@authhero/adapter-interfaces 4.11.0 → 4.13.0

package/dist/adapter-interfaces.mjs

@@ -33,23 +33,23 @@ var t = e.object({
 		name: e.string(),
 		value: e.string().optional()
 	})).optional()
-}).extend(t.shape), ee = e.string(), c = e.enum([
+}).extend(t.shape), c = e.object({ name: e.string() }), ee = s.extend({ secrets: e.array(c).optional() }), l = e.string(), te = e.enum([
 	"unspecified",
 	"pending",
 	"final",
 	"partial",
 	"canceled",
 	"suspended"
-]), l = e.object({
+]), ne = e.object({
 	id: e.string(),
 	msg: e.string(),
 	url: e.string().optional()
-}), u = e.object({
+}), re = e.object({
 	action_name: e.string(),
-	error: l.nullable(),
+	error: ne.nullable(),
 	started_at: e.string(),
 	ended_at: e.string()
-}), te = e.object({
+}), ie = e.object({
 	level: e.enum([
 		"log",
 		"info",
@@ -58,23 +58,23 @@ var t = e.object({
 		"debug"
 	]),
 	message: e.string()
-}), ne = e.array(e.object({
+}), ae = e.array(e.object({
 	action_name: e.string(),
-	lines: e.array(te)
-})), re = e.object({
+	lines: e.array(ie)
+})), oe = e.object({
 	id: e.string(),
 	tenant_id: e.string(),
-	trigger_id: ee,
-	status: c,
-	results: e.array(u),
-	logs: ne.optional(),
+	trigger_id: l,
+	status: te,
+	results: e.array(re),
+	logs: ae.optional(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), ie = re.omit({
+}), se = oe.omit({
 	tenant_id: !0,
 	created_at: !0,
 	updated_at: !0
-}), ae = e.object({
+}), ce = e.object({
 	action_id: e.string(),
 	code: e.string().max(1e5),
 	runtime: e.string().max(50).optional(),
@@ -82,16 +82,16 @@ var t = e.object({
 	secrets: e.array(i).optional(),
 	supported_triggers: e.array(n).optional(),
 	deployed: e.boolean().default(!0)
-}), oe = ae.extend({
+}), le = ce.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	number: e.number().int()
-}).extend(t.shape), se = e.enum([
+}).extend(t.shape), ue = e.enum([
 	"user_action",
 	"admin_action",
 	"system",
 	"api"
-]), ce = e.object({
+]), de = e.object({
 	type: e.enum([
 		"user",
 		"admin",
@@ -105,7 +105,7 @@ var t = e.object({
 	org_name: e.string().optional(),
 	scopes: e.array(e.string()).optional(),
 	client_id: e.string().optional()
-}), le = e.object({
+}), fe = e.object({
 	type: e.string(),
 	id: e.string(),
 	before: e.record(e.string(), e.unknown()).optional(),
@@ -114,7 +114,7 @@ var t = e.object({
 		old: e.unknown(),
 		new: e.unknown()
 	})).optional()
-}), ue = e.object({
+}), pe = e.object({
 	method: e.string(),
 	path: e.string(),
 	query: e.record(e.string(), e.string()).optional(),
@@ -123,30 +123,30 @@ var t = e.object({
 	user_agent: e.string().optional(),
 	correlation_id: e.string().optional(),
 	redirect_uri: e.string().optional()
-}), de = e.object({
+}), me = e.object({
 	status_code: e.number(),
 	body: e.unknown().optional()
-}), fe = e.object({
+}), he = e.object({
 	country_code: e.string(),
 	city_name: e.string(),
 	latitude: e.string(),
 	longitude: e.string(),
 	time_zone: e.string(),
 	continent_code: e.string()
-}), pe = e.object({
+}), ge = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.record(e.string(), e.string()).optional()
-}), me = e.object({
+}), _e = e.object({
 	tenant_id: e.string(),
 	event_type: e.string(),
 	log_type: e.string(),
 	description: e.string().optional(),
-	category: se,
-	actor: ce,
-	target: le,
-	request: ue,
-	response: de.optional(),
+	category: ue,
+	actor: de,
+	target: fe,
+	request: pe,
+	response: me.optional(),
 	connection: e.string().optional(),
 	connection_id: e.string().optional(),
 	client_name: e.string().optional(),
@@ -154,29 +154,29 @@ var t = e.object({
 	strategy_type: e.string().optional(),
 	audience: e.string().optional(),
 	scope: e.string().optional(),
-	location: fe.optional(),
-	auth0_client: pe.optional(),
+	location: he.optional(),
+	auth0_client: ge.optional(),
 	hostname: e.string(),
 	is_mobile: e.boolean().optional(),
 	timestamp: e.string()
-}), he = me.extend({ id: e.string() }), ge = e.enum([
+}), ve = _e.extend({ id: e.string() }), ye = e.enum([
 	"AUTH0",
 	"EMAIL",
 	"REDIRECT"
-]), _e = e.enum([
+]), be = e.enum([
 	"CREATE_USER",
 	"GET_USER",
 	"UPDATE_USER",
 	"SEND_REQUEST",
 	"SEND_EMAIL"
-]), ve = e.enum(["VERIFY_EMAIL"]), ye = e.object({
+]), xe = e.enum(["VERIFY_EMAIL"]), Se = e.object({
 	require_mx_record: e.boolean().optional(),
 	block_aliases: e.boolean().optional(),
 	block_free_emails: e.boolean().optional(),
 	block_disposable_emails: e.boolean().optional(),
 	blocklist: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional()
-}), be = e.object({
+}), Ce = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("AUTH0"),
@@ -188,7 +188,7 @@ var t = e.object({
 		user_id: e.string(),
 		changes: e.record(e.string(), e.any())
 	})
-}), xe = e.object({
+}), we = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("EMAIL"),
@@ -197,13 +197,13 @@ var t = e.object({
 	mask_output: e.boolean().optional(),
 	params: e.object({
 		email: e.string(),
-		rules: ye.optional()
+		rules: Se.optional()
 	})
-}), Se = e.enum([
+}), Te = e.enum([
 	"change-email",
 	"account",
 	"custom"
-]), Ce = e.object({
+]), Ee = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("REDIRECT"),
@@ -211,32 +211,32 @@ var t = e.object({
 	allow_failure: e.boolean().optional(),
 	mask_output: e.boolean().optional(),
 	params: e.object({
-		target: Se.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
+		target: Te.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
 		custom_url: e.string().optional().openapi({ description: "Custom URL to redirect to when target is 'custom'" })
 	})
-}), d = e.union([
-	be,
-	xe,
-	Ce
-]), we = e.object({
+}), De = e.union([
+	Ce,
+	we,
+	Ee
+]), Oe = e.object({
 	name: e.string().min(1).max(150).openapi({ description: "The name of the flow" }),
-	actions: e.array(d).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
-}), Te = we.extend(t.shape).extend({ id: e.string().openapi({
+	actions: e.array(De).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
+}), ke = Oe.extend(t.shape).extend({ id: e.string().openapi({
 	description: "Unique identifier for the flow",
 	example: "af_12tMpdJ3iek7svMyZkSh5M"
-}) }), Ee = e.object({
+}) }), Ae = e.object({
 	page: e.string().min(0).optional().default("0").transform((e) => parseInt(e, 10)).openapi({ description: "The page number where 0 is the first page" }),
 	per_page: e.string().min(1).optional().default("50").transform((e) => parseInt(e, 10)).openapi({ description: "The number of items per page. Defaults to 50." }),
 	include_totals: e.string().optional().default("false").transform((e) => e === "true").openapi({ description: "If the total number of items should be included in the response" }),
 	sort: e.string().regex(/^.+:(-1|1)$/).optional().openapi({ description: "A property that should have the format 'string:-1' or 'string:1'" }),
 	q: e.string().optional().openapi({ description: "A lucene query string used to filter the results" })
-}), De = e.object({
+}), je = e.object({
 	start: e.number(),
 	limit: e.number(),
 	length: e.number(),
 	total: e.number().optional(),
 	next: e.string().optional()
-}), f = e.object({
+}), u = e.object({
 	email: e.string().optional(),
 	email_verified: e.boolean().optional(),
 	name: e.string().optional(),
@@ -245,7 +245,7 @@ var t = e.object({
 	phone_number: e.string().optional(),
 	phone_verified: e.boolean().optional(),
 	family_name: e.string().optional()
-}).catchall(e.any()), p = e.object({
+}).catchall(e.any()), d = e.object({
 	connection: e.string(),
 	user_id: e.string(),
 	provider: e.string(),
@@ -258,15 +258,15 @@ var t = e.object({
 	access_token: e.string().optional(),
 	access_token_secret: e.string().optional(),
 	refresh_token: e.string().optional(),
-	profileData: f.optional()
-}), m = e.object({
+	profileData: u.optional()
+}), f = e.object({
 	formatted: e.string().optional(),
 	street_address: e.string().optional(),
 	locality: e.string().optional(),
 	region: e.string().optional(),
 	postal_code: e.string().optional(),
 	country: e.string().optional()
-}).optional(), h = e.object({
+}).optional(), p = e.object({
 	email: e.string().transform((e) => e.toLowerCase()).optional(),
 	username: e.string().refine((e) => !e.includes("@"), { message: "Usernames must not contain \"@\". Use the email field for email addresses." }).optional(),
 	phone_number: e.string().optional(),
@@ -289,8 +289,8 @@ var t = e.object({
 	gender: e.string().optional(),
 	birthdate: e.string().optional(),
 	zoneinfo: e.string().optional(),
-	address: m
-}), g = h.extend({
+	address: f
+}), m = p.extend({
 	email_verified: e.boolean().default(!1),
 	verify_email: e.boolean().optional(),
 	last_ip: e.string().optional(),
@@ -305,29 +305,29 @@ var t = e.object({
 		hash: e.string(),
 		algorithm: e.string()
 	}).optional()
-}), _ = g.omit({ password: !0 }).extend(t.shape).extend({
+}), h = m.omit({ password: !0 }).extend(t.shape).extend({
 	user_id: e.string(),
 	provider: e.string(),
 	is_social: e.boolean(),
 	email: e.string().optional(),
 	login_count: e.number().default(0),
-	identities: e.array(p).optional()
-}), Oe = _.omit({ registration_completed_at: !0 }), ke = h.extend({
+	identities: e.array(d).optional()
+}), Me = h.omit({ registration_completed_at: !0 }), Ne = p.extend({
 	login_count: e.number(),
 	multifactor: e.array(e.string()).optional(),
 	last_ip: e.string().optional(),
 	last_login: e.string().optional(),
 	user_id: e.string()
-}).catchall(e.any()), Ae = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", je = (e = 21) => {
+}).catchall(e.any()), Pe = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Fe = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += Ae[n[e] & 63];
+	for (; e--;) t += Pe[n[e] & 63];
 	return t;
-}, v = e.object({
+}, g = e.object({
 	client_id: e.string().optional().openapi({ description: "ID of this client. Generated server-side if omitted (Auth0 behavior)." }),
 	name: e.string().min(1).openapi({ description: "Name of this client (min length: 1 character, does not allow < or >)." }),
 	description: e.string().max(140).optional().openapi({ description: "Free text description of this client (max length: 140 characters)." }),
 	global: e.boolean().default(!1).openapi({ description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)." }),
-	client_secret: e.string().default(() => je()).optional().openapi({ description: "Client secret (which you must not make public)." }),
+	client_secret: e.string().default(() => Fe()).optional().openapi({ description: "Client secret (which you must not make public)." }),
 	app_type: e.enum([
 		"native",
 		"spa",
@@ -440,10 +440,10 @@ var t = e.object({
 	]).optional().openapi({ description: "Provenance of this client. `manual` = Management API; `open_dcr` = RFC 7591 without IAT; `iat_dcr` = RFC 7591 with an Initial Access Token." }),
 	registration_metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Arbitrary metadata captured at Dynamic Client Registration time that isn't a first-class client field (e.g. integration_type, domain). Also stores `iat_constraints` for clients created via IAT so RFC 7592 PUT can enforce field immutability." }),
 	user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({ description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies." })
-}), Me = e.object({
+}), Ie = e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(v.shape).extend({ client_id: e.string() }), y = e.object({
+}).extend(g.shape).extend({ client_id: e.string() }), _ = e.object({
 	client_id: e.string().min(1).openapi({ description: "ID of the client." }),
 	audience: e.string().min(1).openapi({ description: "The audience (API identifier) of this client grant." }),
 	scope: e.array(e.string()).optional().openapi({ description: "Scopes allowed for this client grant." }),
@@ -456,38 +456,38 @@ var t = e.object({
 	is_system: e.boolean().optional().openapi({ description: "If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly." }),
 	subject_type: e.enum(["client", "user"]).optional().openapi({ description: "The type of application access the client grant allows. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." }),
 	authorization_details_types: e.array(e.string()).optional().openapi({ description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." })
-}), b = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(y.shape).extend({
+}), v = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(_.shape).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Ne = e.array(b), x = e.enum(["iat", "rat"]), S = e.object({
+}), Le = e.array(v), y = e.enum(["iat", "rat"]), b = e.object({
 	id: e.string(),
 	token_hash: e.string(),
-	type: x,
+	type: y,
 	client_id: e.string().optional(),
 	sub: e.string().optional(),
 	constraints: e.record(e.string(), e.unknown()).optional(),
 	single_use: e.boolean().default(!1),
 	expires_at: e.string().optional()
-}), Pe = e.object({
+}), Re = e.object({
 	created_at: e.string(),
 	used_at: e.string().optional(),
 	revoked_at: e.string().optional()
-}).extend(S.shape), C = e.object({
+}).extend(b.shape), x = e.object({
 	x: e.number(),
 	y: e.number()
-}), Fe = /* @__PURE__ */ function(e) {
+}), S = /* @__PURE__ */ function(e) {
 	return e.RICH_TEXT = "RICH_TEXT", e.NEXT_BUTTON = "NEXT_BUTTON", e.BACK_BUTTON = "BACK_BUTTON", e.SUBMIT_BUTTON = "SUBMIT_BUTTON", e.DIVIDER = "DIVIDER", e.TEXT = "TEXT", e.EMAIL = "EMAIL", e.PASSWORD = "PASSWORD", e.NUMBER = "NUMBER", e.PHONE = "PHONE", e.DATE = "DATE", e.CHECKBOX = "CHECKBOX", e.RADIO = "RADIO", e.SELECT = "SELECT", e.HIDDEN = "HIDDEN", e.LEGAL = "LEGAL", e;
-}({}), w = /* @__PURE__ */ function(e) {
+}({}), C = /* @__PURE__ */ function(e) {
 	return e.BLOCK = "BLOCK", e.FIELD = "FIELD", e;
-}({}), T = e.object({
+}({}), w = e.object({
 	id: e.string(),
-	category: e.nativeEnum(w),
-	type: e.nativeEnum(Fe)
-}), E = T.extend({
+	category: e.nativeEnum(C),
+	type: e.nativeEnum(S)
+}), ze = w.extend({
 	category: e.literal("BLOCK"),
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string() }).passthrough()
-}), Ie = T.extend({
+}), Be = w.extend({
 	category: e.literal("BLOCK"),
 	type: e.union([
 		e.literal("NEXT_BUTTON"),
@@ -495,13 +495,13 @@ var t = e.object({
 		e.literal("SUBMIT_BUTTON")
 	]),
 	config: e.object({ text: e.string() }).passthrough()
-}), Le = T.extend({
+}), Ve = w.extend({
 	category: e.literal("FIELD"),
 	type: e.literal("LEGAL"),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional(),
 	config: e.object({ text: e.string() }).passthrough()
-}), Re = T.extend({
+}), He = w.extend({
 	category: e.literal("FIELD"),
 	type: e.union([
 		e.literal("TEXT"),
@@ -521,40 +521,40 @@ var t = e.object({
 		label: e.string().optional(),
 		placeholder: e.string().optional()
 	}).passthrough()
-}), ze = e.object({
+}), Ue = e.object({
 	id: e.string(),
 	category: e.string(),
 	type: e.string()
-}).passthrough(), Be = e.union([
-	E,
-	Ie,
-	Le,
-	Re,
-	ze
-]), Ve = /* @__PURE__ */ function(e) {
+}).passthrough(), We = e.union([
+	ze,
+	Be,
+	Ve,
+	He,
+	Ue
+]), Ge = /* @__PURE__ */ function(e) {
 	return e.STEP = "STEP", e.FLOW = "FLOW", e.CONDITION = "CONDITION", e.ACTION = "ACTION", e;
-}({}), He = e.object({
+}({}), Ke = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: C,
+	coordinates: x,
 	alias: e.string().optional(),
 	config: e.object({
-		components: e.array(Be),
+		components: e.array(We),
 		next_node: e.string()
 	}).passthrough()
-}), Ue = e.object({
+}), qe = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: C,
+	coordinates: x,
 	alias: e.string().optional(),
 	config: e.object({
 		flow_id: e.string(),
 		next_node: e.string()
 	})
-}), We = e.object({
+}), Je = e.object({
 	id: e.string(),
 	type: e.literal("ACTION"),
-	coordinates: C,
+	coordinates: x,
 	alias: e.string().optional(),
 	config: e.object({
 		action_type: e.enum(["REDIRECT"]).openapi({ description: "The type of action to perform" }),
@@ -566,56 +566,56 @@ var t = e.object({
 		custom_url: e.string().optional().openapi({ description: "Custom URL when target is 'custom'" }),
 		next_node: e.string().openapi({ description: "The next node to navigate to after action (for non-redirect actions)" })
 	}).passthrough()
-}), Ge = e.object({
+}), Ye = e.object({
 	id: e.string(),
 	type: e.string(),
-	coordinates: C
-}).passthrough(), Ke = e.union([
-	He,
-	Ue,
-	We,
-	Ge
-]), qe = e.object({
+	coordinates: x
+}).passthrough(), Xe = e.union([
+	Ke,
+	qe,
+	Je,
+	Ye
+]), Ze = e.object({
 	next_node: e.string(),
-	coordinates: C
-}).passthrough(), Je = e.object({
+	coordinates: x
+}).passthrough(), Qe = e.object({
 	resume_flow: e.boolean().optional(),
-	coordinates: C
-}).passthrough(), Ye = e.object({
+	coordinates: x
+}).passthrough(), $e = e.object({
 	id: e.string(),
 	name: e.string(),
 	languages: e.object({ primary: e.string() }).passthrough(),
-	nodes: e.array(Ke),
-	start: qe,
-	ending: Je,
+	nodes: e.array(Xe),
+	start: Ze,
+	ending: Qe,
 	created_at: e.string(),
 	updated_at: e.string(),
 	links: e.object({
 		sdkSrc: e.string().optional(),
 		sdk_src: e.string().optional()
 	}).passthrough()
-}).passthrough(), Xe = Ye.omit({
+}).passthrough(), et = $e.omit({
 	id: !0,
 	created_at: !0,
 	updated_at: !0
-}), D = /* @__PURE__ */ function(e) {
+}), T = /* @__PURE__ */ function(e) {
 	return e.TOKEN = "token", e.ID_TOKEN = "id_token", e.TOKEN_ID_TOKEN = "id_token token", e.CODE = "code", e.CODE_ID_TOKEN = "code id_token", e.CODE_TOKEN = "code token", e.CODE_ID_TOKEN_TOKEN = "code id_token token", e;
-}({}), O = /* @__PURE__ */ function(e) {
+}({}), E = /* @__PURE__ */ function(e) {
 	return e.QUERY = "query", e.FRAGMENT = "fragment", e.FORM_POST = "form_post", e.WEB_MESSAGE = "web_message", e.SAML_POST = "saml_post", e;
-}({}), Ze = /* @__PURE__ */ function(e) {
+}({}), tt = /* @__PURE__ */ function(e) {
 	return e.S256 = "S256", e.Plain = "plain", e;
-}({}), Qe = e.union([e.null(), e.object({
+}({}), nt = e.union([e.null(), e.object({
 	essential: e.boolean().optional(),
 	value: e.unknown().optional(),
 	values: e.array(e.unknown()).optional()
-})]).nullable(), $e = e.object({
-	userinfo: e.record(e.string(), Qe).optional(),
-	id_token: e.record(e.string(), Qe).optional()
-}), et = e.object({
+})]).nullable(), rt = e.object({
+	userinfo: e.record(e.string(), nt).optional(),
+	id_token: e.record(e.string(), nt).optional()
+}), it = e.object({
 	client_id: e.string(),
 	act_as: e.string().optional(),
-	response_type: e.nativeEnum(D).optional(),
-	response_mode: e.nativeEnum(O).optional(),
+	response_type: e.nativeEnum(T).optional(),
+	response_mode: e.nativeEnum(E).optional(),
 	redirect_uri: e.string().optional(),
 	audience: e.string().optional(),
 	organization: e.string().optional(),
@@ -623,15 +623,15 @@ var t = e.object({
 	nonce: e.string().optional(),
 	scope: e.string().optional(),
 	prompt: e.string().optional(),
-	code_challenge_method: e.nativeEnum(Ze).optional(),
+	code_challenge_method: e.nativeEnum(tt).optional(),
 	code_challenge: e.string().optional(),
 	username: e.string().optional(),
 	ui_locales: e.string().optional(),
 	max_age: e.number().optional(),
 	acr_values: e.string().optional(),
-	claims: $e.optional(),
+	claims: rt.optional(),
 	vendor_id: e.string().optional()
-}), tt = e.object({
+}), at = e.object({
 	colors: e.object({
 		primary: e.string(),
 		page_background: e.union([e.string(), e.object({
@@ -650,19 +650,20 @@ var t = e.object({
 		"light",
 		"auto"
 	]).optional()
-}), nt = e.enum([
+}), ot = e.enum([
 	"password_reset",
 	"email_verification",
 	"otp",
 	"mfa_otp",
 	"authorization_code",
 	"oauth2_state",
-	"ticket"
-]), rt = e.object({
+	"ticket",
+	"client_assertion_jti"
+]), st = e.object({
 	code_id: e.string().openapi({ description: "The code that will be used in for instance an email verification flow" }),
-	login_id: e.string().openapi({ description: "The id of the login session that the code is connected to" }),
+	login_id: e.string().optional().openapi({ description: "The id of the login session that the code is connected to" }),
 	connection_id: e.string().optional().openapi({ description: "The connection that the code is connected to" }),
-	code_type: nt,
+	code_type: ot,
 	code_verifier: e.string().optional().openapi({ description: "The code verifier used in PKCE in outbound flows" }),
 	code_challenge: e.string().optional().openapi({ description: "The code challenge used in PKCE in outbound flows" }),
 	code_challenge_method: e.enum(["plain", "S256"]).optional().openapi({ description: "The code challenge method used in PKCE in outbound flows" }),
@@ -673,7 +674,7 @@ var t = e.object({
 	expires_at: e.string(),
 	used_at: e.string().optional(),
 	user_id: e.string().optional()
-}), it = rt.extend({ created_at: e.string() }), at = e.object({
+}), ct = st.extend({ created_at: e.string() }), lt = e.object({
 	kid: e.string().optional(),
 	team_id: e.string().optional(),
 	realms: e.string().optional(),
@@ -793,35 +794,35 @@ var t = e.object({
 		"never_on_login"
 	]).optional()
 });
-function k(e) {
+function D(e) {
 	if (e !== null) {
-		if (Array.isArray(e)) return e.filter((e) => e !== null).map(k);
+		if (Array.isArray(e)) return e.filter((e) => e !== null).map(D);
 		if (e && typeof e == "object") {
 			let t = {};
-			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = k(r));
+			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = D(r));
 			return t;
 		}
 		return e;
 	}
 }
-var ot = e.object({
+var ut = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	display_name: e.string().optional(),
 	strategy: e.string(),
-	options: e.preprocess((e) => e === null ? {} : k(e), at).default({}),
+	options: e.preprocess((e) => e === null ? {} : D(e), lt).default({}),
 	enabled_clients: e.array(e.string()).default([]).optional(),
-	response_type: e.nativeEnum(D).optional(),
-	response_mode: e.nativeEnum(O).optional(),
+	response_type: e.nativeEnum(T).optional(),
+	response_mode: e.nativeEnum(E).optional(),
 	is_domain_connection: e.boolean().optional(),
 	show_as_button: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional(),
 	is_system: e.boolean().optional()
-}), st = e.object({
+}), dt = e.object({
 	id: e.string(),
 	created_at: e.string().transform((e) => e === null ? "" : e),
 	updated_at: e.string().transform((e) => e === null ? "" : e)
-}).extend(ot.shape), A = e.object({
+}).extend(ut.shape), O = e.object({
 	domain: e.string(),
 	custom_domain_id: e.string().optional(),
 	type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -835,7 +836,7 @@ var ot = e.object({
 		"null"
 	]).optional(),
 	domain_metadata: e.record(e.string(), e.string().max(255)).optional()
-}), ct = e.discriminatedUnion("name", [e.object({
+}), ft = e.discriminatedUnion("name", [e.object({
 	name: e.literal("txt"),
 	record: e.string(),
 	domain: e.string()
@@ -843,7 +844,7 @@ var ot = e.object({
 	name: e.literal("http"),
 	http_body: e.string(),
 	http_url: e.string()
-})]), lt = A.extend({
+})]), pt = O.extend({
 	custom_domain_id: e.string(),
 	primary: e.boolean(),
 	status: e.enum([
@@ -853,26 +854,26 @@ var ot = e.object({
 		"ready"
 	]),
 	origin_domain_name: e.string().optional(),
-	verification: e.object({ methods: e.array(ct) }).optional(),
+	verification: e.object({ methods: e.array(ft) }).optional(),
 	tls_policy: e.string().optional()
-}), ut = A.pick({
+}), mt = O.pick({
 	tls_policy: !0,
 	custom_client_ip_header: !0,
 	domain_metadata: !0
-}).strict(), dt = lt.extend({ tenant_id: e.string() }), ft = e.object({
+}).strict(), ht = pt.extend({ tenant_id: e.string() }), gt = e.object({
 	certificate: e.string().regex(/^-----BEGIN CERTIFICATE-----[\s\S]+-----END CERTIFICATE-----\s*$/, "must be PEM-encoded; include the full certificate chain in leaf-first order"),
 	private_key: e.string().regex(/-----BEGIN (RSA |EC |ENCRYPTED )?PRIVATE KEY-----[\s\S]+-----END \1PRIVATE KEY-----\s*$/, "must be a PEM-encoded private key")
-}), j = e.object({
+}), k = e.object({
 	id: e.string(),
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0)
-}), M = j.extend({ category: e.literal("BLOCK").optional() }), pt = M.extend({
+}), A = k.extend({ category: e.literal("BLOCK").optional() }), _t = A.extend({
 	type: e.literal("DIVIDER"),
 	config: e.object({ text: e.string().optional() }).optional()
-}), mt = M.extend({
+}), vt = A.extend({
 	type: e.literal("HTML"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), ht = M.extend({
+}), yt = A.extend({
 	type: e.literal("IMAGE"),
 	config: e.object({
 		src: e.string().optional(),
@@ -880,43 +881,43 @@ var ot = e.object({
 		width: e.number().optional(),
 		height: e.number().optional()
 	}).optional()
-}), gt = M.extend({
+}), bt = A.extend({
 	type: e.literal("JUMP_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		target_step: e.string().optional()
 	})
-}), _t = M.extend({
+}), xt = A.extend({
 	type: e.literal("RESEND_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		resend_action: e.string().optional()
 	})
-}), vt = M.extend({
+}), St = A.extend({
 	type: e.literal("NEXT_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), yt = M.extend({
+}), Ct = A.extend({
 	type: e.literal("PREVIOUS_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), bt = M.extend({
+}), wt = A.extend({
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), N = j.extend({
+}), j = k.extend({
 	category: e.literal("WIDGET").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), xt = N.extend({
+}), Tt = j.extend({
 	type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
 	config: e.object({ credential_type: e.string().optional() })
-}), St = N.extend({
+}), Et = j.extend({
 	type: e.literal("GMAPS_ADDRESS"),
 	config: e.object({ api_key: e.string().optional() })
-}), Ct = N.extend({
+}), Dt = j.extend({
 	type: e.literal("RECAPTCHA"),
 	config: e.object({ site_key: e.string().optional() })
-}), P = j.extend({
+}), M = k.extend({
 	category: e.literal("FIELD").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
@@ -932,10 +933,10 @@ var ot = e.object({
 	})).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), wt = P.extend({
+}), Ot = M.extend({
 	type: e.literal("BOOLEAN"),
 	config: e.object({ default_value: e.boolean().optional() }).optional()
-}), Tt = P.extend({
+}), kt = M.extend({
 	type: e.literal("CARDS"),
 	config: e.object({
 		options: e.array(e.object({
@@ -946,7 +947,7 @@ var ot = e.object({
 		})).optional(),
 		multi_select: e.boolean().optional()
 	}).optional()
-}), Et = P.extend({
+}), At = M.extend({
 	type: e.literal("CHOICE"),
 	config: e.object({
 		options: e.array(e.object({
@@ -957,7 +958,7 @@ var ot = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), Dt = P.extend({
+}), jt = M.extend({
 	type: e.literal("CODE"),
 	config: e.object({
 		length: e.number().int().positive().max(100).optional(),
@@ -974,7 +975,7 @@ var ot = e.object({
 		message: "default_value is longer than the configured length",
 		path: ["default_value"]
 	}).optional()
-}), Ot = P.extend({
+}), Mt = M.extend({
 	type: e.literal("CUSTOM"),
 	config: e.object({
 		component: e.string().optional(),
@@ -982,7 +983,7 @@ var ot = e.object({
 		schema: e.record(e.string(), e.any()).optional(),
 		code: e.string().optional()
 	})
-}), kt = P.extend({
+}), Nt = M.extend({
 	type: e.literal("DATE"),
 	config: e.object({
 		format: e.string().optional(),
@@ -990,7 +991,7 @@ var ot = e.object({
 		max: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), At = P.extend({
+}), Pt = M.extend({
 	type: e.literal("DROPDOWN"),
 	config: e.object({
 		options: e.array(e.object({
@@ -1002,7 +1003,7 @@ var ot = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), jt = P.extend({
+}), Ft = M.extend({
 	type: e.literal("EMAIL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1010,20 +1011,20 @@ var ot = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), Mt = P.extend({
+}), It = M.extend({
 	type: e.literal("FILE"),
 	config: e.object({
 		accept: e.string().optional(),
 		max_size: e.number().optional(),
 		multiple: e.boolean().optional()
 	}).optional()
-}), Nt = P.extend({
+}), Lt = M.extend({
 	type: e.literal("LEGAL"),
 	config: e.object({
 		text: e.string(),
 		html: e.boolean().optional()
 	}).optional()
-}), Pt = P.extend({
+}), Rt = M.extend({
 	type: e.literal("NUMBER"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1032,7 +1033,7 @@ var ot = e.object({
 		step: e.number().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Ft = P.extend({
+}), zt = M.extend({
 	type: e.literal("PASSWORD"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1041,13 +1042,13 @@ var ot = e.object({
 		forgot_password_link: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), It = P.extend({
+}), Bt = M.extend({
 	type: e.literal("PAYMENT"),
 	config: e.object({
 		provider: e.string().optional(),
 		currency: e.string().optional()
 	}).optional()
-}), Lt = P.extend({
+}), Vt = M.extend({
 	type: e.literal("SOCIAL"),
 	config: e.object({
 		providers: e.array(e.string()).optional(),
@@ -1061,7 +1062,7 @@ var ot = e.object({
 			last_used_label: e.string().optional()
 		})).optional()
 	}).optional()
-}), Rt = P.extend({
+}), Ht = M.extend({
 	type: e.literal("TEL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1069,7 +1070,7 @@ var ot = e.object({
 		default_value: e.string().optional(),
 		allow_email: e.boolean().optional()
 	}).optional()
-}), zt = P.extend({
+}), Ut = M.extend({
 	type: e.literal("TEXT"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1079,41 +1080,37 @@ var ot = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), Bt = P.extend({
+}), Wt = M.extend({
 	type: e.literal("COUNTRY"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Vt = P.extend({
+}), Gt = M.extend({
 	type: e.literal("URL"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Ht = e.discriminatedUnion("type", [
-	pt,
-	mt,
-	ht,
-	gt,
+}), Kt = e.discriminatedUnion("type", [
 	_t,
 	vt,
 	yt,
-	bt
-]), Ut = e.discriminatedUnion("type", [
+	bt,
 	xt,
 	St,
-	Ct
-]), Wt = e.discriminatedUnion("type", [
-	wt,
+	Ct,
+	wt
+]), qt = e.discriminatedUnion("type", [
 	Tt,
 	Et,
-	Dt,
-	Bt,
+	Dt
+]), Jt = e.discriminatedUnion("type", [
 	Ot,
 	kt,
 	At,
 	jt,
+	Wt,
 	Mt,
 	Nt,
 	Pt,
@@ -1122,12 +1119,16 @@ var ot = e.object({
 	Lt,
 	Rt,
 	zt,
-	Vt
-]), F = e.union([
+	Bt,
+	Vt,
 	Ht,
 	Ut,
-	Wt
-]), Gt = new Set([
+	Gt
+]), N = e.union([
+	Kt,
+	qt,
+	Jt
+]), Yt = new Set([
 	"BOOLEAN",
 	"CARDS",
 	"CHOICE",
@@ -1142,7 +1143,7 @@ var ot = e.object({
 	"TEL",
 	"TEXT",
 	"URL"
-]), Kt = e.object({
+]), Xt = e.object({
 	id: e.string(),
 	type: e.literal("submit"),
 	label: e.string(),
@@ -1151,22 +1152,22 @@ var ot = e.object({
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0),
 	customizations: e.record(e.string(), e.any()).optional()
-}), I = e.object({
+}), P = e.object({
 	x: e.number(),
 	y: e.number()
-}), qt = e.object({
+}), Zt = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: I,
+	coordinates: P,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
 		flow_id: e.string().max(30),
 		next_node: e.string().optional()
 	})
-}), Jt = e.object({
+}), Qt = e.object({
 	id: e.string(),
 	type: e.literal("ROUTER"),
-	coordinates: I,
+	coordinates: P,
 	alias: e.string().min(1).max(150),
 	config: e.object({
 		rules: e.array(e.object({
@@ -1177,20 +1178,20 @@ var ot = e.object({
 		})),
 		fallback: e.string()
 	})
-}), Yt = e.object({
+}), $t = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: I,
+	coordinates: P,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
-		components: e.array(F),
+		components: e.array(N),
 		next_node: e.string().optional()
 	})
-}), Xt = e.discriminatedUnion("type", [
-	qt,
-	Jt,
-	Yt
-]), Zt = e.object({
+}), en = e.discriminatedUnion("type", [
+	Zt,
+	Qt,
+	$t
+]), tn = e.object({
 	name: e.string().openapi({ description: "The name of the form" }),
 	messages: e.object({
 		errors: e.record(e.string(), e.any()).optional(),
@@ -1201,14 +1202,14 @@ var ot = e.object({
 		default: e.string().optional()
 	}).optional(),
 	translations: e.record(e.string(), e.any()).optional(),
-	nodes: e.array(Xt).optional(),
+	nodes: e.array(en).optional(),
 	start: e.object({
 		hidden_fields: e.array(e.object({
 			key: e.string(),
 			value: e.string()
 		})).optional(),
 		next_node: e.string().optional(),
-		coordinates: I.optional()
+		coordinates: P.optional()
 	}).optional(),
 	ending: e.object({
 		redirection: e.object({
@@ -1216,7 +1217,7 @@ var ot = e.object({
 			target: e.string().optional()
 		}).optional(),
 		after_submit: e.object({ flow_id: e.string().optional() }).optional(),
-		coordinates: I.optional(),
+		coordinates: P.optional(),
 		resume_flow: e.boolean().optional()
 	}).optional(),
 	style: e.object({ css: e.string().optional() }).optional(),
@@ -1224,7 +1225,7 @@ var ot = e.object({
 		sdkSrc: e.string().optional(),
 		sdk_src: e.string().optional()
 	}).optional()
-}).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" }), Qt = t.extend(Zt.shape).extend({ id: e.string() }), $t = e.object({
+}).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" }), nn = t.extend(tn.shape).extend({ id: e.string() }), rn = e.object({
 	id: e.number().optional(),
 	text: e.string(),
 	type: e.enum([
@@ -1233,34 +1234,34 @@ var ot = e.object({
 		"success",
 		"warning"
 	])
-}), en = e.object({
+}), an = e.object({
 	id: e.string().optional(),
 	text: e.string(),
 	href: e.string(),
 	linkText: e.string().optional()
-}), tn = e.object({
+}), on = e.object({
 	name: e.string().optional(),
 	action: e.string(),
 	method: e.enum(["POST", "GET"]),
 	title: e.string().optional(),
 	description: e.string().optional(),
-	components: e.array(F),
-	messages: e.array($t).optional(),
-	links: e.array(en).optional(),
+	components: e.array(N),
+	messages: e.array(rn).optional(),
+	links: e.array(an).optional(),
 	footer: e.string().optional()
 });
-function nn(e) {
+function sn(e) {
 	return e.category === "BLOCK";
 }
-function rn(e) {
+function cn(e) {
 	return e.category === "WIDGET";
 }
-function an(e) {
+function ln(e) {
 	return e.category === "FIELD";
 }
 //#endregion
 //#region src/types/Hook.ts
-var L = e.enum([
+var F = e.enum([
 	"pre-user-registration",
 	"post-user-registration",
 	"post-user-login",
@@ -1268,48 +1269,48 @@ var L = e.enum([
 	"validate-registration-username",
 	"pre-user-deletion",
 	"post-user-deletion"
-]), R = e.enum(["post-user-login"]), z = e.enum([
+]), I = e.enum(["post-user-login"]), L = e.enum([
 	"post-user-login",
 	"post-user-registration",
 	"post-user-update",
 	"credentials-exchange"
-]), B = e.enum([
+]), R = e.enum([
 	"post-user-login",
 	"credentials-exchange",
 	"pre-user-registration",
 	"post-user-registration"
-]), V = e.enum(["post-user-login"]), on = [
+]), z = e.enum(["post-user-login"]), un = [
 	{
 		field: "url",
-		triggers: L.options
+		triggers: F.options
 	},
 	{
 		field: "form_id",
-		triggers: R.options
+		triggers: I.options
 	},
 	{
 		field: "template_id",
-		triggers: z.options
+		triggers: L.options
 	},
 	{
 		field: "code_id",
-		triggers: B.options
+		triggers: R.options
 	},
 	{
 		field: "page_id",
-		triggers: V.options
+		triggers: z.options
 	}
 ];
-function sn(e) {
+function dn(e) {
 	if (!(!e || typeof e != "object")) {
-		for (let t of on) if (typeof Reflect.get(e, t.field) == "string") return t.triggers;
+		for (let t of un) if (typeof Reflect.get(e, t.field) == "string") return t.triggers;
 	}
 }
-var H = e.enum(["impersonate"]), U = e.enum([
+var B = e.enum(["impersonate"]), V = e.enum([
 	"ensure-username",
 	"set-preferred-username",
 	"account-linking"
-]), cn = {
+]), fn = {
 	"ensure-username": {
 		name: "Ensure Username",
 		description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1329,87 +1330,87 @@ var H = e.enum(["impersonate"]), U = e.enum([
 			"post-user-update"
 		]
 	}
-}, W = {
+}, H = {
 	enabled: e.boolean().default(!1),
 	synchronous: e.boolean().default(!1),
 	priority: e.number().optional(),
 	hook_id: e.string().optional(),
 	metadata: e.record(e.string(), e.unknown()).optional()
-}, ln = e.object({
-	...W,
-	trigger_id: L,
+}, pn = e.object({
+	...H,
+	trigger_id: F,
 	url: e.string()
-}), un = e.object({
-	...W,
-	trigger_id: R,
+}), mn = e.object({
+	...H,
+	trigger_id: I,
 	form_id: e.string()
-}), dn = e.object({
-	...W,
-	trigger_id: z,
-	template_id: U
-}), fn = e.object({
-	...W,
-	trigger_id: B,
+}), hn = e.object({
+	...H,
+	trigger_id: L,
+	template_id: V
+}), gn = e.object({
+	...H,
+	trigger_id: R,
 	code_id: e.string()
-}), pn = e.object({
-	...W,
-	trigger_id: V,
-	page_id: H,
+}), _n = e.object({
+	...H,
+	trigger_id: z,
+	page_id: B,
 	permission_required: e.string().optional()
-}), mn = e.union([
-	ln,
-	un,
-	dn,
-	fn,
-	pn
-]), hn = e.object({
-	...W,
-	trigger_id: L
+}), vn = e.union([
+	pn,
+	mn,
+	hn,
+	gn,
+	_n
+]), yn = e.object({
+	...H,
+	trigger_id: F
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	url: e.string()
-}), gn = e.object({
-	...W,
-	trigger_id: R
+}), bn = e.object({
+	...H,
+	trigger_id: I
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	form_id: e.string()
-}), _n = e.object({
-	...W,
-	trigger_id: z
+}), xn = e.object({
+	...H,
+	trigger_id: L
 }).extend(t.shape).extend({
 	hook_id: e.string(),
-	template_id: U
-}), vn = e.object({
-	...W,
-	trigger_id: B
+	template_id: V
+}), Sn = e.object({
+	...H,
+	trigger_id: R
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	code_id: e.string()
-}), yn = e.object({
-	...W,
-	trigger_id: V
+}), Cn = e.object({
+	...H,
+	trigger_id: z
 }).extend(t.shape).extend({
 	hook_id: e.string(),
-	page_id: H,
+	page_id: B,
 	permission_required: e.string().optional()
-}), bn = e.union([
-	hn,
-	gn,
-	_n,
-	vn,
-	yn
-]), xn = e.object({
+}), wn = e.union([
+	yn,
+	bn,
+	xn,
+	Sn,
+	Cn
+]), Tn = e.object({
 	code: e.string().max(1e5),
 	secrets: e.record(e.string(), e.string()).optional()
-}), Sn = xn.extend({
+}), En = Tn.extend({
 	id: e.string(),
 	tenant_id: e.string()
-}).extend(t.shape), Cn = e.object({ name: e.string().optional() }), wn = e.object({ email: e.string().optional() }), Tn = e.object({
+}).extend(t.shape), Dn = e.object({ name: e.string().optional() }), On = e.object({ email: e.string().optional() }), kn = e.object({
 	id: e.string().optional(),
 	organization_id: e.string().max(50),
-	inviter: Cn,
-	invitee: wn,
+	inviter: Dn,
+	invitee: On,
 	invitation_url: e.string().url(),
 	client_id: e.string(),
 	connection_id: e.string().optional(),
@@ -1418,13 +1419,13 @@ var H = e.enum(["impersonate"]), U = e.enum([
 	ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
 	roles: e.array(e.string()).default([]).optional(),
 	send_invitation_email: e.boolean().default(!0).optional()
-}), En = e.object({
+}), An = e.object({
 	id: e.string(),
 	organization_id: e.string().max(50),
 	created_at: e.string().datetime(),
 	expires_at: e.string().datetime(),
 	ticket_id: e.string().optional()
-}).extend(Tn.omit({ id: !0 }).shape), Dn = e.object({
+}).extend(kn.omit({ id: !0 }).shape), jn = e.object({
 	alg: e.enum([
 		"RS256",
 		"RS384",
@@ -1465,7 +1466,7 @@ var H = e.enum(["impersonate"]), U = e.enum([
 		path: [r],
 		message: `EC JWK is missing required member '${r}'`
 	});
-}), On = e.object({ keys: e.array(Dn) }), kn = e.object({
+}), Mn = e.object({ keys: e.array(jn) }), Nn = e.object({
 	issuer: e.string(),
 	authorization_endpoint: e.string(),
 	token_endpoint: e.string(),
@@ -1491,33 +1492,33 @@ var H = e.enum(["impersonate"]), U = e.enum([
 	client_id_metadata_document_supported: e.boolean().optional(),
 	backchannel_logout_supported: e.boolean().optional(),
 	backchannel_logout_session_supported: e.boolean().optional()
-}), An = /* @__PURE__ */ function(e) {
+}), U = /* @__PURE__ */ function(e) {
 	return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.AWAITING_CONSENT = "awaiting_consent", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
-}({}), jn = e.nativeEnum(An), G = e.object({
+}({}), Pn = e.nativeEnum(U), W = e.object({
 	strategy: e.string(),
 	strategy_type: e.string()
-}), Mn = e.object({
+}), Fn = e.object({
 	csrf_token: e.string(),
 	auth0Client: e.string().optional(),
-	authParams: et,
+	authParams: it,
 	expires_at: e.string(),
 	deleted_at: e.string().optional(),
 	ip: e.string().optional(),
 	useragent: e.string().optional(),
 	session_id: e.string().optional(),
 	authorization_url: e.string().optional(),
-	state: jn.optional().default("pending"),
+	state: Pn.optional().default("pending"),
 	state_data: e.string().optional(),
 	failure_reason: e.string().optional(),
 	user_id: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: G.optional(),
+	auth_strategy: W.optional(),
 	authenticated_at: e.string().optional()
-}).openapi({ description: "This represents a login sesion" }), Nn = Mn.extend({
+}).openapi({ description: "This represents a login sesion" }), In = Fn.extend({
 	id: e.string().openapi({ description: "This is is used as the state in the universal login" }),
 	created_at: e.string(),
 	updated_at: e.string()
-}), K = {
+}), G = {
 	ACLS_SUMMARY: "acls_summary",
 	ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
 	API_LIMIT: "api_limit",
@@ -1677,190 +1678,190 @@ var H = e.enum(["impersonate"]), U = e.enum([
 	WARNING_DURING_LOGIN: "w",
 	WARNING_SENDING_NOTIFICATION: "wn",
 	WARNING_USER_MANAGEMENT: "wum"
-}, Pn = e.string().refine((e) => Object.values(K).includes(e), { message: "Invalid log type" }), Fn = {
-	[K.ACLS_SUMMARY]: "ACLs Summary",
-	[K.ACTIONS_EXECUTION_FAILED]: "Actions Execution Failed",
-	[K.API_LIMIT]: "API Rate Limit Reached",
-	[K.API_LIMIT_WARNING]: "API Rate Limit Warning",
-	[K.APPI]: "API Operation",
-	[K.CIBA_EXCHANGE_FAILED]: "CIBA Exchange Failed",
-	[K.CIBA_EXCHANGE_SUCCEEDED]: "CIBA Exchange Succeeded",
-	[K.CIBA_START_FAILED]: "CIBA Start Failed",
-	[K.CIBA_START_SUCCEEDED]: "CIBA Start Succeeded",
-	[K.CODE_LINK_SENT]: "Code/Link Sent",
-	[K.CODE_SENT]: "Code Sent",
-	[K.DEPRECATION_NOTICE]: "Deprecation Notice",
-	[K.FAILED_LOGIN]: "Failed Login",
-	[K.FAILED_BY_CONNECTOR]: "Failed by Connector",
-	[K.FAILED_CHANGE_EMAIL]: "Failed Change Email",
-	[K.FAILED_BY_CORS]: "Failed by CORS",
-	[K.FAILED_CROSS_ORIGIN_AUTHENTICATION]: "Failed Cross Origin Authentication",
-	[K.FAILED_CHANGE_PASSWORD]: "Failed Change Password",
-	[K.FAILED_POST_CHANGE_PASSWORD_HOOK]: "Failed Post-Change Password Hook",
-	[K.FAILED_CHANGE_PHONE_NUMBER]: "Failed Change Phone Number",
-	[K.FAILED_CHANGE_PASSWORD_REQUEST]: "Failed Change Password Request",
-	[K.FAILED_CONNECTOR_PROVISIONING]: "Failed Connector Provisioning",
-	[K.FAILED_CHANGE_USERNAME]: "Failed Change Username",
-	[K.FAILED_DELEGATION]: "Failed Delegation",
-	[K.FAILED_DEVICE_ACTIVATION]: "Failed Device Activation",
-	[K.FAILED_DEVICE_AUTHORIZATION_REQUEST]: "Failed Device Authorization Request",
-	[K.USER_CANCELED_DEVICE_CONFIRMATION]: "User Canceled Device Confirmation",
-	[K.FAILED_USER_DELETION]: "Failed User Deletion",
-	[K.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Authorization Code for Access Token",
-	[K.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Failed Exchange Access Token for Client Credentials",
-	[K.FAILED_EXCHANGE_CUSTOM_TOKEN]: "Failed Exchange Custom Token",
-	[K.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Device Code for Access Token",
-	[K.FAILED_FEDERATED_LOGOUT]: "Failed Federated Logout",
-	[K.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Failed Exchange Native Social Login",
-	[K.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Failed Exchange Password OOB for Access Token",
-	[K.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Password OTP for Access Token",
-	[K.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Failed Exchange Password for Access Token",
-	[K.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Passwordless OTP for Access Token",
-	[K.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Failed Exchange Password MFA Recovery for Access Token",
-	[K.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN]: "Failed Exchange Rotating Refresh Token",
-	[K.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Refresh Token for Access Token",
-	[K.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Subject Token for Access Token",
-	[K.FAILED_HOOK]: "Failed Hook",
-	[K.FAILED_IMPERSONATION]: "Failed Impersonation",
-	[K.FAILED_INVITE_ACCEPT]: "Failed Invite Accept",
-	[K.FAILED_LOGOUT]: "Failed Logout",
-	[K.FLOWS_EXECUTION_COMPLETED]: "Flows Execution Completed",
-	[K.FLOWS_EXECUTION_FAILED]: "Flows Execution Failed",
-	[K.FAILED_SENDING_NOTIFICATION]: "Failed Sending Notification",
-	[K.FORMS_SUBMISSION_FAILED]: "Forms Submission Failed",
-	[K.FORMS_SUBMISSION_SUCCEEDED]: "Forms Submission Succeeded",
-	[K.FAILED_LOGIN_INCORRECT_PASSWORD]: "Failed Login - Incorrect Password",
-	[K.FAILED_PUSHED_AUTHORIZATION_REQUEST]: "Failed Pushed Authorization Request",
-	[K.FAILED_POST_USER_REGISTRATION_HOOK]: "Failed Post-User Registration Hook",
-	[K.FAILED_SIGNUP]: "Failed Signup",
-	[K.FAILED_SILENT_AUTH]: "Failed Silent Auth",
-	[K.FAILED_LOGIN_INVALID_EMAIL_USERNAME]: "Failed Login - Invalid Email/Username",
-	[K.FAILED_USERS_IMPORT]: "Failed Users Import",
-	[K.FAILED_VERIFICATION_EMAIL]: "Failed Verification Email",
-	[K.FAILED_VERIFICATION_EMAIL_REQUEST]: "Failed Verification Email Request",
-	[K.EMAIL_VERIFICATION_CONFIRMED]: "Email Verification Confirmed",
-	[K.EMAIL_VERIFICATION_FAILED]: "Email Verification Failed",
-	[K.MFA_AUTH_FAILED]: "MFA Auth Failed",
-	[K.MFA_AUTH_REJECTED]: "MFA Auth Rejected",
-	[K.MFA_AUTH_SUCCESS]: "MFA Auth Success",
-	[K.MFA_ENROLLMENT_COMPLETE]: "MFA Enrollment Complete",
-	[K.TOO_MANY_MFA_FAILURES]: "Too Many MFA Failures",
-	[K.MFA_RECOVERY_FAILED]: "MFA Recovery Failed",
-	[K.MFA_RECOVERY_RATE_LIMIT_EXCEED]: "MFA Recovery Rate Limit Exceeded",
-	[K.MFA_RECOVERY_SUCCESS]: "MFA Recovery Success",
-	[K.MFA_EMAIL_SENT]: "MFA Email Sent",
-	[K.EMAIL_VERIFICATION_SENT]: "Email Verification Sent",
-	[K.EMAIL_VERIFICATION_SEND_FAILURE]: "Email Verification Send Failure",
-	[K.PUSH_NOTIFICATION_SENT]: "Push Notification Sent",
-	[K.ERROR_SENDING_MFA_PUSH_NOTIFICATION]: "Error Sending MFA Push Notification",
-	[K.MFA_SMS_SENT]: "MFA SMS Sent",
-	[K.ERROR_SENDING_MFA_SMS]: "Error Sending MFA SMS",
-	[K.MFA_VOICE_CALL_SUCCESS]: "MFA Voice Call Success",
-	[K.MFA_VOICE_CALL_FAILED]: "MFA Voice Call Failed",
-	[K.SECOND_FACTOR_STARTED]: "Second Factor Started",
-	[K.MFA_ENROLL_STARTED]: "MFA Enroll Started",
-	[K.MFA_ENROLLMENT_FAILED]: "MFA Enrollment Failed",
-	[K.GUARDIAN_TENANT_UPDATE]: "Guardian Tenant Update",
-	[K.UNENROLL_DEVICE_ACCOUNT]: "Unenroll Device Account",
-	[K.UPDATE_DEVICE_ACCOUNT]: "Update Device Account",
-	[K.WEBAUTHN_CHALLENGE_FAILED]: "WebAuthn Challenge Failed",
-	[K.WEBAUTHN_ENROLLMENT_FAILED]: "WebAuthn Enrollment Failed",
-	[K.FAILED_KMS_API_OPERATION]: "Failed KMS API Operation",
-	[K.SUCCESS_KMS_API_OPERATION]: "Success KMS API Operation",
-	[K.KMS_KEY_STATE_CHANGED]: "KMS Key State Changed",
-	[K.TOO_MANY_CALLS_TO_DELEGATION]: "Too Many Calls to Delegation",
-	[K.BLOCKED_IP_ADDRESS]: "Blocked IP Address",
-	[K.BLOCKED_ACCOUNT_IP]: "Blocked Account (IP)",
-	[K.BLOCKED_ACCOUNT_EMAIL]: "Blocked Account (Email)",
-	[K.INFORMATION]: "Information",
-	[K.MFA_REQUIRED]: "MFA Required",
-	[K.MANAGEMENT_API_READ_OPERATION]: "Management API Read Operation",
-	[K.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Failed Authentication Method Operation (My Account)",
-	[K.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Successful Authentication Method Operation (My Account)",
-	[K.FAILED_OIDC_BACKCHANNEL_LOGOUT]: "Failed OIDC Backchannel Logout",
-	[K.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT]: "Successful OIDC Backchannel Logout",
-	[K.ORGANIZATION_MEMBER_ADDED]: "Organization Member Added",
-	[K.PASSKEY_CHALLENGE_FAILED]: "Passkey Challenge Failed",
-	[K.PASSKEY_CHALLENGE_STARTED]: "Passkey Challenge Started",
-	[K.PRE_LOGIN_ASSESSMENT]: "Pre-Login Assessment",
-	[K.BREACHED_PASSWORD]: "Breached Password",
-	[K.BREACHED_PASSWORD_ON_RESET]: "Breached Password on Reset",
-	[K.SUCCESS_RESOURCE_CLEANUP]: "Success Resource Cleanup",
-	[K.RICH_CONSENTS_ACCESS_ERROR]: "Rich Consents Access Error",
-	[K.SUCCESS_LOGIN]: "Success Login",
-	[K.SUCCESS_API_OPERATION]: "Success API Operation",
-	[K.FAILED_API_OPERATION]: "Failed API Operation",
-	[K.SUCCESS_CHANGE_EMAIL]: "Success Change Email",
-	[K.SUCCESS_CROSS_ORIGIN_AUTHENTICATION]: "Success Cross Origin Authentication",
-	[K.SUCCESS_CHANGE_PASSWORD]: "Success Change Password",
-	[K.SUCCESS_CHANGE_PHONE_NUMBER]: "Success Change Phone Number",
-	[K.SUCCESS_CHANGE_PASSWORD_REQUEST]: "Success Change Password Request",
-	[K.SUCCESS_CHANGE_USERNAME]: "Success Change Username",
-	[K.SUCCESS_CREDENTIAL_VALIDATION]: "Success Credential Validation",
-	[K.SUCCESS_DELEGATION]: "Success Delegation",
-	[K.SUCCESS_USER_DELETION]: "Success User Deletion",
-	[K.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Authorization Code for Access Token",
-	[K.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Success Exchange Access Token for Client Credentials",
-	[K.SUCCESS_EXCHANGE_CUSTOM_TOKEN]: "Success Exchange Custom Token",
-	[K.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Device Code for Access Token",
-	[K.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Success Exchange Native Social Login",
-	[K.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Password OOB for Access Token",
-	[K.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Password OTP for Access Token",
-	[K.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passwordless OTP for Access Token",
-	[K.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Success Exchange Password for Access Token",
-	[K.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OOB for Access Token",
-	[K.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OTP for Access Token",
-	[K.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Passkey MFA Recovery for Access Token",
-	[K.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Password MFA Recovery for Access Token",
-	[K.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Refresh Token for Access Token",
-	[K.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Subject Token for Access Token",
-	[K.SUCCESS_IMPERSONATION]: "Success Impersonation",
-	[K.SUCCESSFULLY_ACCEPTED_USER_INVITE]: "Successfully Accepted User Invite",
-	[K.BREACHED_PASSWORD_ON_SIGNUP]: "Breached Password on Signup",
-	[K.SUCCESS_LOGOUT]: "Success Logout",
-	[K.SUCCESS_HOOK]: "Success Hook",
-	[K.SUCCESS_PASSWORD_MIGRATION]: "Success Password Migration",
-	[K.SUCCESS_REVOCATION]: "Success Revocation",
-	[K.SUCCESS_SIGNUP]: "Success Signup",
-	[K.FAILED_SS_SSO_OPERATION]: "Failed SS SSO Operation",
-	[K.INFORMATION_FROM_SS_SSO_OPERATION]: "Information from SS SSO Operation",
-	[K.SUCCESS_SS_SSO_OPERATION]: "Success SS SSO Operation",
-	[K.SUCCESS_SILENT_AUTH]: "Success Silent Auth",
-	[K.SUCCESSFUL_SCIM_OPERATION]: "Successful SCIM Operation",
-	[K.SUCCESSFULLY_IMPORTED_USERS]: "Successfully Imported Users",
-	[K.SUCCESS_VERIFICATION_EMAIL]: "Success Verification Email",
-	[K.SUCCESS_VERIFICATION_EMAIL_REQUEST]: "Success Verification Email Request",
-	[K.MAX_AMOUNT_OF_AUTHENTICATORS]: "Max Amount of Authenticators",
-	[K.USER_LOGIN_BLOCK_RELEASED]: "User Login Block Released",
-	[K.FAILED_UNIVERSAL_LOGOUT]: "Failed Universal Logout",
-	[K.SUCCESSFUL_UNIVERSAL_LOGOUT]: "Successful Universal Logout",
-	[K.WARNING_DURING_LOGIN]: "Warning During Login",
-	[K.WARNING_SENDING_NOTIFICATION]: "Warning Sending Notification",
-	[K.WARNING_USER_MANAGEMENT]: "Warning User Management"
-}, In = (() => {
+}, Ln = e.string().refine((e) => Object.values(G).includes(e), { message: "Invalid log type" }), Rn = {
+	[G.ACLS_SUMMARY]: "ACLs Summary",
+	[G.ACTIONS_EXECUTION_FAILED]: "Actions Execution Failed",
+	[G.API_LIMIT]: "API Rate Limit Reached",
+	[G.API_LIMIT_WARNING]: "API Rate Limit Warning",
+	[G.APPI]: "API Operation",
+	[G.CIBA_EXCHANGE_FAILED]: "CIBA Exchange Failed",
+	[G.CIBA_EXCHANGE_SUCCEEDED]: "CIBA Exchange Succeeded",
+	[G.CIBA_START_FAILED]: "CIBA Start Failed",
+	[G.CIBA_START_SUCCEEDED]: "CIBA Start Succeeded",
+	[G.CODE_LINK_SENT]: "Code/Link Sent",
+	[G.CODE_SENT]: "Code Sent",
+	[G.DEPRECATION_NOTICE]: "Deprecation Notice",
+	[G.FAILED_LOGIN]: "Failed Login",
+	[G.FAILED_BY_CONNECTOR]: "Failed by Connector",
+	[G.FAILED_CHANGE_EMAIL]: "Failed Change Email",
+	[G.FAILED_BY_CORS]: "Failed by CORS",
+	[G.FAILED_CROSS_ORIGIN_AUTHENTICATION]: "Failed Cross Origin Authentication",
+	[G.FAILED_CHANGE_PASSWORD]: "Failed Change Password",
+	[G.FAILED_POST_CHANGE_PASSWORD_HOOK]: "Failed Post-Change Password Hook",
+	[G.FAILED_CHANGE_PHONE_NUMBER]: "Failed Change Phone Number",
+	[G.FAILED_CHANGE_PASSWORD_REQUEST]: "Failed Change Password Request",
+	[G.FAILED_CONNECTOR_PROVISIONING]: "Failed Connector Provisioning",
+	[G.FAILED_CHANGE_USERNAME]: "Failed Change Username",
+	[G.FAILED_DELEGATION]: "Failed Delegation",
+	[G.FAILED_DEVICE_ACTIVATION]: "Failed Device Activation",
+	[G.FAILED_DEVICE_AUTHORIZATION_REQUEST]: "Failed Device Authorization Request",
+	[G.USER_CANCELED_DEVICE_CONFIRMATION]: "User Canceled Device Confirmation",
+	[G.FAILED_USER_DELETION]: "Failed User Deletion",
+	[G.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Authorization Code for Access Token",
+	[G.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Failed Exchange Access Token for Client Credentials",
+	[G.FAILED_EXCHANGE_CUSTOM_TOKEN]: "Failed Exchange Custom Token",
+	[G.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Device Code for Access Token",
+	[G.FAILED_FEDERATED_LOGOUT]: "Failed Federated Logout",
+	[G.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Failed Exchange Native Social Login",
+	[G.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Failed Exchange Password OOB for Access Token",
+	[G.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Password OTP for Access Token",
+	[G.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Failed Exchange Password for Access Token",
+	[G.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Passwordless OTP for Access Token",
+	[G.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Failed Exchange Password MFA Recovery for Access Token",
+	[G.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN]: "Failed Exchange Rotating Refresh Token",
+	[G.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Refresh Token for Access Token",
+	[G.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Subject Token for Access Token",
+	[G.FAILED_HOOK]: "Failed Hook",
+	[G.FAILED_IMPERSONATION]: "Failed Impersonation",
+	[G.FAILED_INVITE_ACCEPT]: "Failed Invite Accept",
+	[G.FAILED_LOGOUT]: "Failed Logout",
+	[G.FLOWS_EXECUTION_COMPLETED]: "Flows Execution Completed",
+	[G.FLOWS_EXECUTION_FAILED]: "Flows Execution Failed",
+	[G.FAILED_SENDING_NOTIFICATION]: "Failed Sending Notification",
+	[G.FORMS_SUBMISSION_FAILED]: "Forms Submission Failed",
+	[G.FORMS_SUBMISSION_SUCCEEDED]: "Forms Submission Succeeded",
+	[G.FAILED_LOGIN_INCORRECT_PASSWORD]: "Failed Login - Incorrect Password",
+	[G.FAILED_PUSHED_AUTHORIZATION_REQUEST]: "Failed Pushed Authorization Request",
+	[G.FAILED_POST_USER_REGISTRATION_HOOK]: "Failed Post-User Registration Hook",
+	[G.FAILED_SIGNUP]: "Failed Signup",
+	[G.FAILED_SILENT_AUTH]: "Failed Silent Auth",
+	[G.FAILED_LOGIN_INVALID_EMAIL_USERNAME]: "Failed Login - Invalid Email/Username",
+	[G.FAILED_USERS_IMPORT]: "Failed Users Import",
+	[G.FAILED_VERIFICATION_EMAIL]: "Failed Verification Email",
+	[G.FAILED_VERIFICATION_EMAIL_REQUEST]: "Failed Verification Email Request",
+	[G.EMAIL_VERIFICATION_CONFIRMED]: "Email Verification Confirmed",
+	[G.EMAIL_VERIFICATION_FAILED]: "Email Verification Failed",
+	[G.MFA_AUTH_FAILED]: "MFA Auth Failed",
+	[G.MFA_AUTH_REJECTED]: "MFA Auth Rejected",
+	[G.MFA_AUTH_SUCCESS]: "MFA Auth Success",
+	[G.MFA_ENROLLMENT_COMPLETE]: "MFA Enrollment Complete",
+	[G.TOO_MANY_MFA_FAILURES]: "Too Many MFA Failures",
+	[G.MFA_RECOVERY_FAILED]: "MFA Recovery Failed",
+	[G.MFA_RECOVERY_RATE_LIMIT_EXCEED]: "MFA Recovery Rate Limit Exceeded",
+	[G.MFA_RECOVERY_SUCCESS]: "MFA Recovery Success",
+	[G.MFA_EMAIL_SENT]: "MFA Email Sent",
+	[G.EMAIL_VERIFICATION_SENT]: "Email Verification Sent",
+	[G.EMAIL_VERIFICATION_SEND_FAILURE]: "Email Verification Send Failure",
+	[G.PUSH_NOTIFICATION_SENT]: "Push Notification Sent",
+	[G.ERROR_SENDING_MFA_PUSH_NOTIFICATION]: "Error Sending MFA Push Notification",
+	[G.MFA_SMS_SENT]: "MFA SMS Sent",
+	[G.ERROR_SENDING_MFA_SMS]: "Error Sending MFA SMS",
+	[G.MFA_VOICE_CALL_SUCCESS]: "MFA Voice Call Success",
+	[G.MFA_VOICE_CALL_FAILED]: "MFA Voice Call Failed",
+	[G.SECOND_FACTOR_STARTED]: "Second Factor Started",
+	[G.MFA_ENROLL_STARTED]: "MFA Enroll Started",
+	[G.MFA_ENROLLMENT_FAILED]: "MFA Enrollment Failed",
+	[G.GUARDIAN_TENANT_UPDATE]: "Guardian Tenant Update",
+	[G.UNENROLL_DEVICE_ACCOUNT]: "Unenroll Device Account",
+	[G.UPDATE_DEVICE_ACCOUNT]: "Update Device Account",
+	[G.WEBAUTHN_CHALLENGE_FAILED]: "WebAuthn Challenge Failed",
+	[G.WEBAUTHN_ENROLLMENT_FAILED]: "WebAuthn Enrollment Failed",
+	[G.FAILED_KMS_API_OPERATION]: "Failed KMS API Operation",
+	[G.SUCCESS_KMS_API_OPERATION]: "Success KMS API Operation",
+	[G.KMS_KEY_STATE_CHANGED]: "KMS Key State Changed",
+	[G.TOO_MANY_CALLS_TO_DELEGATION]: "Too Many Calls to Delegation",
+	[G.BLOCKED_IP_ADDRESS]: "Blocked IP Address",
+	[G.BLOCKED_ACCOUNT_IP]: "Blocked Account (IP)",
+	[G.BLOCKED_ACCOUNT_EMAIL]: "Blocked Account (Email)",
+	[G.INFORMATION]: "Information",
+	[G.MFA_REQUIRED]: "MFA Required",
+	[G.MANAGEMENT_API_READ_OPERATION]: "Management API Read Operation",
+	[G.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Failed Authentication Method Operation (My Account)",
+	[G.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Successful Authentication Method Operation (My Account)",
+	[G.FAILED_OIDC_BACKCHANNEL_LOGOUT]: "Failed OIDC Backchannel Logout",
+	[G.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT]: "Successful OIDC Backchannel Logout",
+	[G.ORGANIZATION_MEMBER_ADDED]: "Organization Member Added",
+	[G.PASSKEY_CHALLENGE_FAILED]: "Passkey Challenge Failed",
+	[G.PASSKEY_CHALLENGE_STARTED]: "Passkey Challenge Started",
+	[G.PRE_LOGIN_ASSESSMENT]: "Pre-Login Assessment",
+	[G.BREACHED_PASSWORD]: "Breached Password",
+	[G.BREACHED_PASSWORD_ON_RESET]: "Breached Password on Reset",
+	[G.SUCCESS_RESOURCE_CLEANUP]: "Success Resource Cleanup",
+	[G.RICH_CONSENTS_ACCESS_ERROR]: "Rich Consents Access Error",
+	[G.SUCCESS_LOGIN]: "Success Login",
+	[G.SUCCESS_API_OPERATION]: "Success API Operation",
+	[G.FAILED_API_OPERATION]: "Failed API Operation",
+	[G.SUCCESS_CHANGE_EMAIL]: "Success Change Email",
+	[G.SUCCESS_CROSS_ORIGIN_AUTHENTICATION]: "Success Cross Origin Authentication",
+	[G.SUCCESS_CHANGE_PASSWORD]: "Success Change Password",
+	[G.SUCCESS_CHANGE_PHONE_NUMBER]: "Success Change Phone Number",
+	[G.SUCCESS_CHANGE_PASSWORD_REQUEST]: "Success Change Password Request",
+	[G.SUCCESS_CHANGE_USERNAME]: "Success Change Username",
+	[G.SUCCESS_CREDENTIAL_VALIDATION]: "Success Credential Validation",
+	[G.SUCCESS_DELEGATION]: "Success Delegation",
+	[G.SUCCESS_USER_DELETION]: "Success User Deletion",
+	[G.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Authorization Code for Access Token",
+	[G.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Success Exchange Access Token for Client Credentials",
+	[G.SUCCESS_EXCHANGE_CUSTOM_TOKEN]: "Success Exchange Custom Token",
+	[G.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Device Code for Access Token",
+	[G.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Success Exchange Native Social Login",
+	[G.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Password OOB for Access Token",
+	[G.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Password OTP for Access Token",
+	[G.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passwordless OTP for Access Token",
+	[G.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Success Exchange Password for Access Token",
+	[G.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OOB for Access Token",
+	[G.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OTP for Access Token",
+	[G.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Passkey MFA Recovery for Access Token",
+	[G.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Password MFA Recovery for Access Token",
+	[G.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Refresh Token for Access Token",
+	[G.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Subject Token for Access Token",
+	[G.SUCCESS_IMPERSONATION]: "Success Impersonation",
+	[G.SUCCESSFULLY_ACCEPTED_USER_INVITE]: "Successfully Accepted User Invite",
+	[G.BREACHED_PASSWORD_ON_SIGNUP]: "Breached Password on Signup",
+	[G.SUCCESS_LOGOUT]: "Success Logout",
+	[G.SUCCESS_HOOK]: "Success Hook",
+	[G.SUCCESS_PASSWORD_MIGRATION]: "Success Password Migration",
+	[G.SUCCESS_REVOCATION]: "Success Revocation",
+	[G.SUCCESS_SIGNUP]: "Success Signup",
+	[G.FAILED_SS_SSO_OPERATION]: "Failed SS SSO Operation",
+	[G.INFORMATION_FROM_SS_SSO_OPERATION]: "Information from SS SSO Operation",
+	[G.SUCCESS_SS_SSO_OPERATION]: "Success SS SSO Operation",
+	[G.SUCCESS_SILENT_AUTH]: "Success Silent Auth",
+	[G.SUCCESSFUL_SCIM_OPERATION]: "Successful SCIM Operation",
+	[G.SUCCESSFULLY_IMPORTED_USERS]: "Successfully Imported Users",
+	[G.SUCCESS_VERIFICATION_EMAIL]: "Success Verification Email",
+	[G.SUCCESS_VERIFICATION_EMAIL_REQUEST]: "Success Verification Email Request",
+	[G.MAX_AMOUNT_OF_AUTHENTICATORS]: "Max Amount of Authenticators",
+	[G.USER_LOGIN_BLOCK_RELEASED]: "User Login Block Released",
+	[G.FAILED_UNIVERSAL_LOGOUT]: "Failed Universal Logout",
+	[G.SUCCESSFUL_UNIVERSAL_LOGOUT]: "Successful Universal Logout",
+	[G.WARNING_DURING_LOGIN]: "Warning During Login",
+	[G.WARNING_SENDING_NOTIFICATION]: "Warning Sending Notification",
+	[G.WARNING_USER_MANAGEMENT]: "Warning User Management"
+}, zn = (() => {
 	let e = {};
-	for (let [t, n] of Object.entries(K)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
+	for (let [t, n] of Object.entries(G)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
 	return e;
 })();
-function Ln(e) {
-	return Fn[e] ?? e;
+function Bn(e) {
+	return Rn[e] ?? e;
 }
-function Rn(e) {
-	return In[e] ?? "other";
+function Vn(e) {
+	return zn[e] ?? "other";
 }
-var zn = e.object({
+var Hn = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.object({ node: e.string().optional() }).optional()
-}), Bn = e.object({
+}), Un = e.object({
 	country_code: e.string().length(2),
 	city_name: e.string(),
 	latitude: e.string(),
 	longitude: e.string(),
 	time_zone: e.string(),
 	continent_code: e.string()
-}), Vn = e.object({
-	type: Pn,
+}), Wn = e.object({
+	type: Ln,
 	date: e.string(),
 	description: e.string().optional(),
 	ip: e.string().optional(),
@@ -1878,58 +1879,58 @@ var zn = e.object({
 	strategy: e.string().optional(),
 	strategy_type: e.string().optional(),
 	hostname: e.string().optional(),
-	auth0_client: zn.optional(),
+	auth0_client: Hn.optional(),
 	log_id: e.string().optional(),
-	location_info: Bn.optional()
-}), Hn = Vn.extend({ log_id: e.string() }), Un = e.enum([
+	location_info: Un.optional()
+}), Gn = Wn.extend({ log_id: e.string() }), Kn = e.enum([
 	"http",
 	"eventbridge",
 	"eventgrid",
 	"splunk",
 	"datadog",
 	"sumo"
-]), q = e.enum([
+]), K = e.enum([
 	"active",
 	"paused",
 	"suspended"
-]), Wn = e.object({
+]), qn = e.object({
 	type: e.string(),
 	name: e.string()
-}), Gn = e.object({
+}), Jn = e.object({
 	name: e.string(),
-	type: Un,
-	status: q.optional(),
+	type: Kn,
+	status: K.optional(),
 	sink: e.record(e.string(), e.unknown()),
-	filters: e.array(Wn).optional(),
+	filters: e.array(qn).optional(),
 	isPriority: e.boolean().optional()
-}), Kn = Gn.extend({
+}), Yn = Jn.extend({
 	id: e.string(),
-	status: q,
+	status: K,
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), qn = e.enum([
+}), Xn = e.enum([
 	"auth0",
 	"cognito",
 	"okta",
 	"oidc"
-]), Jn = e.object({
+]), Zn = e.object({
 	domain: e.string(),
 	client_id: e.string(),
 	client_secret: e.string(),
 	audience: e.string().optional(),
 	scope: e.string().optional()
-}), Yn = e.object({
+}), Qn = e.object({
 	id: e.string().optional(),
 	name: e.string(),
-	provider: qn,
+	provider: Xn,
 	connection: e.string(),
 	enabled: e.boolean().default(!0),
-	credentials: Jn
-}), Xn = e.object({
+	credentials: Zn
+}), $n = e.object({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(Yn.shape), Zn = e.object({
+}).extend(Qn.shape), er = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	admin_notification_frequency: e.array(e.string()).optional(),
@@ -1938,13 +1939,13 @@ var zn = e.object({
 		"pre-user-registration": e.object({ shields: e.array(e.string()).optional() }).optional(),
 		"pre-change-password": e.object({ shields: e.array(e.string()).optional() }).optional()
 	}).optional()
-}), Qn = e.object({
+}), tr = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
 	mode: e.string().optional(),
 	max_attempts: e.number().optional()
-}), $n = e.object({
+}), nr = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
@@ -1958,28 +1959,28 @@ var zn = e.object({
 			rate: e.number().optional()
 		}).optional()
 	}).optional()
-}), er = e.object({
-	breached_password_detection: Zn.optional(),
-	brute_force_protection: Qn.optional(),
-	suspicious_ip_throttling: $n.optional()
-}), tr = e.object({
+}), rr = e.object({
+	breached_password_detection: er.optional(),
+	brute_force_protection: tr.optional(),
+	suspicious_ip_throttling: nr.optional()
+}), ir = e.object({
 	id: e.string().optional(),
 	user_id: e.string(),
 	password: e.string(),
 	algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
 	is_current: e.boolean().default(!0)
-}), nr = tr.extend({
+}), ar = ir.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), rr = e.object({
+}), or = e.object({
 	initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
 	initial_ip: e.string().describe("First IP address associated with this session"),
 	initial_asn: e.string().describe("First autonomous system number associated with this session"),
 	last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
 	last_ip: e.string().describe("Last IP address from which this user logged in"),
 	last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), ir = e.object({
+}), sr = e.object({
 	id: e.string(),
 	revoked_at: e.string().optional(),
 	used_at: e.string().optional(),
@@ -1987,14 +1988,14 @@ var zn = e.object({
 	expires_at: e.string().optional(),
 	login_session_id: e.string(),
 	idle_expires_at: e.string().optional(),
-	device: rr.describe("Metadata related to the device used in the session"),
+	device: or.describe("Metadata related to the device used in the session"),
 	clients: e.array(e.string()).describe("List of client details for the session")
-}), ar = e.object({
+}), cr = e.object({
 	created_at: e.string(),
 	updated_at: e.string(),
 	authenticated_at: e.string(),
 	last_interaction_at: e.string()
-}).extend(ir.shape), or = e.object({
+}).extend(sr.shape), lr = e.object({
 	kid: e.string().openapi({ description: "The key id of the signing key" }),
 	tenant_id: e.string().optional().openapi({ description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped." }),
 	cert: e.string().openapi({ description: "The public certificate of the signing key" }),
@@ -2010,7 +2011,7 @@ var zn = e.object({
 	revoked_at: e.string().optional().openapi({ description: "The date and time when the key was revoked" }),
 	connection: e.string().optional().openapi({ description: "The connection identifier associated with the key" }),
 	type: e.enum(["jwt_signing", "saml_encryption"]).openapi({ description: "The type of the signing key" })
-}), sr = e.object({
+}), ur = e.object({
 	id: e.string().optional(),
 	audience: e.string().optional(),
 	friendly_name: e.string(),
@@ -2128,7 +2129,7 @@ var zn = e.object({
 		"shared_planetscale"
 	]).optional(),
 	d1_database_id: e.string().max(64).optional(),
-	attack_protection: er.optional(),
+	attack_protection: rr.optional(),
 	mfa: e.object({
 		policy: e.enum(["never", "always"]).default("never").optional(),
 		factors: e.object({
@@ -2155,99 +2156,138 @@ var zn = e.object({
 		}).optional(),
 		phone_message: e.object({ message: e.string().optional() }).optional()
 	}).optional()
-}), cr = e.object({
+}), dr = e.object({
 	created_at: e.string().nullable().transform((e) => e ?? ""),
 	updated_at: e.string().nullable().transform((e) => e ?? "")
-}).extend(sr.shape).extend({
+}).extend(ur.shape).extend({
 	id: e.string(),
 	is_control_plane: e.boolean().optional()
-}), lr = e.enum([
+}), fr = e.enum([
 	"provision",
 	"seed",
 	"upgrade",
 	"backup",
-	"deprovision"
-]), ur = e.enum([
+	"deprovision",
+	"users_import"
+]), pr = e.enum([
 	"pending",
 	"running",
 	"succeeded",
 	"failed",
 	"cancelled"
-]), dr = e.enum(["inline", "cloudflare-workflows"]), fr = e.object({
+]), mr = e.string().max(64), hr = ["inline", "cloudflare-workflows"], gr = e.object({
 	tenant_id: e.string().max(255).nullable().default(null),
 	rollout_id: e.string().max(255).nullable().optional(),
-	kind: lr,
-	engine: dr,
+	kind: fr,
+	engine: mr,
 	engine_instance_id: e.string().max(100).nullable().optional(),
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
-	initiated_by: e.string().max(255).nullable().optional()
-}), pr = fr.extend({
+	initiated_by: e.string().max(255).nullable().optional(),
+	input: e.record(e.string(), e.unknown()).nullable().optional()
+}), _r = gr.extend({
 	id: e.string(),
-	status: ur,
+	status: pr,
 	current_step: e.string().max(255).nullable().optional(),
 	error: e.string().nullable().optional(),
+	result: e.record(e.string(), e.unknown()).nullable().optional(),
+	claimed_by: e.string().max(255).nullable().optional(),
+	claim_expires_at: e.string().nullable().optional(),
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
-}), mr = pr.pick({
+}), vr = _r.pick({
 	status: !0,
 	current_step: !0,
 	engine_instance_id: !0,
 	target_worker_version: !0,
 	target_database_version: !0,
 	error: !0,
+	result: !0,
+	claimed_by: !0,
+	claim_expires_at: !0,
 	finished_at: !0
-}).partial(), hr = e.enum([
+}).partial(), yr = e.enum([
 	"started",
 	"succeeded",
 	"failed",
 	"retried",
 	"skipped",
 	"reconciled"
-]), gr = e.object({
+]), br = e.object({
 	operation_id: e.string().max(255),
 	step: e.string().max(255),
-	outcome: hr,
+	outcome: yr,
 	detail: e.record(e.string(), e.unknown()).nullable().optional(),
 	attempt: e.number().int().min(1).default(1)
-}), _r = gr.extend({
+}), xr = br.extend({
 	id: e.string(),
 	created_at: e.string()
-}), vr = e.enum([
+}), q = e.enum([
+	"pending",
+	"inserted",
+	"updated",
+	"failed",
+	"skipped"
+]), Sr = [
+	"inserted",
+	"updated",
+	"failed",
+	"skipped"
+], Cr = e.object({
+	operation_id: e.string().max(255),
+	seq: e.number().int().min(0),
+	payload: e.record(e.string(), e.unknown()),
+	status: q.default("pending"),
+	error_code: e.string().max(64).nullable().optional(),
+	error_message: e.string().nullable().optional(),
+	error_path: e.string().max(255).nullable().optional(),
+	entity_id: e.string().max(255).nullable().optional()
+}), wr = Cr.extend({
+	status: q,
+	created_at: e.string(),
+	updated_at: e.string()
+}), Tr = e.object({
+	seq: e.number().int().min(0),
+	status: q,
+	error_code: e.string().max(64).nullable().optional(),
+	error_message: e.string().nullable().optional(),
+	error_path: e.string().max(255).nullable().optional(),
+	entity_id: e.string().max(255).nullable().optional()
+}), Er = e.enum([
 	"upgrade",
 	"reseed",
 	"backup"
-]), yr = e.enum([
+]), Dr = e.enum([
 	"pending",
 	"canary",
 	"rolling",
 	"paused",
 	"done",
 	"failed"
-]), br = e.object({
-	kind: vr,
+]), Or = e.object({
+	kind: Er,
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	wave_size: e.number().int().min(1).default(10),
 	canary_tenant_ids: e.array(e.string()).nullable().optional(),
 	filter: e.record(e.string(), e.unknown()).nullable().optional(),
 	initiated_by: e.string().max(255).nullable().optional()
-}), xr = br.extend({
+}), kr = Or.extend({
 	id: e.string(),
-	status: yr,
+	status: Dr,
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
-}), Sr = xr.pick({
+}), Ar = kr.pick({
 	status: !0,
 	wave_size: !0,
 	canary_tenant_ids: !0,
 	filter: !0,
 	finished_at: !0
-}).partial(), Cr = /* @__PURE__ */ function(e) {
+}).partial(), jr = /* @__PURE__ */ function(e) {
 	return e.RefreshToken = "refresh_token", e.AuthorizationCode = "authorization_code", e.ClientCredential = "client_credentials", e.Passwordless = "passwordless", e.Password = "password", e.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", e.TokenExchange = "urn:ietf:params:oauth:grant-type:token-exchange", e;
-}({}), wr = e.object({
+}({}), Mr = e.object({
 	access_token: e.string(),
 	id_token: e.string().optional(),
 	scope: e.string().optional(),
@@ -2262,7 +2302,7 @@ e.object({
 });
 //#endregion
 //#region src/types/Theme.ts
-var Tr = e.object({
+var Nr = e.object({
 	button_border_radius: e.number(),
 	button_border_weight: e.number(),
 	buttons_style: e.enum([
@@ -2280,7 +2320,7 @@ var Tr = e.object({
 	show_widget_shadow: e.boolean(),
 	widget_border_weight: e.number(),
 	widget_corner_radius: e.number()
-}), Er = e.object({
+}), Pr = e.object({
 	base_focus_color: e.string(),
 	base_hover_color: e.string(),
 	body_text: e.string(),
@@ -2307,7 +2347,7 @@ var Tr = e.object({
 }), J = e.object({
 	bold: e.boolean(),
 	size: e.number()
-}), Dr = e.object({
+}), Fr = e.object({
 	body_text: J,
 	buttons_text: J,
 	font_url: e.string(),
@@ -2317,7 +2357,7 @@ var Tr = e.object({
 	reference_text_size: e.number(),
 	subtitle: J,
 	title: J
-}), Or = e.object({
+}), Ir = e.object({
 	background_color: e.string(),
 	background_image_url: e.string(),
 	page_layout: e.enum([
@@ -2330,7 +2370,7 @@ var Tr = e.object({
 		"chip",
 		"none"
 	]).optional()
-}), kr = e.object({
+}), Lr = e.object({
 	header_text_alignment: e.enum([
 		"center",
 		"left",
@@ -2345,72 +2385,72 @@ var Tr = e.object({
 	]),
 	logo_url: e.string(),
 	social_buttons_layout: e.enum(["bottom", "top"])
-}), Ar = e.object({
-	borders: Tr,
-	colors: Er,
+}), Rr = e.object({
+	borders: Nr,
+	colors: Pr,
 	displayName: e.string(),
-	fonts: Dr,
-	page_background: Or,
-	widget: kr
-}), jr = Ar.extend({ themeId: e.string() }), Mr = e.object({
+	fonts: Fr,
+	page_background: Ir,
+	widget: Lr
+}), zr = Rr.extend({ themeId: e.string() }), Br = e.object({
 	universal_login_experience: e.enum(["new", "classic"]).default("new"),
 	identifier_first: e.boolean().default(!0),
 	password_first: e.boolean().default(!1),
 	show_last_used_connection: e.boolean().default(!1),
 	webauthn_platform_first_factor: e.boolean()
-}), Nr = e.object({
+}), Vr = e.object({
 	hosts: e.array(e.string()).optional(),
 	methods: e.array(e.string()).optional(),
 	path: e.string().default("/*"),
 	headers: e.record(e.string(), e.string()).optional(),
 	query: e.record(e.string(), e.string()).optional()
-}), Pr = e.object({
+}), Hr = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
 }), Y = e.object({
 	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
-	match: Nr,
-	handlers: e.array(Pr).min(1)
-}), Fr = Y.extend({
+	match: Vr,
+	handlers: e.array(Hr).min(1)
+}), Ur = Y.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), Ir = Y.partial().omit({
+}), Wr = Y.partial().omit({
 	id: !0,
 	custom_domain_id: !0
-}), Lr = e.object({
+}), Gr = e.object({
 	scim: e.string(),
 	auth0: e.string()
-}), Rr = e.object({
+}), Kr = e.object({
 	connection_id: e.string(),
 	user_id_attribute: e.string().default("externalId"),
-	mapping: e.array(Lr).default([])
-}), zr = e.object({
+	mapping: e.array(Gr).default([])
+}), qr = e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(Rr.shape), Br = e.object({
+}).extend(Kr.shape), Jr = e.object({
 	token_id: e.string(),
 	connection_id: e.string(),
 	token_hash: e.string(),
 	scopes: e.array(e.string()).default([]),
 	valid_until: e.string().optional()
-}), Vr = e.object({
+}), Yr = e.object({
 	created_at: e.string(),
 	last_used_at: e.string().optional()
-}).extend(Br.shape), Hr = e.object({
+}).extend(Jr.shape), Xr = e.object({
 	connection_id: e.string(),
 	external_id: e.string(),
 	user_id: e.string()
-}), Ur = e.object({ created_at: e.string() }).extend(Hr.shape), Wr = e.object({
+}), Zr = e.object({ created_at: e.string() }).extend(Xr.shape), Qr = e.object({
 	name: e.string(),
 	enabled: e.boolean().optional().default(!0),
 	default_from_address: e.string().optional(),
 	credentials: e.record(e.string(), e.unknown()),
 	settings: e.object({}).optional()
-}), Gr = e.enum([
+}), $r = e.enum([
 	"verify_email",
 	"verify_email_by_code",
 	"reset_email",
@@ -2423,8 +2463,8 @@ var Tr = e.object({
 	"change_password",
 	"password_reset",
 	"user_invitation"
-]), Kr = e.object({
-	template: Gr,
+]), ei = e.object({
+	template: $r,
 	body: e.string(),
 	from: e.string(),
 	subject: e.string(),
@@ -2433,19 +2473,19 @@ var Tr = e.object({
 	urlLifetimeInSeconds: e.number().int().nonnegative().optional(),
 	includeEmailInRedirect: e.boolean().default(!1),
 	enabled: e.boolean().default(!0)
-}), qr = e.object({
+}), ti = e.object({
 	id: e.string(),
 	login_id: e.string(),
 	session_id: e.string().optional(),
 	organization: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: G.optional(),
+	auth_strategy: W.optional(),
 	user_id: e.string(),
 	client_id: e.string(),
 	expires_at: e.string().optional(),
 	idle_expires_at: e.string().optional(),
 	last_exchanged_at: e.string().optional(),
-	device: rr,
+	device: or,
 	resource_servers: e.array(e.object({
 		audience: e.string(),
 		scopes: e.string()
@@ -2456,19 +2496,19 @@ var Tr = e.object({
 	family_id: e.string().optional(),
 	rotated_to: e.string().optional(),
 	rotated_at: e.string().optional()
-}), Jr = qr.extend({
+}), ni = ti.extend({
 	created_at: e.string(),
 	revoked_at: e.string().optional()
-}), Yr = e.object({
+}), ri = e.object({
 	to: e.string(),
 	message: e.string()
-}), Xr = e.object({
+}), ii = e.object({
 	name: e.string(),
 	options: e.object({})
-}), Zr = e.object({
+}), ai = e.object({
 	value: e.string(),
 	description: e.string().optional()
-}), Qr = e.object({
+}), oi = e.object({
 	token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
 	enforce_policies: e.boolean().optional(),
 	allow_skipping_userinfo: e.boolean().optional(),
@@ -2476,11 +2516,11 @@ var Tr = e.object({
 	persist_client_authorization: e.boolean().optional(),
 	enable_introspection_endpoint: e.boolean().optional(),
 	mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
-}), $r = e.object({
+}), si = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	identifier: e.string(),
-	scopes: e.array(Zr).optional(),
+	scopes: e.array(ai).optional(),
 	signing_alg: e.string().optional(),
 	signing_secret: e.string().optional(),
 	token_lifetime: e.number().default(86400),
@@ -2488,37 +2528,37 @@ var Tr = e.object({
 	skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
 	allow_offline_access: e.boolean().optional(),
 	verificationKey: e.string().optional(),
-	options: Qr.optional(),
+	options: oi.optional(),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional()
-}), ei = $r.extend({
+}), ci = si.extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), ti = e.array(ei), ni = e.object({
+}), li = e.array(ci), ui = e.object({
 	role_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
-}), ri = ni.extend({ created_at: e.string() }), ii = e.array(ri), ai = e.object({
+}), di = ui.extend({ created_at: e.string() }), fi = e.array(di), pi = e.object({
 	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
 	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
 	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
 	scope: e.array(e.string()).default([]).openapi({ description: "The list of OAuth scopes the user has consented to" })
-}), oi = ai.extend({ id: e.string() }), si = e.object({
+}), mi = pi.extend({ id: e.string() }), hi = e.object({
 	user_id: e.string(),
 	last_login: e.string().optional(),
 	last_ip: e.string().optional(),
 	login_count: e.number().default(0),
 	failed_logins: e.array(e.string()).optional(),
 	last_password_reset: e.string().optional()
-}), ci = e.object({
+}), gi = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
 	organization_id: e.string().optional()
-}), li = ci.extend({
+}), _i = gi.extend({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
-}), ui = e.array(li), di = e.object({
+}), vi = e.array(_i), yi = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -2526,65 +2566,65 @@ var Tr = e.object({
 	description: e.string().nullable().optional(),
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
-}), fi = e.array(di), pi = e.object({
+}), bi = e.array(yi), xi = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
-}), mi = pi.extend({
+}), Si = xi.extend({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
-}), hi = e.array(mi), gi = e.object({
+}), Ci = e.array(Si), wi = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional().openapi({ description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios." })
-}), _i = gi.extend({
+}), Ti = wi.extend({
 	id: e.string().openapi({ description: "The unique identifier of the role" }),
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), vi = e.array(_i), yi = e.object({
+}), Ei = e.array(Ti), Di = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), bi = e.object({
+}).optional(), Oi = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), xi = e.object({ client_credentials: e.object({
+}), ki = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
-}).optional() }).optional(), Si = e.object({
+}).optional() }).optional(), Ai = e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: yi,
+	branding: Di,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(bi).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: xi
-}), Ci = Si.extend(t.shape).extend({
+	enabled_connections: e.array(Oi).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: ki
+}), ji = Ai.extend(t.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
-}), wi = e.object({
+}), Mi = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
 	is_signup_enabled: e.boolean().optional().default(!0)
-}), Ti = wi.extend({
+}), Ni = Mi.extend({
 	connection: e.object({
 		name: e.string().optional(),
 		strategy: e.string().optional()
 	}).optional(),
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Ei = e.array(Ti), Di = e.object({
+}), Pi = e.array(Ni), Fi = e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
-}), Oi = Di.extend(t.shape).extend({ id: e.string() }), ki = e.object({
+}), Ii = Fi.extend(t.shape).extend({ id: e.string() }), Li = e.object({
 	idle_session_lifetime: e.number().default(72),
 	session_lifetime: e.number().default(168),
 	session_cookie: e.object({ mode: e.enum(["persistent", "non-persistent"]).optional() }).optional(),
@@ -2663,7 +2703,7 @@ var Tr = e.object({
 		}).optional(),
 		phone_message: e.object({ message: e.string().optional() }).optional()
 	}).optional()
-}), Ai = e.object({
+}), Ri = e.object({
 	date: e.string().openapi({
 		description: "Date these events occurred in ISO 8601 format",
 		example: "2025-12-19"
@@ -2688,10 +2728,10 @@ var Tr = e.object({
 		description: "Approximate date and time the first event occurred in ISO 8601 format",
 		example: "2025-12-19T00:00:00.000Z"
 	})
-}), ji = e.number().openapi({
+}), zi = e.number().openapi({
 	description: "Number of active users in the last 30 days",
 	example: 1234
-}), Mi = e.enum([
+}), Bi = e.enum([
 	"active-users",
 	"logins",
 	"signups",
@@ -2703,64 +2743,64 @@ var Tr = e.object({
 	"mfa",
 	"email-verifications",
 	"codes-sent"
-]), Ni = e.enum([
+]), Vi = e.enum([
 	"hour",
 	"day",
 	"week",
 	"month"
-]), Pi = e.enum([
+]), Hi = e.enum([
 	"time",
 	"connection",
 	"client_id",
 	"user_type",
 	"event"
-]), Fi = e.enum([
+]), Ui = e.enum([
 	"password",
 	"social",
 	"passwordless",
 	"enterprise"
-]), Ii = e.object({
+]), Wi = e.object({
 	cohort: e.string(),
 	sessions: e.number(),
 	active: e.array(e.number())
-}), Li = e.object({
+}), Gi = e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(Ii)
-}), Ri = e.object({
+	cohorts: e.array(Wi)
+}), Ki = e.object({
 	cohort: e.string(),
 	tokens: e.number(),
 	active: e.array(e.number())
-}), zi = e.object({
+}), qi = e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(Ri)
-}), Bi = e.object({
+	cohorts: e.array(Ki)
+}), Ji = e.object({
 	name: e.string(),
 	type: e.string()
-}), Vi = e.object({
+}), Yi = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
-}), Hi = e.object({
-	meta: e.array(Bi),
+}), Xi = e.object({
+	meta: e.array(Ji),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: Vi.optional()
-}), Ui = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), Wi = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+	statistics: Yi.optional()
+}), Zi = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), Qi = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
 		additionalProperties: { type: "string" }
 	}
-}), Gi = e.object({
-	prompt: Ui,
+}), $i = e.object({
+	prompt: Zi,
 	language: e.string(),
-	custom_text: Wi
-}), Ki = {
+	custom_text: Qi
+}), ea = {
 	EMAIL: "email",
 	SMS: "sms",
 	USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2776,17 +2816,17 @@ var Tr = e.object({
 	WAAD: "waad",
 	ADFS: "adfs",
 	OKTA: "okta"
-}, qi = {
+}, ta = {
 	DATABASE: "database",
 	SOCIAL: "social",
 	PASSWORDLESS: "passwordless"
-}, Ji = "auth0";
-function Yi(e) {
-	return e === "auth0" || e === Ki.USERNAME_PASSWORD || e === "auth2";
+}, na = "auth0";
+function ra(e) {
+	return e === "auth0" || e === ea.USERNAME_PASSWORD || e === "auth2";
 }
 //#endregion
 //#region src/types/AuthenticationMethod.ts
-var Xi = e.enum([
+var ia = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -2794,9 +2834,9 @@ var Xi = e.enum([
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), Zi = e.object({
+]), aa = e.object({
 	user_id: e.string(),
-	type: Xi,
+	type: ia,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
 	credential_id: e.string().optional(),
@@ -2807,7 +2847,7 @@ var Xi = e.enum([
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function Qi(t, n) {
+function oa(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -2830,15 +2870,15 @@ function Qi(t, n) {
 		path: ["public_key"]
 	}));
 }
-var $i = Zi.superRefine(Qi), ea = Zi.extend({
+var sa = aa.superRefine(oa), ca = aa.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(Qi), ta = e.object({
+}).superRefine(oa), la = e.object({
 	id: e.string().optional(),
 	created_at: e.string().datetime({ offset: !0 }).optional(),
 	updated_at: e.string().datetime({ offset: !0 }).optional()
-}), na = {
+}), ua = {
 	"post-user-login": {
 		accessToken: ["setCustomClaim"],
 		idToken: ["setCustomClaim"],
@@ -2860,7 +2900,7 @@ var $i = Zi.superRefine(Qi), ea = Zi.extend({
 };
 //#endregion
 //#region src/utils/user-id.ts
-function ra(e) {
+function da(e) {
 	let t = e.indexOf("|"), n = e.slice(0, t), r = e.slice(t + 1);
 	if (t === -1 || !n || !r) throw Error(`Invalid user_id: ${e}`);
 	return {
@@ -2869,8 +2909,11 @@ function ra(e) {
 	};
 }
 //#endregion
+//#region src/utils/http.ts
+var fa = "x-authhero-preserve-location";
+//#endregion
 //#region src/utils/passthrough.ts
-function ia(e) {
+function pa(e) {
 	let { primary: t, secondaries: n, syncMethods: r = [
 		"create",
 		"rawCreate",
@@ -2904,12 +2947,12 @@ function ia(e) {
 		} : i.bind(e) : i;
 	} });
 }
-function aa(e) {
+function ma(e) {
 	return e;
 }
 //#endregion
 //#region src/utils/connection-attributes.ts
-function oa(e) {
+function ha(e) {
 	let t = e?.options;
 	if (!t) return {
 		usernameIdentifierActive: !1,
@@ -2932,35 +2975,35 @@ function oa(e) {
 }
 //#endregion
 //#region src/utils/guards.ts
-function sa(e) {
+function ga(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
 //#endregion
 //#region src/utils/base64url.ts
-function ca(e) {
+function _a(e) {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-function la(e) {
+function va(e) {
 	let t = e.replace(/-/g, "+").replace(/_/g, "/"), n = atob(t), r = new Uint8Array(n.length);
 	for (let e = 0; e < n.length; e++) r[e] = n.charCodeAt(e);
 	return r;
 }
-function ua(e) {
-	return ca(new TextEncoder().encode(e));
+function ya(e) {
+	return _a(new TextEncoder().encode(e));
 }
-function da(e) {
-	return new TextDecoder().decode(la(e));
+function ba(e) {
+	return new TextDecoder().decode(va(e));
 }
 //#endregion
 //#region src/utils/base64.ts
-function fa(e) {
+function xa(e) {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t);
 }
-function pa(e) {
+function Sa(e) {
 	let t = atob(e), n = new Uint8Array(t.length);
 	for (let e = 0; e < t.length; e++) n[e] = t.charCodeAt(e);
 	return n;
@@ -2968,12 +3011,12 @@ function pa(e) {
 //#endregion
 //#region src/utils/base32.ts
 var X = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
-function ma(e) {
+function Ca(e) {
 	let t = "", n = 0, r = 0;
 	for (let i of e) for (n = n << 8 | i, r += 8; r >= 5;) r -= 5, t += X[n >> r & 31];
 	return r > 0 && (t += X[n << 5 - r & 31]), t;
 }
-function ha(e) {
+function wa(e) {
 	let t = e.replace(/=+$/, "").toUpperCase(), n = t.length % 8;
 	if (n === 1 || n === 3 || n === 6) throw Error(`Invalid base32 length: ${t.length}`);
 	let r = [], i = 0, a = 0;
@@ -2987,19 +3030,19 @@ function ha(e) {
 }
 //#endregion
 //#region src/utils/hex.ts
-function ga(e) {
+function Ta(e) {
 	let t = e instanceof Uint8Array ? e : new Uint8Array(e), n = "";
 	for (let e of t) n += e.toString(16).padStart(2, "0");
 	return n;
 }
 //#endregion
 //#region src/utils/cursor.ts
-function _a(e) {
-	return ua(JSON.stringify(e));
+function Ea(e) {
+	return ya(JSON.stringify(e));
 }
-function va(e) {
+function Da(e) {
 	try {
-		let t = JSON.parse(da(e));
+		let t = JSON.parse(ba(e));
 		return t && typeof t == "object" && typeof t.i == "string" ? t : null;
 	} catch {
 		return null;
@@ -3007,7 +3050,7 @@ function va(e) {
 }
 //#endregion
 //#region src/utils/lucene.ts
-function ya(e) {
+function Oa(e) {
 	let t = [], n = "", r = !1;
 	for (let i = 0; i < e.length; i++) {
 		let a = e[i];
@@ -3015,53 +3058,53 @@ function ya(e) {
 	}
 	return n.trim() && t.push(n.trim()), t;
 }
-function ba(e) {
+function ka(e) {
 	return e.replace(/\\([\\"+\-!(){}[\]^~*?:/&|])/g, "$1");
 }
-function xa(e) {
+function Aa(e) {
 	return `"${e.replace(/([\\"])/g, "\\$1")}"`;
 }
-function Sa(e) {
+function ja(e) {
 	let t = e.trim();
-	return ba(t.length > 1 && t.startsWith("\"") && t.endsWith("\"") ? t.slice(1, -1) : t);
+	return ka(t.length > 1 && t.startsWith("\"") && t.endsWith("\"") ? t.slice(1, -1) : t);
 }
-function Ca(e) {
+function Ma(e) {
 	let t = [], n = [];
-	for (let r of ya(e)) /^or$/i.test(r) ? (t.push(n), n = []) : n.push(r);
+	for (let r of Oa(e)) /^or$/i.test(r) ? (t.push(n), n = []) : n.push(r);
 	return t.push(n), t.filter((e) => e.length > 0);
 }
-function wa(e, t) {
+function Na(e, t) {
 	let n = new Set(t), r = (e) => {
 		let t = e.replace(/^([^:]+)=/, "$1:"), r = t.startsWith("-") ? t.slice(1) : t;
 		if (r.startsWith("_exists_:")) return n.has(r.slice(9));
 		let i = r.indexOf(":");
 		return i > 0 ? n.has(r.slice(0, i)) : !0;
 	};
-	return Ca(e).map((e) => e.filter(r).join(" ")).filter((e) => e.length > 0).join(" OR ");
+	return Ma(e).map((e) => e.filter(r).join(" ")).filter((e) => e.length > 0).join(" OR ");
 }
-var Ta = /^[^\s@%_*?"'()[\]{}^~:\\/]+@[^\s@%_*?"'()[\]{}^~:\\/]+\.[^\s@%_*?"'()[\]{}^~:\\/]+$/;
-function Ea(e) {
-	return Ta.test(e);
+var Pa = /^[^\s@%_*?"'()[\]{}^~:\\/]+@[^\s@%_*?"'()[\]{}^~:\\/]+\.[^\s@%_*?"'()[\]{}^~:\\/]+$/;
+function Fa(e) {
+	return Pa.test(e);
 }
 //#endregion
 //#region src/utils/session-retention.ts
 var Z = 10080 * 60 * 1e3, Q = 4320 * 60 * 1e3;
-function Da(e) {
+function Ia(e) {
 	return Math.floor((e + Q) / Z);
 }
 function $(e) {
 	return e * Z - Q;
 }
-function Oa(e, t = Date.now()) {
-	let n = Da(t), r = n - e + 1;
+function La(e, t = Date.now()) {
+	let n = Ia(t), r = n - e + 1;
 	return {
 		currentWeek: n,
 		firstWeek: r,
 		sinceMs: $(r)
 	};
 }
-function ka(e, t, n = Date.now()) {
-	let { currentWeek: r, firstWeek: i, sinceMs: a } = Oa(t, n), o = /* @__PURE__ */ new Map();
+function Ra(e, t, n = Date.now()) {
+	let { currentWeek: r, firstWeek: i, sinceMs: a } = La(t, n), o = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		if (t.created_week < i || t.created_week > r) continue;
 		let e = Math.min(Math.max(0, t.used_week - t.created_week), r - t.created_week), n = o.get(t.created_week);
@@ -3084,8 +3127,8 @@ function ka(e, t, n = Date.now()) {
 		cohorts: s
 	};
 }
-function Aa(e, t, n = Date.now()) {
-	let r = ka(e, t, n);
+function za(e, t, n = Date.now()) {
+	let r = Ra(e, t, n);
 	return {
 		interval: r.interval,
 		from: r.from,
@@ -3099,16 +3142,16 @@ function Aa(e, t, n = Date.now()) {
 }
 //#endregion
 //#region src/utils/username-validation.ts
-var ja = /^[A-Za-z0-9_+\-.!#$'^`~]+$/, Ma = "Username can only contain alphanumeric characters and the following characters: '_', '+', '-', '.', '!', '#', '$', \"'\", '^', '`', '~'", Na = "Usernames must not contain \"@\". Use the email field for email addresses.";
-function Pa(e) {
-	return ja.test(e);
+var Ba = /^[A-Za-z0-9_+\-.!#$'^`~]+$/, Va = "Username can only contain alphanumeric characters and the following characters: '_', '+', '-', '.', '!', '#', '$', \"'\", '^', '`', '~'", Ha = "Usernames must not contain \"@\". Use the email field for email addresses.";
+function Ua(e) {
+	return Ba.test(e);
 }
-function Fa(e) {
+function Wa(e) {
 	return e.toLowerCase();
 }
-function Ia(e, t) {
-	if (e.includes("@")) return Na;
-	if (!Pa(e)) return Ma;
+function Ga(e, t) {
+	if (e.includes("@")) return Ha;
+	if (!Ua(e)) return Va;
 	if (t) {
 		let n = [...e].length;
 		if (n < t.min) return `Username must be at least ${t.min} characters`;
@@ -3117,4 +3160,16 @@ function Ia(e, t) {
 	return null;
 }
 //#endregion
-export { _e as Auth0ActionEnum, zn as Auth0Client, O as AuthorizationResponseMode, D as AuthorizationResponseType, Ze as CodeChallengeMethod, w as ComponentCategory, Fe as ComponentType, Ji as DATABASE_CONNECTION_STRATEGY, ve as EmailActionEnum, Gt as FORM_FIELD_TYPES, ge as FlowActionTypeEnum, Cr as GrantType, Bn as LocationInfo, K as LogTypes, An as LoginSessionState, Q as MONDAY_EPOCH_SHIFT_MS, Ve as NodeType, Se as RedirectTargetEnum, Ki as Strategy, qi as StrategyType, na as TRIGGER_API_SHAPES, Na as USERNAME_CONTAINS_AT_MESSAGE, Ma as USERNAME_INVALID_CHARACTERS_MESSAGE, Z as WEEK_MS, r as actionDependencySchema, l as actionExecutionErrorSchema, ie as actionExecutionInsertSchema, te as actionExecutionLogEntrySchema, ne as actionExecutionLogsSchema, u as actionExecutionResultSchema, re as actionExecutionSchema, c as actionExecutionStatusSchema, ee as actionExecutionTriggerIdSchema, a as actionInsertSchema, We as actionNodeSchema, s as actionSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, ae as actionVersionInsertSchema, oe as actionVersionSchema, ji as activeUsersResponseSchema, ce as actorSchema, m as addressSchema, sn as allowedTriggersForHook, Bi as analyticsColumnMetaSchema, Pi as analyticsGroupBySchema, Ni as analyticsIntervalSchema, Hi as analyticsQueryResponseSchema, Mi as analyticsResourceSchema, Vi as analyticsStatisticsSchema, Fi as analyticsUserTypeSchema, er as attackProtectionSchema, se as auditCategorySchema, me as auditEventInsertSchema, he as auditEventSchema, pe as auth0ClientSchema, Xe as auth0FlowInsertSchema, Ye as auth0FlowSchema, Ee as auth0QuerySchema, be as auth0UpdateUserActionSchema, Oe as auth0UserResponseSchema, et as authParamsSchema, $i as authenticationMethodInsertSchema, ea as authenticationMethodSchema, Xi as authenticationMethodTypeSchema, h as baseUserSchema, Ht as blockComponentSchema, Tr as bordersSchema, tt as brandingSchema, Zn as breachedPasswordDetectionSchema, Qn as bruteForceProtectionSchema, Aa as buildRefreshTokenRetention, ka as buildSessionRetention, Ie as buttonComponentSchema, $e as claimsRequestSchema, y as clientGrantInsertSchema, Ne as clientGrantListSchema, b as clientGrantSchema, v as clientInsertSchema, S as clientRegistrationTokenInsertSchema, Pe as clientRegistrationTokenSchema, x as clientRegistrationTokenTypeSchema, Me as clientSchema, rt as codeInsertSchema, it as codeSchema, nt as codeTypeSchema, Er as colorsSchema, $t as componentMessageSchema, Be as componentSchema, ot as connectionInsertSchema, at as connectionOptionsSchema, st as connectionSchema, C as coordinatesSchema, ia as createPassthroughAdapter, aa as createWriteOnlyAdapter, ft as customDomainCertificateUploadSchema, A as customDomainInsertSchema, lt as customDomainSchema, ut as customDomainUpdateSchema, dt as customDomainWithTenantIdSchema, Gi as customTextEntrySchema, Wi as customTextSchema, Ai as dailyStatsSchema, ha as decodeBase32, pa as decodeBase64, la as decodeBase64Url, da as decodeBase64UrlString, va as decodeCursor, Wr as emailProviderSchema, Gr as emailTemplateNameSchema, Kr as emailTemplateSchema, ye as emailVerificationRulesSchema, xe as emailVerifyActionSchema, ma as encodeBase32, fa as encodeBase64, ca as encodeBase64Url, ua as encodeBase64UrlString, _a as encodeCursor, ga as encodeHex, Je as endingSchema, xa as escapeLuceneValue, Wt as fieldComponentSchema, d as flowActionStepSchema, we as flowInsertSchema, Te as flowSchema, Re as flowsFieldComponentSchema, Ue as flowsFlowNodeSchema, He as flowsStepNodeSchema, J as fontDetailsSchema, Dr as fontsSchema, Kt as formControlSchema, Zt as formInsertSchema, F as formNodeComponentDefinition, Xt as formNodeSchema, Qt as formSchema, ze as genericComponentSchema, Ge as genericNodeSchema, oa as getConnectionIdentifierConfig, Rn as getLogTypeCategory, Ln as getLogTypeDescription, ai as grantInsertSchema, oi as grantSchema, Pr as handlerConfigSchema, xn as hookCodeInsertSchema, Sn as hookCodeSchema, mn as hookInsertSchema, H as hookPageId, bn as hookSchema, U as hookTemplateId, cn as hookTemplates, p as identitySchema, ta as importMetadataSchema, Tn as inviteInsertSchema, En as inviteSchema, wn as inviteeSchema, Cn as inviterSchema, nn as isBlockComponent, Yi as isDatabaseConnectionStrategy, Ea as isEmailSearchTerm, an as isFieldComponent, sa as isPlainObject, rn as isWidgetComponent, On as jwksKeySchema, Dn as jwksSchema, Le as legalComponentSchema, fe as locationInfoSchema, Vn as logInsertSchema, Hn as logSchema, Wn as logStreamFilterSchema, Gn as logStreamInsertSchema, Kn as logStreamSchema, q as logStreamStatusSchema, Un as logStreamTypeSchema, In as logTypeCategories, Fn as logTypeDescriptions, G as loginSessionAuthStrategySchema, Mn as loginSessionInsertSchema, Nn as loginSessionSchema, jn as loginSessionStateSchema, Nr as matchSchema, qn as migrationProviderTypeSchema, Jn as migrationSourceCredentialsSchema, Yn as migrationSourceInsertSchema, Xn as migrationSourceSchema, Ke as nodeSchema, Fa as normalizeUsername, kn as openIDConfigurationSchema, yi as organizationBrandingSchema, wi as organizationConnectionInsertSchema, Ei as organizationConnectionListSchema, Ti as organizationConnectionSchema, bi as organizationEnabledConnectionSchema, Si as organizationInsertSchema, Ci as organizationSchema, xi as organizationTokenQuotaSchema, Or as pageBackgroundSchema, ra as parseUserId, tr as passwordInsertSchema, nr as passwordSchema, f as profileDataSchema, Ui as promptScreenSchema, Mr as promptSettingSchema, Y as proxyRouteInsertSchema, Fr as proxyRouteSchema, Ir as proxyRouteUpdateSchema, Ce as redirectActionSchema, qr as refreshTokenInsertSchema, Ri as refreshTokenRetentionCohortSchema, zi as refreshTokenRetentionResponseSchema, Jr as refreshTokenSchema, ue as requestContextSchema, $r as resourceServerInsertSchema, ti as resourceServerListSchema, Qr as resourceServerOptionsSchema, ei as resourceServerSchema, Zr as resourceServerScopeSchema, de as responseContextSchema, E as richTextComponentSchema, gi as roleInsertSchema, vi as roleListSchema, ni as rolePermissionInsertSchema, ii as rolePermissionListSchema, ri as rolePermissionSchema, _i as roleSchema, br as rolloutInsertSchema, vr as rolloutKindSchema, xr as rolloutSchema, yr as rolloutStatusSchema, Sr as rolloutUpdateSchema, wa as sanitizeLuceneQuery, Rr as scimConfigurationInsertSchema, zr as scimConfigurationSchema, Hr as scimExternalIdInsertSchema, Ur as scimExternalIdSchema, Lr as scimMappingEntrySchema, Br as scimTokenInsertSchema, Vr as scimTokenSchema, en as screenLinkSchema, ir as sessionInsertSchema, Ii as sessionRetentionCohortSchema, Li as sessionRetentionResponseSchema, Oa as sessionRetentionWindow, ar as sessionSchema, or as signingKeySchema, Xr as smsProviderSchema, Yr as smsSendParamsSchema, Ca as splitLuceneOrGroups, qe as startSchema, $n as suspiciousIpThrottlingSchema, le as targetSchema, sr as tenantInsertSchema, dr as tenantOperationEngineSchema, gr as tenantOperationEventInsertSchema, hr as tenantOperationEventOutcomeSchema, _r as tenantOperationEventSchema, fr as tenantOperationInsertSchema, lr as tenantOperationKindSchema, pr as tenantOperationSchema, ur as tenantOperationStatusSchema, mr as tenantOperationUpdateSchema, cr as tenantSchema, ki as tenantSettingsSchema, Ar as themeInsertSchema, jr as themeSchema, wr as tokenResponseSchema, ya as tokenizeLuceneQuery, De as totalsSchema, tn as uiScreenSchema, ba as unescapeLuceneValue, Sa as unquoteLuceneValue, si as userActivitySchema, g as userInsertSchema, Di as userOrganizationInsertSchema, Oi as userOrganizationSchema, ci as userPermissionInsertSchema, ui as userPermissionListSchema, li as userPermissionSchema, fi as userPermissionWithDetailsListSchema, di as userPermissionWithDetailsSchema, ke as userResponseSchema, pi as userRoleInsertSchema, hi as userRoleListSchema, mi as userRoleSchema, _ as userSchema, Pa as usernameHasOnlyAllowedCharacters, Ia as validateUsername, ct as verificationMethodsSchema, Da as weekIndex, $ as weekStartMs, Ut as widgetComponentSchema, kr as widgetSchema };
+//#region src/utils/feature-not-supported.ts
+var Ka = class extends Error {
+	feature;
+	adapter;
+	constructor(e, t, n) {
+		super(`${e} is not supported by the ${t} adapter.` + (n ? ` ${n}` : "")), this.name = "FeatureNotSupportedError", this.feature = e, this.adapter = t;
+	}
+};
+function qa(e) {
+	return e instanceof Error && e.name === "FeatureNotSupportedError";
+}
+//#endregion
+export { be as Auth0ActionEnum, Hn as Auth0Client, E as AuthorizationResponseMode, T as AuthorizationResponseType, tt as CodeChallengeMethod, C as ComponentCategory, S as ComponentType, na as DATABASE_CONNECTION_STRATEGY, xe as EmailActionEnum, Yt as FORM_FIELD_TYPES, Ka as FeatureNotSupportedError, ye as FlowActionTypeEnum, jr as GrantType, hr as KNOWN_TENANT_OPERATION_ENGINES, Un as LocationInfo, G as LogTypes, U as LoginSessionState, Q as MONDAY_EPOCH_SHIFT_MS, Ge as NodeType, fa as PRESERVE_LOCATION_HEADER, Te as RedirectTargetEnum, ea as Strategy, ta as StrategyType, Sr as TERMINAL_TENANT_OPERATION_ROW_STATUSES, ua as TRIGGER_API_SHAPES, Ha as USERNAME_CONTAINS_AT_MESSAGE, Va as USERNAME_INVALID_CHARACTERS_MESSAGE, Z as WEEK_MS, r as actionDependencySchema, ne as actionExecutionErrorSchema, se as actionExecutionInsertSchema, ie as actionExecutionLogEntrySchema, ae as actionExecutionLogsSchema, re as actionExecutionResultSchema, oe as actionExecutionSchema, te as actionExecutionStatusSchema, l as actionExecutionTriggerIdSchema, a as actionInsertSchema, Je as actionNodeSchema, ee as actionResponseSchema, s as actionSchema, c as actionSecretNameSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, ce as actionVersionInsertSchema, le as actionVersionSchema, zi as activeUsersResponseSchema, de as actorSchema, f as addressSchema, dn as allowedTriggersForHook, Ji as analyticsColumnMetaSchema, Hi as analyticsGroupBySchema, Vi as analyticsIntervalSchema, Xi as analyticsQueryResponseSchema, Bi as analyticsResourceSchema, Yi as analyticsStatisticsSchema, Ui as analyticsUserTypeSchema, rr as attackProtectionSchema, ue as auditCategorySchema, _e as auditEventInsertSchema, ve as auditEventSchema, ge as auth0ClientSchema, et as auth0FlowInsertSchema, $e as auth0FlowSchema, Ae as auth0QuerySchema, Ce as auth0UpdateUserActionSchema, Me as auth0UserResponseSchema, it as authParamsSchema, sa as authenticationMethodInsertSchema, ca as authenticationMethodSchema, ia as authenticationMethodTypeSchema, p as baseUserSchema, Kt as blockComponentSchema, Nr as bordersSchema, at as brandingSchema, er as breachedPasswordDetectionSchema, tr as bruteForceProtectionSchema, za as buildRefreshTokenRetention, Ra as buildSessionRetention, Be as buttonComponentSchema, rt as claimsRequestSchema, _ as clientGrantInsertSchema, Le as clientGrantListSchema, v as clientGrantSchema, g as clientInsertSchema, b as clientRegistrationTokenInsertSchema, Re as clientRegistrationTokenSchema, y as clientRegistrationTokenTypeSchema, Ie as clientSchema, st as codeInsertSchema, ct as codeSchema, ot as codeTypeSchema, Pr as colorsSchema, rn as componentMessageSchema, We as componentSchema, ut as connectionInsertSchema, lt as connectionOptionsSchema, dt as connectionSchema, x as coordinatesSchema, pa as createPassthroughAdapter, ma as createWriteOnlyAdapter, gt as customDomainCertificateUploadSchema, O as customDomainInsertSchema, pt as customDomainSchema, mt as customDomainUpdateSchema, ht as customDomainWithTenantIdSchema, $i as customTextEntrySchema, Qi as customTextSchema, Ri as dailyStatsSchema, wa as decodeBase32, Sa as decodeBase64, va as decodeBase64Url, ba as decodeBase64UrlString, Da as decodeCursor, Qr as emailProviderSchema, $r as emailTemplateNameSchema, ei as emailTemplateSchema, Se as emailVerificationRulesSchema, we as emailVerifyActionSchema, Ca as encodeBase32, xa as encodeBase64, _a as encodeBase64Url, ya as encodeBase64UrlString, Ea as encodeCursor, Ta as encodeHex, Qe as endingSchema, Aa as escapeLuceneValue, Jt as fieldComponentSchema, De as flowActionStepSchema, Oe as flowInsertSchema, ke as flowSchema, He as flowsFieldComponentSchema, qe as flowsFlowNodeSchema, Ke as flowsStepNodeSchema, J as fontDetailsSchema, Fr as fontsSchema, Xt as formControlSchema, tn as formInsertSchema, N as formNodeComponentDefinition, en as formNodeSchema, nn as formSchema, Ue as genericComponentSchema, Ye as genericNodeSchema, ha as getConnectionIdentifierConfig, Vn as getLogTypeCategory, Bn as getLogTypeDescription, pi as grantInsertSchema, mi as grantSchema, Hr as handlerConfigSchema, Tn as hookCodeInsertSchema, En as hookCodeSchema, vn as hookInsertSchema, B as hookPageId, wn as hookSchema, V as hookTemplateId, fn as hookTemplates, d as identitySchema, la as importMetadataSchema, kn as inviteInsertSchema, An as inviteSchema, On as inviteeSchema, Dn as inviterSchema, sn as isBlockComponent, ra as isDatabaseConnectionStrategy, Fa as isEmailSearchTerm, qa as isFeatureNotSupportedError, ln as isFieldComponent, ga as isPlainObject, cn as isWidgetComponent, Mn as jwksKeySchema, jn as jwksSchema, Ve as legalComponentSchema, he as locationInfoSchema, Wn as logInsertSchema, Gn as logSchema, qn as logStreamFilterSchema, Jn as logStreamInsertSchema, Yn as logStreamSchema, K as logStreamStatusSchema, Kn as logStreamTypeSchema, zn as logTypeCategories, Rn as logTypeDescriptions, W as loginSessionAuthStrategySchema, Fn as loginSessionInsertSchema, In as loginSessionSchema, Pn as loginSessionStateSchema, Vr as matchSchema, Xn as migrationProviderTypeSchema, Zn as migrationSourceCredentialsSchema, Qn as migrationSourceInsertSchema, $n as migrationSourceSchema, Xe as nodeSchema, Wa as normalizeUsername, Nn as openIDConfigurationSchema, Di as organizationBrandingSchema, Mi as organizationConnectionInsertSchema, Pi as organizationConnectionListSchema, Ni as organizationConnectionSchema, Oi as organizationEnabledConnectionSchema, Ai as organizationInsertSchema, ji as organizationSchema, ki as organizationTokenQuotaSchema, Ir as pageBackgroundSchema, da as parseUserId, ir as passwordInsertSchema, ar as passwordSchema, u as profileDataSchema, Zi as promptScreenSchema, Br as promptSettingSchema, Y as proxyRouteInsertSchema, Ur as proxyRouteSchema, Wr as proxyRouteUpdateSchema, Ee as redirectActionSchema, ti as refreshTokenInsertSchema, Ki as refreshTokenRetentionCohortSchema, qi as refreshTokenRetentionResponseSchema, ni as refreshTokenSchema, pe as requestContextSchema, si as resourceServerInsertSchema, li as resourceServerListSchema, oi as resourceServerOptionsSchema, ci as resourceServerSchema, ai as resourceServerScopeSchema, me as responseContextSchema, ze as richTextComponentSchema, wi as roleInsertSchema, Ei as roleListSchema, ui as rolePermissionInsertSchema, fi as rolePermissionListSchema, di as rolePermissionSchema, Ti as roleSchema, Or as rolloutInsertSchema, Er as rolloutKindSchema, kr as rolloutSchema, Dr as rolloutStatusSchema, Ar as rolloutUpdateSchema, Na as sanitizeLuceneQuery, Kr as scimConfigurationInsertSchema, qr as scimConfigurationSchema, Xr as scimExternalIdInsertSchema, Zr as scimExternalIdSchema, Gr as scimMappingEntrySchema, Jr as scimTokenInsertSchema, Yr as scimTokenSchema, an as screenLinkSchema, sr as sessionInsertSchema, Wi as sessionRetentionCohortSchema, Gi as sessionRetentionResponseSchema, La as sessionRetentionWindow, cr as sessionSchema, lr as signingKeySchema, ii as smsProviderSchema, ri as smsSendParamsSchema, Ma as splitLuceneOrGroups, Ze as startSchema, nr as suspiciousIpThrottlingSchema, fe as targetSchema, ur as tenantInsertSchema, mr as tenantOperationEngineSchema, br as tenantOperationEventInsertSchema, yr as tenantOperationEventOutcomeSchema, xr as tenantOperationEventSchema, gr as tenantOperationInsertSchema, fr as tenantOperationKindSchema, Cr as tenantOperationRowInsertSchema, Tr as tenantOperationRowOutcomeSchema, wr as tenantOperationRowSchema, q as tenantOperationRowStatusSchema, _r as tenantOperationSchema, pr as tenantOperationStatusSchema, vr as tenantOperationUpdateSchema, dr as tenantSchema, Li as tenantSettingsSchema, Rr as themeInsertSchema, zr as themeSchema, Mr as tokenResponseSchema, Oa as tokenizeLuceneQuery, je as totalsSchema, on as uiScreenSchema, ka as unescapeLuceneValue, ja as unquoteLuceneValue, hi as userActivitySchema, m as userInsertSchema, Fi as userOrganizationInsertSchema, Ii as userOrganizationSchema, gi as userPermissionInsertSchema, vi as userPermissionListSchema, _i as userPermissionSchema, bi as userPermissionWithDetailsListSchema, yi as userPermissionWithDetailsSchema, Ne as userResponseSchema, xi as userRoleInsertSchema, Ci as userRoleListSchema, Si as userRoleSchema, h as userSchema, Ua as usernameHasOnlyAllowedCharacters, Ga as validateUsername, ft as verificationMethodsSchema, Ia as weekIndex, $ as weekStartMs, qt as widgetComponentSchema, Lr as widgetSchema };