user_id: e.string()
 }).catchall(e.any());
-let Ne = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", je = (t = 21) => {
-  let o = "", n = crypto.getRandomValues(new Uint8Array(t |= 0));
-  for (; t--; )
-    o += Ne[n[t] & 63];
-  return o;
+let Le = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", De = (o = 21) => {
+  let n = "", i = crypto.getRandomValues(new Uint8Array(o |= 0));
+  for (; o--; )
+    n += Le[i[o] & 63];
+  return n;
 };
-const ke = e.object({
+const Fe = e.object({
   client_id: e.string().optional().openapi({
     description: "ID of this client. Generated server-side if omitted (Auth0 behavior)."
   }),
@@ -376,7 +376,7 @@ const ke = e.object({
   global: e.boolean().default(!1).openapi({
     description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)."
   }),
-  client_secret: e.string().default(() => je()).optional().openapi({
+  client_secret: e.string().default(() => De()).optional().openapi({
     description: "Client secret (which you must not make public)."
   }),
   app_type: e.enum([
@@ -584,14 +584,14 @@ const ke = e.object({
   user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({
     description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies."
   })
-}), Sn = e.object({
+}), fn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
-  ...ke.shape,
+  ...Fe.shape,
   // Insert allows omitting (server-generated to match Auth0). The read schema
   // always has it — the row in storage is non-null.
   client_id: e.string()
-}), Re = e.object({
+}), Ue = e.object({
   client_id: e.string().min(1).openapi({
     description: "ID of the client."
   }),
@@ -616,37 +616,37 @@ const ke = e.object({
   authorization_details_types: e.array(e.string()).optional().openapi({
     description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement."
   })
-}), ve = e.object({
+}), we = e.object({
   id: e.string().openapi({
     description: "ID of the client grant."
   }),
-  ...Re.shape,
+  ...Ue.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), En = e.array(ve), De = e.enum(["iat", "rat"]), Le = e.object({
+}), Cn = e.array(we), ke = e.enum(["iat", "rat"]), je = e.object({
   id: e.string(),
   token_hash: e.string(),
-  type: De,
+  type: ke,
   client_id: e.string().optional(),
   sub: e.string().optional(),
   constraints: e.record(e.unknown()).optional(),
   single_use: e.boolean().default(!1),
   expires_at: e.string().optional()
-}), yn = e.object({
+}), In = e.object({
   created_at: e.string(),
   used_at: e.string().optional(),
   revoked_at: e.string().optional(),
-  ...Le.shape
-}), m = e.object({
+  ...je.shape
+}), E = e.object({
   x: e.number(),
   y: e.number()
 });
-var L = /* @__PURE__ */ ((t) => (t.RICH_TEXT = "RICH_TEXT", t.NEXT_BUTTON = "NEXT_BUTTON", t.BACK_BUTTON = "BACK_BUTTON", t.SUBMIT_BUTTON = "SUBMIT_BUTTON", t.DIVIDER = "DIVIDER", t.TEXT = "TEXT", t.EMAIL = "EMAIL", t.PASSWORD = "PASSWORD", t.NUMBER = "NUMBER", t.PHONE = "PHONE", t.DATE = "DATE", t.CHECKBOX = "CHECKBOX", t.RADIO = "RADIO", t.SELECT = "SELECT", t.HIDDEN = "HIDDEN", t.LEGAL = "LEGAL", t))(L || {}), x = /* @__PURE__ */ ((t) => (t.BLOCK = "BLOCK", t.FIELD = "FIELD", t))(x || {});
-const C = e.object({
+var j = /* @__PURE__ */ ((o) => (o.RICH_TEXT = "RICH_TEXT", o.NEXT_BUTTON = "NEXT_BUTTON", o.BACK_BUTTON = "BACK_BUTTON", o.SUBMIT_BUTTON = "SUBMIT_BUTTON", o.DIVIDER = "DIVIDER", o.TEXT = "TEXT", o.EMAIL = "EMAIL", o.PASSWORD = "PASSWORD", o.NUMBER = "NUMBER", o.PHONE = "PHONE", o.DATE = "DATE", o.CHECKBOX = "CHECKBOX", o.RADIO = "RADIO", o.SELECT = "SELECT", o.HIDDEN = "HIDDEN", o.LEGAL = "LEGAL", o))(j || {}), M = /* @__PURE__ */ ((o) => (o.BLOCK = "BLOCK", o.FIELD = "FIELD", o))(M || {});
+const T = e.object({
   id: e.string(),
-  category: e.nativeEnum(x),
-  type: e.nativeEnum(L)
-}), xe = C.extend({
+  category: e.nativeEnum(M),
+  type: e.nativeEnum(j)
+}), Me = T.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -658,7 +658,7 @@ const C = e.object({
   config: e.object({
     content: e.string()
   }).passthrough()
-}), Ue = C.extend({
+}), Pe = T.extend({
   category: e.literal(
     "BLOCK"
     /* BLOCK */
@@ -680,7 +680,7 @@ const C = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), Fe = C.extend({
+}), ve = T.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -694,7 +694,7 @@ const C = e.object({
   config: e.object({
     text: e.string()
   }).passthrough()
-}), Pe = C.extend({
+}), xe = T.extend({
   category: e.literal(
     "FIELD"
     /* FIELD */
@@ -747,49 +747,49 @@ const C = e.object({
     label: e.string().optional(),
     placeholder: e.string().optional()
   }).passthrough()
-}), Me = e.object({
+}), He = e.object({
   id: e.string(),
   category: e.string(),
   type: e.string()
-}).passthrough(), He = e.union([
-  xe,
-  Ue,
-  Fe,
+}).passthrough(), Ge = e.union([
+  Me,
   Pe,
-  Me
+  ve,
+  xe,
+  He
 ]);
-var Ge = /* @__PURE__ */ ((t) => (t.STEP = "STEP", t.FLOW = "FLOW", t.CONDITION = "CONDITION", t.ACTION = "ACTION", t))(Ge || {});
+var We = /* @__PURE__ */ ((o) => (o.STEP = "STEP", o.FLOW = "FLOW", o.CONDITION = "CONDITION", o.ACTION = "ACTION", o))(We || {});
 const Be = e.object({
   id: e.string(),
   type: e.literal(
     "STEP"
     /* STEP */
   ),
-  coordinates: m,
+  coordinates: E,
   alias: e.string().optional(),
   config: e.object({
-    components: e.array(He),
+    components: e.array(Ge),
     next_node: e.string()
   }).passthrough()
-}), We = e.object({
+}), Ke = e.object({
   id: e.string(),
   type: e.literal(
     "FLOW"
     /* FLOW */
   ),
-  coordinates: m,
+  coordinates: E,
   alias: e.string().optional(),
   config: e.object({
     flow_id: e.string(),
     next_node: e.string()
   })
-}), Ke = e.object({
+}), Ve = e.object({
   id: e.string(),
   type: e.literal(
     "ACTION"
     /* ACTION */
   ),
-  coordinates: m,
+  coordinates: E,
   alias: e.string().optional(),
   config: e.object({
     action_type: e.enum(["REDIRECT"]).openapi({
@@ -805,43 +805,43 @@ const Be = e.object({
       description: "The next node to navigate to after action (for non-redirect actions)"
     })
   }).passthrough()
-}), ze = e.object({
+}), Xe = e.object({
   id: e.string(),
   type: e.string(),
-  coordinates: m
+  coordinates: E
 }).passthrough(), qe = e.union([
   Be,
-  We,
   Ke,
-  ze
-]), Xe = e.object({
+  Ve,
+  Xe
+]), ze = e.object({
   next_node: e.string(),
-  coordinates: m
-}).passthrough(), Ve = e.object({
-  resume_flow: e.boolean().optional(),
-  coordinates: m
+  coordinates: E
 }).passthrough(), Ye = e.object({
+  resume_flow: e.boolean().optional(),
+  coordinates: E
+}).passthrough(), Qe = e.object({
   id: e.string(),
   name: e.string(),
   languages: e.object({
     primary: e.string()
   }).passthrough(),
   nodes: e.array(qe),
-  start: Xe,
-  ending: Ve,
+  start: ze,
+  ending: Ye,
   created_at: e.string(),
   updated_at: e.string(),
   links: e.object({
     sdkSrc: e.string().optional(),
     sdk_src: e.string().optional()
   }).passthrough()
-}).passthrough(), An = Ye.omit({
+}).passthrough(), On = Qe.omit({
   id: !0,
   created_at: !0,
   updated_at: !0
 });
-var U = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.ID_TOKEN = "id_token", t.TOKEN_ID_TOKEN = "id_token token", t.CODE = "code", t.CODE_ID_TOKEN = "code id_token", t.CODE_TOKEN = "code token", t.CODE_ID_TOKEN_TOKEN = "code id_token token", t))(U || {}), F = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(F || {}), P = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(P || {});
-const N = e.union([
+var P = /* @__PURE__ */ ((o) => (o.TOKEN = "token", o.ID_TOKEN = "id_token", o.TOKEN_ID_TOKEN = "id_token token", o.CODE = "code", o.CODE_ID_TOKEN = "code id_token", o.CODE_TOKEN = "code token", o.CODE_ID_TOKEN_TOKEN = "code id_token token", o))(P || {}), v = /* @__PURE__ */ ((o) => (o.QUERY = "query", o.FRAGMENT = "fragment", o.FORM_POST = "form_post", o.WEB_MESSAGE = "web_message", o.SAML_POST = "saml_post", o))(v || {}), x = /* @__PURE__ */ ((o) => (o.S256 = "S256", o.Plain = "plain", o))(x || {});
+const L = e.union([
   e.null(),
   e.object({
     essential: e.boolean().optional(),
@@ -849,13 +849,13 @@ const N = e.union([
     values: e.array(e.unknown()).optional()
   })
 ]).nullable(), Ze = e.object({
-  userinfo: e.record(e.string(), N).optional(),
-  id_token: e.record(e.string(), N).optional()
-}), Qe = e.object({
+  userinfo: e.record(e.string(), L).optional(),
+  id_token: e.record(e.string(), L).optional()
+}), Je = e.object({
   client_id: e.string(),
   act_as: e.string().optional(),
-  response_type: e.nativeEnum(U).optional(),
-  response_mode: e.nativeEnum(F).optional(),
+  response_type: e.nativeEnum(P).optional(),
+  response_mode: e.nativeEnum(v).optional(),
   redirect_uri: e.string().optional(),
   audience: e.string().optional(),
   organization: e.string().optional(),
@@ -863,7 +863,7 @@ const N = e.union([
   nonce: e.string().optional(),
   scope: e.string().optional(),
   prompt: e.string().optional(),
-  code_challenge_method: e.nativeEnum(P).optional(),
+  code_challenge_method: e.nativeEnum(x).optional(),
   code_challenge: e.string().optional(),
   username: e.string().optional(),
   ui_locales: e.string().optional(),
@@ -878,7 +878,7 @@ const N = e.union([
   claims: Ze.optional(),
   // The following fields are not available in Auth0
   vendor_id: e.string().optional()
-}), In = e.object({
+}), Tn = e.object({
   colors: e.object({
     primary: e.string(),
     // Auth0 supports either a hex color string ("#ffffff") or a gradient
@@ -911,7 +911,7 @@ const N = e.union([
   "authorization_code",
   "oauth2_state",
   "ticket"
-]), Je = e.object({
+]), et = e.object({
   code_id: e.string().openapi({
     description: "The code that will be used in for instance an email verification flow"
   }),
@@ -946,10 +946,10 @@ const N = e.union([
   expires_at: e.string(),
   used_at: e.string().optional(),
   user_id: e.string().optional()
-}), Cn = e.object({
-  ...Je.shape,
+}), Nn = e.object({
+  ...et.shape,
   created_at: e.string()
-}), et = e.object({
+}), tt = e.object({
   kid: e.string().optional(),
   team_id: e.string().optional(),
   realms: e.string().optional(),
@@ -1088,27 +1088,27 @@ const N = e.union([
   // Controls when root user attributes are updated from external IdP
   set_user_root_attributes: e.enum(["on_each_login", "on_first_login", "never_on_login"]).optional()
 });
-function T(t) {
-  if (t !== null) {
-    if (Array.isArray(t))
-      return t.filter((o) => o !== null).map(T);
-    if (t && typeof t == "object") {
-      const o = {};
-      for (const [n, h] of Object.entries(t))
-        h !== null && (o[n] = T(h));
-      return o;
+function N(o) {
+  if (o !== null) {
+    if (Array.isArray(o))
+      return o.filter((n) => n !== null).map(N);
+    if (o && typeof o == "object") {
+      const n = {};
+      for (const [i, S] of Object.entries(o))
+        S !== null && (n[i] = N(S));
+      return n;
     }
-    return t;
+    return o;
   }
 }
-const tt = e.object({
+const ot = e.object({
   id: e.string().optional(),
   name: e.string(),
   display_name: e.string().optional(),
   strategy: e.string(),
   options: e.preprocess(
-    (t) => t === null ? {} : T(t),
-    et
+    (o) => o === null ? {} : N(o),
+    tt
   ).default({}),
   enabled_clients: e.array(e.string()).default([]).optional(),
   response_type: e.custom().optional(),
@@ -1117,11 +1117,11 @@ const tt = e.object({
   show_as_button: e.boolean().optional(),
   metadata: e.record(e.any()).optional(),
   is_system: e.boolean().optional()
-}), Tn = e.object({
+}), yn = e.object({
   id: e.string(),
-  created_at: e.string().transform((t) => t === null ? "" : t),
-  updated_at: e.string().transform((t) => t === null ? "" : t)
-}).extend(tt.shape), ot = e.object({
+  created_at: e.string().transform((o) => o === null ? "" : o),
+  updated_at: e.string().transform((o) => o === null ? "" : o)
+}).extend(ot.shape), nt = e.object({
   domain: e.string(),
   custom_domain_id: e.string().optional(),
   type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -1135,7 +1135,7 @@ const tt = e.object({
     "null"
   ]).optional(),
   domain_metadata: e.record(e.string().max(255)).optional()
-}), nt = e.discriminatedUnion("name", [
+}), it = e.discriminatedUnion("name", [
   e.object({
     name: e.literal("txt"),
     record: e.string(),
@@ -1146,35 +1146,35 @@ const tt = e.object({
     http_body: e.string(),
     http_url: e.string()
   })
-]), it = e.object({
-  ...ot.shape,
+]), at = e.object({
+  ...nt.shape,
   custom_domain_id: e.string(),
   primary: e.boolean(),
   status: e.enum(["disabled", "pending", "pending_verification", "ready"]),
   origin_domain_name: e.string().optional(),
   verification: e.object({
-    methods: e.array(nt)
+    methods: e.array(it)
   }).optional(),
   tls_policy: e.string().optional()
-}), On = it.extend({
+}), Rn = at.extend({
   tenant_id: e.string()
-}), O = e.object({
+}), y = e.object({
   id: e.string(),
   order: e.number().optional(),
   visible: e.boolean().optional().default(!0)
-}), l = O.extend({
+}), c = y.extend({
   category: e.literal("BLOCK").optional()
-}), at = l.extend({
+}), st = c.extend({
   type: e.literal("DIVIDER"),
   config: e.object({
     text: e.string().optional()
   }).optional()
-}), st = l.extend({
+}), rt = c.extend({
   type: e.literal("HTML"),
   config: e.object({
     content: e.string().optional()
   }).optional()
-}), rt = l.extend({
+}), lt = c.extend({
   type: e.literal("IMAGE"),
   config: e.object({
     src: e.string().optional(),
@@ -1182,55 +1182,55 @@ const tt = e.object({
     width: e.number().optional(),
     height: e.number().optional()
   }).optional()
-}), lt = l.extend({
+}), ct = c.extend({
   type: e.literal("JUMP_BUTTON"),
   config: e.object({
     text: e.string().optional(),
     target_step: e.string().optional()
   })
-}), ct = l.extend({
+}), pt = c.extend({
   type: e.literal("RESEND_BUTTON"),
   config: e.object({
     text: e.string().optional(),
     resend_action: e.string().optional()
   })
-}), pt = l.extend({
+}), _t = c.extend({
   type: e.literal("NEXT_BUTTON"),
   config: e.object({
     text: e.string().optional()
   })
-}), dt = l.extend({
+}), dt = c.extend({
   type: e.literal("PREVIOUS_BUTTON"),
   config: e.object({
     text: e.string().optional()
   })
-}), _t = l.extend({
+}), gt = c.extend({
   type: e.literal("RICH_TEXT"),
   config: e.object({
     content: e.string().optional()
   }).optional()
-}), w = O.extend({
+}), R = y.extend({
   category: e.literal("WIDGET").optional(),
   label: e.string().min(1).optional(),
   hint: e.string().min(1).max(500).optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), gt = w.extend({
+}), ut = R.extend({
   type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
   config: e.object({
     credential_type: e.string().optional()
   })
-}), ut = w.extend({
+}), mt = R.extend({
   type: e.literal("GMAPS_ADDRESS"),
   config: e.object({
     api_key: e.string().optional()
   })
-}), mt = w.extend({
+}), Et = R.extend({
   type: e.literal("RECAPTCHA"),
   config: e.object({
     site_key: e.string().optional()
   })
-}), i = O.extend({
+}), a = y.extend({
   category: e.literal("FIELD").optional(),
   label: e.string().min(1).optional(),
   hint: e.string().min(1).max(500).optional(),
@@ -1243,12 +1243,12 @@ const tt = e.object({
   ).optional(),
   required: e.boolean().optional(),
   sensitive: e.boolean().optional()
-}), ht = i.extend({
+}), St = a.extend({
   type: e.literal("BOOLEAN"),
   config: e.object({
     default_value: e.boolean().optional()
   }).optional()
-}), bt = i.extend({
+}), ht = a.extend({
   type: e.literal("CARDS"),
   config: e.object({
     options: e.array(
@@ -1261,7 +1261,7 @@ const tt = e.object({
     ).optional(),
     multi_select: e.boolean().optional()
   }).optional()
-}), ft = i.extend({
+}), bt = a.extend({
   type: e.literal("CHOICE"),
   config: e.object({
     options: e.array(
@@ -1274,7 +1274,7 @@ const tt = e.object({
     multiple: e.boolean().optional(),
     default_value: e.union([e.string(), e.array(e.string())]).optional()
   }).optional()
-}), St = i.extend({
+}), At = a.extend({
   type: e.literal("CUSTOM"),
   config: e.object({
     component: e.string().optional(),
@@ -1282,7 +1282,7 @@ const tt = e.object({
     schema: e.record(e.any()).optional(),
     code: e.string().optional()
   })
-}), Et = i.extend({
+}), ft = a.extend({
   type: e.literal("DATE"),
   config: e.object({
     format: e.string().optional(),
@@ -1290,7 +1290,7 @@ const tt = e.object({
     max: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), yt = i.extend({
+}), Ct = a.extend({
   type: e.literal("DROPDOWN"),
   config: e.object({
     options: e.array(
@@ -1304,26 +1304,26 @@ const tt = e.object({
     multiple: e.boolean().optional(),
     default_value: e.union([e.string(), e.array(e.string())]).optional()
   }).optional()
-}), At = i.extend({
+}), It = a.extend({
   type: e.literal("EMAIL"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), It = i.extend({
+}), Ot = a.extend({
   type: e.literal("FILE"),
   config: e.object({
     accept: e.string().optional(),
     max_size: e.number().optional(),
     multiple: e.boolean().optional()
   }).optional()
-}), Ct = i.extend({
+}), Tt = a.extend({
   type: e.literal("LEGAL"),
   config: e.object({
     text: e.string(),
     html: e.boolean().optional()
   }).optional()
-}), Tt = i.extend({
+}), Nt = a.extend({
   type: e.literal("NUMBER"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1332,7 +1332,7 @@ const tt = e.object({
     step: e.number().optional(),
     default_value: e.string().optional()
   }).optional()
-}), Ot = i.extend({
+}), yt = a.extend({
   type: e.literal("PASSWORD"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1341,13 +1341,13 @@ const tt = e.object({
     forgot_password_link: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), wt = i.extend({
+}), Rt = a.extend({
   type: e.literal("PAYMENT"),
   config: e.object({
     provider: e.string().optional(),
     currency: e.string().optional()
   }).optional()
-}), Nt = i.extend({
+}), Lt = a.extend({
   type: e.literal("SOCIAL"),
   config: e.object({
     providers: e.array(e.string()).optional(),
@@ -1362,7 +1362,7 @@ const tt = e.object({
       })
     ).optional()
   }).optional()
-}), jt = i.extend({
+}), Dt = a.extend({
   type: e.literal("TEL"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1370,7 +1370,7 @@ const tt = e.object({
     default_value: e.string().optional(),
     allow_email: e.boolean().optional()
   }).optional()
-}), kt = i.extend({
+}), Ft = a.extend({
   type: e.literal("TEXT"),
   config: e.object({
     placeholder: e.string().optional(),
@@ -1378,54 +1378,54 @@ const tt = e.object({
     max_length: e.number().optional(),
     default_value: e.string().optional()
   }).optional()
-}), Rt = i.extend({
+}), Ut = a.extend({
   type: e.literal("COUNTRY"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), vt = i.extend({
+}), wt = a.extend({
   type: e.literal("URL"),
   config: e.object({
     placeholder: e.string().optional(),
     default_value: e.string().optional()
   }).optional()
-}), Dt = e.discriminatedUnion("type", [
-  at,
+}), kt = e.discriminatedUnion("type", [
   st,
   rt,
   lt,
   ct,
   pt,
+  _t,
   dt,
-  _t
-]), Lt = e.discriminatedUnion("type", [
-  gt,
+  gt
+]), jt = e.discriminatedUnion("type", [
   ut,
-  mt
-]), xt = e.discriminatedUnion("type", [
+  mt,
+  Et
+]), Mt = e.discriminatedUnion("type", [
+  St,
   ht,
   bt,
-  ft,
-  Rt,
-  St,
-  Et,
-  yt,
+  Ut,
   At,
-  It,
+  ft,
   Ct,
-  Tt,
+  It,
   Ot,
-  wt,
+  Tt,
   Nt,
-  jt,
-  kt,
-  vt
-]), M = e.union([
-  Dt,
+  yt,
+  Rt,
   Lt,
-  xt
-]), wn = /* @__PURE__ */ new Set([
+  Dt,
+  Ft,
+  wt
+]), H = e.union([
+  kt,
+  jt,
+  Mt
+]), Ln = /* @__PURE__ */ new Set([
   "BOOLEAN",
   "CARDS",
   "CHOICE",
@@ -1439,7 +1439,7 @@ const tt = e.object({
   "TEL",
   "TEXT",
   "URL"
-]), Nn = e.object({
+]), Dn = e.object({
   id: e.string(),
   type: e.literal("submit"),
   label: e.string(),
@@ -1448,22 +1448,22 @@ const tt = e.object({
   order: e.number().optional(),
   visible: e.boolean().optional().default(!0),
   customizations: e.record(e.string(), e.any()).optional()
-}), S = e.object({
+}), A = e.object({
   x: e.number(),
   y: e.number()
-}), Ut = e.object({
+}), Pt = e.object({
   id: e.string(),
   type: e.literal("FLOW"),
-  coordinates: S,
+  coordinates: A,
   alias: e.string().min(1).max(150).optional(),
   config: e.object({
     flow_id: e.string().max(30),
     next_node: e.string().optional()
   })
-}), Ft = e.object({
+}), vt = e.object({
   id: e.string(),
   type: e.literal("ROUTER"),
-  coordinates: S,
+  coordinates: A,
   alias: e.string().min(1).max(150),
   config: e.object({
     rules: e.array(
@@ -1476,20 +1476,20 @@ const tt = e.object({
     ),
     fallback: e.string()
   })
-}), Pt = e.object({
+}), xt = e.object({
   id: e.string(),
   type: e.literal("STEP"),
-  coordinates: S,
+  coordinates: A,
   alias: e.string().min(1).max(150).optional(),
   config: e.object({
-    components: e.array(M),
+    components: e.array(H),
     next_node: e.string().optional()
   })
-}), Mt = e.discriminatedUnion("type", [
-  Ut,
-  Ft,
-  Pt
-]), Ht = e.object({
+}), Ht = e.discriminatedUnion("type", [
+  Pt,
+  vt,
+  xt
+]), Gt = e.object({
   name: e.string().openapi({
     description: "The name of the form"
   }),
@@ -1502,11 +1502,11 @@ const tt = e.object({
     default: e.string().optional()
   }).optional(),
   translations: e.record(e.string(), e.any()).optional(),
-  nodes: e.array(Mt).optional(),
+  nodes: e.array(Ht).optional(),
   start: e.object({
     hidden_fields: e.array(e.object({ key: e.string(), value: e.string() })).optional(),
     next_node: e.string().optional(),
-    coordinates: S.optional()
+    coordinates: A.optional()
   }).optional(),
   ending: e.object({
     redirection: e.object({
@@ -1514,7 +1514,7 @@ const tt = e.object({
       target: e.string().optional()
     }).optional(),
     after_submit: e.object({ flow_id: e.string().optional() }).optional(),
-    coordinates: S.optional(),
+    coordinates: A.optional(),
     resume_flow: e.boolean().optional()
   }).optional(),
   style: e.object({ css: e.string().optional() }).optional(),
@@ -1524,11 +1524,11 @@ const tt = e.object({
   }).optional()
 }).openapi({
   description: "Schema for flow-based forms (matches Auth0 Forms structure)"
-}), jn = e.object({
-  ...a.shape,
-  ...Ht.shape,
+}), Fn = e.object({
+  ...s.shape,
+  ...Gt.shape,
   id: e.string()
-}), Gt = e.object({
+}), Wt = e.object({
   id: e.number().optional(),
   text: e.string(),
   type: e.enum(["info", "error", "success", "warning"])
@@ -1537,29 +1537,29 @@ const tt = e.object({
   text: e.string(),
   href: e.string(),
   linkText: e.string().optional()
-}), kn = e.object({
+}), Un = e.object({
   /** Screen identifier for CSS targeting (e.g., 'identifier', 'enter-password', 'signup') */
   name: e.string().optional(),
   action: e.string(),
   method: e.enum(["POST", "GET"]),
   title: e.string().optional(),
   description: e.string().optional(),
-  components: e.array(M),
-  messages: e.array(Gt).optional(),
+  components: e.array(H),
+  messages: e.array(Wt).optional(),
   links: e.array(Bt).optional(),
   /** Footer HTML content displayed at the very bottom of the widget (e.g., terms and conditions) */
   footer: e.string().optional()
 });
-function Rn(t) {
-  return t.category === "BLOCK";
+function wn(o) {
+  return o.category === "BLOCK";
 }
-function vn(t) {
-  return t.category === "WIDGET";
+function kn(o) {
+  return o.category === "WIDGET";
 }
-function Dn(t) {
-  return t.category === "FIELD";
+function jn(o) {
+  return o.category === "FIELD";
 }
-const H = e.enum([
+const G = e.enum([
   "pre-user-registration",
   "post-user-registration",
   "post-user-login",
@@ -1568,7 +1568,7 @@ const H = e.enum([
   "pre-user-deletion",
   "post-user-deletion"
   // Potentially other triggers specific to webhooks in the future
-]), G = e.enum([
+]), W = e.enum([
   "pre-user-registration",
   "post-user-registration",
   "post-user-login",
@@ -1580,16 +1580,16 @@ const H = e.enum([
   "post-user-registration",
   "post-user-update",
   "credentials-exchange"
-]), W = e.enum([
+]), K = e.enum([
   "post-user-login",
   "credentials-exchange",
   "pre-user-registration",
   "post-user-registration"
-]), K = e.enum([
+]), V = e.enum([
   "ensure-username",
   "set-preferred-username",
   "account-linking"
-]), Ln = {
+]), Mn = {
   "ensure-username": {
     name: "Ensure Username",
     description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1609,7 +1609,7 @@ const H = e.enum([
       "post-user-update"
     ]
   }
-}, c = {
+}, p = {
   enabled: e.boolean().default(!1),
   synchronous: e.boolean().default(!1),
   priority: e.number().optional(),
@@ -1626,71 +1626,72 @@ const H = e.enum([
    * Everything else is opaque to the runtime. Persisted as JSON.
    */
   metadata: e.record(e.unknown()).optional()
-}, Wt = e.object({
-  ...c,
-  trigger_id: H,
-  url: e.string()
-}), Kt = e.object({
-  ...c,
+}, Kt = e.object({
+  ...p,
   trigger_id: G,
+  url: e.string()
+}), Vt = e.object({
+  ...p,
+  trigger_id: W,
   form_id: e.string()
-}), zt = e.object({
-  ...c,
+}), Xt = e.object({
+  ...p,
   trigger_id: B,
-  template_id: K
+  template_id: V
 }), qt = e.object({
-  ...c,
-  trigger_id: W,
+  ...p,
+  trigger_id: K,
   code_id: e.string()
-}), xn = e.union([
-  Wt,
+}), Pn = e.union([
   Kt,
-  zt,
+  Vt,
+  Xt,
   qt
-]), Xt = e.object({
-  ...c,
-  trigger_id: H,
-  ...a.shape,
+]), zt = e.object({
+  ...p,
+  trigger_id: G,
+  ...s.shape,
   hook_id: e.string(),
   url: e.string()
-}), Vt = e.object({
-  ...c,
-  trigger_id: G,
-  ...a.shape,
+}), Yt = e.object({
+  ...p,
+  trigger_id: W,
+  ...s.shape,
   hook_id: e.string(),
   form_id: e.string()
-}), Yt = e.object({
-  ...c,
+}), Qt = e.object({
+  ...p,
   trigger_id: B,
-  ...a.shape,
+  ...s.shape,
   hook_id: e.string(),
-  template_id: K
+  template_id: V
 }), Zt = e.object({
-  ...c,
-  trigger_id: W,
-  ...a.shape,
+  ...p,
+  trigger_id: K,
+  ...s.shape,
   hook_id: e.string(),
   code_id: e.string()
-}), Un = e.union([
-  Xt,
-  Vt,
+}), vn = e.union([
+  zt,
   Yt,
+  Qt,
   Zt
-]), Qt = e.object({
+]), Jt = e.object({
   code: e.string().max(1e5),
   secrets: e.record(e.string()).optional()
-}), Fn = Qt.extend({
+}), xn = Jt.extend({
   id: e.string(),
   tenant_id: e.string(),
-  ...a.shape
+  ...s.shape
 }), $t = e.object({
   name: e.string().optional()
-}), Jt = e.object({
-  email: e.string().optional()
 }), eo = e.object({
+  email: e.string().optional()
+}), to = e.object({
+  id: e.string().optional(),
   organization_id: e.string().max(50),
   inviter: $t,
-  invitee: Jt,
+  invitee: eo,
   invitation_url: e.string().url(),
   client_id: e.string(),
   connection_id: e.string().optional(),
@@ -1699,13 +1700,13 @@ const H = e.enum([
   ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
   roles: e.array(e.string()).default([]).optional(),
   send_invitation_email: e.boolean().default(!0).optional()
-}), Pn = e.object({
+}), Hn = e.object({
   id: e.string(),
   organization_id: e.string().max(50),
   created_at: e.string().datetime(),
   expires_at: e.string().datetime(),
   ticket_id: e.string().optional()
-}).extend(eo.shape), to = e.object({
+}).extend(to.omit({ id: !0 }).shape), oo = e.object({
   alg: e.enum([
     "RS256",
     "RS384",
@@ -1729,24 +1730,24 @@ const H = e.enum([
   y: e.string().optional(),
   x5t: e.string().optional(),
   x5c: e.array(e.string()).optional()
-}).superRefine((t, o) => {
-  if (t.kty === "RSA")
-    for (const n of ["n", "e"])
-      t[n] || o.addIssue({
+}).superRefine((o, n) => {
+  if (o.kty === "RSA")
+    for (const i of ["n", "e"])
+      o[i] || n.addIssue({
         code: e.ZodIssueCode.custom,
-        path: [n],
-        message: `RSA JWK is missing required member '${n}'`
+        path: [i],
+        message: `RSA JWK is missing required member '${i}'`
       });
-  else if (t.kty === "EC")
-    for (const n of ["crv", "x", "y"])
-      t[n] || o.addIssue({
+  else if (o.kty === "EC")
+    for (const i of ["crv", "x", "y"])
+      o[i] || n.addIssue({
         code: e.ZodIssueCode.custom,
-        path: [n],
-        message: `EC JWK is missing required member '${n}'`
+        path: [i],
+        message: `EC JWK is missing required member '${i}'`
       });
-}), Mn = e.object({
-  keys: e.array(to)
-}), Hn = e.object({
+}), Gn = e.object({
+  keys: e.array(oo)
+}), Wn = e.object({
   issuer: e.string(),
   authorization_endpoint: e.string(),
   token_endpoint: e.string(),
@@ -1770,21 +1771,21 @@ const H = e.enum([
   request_object_signing_alg_values_supported: e.array(e.string()).optional(),
   token_endpoint_auth_signing_alg_values_supported: e.array(e.string())
 });
-var z = /* @__PURE__ */ ((t) => (t.PENDING = "pending", t.AUTHENTICATED = "authenticated", t.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", t.AWAITING_MFA = "awaiting_mfa", t.AWAITING_HOOK = "awaiting_hook", t.AWAITING_CONTINUATION = "awaiting_continuation", t.COMPLETED = "completed", t.FAILED = "failed", t.EXPIRED = "expired", t))(z || {});
-const oo = e.nativeEnum(z), no = e.object({
+var X = /* @__PURE__ */ ((o) => (o.PENDING = "pending", o.AUTHENTICATED = "authenticated", o.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", o.AWAITING_MFA = "awaiting_mfa", o.AWAITING_HOOK = "awaiting_hook", o.AWAITING_CONTINUATION = "awaiting_continuation", o.COMPLETED = "completed", o.FAILED = "failed", o.EXPIRED = "expired", o))(X || {});
+const no = e.nativeEnum(X), io = e.object({
   strategy: e.string(),
   strategy_type: e.string()
-}), io = e.object({
+}), ao = e.object({
   csrf_token: e.string(),
   auth0Client: e.string().optional(),
-  authParams: Qe,
+  authParams: Je,
   expires_at: e.string(),
   deleted_at: e.string().optional(),
   ip: e.string().optional(),
   useragent: e.string().optional(),
   session_id: e.string().optional(),
   authorization_url: e.string().optional(),
-  state: oo.optional().default(
+  state: no.optional().default(
     "pending"
     /* PENDING */
   ),
@@ -1795,19 +1796,19 @@ const oo = e.nativeEnum(z), no = e.object({
   // Set once user is authenticated
   auth_connection: e.string().optional(),
   // The connection used to authenticate (may differ from primary user's connection)
-  auth_strategy: no.optional(),
+  auth_strategy: io.optional(),
   authenticated_at: e.string().optional()
   // ISO timestamp persisted for audit/metadata; not used to reject resumed sessions
 }).openapi({
   description: "This represents a login sesion"
-}), Gn = e.object({
-  ...io.shape,
+}), Bn = e.object({
+  ...ao.shape,
   id: e.string().openapi({
     description: "This is is used as the state in the universal login"
   }),
   created_at: e.string(),
   updated_at: e.string()
-}), ao = {
+}), t = {
   // Network & System
   ACLS_SUMMARY: "acls_summary",
   ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
@@ -1911,6 +1912,8 @@ const oo = e.nativeEnum(z), no = e.object({
   BLOCKED_IP_ADDRESS: "limit_mu",
   BLOCKED_ACCOUNT_IP: "limit_sul",
   BLOCKED_ACCOUNT_EMAIL: "limit_wc",
+  // Generic information
+  INFORMATION: "i",
   // MFA & My Account
   MFA_REQUIRED: "mfar",
   MANAGEMENT_API_READ_OPERATION: "mgmt_api_read",
@@ -1950,6 +1953,7 @@ const oo = e.nativeEnum(z), no = e.object({
   SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN: "sens",
   SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN: "seoobft",
   SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN: "seotpft",
+  SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN: "sepotpft",
   SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN: "sepft",
   SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN: "sepkoobft",
   SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN: "sepkotpft",
@@ -1984,22 +1988,192 @@ const oo = e.nativeEnum(z), no = e.object({
   WARNING_SENDING_NOTIFICATION: "wn",
   WARNING_USER_MANAGEMENT: "wum"
 }, so = e.string().refine(
-  (t) => Object.values(ao).includes(t),
+  (o) => Object.values(t).includes(o),
   { message: "Invalid log type" }
-), ro = e.object({
+), ro = {
+  [t.ACLS_SUMMARY]: "ACLs Summary",
+  [t.ACTIONS_EXECUTION_FAILED]: "Actions Execution Failed",
+  [t.API_LIMIT]: "API Rate Limit Reached",
+  [t.API_LIMIT_WARNING]: "API Rate Limit Warning",
+  [t.APPI]: "API Operation",
+  [t.CIBA_EXCHANGE_FAILED]: "CIBA Exchange Failed",
+  [t.CIBA_EXCHANGE_SUCCEEDED]: "CIBA Exchange Succeeded",
+  [t.CIBA_START_FAILED]: "CIBA Start Failed",
+  [t.CIBA_START_SUCCEEDED]: "CIBA Start Succeeded",
+  [t.CODE_LINK_SENT]: "Code/Link Sent",
+  [t.CODE_SENT]: "Code Sent",
+  [t.DEPRECATION_NOTICE]: "Deprecation Notice",
+  [t.FAILED_LOGIN]: "Failed Login",
+  [t.FAILED_BY_CONNECTOR]: "Failed by Connector",
+  [t.FAILED_CHANGE_EMAIL]: "Failed Change Email",
+  [t.FAILED_BY_CORS]: "Failed by CORS",
+  [t.FAILED_CROSS_ORIGIN_AUTHENTICATION]: "Failed Cross Origin Authentication",
+  [t.FAILED_CHANGE_PASSWORD]: "Failed Change Password",
+  [t.FAILED_POST_CHANGE_PASSWORD_HOOK]: "Failed Post-Change Password Hook",
+  [t.FAILED_CHANGE_PHONE_NUMBER]: "Failed Change Phone Number",
+  [t.FAILED_CHANGE_PASSWORD_REQUEST]: "Failed Change Password Request",
+  [t.FAILED_CONNECTOR_PROVISIONING]: "Failed Connector Provisioning",
+  [t.FAILED_CHANGE_USERNAME]: "Failed Change Username",
+  [t.FAILED_DELEGATION]: "Failed Delegation",
+  [t.FAILED_DEVICE_ACTIVATION]: "Failed Device Activation",
+  [t.FAILED_DEVICE_AUTHORIZATION_REQUEST]: "Failed Device Authorization Request",
+  [t.USER_CANCELED_DEVICE_CONFIRMATION]: "User Canceled Device Confirmation",
+  [t.FAILED_USER_DELETION]: "Failed User Deletion",
+  [t.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Authorization Code for Access Token",
+  [t.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Failed Exchange Access Token for Client Credentials",
+  [t.FAILED_EXCHANGE_CUSTOM_TOKEN]: "Failed Exchange Custom Token",
+  [t.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Device Code for Access Token",
+  [t.FAILED_FEDERATED_LOGOUT]: "Failed Federated Logout",
+  [t.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Failed Exchange Native Social Login",
+  [t.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Failed Exchange Password OOB for Access Token",
+  [t.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Password OTP for Access Token",
+  [t.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Failed Exchange Password for Access Token",
+  [t.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Passwordless OTP for Access Token",
+  [t.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Failed Exchange Password MFA Recovery for Access Token",
+  [t.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN]: "Failed Exchange Rotating Refresh Token",
+  [t.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Refresh Token for Access Token",
+  [t.FAILED_HOOK]: "Failed Hook",
+  [t.FAILED_IMPERSONATION]: "Failed Impersonation",
+  [t.FAILED_INVITE_ACCEPT]: "Failed Invite Accept",
+  [t.FAILED_LOGOUT]: "Failed Logout",
+  [t.FLOWS_EXECUTION_COMPLETED]: "Flows Execution Completed",
+  [t.FLOWS_EXECUTION_FAILED]: "Flows Execution Failed",
+  [t.FAILED_SENDING_NOTIFICATION]: "Failed Sending Notification",
+  [t.FORMS_SUBMISSION_FAILED]: "Forms Submission Failed",
+  [t.FORMS_SUBMISSION_SUCCEEDED]: "Forms Submission Succeeded",
+  [t.FAILED_LOGIN_INCORRECT_PASSWORD]: "Failed Login - Incorrect Password",
+  [t.FAILED_PUSHED_AUTHORIZATION_REQUEST]: "Failed Pushed Authorization Request",
+  [t.FAILED_POST_USER_REGISTRATION_HOOK]: "Failed Post-User Registration Hook",
+  [t.FAILED_SIGNUP]: "Failed Signup",
+  [t.FAILED_SILENT_AUTH]: "Failed Silent Auth",
+  [t.FAILED_LOGIN_INVALID_EMAIL_USERNAME]: "Failed Login - Invalid Email/Username",
+  [t.FAILED_USERS_IMPORT]: "Failed Users Import",
+  [t.FAILED_VERIFICATION_EMAIL]: "Failed Verification Email",
+  [t.FAILED_VERIFICATION_EMAIL_REQUEST]: "Failed Verification Email Request",
+  [t.EMAIL_VERIFICATION_CONFIRMED]: "Email Verification Confirmed",
+  [t.EMAIL_VERIFICATION_FAILED]: "Email Verification Failed",
+  [t.MFA_AUTH_FAILED]: "MFA Auth Failed",
+  [t.MFA_AUTH_REJECTED]: "MFA Auth Rejected",
+  [t.MFA_AUTH_SUCCESS]: "MFA Auth Success",
+  [t.MFA_ENROLLMENT_COMPLETE]: "MFA Enrollment Complete",
+  [t.TOO_MANY_MFA_FAILURES]: "Too Many MFA Failures",
+  [t.MFA_RECOVERY_FAILED]: "MFA Recovery Failed",
+  [t.MFA_RECOVERY_RATE_LIMIT_EXCEED]: "MFA Recovery Rate Limit Exceeded",
+  [t.MFA_RECOVERY_SUCCESS]: "MFA Recovery Success",
+  [t.MFA_EMAIL_SENT]: "MFA Email Sent",
+  [t.EMAIL_VERIFICATION_SENT]: "Email Verification Sent",
+  [t.EMAIL_VERIFICATION_SEND_FAILURE]: "Email Verification Send Failure",
+  [t.PUSH_NOTIFICATION_SENT]: "Push Notification Sent",
+  [t.ERROR_SENDING_MFA_PUSH_NOTIFICATION]: "Error Sending MFA Push Notification",
+  [t.MFA_SMS_SENT]: "MFA SMS Sent",
+  [t.ERROR_SENDING_MFA_SMS]: "Error Sending MFA SMS",
+  [t.MFA_VOICE_CALL_SUCCESS]: "MFA Voice Call Success",
+  [t.MFA_VOICE_CALL_FAILED]: "MFA Voice Call Failed",
+  [t.SECOND_FACTOR_STARTED]: "Second Factor Started",
+  [t.MFA_ENROLL_STARTED]: "MFA Enroll Started",
+  [t.MFA_ENROLLMENT_FAILED]: "MFA Enrollment Failed",
+  [t.GUARDIAN_TENANT_UPDATE]: "Guardian Tenant Update",
+  [t.UNENROLL_DEVICE_ACCOUNT]: "Unenroll Device Account",
+  [t.UPDATE_DEVICE_ACCOUNT]: "Update Device Account",
+  [t.WEBAUTHN_CHALLENGE_FAILED]: "WebAuthn Challenge Failed",
+  [t.WEBAUTHN_ENROLLMENT_FAILED]: "WebAuthn Enrollment Failed",
+  [t.FAILED_KMS_API_OPERATION]: "Failed KMS API Operation",
+  [t.SUCCESS_KMS_API_OPERATION]: "Success KMS API Operation",
+  [t.KMS_KEY_STATE_CHANGED]: "KMS Key State Changed",
+  [t.TOO_MANY_CALLS_TO_DELEGATION]: "Too Many Calls to Delegation",
+  [t.BLOCKED_IP_ADDRESS]: "Blocked IP Address",
+  [t.BLOCKED_ACCOUNT_IP]: "Blocked Account (IP)",
+  [t.BLOCKED_ACCOUNT_EMAIL]: "Blocked Account (Email)",
+  [t.INFORMATION]: "Information",
+  [t.MFA_REQUIRED]: "MFA Required",
+  [t.MANAGEMENT_API_READ_OPERATION]: "Management API Read Operation",
+  [t.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Failed Authentication Method Operation (My Account)",
+  [t.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Successful Authentication Method Operation (My Account)",
+  [t.FAILED_OIDC_BACKCHANNEL_LOGOUT]: "Failed OIDC Backchannel Logout",
+  [t.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT]: "Successful OIDC Backchannel Logout",
+  [t.ORGANIZATION_MEMBER_ADDED]: "Organization Member Added",
+  [t.PASSKEY_CHALLENGE_FAILED]: "Passkey Challenge Failed",
+  [t.PASSKEY_CHALLENGE_STARTED]: "Passkey Challenge Started",
+  [t.PRE_LOGIN_ASSESSMENT]: "Pre-Login Assessment",
+  [t.BREACHED_PASSWORD]: "Breached Password",
+  [t.BREACHED_PASSWORD_ON_RESET]: "Breached Password on Reset",
+  [t.SUCCESS_RESOURCE_CLEANUP]: "Success Resource Cleanup",
+  [t.RICH_CONSENTS_ACCESS_ERROR]: "Rich Consents Access Error",
+  [t.SUCCESS_LOGIN]: "Success Login",
+  [t.SUCCESS_API_OPERATION]: "Success API Operation",
+  [t.FAILED_API_OPERATION]: "Failed API Operation",
+  [t.SUCCESS_CHANGE_EMAIL]: "Success Change Email",
+  [t.SUCCESS_CROSS_ORIGIN_AUTHENTICATION]: "Success Cross Origin Authentication",
+  [t.SUCCESS_CHANGE_PASSWORD]: "Success Change Password",
+  [t.SUCCESS_CHANGE_PHONE_NUMBER]: "Success Change Phone Number",
+  [t.SUCCESS_CHANGE_PASSWORD_REQUEST]: "Success Change Password Request",
+  [t.SUCCESS_CHANGE_USERNAME]: "Success Change Username",
+  [t.SUCCESS_CREDENTIAL_VALIDATION]: "Success Credential Validation",
+  [t.SUCCESS_DELEGATION]: "Success Delegation",
+  [t.SUCCESS_USER_DELETION]: "Success User Deletion",
+  [t.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Authorization Code for Access Token",
+  [t.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Success Exchange Access Token for Client Credentials",
+  [t.SUCCESS_EXCHANGE_CUSTOM_TOKEN]: "Success Exchange Custom Token",
+  [t.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Device Code for Access Token",
+  [t.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Success Exchange Native Social Login",
+  [t.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Password OOB for Access Token",
+  [t.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Password OTP for Access Token",
+  [t.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passwordless OTP for Access Token",
+  [t.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Success Exchange Password for Access Token",
+  [t.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OOB for Access Token",
+  [t.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OTP for Access Token",
+  [t.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Passkey MFA Recovery for Access Token",
+  [t.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Password MFA Recovery for Access Token",
+  [t.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Refresh Token for Access Token",
+  [t.SUCCESS_IMPERSONATION]: "Success Impersonation",
+  [t.SUCCESSFULLY_ACCEPTED_USER_INVITE]: "Successfully Accepted User Invite",
+  [t.BREACHED_PASSWORD_ON_SIGNUP]: "Breached Password on Signup",
+  [t.SUCCESS_LOGOUT]: "Success Logout",
+  [t.SUCCESS_HOOK]: "Success Hook",
+  [t.SUCCESS_PASSWORD_MIGRATION]: "Success Password Migration",
+  [t.SUCCESS_REVOCATION]: "Success Revocation",
+  [t.SUCCESS_SIGNUP]: "Success Signup",
+  [t.FAILED_SS_SSO_OPERATION]: "Failed SS SSO Operation",
+  [t.INFORMATION_FROM_SS_SSO_OPERATION]: "Information from SS SSO Operation",
+  [t.SUCCESS_SS_SSO_OPERATION]: "Success SS SSO Operation",
+  [t.SUCCESS_SILENT_AUTH]: "Success Silent Auth",
+  [t.SUCCESSFUL_SCIM_OPERATION]: "Successful SCIM Operation",
+  [t.SUCCESSFULLY_IMPORTED_USERS]: "Successfully Imported Users",
+  [t.SUCCESS_VERIFICATION_EMAIL]: "Success Verification Email",
+  [t.SUCCESS_VERIFICATION_EMAIL_REQUEST]: "Success Verification Email Request",
+  [t.MAX_AMOUNT_OF_AUTHENTICATORS]: "Max Amount of Authenticators",
+  [t.USER_LOGIN_BLOCK_RELEASED]: "User Login Block Released",
+  [t.FAILED_UNIVERSAL_LOGOUT]: "Failed Universal Logout",
+  [t.SUCCESSFUL_UNIVERSAL_LOGOUT]: "Successful Universal Logout",
+  [t.WARNING_DURING_LOGIN]: "Warning During Login",
+  [t.WARNING_SENDING_NOTIFICATION]: "Warning Sending Notification",
+  [t.WARNING_USER_MANAGEMENT]: "Warning User Management"
+}, lo = (() => {
+  const o = {};
+  for (const [n, i] of Object.entries(t))
+    n.startsWith("SUCCESS_") || n.startsWith("SUCCESSFUL_") || n.startsWith("SUCCESSFULLY_") || n.endsWith("_SUCCEEDED") || n.endsWith("_COMPLETED") ? o[i] = "success" : n.startsWith("FAILED_") || n.startsWith("ERROR_") || n.startsWith("BREACHED_") || n.startsWith("BLOCKED_") || n === "MFA_AUTH_FAILED" || n === "MFA_AUTH_REJECTED" || n === "MFA_RECOVERY_FAILED" || n === "MFA_ENROLLMENT_FAILED" || n === "EMAIL_VERIFICATION_FAILED" || n === "WEBAUTHN_CHALLENGE_FAILED" || n === "WEBAUTHN_ENROLLMENT_FAILED" || n === "PASSKEY_CHALLENGE_FAILED" || n === "FLOWS_EXECUTION_FAILED" || n === "FORMS_SUBMISSION_FAILED" || n === "CIBA_EXCHANGE_FAILED" || n === "CIBA_START_FAILED" || n === "ACTIONS_EXECUTION_FAILED" || n === "RICH_CONSENTS_ACCESS_ERROR" || n === "USER_CANCELED_DEVICE_CONFIRMATION" || n === "TOO_MANY_MFA_FAILURES" || n === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || n === "API_LIMIT" || n === "MAX_AMOUNT_OF_AUTHENTICATORS" ? o[i] = "failure" : n.startsWith("WARNING_") || n === "API_LIMIT_WARNING" || n === "DEPRECATION_NOTICE" || n === "PRE_LOGIN_ASSESSMENT" ? o[i] = "warning" : n === "CODE_SENT" || n === "CODE_LINK_SENT" || n === "MFA_EMAIL_SENT" || n === "MFA_SMS_SENT" || n === "EMAIL_VERIFICATION_SENT" || n === "PUSH_NOTIFICATION_SENT" ? o[i] = "code_sent" : n === "INFORMATION" || n === "INFORMATION_FROM_SS_SSO_OPERATION" || n === "MANAGEMENT_API_READ_OPERATION" || n === "APPI" || n === "ACLS_SUMMARY" || n === "ORGANIZATION_MEMBER_ADDED" ? o[i] = "info" : o[i] = "other";
+  return o;
+})();
+function Kn(o) {
+  return ro[o] ?? o;
+}
+function Vn(o) {
+  return lo[o] ?? "other";
+}
+const co = e.object({
   name: e.string(),
   version: e.string(),
   env: e.object({
     node: e.string().optional()
   }).optional()
-}), lo = e.object({
+}), po = e.object({
   country_code: e.string().length(2),
   city_name: e.string(),
   latitude: e.string(),
   longitude: e.string(),
   time_zone: e.string(),
   continent_code: e.string()
-}), co = e.object({
+}), _o = e.object({
   type: so,
   date: e.string(),
   description: e.string().optional(),
@@ -2019,40 +2193,40 @@ const oo = e.nativeEnum(z), no = e.object({
   strategy: e.string().optional(),
   strategy_type: e.string().optional(),
   hostname: e.string().optional(),
-  auth0_client: ro.optional(),
+  auth0_client: co.optional(),
   log_id: e.string().optional(),
-  location_info: lo.optional()
-}), Bn = e.object({
-  ...co.shape,
+  location_info: po.optional()
+}), Xn = e.object({
+  ..._o.shape,
   log_id: e.string()
-}), po = e.enum([
+}), go = e.enum([
   "http",
   "eventbridge",
   "eventgrid",
   "splunk",
   "datadog",
   "sumo"
-]), q = e.enum(["active", "paused", "suspended"]), _o = e.object({
+]), q = e.enum(["active", "paused", "suspended"]), uo = e.object({
   type: e.string(),
   name: e.string()
-}), go = e.object({
+}), mo = e.object({
   name: e.string(),
-  type: po,
+  type: go,
   status: q.optional(),
   sink: e.record(e.string(), e.unknown()),
-  filters: e.array(_o).optional(),
+  filters: e.array(uo).optional(),
   isPriority: e.boolean().optional()
-}), Wn = go.extend({
+}), qn = mo.extend({
   id: e.string(),
   status: q,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), uo = e.enum([
+}), Eo = e.enum([
   "auth0",
   "cognito",
   "okta",
   "oidc"
-]), mo = e.object({
+]), So = e.object({
   domain: e.string(),
   client_id: e.string(),
   client_secret: e.string(),
@@ -2061,11 +2235,11 @@ const oo = e.nativeEnum(z), no = e.object({
 }), ho = e.object({
   id: e.string().optional(),
   name: e.string(),
-  provider: uo,
+  provider: Eo,
   connection: e.string(),
   enabled: e.boolean().default(!0),
-  credentials: mo
-}), Kn = e.object({
+  credentials: So
+}), zn = e.object({
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
@@ -2082,13 +2256,13 @@ const oo = e.nativeEnum(z), no = e.object({
       shields: e.array(e.string()).optional()
     }).optional()
   }).optional()
-}), fo = e.object({
+}), Ao = e.object({
   enabled: e.boolean().optional(),
   shields: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional(),
   mode: e.string().optional(),
   max_attempts: e.number().optional()
-}), So = e.object({
+}), fo = e.object({
   enabled: e.boolean().optional(),
   shields: e.array(e.string()).optional(),
   allowlist: e.array(e.string()).optional(),
@@ -2102,28 +2276,28 @@ const oo = e.nativeEnum(z), no = e.object({
       rate: e.number().optional()
     }).optional()
   }).optional()
-}), Eo = e.object({
+}), Co = e.object({
   breached_password_detection: bo.optional(),
-  brute_force_protection: fo.optional(),
-  suspicious_ip_throttling: So.optional()
-}), yo = e.object({
+  brute_force_protection: Ao.optional(),
+  suspicious_ip_throttling: fo.optional()
+}), Io = e.object({
   id: e.string().optional(),
   user_id: e.string(),
   password: e.string(),
   algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
   is_current: e.boolean().default(!0)
-}), zn = yo.extend({
+}), Yn = Io.extend({
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
-}), X = e.object({
+}), z = e.object({
   initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
   initial_ip: e.string().describe("First IP address associated with this session"),
   initial_asn: e.string().describe("First autonomous system number associated with this session"),
   last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
   last_ip: e.string().describe("Last IP address from which this user logged in"),
   last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), Ao = e.object({
+}), Oo = e.object({
   id: e.string(),
   revoked_at: e.string().optional(),
   used_at: e.string().optional(),
@@ -2131,17 +2305,17 @@ const oo = e.nativeEnum(z), no = e.object({
   expires_at: e.string().optional(),
   login_session_id: e.string(),
   idle_expires_at: e.string().optional(),
-  device: X.describe(
+  device: z.describe(
     "Metadata related to the device used in the session"
   ),
   clients: e.array(e.string()).describe("List of client details for the session")
-}), qn = e.object({
+}), Qn = e.object({
   created_at: e.string(),
   updated_at: e.string(),
   authenticated_at: e.string(),
   last_interaction_at: e.string(),
-  ...Ao.shape
-}), Xn = e.object({
+  ...Oo.shape
+}), Zn = e.object({
   kid: e.string().openapi({ description: "The key id of the signing key" }),
   tenant_id: e.string().optional().openapi({
     description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped."
@@ -2169,7 +2343,7 @@ const oo = e.nativeEnum(z), no = e.object({
   type: e.enum(["jwt_signing", "saml_encryption"]).openapi({
     description: "The type of the signing key"
   })
-}), Io = e.object({
+}), To = e.object({
   id: e.string().optional(),
   // Basic settings
   audience: e.string(),
@@ -2235,10 +2409,10 @@ const oo = e.nativeEnum(z), no = e.object({
     // `/connect/start` despite not being loopback. Off by default.
     allow_http_return_to: e.array(
       e.string().refine(
-        (t) => {
+        (o) => {
           try {
-            const o = new URL(t);
-            return o.protocol === "http:" && (o.pathname === "" || o.pathname === "/") && !o.search && !o.hash && t === o.origin;
+            const n = new URL(o);
+            return n.protocol === "http:" && (n.pathname === "" || n.pathname === "/") && !n.search && !n.hash && o === n.origin;
           } catch {
             return !1;
           }
@@ -2322,7 +2496,7 @@ const oo = e.nativeEnum(z), no = e.object({
   pushed_authorization_requests_supported: e.boolean().optional(),
   authorization_response_iss_parameter_supported: e.boolean().optional(),
   // Attack-protection config (singleton, exposed via /api/v2/attack-protection)
-  attack_protection: Eo.optional(),
+  attack_protection: Co.optional(),
   // Guardian MFA Factors configuration (internal storage, exposed via /guardian API)
   mfa: e.object({
     // MFA policy: "never" = MFA disabled, "always" = MFA required for all logins
@@ -2354,10 +2528,10 @@ const oo = e.nativeEnum(z), no = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), Vn = e.object({
-  created_at: e.string().nullable().transform((t) => t ?? ""),
-  updated_at: e.string().nullable().transform((t) => t ?? ""),
-  ...Io.shape,
+}), Jn = e.object({
+  created_at: e.string().nullable().transform((o) => o ?? ""),
+  updated_at: e.string().nullable().transform((o) => o ?? ""),
+  ...To.shape,
   id: e.string(),
   // Computed server-side: true when this tenant is the deployment's control
   // plane (either `multiTenancyConfig.controlPlaneTenantId` matches the
@@ -2365,8 +2539,8 @@ const oo = e.nativeEnum(z), no = e.object({
   // deployment). Not persisted; ignored on writes.
   is_control_plane: e.boolean().optional()
 });
-var Co = /* @__PURE__ */ ((t) => (t.RefreshToken = "refresh_token", t.AuthorizationCode = "authorization_code", t.ClientCredential = "client_credentials", t.Passwordless = "passwordless", t.Password = "password", t.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", t))(Co || {});
-const Yn = e.object({
+var No = /* @__PURE__ */ ((o) => (o.RefreshToken = "refresh_token", o.AuthorizationCode = "authorization_code", o.ClientCredential = "client_credentials", o.Passwordless = "passwordless", o.Password = "password", o.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", o))(No || {});
+const $n = e.object({
   access_token: e.string(),
   id_token: e.string().optional(),
   scope: e.string().optional(),
@@ -2379,7 +2553,7 @@ e.object({
   code: e.string(),
   state: e.string().optional()
 });
-const To = e.object({
+const yo = e.object({
   button_border_radius: e.number(),
   button_border_weight: e.number(),
   buttons_style: e.enum(["pill", "rounded", "sharp"]),
@@ -2389,7 +2563,7 @@ const To = e.object({
   show_widget_shadow: e.boolean(),
   widget_border_weight: e.number(),
   widget_corner_radius: e.number()
-}), Oo = e.object({
+}), Ro = e.object({
   base_focus_color: e.string(),
   base_hover_color: e.string(),
   body_text: e.string(),
@@ -2409,20 +2583,20 @@ const To = e.object({
   success: e.string(),
   widget_background: e.string(),
   widget_border: e.string()
-}), u = e.object({
+}), m = e.object({
   bold: e.boolean(),
   size: e.number()
-}), wo = e.object({
-  body_text: u,
-  buttons_text: u,
+}), Lo = e.object({
+  body_text: m,
+  buttons_text: m,
   font_url: e.string(),
-  input_labels: u,
-  links: u,
+  input_labels: m,
+  links: m,
   links_style: e.enum(["normal", "underlined"]),
   reference_text_size: e.number(),
-  subtitle: u,
-  title: u
-}), No = e.object({
+  subtitle: m,
+  title: m
+}), Do = e.object({
   background_color: e.string(),
   background_image_url: e.string(),
   page_layout: e.enum(["center", "left", "right"]),
@@ -2435,33 +2609,33 @@ const To = e.object({
    * Optional for backwards compatibility; absent values mean "widget".
    */
   logo_placement: e.enum(["widget", "chip", "none"]).optional()
-}), jo = e.object({
+}), Fo = e.object({
   header_text_alignment: e.enum(["center", "left", "right"]),
   logo_height: e.number(),
   logo_position: e.enum(["center", "left", "none", "right"]),
   logo_url: e.string(),
   social_buttons_layout: e.enum(["bottom", "top"])
-}), ko = e.object({
-  borders: To,
-  colors: Oo,
+}), Uo = e.object({
+  borders: yo,
+  colors: Ro,
   displayName: e.string(),
-  fonts: wo,
-  page_background: No,
-  widget: jo
-}), Zn = ko.extend({
+  fonts: Lo,
+  page_background: Do,
+  widget: Fo
+}), ei = Uo.extend({
   themeId: e.string()
-}), Qn = e.object({
+}), ti = e.object({
   universal_login_experience: e.enum(["new", "classic"]).default("new"),
   identifier_first: e.boolean().default(!0),
   password_first: e.boolean().default(!1),
   webauthn_platform_first_factor: e.boolean()
-}), $n = e.object({
+}), oi = e.object({
   name: e.string(),
   enabled: e.boolean().optional().default(!0),
   default_from_address: e.string().optional(),
   credentials: e.record(e.string(), e.unknown()),
   settings: e.object({}).optional()
-}), Ro = e.enum([
+}), wo = e.enum([
   "verify_email",
   "verify_email_by_code",
   "reset_email",
@@ -2474,8 +2648,8 @@ const To = e.object({
   "change_password",
   "password_reset",
   "user_invitation"
-]), Jn = e.object({
-  template: Ro,
+]), ni = e.object({
+  template: wo,
   body: e.string(),
   from: e.string(),
   subject: e.string(),
@@ -2484,7 +2658,7 @@ const To = e.object({
   urlLifetimeInSeconds: e.number().int().nonnegative().optional(),
   includeEmailInRedirect: e.boolean().default(!1),
   enabled: e.boolean().default(!0)
-}), vo = e.object({
+}), ko = e.object({
   // Internal primary key (ULID). Never sent to clients in the new wire format.
   id: e.string(),
   // Link to the login session
@@ -2497,7 +2671,7 @@ const To = e.object({
   idle_expires_at: e.string().optional(),
   // When the token was last used.
   last_exchanged_at: e.string().optional(),
-  device: X,
+  device: z,
   resource_servers: e.array(
     e.object({
       audience: e.string(),
@@ -2518,23 +2692,23 @@ const To = e.object({
   // ISO of the *first* rotation. Anchors the leeway window so siblings minted
   // within the window don't extend the parent's exposure.
   rotated_at: e.string().optional()
-}), ei = e.object({
+}), ii = e.object({
   // When the refresh token record was created.
   created_at: e.string(),
   // When the token was explicitly revoked (null = still active).
   revoked_at: e.string().optional(),
   // Spread in the rest of the refresh token properties.
-  ...vo.shape
-}), ti = e.object({
+  ...ko.shape
+}), ai = e.object({
   to: e.string(),
   message: e.string()
-}), oi = e.object({
+}), si = e.object({
   name: e.string(),
   options: e.object({})
-}), Do = e.object({
+}), jo = e.object({
   value: e.string(),
   description: e.string().optional()
-}), Lo = e.object({
+}), Mo = e.object({
   token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
   enforce_policies: e.boolean().optional(),
   allow_skipping_userinfo: e.boolean().optional(),
@@ -2544,11 +2718,11 @@ const To = e.object({
   mtls: e.object({
     bound_access_tokens: e.boolean().optional()
   }).optional()
-}), xo = e.object({
+}), Po = e.object({
   id: e.string().optional(),
   name: e.string(),
   identifier: e.string(),
-  scopes: e.array(Do).optional(),
+  scopes: e.array(jo).optional(),
   signing_alg: e.string().optional(),
   signing_secret: e.string().optional(),
   token_lifetime: e.number().default(86400),
@@ -2556,30 +2730,30 @@ const To = e.object({
   skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
   allow_offline_access: e.boolean().optional(),
   verificationKey: e.string().optional(),
-  options: Lo.optional(),
+  options: Mo.optional(),
   is_system: e.boolean().optional(),
   metadata: e.record(e.any()).optional()
-}), Uo = e.object({
-  ...xo.shape,
+}), vo = e.object({
+  ...Po.shape,
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), ni = e.array(Uo), Fo = e.object({
+}), ri = e.array(vo), xo = e.object({
   role_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string()
-}), Po = e.object({
-  ...Fo.shape,
+}), Ho = e.object({
+  ...xo.shape,
   created_at: e.string()
-}), ii = e.array(Po), Mo = e.object({
+}), li = e.array(Ho), Go = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   permission_name: e.string(),
   organization_id: e.string().optional()
-}), Ho = e.object({
-  ...Mo.shape,
+}), Wo = e.object({
+  ...Go.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), ai = e.array(Ho), Go = e.object({
+}), ci = e.array(Wo), Bo = e.object({
   user_id: e.string(),
   resource_server_identifier: e.string(),
   resource_server_name: e.string(),
@@ -2587,17 +2761,17 @@ const To = e.object({
   description: e.string().nullable().optional(),
   created_at: e.string().optional(),
   organization_id: e.string().optional()
-}), si = e.array(
-  Go
-), Bo = e.object({
+}), pi = e.array(
+  Bo
+), Ko = e.object({
   user_id: e.string(),
   role_id: e.string(),
   organization_id: e.string().optional()
-}), Wo = e.object({
-  ...Bo.shape,
+}), Vo = e.object({
+  ...Ko.shape,
   tenant_id: e.string(),
   created_at: e.string().optional()
-}), ri = e.array(Wo), Ko = e.object({
+}), _i = e.array(Vo), Xo = e.object({
   id: e.string().optional().openapi({
     description: "The unique identifier of the role. If not provided, one will be generated."
   }),
@@ -2611,13 +2785,13 @@ const To = e.object({
   metadata: e.record(e.any()).optional().openapi({
     description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios."
   })
-}), zo = Ko.extend({
+}), qo = Xo.extend({
   id: e.string().openapi({
     description: "The unique identifier of the role"
   }),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), li = e.array(zo), qo = e.object({
+}), di = e.array(qo), zo = e.object({
   logo_url: e.string().optional().openapi({
     description: "URL of the organization's logo"
   }),
@@ -2629,7 +2803,7 @@ const To = e.object({
       description: "Page background color in hex format (e.g., #FFFFFF)"
     })
   }).optional()
-}).optional(), Xo = e.object({
+}).optional(), Yo = e.object({
   connection_id: e.string().openapi({
     description: "ID of the connection"
   }),
@@ -2642,7 +2816,7 @@ const To = e.object({
   is_signup_enabled: e.boolean().default(!0).openapi({
     description: "Whether signup is enabled for this connection"
   })
-}), Vo = e.object({
+}), Qo = e.object({
   client_credentials: e.object({
     enforce: e.boolean().default(!1).openapi({
       description: "Whether to enforce token quota limits"
@@ -2654,7 +2828,7 @@ const To = e.object({
       description: "Maximum tokens per hour (0 = unlimited)"
     })
   }).optional()
-}).optional(), Yo = e.object({
+}).optional(), Zo = e.object({
   id: e.string().optional(),
   name: e.string().min(1).regex(/^[a-z0-9_-]+$/, {
     message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores"
@@ -2664,31 +2838,31 @@ const To = e.object({
   display_name: e.string().optional().openapi({
     description: "The display name of the organization"
   }),
-  branding: qo,
+  branding: zo,
   metadata: e.record(e.any()).default({}).optional().openapi({
     description: "Custom metadata for the organization"
   }),
-  enabled_connections: e.array(Xo).default([]).optional().openapi({
+  enabled_connections: e.array(Yo).default([]).optional().openapi({
     description: "List of enabled connections for the organization"
   }),
-  token_quota: Vo
-}), ci = e.object({
-  ...Yo.shape,
-  ...a.shape,
+  token_quota: Qo
+}), gi = e.object({
+  ...Zo.shape,
+  ...s.shape,
   id: e.string(),
   // Override name to be lenient when reading from database (to support existing uppercase names)
   name: e.string().min(1).openapi({
     description: "The name of the organization"
   })
-}), Zo = e.object({
+}), Jo = e.object({
   connection_id: e.string().openapi({
     description: "ID of the tenant-level connection to enable for the org."
   }),
   assign_membership_on_login: e.boolean().optional().default(!1),
   show_as_button: e.boolean().optional().default(!0),
   is_signup_enabled: e.boolean().optional().default(!0)
-}), Qo = e.object({
-  ...Zo.shape,
+}), $o = e.object({
+  ...Jo.shape,
   // Auth0 includes the embedded connection in GET responses.
   connection: e.object({
     name: e.string().optional(),
@@ -2696,20 +2870,20 @@ const To = e.object({
   }).optional(),
   created_at: e.string().optional(),
   updated_at: e.string().optional()
-}), pi = e.array(
-  Qo
-), $o = e.object({
+}), ui = e.array(
+  $o
+), en = e.object({
   user_id: e.string().openapi({
     description: "ID of the user"
   }),
   organization_id: e.string().openapi({
     description: "ID of the organization"
   })
-}), di = e.object({
-  ...$o.shape,
-  ...a.shape,
+}), mi = e.object({
+  ...en.shape,
+  ...s.shape,
   id: e.string()
-}), _i = e.object({
+}), Ei = e.object({
   // Session settings
   idle_session_lifetime: e.number().default(72),
   session_lifetime: e.number().default(168),
@@ -2809,7 +2983,7 @@ const To = e.object({
       message: e.string().optional()
     }).optional()
   }).optional()
-}), gi = e.object({
+}), Si = e.object({
   date: e.string().openapi({
     description: "Date these events occurred in ISO 8601 format",
     example: "2025-12-19"
@@ -2834,40 +3008,40 @@ const To = e.object({
     description: "Approximate date and time the first event occurred in ISO 8601 format",
     example: "2025-12-19T00:00:00.000Z"
   })
-}), ui = e.number().openapi({
+}), hi = e.number().openapi({
   description: "Number of active users in the last 30 days",
   example: 1234
-}), mi = e.enum([
+}), bi = e.enum([
   "active-users",
   "logins",
   "signups",
   "refresh-tokens",
   "sessions"
-]), hi = e.enum(["hour", "day", "week", "month"]), bi = e.enum([
+]), Ai = e.enum(["hour", "day", "week", "month"]), fi = e.enum([
   "time",
   "connection",
   "client_id",
   "user_type",
   "event"
-]), fi = e.enum([
+]), Ci = e.enum([
   "password",
   "social",
   "passwordless",
   "enterprise"
-]), Jo = e.object({
+]), tn = e.object({
   name: e.string(),
   type: e.string()
-}), en = e.object({
+}), on = e.object({
   elapsed: e.number(),
   rows_read: e.number().optional(),
   bytes_read: e.number().optional()
-}), Si = e.object({
-  meta: e.array(Jo),
+}), Ii = e.object({
+  meta: e.array(tn),
   data: e.array(e.record(e.string(), e.any())),
   rows: e.number(),
   rows_before_limit_at_least: e.number().optional(),
-  statistics: en.optional()
-}), tn = e.enum([
+  statistics: on.optional()
+}), nn = e.enum([
   "login",
   "login-id",
   "login-password",
@@ -2896,17 +3070,17 @@ const To = e.object({
   "custom-form",
   "login-passwordless",
   "mfa-login-options"
-]), on = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+]), an = e.record(e.string(), e.record(e.string(), e.string())).openapi({
   type: "object",
   additionalProperties: {
     type: "object",
     additionalProperties: { type: "string" }
   }
-}), Ei = e.object({
-  prompt: tn,
+}), Oi = e.object({
+  prompt: nn,
   language: e.string(),
-  custom_text: on
-}), yi = {
+  custom_text: an
+}), Ti = {
   EMAIL: "email",
   SMS: "sms",
   USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2921,11 +3095,11 @@ const To = e.object({
   SAMLP: "samlp",
   WAAD: "waad",
   ADFS: "adfs"
-}, Ai = {
+}, Ni = {
   DATABASE: "database",
   SOCIAL: "social",
   PASSWORDLESS: "passwordless"
-}, nn = e.enum([
+}, sn = e.enum([
   "phone",
   "totp",
   "email",
@@ -2933,9 +3107,9 @@ const To = e.object({
   "webauthn-roaming",
   "webauthn-platform",
   "passkey"
-]), V = e.object({
+]), Y = e.object({
   user_id: e.string(),
-  type: nn,
+  type: sn,
   // Phone-specific
   phone_number: e.string().optional(),
   // TOTP-specific
@@ -2950,327 +3124,331 @@ const To = e.object({
   // Common
   confirmed: e.boolean().default(!1)
 });
-function Y(t, o) {
-  t.type === "phone" && !t.phone_number && o.addIssue({
+function Q(o, n) {
+  o.type === "phone" && !o.phone_number && n.addIssue({
     code: e.ZodIssueCode.custom,
     message: "phone_number is required when type is 'phone'",
     path: ["phone_number"]
-  }), t.type === "totp" && !t.totp_secret && o.addIssue({
+  }), o.type === "totp" && !o.totp_secret && n.addIssue({
     code: e.ZodIssueCode.custom,
     message: "totp_secret is required when type is 'totp'",
     path: ["totp_secret"]
-  }), ["webauthn-roaming", "webauthn-platform", "passkey"].includes(t.type) && (t.credential_id || o.addIssue({
+  }), ["webauthn-roaming", "webauthn-platform", "passkey"].includes(o.type) && (o.credential_id || n.addIssue({
     code: e.ZodIssueCode.custom,
-    message: `credential_id is required when type is '${t.type}'`,
+    message: `credential_id is required when type is '${o.type}'`,
     path: ["credential_id"]
-  }), t.public_key || o.addIssue({
+  }), o.public_key || n.addIssue({
     code: e.ZodIssueCode.custom,
-    message: `public_key is required when type is '${t.type}'`,
+    message: `public_key is required when type is '${o.type}'`,
     path: ["public_key"]
   }));
 }
-const Ii = V.superRefine(Y), Ci = e.object({
-  ...V.shape,
+const yi = Y.superRefine(Q), Ri = e.object({
+  ...Y.shape,
   id: e.string(),
   created_at: e.string(),
   updated_at: e.string()
-}).superRefine(Y);
-function Ti(t) {
-  const [o, n] = t.split("|");
-  if (!o || !n)
-    throw new Error(`Invalid user_id: ${t}`);
-  return { connection: o, id: n };
+}).superRefine(Q);
+function Li(o) {
+  const [n, i] = o.split("|");
+  if (!n || !i)
+    throw new Error(`Invalid user_id: ${o}`);
+  return { connection: n, id: i };
 }
-function Oi(t) {
+function Di(o) {
   const {
-    primary: o,
-    secondaries: n,
-    syncMethods: h = ["create", "rawCreate", "update", "remove", "delete", "set"]
-  } = t, E = {
-    get(p, s) {
-      if (typeof s == "symbol")
-        return p[s];
-      const d = p[s];
-      return typeof d != "function" ? d : h.includes(s) ? async (..._) => {
-        const y = await d.apply(p, _), g = [];
-        for (const r of n) {
-          const b = r.adapter[s];
-          if (typeof b != "function")
+    primary: n,
+    secondaries: i,
+    syncMethods: S = ["create", "rawCreate", "update", "remove", "delete", "set"]
+  } = o, f = {
+    get(_, r) {
+      if (typeof r == "symbol")
+        return _[r];
+      const d = _[r];
+      return typeof d != "function" ? d : S.includes(r) ? async (...g) => {
+        const C = await d.apply(_, g), u = [];
+        for (const l of i) {
+          const h = l.adapter[r];
+          if (typeof h != "function")
             continue;
-          const A = (async () => {
+          const I = (async () => {
             try {
-              await b.apply(r.adapter, _);
-            } catch (f) {
+              await h.apply(l.adapter, g);
+            } catch (b) {
               try {
-                r.onError ? r.onError(f, s, _) : console.error(
-                  `Passthrough adapter: secondary write failed for ${s}:`,
-                  f
+                l.onError ? l.onError(b, r, g) : console.error(
+                  `Passthrough adapter: secondary write failed for ${r}:`,
+                  b
                 );
-              } catch (I) {
+              } catch (O) {
                 console.error(
-                  `Passthrough adapter: onError handler threw for ${s}:`,
-                  I
+                  `Passthrough adapter: onError handler threw for ${r}:`,
+                  O
                 );
               }
             }
           })();
-          r.blocking && g.push(A);
+          l.blocking && u.push(I);
         }
-        return g.length > 0 && await Promise.all(g), y;
-      } : d.bind(p);
+        return u.length > 0 && await Promise.all(u), C;
+      } : d.bind(_);
     }
   };
-  return new Proxy(o, E);
+  return new Proxy(n, f);
 }
-function wi(t) {
-  return t;
+function Fi(o) {
+  return o;
 }
-function Ni(t) {
-  var E, p, s, d, _, y, g, r, b, A, f, I;
-  const o = t == null ? void 0 : t.options;
-  if (!o)
+function Ui(o) {
+  var f, _, r, d, g, C, u, l, h, I, b, O;
+  const n = o == null ? void 0 : o.options;
+  if (!n)
     return {
       usernameIdentifierActive: !1,
       emailIdentifierActive: !0,
       usernameMinLength: 1,
       usernameMaxLength: 15
     };
-  const n = o.attributes;
-  if (n) {
-    const Z = ((p = (E = n.username) == null ? void 0 : E.identifier) == null ? void 0 : p.active) === !0, Q = ((d = (s = n.email) == null ? void 0 : s.identifier) == null ? void 0 : d.active) !== !1, $ = ((y = (_ = n.username) == null ? void 0 : _.validation) == null ? void 0 : y.min_length) ?? 1, J = ((r = (g = n.username) == null ? void 0 : g.validation) == null ? void 0 : r.max_length) ?? 15;
+  const i = n.attributes;
+  if (i) {
+    const Z = ((_ = (f = i.username) == null ? void 0 : f.identifier) == null ? void 0 : _.active) === !0, J = ((d = (r = i.email) == null ? void 0 : r.identifier) == null ? void 0 : d.active) !== !1, $ = ((C = (g = i.username) == null ? void 0 : g.validation) == null ? void 0 : C.min_length) ?? 1, ee = ((l = (u = i.username) == null ? void 0 : u.validation) == null ? void 0 : l.max_length) ?? 15;
     return {
       usernameIdentifierActive: Z,
-      emailIdentifierActive: Q,
+      emailIdentifierActive: J,
       usernameMinLength: $,
-      usernameMaxLength: J
+      usernameMaxLength: ee
     };
   }
   return {
-    usernameIdentifierActive: o.requires_username === !0,
+    usernameIdentifierActive: n.requires_username === !0,
     emailIdentifierActive: !0,
-    usernameMinLength: ((A = (b = o.validation) == null ? void 0 : b.username) == null ? void 0 : A.min) ?? 1,
-    usernameMaxLength: ((I = (f = o.validation) == null ? void 0 : f.username) == null ? void 0 : I.max) ?? 15
+    usernameMinLength: ((I = (h = n.validation) == null ? void 0 : h.username) == null ? void 0 : I.min) ?? 1,
+    usernameMaxLength: ((O = (b = n.validation) == null ? void 0 : b.username) == null ? void 0 : O.max) ?? 15
   };
 }
-function ji(t) {
-  return typeof t == "object" && t !== null && !Array.isArray(t);
+function wi(o) {
+  return typeof o == "object" && o !== null && !Array.isArray(o);
 }
 export {
-  _n as Auth0ActionEnum,
-  ro as Auth0Client,
-  F as AuthorizationResponseMode,
-  U as AuthorizationResponseType,
-  P as CodeChallengeMethod,
-  x as ComponentCategory,
-  L as ComponentType,
-  gn as EmailActionEnum,
-  wn as FORM_FIELD_TYPES,
-  dn as FlowActionTypeEnum,
-  Co as GrantType,
-  lo as LocationInfo,
-  ao as LogTypes,
-  z as LoginSessionState,
-  Ge as NodeType,
-  Se as RedirectTargetEnum,
-  yi as Strategy,
-  Ai as StrategyType,
-  k as actionDependencySchema,
-  oe as actionExecutionErrorSchema,
-  ln as actionExecutionInsertSchema,
-  ie as actionExecutionLogEntrySchema,
-  ae as actionExecutionLogsSchema,
-  ne as actionExecutionResultSchema,
-  se as actionExecutionSchema,
-  te as actionExecutionStatusSchema,
-  ee as actionExecutionTriggerIdSchema,
-  v as actionInsertSchema,
-  Ke as actionNodeSchema,
-  rn as actionSchema,
-  R as actionSecretSchema,
-  j as actionTriggerSchema,
-  sn as actionUpdateSchema,
-  re as actionVersionInsertSchema,
-  cn as actionVersionSchema,
-  ui as activeUsersResponseSchema,
-  ce as actorSchema,
-  Te as addressSchema,
-  Jo as analyticsColumnMetaSchema,
-  bi as analyticsGroupBySchema,
-  hi as analyticsIntervalSchema,
-  Si as analyticsQueryResponseSchema,
-  mi as analyticsResourceSchema,
-  en as analyticsStatisticsSchema,
-  fi as analyticsUserTypeSchema,
-  Eo as attackProtectionSchema,
-  le as auditCategorySchema,
-  me as auditEventInsertSchema,
-  pn as auditEventSchema,
-  ue as auth0ClientSchema,
-  An as auth0FlowInsertSchema,
-  Ye as auth0FlowSchema,
-  mn as auth0QuerySchema,
-  be as auth0UpdateUserActionSchema,
+  un as Auth0ActionEnum,
+  co as Auth0Client,
+  v as AuthorizationResponseMode,
+  P as AuthorizationResponseType,
+  x as CodeChallengeMethod,
+  M as ComponentCategory,
+  j as ComponentType,
+  mn as EmailActionEnum,
+  Ln as FORM_FIELD_TYPES,
+  gn as FlowActionTypeEnum,
+  No as GrantType,
+  po as LocationInfo,
+  t as LogTypes,
+  X as LoginSessionState,
+  We as NodeType,
+  Ae as RedirectTargetEnum,
+  Ti as Strategy,
+  Ni as StrategyType,
+  F as actionDependencySchema,
+  ne as actionExecutionErrorSchema,
+  pn as actionExecutionInsertSchema,
+  ae as actionExecutionLogEntrySchema,
+  se as actionExecutionLogsSchema,
+  ie as actionExecutionResultSchema,
+  re as actionExecutionSchema,
+  oe as actionExecutionStatusSchema,
+  te as actionExecutionTriggerIdSchema,
+  w as actionInsertSchema,
+  Ve as actionNodeSchema,
+  cn as actionSchema,
+  U as actionSecretSchema,
+  D as actionTriggerSchema,
+  ln as actionUpdateSchema,
+  le as actionVersionInsertSchema,
+  _n as actionVersionSchema,
+  hi as activeUsersResponseSchema,
+  pe as actorSchema,
+  Ne as addressSchema,
+  tn as analyticsColumnMetaSchema,
+  fi as analyticsGroupBySchema,
+  Ai as analyticsIntervalSchema,
+  Ii as analyticsQueryResponseSchema,
+  bi as analyticsResourceSchema,
+  on as analyticsStatisticsSchema,
+  Ci as analyticsUserTypeSchema,
+  Co as attackProtectionSchema,
+  ce as auditCategorySchema,
+  Ee as auditEventInsertSchema,
+  dn as auditEventSchema,
+  me as auth0ClientSchema,
+  On as auth0FlowInsertSchema,
+  Qe as auth0FlowSchema,
+  Sn as auth0QuerySchema,
+  he as auth0UpdateUserActionSchema,
   bn as auth0UserResponseSchema,
-  Qe as authParamsSchema,
-  Ii as authenticationMethodInsertSchema,
-  Ci as authenticationMethodSchema,
-  nn as authenticationMethodTypeSchema,
-  D as baseUserSchema,
-  Dt as blockComponentSchema,
-  To as bordersSchema,
-  In as brandingSchema,
+  Je as authParamsSchema,
+  yi as authenticationMethodInsertSchema,
+  Ri as authenticationMethodSchema,
+  sn as authenticationMethodTypeSchema,
+  k as baseUserSchema,
+  kt as blockComponentSchema,
+  yo as bordersSchema,
+  Tn as brandingSchema,
   bo as breachedPasswordDetectionSchema,
-  fo as bruteForceProtectionSchema,
-  Ue as buttonComponentSchema,
+  Ao as bruteForceProtectionSchema,
+  Pe as buttonComponentSchema,
   Ze as claimsRequestSchema,
-  Re as clientGrantInsertSchema,
-  En as clientGrantListSchema,
-  ve as clientGrantSchema,
-  ke as clientInsertSchema,
-  Le as clientRegistrationTokenInsertSchema,
-  yn as clientRegistrationTokenSchema,
-  De as clientRegistrationTokenTypeSchema,
-  Sn as clientSchema,
-  Je as codeInsertSchema,
-  Cn as codeSchema,
+  Ue as clientGrantInsertSchema,
+  Cn as clientGrantListSchema,
+  we as clientGrantSchema,
+  Fe as clientInsertSchema,
+  je as clientRegistrationTokenInsertSchema,
+  In as clientRegistrationTokenSchema,
+  ke as clientRegistrationTokenTypeSchema,
+  fn as clientSchema,
+  et as codeInsertSchema,
+  Nn as codeSchema,
   $e as codeTypeSchema,
-  Oo as colorsSchema,
-  Gt as componentMessageSchema,
-  He as componentSchema,
-  tt as connectionInsertSchema,
-  et as connectionOptionsSchema,
-  Tn as connectionSchema,
-  m as coordinatesSchema,
-  Oi as createPassthroughAdapter,
-  wi as createWriteOnlyAdapter,
-  ot as customDomainInsertSchema,
-  it as customDomainSchema,
-  On as customDomainWithTenantIdSchema,
-  Ei as customTextEntrySchema,
-  on as customTextSchema,
-  gi as dailyStatsSchema,
-  $n as emailProviderSchema,
-  Ro as emailTemplateNameSchema,
-  Jn as emailTemplateSchema,
-  he as emailVerificationRulesSchema,
-  fe as emailVerifyActionSchema,
-  Ve as endingSchema,
-  xt as fieldComponentSchema,
-  ye as flowActionStepSchema,
-  Ae as flowInsertSchema,
-  un as flowSchema,
-  Pe as flowsFieldComponentSchema,
-  We as flowsFlowNodeSchema,
+  Ro as colorsSchema,
+  Wt as componentMessageSchema,
+  Ge as componentSchema,
+  ot as connectionInsertSchema,
+  tt as connectionOptionsSchema,
+  yn as connectionSchema,
+  E as coordinatesSchema,
+  Di as createPassthroughAdapter,
+  Fi as createWriteOnlyAdapter,
+  nt as customDomainInsertSchema,
+  at as customDomainSchema,
+  Rn as customDomainWithTenantIdSchema,
+  Oi as customTextEntrySchema,
+  an as customTextSchema,
+  Si as dailyStatsSchema,
+  oi as emailProviderSchema,
+  wo as emailTemplateNameSchema,
+  ni as emailTemplateSchema,
+  Se as emailVerificationRulesSchema,
+  be as emailVerifyActionSchema,
+  Ye as endingSchema,
+  Mt as fieldComponentSchema,
+  Ce as flowActionStepSchema,
+  Ie as flowInsertSchema,
+  En as flowSchema,
+  xe as flowsFieldComponentSchema,
+  Ke as flowsFlowNodeSchema,
   Be as flowsStepNodeSchema,
-  u as fontDetailsSchema,
-  wo as fontsSchema,
-  Nn as formControlSchema,
-  Ht as formInsertSchema,
-  M as formNodeComponentDefinition,
-  Mt as formNodeSchema,
-  jn as formSchema,
-  Me as genericComponentSchema,
-  ze as genericNodeSchema,
-  Ni as getConnectionIdentifierConfig,
-  Qt as hookCodeInsertSchema,
-  Fn as hookCodeSchema,
-  xn as hookInsertSchema,
-  Un as hookSchema,
-  K as hookTemplateId,
-  Ln as hookTemplates,
-  Ce as identitySchema,
-  eo as inviteInsertSchema,
-  Pn as inviteSchema,
-  Jt as inviteeSchema,
+  m as fontDetailsSchema,
+  Lo as fontsSchema,
+  Dn as formControlSchema,
+  Gt as formInsertSchema,
+  H as formNodeComponentDefinition,
+  Ht as formNodeSchema,
+  Fn as formSchema,
+  He as genericComponentSchema,
+  Xe as genericNodeSchema,
+  Ui as getConnectionIdentifierConfig,
+  Vn as getLogTypeCategory,
+  Kn as getLogTypeDescription,
+  Jt as hookCodeInsertSchema,
+  xn as hookCodeSchema,
+  Pn as hookInsertSchema,
+  vn as hookSchema,
+  V as hookTemplateId,
+  Mn as hookTemplates,
+  Te as identitySchema,
+  to as inviteInsertSchema,
+  Hn as inviteSchema,
+  eo as inviteeSchema,
   $t as inviterSchema,
-  Rn as isBlockComponent,
-  Dn as isFieldComponent,
-  ji as isPlainObject,
-  vn as isWidgetComponent,
-  Mn as jwksKeySchema,
-  to as jwksSchema,
-  Fe as legalComponentSchema,
-  ge as locationInfoSchema,
-  co as logInsertSchema,
-  Bn as logSchema,
-  _o as logStreamFilterSchema,
-  go as logStreamInsertSchema,
-  Wn as logStreamSchema,
+  wn as isBlockComponent,
+  jn as isFieldComponent,
+  wi as isPlainObject,
+  kn as isWidgetComponent,
+  Gn as jwksKeySchema,
+  oo as jwksSchema,
+  ve as legalComponentSchema,
+  ue as locationInfoSchema,
+  _o as logInsertSchema,
+  Xn as logSchema,
+  uo as logStreamFilterSchema,
+  mo as logStreamInsertSchema,
+  qn as logStreamSchema,
   q as logStreamStatusSchema,
-  po as logStreamTypeSchema,
-  no as loginSessionAuthStrategySchema,
-  io as loginSessionInsertSchema,
-  Gn as loginSessionSchema,
-  oo as loginSessionStateSchema,
-  uo as migrationProviderTypeSchema,
-  mo as migrationSourceCredentialsSchema,
+  go as logStreamTypeSchema,
+  lo as logTypeCategories,
+  ro as logTypeDescriptions,
+  io as loginSessionAuthStrategySchema,
+  ao as loginSessionInsertSchema,
+  Bn as loginSessionSchema,
+  no as loginSessionStateSchema,
+  Eo as migrationProviderTypeSchema,
+  So as migrationSourceCredentialsSchema,
   ho as migrationSourceInsertSchema,
-  Kn as migrationSourceSchema,
+  zn as migrationSourceSchema,
   qe as nodeSchema,
-  Hn as openIDConfigurationSchema,
-  qo as organizationBrandingSchema,
-  Zo as organizationConnectionInsertSchema,
-  pi as organizationConnectionListSchema,
-  Qo as organizationConnectionSchema,
-  Xo as organizationEnabledConnectionSchema,
-  Yo as organizationInsertSchema,
-  ci as organizationSchema,
-  Vo as organizationTokenQuotaSchema,
-  No as pageBackgroundSchema,
-  Ti as parseUserId,
-  yo as passwordInsertSchema,
-  zn as passwordSchema,
-  Ie as profileDataSchema,
-  tn as promptScreenSchema,
-  Qn as promptSettingSchema,
-  Ee as redirectActionSchema,
-  vo as refreshTokenInsertSchema,
-  ei as refreshTokenSchema,
+  Wn as openIDConfigurationSchema,
+  zo as organizationBrandingSchema,
+  Jo as organizationConnectionInsertSchema,
+  ui as organizationConnectionListSchema,
+  $o as organizationConnectionSchema,
+  Yo as organizationEnabledConnectionSchema,
+  Zo as organizationInsertSchema,
+  gi as organizationSchema,
+  Qo as organizationTokenQuotaSchema,
+  Do as pageBackgroundSchema,
+  Li as parseUserId,
+  Io as passwordInsertSchema,
+  Yn as passwordSchema,
+  Oe as profileDataSchema,
+  nn as promptScreenSchema,
+  ti as promptSettingSchema,
+  fe as redirectActionSchema,
+  ko as refreshTokenInsertSchema,
+  ii as refreshTokenSchema,
   de as requestContextSchema,
-  xo as resourceServerInsertSchema,
-  ni as resourceServerListSchema,
-  Lo as resourceServerOptionsSchema,
-  Uo as resourceServerSchema,
-  Do as resourceServerScopeSchema,
-  _e as responseContextSchema,
-  xe as richTextComponentSchema,
-  Ko as roleInsertSchema,
-  li as roleListSchema,
-  Fo as rolePermissionInsertSchema,
-  ii as rolePermissionListSchema,
-  Po as rolePermissionSchema,
-  zo as roleSchema,
+  Po as resourceServerInsertSchema,
+  ri as resourceServerListSchema,
+  Mo as resourceServerOptionsSchema,
+  vo as resourceServerSchema,
+  jo as resourceServerScopeSchema,
+  ge as responseContextSchema,
+  Me as richTextComponentSchema,
+  Xo as roleInsertSchema,
+  di as roleListSchema,
+  xo as rolePermissionInsertSchema,
+  li as rolePermissionListSchema,
+  Ho as rolePermissionSchema,
+  qo as roleSchema,
   Bt as screenLinkSchema,
-  Ao as sessionInsertSchema,
-  qn as sessionSchema,
-  Xn as signingKeySchema,
-  oi as smsProviderSchema,
-  ti as smsSendParamsSchema,
-  Xe as startSchema,
-  So as suspiciousIpThrottlingSchema,
-  pe as targetSchema,
-  Io as tenantInsertSchema,
-  Vn as tenantSchema,
-  _i as tenantSettingsSchema,
-  ko as themeInsertSchema,
-  Zn as themeSchema,
-  Yn as tokenResponseSchema,
+  Oo as sessionInsertSchema,
+  Qn as sessionSchema,
+  Zn as signingKeySchema,
+  si as smsProviderSchema,
+  ai as smsSendParamsSchema,
+  ze as startSchema,
+  fo as suspiciousIpThrottlingSchema,
+  _e as targetSchema,
+  To as tenantInsertSchema,
+  Jn as tenantSchema,
+  Ei as tenantSettingsSchema,
+  Uo as themeInsertSchema,
+  ei as themeSchema,
+  $n as tokenResponseSchema,
   hn as totalsSchema,
-  kn as uiScreenSchema,
-  Oe as userInsertSchema,
-  $o as userOrganizationInsertSchema,
-  di as userOrganizationSchema,
-  Mo as userPermissionInsertSchema,
-  ai as userPermissionListSchema,
-  Ho as userPermissionSchema,
-  si as userPermissionWithDetailsListSchema,
-  Go as userPermissionWithDetailsSchema,
-  fn as userResponseSchema,
-  Bo as userRoleInsertSchema,
-  ri as userRoleListSchema,
-  Wo as userRoleSchema,
-  we as userSchema,
-  nt as verificationMethodsSchema,
-  Lt as widgetComponentSchema,
-  jo as widgetSchema
+  Un as uiScreenSchema,
+  ye as userInsertSchema,
+  en as userOrganizationInsertSchema,
+  mi as userOrganizationSchema,
+  Go as userPermissionInsertSchema,
+  ci as userPermissionListSchema,
+  Wo as userPermissionSchema,
+  pi as userPermissionWithDetailsListSchema,
+  Bo as userPermissionWithDetailsSchema,
+  An as userResponseSchema,
+  Ko as userRoleInsertSchema,
+  _i as userRoleListSchema,
+  Vo as userRoleSchema,
+  Re as userSchema,
+  it as verificationMethodsSchema,
+  jt as widgetComponentSchema,
+  Fo as widgetSchema
 };