@authhero/adapter-interfaces 4.14.0 → 4.16.0

package/dist/adapter-interfaces.mjs

@@ -33,23 +33,23 @@ var t = e.object({
 		name: e.string(),
 		value: e.string().optional()
 	})).optional()
-}).extend(t.shape), c = e.object({ name: e.string() }), ee = s.extend({ secrets: e.array(c).optional() }), l = e.string(), te = e.enum([
+}).extend(t.shape), ee = e.object({ name: e.string() }), te = s.extend({ secrets: e.array(ee).optional() }), ne = e.string(), c = e.enum([
 	"unspecified",
 	"pending",
 	"final",
 	"partial",
 	"canceled",
 	"suspended"
-]), ne = e.object({
+]), re = e.object({
 	id: e.string(),
 	msg: e.string(),
 	url: e.string().optional()
-}), re = e.object({
+}), ie = e.object({
 	action_name: e.string(),
-	error: ne.nullable(),
+	error: re.nullable(),
 	started_at: e.string(),
 	ended_at: e.string()
-}), ie = e.object({
+}), ae = e.object({
 	level: e.enum([
 		"log",
 		"info",
@@ -58,23 +58,23 @@ var t = e.object({
 		"debug"
 	]),
 	message: e.string()
-}), ae = e.array(e.object({
+}), oe = e.array(e.object({
 	action_name: e.string(),
-	lines: e.array(ie)
-})), oe = e.object({
+	lines: e.array(ae)
+})), se = e.object({
 	id: e.string(),
 	tenant_id: e.string(),
-	trigger_id: l,
-	status: te,
-	results: e.array(re),
-	logs: ae.optional(),
+	trigger_id: ne,
+	status: c,
+	results: e.array(ie),
+	logs: oe.optional(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), se = oe.omit({
+}), ce = se.omit({
 	tenant_id: !0,
 	created_at: !0,
 	updated_at: !0
-}), ce = e.object({
+}), le = e.object({
 	action_id: e.string(),
 	code: e.string().max(1e5),
 	runtime: e.string().max(50).optional(),
@@ -82,16 +82,16 @@ var t = e.object({
 	secrets: e.array(i).optional(),
 	supported_triggers: e.array(n).optional(),
 	deployed: e.boolean().default(!0)
-}), le = ce.extend({
+}), ue = le.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	number: e.number().int()
-}).extend(t.shape), ue = e.enum([
+}).extend(t.shape), de = e.enum([
 	"user_action",
 	"admin_action",
 	"system",
 	"api"
-]), de = e.object({
+]), fe = e.object({
 	type: e.enum([
 		"user",
 		"admin",
@@ -105,7 +105,7 @@ var t = e.object({
 	org_name: e.string().optional(),
 	scopes: e.array(e.string()).optional(),
 	client_id: e.string().optional()
-}), fe = e.object({
+}), pe = e.object({
 	type: e.string(),
 	id: e.string(),
 	before: e.record(e.string(), e.unknown()).optional(),
@@ -114,7 +114,7 @@ var t = e.object({
 		old: e.unknown(),
 		new: e.unknown()
 	})).optional()
-}), pe = e.object({
+}), me = e.object({
 	method: e.string(),
 	path: e.string(),
 	query: e.record(e.string(), e.string()).optional(),
@@ -123,30 +123,30 @@ var t = e.object({
 	user_agent: e.string().optional(),
 	correlation_id: e.string().optional(),
 	redirect_uri: e.string().optional()
-}), me = e.object({
+}), he = e.object({
 	status_code: e.number(),
 	body: e.unknown().optional()
-}), he = e.object({
+}), ge = e.object({
 	country_code: e.string(),
 	city_name: e.string(),
 	latitude: e.string(),
 	longitude: e.string(),
 	time_zone: e.string(),
 	continent_code: e.string()
-}), ge = e.object({
+}), _e = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.record(e.string(), e.string()).optional()
-}), _e = e.object({
+}), ve = e.object({
 	tenant_id: e.string(),
 	event_type: e.string(),
 	log_type: e.string(),
 	description: e.string().optional(),
-	category: ue,
-	actor: de,
-	target: fe,
-	request: pe,
-	response: me.optional(),
+	category: de,
+	actor: fe,
+	target: pe,
+	request: me,
+	response: he.optional(),
 	connection: e.string().optional(),
 	connection_id: e.string().optional(),
 	client_name: e.string().optional(),
@@ -154,29 +154,29 @@ var t = e.object({
 	strategy_type: e.string().optional(),
 	audience: e.string().optional(),
 	scope: e.string().optional(),
-	location: he.optional(),
-	auth0_client: ge.optional(),
+	location: ge.optional(),
+	auth0_client: _e.optional(),
 	hostname: e.string(),
 	is_mobile: e.boolean().optional(),
 	timestamp: e.string()
-}), ve = _e.extend({ id: e.string() }), ye = e.enum([
+}), ye = ve.extend({ id: e.string() }), be = e.enum([
 	"AUTH0",
 	"EMAIL",
 	"REDIRECT"
-]), be = e.enum([
+]), xe = e.enum([
 	"CREATE_USER",
 	"GET_USER",
 	"UPDATE_USER",
 	"SEND_REQUEST",
 	"SEND_EMAIL"
-]), xe = e.enum(["VERIFY_EMAIL"]), Se = e.object({
+]), Se = e.enum(["VERIFY_EMAIL"]), Ce = e.object({
 	require_mx_record: e.boolean().optional(),
 	block_aliases: e.boolean().optional(),
 	block_free_emails: e.boolean().optional(),
 	block_disposable_emails: e.boolean().optional(),
 	blocklist: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional()
-}), Ce = e.object({
+}), we = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("AUTH0"),
@@ -188,7 +188,7 @@ var t = e.object({
 		user_id: e.string(),
 		changes: e.record(e.string(), e.any())
 	})
-}), we = e.object({
+}), Te = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("EMAIL"),
@@ -197,13 +197,13 @@ var t = e.object({
 	mask_output: e.boolean().optional(),
 	params: e.object({
 		email: e.string(),
-		rules: Se.optional()
+		rules: Ce.optional()
 	})
-}), Te = e.enum([
+}), Ee = e.enum([
 	"change-email",
 	"account",
 	"custom"
-]), Ee = e.object({
+]), De = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("REDIRECT"),
@@ -211,32 +211,32 @@ var t = e.object({
 	allow_failure: e.boolean().optional(),
 	mask_output: e.boolean().optional(),
 	params: e.object({
-		target: Te.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
+		target: Ee.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
 		custom_url: e.string().optional().openapi({ description: "Custom URL to redirect to when target is 'custom'" })
 	})
-}), De = e.union([
-	Ce,
+}), Oe = e.union([
 	we,
-	Ee
-]), Oe = e.object({
+	Te,
+	De
+]), ke = e.object({
 	name: e.string().min(1).max(150).openapi({ description: "The name of the flow" }),
-	actions: e.array(De).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
-}), ke = Oe.extend(t.shape).extend({ id: e.string().openapi({
+	actions: e.array(Oe).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
+}), Ae = ke.extend(t.shape).extend({ id: e.string().openapi({
 	description: "Unique identifier for the flow",
 	example: "af_12tMpdJ3iek7svMyZkSh5M"
-}) }), Ae = e.object({
+}) }), je = e.object({
 	page: e.string().min(0).optional().default("0").transform((e) => parseInt(e, 10)).openapi({ description: "The page number where 0 is the first page" }),
 	per_page: e.string().min(1).optional().default("50").transform((e) => parseInt(e, 10)).openapi({ description: "The number of items per page. Defaults to 50." }),
 	include_totals: e.string().optional().default("false").transform((e) => e === "true").openapi({ description: "If the total number of items should be included in the response" }),
 	sort: e.string().regex(/^.+:(-1|1)$/).optional().openapi({ description: "A property that should have the format 'string:-1' or 'string:1'" }),
 	q: e.string().optional().openapi({ description: "A lucene query string used to filter the results" })
-}), je = e.object({
+}), Me = e.object({
 	start: e.number(),
 	limit: e.number(),
 	length: e.number(),
 	total: e.number().optional(),
 	next: e.string().optional()
-}), u = e.object({
+}), Ne = e.object({
 	email: e.string().optional(),
 	email_verified: e.boolean().optional(),
 	name: e.string().optional(),
@@ -245,7 +245,7 @@ var t = e.object({
 	phone_number: e.string().optional(),
 	phone_verified: e.boolean().optional(),
 	family_name: e.string().optional()
-}).catchall(e.any()), d = e.object({
+}).catchall(e.any()), Pe = e.object({
 	connection: e.string(),
 	user_id: e.string(),
 	provider: e.string(),
@@ -258,15 +258,15 @@ var t = e.object({
 	access_token: e.string().optional(),
 	access_token_secret: e.string().optional(),
 	refresh_token: e.string().optional(),
-	profileData: u.optional()
-}), f = e.object({
+	profileData: Ne.optional()
+}), Fe = e.object({
 	formatted: e.string().optional(),
 	street_address: e.string().optional(),
 	locality: e.string().optional(),
 	region: e.string().optional(),
 	postal_code: e.string().optional(),
 	country: e.string().optional()
-}).optional(), p = e.object({
+}).optional(), l = e.object({
 	email: e.string().transform((e) => e.toLowerCase()).optional(),
 	username: e.string().refine((e) => !e.includes("@"), { message: "Usernames must not contain \"@\". Use the email field for email addresses." }).optional(),
 	phone_number: e.string().optional(),
@@ -289,8 +289,8 @@ var t = e.object({
 	gender: e.string().optional(),
 	birthdate: e.string().optional(),
 	zoneinfo: e.string().optional(),
-	address: f
-}), m = p.extend({
+	address: Fe
+}), Ie = l.extend({
 	email_verified: e.boolean().default(!1),
 	verify_email: e.boolean().optional(),
 	last_ip: e.string().optional(),
@@ -305,29 +305,29 @@ var t = e.object({
 		hash: e.string(),
 		algorithm: e.string()
 	}).optional()
-}), h = m.omit({ password: !0 }).extend(t.shape).extend({
+}), Le = Ie.omit({ password: !0 }).extend(t.shape).extend({
 	user_id: e.string(),
 	provider: e.string(),
 	is_social: e.boolean(),
 	email: e.string().optional(),
 	login_count: e.number().default(0),
-	identities: e.array(d).optional()
-}), Me = h.omit({ registration_completed_at: !0 }), Ne = p.extend({
+	identities: e.array(Pe).optional()
+}), Re = Le.omit({ registration_completed_at: !0 }), ze = l.extend({
 	login_count: e.number(),
 	multifactor: e.array(e.string()).optional(),
 	last_ip: e.string().optional(),
 	last_login: e.string().optional(),
 	user_id: e.string()
-}).catchall(e.any()), Pe = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Fe = (e = 21) => {
+}).catchall(e.any()), Be = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Ve = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += Pe[n[e] & 63];
+	for (; e--;) t += Be[n[e] & 63];
 	return t;
-}, g = e.object({
+}, He = e.object({
 	client_id: e.string().optional().openapi({ description: "ID of this client. Generated server-side if omitted (Auth0 behavior)." }),
 	name: e.string().min(1).openapi({ description: "Name of this client (min length: 1 character, does not allow < or >)." }),
 	description: e.string().max(140).optional().openapi({ description: "Free text description of this client (max length: 140 characters)." }),
 	global: e.boolean().default(!1).openapi({ description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)." }),
-	client_secret: e.string().default(() => Fe()).optional().openapi({ description: "Client secret (which you must not make public)." }),
+	client_secret: e.string().default(() => Ve()).optional().openapi({ description: "Client secret (which you must not make public)." }),
 	app_type: e.enum([
 		"native",
 		"spa",
@@ -439,11 +439,12 @@ var t = e.object({
 		"iat_dcr"
 	]).optional().openapi({ description: "Provenance of this client. `manual` = Management API; `open_dcr` = RFC 7591 without IAT; `iat_dcr` = RFC 7591 with an Initial Access Token." }),
 	registration_metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Arbitrary metadata captured at Dynamic Client Registration time that isn't a first-class client field (e.g. integration_type, domain). Also stores `iat_constraints` for clients created via IAT so RFC 7592 PUT can enforce field immutability." }),
+	token_exchange: e.object({ allow_any_profile_of_type: e.array(e.literal("custom_authentication")).optional() }).optional().openapi({ description: "Custom Token Exchange settings. Set `allow_any_profile_of_type` to `[\"custom_authentication\"]` to let this client exchange subject tokens through the tenant's token exchange profiles." }),
 	user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({ description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies." })
-}), Ie = e.object({
+}), Ue = e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(g.shape).extend({ client_id: e.string() }), _ = e.object({
+}).extend(He.shape).extend({ client_id: e.string() }), We = e.object({
 	client_id: e.string().min(1).openapi({ description: "ID of the client." }),
 	audience: e.string().min(1).openapi({ description: "The audience (API identifier) of this client grant." }),
 	scope: e.array(e.string()).optional().openapi({ description: "Scopes allowed for this client grant." }),
@@ -456,38 +457,38 @@ var t = e.object({
 	is_system: e.boolean().optional().openapi({ description: "If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly." }),
 	subject_type: e.enum(["client", "user"]).optional().openapi({ description: "The type of application access the client grant allows. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." }),
 	authorization_details_types: e.array(e.string()).optional().openapi({ description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." })
-}), v = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(_.shape).extend({
+}), Ge = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(We.shape).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Le = e.array(v), y = e.enum(["iat", "rat"]), b = e.object({
+}), Ke = e.array(Ge), qe = e.enum(["iat", "rat"]), Je = e.object({
 	id: e.string(),
 	token_hash: e.string(),
-	type: y,
+	type: qe,
 	client_id: e.string().optional(),
 	sub: e.string().optional(),
 	constraints: e.record(e.string(), e.unknown()).optional(),
 	single_use: e.boolean().default(!1),
 	expires_at: e.string().optional()
-}), Re = e.object({
+}), Ye = e.object({
 	created_at: e.string(),
 	used_at: e.string().optional(),
 	revoked_at: e.string().optional()
-}).extend(b.shape), x = e.object({
+}).extend(Je.shape), u = e.object({
 	x: e.number(),
 	y: e.number()
-}), S = /* @__PURE__ */ function(e) {
+}), d = /* @__PURE__ */ function(e) {
 	return e.RICH_TEXT = "RICH_TEXT", e.NEXT_BUTTON = "NEXT_BUTTON", e.BACK_BUTTON = "BACK_BUTTON", e.SUBMIT_BUTTON = "SUBMIT_BUTTON", e.DIVIDER = "DIVIDER", e.TEXT = "TEXT", e.EMAIL = "EMAIL", e.PASSWORD = "PASSWORD", e.NUMBER = "NUMBER", e.PHONE = "PHONE", e.DATE = "DATE", e.CHECKBOX = "CHECKBOX", e.RADIO = "RADIO", e.SELECT = "SELECT", e.HIDDEN = "HIDDEN", e.LEGAL = "LEGAL", e;
-}({}), C = /* @__PURE__ */ function(e) {
+}({}), f = /* @__PURE__ */ function(e) {
 	return e.BLOCK = "BLOCK", e.FIELD = "FIELD", e;
-}({}), w = e.object({
+}({}), p = e.object({
 	id: e.string(),
-	category: e.nativeEnum(C),
-	type: e.nativeEnum(S)
-}), ze = w.extend({
+	category: e.nativeEnum(f),
+	type: e.nativeEnum(d)
+}), m = p.extend({
 	category: e.literal("BLOCK"),
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string() }).passthrough()
-}), Be = w.extend({
+}), h = p.extend({
 	category: e.literal("BLOCK"),
 	type: e.union([
 		e.literal("NEXT_BUTTON"),
@@ -495,13 +496,13 @@ var t = e.object({
 		e.literal("SUBMIT_BUTTON")
 	]),
 	config: e.object({ text: e.string() }).passthrough()
-}), Ve = w.extend({
+}), g = p.extend({
 	category: e.literal("FIELD"),
 	type: e.literal("LEGAL"),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional(),
 	config: e.object({ text: e.string() }).passthrough()
-}), He = w.extend({
+}), _ = p.extend({
 	category: e.literal("FIELD"),
 	type: e.union([
 		e.literal("TEXT"),
@@ -521,40 +522,40 @@ var t = e.object({
 		label: e.string().optional(),
 		placeholder: e.string().optional()
 	}).passthrough()
-}), Ue = e.object({
+}), v = e.object({
 	id: e.string(),
 	category: e.string(),
 	type: e.string()
-}).passthrough(), We = e.union([
-	ze,
-	Be,
-	Ve,
-	He,
-	Ue
-]), Ge = /* @__PURE__ */ function(e) {
+}).passthrough(), y = e.union([
+	m,
+	h,
+	g,
+	_,
+	v
+]), Xe = /* @__PURE__ */ function(e) {
 	return e.STEP = "STEP", e.FLOW = "FLOW", e.CONDITION = "CONDITION", e.ACTION = "ACTION", e;
-}({}), Ke = e.object({
+}({}), b = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: x,
+	coordinates: u,
 	alias: e.string().optional(),
 	config: e.object({
-		components: e.array(We),
+		components: e.array(y),
 		next_node: e.string()
 	}).passthrough()
-}), qe = e.object({
+}), x = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: x,
+	coordinates: u,
 	alias: e.string().optional(),
 	config: e.object({
 		flow_id: e.string(),
 		next_node: e.string()
 	})
-}), Je = e.object({
+}), S = e.object({
 	id: e.string(),
 	type: e.literal("ACTION"),
-	coordinates: x,
+	coordinates: u,
 	alias: e.string().optional(),
 	config: e.object({
 		action_type: e.enum(["REDIRECT"]).openapi({ description: "The type of action to perform" }),
@@ -566,56 +567,56 @@ var t = e.object({
 		custom_url: e.string().optional().openapi({ description: "Custom URL when target is 'custom'" }),
 		next_node: e.string().openapi({ description: "The next node to navigate to after action (for non-redirect actions)" })
 	}).passthrough()
-}), Ye = e.object({
+}), Ze = e.object({
 	id: e.string(),
 	type: e.string(),
-	coordinates: x
-}).passthrough(), Xe = e.union([
-	Ke,
-	qe,
-	Je,
-	Ye
-]), Ze = e.object({
+	coordinates: u
+}).passthrough(), Qe = e.union([
+	b,
+	x,
+	S,
+	Ze
+]), $e = e.object({
 	next_node: e.string(),
-	coordinates: x
-}).passthrough(), Qe = e.object({
+	coordinates: u
+}).passthrough(), et = e.object({
 	resume_flow: e.boolean().optional(),
-	coordinates: x
-}).passthrough(), $e = e.object({
+	coordinates: u
+}).passthrough(), tt = e.object({
 	id: e.string(),
 	name: e.string(),
 	languages: e.object({ primary: e.string() }).passthrough(),
-	nodes: e.array(Xe),
-	start: Ze,
-	ending: Qe,
+	nodes: e.array(Qe),
+	start: $e,
+	ending: et,
 	created_at: e.string(),
 	updated_at: e.string(),
 	links: e.object({
 		sdkSrc: e.string().optional(),
 		sdk_src: e.string().optional()
 	}).passthrough()
-}).passthrough(), et = $e.omit({
+}).passthrough(), nt = tt.omit({
 	id: !0,
 	created_at: !0,
 	updated_at: !0
-}), T = /* @__PURE__ */ function(e) {
+}), C = /* @__PURE__ */ function(e) {
 	return e.TOKEN = "token", e.ID_TOKEN = "id_token", e.TOKEN_ID_TOKEN = "id_token token", e.CODE = "code", e.CODE_ID_TOKEN = "code id_token", e.CODE_TOKEN = "code token", e.CODE_ID_TOKEN_TOKEN = "code id_token token", e;
-}({}), E = /* @__PURE__ */ function(e) {
+}({}), w = /* @__PURE__ */ function(e) {
 	return e.QUERY = "query", e.FRAGMENT = "fragment", e.FORM_POST = "form_post", e.WEB_MESSAGE = "web_message", e.SAML_POST = "saml_post", e;
-}({}), tt = /* @__PURE__ */ function(e) {
+}({}), rt = /* @__PURE__ */ function(e) {
 	return e.S256 = "S256", e.Plain = "plain", e;
-}({}), nt = e.union([e.null(), e.object({
+}({}), it = e.union([e.null(), e.object({
 	essential: e.boolean().optional(),
 	value: e.unknown().optional(),
 	values: e.array(e.unknown()).optional()
-})]).nullable(), rt = e.object({
-	userinfo: e.record(e.string(), nt).optional(),
-	id_token: e.record(e.string(), nt).optional()
-}), it = e.object({
+})]).nullable(), at = e.object({
+	userinfo: e.record(e.string(), it).optional(),
+	id_token: e.record(e.string(), it).optional()
+}), ot = e.object({
 	client_id: e.string(),
 	act_as: e.string().optional(),
-	response_type: e.nativeEnum(T).optional(),
-	response_mode: e.nativeEnum(E).optional(),
+	response_type: e.nativeEnum(C).optional(),
+	response_mode: e.nativeEnum(w).optional(),
 	redirect_uri: e.string().optional(),
 	audience: e.string().optional(),
 	organization: e.string().optional(),
@@ -623,15 +624,15 @@ var t = e.object({
 	nonce: e.string().optional(),
 	scope: e.string().optional(),
 	prompt: e.string().optional(),
-	code_challenge_method: e.nativeEnum(tt).optional(),
+	code_challenge_method: e.nativeEnum(rt).optional(),
 	code_challenge: e.string().optional(),
 	username: e.string().optional(),
 	ui_locales: e.string().optional(),
 	max_age: e.number().optional(),
 	acr_values: e.string().optional(),
-	claims: rt.optional(),
+	claims: at.optional(),
 	vendor_id: e.string().optional()
-}), at = e.object({
+}), st = e.object({
 	colors: e.object({
 		primary: e.string(),
 		page_background: e.union([e.string(), e.object({
@@ -650,7 +651,7 @@ var t = e.object({
 		"light",
 		"auto"
 	]).optional()
-}), ot = e.enum([
+}), ct = e.enum([
 	"password_reset",
 	"email_verification",
 	"otp",
@@ -658,12 +659,13 @@ var t = e.object({
 	"authorization_code",
 	"oauth2_state",
 	"ticket",
-	"client_assertion_jti"
-]), st = e.object({
+	"client_assertion_jti",
+	"subject_token_jti"
+]), lt = e.object({
 	code_id: e.string().openapi({ description: "The code that will be used in for instance an email verification flow" }),
 	login_id: e.string().optional().openapi({ description: "The id of the login session that the code is connected to" }),
 	connection_id: e.string().optional().openapi({ description: "The connection that the code is connected to" }),
-	code_type: ot,
+	code_type: ct,
 	code_verifier: e.string().optional().openapi({ description: "The code verifier used in PKCE in outbound flows" }),
 	code_challenge: e.string().optional().openapi({ description: "The code challenge used in PKCE in outbound flows" }),
 	code_challenge_method: e.enum(["plain", "S256"]).optional().openapi({ description: "The code challenge method used in PKCE in outbound flows" }),
@@ -674,7 +676,7 @@ var t = e.object({
 	expires_at: e.string(),
 	used_at: e.string().optional(),
 	user_id: e.string().optional()
-}), ct = st.extend({ created_at: e.string() }), lt = e.object({
+}), ut = lt.extend({ created_at: e.string() }), dt = e.object({
 	kid: e.string().optional(),
 	team_id: e.string().optional(),
 	realms: e.string().optional(),
@@ -794,35 +796,35 @@ var t = e.object({
 		"never_on_login"
 	]).optional()
 });
-function D(e) {
+function T(e) {
 	if (e !== null) {
-		if (Array.isArray(e)) return e.filter((e) => e !== null).map(D);
+		if (Array.isArray(e)) return e.filter((e) => e !== null).map(T);
 		if (e && typeof e == "object") {
 			let t = {};
-			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = D(r));
+			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = T(r));
 			return t;
 		}
 		return e;
 	}
 }
-var ut = e.object({
+var ft = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	display_name: e.string().optional(),
 	strategy: e.string(),
-	options: e.preprocess((e) => e === null ? {} : D(e), lt).default({}),
+	options: e.preprocess((e) => e === null ? {} : T(e), dt).default({}),
 	enabled_clients: e.array(e.string()).default([]).optional(),
-	response_type: e.nativeEnum(T).optional(),
-	response_mode: e.nativeEnum(E).optional(),
+	response_type: e.nativeEnum(C).optional(),
+	response_mode: e.nativeEnum(w).optional(),
 	is_domain_connection: e.boolean().optional(),
 	show_as_button: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional(),
 	is_system: e.boolean().optional()
-}), dt = e.object({
+}), pt = e.object({
 	id: e.string(),
 	created_at: e.string().transform((e) => e === null ? "" : e),
 	updated_at: e.string().transform((e) => e === null ? "" : e)
-}).extend(ut.shape), O = e.object({
+}).extend(ft.shape), E = e.object({
 	domain: e.string(),
 	custom_domain_id: e.string().optional(),
 	type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -836,7 +838,7 @@ var ut = e.object({
 		"null"
 	]).optional(),
 	domain_metadata: e.record(e.string(), e.string().max(255)).optional()
-}), ft = e.discriminatedUnion("name", [e.object({
+}), mt = e.discriminatedUnion("name", [e.object({
 	name: e.literal("txt"),
 	record: e.string(),
 	domain: e.string()
@@ -844,7 +846,7 @@ var ut = e.object({
 	name: e.literal("http"),
 	http_body: e.string(),
 	http_url: e.string()
-})]), pt = O.extend({
+})]), ht = E.extend({
 	custom_domain_id: e.string(),
 	primary: e.boolean(),
 	status: e.enum([
@@ -854,26 +856,26 @@ var ut = e.object({
 		"ready"
 	]),
 	origin_domain_name: e.string().optional(),
-	verification: e.object({ methods: e.array(ft) }).optional(),
+	verification: e.object({ methods: e.array(mt) }).optional(),
 	tls_policy: e.string().optional()
-}), mt = O.pick({
+}), gt = E.pick({
 	tls_policy: !0,
 	custom_client_ip_header: !0,
 	domain_metadata: !0
-}).strict(), ht = pt.extend({ tenant_id: e.string() }), gt = e.object({
+}).strict(), _t = ht.extend({ tenant_id: e.string() }), vt = e.object({
 	certificate: e.string().regex(/^-----BEGIN CERTIFICATE-----[\s\S]+-----END CERTIFICATE-----\s*$/, "must be PEM-encoded; include the full certificate chain in leaf-first order"),
 	private_key: e.string().regex(/-----BEGIN (RSA |EC |ENCRYPTED )?PRIVATE KEY-----[\s\S]+-----END \1PRIVATE KEY-----\s*$/, "must be a PEM-encoded private key")
-}), k = e.object({
+}), D = e.object({
 	id: e.string(),
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0)
-}), A = k.extend({ category: e.literal("BLOCK").optional() }), _t = A.extend({
+}), O = D.extend({ category: e.literal("BLOCK").optional() }), yt = O.extend({
 	type: e.literal("DIVIDER"),
 	config: e.object({ text: e.string().optional() }).optional()
-}), vt = A.extend({
+}), bt = O.extend({
 	type: e.literal("HTML"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), yt = A.extend({
+}), xt = O.extend({
 	type: e.literal("IMAGE"),
 	config: e.object({
 		src: e.string().optional(),
@@ -881,43 +883,47 @@ var ut = e.object({
 		width: e.number().optional(),
 		height: e.number().optional()
 	}).optional()
-}), bt = A.extend({
+}), St = O.extend({
 	type: e.literal("JUMP_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		target_step: e.string().optional()
 	})
-}), xt = A.extend({
+}), Ct = O.extend({
 	type: e.literal("RESEND_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		resend_action: e.string().optional()
 	})
-}), St = A.extend({
+}), wt = O.extend({
 	type: e.literal("NEXT_BUTTON"),
-	config: e.object({ text: e.string().optional() })
-}), Ct = A.extend({
+	config: e.object({
+		text: e.string().optional(),
+		variant: e.enum(["primary", "secondary"]).optional(),
+		skip_validation: e.boolean().optional()
+	})
+}), Tt = O.extend({
 	type: e.literal("PREVIOUS_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), wt = A.extend({
+}), Et = O.extend({
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), j = k.extend({
+}), k = D.extend({
 	category: e.literal("WIDGET").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), Tt = j.extend({
+}), Dt = k.extend({
 	type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
 	config: e.object({ credential_type: e.string().optional() })
-}), Et = j.extend({
+}), Ot = k.extend({
 	type: e.literal("GMAPS_ADDRESS"),
 	config: e.object({ api_key: e.string().optional() })
-}), Dt = j.extend({
+}), kt = k.extend({
 	type: e.literal("RECAPTCHA"),
 	config: e.object({ site_key: e.string().optional() })
-}), M = k.extend({
+}), A = D.extend({
 	category: e.literal("FIELD").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
@@ -933,10 +939,10 @@ var ut = e.object({
 	})).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), Ot = M.extend({
+}), At = A.extend({
 	type: e.literal("BOOLEAN"),
 	config: e.object({ default_value: e.boolean().optional() }).optional()
-}), kt = M.extend({
+}), jt = A.extend({
 	type: e.literal("CARDS"),
 	config: e.object({
 		options: e.array(e.object({
@@ -947,7 +953,7 @@ var ut = e.object({
 		})).optional(),
 		multi_select: e.boolean().optional()
 	}).optional()
-}), At = M.extend({
+}), Mt = A.extend({
 	type: e.literal("CHOICE"),
 	config: e.object({
 		options: e.array(e.object({
@@ -958,7 +964,7 @@ var ut = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), jt = M.extend({
+}), Nt = A.extend({
 	type: e.literal("CODE"),
 	config: e.object({
 		length: e.number().int().positive().max(100).optional(),
@@ -975,7 +981,7 @@ var ut = e.object({
 		message: "default_value is longer than the configured length",
 		path: ["default_value"]
 	}).optional()
-}), Mt = M.extend({
+}), Pt = A.extend({
 	type: e.literal("CUSTOM"),
 	config: e.object({
 		component: e.string().optional(),
@@ -983,7 +989,7 @@ var ut = e.object({
 		schema: e.record(e.string(), e.any()).optional(),
 		code: e.string().optional()
 	})
-}), Nt = M.extend({
+}), Ft = A.extend({
 	type: e.literal("DATE"),
 	config: e.object({
 		format: e.string().optional(),
@@ -991,7 +997,7 @@ var ut = e.object({
 		max: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Pt = M.extend({
+}), It = A.extend({
 	type: e.literal("DROPDOWN"),
 	config: e.object({
 		options: e.array(e.object({
@@ -1003,7 +1009,7 @@ var ut = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), Ft = M.extend({
+}), Lt = A.extend({
 	type: e.literal("EMAIL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1011,20 +1017,20 @@ var ut = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), It = M.extend({
+}), Rt = A.extend({
 	type: e.literal("FILE"),
 	config: e.object({
 		accept: e.string().optional(),
 		max_size: e.number().optional(),
 		multiple: e.boolean().optional()
 	}).optional()
-}), Lt = M.extend({
+}), zt = A.extend({
 	type: e.literal("LEGAL"),
 	config: e.object({
 		text: e.string(),
 		html: e.boolean().optional()
 	}).optional()
-}), Rt = M.extend({
+}), Bt = A.extend({
 	type: e.literal("NUMBER"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1033,7 +1039,7 @@ var ut = e.object({
 		step: e.number().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), zt = M.extend({
+}), Vt = A.extend({
 	type: e.literal("PASSWORD"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1042,13 +1048,13 @@ var ut = e.object({
 		forgot_password_link: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Bt = M.extend({
+}), Ht = A.extend({
 	type: e.literal("PAYMENT"),
 	config: e.object({
 		provider: e.string().optional(),
 		currency: e.string().optional()
 	}).optional()
-}), Vt = M.extend({
+}), Ut = A.extend({
 	type: e.literal("SOCIAL"),
 	config: e.object({
 		providers: e.array(e.string()).optional(),
@@ -1056,13 +1062,14 @@ var ut = e.object({
 			name: e.string(),
 			strategy: e.string().optional(),
 			display_name: e.string().optional(),
+			short_name: e.string().optional(),
 			icon_url: e.string().optional(),
 			href: e.string().optional(),
 			last_used: e.boolean().optional(),
 			last_used_label: e.string().optional()
 		})).optional()
 	}).optional()
-}), Ht = M.extend({
+}), Wt = A.extend({
 	type: e.literal("TEL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1070,7 +1077,7 @@ var ut = e.object({
 		default_value: e.string().optional(),
 		allow_email: e.boolean().optional()
 	}).optional()
-}), Ut = M.extend({
+}), Gt = A.extend({
 	type: e.literal("TEXT"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1080,39 +1087,37 @@ var ut = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), Wt = M.extend({
+}), Kt = A.extend({
 	type: e.literal("COUNTRY"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Gt = M.extend({
+}), qt = A.extend({
 	type: e.literal("URL"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Kt = e.discriminatedUnion("type", [
-	_t,
-	vt,
+}), Jt = e.discriminatedUnion("type", [
 	yt,
 	bt,
 	xt,
 	St,
 	Ct,
-	wt
-]), qt = e.discriminatedUnion("type", [
+	wt,
 	Tt,
-	Et,
-	Dt
-]), Jt = e.discriminatedUnion("type", [
+	Et
+]), Yt = e.discriminatedUnion("type", [
+	Dt,
 	Ot,
-	kt,
+	kt
+]), Xt = e.discriminatedUnion("type", [
 	At,
 	jt,
-	Wt,
 	Mt,
 	Nt,
+	Kt,
 	Pt,
 	Ft,
 	It,
@@ -1123,12 +1128,14 @@ var ut = e.object({
 	Vt,
 	Ht,
 	Ut,
-	Gt
-]), N = e.union([
-	Kt,
-	qt,
-	Jt
-]), Yt = new Set([
+	Wt,
+	Gt,
+	qt
+]), j = e.union([
+	Jt,
+	Yt,
+	Xt
+]), Zt = new Set([
 	"BOOLEAN",
 	"CARDS",
 	"CHOICE",
@@ -1143,7 +1150,7 @@ var ut = e.object({
 	"TEL",
 	"TEXT",
 	"URL"
-]), Xt = e.object({
+]), Qt = e.object({
 	id: e.string(),
 	type: e.literal("submit"),
 	label: e.string(),
@@ -1152,22 +1159,22 @@ var ut = e.object({
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0),
 	customizations: e.record(e.string(), e.any()).optional()
-}), P = e.object({
+}), M = e.object({
 	x: e.number(),
 	y: e.number()
-}), Zt = e.object({
+}), $t = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: P,
+	coordinates: M,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
 		flow_id: e.string().max(30),
 		next_node: e.string().optional()
 	})
-}), Qt = e.object({
+}), en = e.object({
 	id: e.string(),
 	type: e.literal("ROUTER"),
-	coordinates: P,
+	coordinates: M,
 	alias: e.string().min(1).max(150),
 	config: e.object({
 		rules: e.array(e.object({
@@ -1178,20 +1185,20 @@ var ut = e.object({
 		})),
 		fallback: e.string()
 	})
-}), $t = e.object({
+}), tn = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: P,
+	coordinates: M,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
-		components: e.array(N),
+		components: e.array(j),
 		next_node: e.string().optional()
 	})
-}), en = e.discriminatedUnion("type", [
-	Zt,
-	Qt,
-	$t
-]), tn = e.object({
+}), nn = e.discriminatedUnion("type", [
+	$t,
+	en,
+	tn
+]), rn = e.object({
 	name: e.string().openapi({ description: "The name of the form" }),
 	messages: e.object({
 		errors: e.record(e.string(), e.any()).optional(),
@@ -1202,14 +1209,14 @@ var ut = e.object({
 		default: e.string().optional()
 	}).optional(),
 	translations: e.record(e.string(), e.any()).optional(),
-	nodes: e.array(en).optional(),
+	nodes: e.array(nn).optional(),
 	start: e.object({
 		hidden_fields: e.array(e.object({
 			key: e.string(),
 			value: e.string()
 		})).optional(),
 		next_node: e.string().optional(),
-		coordinates: P.optional()
+		coordinates: M.optional()
 	}).optional(),
 	ending: e.object({
 		redirection: e.object({
@@ -1217,7 +1224,7 @@ var ut = e.object({
 			target: e.string().optional()
 		}).optional(),
 		after_submit: e.object({ flow_id: e.string().optional() }).optional(),
-		coordinates: P.optional(),
+		coordinates: M.optional(),
 		resume_flow: e.boolean().optional()
 	}).optional(),
 	style: e.object({ css: e.string().optional() }).optional(),
@@ -1225,7 +1232,7 @@ var ut = e.object({
 		sdkSrc: e.string().optional(),
 		sdk_src: e.string().optional()
 	}).optional()
-}).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" }), nn = t.extend(tn.shape).extend({ id: e.string() }), rn = e.object({
+}).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" }), an = t.extend(rn.shape).extend({ id: e.string() }), on = e.object({
 	id: e.number().optional(),
 	text: e.string(),
 	type: e.enum([
@@ -1234,34 +1241,34 @@ var ut = e.object({
 		"success",
 		"warning"
 	])
-}), an = e.object({
+}), sn = e.object({
 	id: e.string().optional(),
 	text: e.string(),
 	href: e.string(),
 	linkText: e.string().optional()
-}), on = e.object({
+}), cn = e.object({
 	name: e.string().optional(),
 	action: e.string(),
 	method: e.enum(["POST", "GET"]),
 	title: e.string().optional(),
 	description: e.string().optional(),
-	components: e.array(N),
-	messages: e.array(rn).optional(),
-	links: e.array(an).optional(),
+	components: e.array(j),
+	messages: e.array(on).optional(),
+	links: e.array(sn).optional(),
 	footer: e.string().optional()
 });
-function sn(e) {
+function ln(e) {
 	return e.category === "BLOCK";
 }
-function cn(e) {
+function un(e) {
 	return e.category === "WIDGET";
 }
-function ln(e) {
+function dn(e) {
 	return e.category === "FIELD";
 }
 //#endregion
 //#region src/types/Hook.ts
-var F = e.enum([
+var N = e.enum([
 	"pre-user-registration",
 	"post-user-registration",
 	"post-user-login",
@@ -1269,48 +1276,48 @@ var F = e.enum([
 	"validate-registration-username",
 	"pre-user-deletion",
 	"post-user-deletion"
-]), I = e.enum(["post-user-login"]), L = e.enum([
+]), P = e.enum(["post-user-login"]), F = e.enum([
 	"post-user-login",
 	"post-user-registration",
 	"post-user-update",
 	"credentials-exchange"
-]), R = e.enum([
+]), I = e.enum([
 	"post-user-login",
 	"credentials-exchange",
 	"pre-user-registration",
 	"post-user-registration"
-]), z = e.enum(["post-user-login"]), un = [
+]), L = e.enum(["post-user-login"]), fn = [
 	{
 		field: "url",
-		triggers: F.options
+		triggers: N.options
 	},
 	{
 		field: "form_id",
-		triggers: I.options
+		triggers: P.options
 	},
 	{
 		field: "template_id",
-		triggers: L.options
+		triggers: F.options
 	},
 	{
 		field: "code_id",
-		triggers: R.options
+		triggers: I.options
 	},
 	{
 		field: "page_id",
-		triggers: z.options
+		triggers: L.options
 	}
 ];
-function dn(e) {
+function pn(e) {
 	if (!(!e || typeof e != "object")) {
-		for (let t of un) if (typeof Reflect.get(e, t.field) == "string") return t.triggers;
+		for (let t of fn) if (typeof Reflect.get(e, t.field) == "string") return t.triggers;
 	}
 }
-var B = e.enum(["impersonate"]), V = e.enum([
+var R = e.enum(["impersonate"]), z = e.enum([
 	"ensure-username",
 	"set-preferred-username",
 	"account-linking"
-]), fn = {
+]), mn = {
 	"ensure-username": {
 		name: "Ensure Username",
 		description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1330,87 +1337,87 @@ var B = e.enum(["impersonate"]), V = e.enum([
 			"post-user-update"
 		]
 	}
-}, H = {
+}, B = {
 	enabled: e.boolean().default(!1),
 	synchronous: e.boolean().default(!1),
 	priority: e.number().optional(),
 	hook_id: e.string().optional(),
 	metadata: e.record(e.string(), e.unknown()).optional()
-}, pn = e.object({
-	...H,
-	trigger_id: F,
+}, hn = e.object({
+	...B,
+	trigger_id: N,
 	url: e.string()
-}), mn = e.object({
-	...H,
-	trigger_id: I,
-	form_id: e.string()
-}), hn = e.object({
-	...H,
-	trigger_id: L,
-	template_id: V
 }), gn = e.object({
-	...H,
-	trigger_id: R,
-	code_id: e.string()
+	...B,
+	trigger_id: P,
+	form_id: e.string()
 }), _n = e.object({
-	...H,
-	trigger_id: z,
-	page_id: B,
+	...B,
+	trigger_id: F,
+	template_id: z
+}), vn = e.object({
+	...B,
+	trigger_id: I,
+	code_id: e.string()
+}), yn = e.object({
+	...B,
+	trigger_id: L,
+	page_id: R,
 	permission_required: e.string().optional()
-}), vn = e.union([
-	pn,
-	mn,
+}), bn = e.union([
 	hn,
 	gn,
-	_n
-]), yn = e.object({
-	...H,
-	trigger_id: F
+	_n,
+	vn,
+	yn
+]), xn = e.object({
+	...B,
+	trigger_id: N
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	url: e.string()
-}), bn = e.object({
-	...H,
-	trigger_id: I
+}), Sn = e.object({
+	...B,
+	trigger_id: P
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	form_id: e.string()
-}), xn = e.object({
-	...H,
-	trigger_id: L
+}), Cn = e.object({
+	...B,
+	trigger_id: F
 }).extend(t.shape).extend({
 	hook_id: e.string(),
-	template_id: V
-}), Sn = e.object({
-	...H,
-	trigger_id: R
+	template_id: z
+}), wn = e.object({
+	...B,
+	trigger_id: I
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	code_id: e.string()
-}), Cn = e.object({
-	...H,
-	trigger_id: z
+}), Tn = e.object({
+	...B,
+	trigger_id: L
 }).extend(t.shape).extend({
 	hook_id: e.string(),
-	page_id: B,
+	page_id: R,
 	permission_required: e.string().optional()
-}), wn = e.union([
-	yn,
-	bn,
+}), En = e.union([
 	xn,
 	Sn,
-	Cn
-]), Tn = e.object({
+	Cn,
+	wn,
+	Tn
+]), Dn = e.object({
 	code: e.string().max(1e5),
 	secrets: e.record(e.string(), e.string()).optional()
-}), En = Tn.extend({
+}), On = Dn.extend({
 	id: e.string(),
 	tenant_id: e.string()
-}).extend(t.shape), Dn = e.object({ name: e.string().optional() }), On = e.object({ email: e.string().optional() }), kn = e.object({
+}).extend(t.shape), kn = e.object({ name: e.string().optional() }), An = e.object({ email: e.string().optional() }), jn = e.object({
 	id: e.string().optional(),
 	organization_id: e.string().max(50),
-	inviter: Dn,
-	invitee: On,
+	inviter: kn,
+	invitee: An,
 	invitation_url: e.string().url(),
 	client_id: e.string(),
 	connection_id: e.string().optional(),
@@ -1419,13 +1426,13 @@ var B = e.enum(["impersonate"]), V = e.enum([
 	ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
 	roles: e.array(e.string()).default([]).optional(),
 	send_invitation_email: e.boolean().default(!0).optional()
-}), An = e.object({
+}), Mn = e.object({
 	id: e.string(),
 	organization_id: e.string().max(50),
 	created_at: e.string().datetime(),
 	expires_at: e.string().datetime(),
 	ticket_id: e.string().optional()
-}).extend(kn.omit({ id: !0 }).shape), jn = e.object({
+}).extend(jn.omit({ id: !0 }).shape), Nn = e.object({
 	alg: e.enum([
 		"RS256",
 		"RS384",
@@ -1436,7 +1443,7 @@ var B = e.enum(["impersonate"]), V = e.enum([
 		"HS256",
 		"HS384",
 		"HS512"
-	]),
+	]).optional(),
 	kid: e.string().optional(),
 	kty: e.enum([
 		"RSA",
@@ -1450,6 +1457,7 @@ var B = e.enum(["impersonate"]), V = e.enum([
 	x: e.string().optional(),
 	y: e.string().optional(),
 	x5t: e.string().optional(),
+	"x5t#S256": e.string().optional(),
 	x5c: e.array(e.string()).optional()
 }).superRefine((t, n) => {
 	if (t.kty === "RSA") for (let r of ["n", "e"]) t[r] || n.addIssue({
@@ -1466,7 +1474,7 @@ var B = e.enum(["impersonate"]), V = e.enum([
 		path: [r],
 		message: `EC JWK is missing required member '${r}'`
 	});
-}), Mn = e.object({ keys: e.array(jn) }), Nn = e.object({
+}), Pn = e.object({ keys: e.array(Nn) }), Fn = e.object({
 	issuer: e.string(),
 	authorization_endpoint: e.string(),
 	token_endpoint: e.string(),
@@ -1492,33 +1500,33 @@ var B = e.enum(["impersonate"]), V = e.enum([
 	client_id_metadata_document_supported: e.boolean().optional(),
 	backchannel_logout_supported: e.boolean().optional(),
 	backchannel_logout_session_supported: e.boolean().optional()
-}), U = /* @__PURE__ */ function(e) {
+}), In = /* @__PURE__ */ function(e) {
 	return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.AWAITING_CONSENT = "awaiting_consent", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
-}({}), Pn = e.nativeEnum(U), W = e.object({
+}({}), Ln = e.nativeEnum(In), V = e.object({
 	strategy: e.string(),
 	strategy_type: e.string()
-}), Fn = e.object({
+}), Rn = e.object({
 	csrf_token: e.string(),
 	auth0Client: e.string().optional(),
-	authParams: it,
+	authParams: ot,
 	expires_at: e.string(),
 	deleted_at: e.string().optional(),
 	ip: e.string().optional(),
 	useragent: e.string().optional(),
 	session_id: e.string().optional(),
 	authorization_url: e.string().optional(),
-	state: Pn.optional().default("pending"),
+	state: Ln.optional().default("pending"),
 	state_data: e.string().optional(),
 	failure_reason: e.string().optional(),
 	user_id: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: W.optional(),
+	auth_strategy: V.optional(),
 	authenticated_at: e.string().optional()
-}).openapi({ description: "This represents a login sesion" }), In = Fn.extend({
+}).openapi({ description: "This represents a login sesion" }), zn = Rn.extend({
 	id: e.string().openapi({ description: "This is is used as the state in the universal login" }),
 	created_at: e.string(),
 	updated_at: e.string()
-}), G = {
+}), H = {
 	ACLS_SUMMARY: "acls_summary",
 	ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
 	API_LIMIT: "api_limit",
@@ -1678,190 +1686,190 @@ var B = e.enum(["impersonate"]), V = e.enum([
 	WARNING_DURING_LOGIN: "w",
 	WARNING_SENDING_NOTIFICATION: "wn",
 	WARNING_USER_MANAGEMENT: "wum"
-}, Ln = e.string().refine((e) => Object.values(G).includes(e), { message: "Invalid log type" }), Rn = {
-	[G.ACLS_SUMMARY]: "ACLs Summary",
-	[G.ACTIONS_EXECUTION_FAILED]: "Actions Execution Failed",
-	[G.API_LIMIT]: "API Rate Limit Reached",
-	[G.API_LIMIT_WARNING]: "API Rate Limit Warning",
-	[G.APPI]: "API Operation",
-	[G.CIBA_EXCHANGE_FAILED]: "CIBA Exchange Failed",
-	[G.CIBA_EXCHANGE_SUCCEEDED]: "CIBA Exchange Succeeded",
-	[G.CIBA_START_FAILED]: "CIBA Start Failed",
-	[G.CIBA_START_SUCCEEDED]: "CIBA Start Succeeded",
-	[G.CODE_LINK_SENT]: "Code/Link Sent",
-	[G.CODE_SENT]: "Code Sent",
-	[G.DEPRECATION_NOTICE]: "Deprecation Notice",
-	[G.FAILED_LOGIN]: "Failed Login",
-	[G.FAILED_BY_CONNECTOR]: "Failed by Connector",
-	[G.FAILED_CHANGE_EMAIL]: "Failed Change Email",
-	[G.FAILED_BY_CORS]: "Failed by CORS",
-	[G.FAILED_CROSS_ORIGIN_AUTHENTICATION]: "Failed Cross Origin Authentication",
-	[G.FAILED_CHANGE_PASSWORD]: "Failed Change Password",
-	[G.FAILED_POST_CHANGE_PASSWORD_HOOK]: "Failed Post-Change Password Hook",
-	[G.FAILED_CHANGE_PHONE_NUMBER]: "Failed Change Phone Number",
-	[G.FAILED_CHANGE_PASSWORD_REQUEST]: "Failed Change Password Request",
-	[G.FAILED_CONNECTOR_PROVISIONING]: "Failed Connector Provisioning",
-	[G.FAILED_CHANGE_USERNAME]: "Failed Change Username",
-	[G.FAILED_DELEGATION]: "Failed Delegation",
-	[G.FAILED_DEVICE_ACTIVATION]: "Failed Device Activation",
-	[G.FAILED_DEVICE_AUTHORIZATION_REQUEST]: "Failed Device Authorization Request",
-	[G.USER_CANCELED_DEVICE_CONFIRMATION]: "User Canceled Device Confirmation",
-	[G.FAILED_USER_DELETION]: "Failed User Deletion",
-	[G.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Authorization Code for Access Token",
-	[G.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Failed Exchange Access Token for Client Credentials",
-	[G.FAILED_EXCHANGE_CUSTOM_TOKEN]: "Failed Exchange Custom Token",
-	[G.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Device Code for Access Token",
-	[G.FAILED_FEDERATED_LOGOUT]: "Failed Federated Logout",
-	[G.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Failed Exchange Native Social Login",
-	[G.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Failed Exchange Password OOB for Access Token",
-	[G.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Password OTP for Access Token",
-	[G.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Failed Exchange Password for Access Token",
-	[G.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Passwordless OTP for Access Token",
-	[G.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Failed Exchange Password MFA Recovery for Access Token",
-	[G.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN]: "Failed Exchange Rotating Refresh Token",
-	[G.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Refresh Token for Access Token",
-	[G.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Subject Token for Access Token",
-	[G.FAILED_HOOK]: "Failed Hook",
-	[G.FAILED_IMPERSONATION]: "Failed Impersonation",
-	[G.FAILED_INVITE_ACCEPT]: "Failed Invite Accept",
-	[G.FAILED_LOGOUT]: "Failed Logout",
-	[G.FLOWS_EXECUTION_COMPLETED]: "Flows Execution Completed",
-	[G.FLOWS_EXECUTION_FAILED]: "Flows Execution Failed",
-	[G.FAILED_SENDING_NOTIFICATION]: "Failed Sending Notification",
-	[G.FORMS_SUBMISSION_FAILED]: "Forms Submission Failed",
-	[G.FORMS_SUBMISSION_SUCCEEDED]: "Forms Submission Succeeded",
-	[G.FAILED_LOGIN_INCORRECT_PASSWORD]: "Failed Login - Incorrect Password",
-	[G.FAILED_PUSHED_AUTHORIZATION_REQUEST]: "Failed Pushed Authorization Request",
-	[G.FAILED_POST_USER_REGISTRATION_HOOK]: "Failed Post-User Registration Hook",
-	[G.FAILED_SIGNUP]: "Failed Signup",
-	[G.FAILED_SILENT_AUTH]: "Failed Silent Auth",
-	[G.FAILED_LOGIN_INVALID_EMAIL_USERNAME]: "Failed Login - Invalid Email/Username",
-	[G.FAILED_USERS_IMPORT]: "Failed Users Import",
-	[G.FAILED_VERIFICATION_EMAIL]: "Failed Verification Email",
-	[G.FAILED_VERIFICATION_EMAIL_REQUEST]: "Failed Verification Email Request",
-	[G.EMAIL_VERIFICATION_CONFIRMED]: "Email Verification Confirmed",
-	[G.EMAIL_VERIFICATION_FAILED]: "Email Verification Failed",
-	[G.MFA_AUTH_FAILED]: "MFA Auth Failed",
-	[G.MFA_AUTH_REJECTED]: "MFA Auth Rejected",
-	[G.MFA_AUTH_SUCCESS]: "MFA Auth Success",
-	[G.MFA_ENROLLMENT_COMPLETE]: "MFA Enrollment Complete",
-	[G.TOO_MANY_MFA_FAILURES]: "Too Many MFA Failures",
-	[G.MFA_RECOVERY_FAILED]: "MFA Recovery Failed",
-	[G.MFA_RECOVERY_RATE_LIMIT_EXCEED]: "MFA Recovery Rate Limit Exceeded",
-	[G.MFA_RECOVERY_SUCCESS]: "MFA Recovery Success",
-	[G.MFA_EMAIL_SENT]: "MFA Email Sent",
-	[G.EMAIL_VERIFICATION_SENT]: "Email Verification Sent",
-	[G.EMAIL_VERIFICATION_SEND_FAILURE]: "Email Verification Send Failure",
-	[G.PUSH_NOTIFICATION_SENT]: "Push Notification Sent",
-	[G.ERROR_SENDING_MFA_PUSH_NOTIFICATION]: "Error Sending MFA Push Notification",
-	[G.MFA_SMS_SENT]: "MFA SMS Sent",
-	[G.ERROR_SENDING_MFA_SMS]: "Error Sending MFA SMS",
-	[G.MFA_VOICE_CALL_SUCCESS]: "MFA Voice Call Success",
-	[G.MFA_VOICE_CALL_FAILED]: "MFA Voice Call Failed",
-	[G.SECOND_FACTOR_STARTED]: "Second Factor Started",
-	[G.MFA_ENROLL_STARTED]: "MFA Enroll Started",
-	[G.MFA_ENROLLMENT_FAILED]: "MFA Enrollment Failed",
-	[G.GUARDIAN_TENANT_UPDATE]: "Guardian Tenant Update",
-	[G.UNENROLL_DEVICE_ACCOUNT]: "Unenroll Device Account",
-	[G.UPDATE_DEVICE_ACCOUNT]: "Update Device Account",
-	[G.WEBAUTHN_CHALLENGE_FAILED]: "WebAuthn Challenge Failed",
-	[G.WEBAUTHN_ENROLLMENT_FAILED]: "WebAuthn Enrollment Failed",
-	[G.FAILED_KMS_API_OPERATION]: "Failed KMS API Operation",
-	[G.SUCCESS_KMS_API_OPERATION]: "Success KMS API Operation",
-	[G.KMS_KEY_STATE_CHANGED]: "KMS Key State Changed",
-	[G.TOO_MANY_CALLS_TO_DELEGATION]: "Too Many Calls to Delegation",
-	[G.BLOCKED_IP_ADDRESS]: "Blocked IP Address",
-	[G.BLOCKED_ACCOUNT_IP]: "Blocked Account (IP)",
-	[G.BLOCKED_ACCOUNT_EMAIL]: "Blocked Account (Email)",
-	[G.INFORMATION]: "Information",
-	[G.MFA_REQUIRED]: "MFA Required",
-	[G.MANAGEMENT_API_READ_OPERATION]: "Management API Read Operation",
-	[G.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Failed Authentication Method Operation (My Account)",
-	[G.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Successful Authentication Method Operation (My Account)",
-	[G.FAILED_OIDC_BACKCHANNEL_LOGOUT]: "Failed OIDC Backchannel Logout",
-	[G.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT]: "Successful OIDC Backchannel Logout",
-	[G.ORGANIZATION_MEMBER_ADDED]: "Organization Member Added",
-	[G.PASSKEY_CHALLENGE_FAILED]: "Passkey Challenge Failed",
-	[G.PASSKEY_CHALLENGE_STARTED]: "Passkey Challenge Started",
-	[G.PRE_LOGIN_ASSESSMENT]: "Pre-Login Assessment",
-	[G.BREACHED_PASSWORD]: "Breached Password",
-	[G.BREACHED_PASSWORD_ON_RESET]: "Breached Password on Reset",
-	[G.SUCCESS_RESOURCE_CLEANUP]: "Success Resource Cleanup",
-	[G.RICH_CONSENTS_ACCESS_ERROR]: "Rich Consents Access Error",
-	[G.SUCCESS_LOGIN]: "Success Login",
-	[G.SUCCESS_API_OPERATION]: "Success API Operation",
-	[G.FAILED_API_OPERATION]: "Failed API Operation",
-	[G.SUCCESS_CHANGE_EMAIL]: "Success Change Email",
-	[G.SUCCESS_CROSS_ORIGIN_AUTHENTICATION]: "Success Cross Origin Authentication",
-	[G.SUCCESS_CHANGE_PASSWORD]: "Success Change Password",
-	[G.SUCCESS_CHANGE_PHONE_NUMBER]: "Success Change Phone Number",
-	[G.SUCCESS_CHANGE_PASSWORD_REQUEST]: "Success Change Password Request",
-	[G.SUCCESS_CHANGE_USERNAME]: "Success Change Username",
-	[G.SUCCESS_CREDENTIAL_VALIDATION]: "Success Credential Validation",
-	[G.SUCCESS_DELEGATION]: "Success Delegation",
-	[G.SUCCESS_USER_DELETION]: "Success User Deletion",
-	[G.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Authorization Code for Access Token",
-	[G.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Success Exchange Access Token for Client Credentials",
-	[G.SUCCESS_EXCHANGE_CUSTOM_TOKEN]: "Success Exchange Custom Token",
-	[G.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Device Code for Access Token",
-	[G.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Success Exchange Native Social Login",
-	[G.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Password OOB for Access Token",
-	[G.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Password OTP for Access Token",
-	[G.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passwordless OTP for Access Token",
-	[G.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Success Exchange Password for Access Token",
-	[G.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OOB for Access Token",
-	[G.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OTP for Access Token",
-	[G.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Passkey MFA Recovery for Access Token",
-	[G.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Password MFA Recovery for Access Token",
-	[G.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Refresh Token for Access Token",
-	[G.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Subject Token for Access Token",
-	[G.SUCCESS_IMPERSONATION]: "Success Impersonation",
-	[G.SUCCESSFULLY_ACCEPTED_USER_INVITE]: "Successfully Accepted User Invite",
-	[G.BREACHED_PASSWORD_ON_SIGNUP]: "Breached Password on Signup",
-	[G.SUCCESS_LOGOUT]: "Success Logout",
-	[G.SUCCESS_HOOK]: "Success Hook",
-	[G.SUCCESS_PASSWORD_MIGRATION]: "Success Password Migration",
-	[G.SUCCESS_REVOCATION]: "Success Revocation",
-	[G.SUCCESS_SIGNUP]: "Success Signup",
-	[G.FAILED_SS_SSO_OPERATION]: "Failed SS SSO Operation",
-	[G.INFORMATION_FROM_SS_SSO_OPERATION]: "Information from SS SSO Operation",
-	[G.SUCCESS_SS_SSO_OPERATION]: "Success SS SSO Operation",
-	[G.SUCCESS_SILENT_AUTH]: "Success Silent Auth",
-	[G.SUCCESSFUL_SCIM_OPERATION]: "Successful SCIM Operation",
-	[G.SUCCESSFULLY_IMPORTED_USERS]: "Successfully Imported Users",
-	[G.SUCCESS_VERIFICATION_EMAIL]: "Success Verification Email",
-	[G.SUCCESS_VERIFICATION_EMAIL_REQUEST]: "Success Verification Email Request",
-	[G.MAX_AMOUNT_OF_AUTHENTICATORS]: "Max Amount of Authenticators",
-	[G.USER_LOGIN_BLOCK_RELEASED]: "User Login Block Released",
-	[G.FAILED_UNIVERSAL_LOGOUT]: "Failed Universal Logout",
-	[G.SUCCESSFUL_UNIVERSAL_LOGOUT]: "Successful Universal Logout",
-	[G.WARNING_DURING_LOGIN]: "Warning During Login",
-	[G.WARNING_SENDING_NOTIFICATION]: "Warning Sending Notification",
-	[G.WARNING_USER_MANAGEMENT]: "Warning User Management"
-}, zn = (() => {
+}, Bn = e.string().refine((e) => Object.values(H).includes(e), { message: "Invalid log type" }), Vn = {
+	[H.ACLS_SUMMARY]: "ACLs Summary",
+	[H.ACTIONS_EXECUTION_FAILED]: "Actions Execution Failed",
+	[H.API_LIMIT]: "API Rate Limit Reached",
+	[H.API_LIMIT_WARNING]: "API Rate Limit Warning",
+	[H.APPI]: "API Operation",
+	[H.CIBA_EXCHANGE_FAILED]: "CIBA Exchange Failed",
+	[H.CIBA_EXCHANGE_SUCCEEDED]: "CIBA Exchange Succeeded",
+	[H.CIBA_START_FAILED]: "CIBA Start Failed",
+	[H.CIBA_START_SUCCEEDED]: "CIBA Start Succeeded",
+	[H.CODE_LINK_SENT]: "Code/Link Sent",
+	[H.CODE_SENT]: "Code Sent",
+	[H.DEPRECATION_NOTICE]: "Deprecation Notice",
+	[H.FAILED_LOGIN]: "Failed Login",
+	[H.FAILED_BY_CONNECTOR]: "Failed by Connector",
+	[H.FAILED_CHANGE_EMAIL]: "Failed Change Email",
+	[H.FAILED_BY_CORS]: "Failed by CORS",
+	[H.FAILED_CROSS_ORIGIN_AUTHENTICATION]: "Failed Cross Origin Authentication",
+	[H.FAILED_CHANGE_PASSWORD]: "Failed Change Password",
+	[H.FAILED_POST_CHANGE_PASSWORD_HOOK]: "Failed Post-Change Password Hook",
+	[H.FAILED_CHANGE_PHONE_NUMBER]: "Failed Change Phone Number",
+	[H.FAILED_CHANGE_PASSWORD_REQUEST]: "Failed Change Password Request",
+	[H.FAILED_CONNECTOR_PROVISIONING]: "Failed Connector Provisioning",
+	[H.FAILED_CHANGE_USERNAME]: "Failed Change Username",
+	[H.FAILED_DELEGATION]: "Failed Delegation",
+	[H.FAILED_DEVICE_ACTIVATION]: "Failed Device Activation",
+	[H.FAILED_DEVICE_AUTHORIZATION_REQUEST]: "Failed Device Authorization Request",
+	[H.USER_CANCELED_DEVICE_CONFIRMATION]: "User Canceled Device Confirmation",
+	[H.FAILED_USER_DELETION]: "Failed User Deletion",
+	[H.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Authorization Code for Access Token",
+	[H.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Failed Exchange Access Token for Client Credentials",
+	[H.FAILED_EXCHANGE_CUSTOM_TOKEN]: "Failed Exchange Custom Token",
+	[H.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Device Code for Access Token",
+	[H.FAILED_FEDERATED_LOGOUT]: "Failed Federated Logout",
+	[H.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Failed Exchange Native Social Login",
+	[H.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Failed Exchange Password OOB for Access Token",
+	[H.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Password OTP for Access Token",
+	[H.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Failed Exchange Password for Access Token",
+	[H.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Passwordless OTP for Access Token",
+	[H.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Failed Exchange Password MFA Recovery for Access Token",
+	[H.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN]: "Failed Exchange Rotating Refresh Token",
+	[H.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Refresh Token for Access Token",
+	[H.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Subject Token for Access Token",
+	[H.FAILED_HOOK]: "Failed Hook",
+	[H.FAILED_IMPERSONATION]: "Failed Impersonation",
+	[H.FAILED_INVITE_ACCEPT]: "Failed Invite Accept",
+	[H.FAILED_LOGOUT]: "Failed Logout",
+	[H.FLOWS_EXECUTION_COMPLETED]: "Flows Execution Completed",
+	[H.FLOWS_EXECUTION_FAILED]: "Flows Execution Failed",
+	[H.FAILED_SENDING_NOTIFICATION]: "Failed Sending Notification",
+	[H.FORMS_SUBMISSION_FAILED]: "Forms Submission Failed",
+	[H.FORMS_SUBMISSION_SUCCEEDED]: "Forms Submission Succeeded",
+	[H.FAILED_LOGIN_INCORRECT_PASSWORD]: "Failed Login - Incorrect Password",
+	[H.FAILED_PUSHED_AUTHORIZATION_REQUEST]: "Failed Pushed Authorization Request",
+	[H.FAILED_POST_USER_REGISTRATION_HOOK]: "Failed Post-User Registration Hook",
+	[H.FAILED_SIGNUP]: "Failed Signup",
+	[H.FAILED_SILENT_AUTH]: "Failed Silent Auth",
+	[H.FAILED_LOGIN_INVALID_EMAIL_USERNAME]: "Failed Login - Invalid Email/Username",
+	[H.FAILED_USERS_IMPORT]: "Failed Users Import",
+	[H.FAILED_VERIFICATION_EMAIL]: "Failed Verification Email",
+	[H.FAILED_VERIFICATION_EMAIL_REQUEST]: "Failed Verification Email Request",
+	[H.EMAIL_VERIFICATION_CONFIRMED]: "Email Verification Confirmed",
+	[H.EMAIL_VERIFICATION_FAILED]: "Email Verification Failed",
+	[H.MFA_AUTH_FAILED]: "MFA Auth Failed",
+	[H.MFA_AUTH_REJECTED]: "MFA Auth Rejected",
+	[H.MFA_AUTH_SUCCESS]: "MFA Auth Success",
+	[H.MFA_ENROLLMENT_COMPLETE]: "MFA Enrollment Complete",
+	[H.TOO_MANY_MFA_FAILURES]: "Too Many MFA Failures",
+	[H.MFA_RECOVERY_FAILED]: "MFA Recovery Failed",
+	[H.MFA_RECOVERY_RATE_LIMIT_EXCEED]: "MFA Recovery Rate Limit Exceeded",
+	[H.MFA_RECOVERY_SUCCESS]: "MFA Recovery Success",
+	[H.MFA_EMAIL_SENT]: "MFA Email Sent",
+	[H.EMAIL_VERIFICATION_SENT]: "Email Verification Sent",
+	[H.EMAIL_VERIFICATION_SEND_FAILURE]: "Email Verification Send Failure",
+	[H.PUSH_NOTIFICATION_SENT]: "Push Notification Sent",
+	[H.ERROR_SENDING_MFA_PUSH_NOTIFICATION]: "Error Sending MFA Push Notification",
+	[H.MFA_SMS_SENT]: "MFA SMS Sent",
+	[H.ERROR_SENDING_MFA_SMS]: "Error Sending MFA SMS",
+	[H.MFA_VOICE_CALL_SUCCESS]: "MFA Voice Call Success",
+	[H.MFA_VOICE_CALL_FAILED]: "MFA Voice Call Failed",
+	[H.SECOND_FACTOR_STARTED]: "Second Factor Started",
+	[H.MFA_ENROLL_STARTED]: "MFA Enroll Started",
+	[H.MFA_ENROLLMENT_FAILED]: "MFA Enrollment Failed",
+	[H.GUARDIAN_TENANT_UPDATE]: "Guardian Tenant Update",
+	[H.UNENROLL_DEVICE_ACCOUNT]: "Unenroll Device Account",
+	[H.UPDATE_DEVICE_ACCOUNT]: "Update Device Account",
+	[H.WEBAUTHN_CHALLENGE_FAILED]: "WebAuthn Challenge Failed",
+	[H.WEBAUTHN_ENROLLMENT_FAILED]: "WebAuthn Enrollment Failed",
+	[H.FAILED_KMS_API_OPERATION]: "Failed KMS API Operation",
+	[H.SUCCESS_KMS_API_OPERATION]: "Success KMS API Operation",
+	[H.KMS_KEY_STATE_CHANGED]: "KMS Key State Changed",
+	[H.TOO_MANY_CALLS_TO_DELEGATION]: "Too Many Calls to Delegation",
+	[H.BLOCKED_IP_ADDRESS]: "Blocked IP Address",
+	[H.BLOCKED_ACCOUNT_IP]: "Blocked Account (IP)",
+	[H.BLOCKED_ACCOUNT_EMAIL]: "Blocked Account (Email)",
+	[H.INFORMATION]: "Information",
+	[H.MFA_REQUIRED]: "MFA Required",
+	[H.MANAGEMENT_API_READ_OPERATION]: "Management API Read Operation",
+	[H.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Failed Authentication Method Operation (My Account)",
+	[H.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Successful Authentication Method Operation (My Account)",
+	[H.FAILED_OIDC_BACKCHANNEL_LOGOUT]: "Failed OIDC Backchannel Logout",
+	[H.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT]: "Successful OIDC Backchannel Logout",
+	[H.ORGANIZATION_MEMBER_ADDED]: "Organization Member Added",
+	[H.PASSKEY_CHALLENGE_FAILED]: "Passkey Challenge Failed",
+	[H.PASSKEY_CHALLENGE_STARTED]: "Passkey Challenge Started",
+	[H.PRE_LOGIN_ASSESSMENT]: "Pre-Login Assessment",
+	[H.BREACHED_PASSWORD]: "Breached Password",
+	[H.BREACHED_PASSWORD_ON_RESET]: "Breached Password on Reset",
+	[H.SUCCESS_RESOURCE_CLEANUP]: "Success Resource Cleanup",
+	[H.RICH_CONSENTS_ACCESS_ERROR]: "Rich Consents Access Error",
+	[H.SUCCESS_LOGIN]: "Success Login",
+	[H.SUCCESS_API_OPERATION]: "Success API Operation",
+	[H.FAILED_API_OPERATION]: "Failed API Operation",
+	[H.SUCCESS_CHANGE_EMAIL]: "Success Change Email",
+	[H.SUCCESS_CROSS_ORIGIN_AUTHENTICATION]: "Success Cross Origin Authentication",
+	[H.SUCCESS_CHANGE_PASSWORD]: "Success Change Password",
+	[H.SUCCESS_CHANGE_PHONE_NUMBER]: "Success Change Phone Number",
+	[H.SUCCESS_CHANGE_PASSWORD_REQUEST]: "Success Change Password Request",
+	[H.SUCCESS_CHANGE_USERNAME]: "Success Change Username",
+	[H.SUCCESS_CREDENTIAL_VALIDATION]: "Success Credential Validation",
+	[H.SUCCESS_DELEGATION]: "Success Delegation",
+	[H.SUCCESS_USER_DELETION]: "Success User Deletion",
+	[H.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Authorization Code for Access Token",
+	[H.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Success Exchange Access Token for Client Credentials",
+	[H.SUCCESS_EXCHANGE_CUSTOM_TOKEN]: "Success Exchange Custom Token",
+	[H.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Device Code for Access Token",
+	[H.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Success Exchange Native Social Login",
+	[H.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Password OOB for Access Token",
+	[H.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Password OTP for Access Token",
+	[H.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passwordless OTP for Access Token",
+	[H.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Success Exchange Password for Access Token",
+	[H.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OOB for Access Token",
+	[H.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OTP for Access Token",
+	[H.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Passkey MFA Recovery for Access Token",
+	[H.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Password MFA Recovery for Access Token",
+	[H.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Refresh Token for Access Token",
+	[H.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Subject Token for Access Token",
+	[H.SUCCESS_IMPERSONATION]: "Success Impersonation",
+	[H.SUCCESSFULLY_ACCEPTED_USER_INVITE]: "Successfully Accepted User Invite",
+	[H.BREACHED_PASSWORD_ON_SIGNUP]: "Breached Password on Signup",
+	[H.SUCCESS_LOGOUT]: "Success Logout",
+	[H.SUCCESS_HOOK]: "Success Hook",
+	[H.SUCCESS_PASSWORD_MIGRATION]: "Success Password Migration",
+	[H.SUCCESS_REVOCATION]: "Success Revocation",
+	[H.SUCCESS_SIGNUP]: "Success Signup",
+	[H.FAILED_SS_SSO_OPERATION]: "Failed SS SSO Operation",
+	[H.INFORMATION_FROM_SS_SSO_OPERATION]: "Information from SS SSO Operation",
+	[H.SUCCESS_SS_SSO_OPERATION]: "Success SS SSO Operation",
+	[H.SUCCESS_SILENT_AUTH]: "Success Silent Auth",
+	[H.SUCCESSFUL_SCIM_OPERATION]: "Successful SCIM Operation",
+	[H.SUCCESSFULLY_IMPORTED_USERS]: "Successfully Imported Users",
+	[H.SUCCESS_VERIFICATION_EMAIL]: "Success Verification Email",
+	[H.SUCCESS_VERIFICATION_EMAIL_REQUEST]: "Success Verification Email Request",
+	[H.MAX_AMOUNT_OF_AUTHENTICATORS]: "Max Amount of Authenticators",
+	[H.USER_LOGIN_BLOCK_RELEASED]: "User Login Block Released",
+	[H.FAILED_UNIVERSAL_LOGOUT]: "Failed Universal Logout",
+	[H.SUCCESSFUL_UNIVERSAL_LOGOUT]: "Successful Universal Logout",
+	[H.WARNING_DURING_LOGIN]: "Warning During Login",
+	[H.WARNING_SENDING_NOTIFICATION]: "Warning Sending Notification",
+	[H.WARNING_USER_MANAGEMENT]: "Warning User Management"
+}, Hn = (() => {
 	let e = {};
-	for (let [t, n] of Object.entries(G)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
+	for (let [t, n] of Object.entries(H)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
 	return e;
 })();
-function Bn(e) {
-	return Rn[e] ?? e;
+function Un(e) {
+	return Vn[e] ?? e;
 }
-function Vn(e) {
-	return zn[e] ?? "other";
+function Wn(e) {
+	return Hn[e] ?? "other";
 }
-var Hn = e.object({
+var Gn = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.object({ node: e.string().optional() }).optional()
-}), Un = e.object({
+}), Kn = e.object({
 	country_code: e.string().length(2),
 	city_name: e.string(),
 	latitude: e.string(),
 	longitude: e.string(),
 	time_zone: e.string(),
 	continent_code: e.string()
-}), Wn = e.object({
-	type: Ln,
+}), qn = e.object({
+	type: Bn,
 	date: e.string(),
 	description: e.string().optional(),
 	ip: e.string().optional(),
@@ -1879,58 +1887,58 @@ var Hn = e.object({
 	strategy: e.string().optional(),
 	strategy_type: e.string().optional(),
 	hostname: e.string().optional(),
-	auth0_client: Hn.optional(),
+	auth0_client: Gn.optional(),
 	log_id: e.string().optional(),
-	location_info: Un.optional()
-}), Gn = Wn.extend({ log_id: e.string() }), Kn = e.enum([
+	location_info: Kn.optional()
+}), Jn = qn.extend({ log_id: e.string() }), Yn = e.enum([
 	"http",
 	"eventbridge",
 	"eventgrid",
 	"splunk",
 	"datadog",
 	"sumo"
-]), K = e.enum([
+]), U = e.enum([
 	"active",
 	"paused",
 	"suspended"
-]), qn = e.object({
+]), Xn = e.object({
 	type: e.string(),
 	name: e.string()
-}), Jn = e.object({
+}), Zn = e.object({
 	name: e.string(),
-	type: Kn,
-	status: K.optional(),
+	type: Yn,
+	status: U.optional(),
 	sink: e.record(e.string(), e.unknown()),
-	filters: e.array(qn).optional(),
+	filters: e.array(Xn).optional(),
 	isPriority: e.boolean().optional()
-}), Yn = Jn.extend({
+}), Qn = Zn.extend({
 	id: e.string(),
-	status: K,
+	status: U,
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Xn = e.enum([
+}), $n = e.enum([
 	"auth0",
 	"cognito",
 	"okta",
 	"oidc"
-]), Zn = e.object({
+]), W = e.object({
 	domain: e.string(),
 	client_id: e.string(),
 	client_secret: e.string(),
 	audience: e.string().optional(),
 	scope: e.string().optional()
-}), Qn = e.object({
+}), er = e.object({
 	id: e.string().optional(),
 	name: e.string(),
-	provider: Xn,
+	provider: $n,
 	connection: e.string(),
 	enabled: e.boolean().default(!0),
-	credentials: Zn
-}), $n = e.object({
+	credentials: W
+}), tr = e.object({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(Qn.shape), er = e.object({
+}).extend(er.shape), nr = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	admin_notification_frequency: e.array(e.string()).optional(),
@@ -1939,13 +1947,13 @@ var Hn = e.object({
 		"pre-user-registration": e.object({ shields: e.array(e.string()).optional() }).optional(),
 		"pre-change-password": e.object({ shields: e.array(e.string()).optional() }).optional()
 	}).optional()
-}), tr = e.object({
+}), rr = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
 	mode: e.string().optional(),
 	max_attempts: e.number().optional()
-}), nr = e.object({
+}), ir = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
@@ -1959,28 +1967,28 @@ var Hn = e.object({
 			rate: e.number().optional()
 		}).optional()
 	}).optional()
-}), rr = e.object({
-	breached_password_detection: er.optional(),
-	brute_force_protection: tr.optional(),
-	suspicious_ip_throttling: nr.optional()
-}), ir = e.object({
+}), ar = e.object({
+	breached_password_detection: nr.optional(),
+	brute_force_protection: rr.optional(),
+	suspicious_ip_throttling: ir.optional()
+}), or = e.object({
 	id: e.string().optional(),
 	user_id: e.string(),
 	password: e.string(),
 	algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
 	is_current: e.boolean().default(!0)
-}), ar = ir.extend({
+}), sr = or.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), or = e.object({
+}), cr = e.object({
 	initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
 	initial_ip: e.string().describe("First IP address associated with this session"),
 	initial_asn: e.string().describe("First autonomous system number associated with this session"),
 	last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
 	last_ip: e.string().describe("Last IP address from which this user logged in"),
 	last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), sr = e.object({
+}), lr = e.object({
 	id: e.string(),
 	revoked_at: e.string().optional(),
 	used_at: e.string().optional(),
@@ -1988,14 +1996,14 @@ var Hn = e.object({
 	expires_at: e.string().optional(),
 	login_session_id: e.string(),
 	idle_expires_at: e.string().optional(),
-	device: or.describe("Metadata related to the device used in the session"),
+	device: cr.describe("Metadata related to the device used in the session"),
 	clients: e.array(e.string()).describe("List of client details for the session")
-}), cr = e.object({
+}), ur = e.object({
 	created_at: e.string(),
 	updated_at: e.string(),
 	authenticated_at: e.string(),
 	last_interaction_at: e.string()
-}).extend(sr.shape), lr = e.object({
+}).extend(lr.shape), dr = e.object({
 	kid: e.string().openapi({ description: "The key id of the signing key" }),
 	tenant_id: e.string().optional().openapi({ description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped." }),
 	cert: e.string().openapi({ description: "The public certificate of the signing key" }),
@@ -2011,7 +2019,7 @@ var Hn = e.object({
 	revoked_at: e.string().optional().openapi({ description: "The date and time when the key was revoked" }),
 	connection: e.string().optional().openapi({ description: "The connection identifier associated with the key" }),
 	type: e.enum(["jwt_signing", "saml_encryption"]).openapi({ description: "The type of the signing key" })
-}), ur = e.object({
+}), fr = e.object({
 	id: e.string().optional(),
 	audience: e.string().optional(),
 	friendly_name: e.string(),
@@ -2129,7 +2137,7 @@ var Hn = e.object({
 		"shared_planetscale"
 	]).optional(),
 	d1_database_id: e.string().max(64).optional(),
-	attack_protection: rr.optional(),
+	attack_protection: ar.optional(),
 	mfa: e.object({
 		policy: e.enum(["never", "always"]).default("never").optional(),
 		factors: e.object({
@@ -2156,38 +2164,38 @@ var Hn = e.object({
 		}).optional(),
 		phone_message: e.object({ message: e.string().optional() }).optional()
 	}).optional()
-}), dr = e.object({
+}), pr = e.object({
 	created_at: e.string().nullable().transform((e) => e ?? ""),
 	updated_at: e.string().nullable().transform((e) => e ?? "")
-}).extend(ur.shape).extend({
+}).extend(fr.shape).extend({
 	id: e.string(),
 	is_control_plane: e.boolean().optional()
-}), fr = e.enum([
+}), mr = e.enum([
 	"provision",
 	"seed",
 	"upgrade",
 	"backup",
 	"deprovision",
 	"users_import"
-]), pr = e.enum([
+]), hr = e.enum([
 	"pending",
 	"running",
 	"succeeded",
 	"failed",
 	"cancelled"
-]), mr = e.string().max(64), hr = ["inline", "cloudflare-workflows"], gr = e.object({
+]), gr = e.string().max(64), _r = ["inline", "cloudflare-workflows"], vr = e.object({
 	tenant_id: e.string().max(255).nullable().default(null),
 	rollout_id: e.string().max(255).nullable().optional(),
-	kind: fr,
-	engine: mr,
+	kind: mr,
+	engine: gr,
 	engine_instance_id: e.string().max(100).nullable().optional(),
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	initiated_by: e.string().max(255).nullable().optional(),
 	input: e.record(e.string(), e.unknown()).nullable().optional()
-}), _r = gr.extend({
+}), yr = vr.extend({
 	id: e.string(),
-	status: pr,
+	status: hr,
 	current_step: e.string().max(255).nullable().optional(),
 	error: e.string().nullable().optional(),
 	result: e.record(e.string(), e.unknown()).nullable().optional(),
@@ -2196,7 +2204,7 @@ var Hn = e.object({
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
-}), vr = _r.pick({
+}), br = yr.pick({
 	status: !0,
 	current_step: !0,
 	engine_instance_id: !0,
@@ -2207,87 +2215,87 @@ var Hn = e.object({
 	claimed_by: !0,
 	claim_expires_at: !0,
 	finished_at: !0
-}).partial(), yr = e.enum([
+}).partial(), xr = e.enum([
 	"started",
 	"succeeded",
 	"failed",
 	"retried",
 	"skipped",
 	"reconciled"
-]), br = e.object({
+]), Sr = e.object({
 	operation_id: e.string().max(255),
 	step: e.string().max(255),
-	outcome: yr,
+	outcome: xr,
 	detail: e.record(e.string(), e.unknown()).nullable().optional(),
 	attempt: e.number().int().min(1).default(1)
-}), xr = br.extend({
+}), Cr = Sr.extend({
 	id: e.string(),
 	created_at: e.string()
-}), q = e.enum([
+}), G = e.enum([
 	"pending",
 	"inserted",
 	"updated",
 	"failed",
 	"skipped"
-]), Sr = [
+]), wr = [
 	"inserted",
 	"updated",
 	"failed",
 	"skipped"
-], Cr = e.object({
+], Tr = e.object({
 	operation_id: e.string().max(255),
 	seq: e.number().int().min(0),
 	payload: e.record(e.string(), e.unknown()),
-	status: q.default("pending"),
+	status: G.default("pending"),
 	error_code: e.string().max(64).nullable().optional(),
 	error_message: e.string().nullable().optional(),
 	error_path: e.string().max(255).nullable().optional(),
 	entity_id: e.string().max(255).nullable().optional()
-}), wr = Cr.extend({
-	status: q,
+}), Er = Tr.extend({
+	status: G,
 	created_at: e.string(),
 	updated_at: e.string()
-}), Tr = e.object({
+}), Dr = e.object({
 	seq: e.number().int().min(0),
-	status: q,
+	status: G,
 	error_code: e.string().max(64).nullable().optional(),
 	error_message: e.string().nullable().optional(),
 	error_path: e.string().max(255).nullable().optional(),
 	entity_id: e.string().max(255).nullable().optional()
-}), Er = e.enum([
+}), Or = e.enum([
 	"upgrade",
 	"reseed",
 	"backup"
-]), Dr = e.enum([
+]), kr = e.enum([
 	"pending",
 	"canary",
 	"rolling",
 	"paused",
 	"done",
 	"failed"
-]), Or = e.object({
-	kind: Er,
+]), Ar = e.object({
+	kind: Or,
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	wave_size: e.number().int().min(1).default(10),
 	canary_tenant_ids: e.array(e.string()).nullable().optional(),
 	filter: e.record(e.string(), e.unknown()).nullable().optional(),
 	initiated_by: e.string().max(255).nullable().optional()
-}), kr = Or.extend({
+}), jr = Ar.extend({
 	id: e.string(),
-	status: Dr,
+	status: kr,
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
-}), Ar = kr.pick({
+}), Mr = jr.pick({
 	status: !0,
 	wave_size: !0,
 	canary_tenant_ids: !0,
 	filter: !0,
 	finished_at: !0
-}).partial(), jr = /* @__PURE__ */ function(e) {
+}).partial(), Nr = /* @__PURE__ */ function(e) {
 	return e.RefreshToken = "refresh_token", e.AuthorizationCode = "authorization_code", e.ClientCredential = "client_credentials", e.Passwordless = "passwordless", e.Password = "password", e.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", e.TokenExchange = "urn:ietf:params:oauth:grant-type:token-exchange", e;
-}({}), Mr = e.object({
+}({}), Pr = e.object({
 	access_token: e.string(),
 	id_token: e.string().optional(),
 	scope: e.string().optional(),
@@ -2302,7 +2310,7 @@ e.object({
 });
 //#endregion
 //#region src/types/Theme.ts
-var Nr = e.object({
+var Fr = e.object({
 	button_border_radius: e.number(),
 	button_border_weight: e.number(),
 	buttons_style: e.enum([
@@ -2320,7 +2328,7 @@ var Nr = e.object({
 	show_widget_shadow: e.boolean(),
 	widget_border_weight: e.number(),
 	widget_corner_radius: e.number()
-}), Pr = e.object({
+}), Ir = e.object({
 	base_focus_color: e.string(),
 	base_hover_color: e.string(),
 	body_text: e.string(),
@@ -2344,20 +2352,20 @@ var Nr = e.object({
 	success: e.string(),
 	widget_background: e.string(),
 	widget_border: e.string()
-}), J = e.object({
+}), K = e.object({
 	bold: e.boolean(),
 	size: e.number()
-}), Fr = e.object({
-	body_text: J,
-	buttons_text: J,
+}), Lr = e.object({
+	body_text: K,
+	buttons_text: K,
 	font_url: e.string(),
-	input_labels: J,
-	links: J,
+	input_labels: K,
+	links: K,
 	links_style: e.enum(["normal", "underlined"]),
 	reference_text_size: e.number(),
-	subtitle: J,
-	title: J
-}), Ir = e.object({
+	subtitle: K,
+	title: K
+}), Rr = e.object({
 	background_color: e.string(),
 	background_image_url: e.string(),
 	page_layout: e.enum([
@@ -2370,7 +2378,7 @@ var Nr = e.object({
 		"chip",
 		"none"
 	]).optional()
-}), Lr = e.object({
+}), zr = e.object({
 	header_text_alignment: e.enum([
 		"center",
 		"left",
@@ -2385,72 +2393,115 @@ var Nr = e.object({
 	]),
 	logo_url: e.string(),
 	social_buttons_layout: e.enum(["bottom", "top"])
-}), Rr = e.object({
-	borders: Nr,
-	colors: Pr,
+}), Br = e.object({
+	borders: Fr,
+	colors: Ir,
 	displayName: e.string(),
-	fonts: Fr,
-	page_background: Ir,
-	widget: Lr
-}), zr = Rr.extend({ themeId: e.string() }), Br = e.object({
+	fonts: Lr,
+	page_background: Rr,
+	widget: zr
+}), Vr = Br.extend({ themeId: e.string() }), Hr = e.object({
 	universal_login_experience: e.enum(["new", "classic"]).default("new"),
 	identifier_first: e.boolean().default(!0),
 	password_first: e.boolean().default(!1),
 	show_last_used_connection: e.boolean().default(!1),
 	webauthn_platform_first_factor: e.boolean()
-}), Vr = e.object({
+}), Ur = e.object({
 	hosts: e.array(e.string()).optional(),
 	methods: e.array(e.string()).optional(),
 	path: e.string().default("/*"),
 	headers: e.record(e.string(), e.string()).optional(),
 	query: e.record(e.string(), e.string()).optional()
-}), Hr = e.object({
+}), Wr = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
-}), Y = e.object({
+}), q = e.object({
 	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
-	match: Vr,
-	handlers: e.array(Hr).min(1)
-}), Ur = Y.extend({
+	match: Ur,
+	handlers: e.array(Wr).min(1)
+}), Gr = q.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), Wr = Y.partial().omit({
+}), Kr = q.partial().omit({
 	id: !0,
 	custom_domain_id: !0
-}), Gr = e.object({
+}), qr = "custom_authentication", Jr = [
+	"urn:ietf:params:oauth:",
+	"urn:auth0",
+	"urn:okta",
+	"http://auth0.com",
+	"https://auth0.com",
+	"http://okta.com",
+	"https://okta.com"
+], J = e.string().min(1).max(200).refine((e) => e.startsWith("https://") || e.startsWith("urn:"), { message: "subject_token_type must be a URI starting with https:// or urn:" }).refine((e) => !Jr.some((t) => e.toLowerCase().startsWith(t)), { message: "subject_token_type uses a reserved namespace" }), Yr = e.enum([
+	"RS256",
+	"RS384",
+	"RS512",
+	"ES256",
+	"ES384",
+	"ES512"
+]), Xr = e.discriminatedUnion("type", [e.object({
+	type: e.literal("connection"),
+	connection: e.string().min(1),
+	create_if_not_exists: e.boolean().default(!0),
+	trust_email_verified: e.boolean().default(!1)
+}), e.object({ type: e.literal("user_id") })]), Y = e.object({
+	issuer: e.string().min(1).max(2048),
+	jwks: Pn.optional(),
+	jwks_uri: e.string().url().optional(),
+	audience: e.array(e.string().min(1)).min(1).optional(),
+	algorithms: e.array(Yr).min(1).optional(),
+	max_lifetime_seconds: e.number().int().min(1).max(3600).default(300),
+	require_jti: e.boolean().default(!0),
+	user_mapping: Xr
+}), Zr = e.object({
+	name: e.string().min(1).max(255),
+	subject_token_type: J,
+	action_id: e.string().min(1).optional(),
+	type: e.literal(qr),
+	jwt_verification: Y.optional()
+}), Qr = Zr.extend({
+	id: e.string(),
+	created_at: e.string(),
+	updated_at: e.string()
+}), $r = e.object({
+	name: e.string().min(1).max(255).optional(),
+	subject_token_type: J.optional(),
+	jwt_verification: Y.optional()
+}), ei = e.object({
 	scim: e.string(),
 	auth0: e.string()
-}), Kr = e.object({
+}), ti = e.object({
 	connection_id: e.string(),
 	user_id_attribute: e.string().default("externalId"),
-	mapping: e.array(Gr).default([])
-}), qr = e.object({
+	mapping: e.array(ei).default([])
+}), ni = e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(Kr.shape), Jr = e.object({
+}).extend(ti.shape), ri = e.object({
 	token_id: e.string(),
 	connection_id: e.string(),
 	token_hash: e.string(),
 	scopes: e.array(e.string()).default([]),
 	valid_until: e.string().optional()
-}), Yr = e.object({
+}), ii = e.object({
 	created_at: e.string(),
 	last_used_at: e.string().optional()
-}).extend(Jr.shape), Xr = e.object({
+}).extend(ri.shape), ai = e.object({
 	connection_id: e.string(),
 	external_id: e.string(),
 	user_id: e.string()
-}), Zr = e.object({ created_at: e.string() }).extend(Xr.shape), Qr = e.object({
+}), oi = e.object({ created_at: e.string() }).extend(ai.shape), si = e.object({
 	name: e.string(),
 	enabled: e.boolean().optional().default(!0),
 	default_from_address: e.string().optional(),
 	credentials: e.record(e.string(), e.unknown()),
 	settings: e.object({}).optional()
-}), $r = e.enum([
+}), ci = e.enum([
 	"verify_email",
 	"verify_email_by_code",
 	"reset_email",
@@ -2463,8 +2514,8 @@ var Nr = e.object({
 	"change_password",
 	"password_reset",
 	"user_invitation"
-]), ei = e.object({
-	template: $r,
+]), li = e.object({
+	template: ci,
 	body: e.string(),
 	from: e.string(),
 	subject: e.string(),
@@ -2473,19 +2524,19 @@ var Nr = e.object({
 	urlLifetimeInSeconds: e.number().int().nonnegative().optional(),
 	includeEmailInRedirect: e.boolean().default(!1),
 	enabled: e.boolean().default(!0)
-}), ti = e.object({
+}), ui = e.object({
 	id: e.string(),
 	login_id: e.string(),
 	session_id: e.string().optional(),
 	organization: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: W.optional(),
+	auth_strategy: V.optional(),
 	user_id: e.string(),
 	client_id: e.string(),
 	expires_at: e.string().optional(),
 	idle_expires_at: e.string().optional(),
 	last_exchanged_at: e.string().optional(),
-	device: or,
+	device: cr,
 	resource_servers: e.array(e.object({
 		audience: e.string(),
 		scopes: e.string()
@@ -2496,19 +2547,19 @@ var Nr = e.object({
 	family_id: e.string().optional(),
 	rotated_to: e.string().optional(),
 	rotated_at: e.string().optional()
-}), ni = ti.extend({
+}), di = ui.extend({
 	created_at: e.string(),
 	revoked_at: e.string().optional()
-}), ri = e.object({
+}), fi = e.object({
 	to: e.string(),
 	message: e.string()
-}), ii = e.object({
+}), pi = e.object({
 	name: e.string(),
 	options: e.object({})
-}), ai = e.object({
+}), mi = e.object({
 	value: e.string(),
 	description: e.string().optional()
-}), oi = e.object({
+}), hi = e.object({
 	token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
 	enforce_policies: e.boolean().optional(),
 	allow_skipping_userinfo: e.boolean().optional(),
@@ -2516,11 +2567,11 @@ var Nr = e.object({
 	persist_client_authorization: e.boolean().optional(),
 	enable_introspection_endpoint: e.boolean().optional(),
 	mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
-}), si = e.object({
+}), gi = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	identifier: e.string(),
-	scopes: e.array(ai).optional(),
+	scopes: e.array(mi).optional(),
 	signing_alg: e.string().optional(),
 	signing_secret: e.string().optional(),
 	token_lifetime: e.number().default(86400),
@@ -2528,37 +2579,37 @@ var Nr = e.object({
 	skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
 	allow_offline_access: e.boolean().optional(),
 	verificationKey: e.string().optional(),
-	options: oi.optional(),
+	options: hi.optional(),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional()
-}), ci = si.extend({
+}), _i = gi.extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), li = e.array(ci), ui = e.object({
+}), vi = e.array(_i), yi = e.object({
 	role_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
-}), di = ui.extend({ created_at: e.string() }), fi = e.array(di), pi = e.object({
+}), bi = yi.extend({ created_at: e.string() }), xi = e.array(bi), Si = e.object({
 	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
 	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
 	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
 	scope: e.array(e.string()).default([]).openapi({ description: "The list of OAuth scopes the user has consented to" })
-}), mi = pi.extend({ id: e.string() }), hi = e.object({
+}), Ci = Si.extend({ id: e.string() }), wi = e.object({
 	user_id: e.string(),
 	last_login: e.string().optional(),
 	last_ip: e.string().optional(),
 	login_count: e.number().default(0),
 	failed_logins: e.array(e.string()).optional(),
 	last_password_reset: e.string().optional()
-}), gi = e.object({
+}), Ti = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
 	organization_id: e.string().optional()
-}), _i = gi.extend({
+}), Ei = Ti.extend({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
-}), vi = e.array(_i), yi = e.object({
+}), Di = e.array(Ei), Oi = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -2566,65 +2617,65 @@ var Nr = e.object({
 	description: e.string().nullable().optional(),
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
-}), bi = e.array(yi), xi = e.object({
+}), ki = e.array(Oi), Ai = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
-}), Si = xi.extend({
+}), ji = Ai.extend({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
-}), Ci = e.array(Si), wi = e.object({
+}), Mi = e.array(ji), Ni = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional().openapi({ description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios." })
-}), Ti = wi.extend({
+}), Pi = Ni.extend({
 	id: e.string().openapi({ description: "The unique identifier of the role" }),
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Ei = e.array(Ti), Di = e.object({
+}), Fi = e.array(Pi), Ii = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), Oi = e.object({
+}).optional(), Li = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), ki = e.object({ client_credentials: e.object({
+}), Ri = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
-}).optional() }).optional(), Ai = e.object({
+}).optional() }).optional(), zi = e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: Di,
+	branding: Ii,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(Oi).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: ki
-}), ji = Ai.extend(t.shape).extend({
+	enabled_connections: e.array(Li).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: Ri
+}), Bi = zi.extend(t.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
-}), Mi = e.object({
+}), Vi = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
 	is_signup_enabled: e.boolean().optional().default(!0)
-}), Ni = Mi.extend({
+}), Hi = Vi.extend({
 	connection: e.object({
 		name: e.string().optional(),
 		strategy: e.string().optional()
 	}).optional(),
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Pi = e.array(Ni), Fi = e.object({
+}), Ui = e.array(Hi), Wi = e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
-}), Ii = Fi.extend(t.shape).extend({ id: e.string() }), Li = e.object({
+}), Gi = Wi.extend(t.shape).extend({ id: e.string() }), Ki = e.object({
 	idle_session_lifetime: e.number().default(72),
 	session_lifetime: e.number().default(168),
 	session_cookie: e.object({ mode: e.enum(["persistent", "non-persistent"]).optional() }).optional(),
@@ -2703,7 +2754,7 @@ var Nr = e.object({
 		}).optional(),
 		phone_message: e.object({ message: e.string().optional() }).optional()
 	}).optional()
-}), Ri = e.object({
+}), qi = e.object({
 	date: e.string().openapi({
 		description: "Date these events occurred in ISO 8601 format",
 		example: "2025-12-19"
@@ -2728,10 +2779,10 @@ var Nr = e.object({
 		description: "Approximate date and time the first event occurred in ISO 8601 format",
 		example: "2025-12-19T00:00:00.000Z"
 	})
-}), zi = e.number().openapi({
+}), Ji = e.number().openapi({
 	description: "Number of active users in the last 30 days",
 	example: 1234
-}), Bi = e.enum([
+}), Yi = e.enum([
 	"active-users",
 	"logins",
 	"signups",
@@ -2743,64 +2794,64 @@ var Nr = e.object({
 	"mfa",
 	"email-verifications",
 	"codes-sent"
-]), Vi = e.enum([
+]), Xi = e.enum([
 	"hour",
 	"day",
 	"week",
 	"month"
-]), Hi = e.enum([
+]), Zi = e.enum([
 	"time",
 	"connection",
 	"client_id",
 	"user_type",
 	"event"
-]), Ui = e.enum([
+]), Qi = e.enum([
 	"password",
 	"social",
 	"passwordless",
 	"enterprise"
-]), Wi = e.object({
+]), $i = e.object({
 	cohort: e.string(),
 	sessions: e.number(),
 	active: e.array(e.number())
-}), Gi = e.object({
+}), ea = e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(Wi)
-}), Ki = e.object({
+	cohorts: e.array($i)
+}), ta = e.object({
 	cohort: e.string(),
 	tokens: e.number(),
 	active: e.array(e.number())
-}), qi = e.object({
+}), na = e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(Ki)
-}), Ji = e.object({
+	cohorts: e.array(ta)
+}), ra = e.object({
 	name: e.string(),
 	type: e.string()
-}), Yi = e.object({
+}), ia = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
-}), Xi = e.object({
-	meta: e.array(Ji),
+}), aa = e.object({
+	meta: e.array(ra),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: Yi.optional()
-}), Zi = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), Qi = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+	statistics: ia.optional()
+}), oa = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), sa = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
 		additionalProperties: { type: "string" }
 	}
-}), $i = e.object({
-	prompt: Zi,
+}), ca = e.object({
+	prompt: oa,
 	language: e.string(),
-	custom_text: Qi
-}), ea = {
+	custom_text: sa
+}), la = {
 	EMAIL: "email",
 	SMS: "sms",
 	USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2816,17 +2867,17 @@ var Nr = e.object({
 	WAAD: "waad",
 	ADFS: "adfs",
 	OKTA: "okta"
-}, ta = {
+}, ua = {
 	DATABASE: "database",
 	SOCIAL: "social",
 	PASSWORDLESS: "passwordless"
-}, na = "auth0";
-function ra(e) {
-	return e === "auth0" || e === ea.USERNAME_PASSWORD || e === "auth2";
+}, da = "auth0";
+function fa(e) {
+	return e === "auth0" || e === la.USERNAME_PASSWORD || e === "auth2";
 }
 //#endregion
 //#region src/types/AuthenticationMethod.ts
-var ia = e.enum([
+var pa = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -2834,9 +2885,9 @@ var ia = e.enum([
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), aa = e.object({
+]), ma = e.object({
 	user_id: e.string(),
-	type: ia,
+	type: pa,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
 	credential_id: e.string().optional(),
@@ -2847,7 +2898,7 @@ var ia = e.enum([
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function oa(t, n) {
+function ha(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -2870,15 +2921,15 @@ function oa(t, n) {
 		path: ["public_key"]
 	}));
 }
-var sa = aa.superRefine(oa), ca = aa.extend({
+var ga = ma.superRefine(ha), _a = ma.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(oa), la = e.object({
+}).superRefine(ha), va = e.object({
 	id: e.string().optional(),
 	created_at: e.string().datetime({ offset: !0 }).optional(),
 	updated_at: e.string().datetime({ offset: !0 }).optional()
-}), ua = {
+}), ya = {
 	"post-user-login": {
 		accessToken: ["setCustomClaim"],
 		idToken: ["setCustomClaim"],
@@ -2896,11 +2947,21 @@ var sa = aa.superRefine(oa), ca = aa.extend({
 		user: ["setUserMetadata", "setLinkedTo"],
 		access: ["deny"]
 	},
-	"post-user-registration": {}
+	"post-user-registration": {},
+	"custom-token-exchange": {
+		authentication: ["setUserById", "setUserByConnection"],
+		access: ["deny", "rejectInvalidSubjectToken"]
+	}
+}, ba = {
+	"post-user-login": "onExecutePostLogin",
+	"credentials-exchange": "onExecuteCredentialsExchange",
+	"pre-user-registration": "onExecutePreUserRegistration",
+	"post-user-registration": "onExecutePostUserRegistration",
+	"custom-token-exchange": "onExecuteCustomTokenExchange"
 };
 //#endregion
 //#region src/utils/user-id.ts
-function da(e) {
+function xa(e) {
 	let t = e.indexOf("|"), n = e.slice(0, t), r = e.slice(t + 1);
 	if (t === -1 || !n || !r) throw Error(`Invalid user_id: ${e}`);
 	return {
@@ -2910,10 +2971,10 @@ function da(e) {
 }
 //#endregion
 //#region src/utils/http.ts
-var fa = "x-authhero-preserve-location";
+var Sa = "x-authhero-preserve-location";
 //#endregion
 //#region src/utils/passthrough.ts
-function pa(e) {
+function Ca(e) {
 	let { primary: t, secondaries: n, syncMethods: r = [
 		"create",
 		"rawCreate",
@@ -2947,12 +3008,12 @@ function pa(e) {
 		} : i.bind(e) : i;
 	} });
 }
-function ma(e) {
+function wa(e) {
 	return e;
 }
 //#endregion
 //#region src/utils/connection-attributes.ts
-function ha(e) {
+function Ta(e) {
 	let t = e?.options;
 	if (!t) return {
 		usernameIdentifierActive: !1,
@@ -2975,35 +3036,35 @@ function ha(e) {
 }
 //#endregion
 //#region src/utils/guards.ts
-function ga(e) {
+function Ea(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
 //#endregion
 //#region src/utils/base64url.ts
-function _a(e) {
+function Da(e) {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-function va(e) {
+function Oa(e) {
 	let t = e.replace(/-/g, "+").replace(/_/g, "/"), n = atob(t), r = new Uint8Array(n.length);
 	for (let e = 0; e < n.length; e++) r[e] = n.charCodeAt(e);
 	return r;
 }
-function ya(e) {
-	return _a(new TextEncoder().encode(e));
+function ka(e) {
+	return Da(new TextEncoder().encode(e));
 }
-function ba(e) {
-	return new TextDecoder().decode(va(e));
+function Aa(e) {
+	return new TextDecoder().decode(Oa(e));
 }
 //#endregion
 //#region src/utils/base64.ts
-function xa(e) {
+function ja(e) {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t);
 }
-function Sa(e) {
+function Ma(e) {
 	let t = atob(e), n = new Uint8Array(t.length);
 	for (let e = 0; e < t.length; e++) n[e] = t.charCodeAt(e);
 	return n;
@@ -3011,12 +3072,12 @@ function Sa(e) {
 //#endregion
 //#region src/utils/base32.ts
 var X = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
-function Ca(e) {
+function Na(e) {
 	let t = "", n = 0, r = 0;
 	for (let i of e) for (n = n << 8 | i, r += 8; r >= 5;) r -= 5, t += X[n >> r & 31];
 	return r > 0 && (t += X[n << 5 - r & 31]), t;
 }
-function wa(e) {
+function Pa(e) {
 	let t = e.replace(/=+$/, "").toUpperCase(), n = t.length % 8;
 	if (n === 1 || n === 3 || n === 6) throw Error(`Invalid base32 length: ${t.length}`);
 	let r = [], i = 0, a = 0;
@@ -3030,19 +3091,19 @@ function wa(e) {
 }
 //#endregion
 //#region src/utils/hex.ts
-function Ta(e) {
+function Fa(e) {
 	let t = e instanceof Uint8Array ? e : new Uint8Array(e), n = "";
 	for (let e of t) n += e.toString(16).padStart(2, "0");
 	return n;
 }
 //#endregion
 //#region src/utils/cursor.ts
-function Ea(e) {
-	return ya(JSON.stringify(e));
+function Ia(e) {
+	return ka(JSON.stringify(e));
 }
-function Da(e) {
+function La(e) {
 	try {
-		let t = JSON.parse(ba(e));
+		let t = JSON.parse(Aa(e));
 		return t && typeof t == "object" && typeof t.i == "string" ? t : null;
 	} catch {
 		return null;
@@ -3050,7 +3111,7 @@ function Da(e) {
 }
 //#endregion
 //#region src/utils/lucene.ts
-function Oa(e) {
+function Ra(e) {
 	let t = [], n = "", r = !1;
 	for (let i = 0; i < e.length; i++) {
 		let a = e[i];
@@ -3058,53 +3119,53 @@ function Oa(e) {
 	}
 	return n.trim() && t.push(n.trim()), t;
 }
-function ka(e) {
+function za(e) {
 	return e.replace(/\\([\\"+\-!(){}[\]^~*?:/&|])/g, "$1");
 }
-function Aa(e) {
+function Ba(e) {
 	return `"${e.replace(/([\\"])/g, "\\$1")}"`;
 }
-function ja(e) {
+function Va(e) {
 	let t = e.trim();
-	return ka(t.length > 1 && t.startsWith("\"") && t.endsWith("\"") ? t.slice(1, -1) : t);
+	return za(t.length > 1 && t.startsWith("\"") && t.endsWith("\"") ? t.slice(1, -1) : t);
 }
-function Ma(e) {
+function Ha(e) {
 	let t = [], n = [];
-	for (let r of Oa(e)) /^or$/i.test(r) ? (t.push(n), n = []) : n.push(r);
+	for (let r of Ra(e)) /^or$/i.test(r) ? (t.push(n), n = []) : n.push(r);
 	return t.push(n), t.filter((e) => e.length > 0);
 }
-function Na(e, t) {
+function Ua(e, t) {
 	let n = new Set(t), r = (e) => {
 		let t = e.replace(/^([^:]+)=/, "$1:"), r = t.startsWith("-") ? t.slice(1) : t;
 		if (r.startsWith("_exists_:")) return n.has(r.slice(9));
 		let i = r.indexOf(":");
 		return i > 0 ? n.has(r.slice(0, i)) : !0;
 	};
-	return Ma(e).map((e) => e.filter(r).join(" ")).filter((e) => e.length > 0).join(" OR ");
+	return Ha(e).map((e) => e.filter(r).join(" ")).filter((e) => e.length > 0).join(" OR ");
 }
-var Pa = /^[^\s@%_*?"'()[\]{}^~:\\/]+@[^\s@%_*?"'()[\]{}^~:\\/]+\.[^\s@%_*?"'()[\]{}^~:\\/]+$/;
-function Fa(e) {
-	return Pa.test(e);
+var Wa = /^[^\s@%_*?"'()[\]{}^~:\\/]+@[^\s@%_*?"'()[\]{}^~:\\/]+\.[^\s@%_*?"'()[\]{}^~:\\/]+$/;
+function Ga(e) {
+	return Wa.test(e);
 }
 //#endregion
 //#region src/utils/session-retention.ts
 var Z = 10080 * 60 * 1e3, Q = 4320 * 60 * 1e3;
-function Ia(e) {
+function Ka(e) {
 	return Math.floor((e + Q) / Z);
 }
 function $(e) {
 	return e * Z - Q;
 }
-function La(e, t = Date.now()) {
-	let n = Ia(t), r = n - e + 1;
+function qa(e, t = Date.now()) {
+	let n = Ka(t), r = n - e + 1;
 	return {
 		currentWeek: n,
 		firstWeek: r,
 		sinceMs: $(r)
 	};
 }
-function Ra(e, t, n = Date.now()) {
-	let { currentWeek: r, firstWeek: i, sinceMs: a } = La(t, n), o = /* @__PURE__ */ new Map();
+function Ja(e, t, n = Date.now()) {
+	let { currentWeek: r, firstWeek: i, sinceMs: a } = qa(t, n), o = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		if (t.created_week < i || t.created_week > r) continue;
 		let e = Math.min(Math.max(0, t.used_week - t.created_week), r - t.created_week), n = o.get(t.created_week);
@@ -3127,8 +3188,8 @@ function Ra(e, t, n = Date.now()) {
 		cohorts: s
 	};
 }
-function za(e, t, n = Date.now()) {
-	let r = Ra(e, t, n);
+function Ya(e, t, n = Date.now()) {
+	let r = Ja(e, t, n);
 	return {
 		interval: r.interval,
 		from: r.from,
@@ -3142,16 +3203,16 @@ function za(e, t, n = Date.now()) {
 }
 //#endregion
 //#region src/utils/username-validation.ts
-var Ba = /^[A-Za-z0-9_+\-.!#$'^`~]+$/, Va = "Username can only contain alphanumeric characters and the following characters: '_', '+', '-', '.', '!', '#', '$', \"'\", '^', '`', '~'", Ha = "Usernames must not contain \"@\". Use the email field for email addresses.";
-function Ua(e) {
-	return Ba.test(e);
+var Xa = /^[A-Za-z0-9_+\-.!#$'^`~]+$/, Za = "Username can only contain alphanumeric characters and the following characters: '_', '+', '-', '.', '!', '#', '$', \"'\", '^', '`', '~'", Qa = "Usernames must not contain \"@\". Use the email field for email addresses.";
+function $a(e) {
+	return Xa.test(e);
 }
-function Wa(e) {
+function eo(e) {
 	return e.toLowerCase();
 }
-function Ga(e, t) {
-	if (e.includes("@")) return Ha;
-	if (!Ua(e)) return Va;
+function to(e, t) {
+	if (e.includes("@")) return Qa;
+	if (!$a(e)) return Za;
 	if (t) {
 		let n = [...e].length;
 		if (n < t.min) return `Username must be at least ${t.min} characters`;
@@ -3161,15 +3222,15 @@ function Ga(e, t) {
 }
 //#endregion
 //#region src/utils/feature-not-supported.ts
-var Ka = class extends Error {
+var no = class extends Error {
 	feature;
 	adapter;
 	constructor(e, t, n) {
 		super(`${e} is not supported by the ${t} adapter.` + (n ? ` ${n}` : "")), this.name = "FeatureNotSupportedError", this.feature = e, this.adapter = t;
 	}
 };
-function qa(e) {
+function ro(e) {
 	return e instanceof Error && e.name === "FeatureNotSupportedError";
 }
 //#endregion
-export { be as Auth0ActionEnum, Hn as Auth0Client, E as AuthorizationResponseMode, T as AuthorizationResponseType, tt as CodeChallengeMethod, C as ComponentCategory, S as ComponentType, na as DATABASE_CONNECTION_STRATEGY, xe as EmailActionEnum, Yt as FORM_FIELD_TYPES, Ka as FeatureNotSupportedError, ye as FlowActionTypeEnum, jr as GrantType, hr as KNOWN_TENANT_OPERATION_ENGINES, Un as LocationInfo, G as LogTypes, U as LoginSessionState, Q as MONDAY_EPOCH_SHIFT_MS, Ge as NodeType, fa as PRESERVE_LOCATION_HEADER, Te as RedirectTargetEnum, ea as Strategy, ta as StrategyType, Sr as TERMINAL_TENANT_OPERATION_ROW_STATUSES, ua as TRIGGER_API_SHAPES, Ha as USERNAME_CONTAINS_AT_MESSAGE, Va as USERNAME_INVALID_CHARACTERS_MESSAGE, Z as WEEK_MS, r as actionDependencySchema, ne as actionExecutionErrorSchema, se as actionExecutionInsertSchema, ie as actionExecutionLogEntrySchema, ae as actionExecutionLogsSchema, re as actionExecutionResultSchema, oe as actionExecutionSchema, te as actionExecutionStatusSchema, l as actionExecutionTriggerIdSchema, a as actionInsertSchema, Je as actionNodeSchema, ee as actionResponseSchema, s as actionSchema, c as actionSecretNameSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, ce as actionVersionInsertSchema, le as actionVersionSchema, zi as activeUsersResponseSchema, de as actorSchema, f as addressSchema, dn as allowedTriggersForHook, Ji as analyticsColumnMetaSchema, Hi as analyticsGroupBySchema, Vi as analyticsIntervalSchema, Xi as analyticsQueryResponseSchema, Bi as analyticsResourceSchema, Yi as analyticsStatisticsSchema, Ui as analyticsUserTypeSchema, rr as attackProtectionSchema, ue as auditCategorySchema, _e as auditEventInsertSchema, ve as auditEventSchema, ge as auth0ClientSchema, et as auth0FlowInsertSchema, $e as auth0FlowSchema, Ae as auth0QuerySchema, Ce as auth0UpdateUserActionSchema, Me as auth0UserResponseSchema, it as authParamsSchema, sa as authenticationMethodInsertSchema, ca as authenticationMethodSchema, ia as authenticationMethodTypeSchema, p as baseUserSchema, Kt as blockComponentSchema, Nr as bordersSchema, at as brandingSchema, er as breachedPasswordDetectionSchema, tr as bruteForceProtectionSchema, za as buildRefreshTokenRetention, Ra as buildSessionRetention, Be as buttonComponentSchema, rt as claimsRequestSchema, _ as clientGrantInsertSchema, Le as clientGrantListSchema, v as clientGrantSchema, g as clientInsertSchema, b as clientRegistrationTokenInsertSchema, Re as clientRegistrationTokenSchema, y as clientRegistrationTokenTypeSchema, Ie as clientSchema, st as codeInsertSchema, ct as codeSchema, ot as codeTypeSchema, Pr as colorsSchema, rn as componentMessageSchema, We as componentSchema, ut as connectionInsertSchema, lt as connectionOptionsSchema, dt as connectionSchema, x as coordinatesSchema, pa as createPassthroughAdapter, ma as createWriteOnlyAdapter, gt as customDomainCertificateUploadSchema, O as customDomainInsertSchema, pt as customDomainSchema, mt as customDomainUpdateSchema, ht as customDomainWithTenantIdSchema, $i as customTextEntrySchema, Qi as customTextSchema, Ri as dailyStatsSchema, wa as decodeBase32, Sa as decodeBase64, va as decodeBase64Url, ba as decodeBase64UrlString, Da as decodeCursor, Qr as emailProviderSchema, $r as emailTemplateNameSchema, ei as emailTemplateSchema, Se as emailVerificationRulesSchema, we as emailVerifyActionSchema, Ca as encodeBase32, xa as encodeBase64, _a as encodeBase64Url, ya as encodeBase64UrlString, Ea as encodeCursor, Ta as encodeHex, Qe as endingSchema, Aa as escapeLuceneValue, Jt as fieldComponentSchema, De as flowActionStepSchema, Oe as flowInsertSchema, ke as flowSchema, He as flowsFieldComponentSchema, qe as flowsFlowNodeSchema, Ke as flowsStepNodeSchema, J as fontDetailsSchema, Fr as fontsSchema, Xt as formControlSchema, tn as formInsertSchema, N as formNodeComponentDefinition, en as formNodeSchema, nn as formSchema, Ue as genericComponentSchema, Ye as genericNodeSchema, ha as getConnectionIdentifierConfig, Vn as getLogTypeCategory, Bn as getLogTypeDescription, pi as grantInsertSchema, mi as grantSchema, Hr as handlerConfigSchema, Tn as hookCodeInsertSchema, En as hookCodeSchema, vn as hookInsertSchema, B as hookPageId, wn as hookSchema, V as hookTemplateId, fn as hookTemplates, d as identitySchema, la as importMetadataSchema, kn as inviteInsertSchema, An as inviteSchema, On as inviteeSchema, Dn as inviterSchema, sn as isBlockComponent, ra as isDatabaseConnectionStrategy, Fa as isEmailSearchTerm, qa as isFeatureNotSupportedError, ln as isFieldComponent, ga as isPlainObject, cn as isWidgetComponent, Mn as jwksKeySchema, jn as jwksSchema, Ve as legalComponentSchema, he as locationInfoSchema, Wn as logInsertSchema, Gn as logSchema, qn as logStreamFilterSchema, Jn as logStreamInsertSchema, Yn as logStreamSchema, K as logStreamStatusSchema, Kn as logStreamTypeSchema, zn as logTypeCategories, Rn as logTypeDescriptions, W as loginSessionAuthStrategySchema, Fn as loginSessionInsertSchema, In as loginSessionSchema, Pn as loginSessionStateSchema, Vr as matchSchema, Xn as migrationProviderTypeSchema, Zn as migrationSourceCredentialsSchema, Qn as migrationSourceInsertSchema, $n as migrationSourceSchema, Xe as nodeSchema, Wa as normalizeUsername, Nn as openIDConfigurationSchema, Di as organizationBrandingSchema, Mi as organizationConnectionInsertSchema, Pi as organizationConnectionListSchema, Ni as organizationConnectionSchema, Oi as organizationEnabledConnectionSchema, Ai as organizationInsertSchema, ji as organizationSchema, ki as organizationTokenQuotaSchema, Ir as pageBackgroundSchema, da as parseUserId, ir as passwordInsertSchema, ar as passwordSchema, u as profileDataSchema, Zi as promptScreenSchema, Br as promptSettingSchema, Y as proxyRouteInsertSchema, Ur as proxyRouteSchema, Wr as proxyRouteUpdateSchema, Ee as redirectActionSchema, ti as refreshTokenInsertSchema, Ki as refreshTokenRetentionCohortSchema, qi as refreshTokenRetentionResponseSchema, ni as refreshTokenSchema, pe as requestContextSchema, si as resourceServerInsertSchema, li as resourceServerListSchema, oi as resourceServerOptionsSchema, ci as resourceServerSchema, ai as resourceServerScopeSchema, me as responseContextSchema, ze as richTextComponentSchema, wi as roleInsertSchema, Ei as roleListSchema, ui as rolePermissionInsertSchema, fi as rolePermissionListSchema, di as rolePermissionSchema, Ti as roleSchema, Or as rolloutInsertSchema, Er as rolloutKindSchema, kr as rolloutSchema, Dr as rolloutStatusSchema, Ar as rolloutUpdateSchema, Na as sanitizeLuceneQuery, Kr as scimConfigurationInsertSchema, qr as scimConfigurationSchema, Xr as scimExternalIdInsertSchema, Zr as scimExternalIdSchema, Gr as scimMappingEntrySchema, Jr as scimTokenInsertSchema, Yr as scimTokenSchema, an as screenLinkSchema, sr as sessionInsertSchema, Wi as sessionRetentionCohortSchema, Gi as sessionRetentionResponseSchema, La as sessionRetentionWindow, cr as sessionSchema, lr as signingKeySchema, ii as smsProviderSchema, ri as smsSendParamsSchema, Ma as splitLuceneOrGroups, Ze as startSchema, nr as suspiciousIpThrottlingSchema, fe as targetSchema, ur as tenantInsertSchema, mr as tenantOperationEngineSchema, br as tenantOperationEventInsertSchema, yr as tenantOperationEventOutcomeSchema, xr as tenantOperationEventSchema, gr as tenantOperationInsertSchema, fr as tenantOperationKindSchema, Cr as tenantOperationRowInsertSchema, Tr as tenantOperationRowOutcomeSchema, wr as tenantOperationRowSchema, q as tenantOperationRowStatusSchema, _r as tenantOperationSchema, pr as tenantOperationStatusSchema, vr as tenantOperationUpdateSchema, dr as tenantSchema, Li as tenantSettingsSchema, Rr as themeInsertSchema, zr as themeSchema, Mr as tokenResponseSchema, Oa as tokenizeLuceneQuery, je as totalsSchema, on as uiScreenSchema, ka as unescapeLuceneValue, ja as unquoteLuceneValue, hi as userActivitySchema, m as userInsertSchema, Fi as userOrganizationInsertSchema, Ii as userOrganizationSchema, gi as userPermissionInsertSchema, vi as userPermissionListSchema, _i as userPermissionSchema, bi as userPermissionWithDetailsListSchema, yi as userPermissionWithDetailsSchema, Ne as userResponseSchema, xi as userRoleInsertSchema, Ci as userRoleListSchema, Si as userRoleSchema, h as userSchema, Ua as usernameHasOnlyAllowedCharacters, Ga as validateUsername, ft as verificationMethodsSchema, Ia as weekIndex, $ as weekStartMs, qt as widgetComponentSchema, Lr as widgetSchema };
+export { xe as Auth0ActionEnum, Gn as Auth0Client, w as AuthorizationResponseMode, C as AuthorizationResponseType, rt as CodeChallengeMethod, f as ComponentCategory, d as ComponentType, da as DATABASE_CONNECTION_STRATEGY, Se as EmailActionEnum, Zt as FORM_FIELD_TYPES, no as FeatureNotSupportedError, be as FlowActionTypeEnum, Nr as GrantType, _r as KNOWN_TENANT_OPERATION_ENGINES, Kn as LocationInfo, H as LogTypes, In as LoginSessionState, Q as MONDAY_EPOCH_SHIFT_MS, Xe as NodeType, Sa as PRESERVE_LOCATION_HEADER, Jr as RESERVED_SUBJECT_TOKEN_TYPE_PREFIXES, Ee as RedirectTargetEnum, la as Strategy, ua as StrategyType, wr as TERMINAL_TENANT_OPERATION_ROW_STATUSES, qr as TOKEN_EXCHANGE_PROFILE_TYPE, ya as TRIGGER_API_SHAPES, ba as TRIGGER_FUNCTION_NAMES, Qa as USERNAME_CONTAINS_AT_MESSAGE, Za as USERNAME_INVALID_CHARACTERS_MESSAGE, Z as WEEK_MS, r as actionDependencySchema, re as actionExecutionErrorSchema, ce as actionExecutionInsertSchema, ae as actionExecutionLogEntrySchema, oe as actionExecutionLogsSchema, ie as actionExecutionResultSchema, se as actionExecutionSchema, c as actionExecutionStatusSchema, ne as actionExecutionTriggerIdSchema, a as actionInsertSchema, S as actionNodeSchema, te as actionResponseSchema, s as actionSchema, ee as actionSecretNameSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, le as actionVersionInsertSchema, ue as actionVersionSchema, Ji as activeUsersResponseSchema, fe as actorSchema, Fe as addressSchema, pn as allowedTriggersForHook, ra as analyticsColumnMetaSchema, Zi as analyticsGroupBySchema, Xi as analyticsIntervalSchema, aa as analyticsQueryResponseSchema, Yi as analyticsResourceSchema, ia as analyticsStatisticsSchema, Qi as analyticsUserTypeSchema, ar as attackProtectionSchema, de as auditCategorySchema, ve as auditEventInsertSchema, ye as auditEventSchema, _e as auth0ClientSchema, nt as auth0FlowInsertSchema, tt as auth0FlowSchema, je as auth0QuerySchema, we as auth0UpdateUserActionSchema, Re as auth0UserResponseSchema, ot as authParamsSchema, ga as authenticationMethodInsertSchema, _a as authenticationMethodSchema, pa as authenticationMethodTypeSchema, l as baseUserSchema, Jt as blockComponentSchema, Fr as bordersSchema, st as brandingSchema, nr as breachedPasswordDetectionSchema, rr as bruteForceProtectionSchema, Ya as buildRefreshTokenRetention, Ja as buildSessionRetention, h as buttonComponentSchema, at as claimsRequestSchema, We as clientGrantInsertSchema, Ke as clientGrantListSchema, Ge as clientGrantSchema, He as clientInsertSchema, Je as clientRegistrationTokenInsertSchema, Ye as clientRegistrationTokenSchema, qe as clientRegistrationTokenTypeSchema, Ue as clientSchema, lt as codeInsertSchema, ut as codeSchema, ct as codeTypeSchema, Ir as colorsSchema, on as componentMessageSchema, y as componentSchema, ft as connectionInsertSchema, dt as connectionOptionsSchema, pt as connectionSchema, u as coordinatesSchema, Ca as createPassthroughAdapter, wa as createWriteOnlyAdapter, vt as customDomainCertificateUploadSchema, E as customDomainInsertSchema, ht as customDomainSchema, gt as customDomainUpdateSchema, _t as customDomainWithTenantIdSchema, ca as customTextEntrySchema, sa as customTextSchema, qi as dailyStatsSchema, Pa as decodeBase32, Ma as decodeBase64, Oa as decodeBase64Url, Aa as decodeBase64UrlString, La as decodeCursor, si as emailProviderSchema, ci as emailTemplateNameSchema, li as emailTemplateSchema, Ce as emailVerificationRulesSchema, Te as emailVerifyActionSchema, Na as encodeBase32, ja as encodeBase64, Da as encodeBase64Url, ka as encodeBase64UrlString, Ia as encodeCursor, Fa as encodeHex, et as endingSchema, Ba as escapeLuceneValue, Xt as fieldComponentSchema, Oe as flowActionStepSchema, ke as flowInsertSchema, Ae as flowSchema, _ as flowsFieldComponentSchema, x as flowsFlowNodeSchema, b as flowsStepNodeSchema, K as fontDetailsSchema, Lr as fontsSchema, Qt as formControlSchema, rn as formInsertSchema, j as formNodeComponentDefinition, nn as formNodeSchema, an as formSchema, v as genericComponentSchema, Ze as genericNodeSchema, Ta as getConnectionIdentifierConfig, Wn as getLogTypeCategory, Un as getLogTypeDescription, Si as grantInsertSchema, Ci as grantSchema, Wr as handlerConfigSchema, Dn as hookCodeInsertSchema, On as hookCodeSchema, bn as hookInsertSchema, R as hookPageId, En as hookSchema, z as hookTemplateId, mn as hookTemplates, Pe as identitySchema, va as importMetadataSchema, jn as inviteInsertSchema, Mn as inviteSchema, An as inviteeSchema, kn as inviterSchema, ln as isBlockComponent, fa as isDatabaseConnectionStrategy, Ga as isEmailSearchTerm, ro as isFeatureNotSupportedError, dn as isFieldComponent, Ea as isPlainObject, un as isWidgetComponent, Pn as jwksKeySchema, Nn as jwksSchema, g as legalComponentSchema, ge as locationInfoSchema, qn as logInsertSchema, Jn as logSchema, Xn as logStreamFilterSchema, Zn as logStreamInsertSchema, Qn as logStreamSchema, U as logStreamStatusSchema, Yn as logStreamTypeSchema, Hn as logTypeCategories, Vn as logTypeDescriptions, V as loginSessionAuthStrategySchema, Rn as loginSessionInsertSchema, zn as loginSessionSchema, Ln as loginSessionStateSchema, Ur as matchSchema, $n as migrationProviderTypeSchema, W as migrationSourceCredentialsSchema, er as migrationSourceInsertSchema, tr as migrationSourceSchema, Qe as nodeSchema, eo as normalizeUsername, Fn as openIDConfigurationSchema, Ii as organizationBrandingSchema, Vi as organizationConnectionInsertSchema, Ui as organizationConnectionListSchema, Hi as organizationConnectionSchema, Li as organizationEnabledConnectionSchema, zi as organizationInsertSchema, Bi as organizationSchema, Ri as organizationTokenQuotaSchema, Rr as pageBackgroundSchema, xa as parseUserId, or as passwordInsertSchema, sr as passwordSchema, Ne as profileDataSchema, oa as promptScreenSchema, Hr as promptSettingSchema, q as proxyRouteInsertSchema, Gr as proxyRouteSchema, Kr as proxyRouteUpdateSchema, De as redirectActionSchema, ui as refreshTokenInsertSchema, ta as refreshTokenRetentionCohortSchema, na as refreshTokenRetentionResponseSchema, di as refreshTokenSchema, me as requestContextSchema, gi as resourceServerInsertSchema, vi as resourceServerListSchema, hi as resourceServerOptionsSchema, _i as resourceServerSchema, mi as resourceServerScopeSchema, he as responseContextSchema, m as richTextComponentSchema, Ni as roleInsertSchema, Fi as roleListSchema, yi as rolePermissionInsertSchema, xi as rolePermissionListSchema, bi as rolePermissionSchema, Pi as roleSchema, Ar as rolloutInsertSchema, Or as rolloutKindSchema, jr as rolloutSchema, kr as rolloutStatusSchema, Mr as rolloutUpdateSchema, Ua as sanitizeLuceneQuery, ti as scimConfigurationInsertSchema, ni as scimConfigurationSchema, ai as scimExternalIdInsertSchema, oi as scimExternalIdSchema, ei as scimMappingEntrySchema, ri as scimTokenInsertSchema, ii as scimTokenSchema, sn as screenLinkSchema, lr as sessionInsertSchema, $i as sessionRetentionCohortSchema, ea as sessionRetentionResponseSchema, qa as sessionRetentionWindow, ur as sessionSchema, dr as signingKeySchema, pi as smsProviderSchema, fi as smsSendParamsSchema, Ha as splitLuceneOrGroups, $e as startSchema, J as subjectTokenTypeSchema, ir as suspiciousIpThrottlingSchema, pe as targetSchema, fr as tenantInsertSchema, gr as tenantOperationEngineSchema, Sr as tenantOperationEventInsertSchema, xr as tenantOperationEventOutcomeSchema, Cr as tenantOperationEventSchema, vr as tenantOperationInsertSchema, mr as tenantOperationKindSchema, Tr as tenantOperationRowInsertSchema, Dr as tenantOperationRowOutcomeSchema, Er as tenantOperationRowSchema, G as tenantOperationRowStatusSchema, yr as tenantOperationSchema, hr as tenantOperationStatusSchema, br as tenantOperationUpdateSchema, pr as tenantSchema, Ki as tenantSettingsSchema, Br as themeInsertSchema, Vr as themeSchema, Yr as tokenExchangeJwtAlgorithmSchema, Y as tokenExchangeJwtVerificationSchema, Zr as tokenExchangeProfileInsertSchema, Qr as tokenExchangeProfileSchema, $r as tokenExchangeProfileUpdateSchema, Xr as tokenExchangeUserMappingSchema, Pr as tokenResponseSchema, Ra as tokenizeLuceneQuery, Me as totalsSchema, cn as uiScreenSchema, za as unescapeLuceneValue, Va as unquoteLuceneValue, wi as userActivitySchema, Ie as userInsertSchema, Wi as userOrganizationInsertSchema, Gi as userOrganizationSchema, Ti as userPermissionInsertSchema, Di as userPermissionListSchema, Ei as userPermissionSchema, ki as userPermissionWithDetailsListSchema, Oi as userPermissionWithDetailsSchema, ze as userResponseSchema, Ai as userRoleInsertSchema, Mi as userRoleListSchema, ji as userRoleSchema, Le as userSchema, $a as usernameHasOnlyAllowedCharacters, to as validateUsername, mt as verificationMethodsSchema, Ka as weekIndex, $ as weekStartMs, Yt as widgetComponentSchema, zr as widgetSchema };