@authhero/adapter-interfaces 2.9.1 → 2.11.0

package/dist/adapter-interfaces.mjs

@@ -74,7 +74,7 @@ var t = e.object({
 	tenant_id: !0,
 	created_at: !0,
 	updated_at: !0
-}), oe = e.object({
+}), u = e.object({
 	action_id: e.string(),
 	code: e.string().max(1e5),
 	runtime: e.string().max(50).optional(),
@@ -82,16 +82,16 @@ var t = e.object({
 	secrets: e.array(i).optional(),
 	supported_triggers: e.array(n).optional(),
 	deployed: e.boolean().default(!0)
-}), se = oe.extend({
+}), oe = u.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	number: e.number().int()
-}).extend(t.shape), ce = e.enum([
+}).extend(t.shape), se = e.enum([
 	"user_action",
 	"admin_action",
 	"system",
 	"api"
-]), le = e.object({
+]), ce = e.object({
 	type: e.enum([
 		"user",
 		"admin",
@@ -105,7 +105,7 @@ var t = e.object({
 	org_name: e.string().optional(),
 	scopes: e.array(e.string()).optional(),
 	client_id: e.string().optional()
-}), ue = e.object({
+}), le = e.object({
 	type: e.string(),
 	id: e.string(),
 	before: e.record(e.string(), e.unknown()).optional(),
@@ -114,7 +114,7 @@ var t = e.object({
 		old: e.unknown(),
 		new: e.unknown()
 	})).optional()
-}), de = e.object({
+}), ue = e.object({
 	method: e.string(),
 	path: e.string(),
 	query: e.record(e.string(), e.string()).optional(),
@@ -122,58 +122,58 @@ var t = e.object({
 	ip: e.string(),
 	user_agent: e.string().optional(),
 	correlation_id: e.string().optional()
-}), fe = e.object({
+}), de = e.object({
 	status_code: e.number(),
 	body: e.unknown().optional()
-}), pe = e.object({
+}), fe = e.object({
 	country_code: e.string(),
 	city_name: e.string(),
 	latitude: e.string(),
 	longitude: e.string(),
 	time_zone: e.string(),
 	continent_code: e.string()
-}), me = e.object({
+}), d = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.record(e.string(), e.string()).optional()
-}), he = e.object({
+}), f = e.object({
 	tenant_id: e.string(),
 	event_type: e.string(),
 	log_type: e.string(),
 	description: e.string().optional(),
-	category: ce,
-	actor: le,
-	target: ue,
-	request: de,
-	response: fe.optional(),
+	category: se,
+	actor: ce,
+	target: le,
+	request: ue,
+	response: de.optional(),
 	connection: e.string().optional(),
 	strategy: e.string().optional(),
 	strategy_type: e.string().optional(),
 	audience: e.string().optional(),
 	scope: e.string().optional(),
-	location: pe.optional(),
-	auth0_client: me.optional(),
+	location: fe.optional(),
+	auth0_client: d.optional(),
 	hostname: e.string(),
 	is_mobile: e.boolean().optional(),
 	timestamp: e.string()
-}), ge = he.extend({ id: e.string() }), _e = e.enum([
+}), pe = f.extend({ id: e.string() }), me = e.enum([
 	"AUTH0",
 	"EMAIL",
 	"REDIRECT"
-]), ve = e.enum([
+]), he = e.enum([
 	"CREATE_USER",
 	"GET_USER",
 	"UPDATE_USER",
 	"SEND_REQUEST",
 	"SEND_EMAIL"
-]), ye = e.enum(["VERIFY_EMAIL"]), be = e.object({
+]), ge = e.enum(["VERIFY_EMAIL"]), p = e.object({
 	require_mx_record: e.boolean().optional(),
 	block_aliases: e.boolean().optional(),
 	block_free_emails: e.boolean().optional(),
 	block_disposable_emails: e.boolean().optional(),
 	blocklist: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional()
-}), xe = e.object({
+}), m = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("AUTH0"),
@@ -185,7 +185,7 @@ var t = e.object({
 		user_id: e.string(),
 		changes: e.record(e.string(), e.any())
 	})
-}), Se = e.object({
+}), h = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("EMAIL"),
@@ -194,13 +194,13 @@ var t = e.object({
 	mask_output: e.boolean().optional(),
 	params: e.object({
 		email: e.string(),
-		rules: be.optional()
+		rules: p.optional()
 	})
-}), u = e.enum([
+}), g = e.enum([
 	"change-email",
 	"account",
 	"custom"
-]), d = e.object({
+]), _ = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("REDIRECT"),
@@ -208,31 +208,31 @@ var t = e.object({
 	allow_failure: e.boolean().optional(),
 	mask_output: e.boolean().optional(),
 	params: e.object({
-		target: u.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
+		target: g.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
 		custom_url: e.string().optional().openapi({ description: "Custom URL to redirect to when target is 'custom'" })
 	})
-}), f = e.union([
-	xe,
-	Se,
-	d
-]), p = e.object({
+}), v = e.union([
+	m,
+	h,
+	_
+]), y = e.object({
 	name: e.string().min(1).max(150).openapi({ description: "The name of the flow" }),
-	actions: e.array(f).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
-}), Ce = p.extend(t.shape).extend({ id: e.string().openapi({
+	actions: e.array(v).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
+}), _e = y.extend(t.shape).extend({ id: e.string().openapi({
 	description: "Unique identifier for the flow",
 	example: "af_12tMpdJ3iek7svMyZkSh5M"
-}) }), we = e.object({
+}) }), ve = e.object({
 	page: e.string().min(0).optional().default("0").transform((e) => parseInt(e, 10)).openapi({ description: "The page number where 0 is the first page" }),
 	per_page: e.string().min(1).optional().default("10").transform((e) => parseInt(e, 10)).openapi({ description: "The number of items per page" }),
 	include_totals: e.string().optional().default("false").transform((e) => e === "true").openapi({ description: "If the total number of items should be included in the response" }),
 	sort: e.string().regex(/^.+:(-1|1)$/).optional().openapi({ description: "A property that should have the format 'string:-1' or 'string:1'" }),
 	q: e.string().optional().openapi({ description: "A lucene query string used to filter the results" })
-}), Te = e.object({
+}), ye = e.object({
 	start: e.number(),
 	limit: e.number(),
 	length: e.number(),
 	total: e.number().optional()
-}), m = e.object({
+}), be = e.object({
 	email: e.string().optional(),
 	email_verified: e.boolean().optional(),
 	name: e.string().optional(),
@@ -241,7 +241,7 @@ var t = e.object({
 	phone_number: e.string().optional(),
 	phone_verified: e.boolean().optional(),
 	family_name: e.string().optional()
-}).catchall(e.any()), h = e.object({
+}).catchall(e.any()), b = e.object({
 	connection: e.string(),
 	user_id: e.string(),
 	provider: e.string(),
@@ -254,15 +254,15 @@ var t = e.object({
 	access_token: e.string().optional(),
 	access_token_secret: e.string().optional(),
 	refresh_token: e.string().optional(),
-	profileData: m.optional()
-}), g = e.object({
+	profileData: be.optional()
+}), x = e.object({
 	formatted: e.string().optional(),
 	street_address: e.string().optional(),
 	locality: e.string().optional(),
 	region: e.string().optional(),
 	postal_code: e.string().optional(),
 	country: e.string().optional()
-}).optional(), _ = e.object({
+}).optional(), S = e.object({
 	email: e.string().transform((e) => e.toLowerCase()).optional(),
 	username: e.string().refine((e) => !e.includes("@"), { message: "Usernames must not contain \"@\". Use the email field for email addresses." }).optional(),
 	phone_number: e.string().optional(),
@@ -285,8 +285,8 @@ var t = e.object({
 	gender: e.string().optional(),
 	birthdate: e.string().optional(),
 	zoneinfo: e.string().optional(),
-	address: g
-}), v = _.extend({
+	address: x
+}), C = S.extend({
 	email_verified: e.boolean().default(!1),
 	verify_email: e.boolean().optional(),
 	last_ip: e.string().optional(),
@@ -300,29 +300,29 @@ var t = e.object({
 		hash: e.string(),
 		algorithm: e.string()
 	}).optional()
-}), y = v.omit({ password: !0 }).extend(t.shape).extend({
+}), w = C.omit({ password: !0 }).extend(t.shape).extend({
 	user_id: e.string(),
 	provider: e.string(),
 	is_social: e.boolean(),
 	email: e.string().optional(),
 	login_count: e.number().default(0),
-	identities: e.array(h).optional()
-}), Ee = y.omit({ registration_completed_at: !0 }), De = _.extend({
+	identities: e.array(b).optional()
+}), xe = w.omit({ registration_completed_at: !0 }), Se = S.extend({
 	login_count: e.number(),
 	multifactor: e.array(e.string()).optional(),
 	last_ip: e.string().optional(),
 	last_login: e.string().optional(),
 	user_id: e.string()
-}).catchall(e.any()), Oe = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", ke = (e = 21) => {
+}).catchall(e.any()), Ce = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", we = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += Oe[n[e] & 63];
+	for (; e--;) t += Ce[n[e] & 63];
 	return t;
-}, b = e.object({
+}, T = e.object({
 	client_id: e.string().optional().openapi({ description: "ID of this client. Generated server-side if omitted (Auth0 behavior)." }),
 	name: e.string().min(1).openapi({ description: "Name of this client (min length: 1 character, does not allow < or >)." }),
 	description: e.string().max(140).optional().openapi({ description: "Free text description of this client (max length: 140 characters)." }),
 	global: e.boolean().default(!1).openapi({ description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)." }),
-	client_secret: e.string().default(() => ke()).optional().openapi({ description: "Client secret (which you must not make public)." }),
+	client_secret: e.string().default(() => we()).optional().openapi({ description: "Client secret (which you must not make public)." }),
 	app_type: e.enum([
 		"native",
 		"spa",
@@ -351,7 +351,7 @@ var t = e.object({
 		"oag"
 	]).default("regular_web").optional().openapi({ description: "The type of application this client represents" }),
 	logo_uri: e.string().url().optional().openapi({ description: "URL of the logo to display for this client. Recommended size is 150x150 pixels." }),
-	is_first_party: e.boolean().default(!1).openapi({ description: "Whether this client a first party client (true) or not (false)." }),
+	is_first_party: e.boolean().default(!0).openapi({ description: "Whether this client is a first party client (true) or not (false). First-party clients skip the consent screen; third-party clients require explicit user consent for non-basic scopes." }),
 	oidc_conformant: e.boolean().default(!0).openapi({ description: "Whether this client conforms to strict OIDC specifications (true) or uses legacy features (false)." }),
 	auth0_conformant: e.boolean().default(!0).openapi({ description: "Whether this client follows Auth0-compatible behavior (true) or strict OIDC behavior (false). When true, profile/email claims are included in the ID token when scopes are requested. When false, these claims are only available from the userinfo endpoint (strict OIDC 5.4 compliance)." }),
 	callbacks: e.array(e.string()).default([]).optional().openapi({ description: "Comma-separated list of URLs whitelisted for Auth0 to use as a callback to the client after authentication." }),
@@ -429,10 +429,10 @@ var t = e.object({
 	]).optional().openapi({ description: "Provenance of this client. `manual` = Management API; `open_dcr` = RFC 7591 without IAT; `iat_dcr` = RFC 7591 with an Initial Access Token." }),
 	registration_metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Arbitrary metadata captured at Dynamic Client Registration time that isn't a first-class client field (e.g. integration_type, domain). Also stores `iat_constraints` for clients created via IAT so RFC 7592 PUT can enforce field immutability." }),
 	user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({ description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies." })
-}), Ae = e.object({
+}), Te = e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(b.shape).extend({ client_id: e.string() }), x = e.object({
+}).extend(T.shape).extend({ client_id: e.string() }), E = e.object({
 	client_id: e.string().min(1).openapi({ description: "ID of the client." }),
 	audience: e.string().min(1).openapi({ description: "The audience (API identifier) of this client grant." }),
 	scope: e.array(e.string()).optional().openapi({ description: "Scopes allowed for this client grant." }),
@@ -445,38 +445,38 @@ var t = e.object({
 	is_system: e.boolean().optional().openapi({ description: "If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly." }),
 	subject_type: e.enum(["client", "user"]).optional().openapi({ description: "The type of application access the client grant allows. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." }),
 	authorization_details_types: e.array(e.string()).optional().openapi({ description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." })
-}), S = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(x.shape).extend({
+}), D = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(E.shape).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), je = e.array(S), C = e.enum(["iat", "rat"]), w = e.object({
+}), Ee = e.array(D), O = e.enum(["iat", "rat"]), k = e.object({
 	id: e.string(),
 	token_hash: e.string(),
-	type: C,
+	type: O,
 	client_id: e.string().optional(),
 	sub: e.string().optional(),
 	constraints: e.record(e.string(), e.unknown()).optional(),
 	single_use: e.boolean().default(!1),
 	expires_at: e.string().optional()
-}), Me = e.object({
+}), De = e.object({
 	created_at: e.string(),
 	used_at: e.string().optional(),
 	revoked_at: e.string().optional()
-}).extend(w.shape), T = e.object({
+}).extend(k.shape), A = e.object({
 	x: e.number(),
 	y: e.number()
-}), E = /* @__PURE__ */ function(e) {
+}), j = /* @__PURE__ */ function(e) {
 	return e.RICH_TEXT = "RICH_TEXT", e.NEXT_BUTTON = "NEXT_BUTTON", e.BACK_BUTTON = "BACK_BUTTON", e.SUBMIT_BUTTON = "SUBMIT_BUTTON", e.DIVIDER = "DIVIDER", e.TEXT = "TEXT", e.EMAIL = "EMAIL", e.PASSWORD = "PASSWORD", e.NUMBER = "NUMBER", e.PHONE = "PHONE", e.DATE = "DATE", e.CHECKBOX = "CHECKBOX", e.RADIO = "RADIO", e.SELECT = "SELECT", e.HIDDEN = "HIDDEN", e.LEGAL = "LEGAL", e;
-}({}), D = /* @__PURE__ */ function(e) {
+}({}), M = /* @__PURE__ */ function(e) {
 	return e.BLOCK = "BLOCK", e.FIELD = "FIELD", e;
-}({}), O = e.object({
+}({}), N = e.object({
 	id: e.string(),
-	category: e.nativeEnum(D),
-	type: e.nativeEnum(E)
-}), k = O.extend({
+	category: e.nativeEnum(M),
+	type: e.nativeEnum(j)
+}), P = N.extend({
 	category: e.literal("BLOCK"),
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string() }).passthrough()
-}), A = O.extend({
+}), F = N.extend({
 	category: e.literal("BLOCK"),
 	type: e.union([
 		e.literal("NEXT_BUTTON"),
@@ -484,13 +484,13 @@ var t = e.object({
 		e.literal("SUBMIT_BUTTON")
 	]),
 	config: e.object({ text: e.string() }).passthrough()
-}), j = O.extend({
+}), I = N.extend({
 	category: e.literal("FIELD"),
 	type: e.literal("LEGAL"),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional(),
 	config: e.object({ text: e.string() }).passthrough()
-}), M = O.extend({
+}), L = N.extend({
 	category: e.literal("FIELD"),
 	type: e.union([
 		e.literal("TEXT"),
@@ -510,40 +510,40 @@ var t = e.object({
 		label: e.string().optional(),
 		placeholder: e.string().optional()
 	}).passthrough()
-}), N = e.object({
+}), R = e.object({
 	id: e.string(),
 	category: e.string(),
 	type: e.string()
-}).passthrough(), P = e.union([
-	k,
-	A,
-	j,
-	M,
-	N
-]), Ne = /* @__PURE__ */ function(e) {
+}).passthrough(), z = e.union([
+	P,
+	F,
+	I,
+	L,
+	R
+]), Oe = /* @__PURE__ */ function(e) {
 	return e.STEP = "STEP", e.FLOW = "FLOW", e.CONDITION = "CONDITION", e.ACTION = "ACTION", e;
-}({}), F = e.object({
+}({}), B = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: T,
+	coordinates: A,
 	alias: e.string().optional(),
 	config: e.object({
-		components: e.array(P),
+		components: e.array(z),
 		next_node: e.string()
 	}).passthrough()
-}), I = e.object({
+}), ke = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: T,
+	coordinates: A,
 	alias: e.string().optional(),
 	config: e.object({
 		flow_id: e.string(),
 		next_node: e.string()
 	})
-}), L = e.object({
+}), Ae = e.object({
 	id: e.string(),
 	type: e.literal("ACTION"),
-	coordinates: T,
+	coordinates: A,
 	alias: e.string().optional(),
 	config: e.object({
 		action_type: e.enum(["REDIRECT"]).openapi({ description: "The type of action to perform" }),
@@ -555,56 +555,56 @@ var t = e.object({
 		custom_url: e.string().optional().openapi({ description: "Custom URL when target is 'custom'" }),
 		next_node: e.string().openapi({ description: "The next node to navigate to after action (for non-redirect actions)" })
 	}).passthrough()
-}), R = e.object({
+}), je = e.object({
 	id: e.string(),
 	type: e.string(),
-	coordinates: T
-}).passthrough(), z = e.union([
-	F,
-	I,
-	L,
-	R
-]), Pe = e.object({
+	coordinates: A
+}).passthrough(), Me = e.union([
+	B,
+	ke,
+	Ae,
+	je
+]), Ne = e.object({
 	next_node: e.string(),
-	coordinates: T
-}).passthrough(), Fe = e.object({
+	coordinates: A
+}).passthrough(), Pe = e.object({
 	resume_flow: e.boolean().optional(),
-	coordinates: T
-}).passthrough(), Ie = e.object({
+	coordinates: A
+}).passthrough(), Fe = e.object({
 	id: e.string(),
 	name: e.string(),
 	languages: e.object({ primary: e.string() }).passthrough(),
-	nodes: e.array(z),
-	start: Pe,
-	ending: Fe,
+	nodes: e.array(Me),
+	start: Ne,
+	ending: Pe,
 	created_at: e.string(),
 	updated_at: e.string(),
 	links: e.object({
 		sdkSrc: e.string().optional(),
 		sdk_src: e.string().optional()
 	}).passthrough()
-}).passthrough(), Le = Ie.omit({
+}).passthrough(), Ie = Fe.omit({
 	id: !0,
 	created_at: !0,
 	updated_at: !0
-}), Re = /* @__PURE__ */ function(e) {
+}), Le = /* @__PURE__ */ function(e) {
 	return e.TOKEN = "token", e.ID_TOKEN = "id_token", e.TOKEN_ID_TOKEN = "id_token token", e.CODE = "code", e.CODE_ID_TOKEN = "code id_token", e.CODE_TOKEN = "code token", e.CODE_ID_TOKEN_TOKEN = "code id_token token", e;
-}({}), ze = /* @__PURE__ */ function(e) {
+}({}), Re = /* @__PURE__ */ function(e) {
 	return e.QUERY = "query", e.FRAGMENT = "fragment", e.FORM_POST = "form_post", e.WEB_MESSAGE = "web_message", e.SAML_POST = "saml_post", e;
-}({}), Be = /* @__PURE__ */ function(e) {
+}({}), ze = /* @__PURE__ */ function(e) {
 	return e.S256 = "S256", e.Plain = "plain", e;
-}({}), Ve = e.union([e.null(), e.object({
+}({}), Be = e.union([e.null(), e.object({
 	essential: e.boolean().optional(),
 	value: e.unknown().optional(),
 	values: e.array(e.unknown()).optional()
-})]).nullable(), He = e.object({
-	userinfo: e.record(e.string(), Ve).optional(),
-	id_token: e.record(e.string(), Ve).optional()
-}), Ue = e.object({
+})]).nullable(), Ve = e.object({
+	userinfo: e.record(e.string(), Be).optional(),
+	id_token: e.record(e.string(), Be).optional()
+}), He = e.object({
 	client_id: e.string(),
 	act_as: e.string().optional(),
-	response_type: e.nativeEnum(Re).optional(),
-	response_mode: e.nativeEnum(ze).optional(),
+	response_type: e.nativeEnum(Le).optional(),
+	response_mode: e.nativeEnum(Re).optional(),
 	redirect_uri: e.string().optional(),
 	audience: e.string().optional(),
 	organization: e.string().optional(),
@@ -612,15 +612,15 @@ var t = e.object({
 	nonce: e.string().optional(),
 	scope: e.string().optional(),
 	prompt: e.string().optional(),
-	code_challenge_method: e.nativeEnum(Be).optional(),
+	code_challenge_method: e.nativeEnum(ze).optional(),
 	code_challenge: e.string().optional(),
 	username: e.string().optional(),
 	ui_locales: e.string().optional(),
 	max_age: e.number().optional(),
 	acr_values: e.string().optional(),
-	claims: He.optional(),
+	claims: Ve.optional(),
 	vendor_id: e.string().optional()
-}), We = e.object({
+}), Ue = e.object({
 	colors: e.object({
 		primary: e.string(),
 		page_background: e.union([e.string(), e.object({
@@ -639,7 +639,7 @@ var t = e.object({
 		"light",
 		"auto"
 	]).optional()
-}), Ge = e.enum([
+}), We = e.enum([
 	"password_reset",
 	"email_verification",
 	"otp",
@@ -647,11 +647,11 @@ var t = e.object({
 	"authorization_code",
 	"oauth2_state",
 	"ticket"
-]), Ke = e.object({
+]), Ge = e.object({
 	code_id: e.string().openapi({ description: "The code that will be used in for instance an email verification flow" }),
 	login_id: e.string().openapi({ description: "The id of the login session that the code is connected to" }),
 	connection_id: e.string().optional().openapi({ description: "The connection that the code is connected to" }),
-	code_type: Ge,
+	code_type: We,
 	code_verifier: e.string().optional().openapi({ description: "The code verifier used in PKCE in outbound flows" }),
 	code_challenge: e.string().optional().openapi({ description: "The code challenge used in PKCE in outbound flows" }),
 	code_challenge_method: e.enum(["plain", "S256"]).optional().openapi({ description: "The code challenge method used in PKCE in outbound flows" }),
@@ -662,7 +662,7 @@ var t = e.object({
 	expires_at: e.string(),
 	used_at: e.string().optional(),
 	user_id: e.string().optional()
-}), qe = Ke.extend({ created_at: e.string() }), Je = e.object({
+}), Ke = Ge.extend({ created_at: e.string() }), qe = e.object({
 	kid: e.string().optional(),
 	team_id: e.string().optional(),
 	realms: e.string().optional(),
@@ -778,23 +778,23 @@ var t = e.object({
 		"never_on_login"
 	]).optional()
 });
-function B(e) {
+function V(e) {
 	if (e !== null) {
-		if (Array.isArray(e)) return e.filter((e) => e !== null).map(B);
+		if (Array.isArray(e)) return e.filter((e) => e !== null).map(V);
 		if (e && typeof e == "object") {
 			let t = {};
-			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = B(r));
+			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = V(r));
 			return t;
 		}
 		return e;
 	}
 }
-var Ye = e.object({
+var Je = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	display_name: e.string().optional(),
 	strategy: e.string(),
-	options: e.preprocess((e) => e === null ? {} : B(e), Je).default({}),
+	options: e.preprocess((e) => e === null ? {} : V(e), qe).default({}),
 	enabled_clients: e.array(e.string()).default([]).optional(),
 	response_type: e.custom().optional(),
 	response_mode: e.custom().optional(),
@@ -802,11 +802,11 @@ var Ye = e.object({
 	show_as_button: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional(),
 	is_system: e.boolean().optional()
-}), Xe = e.object({
+}), Ye = e.object({
 	id: e.string(),
 	created_at: e.string().transform((e) => e === null ? "" : e),
 	updated_at: e.string().transform((e) => e === null ? "" : e)
-}).extend(Ye.shape), Ze = e.object({
+}).extend(Je.shape), Xe = e.object({
 	domain: e.string(),
 	custom_domain_id: e.string().optional(),
 	type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -820,7 +820,7 @@ var Ye = e.object({
 		"null"
 	]).optional(),
 	domain_metadata: e.record(e.string(), e.string().max(255)).optional()
-}), Qe = e.discriminatedUnion("name", [e.object({
+}), Ze = e.discriminatedUnion("name", [e.object({
 	name: e.literal("txt"),
 	record: e.string(),
 	domain: e.string()
@@ -828,7 +828,7 @@ var Ye = e.object({
 	name: e.literal("http"),
 	http_body: e.string(),
 	http_url: e.string()
-})]), $e = Ze.extend({
+})]), Qe = Xe.extend({
 	custom_domain_id: e.string(),
 	primary: e.boolean(),
 	status: e.enum([
@@ -838,19 +838,22 @@ var Ye = e.object({
 		"ready"
 	]),
 	origin_domain_name: e.string().optional(),
-	verification: e.object({ methods: e.array(Qe) }).optional(),
+	verification: e.object({ methods: e.array(Ze) }).optional(),
 	tls_policy: e.string().optional()
-}), et = $e.extend({ tenant_id: e.string() }), V = e.object({
+}), $e = Qe.extend({ tenant_id: e.string() }), et = e.object({
+	certificate: e.string().regex(/^-----BEGIN CERTIFICATE-----[\s\S]+-----END CERTIFICATE-----\s*$/, "must be PEM-encoded; include the full certificate chain in leaf-first order"),
+	private_key: e.string().regex(/-----BEGIN (RSA |EC |ENCRYPTED )?PRIVATE KEY-----[\s\S]+-----END \1PRIVATE KEY-----\s*$/, "must be a PEM-encoded private key")
+}), H = e.object({
 	id: e.string(),
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0)
-}), H = V.extend({ category: e.literal("BLOCK").optional() }), tt = H.extend({
+}), U = H.extend({ category: e.literal("BLOCK").optional() }), tt = U.extend({
 	type: e.literal("DIVIDER"),
 	config: e.object({ text: e.string().optional() }).optional()
-}), nt = H.extend({
+}), nt = U.extend({
 	type: e.literal("HTML"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), rt = H.extend({
+}), rt = U.extend({
 	type: e.literal("IMAGE"),
 	config: e.object({
 		src: e.string().optional(),
@@ -858,43 +861,43 @@ var Ye = e.object({
 		width: e.number().optional(),
 		height: e.number().optional()
 	}).optional()
-}), it = H.extend({
+}), it = U.extend({
 	type: e.literal("JUMP_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		target_step: e.string().optional()
 	})
-}), at = H.extend({
+}), at = U.extend({
 	type: e.literal("RESEND_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		resend_action: e.string().optional()
 	})
-}), ot = H.extend({
+}), ot = U.extend({
 	type: e.literal("NEXT_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), st = H.extend({
+}), st = U.extend({
 	type: e.literal("PREVIOUS_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), ct = H.extend({
+}), ct = U.extend({
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), U = V.extend({
+}), W = H.extend({
 	category: e.literal("WIDGET").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), lt = U.extend({
+}), lt = W.extend({
 	type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
 	config: e.object({ credential_type: e.string().optional() })
-}), ut = U.extend({
+}), ut = W.extend({
 	type: e.literal("GMAPS_ADDRESS"),
 	config: e.object({ api_key: e.string().optional() })
-}), dt = U.extend({
+}), dt = W.extend({
 	type: e.literal("RECAPTCHA"),
 	config: e.object({ site_key: e.string().optional() })
-}), W = V.extend({
+}), G = H.extend({
 	category: e.literal("FIELD").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
@@ -910,10 +913,10 @@ var Ye = e.object({
 	})).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), ft = W.extend({
+}), ft = G.extend({
 	type: e.literal("BOOLEAN"),
 	config: e.object({ default_value: e.boolean().optional() }).optional()
-}), pt = W.extend({
+}), pt = G.extend({
 	type: e.literal("CARDS"),
 	config: e.object({
 		options: e.array(e.object({
@@ -924,7 +927,7 @@ var Ye = e.object({
 		})).optional(),
 		multi_select: e.boolean().optional()
 	}).optional()
-}), mt = W.extend({
+}), mt = G.extend({
 	type: e.literal("CHOICE"),
 	config: e.object({
 		options: e.array(e.object({
@@ -935,7 +938,7 @@ var Ye = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), ht = W.extend({
+}), ht = G.extend({
 	type: e.literal("CUSTOM"),
 	config: e.object({
 		component: e.string().optional(),
@@ -943,7 +946,7 @@ var Ye = e.object({
 		schema: e.record(e.string(), e.any()).optional(),
 		code: e.string().optional()
 	})
-}), gt = W.extend({
+}), gt = G.extend({
 	type: e.literal("DATE"),
 	config: e.object({
 		format: e.string().optional(),
@@ -951,7 +954,7 @@ var Ye = e.object({
 		max: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), _t = W.extend({
+}), _t = G.extend({
 	type: e.literal("DROPDOWN"),
 	config: e.object({
 		options: e.array(e.object({
@@ -963,26 +966,26 @@ var Ye = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), vt = W.extend({
+}), vt = G.extend({
 	type: e.literal("EMAIL"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), yt = W.extend({
+}), yt = G.extend({
 	type: e.literal("FILE"),
 	config: e.object({
 		accept: e.string().optional(),
 		max_size: e.number().optional(),
 		multiple: e.boolean().optional()
 	}).optional()
-}), bt = W.extend({
+}), bt = G.extend({
 	type: e.literal("LEGAL"),
 	config: e.object({
 		text: e.string(),
 		html: e.boolean().optional()
 	}).optional()
-}), xt = W.extend({
+}), xt = G.extend({
 	type: e.literal("NUMBER"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -991,7 +994,7 @@ var Ye = e.object({
 		step: e.number().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), St = W.extend({
+}), St = G.extend({
 	type: e.literal("PASSWORD"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1000,13 +1003,13 @@ var Ye = e.object({
 		forgot_password_link: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Ct = W.extend({
+}), Ct = G.extend({
 	type: e.literal("PAYMENT"),
 	config: e.object({
 		provider: e.string().optional(),
 		currency: e.string().optional()
 	}).optional()
-}), wt = W.extend({
+}), wt = G.extend({
 	type: e.literal("SOCIAL"),
 	config: e.object({
 		providers: e.array(e.string()).optional(),
@@ -1018,7 +1021,7 @@ var Ye = e.object({
 			href: e.string().optional()
 		})).optional()
 	}).optional()
-}), Tt = W.extend({
+}), Tt = G.extend({
 	type: e.literal("TEL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1026,7 +1029,7 @@ var Ye = e.object({
 		default_value: e.string().optional(),
 		allow_email: e.boolean().optional()
 	}).optional()
-}), Et = W.extend({
+}), Et = G.extend({
 	type: e.literal("TEXT"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1034,13 +1037,13 @@ var Ye = e.object({
 		max_length: e.number().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Dt = W.extend({
+}), Dt = G.extend({
 	type: e.literal("COUNTRY"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Ot = W.extend({
+}), Ot = G.extend({
 	type: e.literal("URL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1077,7 +1080,7 @@ var Ye = e.object({
 	Tt,
 	Et,
 	Ot
-]), G = e.union([
+]), K = e.union([
 	kt,
 	At,
 	jt
@@ -1104,13 +1107,13 @@ var Ye = e.object({
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0),
 	customizations: e.record(e.string(), e.any()).optional()
-}), K = e.object({
+}), q = e.object({
 	x: e.number(),
 	y: e.number()
 }), Pt = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: K,
+	coordinates: q,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
 		flow_id: e.string().max(30),
@@ -1119,7 +1122,7 @@ var Ye = e.object({
 }), Ft = e.object({
 	id: e.string(),
 	type: e.literal("ROUTER"),
-	coordinates: K,
+	coordinates: q,
 	alias: e.string().min(1).max(150),
 	config: e.object({
 		rules: e.array(e.object({
@@ -1133,10 +1136,10 @@ var Ye = e.object({
 }), It = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: K,
+	coordinates: q,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
-		components: e.array(G),
+		components: e.array(K),
 		next_node: e.string().optional()
 	})
 }), Lt = e.discriminatedUnion("type", [
@@ -1161,7 +1164,7 @@ var Ye = e.object({
 			value: e.string()
 		})).optional(),
 		next_node: e.string().optional(),
-		coordinates: K.optional()
+		coordinates: q.optional()
 	}).optional(),
 	ending: e.object({
 		redirection: e.object({
@@ -1169,7 +1172,7 @@ var Ye = e.object({
 			target: e.string().optional()
 		}).optional(),
 		after_submit: e.object({ flow_id: e.string().optional() }).optional(),
-		coordinates: K.optional(),
+		coordinates: q.optional(),
 		resume_flow: e.boolean().optional()
 	}).optional(),
 	style: e.object({ css: e.string().optional() }).optional(),
@@ -1197,7 +1200,7 @@ var Ye = e.object({
 	method: e.enum(["POST", "GET"]),
 	title: e.string().optional(),
 	description: e.string().optional(),
-	components: e.array(G),
+	components: e.array(K),
 	messages: e.array(Bt).optional(),
 	links: e.array(Vt).optional(),
 	footer: e.string().optional()
@@ -1238,7 +1241,7 @@ var Kt = e.enum([
 	"credentials-exchange",
 	"pre-user-registration",
 	"post-user-registration"
-]), q = e.enum([
+]), J = e.enum([
 	"ensure-username",
 	"set-preferred-username",
 	"account-linking"
@@ -1262,26 +1265,26 @@ var Kt = e.enum([
 			"post-user-update"
 		]
 	}
-}, J = {
+}, Y = {
 	enabled: e.boolean().default(!1),
 	synchronous: e.boolean().default(!1),
 	priority: e.number().optional(),
 	hook_id: e.string().optional(),
 	metadata: e.record(e.string(), e.unknown()).optional()
 }, Zt = e.object({
-	...J,
+	...Y,
 	trigger_id: Kt,
 	url: e.string()
 }), Qt = e.object({
-	...J,
+	...Y,
 	trigger_id: qt,
 	form_id: e.string()
 }), $t = e.object({
-	...J,
+	...Y,
 	trigger_id: Jt,
-	template_id: q
+	template_id: J
 }), en = e.object({
-	...J,
+	...Y,
 	trigger_id: Yt,
 	code_id: e.string()
 }), tn = e.union([
@@ -1290,25 +1293,25 @@ var Kt = e.enum([
 	$t,
 	en
 ]), nn = e.object({
-	...J,
+	...Y,
 	trigger_id: Kt
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	url: e.string()
 }), rn = e.object({
-	...J,
+	...Y,
 	trigger_id: qt
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	form_id: e.string()
 }), an = e.object({
-	...J,
+	...Y,
 	trigger_id: Jt
 }).extend(t.shape).extend({
 	hook_id: e.string(),
-	template_id: q
+	template_id: J
 }), on = e.object({
-	...J,
+	...Y,
 	trigger_id: Yt
 }).extend(t.shape).extend({
 	hook_id: e.string(),
@@ -1324,7 +1327,7 @@ var Kt = e.enum([
 }), ln = cn.extend({
 	id: e.string(),
 	tenant_id: e.string()
-}).extend(t.shape), un = e.object({ name: e.string().optional() }), dn = e.object({ email: e.string().optional() }), Y = e.object({
+}).extend(t.shape), un = e.object({ name: e.string().optional() }), dn = e.object({ email: e.string().optional() }), fn = e.object({
 	id: e.string().optional(),
 	organization_id: e.string().max(50),
 	inviter: un,
@@ -1337,13 +1340,13 @@ var Kt = e.enum([
 	ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
 	roles: e.array(e.string()).default([]).optional(),
 	send_invitation_email: e.boolean().default(!0).optional()
-}), fn = e.object({
+}), pn = e.object({
 	id: e.string(),
 	organization_id: e.string().max(50),
 	created_at: e.string().datetime(),
 	expires_at: e.string().datetime(),
 	ticket_id: e.string().optional()
-}).extend(Y.omit({ id: !0 }).shape), pn = e.object({
+}).extend(fn.omit({ id: !0 }).shape), mn = e.object({
 	alg: e.enum([
 		"RS256",
 		"RS384",
@@ -1384,7 +1387,7 @@ var Kt = e.enum([
 		path: [r],
 		message: `EC JWK is missing required member '${r}'`
 	});
-}), mn = e.object({ keys: e.array(pn) }), hn = e.object({
+}), hn = e.object({ keys: e.array(mn) }), gn = e.object({
 	issuer: e.string(),
 	authorization_endpoint: e.string(),
 	token_endpoint: e.string(),
@@ -1408,29 +1411,29 @@ var Kt = e.enum([
 	request_object_signing_alg_values_supported: e.array(e.string()).optional(),
 	token_endpoint_auth_signing_alg_values_supported: e.array(e.string()),
 	client_id_metadata_document_supported: e.boolean().optional()
-}), gn = /* @__PURE__ */ function(e) {
-	return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
-}({}), _n = e.nativeEnum(gn), vn = e.object({
+}), _n = /* @__PURE__ */ function(e) {
+	return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.AWAITING_CONSENT = "awaiting_consent", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
+}({}), vn = e.nativeEnum(_n), yn = e.object({
 	strategy: e.string(),
 	strategy_type: e.string()
-}), yn = e.object({
+}), bn = e.object({
 	csrf_token: e.string(),
 	auth0Client: e.string().optional(),
-	authParams: Ue,
+	authParams: He,
 	expires_at: e.string(),
 	deleted_at: e.string().optional(),
 	ip: e.string().optional(),
 	useragent: e.string().optional(),
 	session_id: e.string().optional(),
 	authorization_url: e.string().optional(),
-	state: _n.optional().default("pending"),
+	state: vn.optional().default("pending"),
 	state_data: e.string().optional(),
 	failure_reason: e.string().optional(),
 	user_id: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: vn.optional(),
+	auth_strategy: yn.optional(),
 	authenticated_at: e.string().optional()
-}).openapi({ description: "This represents a login sesion" }), bn = yn.extend({
+}).openapi({ description: "This represents a login sesion" }), xn = bn.extend({
 	id: e.string().openapi({ description: "This is is used as the state in the universal login" }),
 	created_at: e.string(),
 	updated_at: e.string()
@@ -1592,7 +1595,7 @@ var Kt = e.enum([
 	WARNING_DURING_LOGIN: "w",
 	WARNING_SENDING_NOTIFICATION: "wn",
 	WARNING_USER_MANAGEMENT: "wum"
-}, xn = e.string().refine((e) => Object.values(X).includes(e), { message: "Invalid log type" }), Sn = {
+}, Sn = e.string().refine((e) => Object.values(X).includes(e), { message: "Invalid log type" }), Cn = {
 	[X.ACLS_SUMMARY]: "ACLs Summary",
 	[X.ACTIONS_EXECUTION_FAILED]: "Actions Execution Failed",
 	[X.API_LIMIT]: "API Rate Limit Reached",
@@ -1750,30 +1753,30 @@ var Kt = e.enum([
 	[X.WARNING_DURING_LOGIN]: "Warning During Login",
 	[X.WARNING_SENDING_NOTIFICATION]: "Warning Sending Notification",
 	[X.WARNING_USER_MANAGEMENT]: "Warning User Management"
-}, Cn = (() => {
+}, wn = (() => {
 	let e = {};
 	for (let [t, n] of Object.entries(X)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
 	return e;
 })();
-function wn(e) {
-	return Sn[e] ?? e;
-}
 function Tn(e) {
-	return Cn[e] ?? "other";
+	return Cn[e] ?? e;
+}
+function En(e) {
+	return wn[e] ?? "other";
 }
-var En = e.object({
+var Dn = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.object({ node: e.string().optional() }).optional()
-}), Dn = e.object({
+}), On = e.object({
 	country_code: e.string().length(2),
 	city_name: e.string(),
 	latitude: e.string(),
 	longitude: e.string(),
 	time_zone: e.string(),
 	continent_code: e.string()
-}), On = e.object({
-	type: xn,
+}), kn = e.object({
+	type: Sn,
 	date: e.string(),
 	description: e.string().optional(),
 	ip: e.string().optional(),
@@ -1791,10 +1794,10 @@ var En = e.object({
 	strategy: e.string().optional(),
 	strategy_type: e.string().optional(),
 	hostname: e.string().optional(),
-	auth0_client: En.optional(),
+	auth0_client: Dn.optional(),
 	log_id: e.string().optional(),
-	location_info: Dn.optional()
-}), kn = On.extend({ log_id: e.string() }), An = e.enum([
+	location_info: On.optional()
+}), An = kn.extend({ log_id: e.string() }), jn = e.enum([
 	"http",
 	"eventbridge",
 	"eventgrid",
@@ -1805,44 +1808,44 @@ var En = e.object({
 	"active",
 	"paused",
 	"suspended"
-]), jn = e.object({
+]), Mn = e.object({
 	type: e.string(),
 	name: e.string()
-}), Mn = e.object({
+}), Nn = e.object({
 	name: e.string(),
-	type: An,
+	type: jn,
 	status: Z.optional(),
 	sink: e.record(e.string(), e.unknown()),
-	filters: e.array(jn).optional(),
+	filters: e.array(Mn).optional(),
 	isPriority: e.boolean().optional()
-}), Nn = Mn.extend({
+}), Pn = Nn.extend({
 	id: e.string(),
 	status: Z,
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Pn = e.enum([
+}), Fn = e.enum([
 	"auth0",
 	"cognito",
 	"okta",
 	"oidc"
-]), Fn = e.object({
+]), In = e.object({
 	domain: e.string(),
 	client_id: e.string(),
 	client_secret: e.string(),
 	audience: e.string().optional(),
 	scope: e.string().optional()
-}), In = e.object({
+}), Ln = e.object({
 	id: e.string().optional(),
 	name: e.string(),
-	provider: Pn,
+	provider: Fn,
 	connection: e.string(),
 	enabled: e.boolean().default(!0),
-	credentials: Fn
-}), Ln = e.object({
+	credentials: In
+}), Rn = e.object({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(In.shape), Rn = e.object({
+}).extend(Ln.shape), zn = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	admin_notification_frequency: e.array(e.string()).optional(),
@@ -1851,13 +1854,13 @@ var En = e.object({
 		"pre-user-registration": e.object({ shields: e.array(e.string()).optional() }).optional(),
 		"pre-change-password": e.object({ shields: e.array(e.string()).optional() }).optional()
 	}).optional()
-}), zn = e.object({
+}), Bn = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
 	mode: e.string().optional(),
 	max_attempts: e.number().optional()
-}), Bn = e.object({
+}), Vn = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
@@ -1871,28 +1874,28 @@ var En = e.object({
 			rate: e.number().optional()
 		}).optional()
 	}).optional()
-}), Vn = e.object({
-	breached_password_detection: Rn.optional(),
-	brute_force_protection: zn.optional(),
-	suspicious_ip_throttling: Bn.optional()
 }), Hn = e.object({
+	breached_password_detection: zn.optional(),
+	brute_force_protection: Bn.optional(),
+	suspicious_ip_throttling: Vn.optional()
+}), Un = e.object({
 	id: e.string().optional(),
 	user_id: e.string(),
 	password: e.string(),
 	algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
 	is_current: e.boolean().default(!0)
-}), Un = Hn.extend({
+}), Wn = Un.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), Wn = e.object({
+}), Gn = e.object({
 	initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
 	initial_ip: e.string().describe("First IP address associated with this session"),
 	initial_asn: e.string().describe("First autonomous system number associated with this session"),
 	last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
 	last_ip: e.string().describe("Last IP address from which this user logged in"),
 	last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), Gn = e.object({
+}), Kn = e.object({
 	id: e.string(),
 	revoked_at: e.string().optional(),
 	used_at: e.string().optional(),
@@ -1900,14 +1903,14 @@ var En = e.object({
 	expires_at: e.string().optional(),
 	login_session_id: e.string(),
 	idle_expires_at: e.string().optional(),
-	device: Wn.describe("Metadata related to the device used in the session"),
+	device: Gn.describe("Metadata related to the device used in the session"),
 	clients: e.array(e.string()).describe("List of client details for the session")
-}), Kn = e.object({
+}), qn = e.object({
 	created_at: e.string(),
 	updated_at: e.string(),
 	authenticated_at: e.string(),
 	last_interaction_at: e.string()
-}).extend(Gn.shape), qn = e.object({
+}).extend(Kn.shape), Jn = e.object({
 	kid: e.string().openapi({ description: "The key id of the signing key" }),
 	tenant_id: e.string().optional().openapi({ description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped." }),
 	cert: e.string().openapi({ description: "The public certificate of the signing key" }),
@@ -1923,7 +1926,7 @@ var En = e.object({
 	revoked_at: e.string().optional().openapi({ description: "The date and time when the key was revoked" }),
 	connection: e.string().optional().openapi({ description: "The connection identifier associated with the key" }),
 	type: e.enum(["jwt_signing", "saml_encryption"]).openapi({ description: "The type of the signing key" })
-}), Jn = e.object({
+}), Yn = e.object({
 	id: e.string().optional(),
 	audience: e.string(),
 	friendly_name: e.string(),
@@ -2023,7 +2026,7 @@ var En = e.object({
 	mtls: e.object({ enable_endpoint_aliases: e.boolean().optional() }).nullish(),
 	pushed_authorization_requests_supported: e.boolean().optional(),
 	authorization_response_iss_parameter_supported: e.boolean().optional(),
-	attack_protection: Vn.optional(),
+	attack_protection: Hn.optional(),
 	mfa: e.object({
 		policy: e.enum(["never", "always"]).default("never").optional(),
 		factors: e.object({
@@ -2050,15 +2053,15 @@ var En = e.object({
 		}).optional(),
 		phone_message: e.object({ message: e.string().optional() }).optional()
 	}).optional()
-}), Yn = e.object({
+}), Xn = e.object({
 	created_at: e.string().nullable().transform((e) => e ?? ""),
 	updated_at: e.string().nullable().transform((e) => e ?? "")
-}).extend(Jn.shape).extend({
+}).extend(Yn.shape).extend({
 	id: e.string(),
 	is_control_plane: e.boolean().optional()
-}), Xn = /* @__PURE__ */ function(e) {
+}), Zn = /* @__PURE__ */ function(e) {
 	return e.RefreshToken = "refresh_token", e.AuthorizationCode = "authorization_code", e.ClientCredential = "client_credentials", e.Passwordless = "passwordless", e.Password = "password", e.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", e;
-}({}), Zn = e.object({
+}({}), Qn = e.object({
 	access_token: e.string(),
 	id_token: e.string().optional(),
 	scope: e.string().optional(),
@@ -2073,7 +2076,7 @@ e.object({
 });
 //#endregion
 //#region src/types/Theme.ts
-var Qn = e.object({
+var $n = e.object({
 	button_border_radius: e.number(),
 	button_border_weight: e.number(),
 	buttons_style: e.enum([
@@ -2091,7 +2094,7 @@ var Qn = e.object({
 	show_widget_shadow: e.boolean(),
 	widget_border_weight: e.number(),
 	widget_corner_radius: e.number()
-}), $n = e.object({
+}), er = e.object({
 	base_focus_color: e.string(),
 	base_hover_color: e.string(),
 	body_text: e.string(),
@@ -2118,7 +2121,7 @@ var Qn = e.object({
 }), Q = e.object({
 	bold: e.boolean(),
 	size: e.number()
-}), er = e.object({
+}), tr = e.object({
 	body_text: Q,
 	buttons_text: Q,
 	font_url: e.string(),
@@ -2128,7 +2131,7 @@ var Qn = e.object({
 	reference_text_size: e.number(),
 	subtitle: Q,
 	title: Q
-}), tr = e.object({
+}), nr = e.object({
 	background_color: e.string(),
 	background_image_url: e.string(),
 	page_layout: e.enum([
@@ -2141,7 +2144,7 @@ var Qn = e.object({
 		"chip",
 		"none"
 	]).optional()
-}), nr = e.object({
+}), rr = e.object({
 	header_text_alignment: e.enum([
 		"center",
 		"left",
@@ -2156,44 +2159,48 @@ var Qn = e.object({
 	]),
 	logo_url: e.string(),
 	social_buttons_layout: e.enum(["bottom", "top"])
-}), rr = e.object({
-	borders: Qn,
-	colors: $n,
+}), ir = e.object({
+	borders: $n,
+	colors: er,
 	displayName: e.string(),
-	fonts: er,
-	page_background: tr,
-	widget: nr
-}), ir = rr.extend({ themeId: e.string() }), ar = e.object({
+	fonts: tr,
+	page_background: nr,
+	widget: rr
+}), ar = ir.extend({ themeId: e.string() }), or = e.object({
 	universal_login_experience: e.enum(["new", "classic"]).default("new"),
 	identifier_first: e.boolean().default(!0),
 	password_first: e.boolean().default(!1),
 	webauthn_platform_first_factor: e.boolean()
-}), or = e.object({
+}), sr = e.object({
 	hosts: e.array(e.string()).optional(),
 	methods: e.array(e.string()).optional(),
 	path: e.string().default("/*"),
 	headers: e.record(e.string(), e.string()).optional(),
 	query: e.record(e.string(), e.string()).optional()
-}), sr = e.object({
+}), cr = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
 }), $ = e.object({
+	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
-	match: or,
-	handlers: e.array(sr).min(1)
-}), cr = $.extend({
+	match: sr,
+	handlers: e.array(cr).min(1)
+}), lr = $.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), lr = $.partial().omit({ custom_domain_id: !0 }), ur = e.object({
+}), ur = $.partial().omit({
+	id: !0,
+	custom_domain_id: !0
+}), dr = e.object({
 	name: e.string(),
 	enabled: e.boolean().optional().default(!0),
 	default_from_address: e.string().optional(),
 	credentials: e.record(e.string(), e.unknown()),
 	settings: e.object({}).optional()
-}), dr = e.enum([
+}), fr = e.enum([
 	"verify_email",
 	"verify_email_by_code",
 	"reset_email",
@@ -2206,8 +2213,8 @@ var Qn = e.object({
 	"change_password",
 	"password_reset",
 	"user_invitation"
-]), fr = e.object({
-	template: dr,
+]), pr = e.object({
+	template: fr,
 	body: e.string(),
 	from: e.string(),
 	subject: e.string(),
@@ -2216,7 +2223,7 @@ var Qn = e.object({
 	urlLifetimeInSeconds: e.number().int().nonnegative().optional(),
 	includeEmailInRedirect: e.boolean().default(!1),
 	enabled: e.boolean().default(!0)
-}), pr = e.object({
+}), mr = e.object({
 	id: e.string(),
 	login_id: e.string(),
 	user_id: e.string(),
@@ -2224,7 +2231,7 @@ var Qn = e.object({
 	expires_at: e.string().optional(),
 	idle_expires_at: e.string().optional(),
 	last_exchanged_at: e.string().optional(),
-	device: Wn,
+	device: Gn,
 	resource_servers: e.array(e.object({
 		audience: e.string(),
 		scopes: e.string()
@@ -2235,19 +2242,19 @@ var Qn = e.object({
 	family_id: e.string().optional(),
 	rotated_to: e.string().optional(),
 	rotated_at: e.string().optional()
-}), mr = pr.extend({
+}), hr = mr.extend({
 	created_at: e.string(),
 	revoked_at: e.string().optional()
-}), hr = e.object({
+}), gr = e.object({
 	to: e.string(),
 	message: e.string()
-}), gr = e.object({
+}), _r = e.object({
 	name: e.string(),
 	options: e.object({})
-}), _r = e.object({
+}), vr = e.object({
 	value: e.string(),
 	description: e.string().optional()
-}), vr = e.object({
+}), yr = e.object({
 	token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
 	enforce_policies: e.boolean().optional(),
 	allow_skipping_userinfo: e.boolean().optional(),
@@ -2255,11 +2262,11 @@ var Qn = e.object({
 	persist_client_authorization: e.boolean().optional(),
 	enable_introspection_endpoint: e.boolean().optional(),
 	mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
-}), yr = e.object({
+}), br = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	identifier: e.string(),
-	scopes: e.array(_r).optional(),
+	scopes: e.array(vr).optional(),
 	signing_alg: e.string().optional(),
 	signing_secret: e.string().optional(),
 	token_lifetime: e.number().default(86400),
@@ -2267,25 +2274,30 @@ var Qn = e.object({
 	skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
 	allow_offline_access: e.boolean().optional(),
 	verificationKey: e.string().optional(),
-	options: vr.optional(),
+	options: yr.optional(),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional()
-}), br = yr.extend({
+}), xr = br.extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), xr = e.array(br), Sr = e.object({
+}), Sr = e.array(xr), Cr = e.object({
 	role_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
-}), Cr = Sr.extend({ created_at: e.string() }), wr = e.array(Cr), Tr = e.object({
+}), wr = Cr.extend({ created_at: e.string() }), Tr = e.array(wr), Er = e.object({
+	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
+	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
+	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
+	scope: e.array(e.string()).default([]).openapi({ description: "The list of OAuth scopes the user has consented to" })
+}), Dr = Er.extend({ id: e.string() }), Or = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
 	organization_id: e.string().optional()
-}), Er = Tr.extend({
+}), kr = Or.extend({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
-}), Dr = e.array(Er), Or = e.object({
+}), Ar = e.array(kr), jr = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -2293,65 +2305,65 @@ var Qn = e.object({
 	description: e.string().nullable().optional(),
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
-}), kr = e.array(Or), Ar = e.object({
+}), Mr = e.array(jr), Nr = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
-}), jr = Ar.extend({
+}), Pr = Nr.extend({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
-}), Mr = e.array(jr), Nr = e.object({
+}), Fr = e.array(Pr), Ir = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional().openapi({ description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios." })
-}), Pr = Nr.extend({
+}), Lr = Ir.extend({
 	id: e.string().openapi({ description: "The unique identifier of the role" }),
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Fr = e.array(Pr), Ir = e.object({
+}), Rr = e.array(Lr), zr = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), Lr = e.object({
+}).optional(), Br = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), Rr = e.object({ client_credentials: e.object({
+}), Vr = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
-}).optional() }).optional(), zr = e.object({
+}).optional() }).optional(), Hr = e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: Ir,
+	branding: zr,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(Lr).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: Rr
-}), Br = zr.extend(t.shape).extend({
+	enabled_connections: e.array(Br).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: Vr
+}), Ur = Hr.extend(t.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
-}), Vr = e.object({
+}), Wr = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
 	is_signup_enabled: e.boolean().optional().default(!0)
-}), Hr = Vr.extend({
+}), Gr = Wr.extend({
 	connection: e.object({
 		name: e.string().optional(),
 		strategy: e.string().optional()
 	}).optional(),
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Ur = e.array(Hr), Wr = e.object({
+}), Kr = e.array(Gr), qr = e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
-}), Gr = Wr.extend(t.shape).extend({ id: e.string() }), Kr = e.object({
+}), Jr = qr.extend(t.shape).extend({ id: e.string() }), Yr = e.object({
 	idle_session_lifetime: e.number().default(72),
 	session_lifetime: e.number().default(168),
 	session_cookie: e.object({ mode: e.enum(["persistent", "non-persistent"]).optional() }).optional(),
@@ -2430,7 +2442,7 @@ var Qn = e.object({
 		}).optional(),
 		phone_message: e.object({ message: e.string().optional() }).optional()
 	}).optional()
-}), qr = e.object({
+}), Xr = e.object({
 	date: e.string().openapi({
 		description: "Date these events occurred in ISO 8601 format",
 		example: "2025-12-19"
@@ -2455,55 +2467,55 @@ var Qn = e.object({
 		description: "Approximate date and time the first event occurred in ISO 8601 format",
 		example: "2025-12-19T00:00:00.000Z"
 	})
-}), Jr = e.number().openapi({
+}), Zr = e.number().openapi({
 	description: "Number of active users in the last 30 days",
 	example: 1234
-}), Yr = e.enum([
+}), Qr = e.enum([
 	"active-users",
 	"logins",
 	"signups",
 	"refresh-tokens",
 	"sessions"
-]), Xr = e.enum([
+]), $r = e.enum([
 	"hour",
 	"day",
 	"week",
 	"month"
-]), Zr = e.enum([
+]), ei = e.enum([
 	"time",
 	"connection",
 	"client_id",
 	"user_type",
 	"event"
-]), Qr = e.enum([
+]), ti = e.enum([
 	"password",
 	"social",
 	"passwordless",
 	"enterprise"
-]), $r = e.object({
+]), ni = e.object({
 	name: e.string(),
 	type: e.string()
-}), ei = e.object({
+}), ri = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
-}), ti = e.object({
-	meta: e.array($r),
+}), ii = e.object({
+	meta: e.array(ni),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: ei.optional()
-}), ni = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), ri = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+	statistics: ri.optional()
+}), ai = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), oi = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
 		additionalProperties: { type: "string" }
 	}
-}), ii = e.object({
-	prompt: ni,
+}), si = e.object({
+	prompt: ai,
 	language: e.string(),
-	custom_text: ri
-}), ai = {
+	custom_text: oi
+}), ci = {
 	EMAIL: "email",
 	SMS: "sms",
 	USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2518,11 +2530,11 @@ var Qn = e.object({
 	SAMLP: "samlp",
 	WAAD: "waad",
 	ADFS: "adfs"
-}, oi = {
+}, li = {
 	DATABASE: "database",
 	SOCIAL: "social",
 	PASSWORDLESS: "passwordless"
-}, si = e.enum([
+}, ui = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -2530,9 +2542,9 @@ var Qn = e.object({
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), ci = e.object({
+]), di = e.object({
 	user_id: e.string(),
-	type: si,
+	type: ui,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
 	credential_id: e.string().optional(),
@@ -2543,7 +2555,7 @@ var Qn = e.object({
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function li(t, n) {
+function fi(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -2566,14 +2578,14 @@ function li(t, n) {
 		path: ["public_key"]
 	}));
 }
-var ui = ci.superRefine(li), di = ci.extend({
+var pi = di.superRefine(fi), mi = di.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(li);
+}).superRefine(fi);
 //#endregion
 //#region src/utils/user-id.ts
-function fi(e) {
+function hi(e) {
 	let [t, n] = e.split("|");
 	if (!t || !n) throw Error(`Invalid user_id: ${e}`);
 	return {
@@ -2583,7 +2595,7 @@ function fi(e) {
 }
 //#endregion
 //#region src/utils/passthrough.ts
-function pi(e) {
+function gi(e) {
 	let { primary: t, secondaries: n, syncMethods: r = [
 		"create",
 		"rawCreate",
@@ -2617,12 +2629,12 @@ function pi(e) {
 		} : i.bind(e) : i;
 	} });
 }
-function mi(e) {
+function _i(e) {
 	return e;
 }
 //#endregion
 //#region src/utils/connection-attributes.ts
-function hi(e) {
+function vi(e) {
 	let t = e?.options;
 	if (!t) return {
 		usernameIdentifierActive: !1,
@@ -2645,8 +2657,8 @@ function hi(e) {
 }
 //#endregion
 //#region src/utils/guards.ts
-function gi(e) {
+function yi(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
 //#endregion
-export { ve as Auth0ActionEnum, En as Auth0Client, ze as AuthorizationResponseMode, Re as AuthorizationResponseType, Be as CodeChallengeMethod, D as ComponentCategory, E as ComponentType, ye as EmailActionEnum, Mt as FORM_FIELD_TYPES, _e as FlowActionTypeEnum, Xn as GrantType, Dn as LocationInfo, X as LogTypes, gn as LoginSessionState, Ne as NodeType, u as RedirectTargetEnum, ai as Strategy, oi as StrategyType, r as actionDependencySchema, l as actionExecutionErrorSchema, ae as actionExecutionInsertSchema, ne as actionExecutionLogEntrySchema, re as actionExecutionLogsSchema, te as actionExecutionResultSchema, ie as actionExecutionSchema, c as actionExecutionStatusSchema, s as actionExecutionTriggerIdSchema, a as actionInsertSchema, L as actionNodeSchema, ee as actionSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, oe as actionVersionInsertSchema, se as actionVersionSchema, Jr as activeUsersResponseSchema, le as actorSchema, g as addressSchema, $r as analyticsColumnMetaSchema, Zr as analyticsGroupBySchema, Xr as analyticsIntervalSchema, ti as analyticsQueryResponseSchema, Yr as analyticsResourceSchema, ei as analyticsStatisticsSchema, Qr as analyticsUserTypeSchema, Vn as attackProtectionSchema, ce as auditCategorySchema, he as auditEventInsertSchema, ge as auditEventSchema, me as auth0ClientSchema, Le as auth0FlowInsertSchema, Ie as auth0FlowSchema, we as auth0QuerySchema, xe as auth0UpdateUserActionSchema, Ee as auth0UserResponseSchema, Ue as authParamsSchema, ui as authenticationMethodInsertSchema, di as authenticationMethodSchema, si as authenticationMethodTypeSchema, _ as baseUserSchema, kt as blockComponentSchema, Qn as bordersSchema, We as brandingSchema, Rn as breachedPasswordDetectionSchema, zn as bruteForceProtectionSchema, A as buttonComponentSchema, He as claimsRequestSchema, x as clientGrantInsertSchema, je as clientGrantListSchema, S as clientGrantSchema, b as clientInsertSchema, w as clientRegistrationTokenInsertSchema, Me as clientRegistrationTokenSchema, C as clientRegistrationTokenTypeSchema, Ae as clientSchema, Ke as codeInsertSchema, qe as codeSchema, Ge as codeTypeSchema, $n as colorsSchema, Bt as componentMessageSchema, P as componentSchema, Ye as connectionInsertSchema, Je as connectionOptionsSchema, Xe as connectionSchema, T as coordinatesSchema, pi as createPassthroughAdapter, mi as createWriteOnlyAdapter, Ze as customDomainInsertSchema, $e as customDomainSchema, et as customDomainWithTenantIdSchema, ii as customTextEntrySchema, ri as customTextSchema, qr as dailyStatsSchema, ur as emailProviderSchema, dr as emailTemplateNameSchema, fr as emailTemplateSchema, be as emailVerificationRulesSchema, Se as emailVerifyActionSchema, Fe as endingSchema, jt as fieldComponentSchema, f as flowActionStepSchema, p as flowInsertSchema, Ce as flowSchema, M as flowsFieldComponentSchema, I as flowsFlowNodeSchema, F as flowsStepNodeSchema, Q as fontDetailsSchema, er as fontsSchema, Nt as formControlSchema, Rt as formInsertSchema, G as formNodeComponentDefinition, Lt as formNodeSchema, zt as formSchema, N as genericComponentSchema, R as genericNodeSchema, hi as getConnectionIdentifierConfig, Tn as getLogTypeCategory, wn as getLogTypeDescription, sr as handlerConfigSchema, cn as hookCodeInsertSchema, ln as hookCodeSchema, tn as hookInsertSchema, sn as hookSchema, q as hookTemplateId, Xt as hookTemplates, h as identitySchema, Y as inviteInsertSchema, fn as inviteSchema, dn as inviteeSchema, un as inviterSchema, Ut as isBlockComponent, Gt as isFieldComponent, gi as isPlainObject, Wt as isWidgetComponent, mn as jwksKeySchema, pn as jwksSchema, j as legalComponentSchema, pe as locationInfoSchema, On as logInsertSchema, kn as logSchema, jn as logStreamFilterSchema, Mn as logStreamInsertSchema, Nn as logStreamSchema, Z as logStreamStatusSchema, An as logStreamTypeSchema, Cn as logTypeCategories, Sn as logTypeDescriptions, vn as loginSessionAuthStrategySchema, yn as loginSessionInsertSchema, bn as loginSessionSchema, _n as loginSessionStateSchema, or as matchSchema, Pn as migrationProviderTypeSchema, Fn as migrationSourceCredentialsSchema, In as migrationSourceInsertSchema, Ln as migrationSourceSchema, z as nodeSchema, hn as openIDConfigurationSchema, Ir as organizationBrandingSchema, Vr as organizationConnectionInsertSchema, Ur as organizationConnectionListSchema, Hr as organizationConnectionSchema, Lr as organizationEnabledConnectionSchema, zr as organizationInsertSchema, Br as organizationSchema, Rr as organizationTokenQuotaSchema, tr as pageBackgroundSchema, fi as parseUserId, Hn as passwordInsertSchema, Un as passwordSchema, m as profileDataSchema, ni as promptScreenSchema, ar as promptSettingSchema, $ as proxyRouteInsertSchema, cr as proxyRouteSchema, lr as proxyRouteUpdateSchema, d as redirectActionSchema, pr as refreshTokenInsertSchema, mr as refreshTokenSchema, de as requestContextSchema, yr as resourceServerInsertSchema, xr as resourceServerListSchema, vr as resourceServerOptionsSchema, br as resourceServerSchema, _r as resourceServerScopeSchema, fe as responseContextSchema, k as richTextComponentSchema, Nr as roleInsertSchema, Fr as roleListSchema, Sr as rolePermissionInsertSchema, wr as rolePermissionListSchema, Cr as rolePermissionSchema, Pr as roleSchema, Vt as screenLinkSchema, Gn as sessionInsertSchema, Kn as sessionSchema, qn as signingKeySchema, gr as smsProviderSchema, hr as smsSendParamsSchema, Pe as startSchema, Bn as suspiciousIpThrottlingSchema, ue as targetSchema, Jn as tenantInsertSchema, Yn as tenantSchema, Kr as tenantSettingsSchema, rr as themeInsertSchema, ir as themeSchema, Zn as tokenResponseSchema, Te as totalsSchema, Ht as uiScreenSchema, v as userInsertSchema, Wr as userOrganizationInsertSchema, Gr as userOrganizationSchema, Tr as userPermissionInsertSchema, Dr as userPermissionListSchema, Er as userPermissionSchema, kr as userPermissionWithDetailsListSchema, Or as userPermissionWithDetailsSchema, De as userResponseSchema, Ar as userRoleInsertSchema, Mr as userRoleListSchema, jr as userRoleSchema, y as userSchema, Qe as verificationMethodsSchema, At as widgetComponentSchema, nr as widgetSchema };
+export { he as Auth0ActionEnum, Dn as Auth0Client, Re as AuthorizationResponseMode, Le as AuthorizationResponseType, ze as CodeChallengeMethod, M as ComponentCategory, j as ComponentType, ge as EmailActionEnum, Mt as FORM_FIELD_TYPES, me as FlowActionTypeEnum, Zn as GrantType, On as LocationInfo, X as LogTypes, _n as LoginSessionState, Oe as NodeType, g as RedirectTargetEnum, ci as Strategy, li as StrategyType, r as actionDependencySchema, l as actionExecutionErrorSchema, ae as actionExecutionInsertSchema, ne as actionExecutionLogEntrySchema, re as actionExecutionLogsSchema, te as actionExecutionResultSchema, ie as actionExecutionSchema, c as actionExecutionStatusSchema, s as actionExecutionTriggerIdSchema, a as actionInsertSchema, Ae as actionNodeSchema, ee as actionSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, u as actionVersionInsertSchema, oe as actionVersionSchema, Zr as activeUsersResponseSchema, ce as actorSchema, x as addressSchema, ni as analyticsColumnMetaSchema, ei as analyticsGroupBySchema, $r as analyticsIntervalSchema, ii as analyticsQueryResponseSchema, Qr as analyticsResourceSchema, ri as analyticsStatisticsSchema, ti as analyticsUserTypeSchema, Hn as attackProtectionSchema, se as auditCategorySchema, f as auditEventInsertSchema, pe as auditEventSchema, d as auth0ClientSchema, Ie as auth0FlowInsertSchema, Fe as auth0FlowSchema, ve as auth0QuerySchema, m as auth0UpdateUserActionSchema, xe as auth0UserResponseSchema, He as authParamsSchema, pi as authenticationMethodInsertSchema, mi as authenticationMethodSchema, ui as authenticationMethodTypeSchema, S as baseUserSchema, kt as blockComponentSchema, $n as bordersSchema, Ue as brandingSchema, zn as breachedPasswordDetectionSchema, Bn as bruteForceProtectionSchema, F as buttonComponentSchema, Ve as claimsRequestSchema, E as clientGrantInsertSchema, Ee as clientGrantListSchema, D as clientGrantSchema, T as clientInsertSchema, k as clientRegistrationTokenInsertSchema, De as clientRegistrationTokenSchema, O as clientRegistrationTokenTypeSchema, Te as clientSchema, Ge as codeInsertSchema, Ke as codeSchema, We as codeTypeSchema, er as colorsSchema, Bt as componentMessageSchema, z as componentSchema, Je as connectionInsertSchema, qe as connectionOptionsSchema, Ye as connectionSchema, A as coordinatesSchema, gi as createPassthroughAdapter, _i as createWriteOnlyAdapter, et as customDomainCertificateUploadSchema, Xe as customDomainInsertSchema, Qe as customDomainSchema, $e as customDomainWithTenantIdSchema, si as customTextEntrySchema, oi as customTextSchema, Xr as dailyStatsSchema, dr as emailProviderSchema, fr as emailTemplateNameSchema, pr as emailTemplateSchema, p as emailVerificationRulesSchema, h as emailVerifyActionSchema, Pe as endingSchema, jt as fieldComponentSchema, v as flowActionStepSchema, y as flowInsertSchema, _e as flowSchema, L as flowsFieldComponentSchema, ke as flowsFlowNodeSchema, B as flowsStepNodeSchema, Q as fontDetailsSchema, tr as fontsSchema, Nt as formControlSchema, Rt as formInsertSchema, K as formNodeComponentDefinition, Lt as formNodeSchema, zt as formSchema, R as genericComponentSchema, je as genericNodeSchema, vi as getConnectionIdentifierConfig, En as getLogTypeCategory, Tn as getLogTypeDescription, Er as grantInsertSchema, Dr as grantSchema, cr as handlerConfigSchema, cn as hookCodeInsertSchema, ln as hookCodeSchema, tn as hookInsertSchema, sn as hookSchema, J as hookTemplateId, Xt as hookTemplates, b as identitySchema, fn as inviteInsertSchema, pn as inviteSchema, dn as inviteeSchema, un as inviterSchema, Ut as isBlockComponent, Gt as isFieldComponent, yi as isPlainObject, Wt as isWidgetComponent, hn as jwksKeySchema, mn as jwksSchema, I as legalComponentSchema, fe as locationInfoSchema, kn as logInsertSchema, An as logSchema, Mn as logStreamFilterSchema, Nn as logStreamInsertSchema, Pn as logStreamSchema, Z as logStreamStatusSchema, jn as logStreamTypeSchema, wn as logTypeCategories, Cn as logTypeDescriptions, yn as loginSessionAuthStrategySchema, bn as loginSessionInsertSchema, xn as loginSessionSchema, vn as loginSessionStateSchema, sr as matchSchema, Fn as migrationProviderTypeSchema, In as migrationSourceCredentialsSchema, Ln as migrationSourceInsertSchema, Rn as migrationSourceSchema, Me as nodeSchema, gn as openIDConfigurationSchema, zr as organizationBrandingSchema, Wr as organizationConnectionInsertSchema, Kr as organizationConnectionListSchema, Gr as organizationConnectionSchema, Br as organizationEnabledConnectionSchema, Hr as organizationInsertSchema, Ur as organizationSchema, Vr as organizationTokenQuotaSchema, nr as pageBackgroundSchema, hi as parseUserId, Un as passwordInsertSchema, Wn as passwordSchema, be as profileDataSchema, ai as promptScreenSchema, or as promptSettingSchema, $ as proxyRouteInsertSchema, lr as proxyRouteSchema, ur as proxyRouteUpdateSchema, _ as redirectActionSchema, mr as refreshTokenInsertSchema, hr as refreshTokenSchema, ue as requestContextSchema, br as resourceServerInsertSchema, Sr as resourceServerListSchema, yr as resourceServerOptionsSchema, xr as resourceServerSchema, vr as resourceServerScopeSchema, de as responseContextSchema, P as richTextComponentSchema, Ir as roleInsertSchema, Rr as roleListSchema, Cr as rolePermissionInsertSchema, Tr as rolePermissionListSchema, wr as rolePermissionSchema, Lr as roleSchema, Vt as screenLinkSchema, Kn as sessionInsertSchema, qn as sessionSchema, Jn as signingKeySchema, _r as smsProviderSchema, gr as smsSendParamsSchema, Ne as startSchema, Vn as suspiciousIpThrottlingSchema, le as targetSchema, Yn as tenantInsertSchema, Xn as tenantSchema, Yr as tenantSettingsSchema, ir as themeInsertSchema, ar as themeSchema, Qn as tokenResponseSchema, ye as totalsSchema, Ht as uiScreenSchema, C as userInsertSchema, qr as userOrganizationInsertSchema, Jr as userOrganizationSchema, Or as userPermissionInsertSchema, Ar as userPermissionListSchema, kr as userPermissionSchema, Mr as userPermissionWithDetailsListSchema, jr as userPermissionWithDetailsSchema, Se as userResponseSchema, Nr as userRoleInsertSchema, Fr as userRoleListSchema, Pr as userRoleSchema, w as userSchema, Ze as verificationMethodsSchema, At as widgetComponentSchema, rr as widgetSchema };