@authhero/adapter-interfaces 4.10.0 → 4.11.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -11557,8 +11557,14 @@ declare function decodeCursor(token: string): CursorPayload | null;
11557
11557
  /**
11558
11558
  * Shared pieces of the Lucene-style `q` filter handling. The SQL generation
11559
11559
  * itself is ORM-specific and lives in each adapter; what is shared here is
11560
- * the query-string sanitization that enforces the tenant boundary.
11560
+ * the tokenizer (including the OR split) and the query-string sanitization
11561
+ * that enforces the tenant boundary.
11561
11562
  */
11563
+ declare function tokenizeLuceneQuery(query: string): string[];
11564
+ declare function unescapeLuceneValue(value: string): string;
11565
+ declare function escapeLuceneValue(value: string): string;
11566
+ declare function unquoteLuceneValue(value: string): string;
11567
+ declare function splitLuceneOrGroups(query: string): string[][];
11562
11568
  declare function sanitizeLuceneQuery(query: string, allowedFields: string[]): string;
11563
11569
  declare function isEmailSearchTerm(value: string): boolean;
11564
11570
 
@@ -12110,6 +12116,23 @@ interface UpdateRefreshTokenOptions {
12110
12116
  expires_at: string;
12111
12117
  };
12112
12118
  }
12119
+ /**
12120
+ * Update payload for a refresh token.
12121
+ *
12122
+ * The two expiry columns are three-valued on the way in: `undefined` leaves
12123
+ * the stored value alone, a string overwrites it, and `null` clears it — the
12124
+ * token stops expiring on that axis.
12125
+ *
12126
+ * Clearing exists for the in-place refresh exchange. A rotating client
12127
+ * reconciles a changed refresh-token config for free, because the child row is
12128
+ * minted from the current lifetimes; a non-rotating one keeps handing back the
12129
+ * row it was given, so switching a client to non-expiring has to be able to
12130
+ * drop the expiries that row was stamped with.
12131
+ */
12132
+ type RefreshTokenUpdate = Partial<Omit<RefreshToken, "expires_at" | "idle_expires_at">> & {
12133
+ expires_at?: string | null;
12134
+ idle_expires_at?: string | null;
12135
+ };
12113
12136
  interface RefreshTokensAdapter {
12114
12137
  create: (tenant_id: string, refresh_token: RefreshTokenInsert) => Promise<RefreshToken>;
12115
12138
  get: (tenant_id: string, id: string) => Promise<RefreshToken | null>;
@@ -12120,7 +12143,7 @@ interface RefreshTokensAdapter {
12120
12143
  */
12121
12144
  getByLookup: (tenant_id: string, token_lookup: string) => Promise<RefreshToken | null>;
12122
12145
  list(tenant_id: string, params?: RefreshTokenListParams): Promise<ListRefreshTokenResponse>;
12123
- update: (tenant_id: string, id: string, refresh_token: Partial<RefreshToken>, options?: UpdateRefreshTokenOptions) => Promise<boolean>;
12146
+ update: (tenant_id: string, id: string, refresh_token: RefreshTokenUpdate, options?: UpdateRefreshTokenOptions) => Promise<boolean>;
12124
12147
  remove: (tenant_id: string, id: string) => Promise<boolean>;
12125
12148
  /**
12126
12149
  * Soft-revoke every refresh token belonging to a user that isn't already
@@ -12840,5 +12863,5 @@ interface DataAdapters {
12840
12863
  };
12841
12864
  }
12842
12865
 
12843
- export { Auth0ActionEnum, Auth0Client, AuthorizationResponseMode, AuthorizationResponseType, CodeChallengeMethod, ComponentCategory, ComponentType, DATABASE_CONNECTION_STRATEGY, EmailActionEnum, FORM_FIELD_TYPES, FlowActionTypeEnum, GrantType, LocationInfo, LogTypes, LoginSessionState, MONDAY_EPOCH_SHIFT_MS, NodeType, RedirectTargetEnum, Strategy, StrategyType, TRIGGER_API_SHAPES, USERNAME_CONTAINS_AT_MESSAGE, USERNAME_INVALID_CHARACTERS_MESSAGE, WEEK_MS, actionDependencySchema, actionExecutionErrorSchema, actionExecutionInsertSchema, actionExecutionLogEntrySchema, actionExecutionLogsSchema, actionExecutionResultSchema, actionExecutionSchema, actionExecutionStatusSchema, actionExecutionTriggerIdSchema, actionInsertSchema, actionNodeSchema, actionSchema, actionSecretSchema, actionTriggerSchema, actionUpdateSchema, actionVersionInsertSchema, actionVersionSchema, activeUsersResponseSchema, actorSchema, addressSchema, allowedTriggersForHook, analyticsColumnMetaSchema, analyticsGroupBySchema, analyticsIntervalSchema, analyticsQueryResponseSchema, analyticsResourceSchema, analyticsStatisticsSchema, analyticsUserTypeSchema, attackProtectionSchema, auditCategorySchema, auditEventInsertSchema, auditEventSchema, auth0ClientSchema, auth0FlowInsertSchema, auth0FlowSchema, auth0QuerySchema, auth0UpdateUserActionSchema, auth0UserResponseSchema, authParamsSchema, authenticationMethodInsertSchema, authenticationMethodSchema, authenticationMethodTypeSchema, baseUserSchema, blockComponentSchema, bordersSchema, brandingSchema, breachedPasswordDetectionSchema, bruteForceProtectionSchema, buildRefreshTokenRetention, buildSessionRetention, buttonComponentSchema, claimsRequestSchema, clientGrantInsertSchema, clientGrantListSchema, clientGrantSchema, clientInsertSchema, clientRegistrationTokenInsertSchema, clientRegistrationTokenSchema, clientRegistrationTokenTypeSchema, clientSchema, codeInsertSchema, codeSchema, codeTypeSchema, colorsSchema, componentMessageSchema, componentSchema, connectionInsertSchema, connectionOptionsSchema, connectionSchema, coordinatesSchema, createPassthroughAdapter, createWriteOnlyAdapter, customDomainCertificateUploadSchema, customDomainInsertSchema, customDomainSchema, customDomainUpdateSchema, customDomainWithTenantIdSchema, customTextEntrySchema, customTextSchema, dailyStatsSchema, decodeBase32, decodeBase64, decodeBase64Url, decodeBase64UrlString, decodeCursor, emailProviderSchema, emailTemplateNameSchema, emailTemplateSchema, emailVerificationRulesSchema, emailVerifyActionSchema, encodeBase32, encodeBase64, encodeBase64Url, encodeBase64UrlString, encodeCursor, encodeHex, endingSchema, fieldComponentSchema, flowActionStepSchema, flowInsertSchema, flowSchema, fieldComponentSchema$1 as flowsFieldComponentSchema, flowNodeSchema$1 as flowsFlowNodeSchema, stepNodeSchema$1 as flowsStepNodeSchema, fontDetailsSchema, fontsSchema, formControlSchema, formInsertSchema, formNodeComponentDefinition, formNodeSchema, formSchema, genericComponentSchema, genericNodeSchema, getConnectionIdentifierConfig, getLogTypeCategory, getLogTypeDescription, grantInsertSchema, grantSchema, handlerConfigSchema, hookCodeInsertSchema, hookCodeSchema, hookInsertSchema, hookPageId, hookSchema, hookTemplateId, hookTemplates, identitySchema, importMetadataSchema, inviteInsertSchema, inviteSchema, inviteeSchema, inviterSchema, isBlockComponent, isDatabaseConnectionStrategy, isEmailSearchTerm, isFieldComponent, isPlainObject, isWidgetComponent, jwksKeySchema, jwksSchema, legalComponentSchema, locationInfoSchema, logInsertSchema, logSchema, logStreamFilterSchema, logStreamInsertSchema, logStreamSchema, logStreamStatusSchema, logStreamTypeSchema, logTypeCategories, logTypeDescriptions, loginSessionAuthStrategySchema, loginSessionInsertSchema, loginSessionSchema, loginSessionStateSchema, matchSchema, migrationProviderTypeSchema, migrationSourceCredentialsSchema, migrationSourceInsertSchema, migrationSourceSchema, nodeSchema, normalizeUsername, openIDConfigurationSchema, organizationBrandingSchema, organizationConnectionInsertSchema, organizationConnectionListSchema, organizationConnectionSchema, organizationEnabledConnectionSchema, organizationInsertSchema, organizationSchema, organizationTokenQuotaSchema, pageBackgroundSchema, parseUserId, passwordInsertSchema, passwordSchema, profileDataSchema, promptScreenSchema, promptSettingSchema, proxyRouteInsertSchema, proxyRouteSchema, proxyRouteUpdateSchema, redirectActionSchema, refreshTokenInsertSchema, refreshTokenRetentionCohortSchema, refreshTokenRetentionResponseSchema, refreshTokenSchema, requestContextSchema, resourceServerInsertSchema, resourceServerListSchema, resourceServerOptionsSchema, resourceServerSchema, resourceServerScopeSchema, responseContextSchema, richTextComponentSchema, roleInsertSchema, roleListSchema, rolePermissionInsertSchema, rolePermissionListSchema, rolePermissionSchema, roleSchema, rolloutInsertSchema, rolloutKindSchema, rolloutSchema, rolloutStatusSchema, rolloutUpdateSchema, sanitizeLuceneQuery, scimConfigurationInsertSchema, scimConfigurationSchema, scimExternalIdInsertSchema, scimExternalIdSchema, scimMappingEntrySchema, scimTokenInsertSchema, scimTokenSchema, screenLinkSchema, sessionInsertSchema, sessionRetentionCohortSchema, sessionRetentionResponseSchema, sessionRetentionWindow, sessionSchema, signingKeySchema, smsProviderSchema, smsSendParamsSchema, startSchema, suspiciousIpThrottlingSchema, targetSchema, tenantInsertSchema, tenantOperationEngineSchema, tenantOperationEventInsertSchema, tenantOperationEventOutcomeSchema, tenantOperationEventSchema, tenantOperationInsertSchema, tenantOperationKindSchema, tenantOperationSchema, tenantOperationStatusSchema, tenantOperationUpdateSchema, tenantSchema, tenantSettingsSchema, themeInsertSchema, themeSchema, tokenResponseSchema, totalsSchema, uiScreenSchema, userActivitySchema, userInsertSchema, userOrganizationInsertSchema, userOrganizationSchema, userPermissionInsertSchema, userPermissionListSchema, userPermissionSchema, userPermissionWithDetailsListSchema, userPermissionWithDetailsSchema, userResponseSchema, userRoleInsertSchema, userRoleListSchema, userRoleSchema, userSchema, usernameHasOnlyAllowedCharacters, validateUsername, verificationMethodsSchema, weekIndex, weekStartMs, widgetComponentSchema, widgetSchema };
12844
- export type { Action, ActionExecution, ActionExecutionError, ActionExecutionInsert, ActionExecutionLogEntry, ActionExecutionLogs, ActionExecutionResult, ActionExecutionStatus, ActionExecutionsAdapter, ActionInsert, ActionNode, ActionUpdate, ActionVersion, ActionVersionInsert, ActionVersionsAdapter, ActionsAdapter, ActiveUsersResponse, Actor, Address, AnalyticsAdapter, AnalyticsColumnMeta, AnalyticsFilters, AnalyticsGroupBy, AnalyticsInterval, AnalyticsQueryParams, AnalyticsQueryResponse, AnalyticsResource, AnalyticsUserType, AttackProtection, AuditCategory, AuditEvent, AuditEventInsert, Auth0Flow, Auth0FlowInsert, Auth0UpdateUserAction, AuthParams, AuthenticationMethod, AuthenticationMethodInsert, AuthenticationMethodType, AuthenticationMethodUpdate, AuthenticationMethodsAdapter, BaseUser, BlockComponent, BooleanField, Branding, BrandingAdapter, BreachedPasswordDetection, BruteForceProtection, ButtonComponent, CacheAdapter, CacheItem, CardsField, ChoiceField, ClaimsRequest, Client, ClientConnectionsAdapter, ClientGrant, ClientGrantInsert, ClientGrantList, ClientGrantsAdapter, ClientInsert, ClientRegistrationToken, ClientRegistrationTokenInsert, ClientRegistrationTokenType, ClientRegistrationTokensAdapter, ClientWithTenantId, ClientsAdapter, Code, CodeExecutionLog, CodeExecutionResult, CodeExecutor, CodeField, CodeInsert, CodeResponse, CodeType, CodesAdapter, Component, ComponentMessage, Connection, ConnectionInsert, ConnectionsAdapter, ContinuationScope, Coordinates, CountryField, CreateOptions, CreateServiceTokenFn, CreateServiceTokenParams, CreateTenantParams, CursorPayload, CustomDomain, CustomDomainCertificateUpload, CustomDomainInsert, CustomDomainUpdate, CustomDomainWithTenantId, CustomDomainsAdapter, CustomField, CustomText, CustomTextAdapter, CustomTextEntry, DailyStats, DataAdapters, DateField, DividerComponent, DropdownField, EmailField, EmailProvider, EmailProvidersAdapter, EmailServiceAdapter, EmailServiceSendParams, EmailTemplate, EmailTemplateName, EmailTemplatesAdapter, EmailVerificationRules, EmailVerifyAction, Ending, FieldComponent, FileField, Flow, FlowActionStep, FlowActionType, FlowInsert, FlowNode, FlowsAdapter, FieldComponent$1 as FlowsFieldComponent, FlowNode$1 as FlowsFlowNode, StepNode$1 as FlowsStepNode, Form, FormControl, FormInsert, FormNode, FormNodeComponent, FormsAdapter, GenericComponent, GenericNode, GeoAdapter, GeoInfo, GmapsAddressWidget, Grant, GrantInsert, GrantsAdapter, HandlerConfig, Hook, HookCode, HookCodeAdapter, HookCodeInsert, HookInsert, HookPageId, HookTemplateId, HooksAdapter, HtmlComponent, Identity, ImageComponent, ImportMetadata, Invite, InviteInsert, Invitee, Inviter, InvitesAdapter, JumpButtonComponent, Jwk, Jwks, KeysAdapter, LegalComponent, LegalField, LinkCandidate, ListActionVersionsResponse, ListActionsResponse, ListClientGrantsResponse, ListCodesResponse, ListConnectionsResponse, ListFailedEventsResponse, ListFlowsResponse, ListFormsResponse, ListGrantsResponse, ListHooksResponse, ListInvitesResponse, ListKeysResponse, ListOrganizationsResponse, ListParams, ListProxyRoutesParams, ListProxyRoutesResult, ListRefreshTokenResponse, ListResourceServersResponse, ListRoleUsersResponse, ListRolesResponse, ListRolloutsResult, ListSesssionsResponse, ListTenantOperationEventsResult, ListTenantOperationsParams, ListTenantOperationsResult, ListUserRolesResponse, ListUsersResponse, Log, LogCategory, LogInsert, LogStream, LogStreamInsert, LogStreamsAdapter, LogType, LoginSession, LoginSessionAuthStrategy, LoginSessionInsert, LoginSessionsAdapter, LogsDataAdapter, MigrationProviderType, MigrationSource, MigrationSourceCredentials, MigrationSourceInsert, MigrationSourcesAdapter, NextButtonComponent, Node, NumberField, Organization, OrganizationConnection, OrganizationConnectionInsert, OrganizationConnectionList, OrganizationConnectionsAdapter, OrganizationInsert, OrganizationsAdapter, OutboxAdapter, OutboxEvent, OutboxEventInsert, PassthroughConfig, Password, PasswordField, PasswordInsert, PasswordsAdapter, PaymentField, PostUsersBody, PreviousButtonComponent, PromptScreen, PromptSetting, PromptSettingsAdapter, ProxyRoute, ProxyRouteInsert, ProxyRouteUpdate, ProxyRoutesAdapter, RateLimitAdapter, RateLimitDecision, RateLimitScope, RecaptchaWidget, RedirectAction, RedirectTarget, RefreshToken, RefreshTokenInsert, RefreshTokenListParams, RefreshTokenRetentionCohort, RefreshTokenRetentionParams, RefreshTokenRetentionResponse, RefreshTokensAdapter, RequestContext, ResendButtonComponent, ResourceServer, ResourceServerInsert, ResourceServerList, ResourceServerOptions, ResourceServerScope, ResourceServersAdapter, ResponseContext, RichTextComponent, Role, RoleInsert, RoleList, RolePermission, RolePermissionInsert, RolePermissionList, RolePermissionsAdapter, RolesAdapter, Rollout, RolloutInsert, RolloutKind, RolloutStatus, RolloutUpdate, RolloutsAdapter, RouteMatch, RouterNode, RuntimeComponent, ScimConfiguration, ScimConfigurationInsert, ScimConfigurationsAdapter, ScimExternalId, ScimExternalIdInsert, ScimExternalIdsAdapter, ScimMappingEntry, ScimToken, ScimTokenInsert, ScimTokensAdapter, ScreenLink, SecondaryAdapterConfig, Session, SessionCleanupParams, SessionInsert, SessionRetentionCohort, SessionRetentionParams, SessionRetentionRawRow, SessionRetentionResponse, SessionRetentionWindow, SessionsAdapter, SigningKey, SmsProvider, SmsSendParams, SmsServiceAdapter, SmsServiceSendParams, SocialField, Start, StatsAdapter, StatsListParams, StepNode, SuspiciousIpThrottling, Target, TelField, Tenant, TenantOperation, TenantOperationEngine, TenantOperationEvent, TenantOperationEventInsert, TenantOperationEventOutcome, TenantOperationEventsAdapter, TenantOperationInsert, TenantOperationKind, TenantOperationStatus, TenantOperationUpdate, TenantOperationsAdapter, TenantSettings, TenantSettingsAdapter, TenantsDataAdapter, TextField, Theme, ThemeInsert, ThemesAdapter, TokenResponse, Totals, UiScreen, UniversalLoginTemplate, UniversalLoginTemplatesAdapter, UpdateRefreshTokenOptions, UrlField, User, UserActivity, UserActivityAdapter, UserActivityUpdate, UserDataAdapter, UserInsert, UserOrganization, UserOrganizationInsert, UserOrganizationsAdapter, UserPermission, UserPermissionInsert, UserPermissionList, UserPermissionWithDetails, UserPermissionWithDetailsList, UserPermissionsAdapter, UserResponse, UserRole, UserRoleInsert, UserRoleList, UserRolesAdapter, UsernameLengthBounds, VerifiableCredentialsWidget, VerificationMethods, WidgetComponent, WriteOptions };
12866
+ export { Auth0ActionEnum, Auth0Client, AuthorizationResponseMode, AuthorizationResponseType, CodeChallengeMethod, ComponentCategory, ComponentType, DATABASE_CONNECTION_STRATEGY, EmailActionEnum, FORM_FIELD_TYPES, FlowActionTypeEnum, GrantType, LocationInfo, LogTypes, LoginSessionState, MONDAY_EPOCH_SHIFT_MS, NodeType, RedirectTargetEnum, Strategy, StrategyType, TRIGGER_API_SHAPES, USERNAME_CONTAINS_AT_MESSAGE, USERNAME_INVALID_CHARACTERS_MESSAGE, WEEK_MS, actionDependencySchema, actionExecutionErrorSchema, actionExecutionInsertSchema, actionExecutionLogEntrySchema, actionExecutionLogsSchema, actionExecutionResultSchema, actionExecutionSchema, actionExecutionStatusSchema, actionExecutionTriggerIdSchema, actionInsertSchema, actionNodeSchema, actionSchema, actionSecretSchema, actionTriggerSchema, actionUpdateSchema, actionVersionInsertSchema, actionVersionSchema, activeUsersResponseSchema, actorSchema, addressSchema, allowedTriggersForHook, analyticsColumnMetaSchema, analyticsGroupBySchema, analyticsIntervalSchema, analyticsQueryResponseSchema, analyticsResourceSchema, analyticsStatisticsSchema, analyticsUserTypeSchema, attackProtectionSchema, auditCategorySchema, auditEventInsertSchema, auditEventSchema, auth0ClientSchema, auth0FlowInsertSchema, auth0FlowSchema, auth0QuerySchema, auth0UpdateUserActionSchema, auth0UserResponseSchema, authParamsSchema, authenticationMethodInsertSchema, authenticationMethodSchema, authenticationMethodTypeSchema, baseUserSchema, blockComponentSchema, bordersSchema, brandingSchema, breachedPasswordDetectionSchema, bruteForceProtectionSchema, buildRefreshTokenRetention, buildSessionRetention, buttonComponentSchema, claimsRequestSchema, clientGrantInsertSchema, clientGrantListSchema, clientGrantSchema, clientInsertSchema, clientRegistrationTokenInsertSchema, clientRegistrationTokenSchema, clientRegistrationTokenTypeSchema, clientSchema, codeInsertSchema, codeSchema, codeTypeSchema, colorsSchema, componentMessageSchema, componentSchema, connectionInsertSchema, connectionOptionsSchema, connectionSchema, coordinatesSchema, createPassthroughAdapter, createWriteOnlyAdapter, customDomainCertificateUploadSchema, customDomainInsertSchema, customDomainSchema, customDomainUpdateSchema, customDomainWithTenantIdSchema, customTextEntrySchema, customTextSchema, dailyStatsSchema, decodeBase32, decodeBase64, decodeBase64Url, decodeBase64UrlString, decodeCursor, emailProviderSchema, emailTemplateNameSchema, emailTemplateSchema, emailVerificationRulesSchema, emailVerifyActionSchema, encodeBase32, encodeBase64, encodeBase64Url, encodeBase64UrlString, encodeCursor, encodeHex, endingSchema, escapeLuceneValue, fieldComponentSchema, flowActionStepSchema, flowInsertSchema, flowSchema, fieldComponentSchema$1 as flowsFieldComponentSchema, flowNodeSchema$1 as flowsFlowNodeSchema, stepNodeSchema$1 as flowsStepNodeSchema, fontDetailsSchema, fontsSchema, formControlSchema, formInsertSchema, formNodeComponentDefinition, formNodeSchema, formSchema, genericComponentSchema, genericNodeSchema, getConnectionIdentifierConfig, getLogTypeCategory, getLogTypeDescription, grantInsertSchema, grantSchema, handlerConfigSchema, hookCodeInsertSchema, hookCodeSchema, hookInsertSchema, hookPageId, hookSchema, hookTemplateId, hookTemplates, identitySchema, importMetadataSchema, inviteInsertSchema, inviteSchema, inviteeSchema, inviterSchema, isBlockComponent, isDatabaseConnectionStrategy, isEmailSearchTerm, isFieldComponent, isPlainObject, isWidgetComponent, jwksKeySchema, jwksSchema, legalComponentSchema, locationInfoSchema, logInsertSchema, logSchema, logStreamFilterSchema, logStreamInsertSchema, logStreamSchema, logStreamStatusSchema, logStreamTypeSchema, logTypeCategories, logTypeDescriptions, loginSessionAuthStrategySchema, loginSessionInsertSchema, loginSessionSchema, loginSessionStateSchema, matchSchema, migrationProviderTypeSchema, migrationSourceCredentialsSchema, migrationSourceInsertSchema, migrationSourceSchema, nodeSchema, normalizeUsername, openIDConfigurationSchema, organizationBrandingSchema, organizationConnectionInsertSchema, organizationConnectionListSchema, organizationConnectionSchema, organizationEnabledConnectionSchema, organizationInsertSchema, organizationSchema, organizationTokenQuotaSchema, pageBackgroundSchema, parseUserId, passwordInsertSchema, passwordSchema, profileDataSchema, promptScreenSchema, promptSettingSchema, proxyRouteInsertSchema, proxyRouteSchema, proxyRouteUpdateSchema, redirectActionSchema, refreshTokenInsertSchema, refreshTokenRetentionCohortSchema, refreshTokenRetentionResponseSchema, refreshTokenSchema, requestContextSchema, resourceServerInsertSchema, resourceServerListSchema, resourceServerOptionsSchema, resourceServerSchema, resourceServerScopeSchema, responseContextSchema, richTextComponentSchema, roleInsertSchema, roleListSchema, rolePermissionInsertSchema, rolePermissionListSchema, rolePermissionSchema, roleSchema, rolloutInsertSchema, rolloutKindSchema, rolloutSchema, rolloutStatusSchema, rolloutUpdateSchema, sanitizeLuceneQuery, scimConfigurationInsertSchema, scimConfigurationSchema, scimExternalIdInsertSchema, scimExternalIdSchema, scimMappingEntrySchema, scimTokenInsertSchema, scimTokenSchema, screenLinkSchema, sessionInsertSchema, sessionRetentionCohortSchema, sessionRetentionResponseSchema, sessionRetentionWindow, sessionSchema, signingKeySchema, smsProviderSchema, smsSendParamsSchema, splitLuceneOrGroups, startSchema, suspiciousIpThrottlingSchema, targetSchema, tenantInsertSchema, tenantOperationEngineSchema, tenantOperationEventInsertSchema, tenantOperationEventOutcomeSchema, tenantOperationEventSchema, tenantOperationInsertSchema, tenantOperationKindSchema, tenantOperationSchema, tenantOperationStatusSchema, tenantOperationUpdateSchema, tenantSchema, tenantSettingsSchema, themeInsertSchema, themeSchema, tokenResponseSchema, tokenizeLuceneQuery, totalsSchema, uiScreenSchema, unescapeLuceneValue, unquoteLuceneValue, userActivitySchema, userInsertSchema, userOrganizationInsertSchema, userOrganizationSchema, userPermissionInsertSchema, userPermissionListSchema, userPermissionSchema, userPermissionWithDetailsListSchema, userPermissionWithDetailsSchema, userResponseSchema, userRoleInsertSchema, userRoleListSchema, userRoleSchema, userSchema, usernameHasOnlyAllowedCharacters, validateUsername, verificationMethodsSchema, weekIndex, weekStartMs, widgetComponentSchema, widgetSchema };
12867
+ export type { Action, ActionExecution, ActionExecutionError, ActionExecutionInsert, ActionExecutionLogEntry, ActionExecutionLogs, ActionExecutionResult, ActionExecutionStatus, ActionExecutionsAdapter, ActionInsert, ActionNode, ActionUpdate, ActionVersion, ActionVersionInsert, ActionVersionsAdapter, ActionsAdapter, ActiveUsersResponse, Actor, Address, AnalyticsAdapter, AnalyticsColumnMeta, AnalyticsFilters, AnalyticsGroupBy, AnalyticsInterval, AnalyticsQueryParams, AnalyticsQueryResponse, AnalyticsResource, AnalyticsUserType, AttackProtection, AuditCategory, AuditEvent, AuditEventInsert, Auth0Flow, Auth0FlowInsert, Auth0UpdateUserAction, AuthParams, AuthenticationMethod, AuthenticationMethodInsert, AuthenticationMethodType, AuthenticationMethodUpdate, AuthenticationMethodsAdapter, BaseUser, BlockComponent, BooleanField, Branding, BrandingAdapter, BreachedPasswordDetection, BruteForceProtection, ButtonComponent, CacheAdapter, CacheItem, CardsField, ChoiceField, ClaimsRequest, Client, ClientConnectionsAdapter, ClientGrant, ClientGrantInsert, ClientGrantList, ClientGrantsAdapter, ClientInsert, ClientRegistrationToken, ClientRegistrationTokenInsert, ClientRegistrationTokenType, ClientRegistrationTokensAdapter, ClientWithTenantId, ClientsAdapter, Code, CodeExecutionLog, CodeExecutionResult, CodeExecutor, CodeField, CodeInsert, CodeResponse, CodeType, CodesAdapter, Component, ComponentMessage, Connection, ConnectionInsert, ConnectionsAdapter, ContinuationScope, Coordinates, CountryField, CreateOptions, CreateServiceTokenFn, CreateServiceTokenParams, CreateTenantParams, CursorPayload, CustomDomain, CustomDomainCertificateUpload, CustomDomainInsert, CustomDomainUpdate, CustomDomainWithTenantId, CustomDomainsAdapter, CustomField, CustomText, CustomTextAdapter, CustomTextEntry, DailyStats, DataAdapters, DateField, DividerComponent, DropdownField, EmailField, EmailProvider, EmailProvidersAdapter, EmailServiceAdapter, EmailServiceSendParams, EmailTemplate, EmailTemplateName, EmailTemplatesAdapter, EmailVerificationRules, EmailVerifyAction, Ending, FieldComponent, FileField, Flow, FlowActionStep, FlowActionType, FlowInsert, FlowNode, FlowsAdapter, FieldComponent$1 as FlowsFieldComponent, FlowNode$1 as FlowsFlowNode, StepNode$1 as FlowsStepNode, Form, FormControl, FormInsert, FormNode, FormNodeComponent, FormsAdapter, GenericComponent, GenericNode, GeoAdapter, GeoInfo, GmapsAddressWidget, Grant, GrantInsert, GrantsAdapter, HandlerConfig, Hook, HookCode, HookCodeAdapter, HookCodeInsert, HookInsert, HookPageId, HookTemplateId, HooksAdapter, HtmlComponent, Identity, ImageComponent, ImportMetadata, Invite, InviteInsert, Invitee, Inviter, InvitesAdapter, JumpButtonComponent, Jwk, Jwks, KeysAdapter, LegalComponent, LegalField, LinkCandidate, ListActionVersionsResponse, ListActionsResponse, ListClientGrantsResponse, ListCodesResponse, ListConnectionsResponse, ListFailedEventsResponse, ListFlowsResponse, ListFormsResponse, ListGrantsResponse, ListHooksResponse, ListInvitesResponse, ListKeysResponse, ListOrganizationsResponse, ListParams, ListProxyRoutesParams, ListProxyRoutesResult, ListRefreshTokenResponse, ListResourceServersResponse, ListRoleUsersResponse, ListRolesResponse, ListRolloutsResult, ListSesssionsResponse, ListTenantOperationEventsResult, ListTenantOperationsParams, ListTenantOperationsResult, ListUserRolesResponse, ListUsersResponse, Log, LogCategory, LogInsert, LogStream, LogStreamInsert, LogStreamsAdapter, LogType, LoginSession, LoginSessionAuthStrategy, LoginSessionInsert, LoginSessionsAdapter, LogsDataAdapter, MigrationProviderType, MigrationSource, MigrationSourceCredentials, MigrationSourceInsert, MigrationSourcesAdapter, NextButtonComponent, Node, NumberField, Organization, OrganizationConnection, OrganizationConnectionInsert, OrganizationConnectionList, OrganizationConnectionsAdapter, OrganizationInsert, OrganizationsAdapter, OutboxAdapter, OutboxEvent, OutboxEventInsert, PassthroughConfig, Password, PasswordField, PasswordInsert, PasswordsAdapter, PaymentField, PostUsersBody, PreviousButtonComponent, PromptScreen, PromptSetting, PromptSettingsAdapter, ProxyRoute, ProxyRouteInsert, ProxyRouteUpdate, ProxyRoutesAdapter, RateLimitAdapter, RateLimitDecision, RateLimitScope, RecaptchaWidget, RedirectAction, RedirectTarget, RefreshToken, RefreshTokenInsert, RefreshTokenListParams, RefreshTokenRetentionCohort, RefreshTokenRetentionParams, RefreshTokenRetentionResponse, RefreshTokenUpdate, RefreshTokensAdapter, RequestContext, ResendButtonComponent, ResourceServer, ResourceServerInsert, ResourceServerList, ResourceServerOptions, ResourceServerScope, ResourceServersAdapter, ResponseContext, RichTextComponent, Role, RoleInsert, RoleList, RolePermission, RolePermissionInsert, RolePermissionList, RolePermissionsAdapter, RolesAdapter, Rollout, RolloutInsert, RolloutKind, RolloutStatus, RolloutUpdate, RolloutsAdapter, RouteMatch, RouterNode, RuntimeComponent, ScimConfiguration, ScimConfigurationInsert, ScimConfigurationsAdapter, ScimExternalId, ScimExternalIdInsert, ScimExternalIdsAdapter, ScimMappingEntry, ScimToken, ScimTokenInsert, ScimTokensAdapter, ScreenLink, SecondaryAdapterConfig, Session, SessionCleanupParams, SessionInsert, SessionRetentionCohort, SessionRetentionParams, SessionRetentionRawRow, SessionRetentionResponse, SessionRetentionWindow, SessionsAdapter, SigningKey, SmsProvider, SmsSendParams, SmsServiceAdapter, SmsServiceSendParams, SocialField, Start, StatsAdapter, StatsListParams, StepNode, SuspiciousIpThrottling, Target, TelField, Tenant, TenantOperation, TenantOperationEngine, TenantOperationEvent, TenantOperationEventInsert, TenantOperationEventOutcome, TenantOperationEventsAdapter, TenantOperationInsert, TenantOperationKind, TenantOperationStatus, TenantOperationUpdate, TenantOperationsAdapter, TenantSettings, TenantSettingsAdapter, TenantsDataAdapter, TextField, Theme, ThemeInsert, ThemesAdapter, TokenResponse, Totals, UiScreen, UniversalLoginTemplate, UniversalLoginTemplatesAdapter, UpdateRefreshTokenOptions, UrlField, User, UserActivity, UserActivityAdapter, UserActivityUpdate, UserDataAdapter, UserInsert, UserOrganization, UserOrganizationInsert, UserOrganizationsAdapter, UserPermission, UserPermissionInsert, UserPermissionList, UserPermissionWithDetails, UserPermissionWithDetailsList, UserPermissionsAdapter, UserResponse, UserRole, UserRoleInsert, UserRoleList, UserRolesAdapter, UsernameLengthBounds, VerifiableCredentialsWidget, VerificationMethods, WidgetComponent, WriteOptions };
@@ -236,7 +236,7 @@ var t = e.object({
236
236
  length: e.number(),
237
237
  total: e.number().optional(),
238
238
  next: e.string().optional()
239
- }), Oe = e.object({
239
+ }), f = e.object({
240
240
  email: e.string().optional(),
241
241
  email_verified: e.boolean().optional(),
242
242
  name: e.string().optional(),
@@ -245,7 +245,7 @@ var t = e.object({
245
245
  phone_number: e.string().optional(),
246
246
  phone_verified: e.boolean().optional(),
247
247
  family_name: e.string().optional()
248
- }).catchall(e.any()), f = e.object({
248
+ }).catchall(e.any()), p = e.object({
249
249
  connection: e.string(),
250
250
  user_id: e.string(),
251
251
  provider: e.string(),
@@ -258,15 +258,15 @@ var t = e.object({
258
258
  access_token: e.string().optional(),
259
259
  access_token_secret: e.string().optional(),
260
260
  refresh_token: e.string().optional(),
261
- profileData: Oe.optional()
262
- }), p = e.object({
261
+ profileData: f.optional()
262
+ }), m = e.object({
263
263
  formatted: e.string().optional(),
264
264
  street_address: e.string().optional(),
265
265
  locality: e.string().optional(),
266
266
  region: e.string().optional(),
267
267
  postal_code: e.string().optional(),
268
268
  country: e.string().optional()
269
- }).optional(), m = e.object({
269
+ }).optional(), h = e.object({
270
270
  email: e.string().transform((e) => e.toLowerCase()).optional(),
271
271
  username: e.string().refine((e) => !e.includes("@"), { message: "Usernames must not contain \"@\". Use the email field for email addresses." }).optional(),
272
272
  phone_number: e.string().optional(),
@@ -289,8 +289,8 @@ var t = e.object({
289
289
  gender: e.string().optional(),
290
290
  birthdate: e.string().optional(),
291
291
  zoneinfo: e.string().optional(),
292
- address: p
293
- }), h = m.extend({
292
+ address: m
293
+ }), g = h.extend({
294
294
  email_verified: e.boolean().default(!1),
295
295
  verify_email: e.boolean().optional(),
296
296
  last_ip: e.string().optional(),
@@ -305,29 +305,29 @@ var t = e.object({
305
305
  hash: e.string(),
306
306
  algorithm: e.string()
307
307
  }).optional()
308
- }), g = h.omit({ password: !0 }).extend(t.shape).extend({
308
+ }), _ = g.omit({ password: !0 }).extend(t.shape).extend({
309
309
  user_id: e.string(),
310
310
  provider: e.string(),
311
311
  is_social: e.boolean(),
312
312
  email: e.string().optional(),
313
313
  login_count: e.number().default(0),
314
- identities: e.array(f).optional()
315
- }), ke = g.omit({ registration_completed_at: !0 }), Ae = m.extend({
314
+ identities: e.array(p).optional()
315
+ }), Oe = _.omit({ registration_completed_at: !0 }), ke = h.extend({
316
316
  login_count: e.number(),
317
317
  multifactor: e.array(e.string()).optional(),
318
318
  last_ip: e.string().optional(),
319
319
  last_login: e.string().optional(),
320
320
  user_id: e.string()
321
- }).catchall(e.any()), je = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Me = (e = 21) => {
321
+ }).catchall(e.any()), Ae = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", je = (e = 21) => {
322
322
  let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
323
- for (; e--;) t += je[n[e] & 63];
323
+ for (; e--;) t += Ae[n[e] & 63];
324
324
  return t;
325
- }, _ = e.object({
325
+ }, v = e.object({
326
326
  client_id: e.string().optional().openapi({ description: "ID of this client. Generated server-side if omitted (Auth0 behavior)." }),
327
327
  name: e.string().min(1).openapi({ description: "Name of this client (min length: 1 character, does not allow < or >)." }),
328
328
  description: e.string().max(140).optional().openapi({ description: "Free text description of this client (max length: 140 characters)." }),
329
329
  global: e.boolean().default(!1).openapi({ description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)." }),
330
- client_secret: e.string().default(() => Me()).optional().openapi({ description: "Client secret (which you must not make public)." }),
330
+ client_secret: e.string().default(() => je()).optional().openapi({ description: "Client secret (which you must not make public)." }),
331
331
  app_type: e.enum([
332
332
  "native",
333
333
  "spa",
@@ -402,11 +402,11 @@ var t = e.object({
402
402
  refresh_token: e.object({
403
403
  rotation_type: e.enum(["rotating", "non-rotating"]).optional().openapi({ description: "Whether refresh tokens for this client are rotated on every exchange (Auth0 'rotating' behavior) or kept stable (legacy non-rotating). Defaults to 'non-rotating' when unset." }),
404
404
  leeway: e.number().int().min(0).max(600).optional().openapi({ description: "Seconds after a parent token's first rotation during which presenting it again still mints a fresh sibling child instead of triggering reuse-detection. Defaults to 30s when unset." }),
405
- expiration_type: e.enum(["expiring", "non-expiring"]).optional().openapi({ description: "Auth0-compatible: whether refresh tokens expire." }),
406
- token_lifetime: e.number().int().min(0).optional().openapi({ description: "Auth0-compatible: refresh-token absolute lifetime in seconds." }),
407
- infinite_token_lifetime: e.boolean().optional().openapi({ description: "Auth0-compatible: when true, refresh tokens have no absolute expiry." }),
408
- idle_token_lifetime: e.number().int().min(0).optional().openapi({ description: "Auth0-compatible: refresh-token idle (sliding) lifetime in seconds." }),
409
- infinite_idle_token_lifetime: e.boolean().optional().openapi({ description: "Auth0-compatible: when true, refresh tokens have no idle expiry." })
405
+ expiration_type: e.enum(["expiring", "non-expiring"]).optional().openapi({ description: "Whether refresh tokens for this client expire at all. 'non-expiring' overrides both the absolute and the idle lifetime." }),
406
+ token_lifetime: e.number().int().min(0).optional().openapi({ description: "Refresh-token absolute lifetime in seconds. Falls back to the tenant's `session_lifetime` when unset." }),
407
+ infinite_token_lifetime: e.boolean().optional().openapi({ description: "When true, refresh tokens have no absolute expiry (overrides `token_lifetime`)." }),
408
+ idle_token_lifetime: e.number().int().min(0).optional().openapi({ description: "Refresh-token idle (sliding) lifetime in seconds, refreshed on every exchange. Falls back to the tenant's `idle_session_lifetime` when unset." }),
409
+ infinite_idle_token_lifetime: e.boolean().optional().openapi({ description: "When true, refresh tokens have no idle expiry (overrides `idle_token_lifetime`)." })
410
410
  }).default({}).optional().openapi({ description: "Refresh token configuration" }),
411
411
  default_organization: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Defines the default Organization ID and flows" }),
412
412
  organization_usage: e.enum([
@@ -440,10 +440,10 @@ var t = e.object({
440
440
  ]).optional().openapi({ description: "Provenance of this client. `manual` = Management API; `open_dcr` = RFC 7591 without IAT; `iat_dcr` = RFC 7591 with an Initial Access Token." }),
441
441
  registration_metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Arbitrary metadata captured at Dynamic Client Registration time that isn't a first-class client field (e.g. integration_type, domain). Also stores `iat_constraints` for clients created via IAT so RFC 7592 PUT can enforce field immutability." }),
442
442
  user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({ description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies." })
443
- }), Ne = e.object({
443
+ }), Me = e.object({
444
444
  created_at: e.string(),
445
445
  updated_at: e.string()
446
- }).extend(_.shape).extend({ client_id: e.string() }), v = e.object({
446
+ }).extend(v.shape).extend({ client_id: e.string() }), y = e.object({
447
447
  client_id: e.string().min(1).openapi({ description: "ID of the client." }),
448
448
  audience: e.string().min(1).openapi({ description: "The audience (API identifier) of this client grant." }),
449
449
  scope: e.array(e.string()).optional().openapi({ description: "Scopes allowed for this client grant." }),
@@ -456,33 +456,33 @@ var t = e.object({
456
456
  is_system: e.boolean().optional().openapi({ description: "If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly." }),
457
457
  subject_type: e.enum(["client", "user"]).optional().openapi({ description: "The type of application access the client grant allows. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." }),
458
458
  authorization_details_types: e.array(e.string()).optional().openapi({ description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." })
459
- }), y = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(v.shape).extend({
459
+ }), b = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(y.shape).extend({
460
460
  created_at: e.string().optional(),
461
461
  updated_at: e.string().optional()
462
- }), Pe = e.array(y), b = e.enum(["iat", "rat"]), x = e.object({
462
+ }), Ne = e.array(b), x = e.enum(["iat", "rat"]), S = e.object({
463
463
  id: e.string(),
464
464
  token_hash: e.string(),
465
- type: b,
465
+ type: x,
466
466
  client_id: e.string().optional(),
467
467
  sub: e.string().optional(),
468
468
  constraints: e.record(e.string(), e.unknown()).optional(),
469
469
  single_use: e.boolean().default(!1),
470
470
  expires_at: e.string().optional()
471
- }), Fe = e.object({
471
+ }), Pe = e.object({
472
472
  created_at: e.string(),
473
473
  used_at: e.string().optional(),
474
474
  revoked_at: e.string().optional()
475
- }).extend(x.shape), S = e.object({
475
+ }).extend(S.shape), C = e.object({
476
476
  x: e.number(),
477
477
  y: e.number()
478
- }), C = /* @__PURE__ */ function(e) {
478
+ }), Fe = /* @__PURE__ */ function(e) {
479
479
  return e.RICH_TEXT = "RICH_TEXT", e.NEXT_BUTTON = "NEXT_BUTTON", e.BACK_BUTTON = "BACK_BUTTON", e.SUBMIT_BUTTON = "SUBMIT_BUTTON", e.DIVIDER = "DIVIDER", e.TEXT = "TEXT", e.EMAIL = "EMAIL", e.PASSWORD = "PASSWORD", e.NUMBER = "NUMBER", e.PHONE = "PHONE", e.DATE = "DATE", e.CHECKBOX = "CHECKBOX", e.RADIO = "RADIO", e.SELECT = "SELECT", e.HIDDEN = "HIDDEN", e.LEGAL = "LEGAL", e;
480
480
  }({}), w = /* @__PURE__ */ function(e) {
481
481
  return e.BLOCK = "BLOCK", e.FIELD = "FIELD", e;
482
482
  }({}), T = e.object({
483
483
  id: e.string(),
484
484
  category: e.nativeEnum(w),
485
- type: e.nativeEnum(C)
485
+ type: e.nativeEnum(Fe)
486
486
  }), E = T.extend({
487
487
  category: e.literal("BLOCK"),
488
488
  type: e.literal("RICH_TEXT"),
@@ -536,7 +536,7 @@ var t = e.object({
536
536
  }({}), He = e.object({
537
537
  id: e.string(),
538
538
  type: e.literal("STEP"),
539
- coordinates: S,
539
+ coordinates: C,
540
540
  alias: e.string().optional(),
541
541
  config: e.object({
542
542
  components: e.array(Be),
@@ -545,7 +545,7 @@ var t = e.object({
545
545
  }), Ue = e.object({
546
546
  id: e.string(),
547
547
  type: e.literal("FLOW"),
548
- coordinates: S,
548
+ coordinates: C,
549
549
  alias: e.string().optional(),
550
550
  config: e.object({
551
551
  flow_id: e.string(),
@@ -554,7 +554,7 @@ var t = e.object({
554
554
  }), We = e.object({
555
555
  id: e.string(),
556
556
  type: e.literal("ACTION"),
557
- coordinates: S,
557
+ coordinates: C,
558
558
  alias: e.string().optional(),
559
559
  config: e.object({
560
560
  action_type: e.enum(["REDIRECT"]).openapi({ description: "The type of action to perform" }),
@@ -569,7 +569,7 @@ var t = e.object({
569
569
  }), Ge = e.object({
570
570
  id: e.string(),
571
571
  type: e.string(),
572
- coordinates: S
572
+ coordinates: C
573
573
  }).passthrough(), Ke = e.union([
574
574
  He,
575
575
  Ue,
@@ -577,10 +577,10 @@ var t = e.object({
577
577
  Ge
578
578
  ]), qe = e.object({
579
579
  next_node: e.string(),
580
- coordinates: S
580
+ coordinates: C
581
581
  }).passthrough(), Je = e.object({
582
582
  resume_flow: e.boolean().optional(),
583
- coordinates: S
583
+ coordinates: C
584
584
  }).passthrough(), Ye = e.object({
585
585
  id: e.string(),
586
586
  name: e.string(),
@@ -3007,45 +3007,61 @@ function va(e) {
3007
3007
  }
3008
3008
  //#endregion
3009
3009
  //#region src/utils/lucene.ts
3010
- function ya(e, t) {
3011
- let n = new Set(t), r = (e) => {
3012
- let t = [], r = "", i = !1;
3013
- for (let n = 0; n < e.length; n++) {
3014
- let a = e[n];
3015
- a === "\"" ? (i = !i, r += a) : a === " " && !i ? (r.trim() && t.push(r.trim()), r = "") : r += a;
3016
- }
3017
- return r.trim() && t.push(r.trim()), t.filter((e) => {
3018
- let t = e.replace(/^([^:]+)=/, "$1:"), r = t.startsWith("-") ? t.slice(1) : t;
3019
- if (r.startsWith("_exists_:")) return n.has(r.slice(9));
3020
- let i = r.indexOf(":");
3021
- return i > 0 ? n.has(r.slice(0, i)) : !0;
3022
- }).join(" ");
3023
- }, i = e.split(/ OR /i);
3024
- return i.length > 1 ? i.map(r).filter((e) => e.length > 0).join(" OR ") : r(e);
3010
+ function ya(e) {
3011
+ let t = [], n = "", r = !1;
3012
+ for (let i = 0; i < e.length; i++) {
3013
+ let a = e[i];
3014
+ a === "\\" && i + 1 < e.length ? (n += a + e[i + 1], i++) : a === "\"" ? (r = !r, n += a) : a === " " && !r ? (n.trim() && t.push(n.trim()), n = "") : n += a;
3015
+ }
3016
+ return n.trim() && t.push(n.trim()), t;
3017
+ }
3018
+ function ba(e) {
3019
+ return e.replace(/\\([\\"+\-!(){}[\]^~*?:/&|])/g, "$1");
3025
3020
  }
3026
- var ba = /^[^\s@%_*?"'()[\]{}^~:\\/]+@[^\s@%_*?"'()[\]{}^~:\\/]+\.[^\s@%_*?"'()[\]{}^~:\\/]+$/;
3027
3021
  function xa(e) {
3028
- return ba.test(e);
3022
+ return `"${e.replace(/([\\"])/g, "\\$1")}"`;
3023
+ }
3024
+ function Sa(e) {
3025
+ let t = e.trim();
3026
+ return ba(t.length > 1 && t.startsWith("\"") && t.endsWith("\"") ? t.slice(1, -1) : t);
3027
+ }
3028
+ function Ca(e) {
3029
+ let t = [], n = [];
3030
+ for (let r of ya(e)) /^or$/i.test(r) ? (t.push(n), n = []) : n.push(r);
3031
+ return t.push(n), t.filter((e) => e.length > 0);
3032
+ }
3033
+ function wa(e, t) {
3034
+ let n = new Set(t), r = (e) => {
3035
+ let t = e.replace(/^([^:]+)=/, "$1:"), r = t.startsWith("-") ? t.slice(1) : t;
3036
+ if (r.startsWith("_exists_:")) return n.has(r.slice(9));
3037
+ let i = r.indexOf(":");
3038
+ return i > 0 ? n.has(r.slice(0, i)) : !0;
3039
+ };
3040
+ return Ca(e).map((e) => e.filter(r).join(" ")).filter((e) => e.length > 0).join(" OR ");
3041
+ }
3042
+ var Ta = /^[^\s@%_*?"'()[\]{}^~:\\/]+@[^\s@%_*?"'()[\]{}^~:\\/]+\.[^\s@%_*?"'()[\]{}^~:\\/]+$/;
3043
+ function Ea(e) {
3044
+ return Ta.test(e);
3029
3045
  }
3030
3046
  //#endregion
3031
3047
  //#region src/utils/session-retention.ts
3032
3048
  var Z = 10080 * 60 * 1e3, Q = 4320 * 60 * 1e3;
3033
- function Sa(e) {
3049
+ function Da(e) {
3034
3050
  return Math.floor((e + Q) / Z);
3035
3051
  }
3036
3052
  function $(e) {
3037
3053
  return e * Z - Q;
3038
3054
  }
3039
- function Ca(e, t = Date.now()) {
3040
- let n = Sa(t), r = n - e + 1;
3055
+ function Oa(e, t = Date.now()) {
3056
+ let n = Da(t), r = n - e + 1;
3041
3057
  return {
3042
3058
  currentWeek: n,
3043
3059
  firstWeek: r,
3044
3060
  sinceMs: $(r)
3045
3061
  };
3046
3062
  }
3047
- function wa(e, t, n = Date.now()) {
3048
- let { currentWeek: r, firstWeek: i, sinceMs: a } = Ca(t, n), o = /* @__PURE__ */ new Map();
3063
+ function ka(e, t, n = Date.now()) {
3064
+ let { currentWeek: r, firstWeek: i, sinceMs: a } = Oa(t, n), o = /* @__PURE__ */ new Map();
3049
3065
  for (let t of e) {
3050
3066
  if (t.created_week < i || t.created_week > r) continue;
3051
3067
  let e = Math.min(Math.max(0, t.used_week - t.created_week), r - t.created_week), n = o.get(t.created_week);
@@ -3068,8 +3084,8 @@ function wa(e, t, n = Date.now()) {
3068
3084
  cohorts: s
3069
3085
  };
3070
3086
  }
3071
- function Ta(e, t, n = Date.now()) {
3072
- let r = wa(e, t, n);
3087
+ function Aa(e, t, n = Date.now()) {
3088
+ let r = ka(e, t, n);
3073
3089
  return {
3074
3090
  interval: r.interval,
3075
3091
  from: r.from,
@@ -3083,16 +3099,16 @@ function Ta(e, t, n = Date.now()) {
3083
3099
  }
3084
3100
  //#endregion
3085
3101
  //#region src/utils/username-validation.ts
3086
- var Ea = /^[A-Za-z0-9_+\-.!#$'^`~]+$/, Da = "Username can only contain alphanumeric characters and the following characters: '_', '+', '-', '.', '!', '#', '$', \"'\", '^', '`', '~'", Oa = "Usernames must not contain \"@\". Use the email field for email addresses.";
3087
- function ka(e) {
3088
- return Ea.test(e);
3102
+ var ja = /^[A-Za-z0-9_+\-.!#$'^`~]+$/, Ma = "Username can only contain alphanumeric characters and the following characters: '_', '+', '-', '.', '!', '#', '$', \"'\", '^', '`', '~'", Na = "Usernames must not contain \"@\". Use the email field for email addresses.";
3103
+ function Pa(e) {
3104
+ return ja.test(e);
3089
3105
  }
3090
- function Aa(e) {
3106
+ function Fa(e) {
3091
3107
  return e.toLowerCase();
3092
3108
  }
3093
- function ja(e, t) {
3094
- if (e.includes("@")) return Oa;
3095
- if (!ka(e)) return Da;
3109
+ function Ia(e, t) {
3110
+ if (e.includes("@")) return Na;
3111
+ if (!Pa(e)) return Ma;
3096
3112
  if (t) {
3097
3113
  let n = [...e].length;
3098
3114
  if (n < t.min) return `Username must be at least ${t.min} characters`;
@@ -3101,4 +3117,4 @@ function ja(e, t) {
3101
3117
  return null;
3102
3118
  }
3103
3119
  //#endregion
3104
- export { _e as Auth0ActionEnum, zn as Auth0Client, O as AuthorizationResponseMode, D as AuthorizationResponseType, Ze as CodeChallengeMethod, w as ComponentCategory, C as ComponentType, Ji as DATABASE_CONNECTION_STRATEGY, ve as EmailActionEnum, Gt as FORM_FIELD_TYPES, ge as FlowActionTypeEnum, Cr as GrantType, Bn as LocationInfo, K as LogTypes, An as LoginSessionState, Q as MONDAY_EPOCH_SHIFT_MS, Ve as NodeType, Se as RedirectTargetEnum, Ki as Strategy, qi as StrategyType, na as TRIGGER_API_SHAPES, Oa as USERNAME_CONTAINS_AT_MESSAGE, Da as USERNAME_INVALID_CHARACTERS_MESSAGE, Z as WEEK_MS, r as actionDependencySchema, l as actionExecutionErrorSchema, ie as actionExecutionInsertSchema, te as actionExecutionLogEntrySchema, ne as actionExecutionLogsSchema, u as actionExecutionResultSchema, re as actionExecutionSchema, c as actionExecutionStatusSchema, ee as actionExecutionTriggerIdSchema, a as actionInsertSchema, We as actionNodeSchema, s as actionSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, ae as actionVersionInsertSchema, oe as actionVersionSchema, ji as activeUsersResponseSchema, ce as actorSchema, p as addressSchema, sn as allowedTriggersForHook, Bi as analyticsColumnMetaSchema, Pi as analyticsGroupBySchema, Ni as analyticsIntervalSchema, Hi as analyticsQueryResponseSchema, Mi as analyticsResourceSchema, Vi as analyticsStatisticsSchema, Fi as analyticsUserTypeSchema, er as attackProtectionSchema, se as auditCategorySchema, me as auditEventInsertSchema, he as auditEventSchema, pe as auth0ClientSchema, Xe as auth0FlowInsertSchema, Ye as auth0FlowSchema, Ee as auth0QuerySchema, be as auth0UpdateUserActionSchema, ke as auth0UserResponseSchema, et as authParamsSchema, $i as authenticationMethodInsertSchema, ea as authenticationMethodSchema, Xi as authenticationMethodTypeSchema, m as baseUserSchema, Ht as blockComponentSchema, Tr as bordersSchema, tt as brandingSchema, Zn as breachedPasswordDetectionSchema, Qn as bruteForceProtectionSchema, Ta as buildRefreshTokenRetention, wa as buildSessionRetention, Ie as buttonComponentSchema, $e as claimsRequestSchema, v as clientGrantInsertSchema, Pe as clientGrantListSchema, y as clientGrantSchema, _ as clientInsertSchema, x as clientRegistrationTokenInsertSchema, Fe as clientRegistrationTokenSchema, b as clientRegistrationTokenTypeSchema, Ne as clientSchema, rt as codeInsertSchema, it as codeSchema, nt as codeTypeSchema, Er as colorsSchema, $t as componentMessageSchema, Be as componentSchema, ot as connectionInsertSchema, at as connectionOptionsSchema, st as connectionSchema, S as coordinatesSchema, ia as createPassthroughAdapter, aa as createWriteOnlyAdapter, ft as customDomainCertificateUploadSchema, A as customDomainInsertSchema, lt as customDomainSchema, ut as customDomainUpdateSchema, dt as customDomainWithTenantIdSchema, Gi as customTextEntrySchema, Wi as customTextSchema, Ai as dailyStatsSchema, ha as decodeBase32, pa as decodeBase64, la as decodeBase64Url, da as decodeBase64UrlString, va as decodeCursor, Wr as emailProviderSchema, Gr as emailTemplateNameSchema, Kr as emailTemplateSchema, ye as emailVerificationRulesSchema, xe as emailVerifyActionSchema, ma as encodeBase32, fa as encodeBase64, ca as encodeBase64Url, ua as encodeBase64UrlString, _a as encodeCursor, ga as encodeHex, Je as endingSchema, Wt as fieldComponentSchema, d as flowActionStepSchema, we as flowInsertSchema, Te as flowSchema, Re as flowsFieldComponentSchema, Ue as flowsFlowNodeSchema, He as flowsStepNodeSchema, J as fontDetailsSchema, Dr as fontsSchema, Kt as formControlSchema, Zt as formInsertSchema, F as formNodeComponentDefinition, Xt as formNodeSchema, Qt as formSchema, ze as genericComponentSchema, Ge as genericNodeSchema, oa as getConnectionIdentifierConfig, Rn as getLogTypeCategory, Ln as getLogTypeDescription, ai as grantInsertSchema, oi as grantSchema, Pr as handlerConfigSchema, xn as hookCodeInsertSchema, Sn as hookCodeSchema, mn as hookInsertSchema, H as hookPageId, bn as hookSchema, U as hookTemplateId, cn as hookTemplates, f as identitySchema, ta as importMetadataSchema, Tn as inviteInsertSchema, En as inviteSchema, wn as inviteeSchema, Cn as inviterSchema, nn as isBlockComponent, Yi as isDatabaseConnectionStrategy, xa as isEmailSearchTerm, an as isFieldComponent, sa as isPlainObject, rn as isWidgetComponent, On as jwksKeySchema, Dn as jwksSchema, Le as legalComponentSchema, fe as locationInfoSchema, Vn as logInsertSchema, Hn as logSchema, Wn as logStreamFilterSchema, Gn as logStreamInsertSchema, Kn as logStreamSchema, q as logStreamStatusSchema, Un as logStreamTypeSchema, In as logTypeCategories, Fn as logTypeDescriptions, G as loginSessionAuthStrategySchema, Mn as loginSessionInsertSchema, Nn as loginSessionSchema, jn as loginSessionStateSchema, Nr as matchSchema, qn as migrationProviderTypeSchema, Jn as migrationSourceCredentialsSchema, Yn as migrationSourceInsertSchema, Xn as migrationSourceSchema, Ke as nodeSchema, Aa as normalizeUsername, kn as openIDConfigurationSchema, yi as organizationBrandingSchema, wi as organizationConnectionInsertSchema, Ei as organizationConnectionListSchema, Ti as organizationConnectionSchema, bi as organizationEnabledConnectionSchema, Si as organizationInsertSchema, Ci as organizationSchema, xi as organizationTokenQuotaSchema, Or as pageBackgroundSchema, ra as parseUserId, tr as passwordInsertSchema, nr as passwordSchema, Oe as profileDataSchema, Ui as promptScreenSchema, Mr as promptSettingSchema, Y as proxyRouteInsertSchema, Fr as proxyRouteSchema, Ir as proxyRouteUpdateSchema, Ce as redirectActionSchema, qr as refreshTokenInsertSchema, Ri as refreshTokenRetentionCohortSchema, zi as refreshTokenRetentionResponseSchema, Jr as refreshTokenSchema, ue as requestContextSchema, $r as resourceServerInsertSchema, ti as resourceServerListSchema, Qr as resourceServerOptionsSchema, ei as resourceServerSchema, Zr as resourceServerScopeSchema, de as responseContextSchema, E as richTextComponentSchema, gi as roleInsertSchema, vi as roleListSchema, ni as rolePermissionInsertSchema, ii as rolePermissionListSchema, ri as rolePermissionSchema, _i as roleSchema, br as rolloutInsertSchema, vr as rolloutKindSchema, xr as rolloutSchema, yr as rolloutStatusSchema, Sr as rolloutUpdateSchema, ya as sanitizeLuceneQuery, Rr as scimConfigurationInsertSchema, zr as scimConfigurationSchema, Hr as scimExternalIdInsertSchema, Ur as scimExternalIdSchema, Lr as scimMappingEntrySchema, Br as scimTokenInsertSchema, Vr as scimTokenSchema, en as screenLinkSchema, ir as sessionInsertSchema, Ii as sessionRetentionCohortSchema, Li as sessionRetentionResponseSchema, Ca as sessionRetentionWindow, ar as sessionSchema, or as signingKeySchema, Xr as smsProviderSchema, Yr as smsSendParamsSchema, qe as startSchema, $n as suspiciousIpThrottlingSchema, le as targetSchema, sr as tenantInsertSchema, dr as tenantOperationEngineSchema, gr as tenantOperationEventInsertSchema, hr as tenantOperationEventOutcomeSchema, _r as tenantOperationEventSchema, fr as tenantOperationInsertSchema, lr as tenantOperationKindSchema, pr as tenantOperationSchema, ur as tenantOperationStatusSchema, mr as tenantOperationUpdateSchema, cr as tenantSchema, ki as tenantSettingsSchema, Ar as themeInsertSchema, jr as themeSchema, wr as tokenResponseSchema, De as totalsSchema, tn as uiScreenSchema, si as userActivitySchema, h as userInsertSchema, Di as userOrganizationInsertSchema, Oi as userOrganizationSchema, ci as userPermissionInsertSchema, ui as userPermissionListSchema, li as userPermissionSchema, fi as userPermissionWithDetailsListSchema, di as userPermissionWithDetailsSchema, Ae as userResponseSchema, pi as userRoleInsertSchema, hi as userRoleListSchema, mi as userRoleSchema, g as userSchema, ka as usernameHasOnlyAllowedCharacters, ja as validateUsername, ct as verificationMethodsSchema, Sa as weekIndex, $ as weekStartMs, Ut as widgetComponentSchema, kr as widgetSchema };
3120
+ export { _e as Auth0ActionEnum, zn as Auth0Client, O as AuthorizationResponseMode, D as AuthorizationResponseType, Ze as CodeChallengeMethod, w as ComponentCategory, Fe as ComponentType, Ji as DATABASE_CONNECTION_STRATEGY, ve as EmailActionEnum, Gt as FORM_FIELD_TYPES, ge as FlowActionTypeEnum, Cr as GrantType, Bn as LocationInfo, K as LogTypes, An as LoginSessionState, Q as MONDAY_EPOCH_SHIFT_MS, Ve as NodeType, Se as RedirectTargetEnum, Ki as Strategy, qi as StrategyType, na as TRIGGER_API_SHAPES, Na as USERNAME_CONTAINS_AT_MESSAGE, Ma as USERNAME_INVALID_CHARACTERS_MESSAGE, Z as WEEK_MS, r as actionDependencySchema, l as actionExecutionErrorSchema, ie as actionExecutionInsertSchema, te as actionExecutionLogEntrySchema, ne as actionExecutionLogsSchema, u as actionExecutionResultSchema, re as actionExecutionSchema, c as actionExecutionStatusSchema, ee as actionExecutionTriggerIdSchema, a as actionInsertSchema, We as actionNodeSchema, s as actionSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, ae as actionVersionInsertSchema, oe as actionVersionSchema, ji as activeUsersResponseSchema, ce as actorSchema, m as addressSchema, sn as allowedTriggersForHook, Bi as analyticsColumnMetaSchema, Pi as analyticsGroupBySchema, Ni as analyticsIntervalSchema, Hi as analyticsQueryResponseSchema, Mi as analyticsResourceSchema, Vi as analyticsStatisticsSchema, Fi as analyticsUserTypeSchema, er as attackProtectionSchema, se as auditCategorySchema, me as auditEventInsertSchema, he as auditEventSchema, pe as auth0ClientSchema, Xe as auth0FlowInsertSchema, Ye as auth0FlowSchema, Ee as auth0QuerySchema, be as auth0UpdateUserActionSchema, Oe as auth0UserResponseSchema, et as authParamsSchema, $i as authenticationMethodInsertSchema, ea as authenticationMethodSchema, Xi as authenticationMethodTypeSchema, h as baseUserSchema, Ht as blockComponentSchema, Tr as bordersSchema, tt as brandingSchema, Zn as breachedPasswordDetectionSchema, Qn as bruteForceProtectionSchema, Aa as buildRefreshTokenRetention, ka as buildSessionRetention, Ie as buttonComponentSchema, $e as claimsRequestSchema, y as clientGrantInsertSchema, Ne as clientGrantListSchema, b as clientGrantSchema, v as clientInsertSchema, S as clientRegistrationTokenInsertSchema, Pe as clientRegistrationTokenSchema, x as clientRegistrationTokenTypeSchema, Me as clientSchema, rt as codeInsertSchema, it as codeSchema, nt as codeTypeSchema, Er as colorsSchema, $t as componentMessageSchema, Be as componentSchema, ot as connectionInsertSchema, at as connectionOptionsSchema, st as connectionSchema, C as coordinatesSchema, ia as createPassthroughAdapter, aa as createWriteOnlyAdapter, ft as customDomainCertificateUploadSchema, A as customDomainInsertSchema, lt as customDomainSchema, ut as customDomainUpdateSchema, dt as customDomainWithTenantIdSchema, Gi as customTextEntrySchema, Wi as customTextSchema, Ai as dailyStatsSchema, ha as decodeBase32, pa as decodeBase64, la as decodeBase64Url, da as decodeBase64UrlString, va as decodeCursor, Wr as emailProviderSchema, Gr as emailTemplateNameSchema, Kr as emailTemplateSchema, ye as emailVerificationRulesSchema, xe as emailVerifyActionSchema, ma as encodeBase32, fa as encodeBase64, ca as encodeBase64Url, ua as encodeBase64UrlString, _a as encodeCursor, ga as encodeHex, Je as endingSchema, xa as escapeLuceneValue, Wt as fieldComponentSchema, d as flowActionStepSchema, we as flowInsertSchema, Te as flowSchema, Re as flowsFieldComponentSchema, Ue as flowsFlowNodeSchema, He as flowsStepNodeSchema, J as fontDetailsSchema, Dr as fontsSchema, Kt as formControlSchema, Zt as formInsertSchema, F as formNodeComponentDefinition, Xt as formNodeSchema, Qt as formSchema, ze as genericComponentSchema, Ge as genericNodeSchema, oa as getConnectionIdentifierConfig, Rn as getLogTypeCategory, Ln as getLogTypeDescription, ai as grantInsertSchema, oi as grantSchema, Pr as handlerConfigSchema, xn as hookCodeInsertSchema, Sn as hookCodeSchema, mn as hookInsertSchema, H as hookPageId, bn as hookSchema, U as hookTemplateId, cn as hookTemplates, p as identitySchema, ta as importMetadataSchema, Tn as inviteInsertSchema, En as inviteSchema, wn as inviteeSchema, Cn as inviterSchema, nn as isBlockComponent, Yi as isDatabaseConnectionStrategy, Ea as isEmailSearchTerm, an as isFieldComponent, sa as isPlainObject, rn as isWidgetComponent, On as jwksKeySchema, Dn as jwksSchema, Le as legalComponentSchema, fe as locationInfoSchema, Vn as logInsertSchema, Hn as logSchema, Wn as logStreamFilterSchema, Gn as logStreamInsertSchema, Kn as logStreamSchema, q as logStreamStatusSchema, Un as logStreamTypeSchema, In as logTypeCategories, Fn as logTypeDescriptions, G as loginSessionAuthStrategySchema, Mn as loginSessionInsertSchema, Nn as loginSessionSchema, jn as loginSessionStateSchema, Nr as matchSchema, qn as migrationProviderTypeSchema, Jn as migrationSourceCredentialsSchema, Yn as migrationSourceInsertSchema, Xn as migrationSourceSchema, Ke as nodeSchema, Fa as normalizeUsername, kn as openIDConfigurationSchema, yi as organizationBrandingSchema, wi as organizationConnectionInsertSchema, Ei as organizationConnectionListSchema, Ti as organizationConnectionSchema, bi as organizationEnabledConnectionSchema, Si as organizationInsertSchema, Ci as organizationSchema, xi as organizationTokenQuotaSchema, Or as pageBackgroundSchema, ra as parseUserId, tr as passwordInsertSchema, nr as passwordSchema, f as profileDataSchema, Ui as promptScreenSchema, Mr as promptSettingSchema, Y as proxyRouteInsertSchema, Fr as proxyRouteSchema, Ir as proxyRouteUpdateSchema, Ce as redirectActionSchema, qr as refreshTokenInsertSchema, Ri as refreshTokenRetentionCohortSchema, zi as refreshTokenRetentionResponseSchema, Jr as refreshTokenSchema, ue as requestContextSchema, $r as resourceServerInsertSchema, ti as resourceServerListSchema, Qr as resourceServerOptionsSchema, ei as resourceServerSchema, Zr as resourceServerScopeSchema, de as responseContextSchema, E as richTextComponentSchema, gi as roleInsertSchema, vi as roleListSchema, ni as rolePermissionInsertSchema, ii as rolePermissionListSchema, ri as rolePermissionSchema, _i as roleSchema, br as rolloutInsertSchema, vr as rolloutKindSchema, xr as rolloutSchema, yr as rolloutStatusSchema, Sr as rolloutUpdateSchema, wa as sanitizeLuceneQuery, Rr as scimConfigurationInsertSchema, zr as scimConfigurationSchema, Hr as scimExternalIdInsertSchema, Ur as scimExternalIdSchema, Lr as scimMappingEntrySchema, Br as scimTokenInsertSchema, Vr as scimTokenSchema, en as screenLinkSchema, ir as sessionInsertSchema, Ii as sessionRetentionCohortSchema, Li as sessionRetentionResponseSchema, Oa as sessionRetentionWindow, ar as sessionSchema, or as signingKeySchema, Xr as smsProviderSchema, Yr as smsSendParamsSchema, Ca as splitLuceneOrGroups, qe as startSchema, $n as suspiciousIpThrottlingSchema, le as targetSchema, sr as tenantInsertSchema, dr as tenantOperationEngineSchema, gr as tenantOperationEventInsertSchema, hr as tenantOperationEventOutcomeSchema, _r as tenantOperationEventSchema, fr as tenantOperationInsertSchema, lr as tenantOperationKindSchema, pr as tenantOperationSchema, ur as tenantOperationStatusSchema, mr as tenantOperationUpdateSchema, cr as tenantSchema, ki as tenantSettingsSchema, Ar as themeInsertSchema, jr as themeSchema, wr as tokenResponseSchema, ya as tokenizeLuceneQuery, De as totalsSchema, tn as uiScreenSchema, ba as unescapeLuceneValue, Sa as unquoteLuceneValue, si as userActivitySchema, g as userInsertSchema, Di as userOrganizationInsertSchema, Oi as userOrganizationSchema, ci as userPermissionInsertSchema, ui as userPermissionListSchema, li as userPermissionSchema, fi as userPermissionWithDetailsListSchema, di as userPermissionWithDetailsSchema, ke as userResponseSchema, pi as userRoleInsertSchema, hi as userRoleListSchema, mi as userRoleSchema, _ as userSchema, Pa as usernameHasOnlyAllowedCharacters, Ia as validateUsername, ct as verificationMethodsSchema, Da as weekIndex, $ as weekStartMs, Ut as widgetComponentSchema, kr as widgetSchema };