@authhero/adapter-interfaces 4.19.0 → 4.21.0

package/dist/adapter-interfaces.mjs

@@ -33,23 +33,23 @@ var t = e.object({
 		name: e.string(),
 		value: e.string().optional()
 	})).optional()
-}).extend(t.shape), ee = e.object({ name: e.string() }), te = s.extend({ secrets: e.array(ee).optional() }), ne = e.string(), c = e.enum([
+}).extend(t.shape), ee = e.object({ name: e.string() }), te = s.extend({ secrets: e.array(ee).optional() }), c = e.string(), l = e.enum([
 	"unspecified",
 	"pending",
 	"final",
 	"partial",
 	"canceled",
 	"suspended"
-]), re = e.object({
+]), ne = e.object({
 	id: e.string(),
 	msg: e.string(),
 	url: e.string().optional()
-}), ie = e.object({
+}), re = e.object({
 	action_name: e.string(),
-	error: re.nullable(),
+	error: ne.nullable(),
 	started_at: e.string(),
 	ended_at: e.string()
-}), ae = e.object({
+}), ie = e.object({
 	level: e.enum([
 		"log",
 		"info",
@@ -58,23 +58,23 @@ var t = e.object({
 		"debug"
 	]),
 	message: e.string()
-}), oe = e.array(e.object({
+}), ae = e.array(e.object({
 	action_name: e.string(),
-	lines: e.array(ae)
-})), se = e.object({
+	lines: e.array(ie)
+})), oe = e.object({
 	id: e.string(),
 	tenant_id: e.string(),
-	trigger_id: ne,
-	status: c,
-	results: e.array(ie),
-	logs: oe.optional(),
+	trigger_id: c,
+	status: l,
+	results: e.array(re),
+	logs: ae.optional(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), ce = se.omit({
+}), se = oe.omit({
 	tenant_id: !0,
 	created_at: !0,
 	updated_at: !0
-}), le = e.object({
+}), ce = e.object({
 	action_id: e.string(),
 	code: e.string().max(1e5),
 	runtime: e.string().max(50).optional(),
@@ -82,16 +82,16 @@ var t = e.object({
 	secrets: e.array(i).optional(),
 	supported_triggers: e.array(n).optional(),
 	deployed: e.boolean().default(!0)
-}), ue = le.extend({
+}), le = ce.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	number: e.number().int()
-}).extend(t.shape), de = e.enum([
+}).extend(t.shape), ue = e.enum([
 	"user_action",
 	"admin_action",
 	"system",
 	"api"
-]), fe = e.object({
+]), de = e.object({
 	type: e.enum([
 		"user",
 		"admin",
@@ -105,7 +105,7 @@ var t = e.object({
 	org_name: e.string().optional(),
 	scopes: e.array(e.string()).optional(),
 	client_id: e.string().optional()
-}), pe = e.object({
+}), fe = e.object({
 	type: e.string(),
 	id: e.string(),
 	before: e.record(e.string(), e.unknown()).optional(),
@@ -114,7 +114,7 @@ var t = e.object({
 		old: e.unknown(),
 		new: e.unknown()
 	})).optional()
-}), me = e.object({
+}), pe = e.object({
 	method: e.string(),
 	path: e.string(),
 	query: e.record(e.string(), e.string()).optional(),
@@ -124,30 +124,30 @@ var t = e.object({
 	correlation_id: e.string().optional(),
 	redirect_uri: e.string().optional(),
 	authorization_url: e.string().optional()
-}), he = e.object({
+}), me = e.object({
 	status_code: e.number(),
 	body: e.unknown().optional()
-}), ge = e.object({
+}), he = e.object({
 	country_code: e.string(),
 	city_name: e.string(),
 	latitude: e.string(),
 	longitude: e.string(),
 	time_zone: e.string(),
 	continent_code: e.string()
-}), _e = e.object({
+}), ge = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.record(e.string(), e.string()).optional()
-}), ve = e.object({
+}), _e = e.object({
 	tenant_id: e.string(),
 	event_type: e.string(),
 	log_type: e.string(),
 	description: e.string().optional(),
-	category: de,
-	actor: fe,
-	target: pe,
-	request: me,
-	response: he.optional(),
+	category: ue,
+	actor: de,
+	target: fe,
+	request: pe,
+	response: me.optional(),
 	connection: e.string().optional(),
 	connection_id: e.string().optional(),
 	client_name: e.string().optional(),
@@ -155,30 +155,32 @@ var t = e.object({
 	strategy_type: e.string().optional(),
 	audience: e.string().optional(),
 	scope: e.string().optional(),
-	location: ge.optional(),
-	auth0_client: _e.optional(),
+	location: he.optional(),
+	auth0_client: ge.optional(),
 	hostname: e.string(),
 	is_mobile: e.boolean().optional(),
 	execution_id: e.string().optional(),
+	details: e.record(e.string(), e.unknown()).optional(),
+	login_session_id: e.string().optional(),
 	timestamp: e.string()
-}), ye = ve.extend({ id: e.string() }), be = e.enum([
+}), ve = _e.extend({ id: e.string() }), ye = e.enum([
 	"AUTH0",
 	"EMAIL",
 	"REDIRECT"
-]), xe = e.enum([
+]), be = e.enum([
 	"CREATE_USER",
 	"GET_USER",
 	"UPDATE_USER",
 	"SEND_REQUEST",
 	"SEND_EMAIL"
-]), Se = e.enum(["VERIFY_EMAIL"]), Ce = e.object({
+]), xe = e.enum(["VERIFY_EMAIL"]), Se = e.object({
 	require_mx_record: e.boolean().optional(),
 	block_aliases: e.boolean().optional(),
 	block_free_emails: e.boolean().optional(),
 	block_disposable_emails: e.boolean().optional(),
 	blocklist: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional()
-}), we = e.object({
+}), Ce = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("AUTH0"),
@@ -190,7 +192,7 @@ var t = e.object({
 		user_id: e.string(),
 		changes: e.record(e.string(), e.any())
 	})
-}), Te = e.object({
+}), we = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("EMAIL"),
@@ -199,13 +201,13 @@ var t = e.object({
 	mask_output: e.boolean().optional(),
 	params: e.object({
 		email: e.string(),
-		rules: Ce.optional()
+		rules: Se.optional()
 	})
-}), Ee = e.enum([
+}), Te = e.enum([
 	"change-email",
 	"account",
 	"custom"
-]), De = e.object({
+]), Ee = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("REDIRECT"),
@@ -213,32 +215,32 @@ var t = e.object({
 	allow_failure: e.boolean().optional(),
 	mask_output: e.boolean().optional(),
 	params: e.object({
-		target: Ee.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
+		target: Te.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
 		custom_url: e.string().optional().openapi({ description: "Custom URL to redirect to when target is 'custom'" })
 	})
-}), Oe = e.union([
+}), De = e.union([
+	Ce,
 	we,
-	Te,
-	De
-]), ke = e.object({
+	Ee
+]), Oe = e.object({
 	name: e.string().min(1).max(150).openapi({ description: "The name of the flow" }),
-	actions: e.array(Oe).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
-}), Ae = ke.extend(t.shape).extend({ id: e.string().openapi({
+	actions: e.array(De).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
+}), ke = Oe.extend(t.shape).extend({ id: e.string().openapi({
 	description: "Unique identifier for the flow",
 	example: "af_12tMpdJ3iek7svMyZkSh5M"
-}) }), je = e.object({
+}) }), Ae = e.object({
 	page: e.string().min(0).optional().default("0").transform((e) => parseInt(e, 10)).openapi({ description: "The page number where 0 is the first page" }),
 	per_page: e.string().min(1).optional().default("50").transform((e) => parseInt(e, 10)).openapi({ description: "The number of items per page. Defaults to 50." }),
 	include_totals: e.string().optional().default("false").transform((e) => e === "true").openapi({ description: "If the total number of items should be included in the response" }),
 	sort: e.string().regex(/^.+:(-1|1)$/).optional().openapi({ description: "A property that should have the format 'string:-1' or 'string:1'" }),
 	q: e.string().optional().openapi({ description: "A lucene query string used to filter the results" })
-}), Me = e.object({
+}), je = e.object({
 	start: e.number(),
 	limit: e.number(),
 	length: e.number(),
 	total: e.number().optional(),
 	next: e.string().optional()
-}), Ne = e.object({
+}), u = e.object({
 	email: e.string().optional(),
 	email_verified: e.boolean().optional(),
 	name: e.string().optional(),
@@ -247,7 +249,7 @@ var t = e.object({
 	phone_number: e.string().optional(),
 	phone_verified: e.boolean().optional(),
 	family_name: e.string().optional()
-}).catchall(e.any()), Pe = e.object({
+}).catchall(e.any()), Me = e.object({
 	connection: e.string(),
 	user_id: e.string(),
 	provider: e.string(),
@@ -260,15 +262,15 @@ var t = e.object({
 	access_token: e.string().optional(),
 	access_token_secret: e.string().optional(),
 	refresh_token: e.string().optional(),
-	profileData: Ne.optional()
-}), Fe = e.object({
+	profileData: u.optional()
+}), d = e.object({
 	formatted: e.string().optional(),
 	street_address: e.string().optional(),
 	locality: e.string().optional(),
 	region: e.string().optional(),
 	postal_code: e.string().optional(),
 	country: e.string().optional()
-}).optional(), l = e.object({
+}).optional(), f = e.object({
 	email: e.string().transform((e) => e.toLowerCase()).optional(),
 	username: e.string().refine((e) => !e.includes("@"), { message: "Usernames must not contain \"@\". Use the email field for email addresses." }).optional(),
 	phone_number: e.string().optional(),
@@ -291,8 +293,8 @@ var t = e.object({
 	gender: e.string().optional(),
 	birthdate: e.string().optional(),
 	zoneinfo: e.string().optional(),
-	address: Fe
-}), Ie = l.extend({
+	address: d
+}), p = f.extend({
 	email_verified: e.boolean().default(!1),
 	verify_email: e.boolean().optional(),
 	last_ip: e.string().optional(),
@@ -307,29 +309,29 @@ var t = e.object({
 		hash: e.string(),
 		algorithm: e.string()
 	}).optional()
-}), Le = Ie.omit({ password: !0 }).extend(t.shape).extend({
+}), m = p.omit({ password: !0 }).extend(t.shape).extend({
 	user_id: e.string(),
 	provider: e.string(),
 	is_social: e.boolean(),
 	email: e.string().optional(),
 	login_count: e.number().default(0),
-	identities: e.array(Pe).optional()
-}), Re = Le.omit({ registration_completed_at: !0 }), ze = l.extend({
+	identities: e.array(Me).optional()
+}), Ne = m.omit({ registration_completed_at: !0 }), Pe = f.extend({
 	login_count: e.number(),
 	multifactor: e.array(e.string()).optional(),
 	last_ip: e.string().optional(),
 	last_login: e.string().optional(),
 	user_id: e.string()
-}).catchall(e.any()), Be = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Ve = (e = 21) => {
+}).catchall(e.any()), Fe = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Ie = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += Be[n[e] & 63];
+	for (; e--;) t += Fe[n[e] & 63];
 	return t;
-}, He = e.object({
+}, h = e.object({
 	client_id: e.string().optional().openapi({ description: "ID of this client. Generated server-side if omitted (Auth0 behavior)." }),
 	name: e.string().min(1).openapi({ description: "Name of this client (min length: 1 character, does not allow < or >)." }),
 	description: e.string().max(140).optional().openapi({ description: "Free text description of this client (max length: 140 characters)." }),
 	global: e.boolean().default(!1).openapi({ description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)." }),
-	client_secret: e.string().default(() => Ve()).optional().openapi({ description: "Client secret (which you must not make public)." }),
+	client_secret: e.string().default(() => Ie()).optional().openapi({ description: "Client secret (which you must not make public)." }),
 	app_type: e.enum([
 		"native",
 		"spa",
@@ -443,10 +445,10 @@ var t = e.object({
 	registration_metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Arbitrary metadata captured at Dynamic Client Registration time that isn't a first-class client field (e.g. integration_type, domain). Also stores `iat_constraints` for clients created via IAT so RFC 7592 PUT can enforce field immutability." }),
 	token_exchange: e.object({ allow_any_profile_of_type: e.array(e.literal("custom_authentication")).optional() }).optional().openapi({ description: "Custom Token Exchange settings. Set `allow_any_profile_of_type` to `[\"custom_authentication\"]` to let this client exchange subject tokens through the tenant's token exchange profiles." }),
 	user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({ description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies." })
-}), Ue = e.object({
+}), Le = e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(He.shape).extend({ client_id: e.string() }), We = e.object({
+}).extend(h.shape).extend({ client_id: e.string() }), g = e.object({
 	client_id: e.string().min(1).openapi({ description: "ID of the client." }),
 	audience: e.string().min(1).openapi({ description: "The audience (API identifier) of this client grant." }),
 	scope: e.array(e.string()).optional().openapi({ description: "Scopes allowed for this client grant." }),
@@ -459,38 +461,38 @@ var t = e.object({
 	is_system: e.boolean().optional().openapi({ description: "If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly." }),
 	subject_type: e.enum(["client", "user"]).optional().openapi({ description: "The type of application access the client grant allows. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." }),
 	authorization_details_types: e.array(e.string()).optional().openapi({ description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." })
-}), Ge = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(We.shape).extend({
+}), _ = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(g.shape).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Ke = e.array(Ge), qe = e.enum(["iat", "rat"]), Je = e.object({
+}), Re = e.array(_), v = e.enum(["iat", "rat"]), y = e.object({
 	id: e.string(),
 	token_hash: e.string(),
-	type: qe,
+	type: v,
 	client_id: e.string().optional(),
 	sub: e.string().optional(),
 	constraints: e.record(e.string(), e.unknown()).optional(),
 	single_use: e.boolean().default(!1),
 	expires_at: e.string().optional()
-}), Ye = e.object({
+}), ze = e.object({
 	created_at: e.string(),
 	used_at: e.string().optional(),
 	revoked_at: e.string().optional()
-}).extend(Je.shape), u = e.object({
+}).extend(y.shape), b = e.object({
 	x: e.number(),
 	y: e.number()
-}), d = /* @__PURE__ */ function(e) {
+}), x = /* @__PURE__ */ function(e) {
 	return e.RICH_TEXT = "RICH_TEXT", e.NEXT_BUTTON = "NEXT_BUTTON", e.BACK_BUTTON = "BACK_BUTTON", e.SUBMIT_BUTTON = "SUBMIT_BUTTON", e.DIVIDER = "DIVIDER", e.TEXT = "TEXT", e.EMAIL = "EMAIL", e.PASSWORD = "PASSWORD", e.NUMBER = "NUMBER", e.PHONE = "PHONE", e.DATE = "DATE", e.CHECKBOX = "CHECKBOX", e.RADIO = "RADIO", e.SELECT = "SELECT", e.HIDDEN = "HIDDEN", e.LEGAL = "LEGAL", e;
-}({}), f = /* @__PURE__ */ function(e) {
+}({}), S = /* @__PURE__ */ function(e) {
 	return e.BLOCK = "BLOCK", e.FIELD = "FIELD", e;
-}({}), p = e.object({
+}({}), C = e.object({
 	id: e.string(),
-	category: e.nativeEnum(f),
-	type: e.nativeEnum(d)
-}), m = p.extend({
+	category: e.nativeEnum(S),
+	type: e.nativeEnum(x)
+}), Be = C.extend({
 	category: e.literal("BLOCK"),
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string() }).passthrough()
-}), h = p.extend({
+}), Ve = C.extend({
 	category: e.literal("BLOCK"),
 	type: e.union([
 		e.literal("NEXT_BUTTON"),
@@ -498,13 +500,13 @@ var t = e.object({
 		e.literal("SUBMIT_BUTTON")
 	]),
 	config: e.object({ text: e.string() }).passthrough()
-}), g = p.extend({
+}), He = C.extend({
 	category: e.literal("FIELD"),
 	type: e.literal("LEGAL"),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional(),
 	config: e.object({ text: e.string() }).passthrough()
-}), _ = p.extend({
+}), Ue = C.extend({
 	category: e.literal("FIELD"),
 	type: e.union([
 		e.literal("TEXT"),
@@ -524,40 +526,40 @@ var t = e.object({
 		label: e.string().optional(),
 		placeholder: e.string().optional()
 	}).passthrough()
-}), v = e.object({
+}), We = e.object({
 	id: e.string(),
 	category: e.string(),
 	type: e.string()
-}).passthrough(), y = e.union([
-	m,
-	h,
-	g,
-	_,
-	v
-]), Xe = /* @__PURE__ */ function(e) {
+}).passthrough(), Ge = e.union([
+	Be,
+	Ve,
+	He,
+	Ue,
+	We
+]), Ke = /* @__PURE__ */ function(e) {
 	return e.STEP = "STEP", e.FLOW = "FLOW", e.CONDITION = "CONDITION", e.ACTION = "ACTION", e;
-}({}), b = e.object({
+}({}), qe = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: u,
+	coordinates: b,
 	alias: e.string().optional(),
 	config: e.object({
-		components: e.array(y),
+		components: e.array(Ge),
 		next_node: e.string()
 	}).passthrough()
-}), x = e.object({
+}), Je = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: u,
+	coordinates: b,
 	alias: e.string().optional(),
 	config: e.object({
 		flow_id: e.string(),
 		next_node: e.string()
 	})
-}), S = e.object({
+}), Ye = e.object({
 	id: e.string(),
 	type: e.literal("ACTION"),
-	coordinates: u,
+	coordinates: b,
 	alias: e.string().optional(),
 	config: e.object({
 		action_type: e.enum(["REDIRECT"]).openapi({ description: "The type of action to perform" }),
@@ -569,56 +571,56 @@ var t = e.object({
 		custom_url: e.string().optional().openapi({ description: "Custom URL when target is 'custom'" }),
 		next_node: e.string().openapi({ description: "The next node to navigate to after action (for non-redirect actions)" })
 	}).passthrough()
-}), Ze = e.object({
+}), Xe = e.object({
 	id: e.string(),
 	type: e.string(),
-	coordinates: u
-}).passthrough(), Qe = e.union([
-	b,
-	x,
-	S,
-	Ze
-]), $e = e.object({
+	coordinates: b
+}).passthrough(), Ze = e.union([
+	qe,
+	Je,
+	Ye,
+	Xe
+]), Qe = e.object({
 	next_node: e.string(),
-	coordinates: u
-}).passthrough(), et = e.object({
+	coordinates: b
+}).passthrough(), $e = e.object({
 	resume_flow: e.boolean().optional(),
-	coordinates: u
-}).passthrough(), tt = e.object({
+	coordinates: b
+}).passthrough(), et = e.object({
 	id: e.string(),
 	name: e.string(),
 	languages: e.object({ primary: e.string() }).passthrough(),
-	nodes: e.array(Qe),
-	start: $e,
-	ending: et,
+	nodes: e.array(Ze),
+	start: Qe,
+	ending: $e,
 	created_at: e.string(),
 	updated_at: e.string(),
 	links: e.object({
 		sdkSrc: e.string().optional(),
 		sdk_src: e.string().optional()
 	}).passthrough()
-}).passthrough(), nt = tt.omit({
+}).passthrough(), tt = et.omit({
 	id: !0,
 	created_at: !0,
 	updated_at: !0
-}), C = /* @__PURE__ */ function(e) {
+}), w = /* @__PURE__ */ function(e) {
 	return e.TOKEN = "token", e.ID_TOKEN = "id_token", e.TOKEN_ID_TOKEN = "id_token token", e.CODE = "code", e.CODE_ID_TOKEN = "code id_token", e.CODE_TOKEN = "code token", e.CODE_ID_TOKEN_TOKEN = "code id_token token", e;
-}({}), w = /* @__PURE__ */ function(e) {
+}({}), T = /* @__PURE__ */ function(e) {
 	return e.QUERY = "query", e.FRAGMENT = "fragment", e.FORM_POST = "form_post", e.WEB_MESSAGE = "web_message", e.SAML_POST = "saml_post", e;
-}({}), rt = /* @__PURE__ */ function(e) {
+}({}), nt = /* @__PURE__ */ function(e) {
 	return e.S256 = "S256", e.Plain = "plain", e;
-}({}), it = e.union([e.null(), e.object({
+}({}), rt = e.union([e.null(), e.object({
 	essential: e.boolean().optional(),
 	value: e.unknown().optional(),
 	values: e.array(e.unknown()).optional()
-})]).nullable(), at = e.object({
-	userinfo: e.record(e.string(), it).optional(),
-	id_token: e.record(e.string(), it).optional()
-}), ot = e.object({
+})]).nullable(), it = e.object({
+	userinfo: e.record(e.string(), rt).optional(),
+	id_token: e.record(e.string(), rt).optional()
+}), at = e.object({
 	client_id: e.string(),
 	act_as: e.string().optional(),
-	response_type: e.nativeEnum(C).optional(),
-	response_mode: e.nativeEnum(w).optional(),
+	response_type: e.nativeEnum(w).optional(),
+	response_mode: e.nativeEnum(T).optional(),
 	redirect_uri: e.string().optional(),
 	audience: e.string().optional(),
 	organization: e.string().optional(),
@@ -626,15 +628,15 @@ var t = e.object({
 	nonce: e.string().optional(),
 	scope: e.string().optional(),
 	prompt: e.string().optional(),
-	code_challenge_method: e.nativeEnum(rt).optional(),
+	code_challenge_method: e.nativeEnum(nt).optional(),
 	code_challenge: e.string().optional(),
 	username: e.string().optional(),
 	ui_locales: e.string().optional(),
 	max_age: e.number().optional(),
 	acr_values: e.string().optional(),
-	claims: at.optional(),
+	claims: it.optional(),
 	vendor_id: e.string().optional()
-}), st = e.object({
+}), ot = e.object({
 	colors: e.object({
 		primary: e.string(),
 		page_background: e.union([e.string(), e.object({
@@ -653,7 +655,7 @@ var t = e.object({
 		"light",
 		"auto"
 	]).optional()
-}), ct = e.enum([
+}), st = e.enum([
 	"password_reset",
 	"email_verification",
 	"otp",
@@ -663,11 +665,11 @@ var t = e.object({
 	"ticket",
 	"client_assertion_jti",
 	"subject_token_jti"
-]), lt = e.object({
+]), ct = e.object({
 	code_id: e.string().openapi({ description: "The code that will be used in for instance an email verification flow" }),
 	login_id: e.string().optional().openapi({ description: "The id of the login session that the code is connected to" }),
 	connection_id: e.string().optional().openapi({ description: "The connection that the code is connected to" }),
-	code_type: ct,
+	code_type: st,
 	code_verifier: e.string().optional().openapi({ description: "The code verifier used in PKCE in outbound flows" }),
 	code_challenge: e.string().optional().openapi({ description: "The code challenge used in PKCE in outbound flows" }),
 	code_challenge_method: e.enum(["plain", "S256"]).optional().openapi({ description: "The code challenge method used in PKCE in outbound flows" }),
@@ -678,7 +680,7 @@ var t = e.object({
 	expires_at: e.string(),
 	used_at: e.string().optional(),
 	user_id: e.string().optional()
-}), ut = lt.extend({ created_at: e.string() }), dt = e.object({
+}), lt = ct.extend({ created_at: e.string() }), ut = e.object({
 	kid: e.string().optional(),
 	team_id: e.string().optional(),
 	realms: e.string().optional(),
@@ -798,35 +800,35 @@ var t = e.object({
 		"never_on_login"
 	]).optional()
 });
-function T(e) {
+function E(e) {
 	if (e !== null) {
-		if (Array.isArray(e)) return e.filter((e) => e !== null).map(T);
+		if (Array.isArray(e)) return e.filter((e) => e !== null).map(E);
 		if (e && typeof e == "object") {
 			let t = {};
-			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = T(r));
+			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = E(r));
 			return t;
 		}
 		return e;
 	}
 }
-var ft = e.object({
+var dt = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	display_name: e.string().optional(),
 	strategy: e.string(),
-	options: e.preprocess((e) => e === null ? {} : T(e), dt).default({}),
+	options: e.preprocess((e) => e === null ? {} : E(e), ut).default({}),
 	enabled_clients: e.array(e.string()).default([]).optional(),
-	response_type: e.nativeEnum(C).optional(),
-	response_mode: e.nativeEnum(w).optional(),
+	response_type: e.nativeEnum(w).optional(),
+	response_mode: e.nativeEnum(T).optional(),
 	is_domain_connection: e.boolean().optional(),
 	show_as_button: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional(),
 	is_system: e.boolean().optional()
-}), pt = e.object({
+}), ft = e.object({
 	id: e.string(),
 	created_at: e.string().transform((e) => e === null ? "" : e),
 	updated_at: e.string().transform((e) => e === null ? "" : e)
-}).extend(ft.shape), E = e.object({
+}).extend(dt.shape), D = e.object({
 	domain: e.string(),
 	custom_domain_id: e.string().optional(),
 	type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -840,7 +842,7 @@ var ft = e.object({
 		"null"
 	]).optional(),
 	domain_metadata: e.record(e.string(), e.string().max(255)).optional()
-}), mt = e.discriminatedUnion("name", [e.object({
+}), pt = e.discriminatedUnion("name", [e.object({
 	name: e.literal("txt"),
 	record: e.string(),
 	domain: e.string()
@@ -848,7 +850,7 @@ var ft = e.object({
 	name: e.literal("http"),
 	http_body: e.string(),
 	http_url: e.string()
-})]), ht = E.extend({
+})]), mt = D.extend({
 	custom_domain_id: e.string(),
 	primary: e.boolean(),
 	status: e.enum([
@@ -858,26 +860,26 @@ var ft = e.object({
 		"ready"
 	]),
 	origin_domain_name: e.string().optional(),
-	verification: e.object({ methods: e.array(mt) }).optional(),
+	verification: e.object({ methods: e.array(pt) }).optional(),
 	tls_policy: e.string().optional()
-}), gt = E.pick({
+}), ht = D.pick({
 	tls_policy: !0,
 	custom_client_ip_header: !0,
 	domain_metadata: !0
-}).strict(), _t = ht.extend({ tenant_id: e.string() }), vt = e.object({
+}).strict(), gt = mt.extend({ tenant_id: e.string() }), _t = e.object({
 	certificate: e.string().regex(/^-----BEGIN CERTIFICATE-----[\s\S]+-----END CERTIFICATE-----\s*$/, "must be PEM-encoded; include the full certificate chain in leaf-first order"),
 	private_key: e.string().regex(/-----BEGIN (RSA |EC |ENCRYPTED )?PRIVATE KEY-----[\s\S]+-----END \1PRIVATE KEY-----\s*$/, "must be a PEM-encoded private key")
-}), D = e.object({
+}), O = e.object({
 	id: e.string(),
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0)
-}), O = D.extend({ category: e.literal("BLOCK").optional() }), yt = O.extend({
+}), k = O.extend({ category: e.literal("BLOCK").optional() }), vt = k.extend({
 	type: e.literal("DIVIDER"),
 	config: e.object({ text: e.string().optional() }).optional()
-}), bt = O.extend({
+}), yt = k.extend({
 	type: e.literal("HTML"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), xt = O.extend({
+}), bt = k.extend({
 	type: e.literal("IMAGE"),
 	config: e.object({
 		src: e.string().optional(),
@@ -885,47 +887,47 @@ var ft = e.object({
 		width: e.number().optional(),
 		height: e.number().optional()
 	}).optional()
-}), St = O.extend({
+}), xt = k.extend({
 	type: e.literal("JUMP_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		target_step: e.string().optional()
 	})
-}), Ct = O.extend({
+}), St = k.extend({
 	type: e.literal("RESEND_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		resend_action: e.string().optional()
 	})
-}), wt = O.extend({
+}), Ct = k.extend({
 	type: e.literal("NEXT_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		variant: e.enum(["primary", "secondary"]).optional(),
 		skip_validation: e.boolean().optional()
 	})
-}), Tt = O.extend({
+}), wt = k.extend({
 	type: e.literal("PREVIOUS_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), Et = O.extend({
+}), Tt = k.extend({
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), k = D.extend({
+}), A = O.extend({
 	category: e.literal("WIDGET").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), Dt = k.extend({
+}), Et = A.extend({
 	type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
 	config: e.object({ credential_type: e.string().optional() })
-}), Ot = k.extend({
+}), Dt = A.extend({
 	type: e.literal("GMAPS_ADDRESS"),
 	config: e.object({ api_key: e.string().optional() })
-}), kt = k.extend({
+}), Ot = A.extend({
 	type: e.literal("RECAPTCHA"),
 	config: e.object({ site_key: e.string().optional() })
-}), A = D.extend({
+}), j = O.extend({
 	category: e.literal("FIELD").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
@@ -941,10 +943,10 @@ var ft = e.object({
 	})).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), At = A.extend({
+}), kt = j.extend({
 	type: e.literal("BOOLEAN"),
 	config: e.object({ default_value: e.boolean().optional() }).optional()
-}), jt = A.extend({
+}), At = j.extend({
 	type: e.literal("CARDS"),
 	config: e.object({
 		options: e.array(e.object({
@@ -955,7 +957,7 @@ var ft = e.object({
 		})).optional(),
 		multi_select: e.boolean().optional()
 	}).optional()
-}), Mt = A.extend({
+}), jt = j.extend({
 	type: e.literal("CHOICE"),
 	config: e.object({
 		options: e.array(e.object({
@@ -966,7 +968,7 @@ var ft = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), Nt = A.extend({
+}), Mt = j.extend({
 	type: e.literal("CODE"),
 	config: e.object({
 		length: e.number().int().positive().max(100).optional(),
@@ -983,7 +985,7 @@ var ft = e.object({
 		message: "default_value is longer than the configured length",
 		path: ["default_value"]
 	}).optional()
-}), Pt = A.extend({
+}), Nt = j.extend({
 	type: e.literal("CUSTOM"),
 	config: e.object({
 		component: e.string().optional(),
@@ -991,7 +993,7 @@ var ft = e.object({
 		schema: e.record(e.string(), e.any()).optional(),
 		code: e.string().optional()
 	})
-}), Ft = A.extend({
+}), Pt = j.extend({
 	type: e.literal("DATE"),
 	config: e.object({
 		format: e.string().optional(),
@@ -999,7 +1001,7 @@ var ft = e.object({
 		max: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), It = A.extend({
+}), Ft = j.extend({
 	type: e.literal("DROPDOWN"),
 	config: e.object({
 		options: e.array(e.object({
@@ -1011,7 +1013,7 @@ var ft = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), Lt = A.extend({
+}), It = j.extend({
 	type: e.literal("EMAIL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1019,20 +1021,20 @@ var ft = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), Rt = A.extend({
+}), Lt = j.extend({
 	type: e.literal("FILE"),
 	config: e.object({
 		accept: e.string().optional(),
 		max_size: e.number().optional(),
 		multiple: e.boolean().optional()
 	}).optional()
-}), zt = A.extend({
+}), Rt = j.extend({
 	type: e.literal("LEGAL"),
 	config: e.object({
 		text: e.string(),
 		html: e.boolean().optional()
 	}).optional()
-}), Bt = A.extend({
+}), zt = j.extend({
 	type: e.literal("NUMBER"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1041,7 +1043,7 @@ var ft = e.object({
 		step: e.number().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Vt = A.extend({
+}), Bt = j.extend({
 	type: e.literal("PASSWORD"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1050,13 +1052,13 @@ var ft = e.object({
 		forgot_password_link: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Ht = A.extend({
+}), Vt = j.extend({
 	type: e.literal("PAYMENT"),
 	config: e.object({
 		provider: e.string().optional(),
 		currency: e.string().optional()
 	}).optional()
-}), Ut = A.extend({
+}), Ht = j.extend({
 	type: e.literal("SOCIAL"),
 	config: e.object({
 		providers: e.array(e.string()).optional(),
@@ -1071,7 +1073,7 @@ var ft = e.object({
 			last_used_label: e.string().optional()
 		})).optional()
 	}).optional()
-}), Wt = A.extend({
+}), Ut = j.extend({
 	type: e.literal("TEL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1079,7 +1081,7 @@ var ft = e.object({
 		default_value: e.string().optional(),
 		allow_email: e.boolean().optional()
 	}).optional()
-}), Gt = A.extend({
+}), Wt = j.extend({
 	type: e.literal("TEXT"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1089,37 +1091,38 @@ var ft = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), Kt = A.extend({
+}), Gt = j.extend({
 	type: e.literal("COUNTRY"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), qt = A.extend({
+}), Kt = j.extend({
 	type: e.literal("URL"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Jt = e.discriminatedUnion("type", [
+}), qt = e.discriminatedUnion("type", [
+	vt,
 	yt,
 	bt,
 	xt,
 	St,
 	Ct,
 	wt,
-	Tt,
-	Et
-]), Yt = e.discriminatedUnion("type", [
+	Tt
+]), Jt = e.discriminatedUnion("type", [
+	Et,
 	Dt,
-	Ot,
-	kt
-]), Xt = e.discriminatedUnion("type", [
+	Ot
+]), Yt = e.discriminatedUnion("type", [
+	kt,
 	At,
 	jt,
 	Mt,
+	Gt,
 	Nt,
-	Kt,
 	Pt,
 	Ft,
 	It,
@@ -1131,13 +1134,12 @@ var ft = e.object({
 	Ht,
 	Ut,
 	Wt,
-	Gt,
-	qt
-]), j = e.union([
+	Kt
+]), M = e.union([
+	qt,
 	Jt,
-	Yt,
-	Xt
-]), Zt = new Set([
+	Yt
+]), Xt = new Set([
 	"BOOLEAN",
 	"CARDS",
 	"CHOICE",
@@ -1152,7 +1154,7 @@ var ft = e.object({
 	"TEL",
 	"TEXT",
 	"URL"
-]), Qt = e.object({
+]), Zt = e.object({
 	id: e.string(),
 	type: e.literal("submit"),
 	label: e.string(),
@@ -1161,22 +1163,22 @@ var ft = e.object({
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0),
 	customizations: e.record(e.string(), e.any()).optional()
-}), M = e.object({
+}), N = e.object({
 	x: e.number(),
 	y: e.number()
-}), $t = e.object({
+}), Qt = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: M,
+	coordinates: N,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
 		flow_id: e.string().max(30),
 		next_node: e.string().optional()
 	})
-}), en = e.object({
+}), $t = e.object({
 	id: e.string(),
 	type: e.literal("ROUTER"),
-	coordinates: M,
+	coordinates: N,
 	alias: e.string().min(1).max(150),
 	config: e.object({
 		rules: e.array(e.object({
@@ -1187,20 +1189,20 @@ var ft = e.object({
 		})),
 		fallback: e.string()
 	})
-}), tn = e.object({
+}), en = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: M,
+	coordinates: N,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
-		components: e.array(j),
+		components: e.array(M),
 		next_node: e.string().optional()
 	})
-}), nn = e.discriminatedUnion("type", [
+}), tn = e.discriminatedUnion("type", [
+	Qt,
 	$t,
-	en,
-	tn
-]), rn = e.object({
+	en
+]), nn = e.object({
 	name: e.string().openapi({ description: "The name of the form" }),
 	messages: e.object({
 		errors: e.record(e.string(), e.any()).optional(),
@@ -1211,14 +1213,14 @@ var ft = e.object({
 		default: e.string().optional()
 	}).optional(),
 	translations: e.record(e.string(), e.any()).optional(),
-	nodes: e.array(nn).optional(),
+	nodes: e.array(tn).optional(),
 	start: e.object({
 		hidden_fields: e.array(e.object({
 			key: e.string(),
 			value: e.string()
 		})).optional(),
 		next_node: e.string().optional(),
-		coordinates: M.optional()
+		coordinates: N.optional()
 	}).optional(),
 	ending: e.object({
 		redirection: e.object({
@@ -1226,7 +1228,7 @@ var ft = e.object({
 			target: e.string().optional()
 		}).optional(),
 		after_submit: e.object({ flow_id: e.string().optional() }).optional(),
-		coordinates: M.optional(),
+		coordinates: N.optional(),
 		resume_flow: e.boolean().optional()
 	}).optional(),
 	style: e.object({ css: e.string().optional() }).optional(),
@@ -1234,7 +1236,7 @@ var ft = e.object({
 		sdkSrc: e.string().optional(),
 		sdk_src: e.string().optional()
 	}).optional()
-}).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" }), an = t.extend(rn.shape).extend({ id: e.string() }), on = e.object({
+}).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" }), rn = t.extend(nn.shape).extend({ id: e.string() }), an = e.object({
 	id: e.number().optional(),
 	text: e.string(),
 	type: e.enum([
@@ -1243,20 +1245,28 @@ var ft = e.object({
 		"success",
 		"warning"
 	])
-}), sn = e.object({
+}), on = e.object({
 	id: e.string().optional(),
 	text: e.string(),
 	href: e.string(),
 	linkText: e.string().optional()
-}), cn = e.object({
+}), sn = e.object({
+	"form-content-start": e.string().optional(),
+	"form-content-end": e.string().optional(),
+	"form-footer-start": e.string().optional(),
+	"form-footer-end": e.string().optional(),
+	"secondary-actions-start": e.string().optional(),
+	"secondary-actions-end": e.string().optional()
+}).strict(), cn = e.object({
 	name: e.string().optional(),
 	action: e.string(),
 	method: e.enum(["POST", "GET"]),
 	title: e.string().optional(),
 	description: e.string().optional(),
-	components: e.array(j),
-	messages: e.array(on).optional(),
-	links: e.array(sn).optional(),
+	components: e.array(M),
+	messages: e.array(an).optional(),
+	links: e.array(on).optional(),
+	partials: sn.optional(),
 	footer: e.string().optional()
 });
 function ln(e) {
@@ -1270,7 +1280,7 @@ function dn(e) {
 }
 //#endregion
 //#region src/types/Hook.ts
-var N = e.enum([
+var P = e.enum([
 	"pre-user-registration",
 	"post-user-registration",
 	"post-user-login",
@@ -1278,36 +1288,36 @@ var N = e.enum([
 	"validate-registration-username",
 	"pre-user-deletion",
 	"post-user-deletion"
-]), P = e.enum(["post-user-login"]), F = e.enum([
+]), F = e.enum(["post-user-login"]), I = e.enum([
 	"post-user-login",
 	"post-user-registration",
 	"post-user-update",
 	"credentials-exchange"
-]), I = e.enum([
+]), L = e.enum([
 	"post-user-login",
 	"credentials-exchange",
 	"pre-user-registration",
 	"post-user-registration"
-]), L = e.enum(["post-user-login"]), fn = [
+]), R = e.enum(["post-user-login"]), fn = [
 	{
 		field: "url",
-		triggers: N.options
+		triggers: P.options
 	},
 	{
 		field: "form_id",
-		triggers: P.options
+		triggers: F.options
 	},
 	{
 		field: "template_id",
-		triggers: F.options
+		triggers: I.options
 	},
 	{
 		field: "code_id",
-		triggers: I.options
+		triggers: L.options
 	},
 	{
 		field: "page_id",
-		triggers: L.options
+		triggers: R.options
 	}
 ];
 function pn(e) {
@@ -1315,7 +1325,7 @@ function pn(e) {
 		for (let t of fn) if (typeof Reflect.get(e, t.field) == "string") return t.triggers;
 	}
 }
-var R = e.enum(["impersonate"]), z = e.enum([
+var z = e.enum(["impersonate"]), B = e.enum([
 	"ensure-username",
 	"set-preferred-username",
 	"account-linking"
@@ -1339,32 +1349,32 @@ var R = e.enum(["impersonate"]), z = e.enum([
 			"post-user-update"
 		]
 	}
-}, B = {
+}, V = {
 	enabled: e.boolean().default(!1),
 	synchronous: e.boolean().default(!1),
 	priority: e.number().optional(),
 	hook_id: e.string().optional(),
 	metadata: e.record(e.string(), e.unknown()).optional()
 }, hn = e.object({
-	...B,
-	trigger_id: N,
+	...V,
+	trigger_id: P,
 	url: e.string()
 }), gn = e.object({
-	...B,
-	trigger_id: P,
+	...V,
+	trigger_id: F,
 	form_id: e.string()
 }), _n = e.object({
-	...B,
-	trigger_id: F,
-	template_id: z
-}), vn = e.object({
-	...B,
+	...V,
 	trigger_id: I,
+	template_id: B
+}), vn = e.object({
+	...V,
+	trigger_id: L,
 	code_id: e.string()
 }), yn = e.object({
-	...B,
-	trigger_id: L,
-	page_id: R,
+	...V,
+	trigger_id: R,
+	page_id: z,
 	permission_required: e.string().optional()
 }), bn = e.union([
 	hn,
@@ -1373,35 +1383,35 @@ var R = e.enum(["impersonate"]), z = e.enum([
 	vn,
 	yn
 ]), xn = e.object({
-	...B,
-	trigger_id: N
+	...V,
+	trigger_id: P
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	url: e.string()
 }), Sn = e.object({
-	...B,
-	trigger_id: P
+	...V,
+	trigger_id: F
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	form_id: e.string()
 }), Cn = e.object({
-	...B,
-	trigger_id: F
+	...V,
+	trigger_id: I
 }).extend(t.shape).extend({
 	hook_id: e.string(),
-	template_id: z
+	template_id: B
 }), wn = e.object({
-	...B,
-	trigger_id: I
+	...V,
+	trigger_id: L
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	code_id: e.string()
 }), Tn = e.object({
-	...B,
-	trigger_id: L
+	...V,
+	trigger_id: R
 }).extend(t.shape).extend({
 	hook_id: e.string(),
-	page_id: R,
+	page_id: z,
 	permission_required: e.string().optional()
 }), En = e.union([
 	xn,
@@ -1504,13 +1514,13 @@ var R = e.enum(["impersonate"]), z = e.enum([
 	backchannel_logout_session_supported: e.boolean().optional()
 }), In = /* @__PURE__ */ function(e) {
 	return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.AWAITING_CONSENT = "awaiting_consent", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
-}({}), Ln = e.nativeEnum(In), V = e.object({
+}({}), Ln = e.nativeEnum(In), H = e.object({
 	strategy: e.string(),
 	strategy_type: e.string()
 }), Rn = e.object({
 	csrf_token: e.string(),
 	auth0Client: e.string().optional(),
-	authParams: ot,
+	authParams: at,
 	expires_at: e.string(),
 	deleted_at: e.string().optional(),
 	ip: e.string().optional(),
@@ -1522,13 +1532,13 @@ var R = e.enum(["impersonate"]), z = e.enum([
 	failure_reason: e.string().optional(),
 	user_id: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: V.optional(),
+	auth_strategy: H.optional(),
 	authenticated_at: e.string().optional()
 }).openapi({ description: "This represents a login sesion" }), zn = Rn.extend({
 	id: e.string().openapi({ description: "This is is used as the state in the universal login" }),
 	created_at: e.string(),
 	updated_at: e.string()
-}), H = {
+}), U = {
 	ACLS_SUMMARY: "acls_summary",
 	ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
 	API_LIMIT: "api_limit",
@@ -1688,169 +1698,169 @@ var R = e.enum(["impersonate"]), z = e.enum([
 	WARNING_DURING_LOGIN: "w",
 	WARNING_SENDING_NOTIFICATION: "wn",
 	WARNING_USER_MANAGEMENT: "wum"
-}, Bn = e.string().refine((e) => Object.values(H).includes(e), { message: "Invalid log type" }), Vn = {
-	[H.ACLS_SUMMARY]: "ACLs Summary",
-	[H.ACTIONS_EXECUTION_FAILED]: "Actions Execution Failed",
-	[H.API_LIMIT]: "API Rate Limit Reached",
-	[H.API_LIMIT_WARNING]: "API Rate Limit Warning",
-	[H.APPI]: "API Operation",
-	[H.CIBA_EXCHANGE_FAILED]: "CIBA Exchange Failed",
-	[H.CIBA_EXCHANGE_SUCCEEDED]: "CIBA Exchange Succeeded",
-	[H.CIBA_START_FAILED]: "CIBA Start Failed",
-	[H.CIBA_START_SUCCEEDED]: "CIBA Start Succeeded",
-	[H.CODE_LINK_SENT]: "Code/Link Sent",
-	[H.CODE_SENT]: "Code Sent",
-	[H.DEPRECATION_NOTICE]: "Deprecation Notice",
-	[H.FAILED_LOGIN]: "Failed Login",
-	[H.FAILED_BY_CONNECTOR]: "Failed by Connector",
-	[H.FAILED_CHANGE_EMAIL]: "Failed Change Email",
-	[H.FAILED_BY_CORS]: "Failed by CORS",
-	[H.FAILED_CROSS_ORIGIN_AUTHENTICATION]: "Failed Cross Origin Authentication",
-	[H.FAILED_CHANGE_PASSWORD]: "Failed Change Password",
-	[H.FAILED_POST_CHANGE_PASSWORD_HOOK]: "Failed Post-Change Password Hook",
-	[H.FAILED_CHANGE_PHONE_NUMBER]: "Failed Change Phone Number",
-	[H.FAILED_CHANGE_PASSWORD_REQUEST]: "Failed Change Password Request",
-	[H.FAILED_CONNECTOR_PROVISIONING]: "Failed Connector Provisioning",
-	[H.FAILED_CHANGE_USERNAME]: "Failed Change Username",
-	[H.FAILED_DELEGATION]: "Failed Delegation",
-	[H.FAILED_DEVICE_ACTIVATION]: "Failed Device Activation",
-	[H.FAILED_DEVICE_AUTHORIZATION_REQUEST]: "Failed Device Authorization Request",
-	[H.USER_CANCELED_DEVICE_CONFIRMATION]: "User Canceled Device Confirmation",
-	[H.FAILED_USER_DELETION]: "Failed User Deletion",
-	[H.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Authorization Code for Access Token",
-	[H.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Failed Exchange Access Token for Client Credentials",
-	[H.FAILED_EXCHANGE_CUSTOM_TOKEN]: "Failed Exchange Custom Token",
-	[H.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Device Code for Access Token",
-	[H.FAILED_FEDERATED_LOGOUT]: "Failed Federated Logout",
-	[H.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Failed Exchange Native Social Login",
-	[H.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Failed Exchange Password OOB for Access Token",
-	[H.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Password OTP for Access Token",
-	[H.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Failed Exchange Password for Access Token",
-	[H.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Passwordless OTP for Access Token",
-	[H.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Failed Exchange Password MFA Recovery for Access Token",
-	[H.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN]: "Failed Exchange Rotating Refresh Token",
-	[H.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Refresh Token for Access Token",
-	[H.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Subject Token for Access Token",
-	[H.FAILED_HOOK]: "Failed Hook",
-	[H.FAILED_IMPERSONATION]: "Failed Impersonation",
-	[H.FAILED_INVITE_ACCEPT]: "Failed Invite Accept",
-	[H.FAILED_LOGOUT]: "Failed Logout",
-	[H.FLOWS_EXECUTION_COMPLETED]: "Flows Execution Completed",
-	[H.FLOWS_EXECUTION_FAILED]: "Flows Execution Failed",
-	[H.FAILED_SENDING_NOTIFICATION]: "Failed Sending Notification",
-	[H.FORMS_SUBMISSION_FAILED]: "Forms Submission Failed",
-	[H.FORMS_SUBMISSION_SUCCEEDED]: "Forms Submission Succeeded",
-	[H.FAILED_LOGIN_INCORRECT_PASSWORD]: "Failed Login - Incorrect Password",
-	[H.FAILED_PUSHED_AUTHORIZATION_REQUEST]: "Failed Pushed Authorization Request",
-	[H.FAILED_POST_USER_REGISTRATION_HOOK]: "Failed Post-User Registration Hook",
-	[H.FAILED_SIGNUP]: "Failed Signup",
-	[H.FAILED_SILENT_AUTH]: "Failed Silent Auth",
-	[H.FAILED_LOGIN_INVALID_EMAIL_USERNAME]: "Failed Login - Invalid Email/Username",
-	[H.FAILED_USERS_IMPORT]: "Failed Users Import",
-	[H.FAILED_VERIFICATION_EMAIL]: "Failed Verification Email",
-	[H.FAILED_VERIFICATION_EMAIL_REQUEST]: "Failed Verification Email Request",
-	[H.EMAIL_VERIFICATION_CONFIRMED]: "Email Verification Confirmed",
-	[H.EMAIL_VERIFICATION_FAILED]: "Email Verification Failed",
-	[H.MFA_AUTH_FAILED]: "MFA Auth Failed",
-	[H.MFA_AUTH_REJECTED]: "MFA Auth Rejected",
-	[H.MFA_AUTH_SUCCESS]: "MFA Auth Success",
-	[H.MFA_ENROLLMENT_COMPLETE]: "MFA Enrollment Complete",
-	[H.TOO_MANY_MFA_FAILURES]: "Too Many MFA Failures",
-	[H.MFA_RECOVERY_FAILED]: "MFA Recovery Failed",
-	[H.MFA_RECOVERY_RATE_LIMIT_EXCEED]: "MFA Recovery Rate Limit Exceeded",
-	[H.MFA_RECOVERY_SUCCESS]: "MFA Recovery Success",
-	[H.MFA_EMAIL_SENT]: "MFA Email Sent",
-	[H.EMAIL_VERIFICATION_SENT]: "Email Verification Sent",
-	[H.EMAIL_VERIFICATION_SEND_FAILURE]: "Email Verification Send Failure",
-	[H.PUSH_NOTIFICATION_SENT]: "Push Notification Sent",
-	[H.ERROR_SENDING_MFA_PUSH_NOTIFICATION]: "Error Sending MFA Push Notification",
-	[H.MFA_SMS_SENT]: "MFA SMS Sent",
-	[H.ERROR_SENDING_MFA_SMS]: "Error Sending MFA SMS",
-	[H.MFA_VOICE_CALL_SUCCESS]: "MFA Voice Call Success",
-	[H.MFA_VOICE_CALL_FAILED]: "MFA Voice Call Failed",
-	[H.SECOND_FACTOR_STARTED]: "Second Factor Started",
-	[H.MFA_ENROLL_STARTED]: "MFA Enroll Started",
-	[H.MFA_ENROLLMENT_FAILED]: "MFA Enrollment Failed",
-	[H.GUARDIAN_TENANT_UPDATE]: "Guardian Tenant Update",
-	[H.UNENROLL_DEVICE_ACCOUNT]: "Unenroll Device Account",
-	[H.UPDATE_DEVICE_ACCOUNT]: "Update Device Account",
-	[H.WEBAUTHN_CHALLENGE_FAILED]: "WebAuthn Challenge Failed",
-	[H.WEBAUTHN_ENROLLMENT_FAILED]: "WebAuthn Enrollment Failed",
-	[H.FAILED_KMS_API_OPERATION]: "Failed KMS API Operation",
-	[H.SUCCESS_KMS_API_OPERATION]: "Success KMS API Operation",
-	[H.KMS_KEY_STATE_CHANGED]: "KMS Key State Changed",
-	[H.TOO_MANY_CALLS_TO_DELEGATION]: "Too Many Calls to Delegation",
-	[H.BLOCKED_IP_ADDRESS]: "Blocked IP Address",
-	[H.BLOCKED_ACCOUNT_IP]: "Blocked Account (IP)",
-	[H.BLOCKED_ACCOUNT_EMAIL]: "Blocked Account (Email)",
-	[H.INFORMATION]: "Information",
-	[H.MFA_REQUIRED]: "MFA Required",
-	[H.MANAGEMENT_API_READ_OPERATION]: "Management API Read Operation",
-	[H.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Failed Authentication Method Operation (My Account)",
-	[H.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Successful Authentication Method Operation (My Account)",
-	[H.FAILED_OIDC_BACKCHANNEL_LOGOUT]: "Failed OIDC Backchannel Logout",
-	[H.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT]: "Successful OIDC Backchannel Logout",
-	[H.ORGANIZATION_MEMBER_ADDED]: "Organization Member Added",
-	[H.PASSKEY_CHALLENGE_FAILED]: "Passkey Challenge Failed",
-	[H.PASSKEY_CHALLENGE_STARTED]: "Passkey Challenge Started",
-	[H.PRE_LOGIN_ASSESSMENT]: "Pre-Login Assessment",
-	[H.BREACHED_PASSWORD]: "Breached Password",
-	[H.BREACHED_PASSWORD_ON_RESET]: "Breached Password on Reset",
-	[H.SUCCESS_RESOURCE_CLEANUP]: "Success Resource Cleanup",
-	[H.RICH_CONSENTS_ACCESS_ERROR]: "Rich Consents Access Error",
-	[H.SUCCESS_LOGIN]: "Success Login",
-	[H.SUCCESS_API_OPERATION]: "Success API Operation",
-	[H.FAILED_API_OPERATION]: "Failed API Operation",
-	[H.SUCCESS_CHANGE_EMAIL]: "Success Change Email",
-	[H.SUCCESS_CROSS_ORIGIN_AUTHENTICATION]: "Success Cross Origin Authentication",
-	[H.SUCCESS_CHANGE_PASSWORD]: "Success Change Password",
-	[H.SUCCESS_CHANGE_PHONE_NUMBER]: "Success Change Phone Number",
-	[H.SUCCESS_CHANGE_PASSWORD_REQUEST]: "Success Change Password Request",
-	[H.SUCCESS_CHANGE_USERNAME]: "Success Change Username",
-	[H.SUCCESS_CREDENTIAL_VALIDATION]: "Success Credential Validation",
-	[H.SUCCESS_DELEGATION]: "Success Delegation",
-	[H.SUCCESS_USER_DELETION]: "Success User Deletion",
-	[H.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Authorization Code for Access Token",
-	[H.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Success Exchange Access Token for Client Credentials",
-	[H.SUCCESS_EXCHANGE_CUSTOM_TOKEN]: "Success Exchange Custom Token",
-	[H.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Device Code for Access Token",
-	[H.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Success Exchange Native Social Login",
-	[H.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Password OOB for Access Token",
-	[H.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Password OTP for Access Token",
-	[H.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passwordless OTP for Access Token",
-	[H.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Success Exchange Password for Access Token",
-	[H.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OOB for Access Token",
-	[H.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OTP for Access Token",
-	[H.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Passkey MFA Recovery for Access Token",
-	[H.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Password MFA Recovery for Access Token",
-	[H.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Refresh Token for Access Token",
-	[H.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Subject Token for Access Token",
-	[H.SUCCESS_IMPERSONATION]: "Success Impersonation",
-	[H.SUCCESSFULLY_ACCEPTED_USER_INVITE]: "Successfully Accepted User Invite",
-	[H.BREACHED_PASSWORD_ON_SIGNUP]: "Breached Password on Signup",
-	[H.SUCCESS_LOGOUT]: "Success Logout",
-	[H.SUCCESS_HOOK]: "Success Hook",
-	[H.SUCCESS_PASSWORD_MIGRATION]: "Success Password Migration",
-	[H.SUCCESS_REVOCATION]: "Success Revocation",
-	[H.SUCCESS_SIGNUP]: "Success Signup",
-	[H.FAILED_SS_SSO_OPERATION]: "Failed SS SSO Operation",
-	[H.INFORMATION_FROM_SS_SSO_OPERATION]: "Information from SS SSO Operation",
-	[H.SUCCESS_SS_SSO_OPERATION]: "Success SS SSO Operation",
-	[H.SUCCESS_SILENT_AUTH]: "Success Silent Auth",
-	[H.SUCCESSFUL_SCIM_OPERATION]: "Successful SCIM Operation",
-	[H.SUCCESSFULLY_IMPORTED_USERS]: "Successfully Imported Users",
-	[H.SUCCESS_VERIFICATION_EMAIL]: "Success Verification Email",
-	[H.SUCCESS_VERIFICATION_EMAIL_REQUEST]: "Success Verification Email Request",
-	[H.MAX_AMOUNT_OF_AUTHENTICATORS]: "Max Amount of Authenticators",
-	[H.USER_LOGIN_BLOCK_RELEASED]: "User Login Block Released",
-	[H.FAILED_UNIVERSAL_LOGOUT]: "Failed Universal Logout",
-	[H.SUCCESSFUL_UNIVERSAL_LOGOUT]: "Successful Universal Logout",
-	[H.WARNING_DURING_LOGIN]: "Warning During Login",
-	[H.WARNING_SENDING_NOTIFICATION]: "Warning Sending Notification",
-	[H.WARNING_USER_MANAGEMENT]: "Warning User Management"
+}, Bn = e.string().refine((e) => Object.values(U).includes(e), { message: "Invalid log type" }), Vn = {
+	[U.ACLS_SUMMARY]: "ACLs Summary",
+	[U.ACTIONS_EXECUTION_FAILED]: "Actions Execution Failed",
+	[U.API_LIMIT]: "API Rate Limit Reached",
+	[U.API_LIMIT_WARNING]: "API Rate Limit Warning",
+	[U.APPI]: "API Operation",
+	[U.CIBA_EXCHANGE_FAILED]: "CIBA Exchange Failed",
+	[U.CIBA_EXCHANGE_SUCCEEDED]: "CIBA Exchange Succeeded",
+	[U.CIBA_START_FAILED]: "CIBA Start Failed",
+	[U.CIBA_START_SUCCEEDED]: "CIBA Start Succeeded",
+	[U.CODE_LINK_SENT]: "Code/Link Sent",
+	[U.CODE_SENT]: "Code Sent",
+	[U.DEPRECATION_NOTICE]: "Deprecation Notice",
+	[U.FAILED_LOGIN]: "Failed Login",
+	[U.FAILED_BY_CONNECTOR]: "Failed by Connector",
+	[U.FAILED_CHANGE_EMAIL]: "Failed Change Email",
+	[U.FAILED_BY_CORS]: "Failed by CORS",
+	[U.FAILED_CROSS_ORIGIN_AUTHENTICATION]: "Failed Cross Origin Authentication",
+	[U.FAILED_CHANGE_PASSWORD]: "Failed Change Password",
+	[U.FAILED_POST_CHANGE_PASSWORD_HOOK]: "Failed Post-Change Password Hook",
+	[U.FAILED_CHANGE_PHONE_NUMBER]: "Failed Change Phone Number",
+	[U.FAILED_CHANGE_PASSWORD_REQUEST]: "Failed Change Password Request",
+	[U.FAILED_CONNECTOR_PROVISIONING]: "Failed Connector Provisioning",
+	[U.FAILED_CHANGE_USERNAME]: "Failed Change Username",
+	[U.FAILED_DELEGATION]: "Failed Delegation",
+	[U.FAILED_DEVICE_ACTIVATION]: "Failed Device Activation",
+	[U.FAILED_DEVICE_AUTHORIZATION_REQUEST]: "Failed Device Authorization Request",
+	[U.USER_CANCELED_DEVICE_CONFIRMATION]: "User Canceled Device Confirmation",
+	[U.FAILED_USER_DELETION]: "Failed User Deletion",
+	[U.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Authorization Code for Access Token",
+	[U.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Failed Exchange Access Token for Client Credentials",
+	[U.FAILED_EXCHANGE_CUSTOM_TOKEN]: "Failed Exchange Custom Token",
+	[U.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Device Code for Access Token",
+	[U.FAILED_FEDERATED_LOGOUT]: "Failed Federated Logout",
+	[U.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Failed Exchange Native Social Login",
+	[U.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Failed Exchange Password OOB for Access Token",
+	[U.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Password OTP for Access Token",
+	[U.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Failed Exchange Password for Access Token",
+	[U.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Passwordless OTP for Access Token",
+	[U.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Failed Exchange Password MFA Recovery for Access Token",
+	[U.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN]: "Failed Exchange Rotating Refresh Token",
+	[U.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Refresh Token for Access Token",
+	[U.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Subject Token for Access Token",
+	[U.FAILED_HOOK]: "Failed Hook",
+	[U.FAILED_IMPERSONATION]: "Failed Impersonation",
+	[U.FAILED_INVITE_ACCEPT]: "Failed Invite Accept",
+	[U.FAILED_LOGOUT]: "Failed Logout",
+	[U.FLOWS_EXECUTION_COMPLETED]: "Flows Execution Completed",
+	[U.FLOWS_EXECUTION_FAILED]: "Flows Execution Failed",
+	[U.FAILED_SENDING_NOTIFICATION]: "Failed Sending Notification",
+	[U.FORMS_SUBMISSION_FAILED]: "Forms Submission Failed",
+	[U.FORMS_SUBMISSION_SUCCEEDED]: "Forms Submission Succeeded",
+	[U.FAILED_LOGIN_INCORRECT_PASSWORD]: "Failed Login - Incorrect Password",
+	[U.FAILED_PUSHED_AUTHORIZATION_REQUEST]: "Failed Pushed Authorization Request",
+	[U.FAILED_POST_USER_REGISTRATION_HOOK]: "Failed Post-User Registration Hook",
+	[U.FAILED_SIGNUP]: "Failed Signup",
+	[U.FAILED_SILENT_AUTH]: "Failed Silent Auth",
+	[U.FAILED_LOGIN_INVALID_EMAIL_USERNAME]: "Failed Login - Invalid Email/Username",
+	[U.FAILED_USERS_IMPORT]: "Failed Users Import",
+	[U.FAILED_VERIFICATION_EMAIL]: "Failed Verification Email",
+	[U.FAILED_VERIFICATION_EMAIL_REQUEST]: "Failed Verification Email Request",
+	[U.EMAIL_VERIFICATION_CONFIRMED]: "Email Verification Confirmed",
+	[U.EMAIL_VERIFICATION_FAILED]: "Email Verification Failed",
+	[U.MFA_AUTH_FAILED]: "MFA Auth Failed",
+	[U.MFA_AUTH_REJECTED]: "MFA Auth Rejected",
+	[U.MFA_AUTH_SUCCESS]: "MFA Auth Success",
+	[U.MFA_ENROLLMENT_COMPLETE]: "MFA Enrollment Complete",
+	[U.TOO_MANY_MFA_FAILURES]: "Too Many MFA Failures",
+	[U.MFA_RECOVERY_FAILED]: "MFA Recovery Failed",
+	[U.MFA_RECOVERY_RATE_LIMIT_EXCEED]: "MFA Recovery Rate Limit Exceeded",
+	[U.MFA_RECOVERY_SUCCESS]: "MFA Recovery Success",
+	[U.MFA_EMAIL_SENT]: "MFA Email Sent",
+	[U.EMAIL_VERIFICATION_SENT]: "Email Verification Sent",
+	[U.EMAIL_VERIFICATION_SEND_FAILURE]: "Email Verification Send Failure",
+	[U.PUSH_NOTIFICATION_SENT]: "Push Notification Sent",
+	[U.ERROR_SENDING_MFA_PUSH_NOTIFICATION]: "Error Sending MFA Push Notification",
+	[U.MFA_SMS_SENT]: "MFA SMS Sent",
+	[U.ERROR_SENDING_MFA_SMS]: "Error Sending MFA SMS",
+	[U.MFA_VOICE_CALL_SUCCESS]: "MFA Voice Call Success",
+	[U.MFA_VOICE_CALL_FAILED]: "MFA Voice Call Failed",
+	[U.SECOND_FACTOR_STARTED]: "Second Factor Started",
+	[U.MFA_ENROLL_STARTED]: "MFA Enroll Started",
+	[U.MFA_ENROLLMENT_FAILED]: "MFA Enrollment Failed",
+	[U.GUARDIAN_TENANT_UPDATE]: "Guardian Tenant Update",
+	[U.UNENROLL_DEVICE_ACCOUNT]: "Unenroll Device Account",
+	[U.UPDATE_DEVICE_ACCOUNT]: "Update Device Account",
+	[U.WEBAUTHN_CHALLENGE_FAILED]: "WebAuthn Challenge Failed",
+	[U.WEBAUTHN_ENROLLMENT_FAILED]: "WebAuthn Enrollment Failed",
+	[U.FAILED_KMS_API_OPERATION]: "Failed KMS API Operation",
+	[U.SUCCESS_KMS_API_OPERATION]: "Success KMS API Operation",
+	[U.KMS_KEY_STATE_CHANGED]: "KMS Key State Changed",
+	[U.TOO_MANY_CALLS_TO_DELEGATION]: "Too Many Calls to Delegation",
+	[U.BLOCKED_IP_ADDRESS]: "Blocked IP Address",
+	[U.BLOCKED_ACCOUNT_IP]: "Blocked Account (IP)",
+	[U.BLOCKED_ACCOUNT_EMAIL]: "Blocked Account (Email)",
+	[U.INFORMATION]: "Information",
+	[U.MFA_REQUIRED]: "MFA Required",
+	[U.MANAGEMENT_API_READ_OPERATION]: "Management API Read Operation",
+	[U.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Failed Authentication Method Operation (My Account)",
+	[U.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Successful Authentication Method Operation (My Account)",
+	[U.FAILED_OIDC_BACKCHANNEL_LOGOUT]: "Failed OIDC Backchannel Logout",
+	[U.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT]: "Successful OIDC Backchannel Logout",
+	[U.ORGANIZATION_MEMBER_ADDED]: "Organization Member Added",
+	[U.PASSKEY_CHALLENGE_FAILED]: "Passkey Challenge Failed",
+	[U.PASSKEY_CHALLENGE_STARTED]: "Passkey Challenge Started",
+	[U.PRE_LOGIN_ASSESSMENT]: "Pre-Login Assessment",
+	[U.BREACHED_PASSWORD]: "Breached Password",
+	[U.BREACHED_PASSWORD_ON_RESET]: "Breached Password on Reset",
+	[U.SUCCESS_RESOURCE_CLEANUP]: "Success Resource Cleanup",
+	[U.RICH_CONSENTS_ACCESS_ERROR]: "Rich Consents Access Error",
+	[U.SUCCESS_LOGIN]: "Success Login",
+	[U.SUCCESS_API_OPERATION]: "Success API Operation",
+	[U.FAILED_API_OPERATION]: "Failed API Operation",
+	[U.SUCCESS_CHANGE_EMAIL]: "Success Change Email",
+	[U.SUCCESS_CROSS_ORIGIN_AUTHENTICATION]: "Success Cross Origin Authentication",
+	[U.SUCCESS_CHANGE_PASSWORD]: "Success Change Password",
+	[U.SUCCESS_CHANGE_PHONE_NUMBER]: "Success Change Phone Number",
+	[U.SUCCESS_CHANGE_PASSWORD_REQUEST]: "Success Change Password Request",
+	[U.SUCCESS_CHANGE_USERNAME]: "Success Change Username",
+	[U.SUCCESS_CREDENTIAL_VALIDATION]: "Success Credential Validation",
+	[U.SUCCESS_DELEGATION]: "Success Delegation",
+	[U.SUCCESS_USER_DELETION]: "Success User Deletion",
+	[U.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Authorization Code for Access Token",
+	[U.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Success Exchange Access Token for Client Credentials",
+	[U.SUCCESS_EXCHANGE_CUSTOM_TOKEN]: "Success Exchange Custom Token",
+	[U.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Device Code for Access Token",
+	[U.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Success Exchange Native Social Login",
+	[U.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Password OOB for Access Token",
+	[U.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Password OTP for Access Token",
+	[U.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passwordless OTP for Access Token",
+	[U.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Success Exchange Password for Access Token",
+	[U.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OOB for Access Token",
+	[U.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OTP for Access Token",
+	[U.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Passkey MFA Recovery for Access Token",
+	[U.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Password MFA Recovery for Access Token",
+	[U.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Refresh Token for Access Token",
+	[U.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Subject Token for Access Token",
+	[U.SUCCESS_IMPERSONATION]: "Success Impersonation",
+	[U.SUCCESSFULLY_ACCEPTED_USER_INVITE]: "Successfully Accepted User Invite",
+	[U.BREACHED_PASSWORD_ON_SIGNUP]: "Breached Password on Signup",
+	[U.SUCCESS_LOGOUT]: "Success Logout",
+	[U.SUCCESS_HOOK]: "Success Hook",
+	[U.SUCCESS_PASSWORD_MIGRATION]: "Success Password Migration",
+	[U.SUCCESS_REVOCATION]: "Success Revocation",
+	[U.SUCCESS_SIGNUP]: "Success Signup",
+	[U.FAILED_SS_SSO_OPERATION]: "Failed SS SSO Operation",
+	[U.INFORMATION_FROM_SS_SSO_OPERATION]: "Information from SS SSO Operation",
+	[U.SUCCESS_SS_SSO_OPERATION]: "Success SS SSO Operation",
+	[U.SUCCESS_SILENT_AUTH]: "Success Silent Auth",
+	[U.SUCCESSFUL_SCIM_OPERATION]: "Successful SCIM Operation",
+	[U.SUCCESSFULLY_IMPORTED_USERS]: "Successfully Imported Users",
+	[U.SUCCESS_VERIFICATION_EMAIL]: "Success Verification Email",
+	[U.SUCCESS_VERIFICATION_EMAIL_REQUEST]: "Success Verification Email Request",
+	[U.MAX_AMOUNT_OF_AUTHENTICATORS]: "Max Amount of Authenticators",
+	[U.USER_LOGIN_BLOCK_RELEASED]: "User Login Block Released",
+	[U.FAILED_UNIVERSAL_LOGOUT]: "Failed Universal Logout",
+	[U.SUCCESSFUL_UNIVERSAL_LOGOUT]: "Successful Universal Logout",
+	[U.WARNING_DURING_LOGIN]: "Warning During Login",
+	[U.WARNING_SENDING_NOTIFICATION]: "Warning Sending Notification",
+	[U.WARNING_USER_MANAGEMENT]: "Warning User Management"
 }, Hn = (() => {
 	let e = {};
-	for (let [t, n] of Object.entries(H)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
+	for (let [t, n] of Object.entries(U)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
 	return e;
 })();
 function Un(e) {
@@ -1899,7 +1909,7 @@ var Gn = e.object({
 	"splunk",
 	"datadog",
 	"sumo"
-]), U = e.enum([
+]), W = e.enum([
 	"active",
 	"paused",
 	"suspended"
@@ -1909,13 +1919,13 @@ var Gn = e.object({
 }), Zn = e.object({
 	name: e.string(),
 	type: Yn,
-	status: U.optional(),
+	status: W.optional(),
 	sink: e.record(e.string(), e.unknown()),
 	filters: e.array(Xn).optional(),
 	isPriority: e.boolean().optional()
 }), Qn = Zn.extend({
 	id: e.string(),
-	status: U,
+	status: W,
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 }), $n = e.enum([
@@ -1923,24 +1933,24 @@ var Gn = e.object({
 	"cognito",
 	"okta",
 	"oidc"
-]), W = e.object({
+]), er = e.object({
 	domain: e.string(),
 	client_id: e.string(),
 	client_secret: e.string(),
 	audience: e.string().optional(),
 	scope: e.string().optional()
-}), er = e.object({
+}), tr = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	provider: $n,
 	connection: e.string(),
 	enabled: e.boolean().default(!0),
-	credentials: W
-}), tr = e.object({
+	credentials: er
+}), nr = e.object({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(er.shape), nr = e.object({
+}).extend(tr.shape), rr = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	admin_notification_frequency: e.array(e.string()).optional(),
@@ -1949,13 +1959,13 @@ var Gn = e.object({
 		"pre-user-registration": e.object({ shields: e.array(e.string()).optional() }).optional(),
 		"pre-change-password": e.object({ shields: e.array(e.string()).optional() }).optional()
 	}).optional()
-}), rr = e.object({
+}), ir = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
 	mode: e.string().optional(),
 	max_attempts: e.number().optional()
-}), ir = e.object({
+}), ar = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
@@ -1969,28 +1979,28 @@ var Gn = e.object({
 			rate: e.number().optional()
 		}).optional()
 	}).optional()
-}), ar = e.object({
-	breached_password_detection: nr.optional(),
-	brute_force_protection: rr.optional(),
-	suspicious_ip_throttling: ir.optional()
 }), or = e.object({
+	breached_password_detection: rr.optional(),
+	brute_force_protection: ir.optional(),
+	suspicious_ip_throttling: ar.optional()
+}), sr = e.object({
 	id: e.string().optional(),
 	user_id: e.string(),
 	password: e.string(),
 	algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
 	is_current: e.boolean().default(!0)
-}), sr = or.extend({
+}), cr = sr.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), cr = e.object({
+}), lr = e.object({
 	initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
 	initial_ip: e.string().describe("First IP address associated with this session"),
 	initial_asn: e.string().describe("First autonomous system number associated with this session"),
 	last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
 	last_ip: e.string().describe("Last IP address from which this user logged in"),
 	last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), lr = e.object({
+}), ur = e.object({
 	id: e.string(),
 	revoked_at: e.string().optional(),
 	used_at: e.string().optional(),
@@ -1998,14 +2008,14 @@ var Gn = e.object({
 	expires_at: e.string().optional(),
 	login_session_id: e.string(),
 	idle_expires_at: e.string().optional(),
-	device: cr.describe("Metadata related to the device used in the session"),
+	device: lr.describe("Metadata related to the device used in the session"),
 	clients: e.array(e.string()).describe("List of client details for the session")
-}), ur = e.object({
+}), dr = e.object({
 	created_at: e.string(),
 	updated_at: e.string(),
 	authenticated_at: e.string(),
 	last_interaction_at: e.string()
-}).extend(lr.shape), dr = e.object({
+}).extend(ur.shape), fr = e.object({
 	kid: e.string().openapi({ description: "The key id of the signing key" }),
 	tenant_id: e.string().optional().openapi({ description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped." }),
 	cert: e.string().openapi({ description: "The public certificate of the signing key" }),
@@ -2021,7 +2031,7 @@ var Gn = e.object({
 	revoked_at: e.string().optional().openapi({ description: "The date and time when the key was revoked" }),
 	connection: e.string().optional().openapi({ description: "The connection identifier associated with the key" }),
 	type: e.enum(["jwt_signing", "saml_encryption"]).openapi({ description: "The type of the signing key" })
-}), fr = e.object({
+}), pr = e.object({
 	id: e.string().optional(),
 	audience: e.string().optional(),
 	friendly_name: e.string(),
@@ -2139,7 +2149,7 @@ var Gn = e.object({
 		"shared_planetscale"
 	]).optional(),
 	d1_database_id: e.string().max(64).optional(),
-	attack_protection: ar.optional(),
+	attack_protection: or.optional(),
 	mfa: e.object({
 		policy: e.enum(["never", "always"]).default("never").optional(),
 		factors: e.object({
@@ -2166,38 +2176,38 @@ var Gn = e.object({
 		}).optional(),
 		phone_message: e.object({ message: e.string().optional() }).optional()
 	}).optional()
-}), pr = e.object({
+}), mr = e.object({
 	created_at: e.string().nullable().transform((e) => e ?? ""),
 	updated_at: e.string().nullable().transform((e) => e ?? "")
-}).extend(fr.shape).extend({
+}).extend(pr.shape).extend({
 	id: e.string(),
 	is_control_plane: e.boolean().optional()
-}), mr = e.enum([
+}), hr = e.enum([
 	"provision",
 	"seed",
 	"upgrade",
 	"backup",
 	"deprovision",
 	"users_import"
-]), hr = e.enum([
+]), gr = e.enum([
 	"pending",
 	"running",
 	"succeeded",
 	"failed",
 	"cancelled"
-]), gr = e.string().max(64), _r = ["inline", "cloudflare-workflows"], vr = e.object({
+]), _r = e.string().max(64), vr = ["inline", "cloudflare-workflows"], yr = e.object({
 	tenant_id: e.string().max(255).nullable().default(null),
 	rollout_id: e.string().max(255).nullable().optional(),
-	kind: mr,
-	engine: gr,
+	kind: hr,
+	engine: _r,
 	engine_instance_id: e.string().max(100).nullable().optional(),
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	initiated_by: e.string().max(255).nullable().optional(),
 	input: e.record(e.string(), e.unknown()).nullable().optional()
-}), yr = vr.extend({
+}), br = yr.extend({
 	id: e.string(),
-	status: hr,
+	status: gr,
 	current_step: e.string().max(255).nullable().optional(),
 	error: e.string().nullable().optional(),
 	result: e.record(e.string(), e.unknown()).nullable().optional(),
@@ -2206,7 +2216,7 @@ var Gn = e.object({
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
-}), br = yr.pick({
+}), xr = br.pick({
 	status: !0,
 	current_step: !0,
 	engine_instance_id: !0,
@@ -2217,20 +2227,20 @@ var Gn = e.object({
 	claimed_by: !0,
 	claim_expires_at: !0,
 	finished_at: !0
-}).partial(), xr = e.enum([
+}).partial(), Sr = e.enum([
 	"started",
 	"succeeded",
 	"failed",
 	"retried",
 	"skipped",
 	"reconciled"
-]), Sr = e.object({
+]), Cr = e.object({
 	operation_id: e.string().max(255),
 	step: e.string().max(255),
-	outcome: xr,
+	outcome: Sr,
 	detail: e.record(e.string(), e.unknown()).nullable().optional(),
 	attempt: e.number().int().min(1).default(1)
-}), Cr = Sr.extend({
+}), wr = Cr.extend({
 	id: e.string(),
 	created_at: e.string()
 }), G = e.enum([
@@ -2239,12 +2249,12 @@ var Gn = e.object({
 	"updated",
 	"failed",
 	"skipped"
-]), wr = [
+]), Tr = [
 	"inserted",
 	"updated",
 	"failed",
 	"skipped"
-], Tr = e.object({
+], Er = e.object({
 	operation_id: e.string().max(255),
 	seq: e.number().int().min(0),
 	payload: e.record(e.string(), e.unknown()),
@@ -2253,51 +2263,51 @@ var Gn = e.object({
 	error_message: e.string().nullable().optional(),
 	error_path: e.string().max(255).nullable().optional(),
 	entity_id: e.string().max(255).nullable().optional()
-}), Er = Tr.extend({
+}), Dr = Er.extend({
 	status: G,
 	created_at: e.string(),
 	updated_at: e.string()
-}), Dr = e.object({
+}), Or = e.object({
 	seq: e.number().int().min(0),
 	status: G,
 	error_code: e.string().max(64).nullable().optional(),
 	error_message: e.string().nullable().optional(),
 	error_path: e.string().max(255).nullable().optional(),
 	entity_id: e.string().max(255).nullable().optional()
-}), Or = e.enum([
+}), kr = e.enum([
 	"upgrade",
 	"reseed",
 	"backup"
-]), kr = e.enum([
+]), Ar = e.enum([
 	"pending",
 	"canary",
 	"rolling",
 	"paused",
 	"done",
 	"failed"
-]), Ar = e.object({
-	kind: Or,
+]), jr = e.object({
+	kind: kr,
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	wave_size: e.number().int().min(1).default(10),
 	canary_tenant_ids: e.array(e.string()).nullable().optional(),
 	filter: e.record(e.string(), e.unknown()).nullable().optional(),
 	initiated_by: e.string().max(255).nullable().optional()
-}), jr = Ar.extend({
+}), Mr = jr.extend({
 	id: e.string(),
-	status: kr,
+	status: Ar,
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
-}), Mr = jr.pick({
+}), Nr = Mr.pick({
 	status: !0,
 	wave_size: !0,
 	canary_tenant_ids: !0,
 	filter: !0,
 	finished_at: !0
-}).partial(), Nr = /* @__PURE__ */ function(e) {
+}).partial(), Pr = /* @__PURE__ */ function(e) {
 	return e.RefreshToken = "refresh_token", e.AuthorizationCode = "authorization_code", e.ClientCredential = "client_credentials", e.Passwordless = "passwordless", e.Password = "password", e.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", e.TokenExchange = "urn:ietf:params:oauth:grant-type:token-exchange", e;
-}({}), Pr = e.object({
+}({}), Fr = e.object({
 	access_token: e.string(),
 	id_token: e.string().optional(),
 	scope: e.string().optional(),
@@ -2312,7 +2322,7 @@ e.object({
 });
 //#endregion
 //#region src/types/Theme.ts
-var Fr = e.object({
+var Ir = e.object({
 	button_border_radius: e.number(),
 	button_border_weight: e.number(),
 	buttons_style: e.enum([
@@ -2330,7 +2340,7 @@ var Fr = e.object({
 	show_widget_shadow: e.boolean(),
 	widget_border_weight: e.number(),
 	widget_corner_radius: e.number()
-}), Ir = e.object({
+}), Lr = e.object({
 	base_focus_color: e.string(),
 	base_hover_color: e.string(),
 	body_text: e.string(),
@@ -2357,7 +2367,7 @@ var Fr = e.object({
 }), K = e.object({
 	bold: e.boolean(),
 	size: e.number()
-}), Lr = e.object({
+}), Rr = e.object({
 	body_text: K,
 	buttons_text: K,
 	font_url: e.string(),
@@ -2367,7 +2377,7 @@ var Fr = e.object({
 	reference_text_size: e.number(),
 	subtitle: K,
 	title: K
-}), Rr = e.object({
+}), zr = e.object({
 	background_color: e.string(),
 	background_image_url: e.string(),
 	page_layout: e.enum([
@@ -2380,7 +2390,7 @@ var Fr = e.object({
 		"chip",
 		"none"
 	]).optional()
-}), zr = e.object({
+}), Br = e.object({
 	header_text_alignment: e.enum([
 		"center",
 		"left",
@@ -2395,43 +2405,43 @@ var Fr = e.object({
 	]),
 	logo_url: e.string(),
 	social_buttons_layout: e.enum(["bottom", "top"])
-}), Br = e.object({
-	borders: Fr,
-	colors: Ir,
+}), Vr = e.object({
+	borders: Ir,
+	colors: Lr,
 	displayName: e.string(),
-	fonts: Lr,
-	page_background: Rr,
-	widget: zr
-}), Vr = Br.extend({ themeId: e.string() }), Hr = e.object({
+	fonts: Rr,
+	page_background: zr,
+	widget: Br
+}), Hr = Vr.extend({ themeId: e.string() }), Ur = e.object({
 	universal_login_experience: e.enum(["new", "classic"]).default("new"),
 	identifier_first: e.boolean().default(!0),
 	password_first: e.boolean().default(!1),
 	show_last_used_connection: e.boolean().default(!1),
 	webauthn_platform_first_factor: e.boolean()
-}), Ur = e.object({
+}), Wr = e.object({
 	hosts: e.array(e.string()).optional(),
 	methods: e.array(e.string()).optional(),
 	path: e.string().default("/*"),
 	headers: e.record(e.string(), e.string()).optional(),
 	query: e.record(e.string(), e.string()).optional()
-}), Wr = e.object({
+}), Gr = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
 }), q = e.object({
 	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
-	match: Ur,
-	handlers: e.array(Wr).min(1)
-}), Gr = q.extend({
+	match: Wr,
+	handlers: e.array(Gr).min(1)
+}), Kr = q.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), Kr = q.partial().omit({
+}), qr = q.partial().omit({
 	id: !0,
 	custom_domain_id: !0
-}), qr = "custom_authentication", Jr = [
+}), Jr = "custom_authentication", Yr = [
 	"urn:ietf:params:oauth:",
 	"urn:auth0",
 	"urn:okta",
@@ -2439,14 +2449,14 @@ var Fr = e.object({
 	"https://auth0.com",
 	"http://okta.com",
 	"https://okta.com"
-], J = e.string().min(1).max(200).refine((e) => e.startsWith("https://") || e.startsWith("urn:"), { message: "subject_token_type must be a URI starting with https:// or urn:" }).refine((e) => !Jr.some((t) => e.toLowerCase().startsWith(t)), { message: "subject_token_type uses a reserved namespace" }), Yr = e.enum([
+], J = e.string().min(1).max(200).refine((e) => e.startsWith("https://") || e.startsWith("urn:"), { message: "subject_token_type must be a URI starting with https:// or urn:" }).refine((e) => !Yr.some((t) => e.toLowerCase().startsWith(t)), { message: "subject_token_type uses a reserved namespace" }), Xr = e.enum([
 	"RS256",
 	"RS384",
 	"RS512",
 	"ES256",
 	"ES384",
 	"ES512"
-]), Xr = e.discriminatedUnion("type", [e.object({
+]), Zr = e.discriminatedUnion("type", [e.object({
 	type: e.literal("connection"),
 	connection: e.string().min(1),
 	create_if_not_exists: e.boolean().default(!0),
@@ -2456,54 +2466,54 @@ var Fr = e.object({
 	jwks: Pn.optional(),
 	jwks_uri: e.string().url().optional(),
 	audience: e.array(e.string().min(1)).min(1).optional(),
-	algorithms: e.array(Yr).min(1).optional(),
+	algorithms: e.array(Xr).min(1).optional(),
 	max_lifetime_seconds: e.number().int().min(1).max(3600).default(300),
 	require_jti: e.boolean().default(!0),
-	user_mapping: Xr
-}), Zr = e.object({
+	user_mapping: Zr
+}), Qr = e.object({
 	name: e.string().min(1).max(255),
 	subject_token_type: J,
 	action_id: e.string().min(1).optional(),
-	type: e.literal(qr),
+	type: e.literal(Jr),
 	jwt_verification: Y.optional()
-}), Qr = Zr.extend({
+}), $r = Qr.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), $r = e.object({
+}), ei = e.object({
 	name: e.string().min(1).max(255).optional(),
 	subject_token_type: J.optional(),
 	jwt_verification: Y.optional()
-}), ei = e.object({
+}), ti = e.object({
 	scim: e.string(),
 	auth0: e.string()
-}), ti = e.object({
+}), ni = e.object({
 	connection_id: e.string(),
 	user_id_attribute: e.string().default("externalId"),
-	mapping: e.array(ei).default([])
-}), ni = e.object({
+	mapping: e.array(ti).default([])
+}), ri = e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(ti.shape), ri = e.object({
+}).extend(ni.shape), ii = e.object({
 	token_id: e.string(),
 	connection_id: e.string(),
 	token_hash: e.string(),
 	scopes: e.array(e.string()).default([]),
 	valid_until: e.string().optional()
-}), ii = e.object({
+}), ai = e.object({
 	created_at: e.string(),
 	last_used_at: e.string().optional()
-}).extend(ri.shape), ai = e.object({
+}).extend(ii.shape), oi = e.object({
 	connection_id: e.string(),
 	external_id: e.string(),
 	user_id: e.string()
-}), oi = e.object({ created_at: e.string() }).extend(ai.shape), si = e.object({
+}), si = e.object({ created_at: e.string() }).extend(oi.shape), ci = e.object({
 	name: e.string(),
 	enabled: e.boolean().optional().default(!0),
 	default_from_address: e.string().optional(),
 	credentials: e.record(e.string(), e.unknown()),
 	settings: e.object({}).optional()
-}), ci = e.enum([
+}), li = e.enum([
 	"verify_email",
 	"verify_email_by_code",
 	"reset_email",
@@ -2516,8 +2526,8 @@ var Fr = e.object({
 	"change_password",
 	"password_reset",
 	"user_invitation"
-]), li = e.object({
-	template: ci,
+]), ui = e.object({
+	template: li,
 	body: e.string(),
 	from: e.string(),
 	subject: e.string(),
@@ -2526,19 +2536,19 @@ var Fr = e.object({
 	urlLifetimeInSeconds: e.number().int().nonnegative().optional(),
 	includeEmailInRedirect: e.boolean().default(!1),
 	enabled: e.boolean().default(!0)
-}), ui = e.object({
+}), di = e.object({
 	id: e.string(),
 	login_id: e.string(),
 	session_id: e.string().optional(),
 	organization: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: V.optional(),
+	auth_strategy: H.optional(),
 	user_id: e.string(),
 	client_id: e.string(),
 	expires_at: e.string().optional(),
 	idle_expires_at: e.string().optional(),
 	last_exchanged_at: e.string().optional(),
-	device: cr,
+	device: lr,
 	resource_servers: e.array(e.object({
 		audience: e.string(),
 		scopes: e.string()
@@ -2549,19 +2559,19 @@ var Fr = e.object({
 	family_id: e.string().optional(),
 	rotated_to: e.string().optional(),
 	rotated_at: e.string().optional()
-}), di = ui.extend({
+}), fi = di.extend({
 	created_at: e.string(),
 	revoked_at: e.string().optional()
-}), fi = e.object({
+}), pi = e.object({
 	to: e.string(),
 	message: e.string()
-}), pi = e.object({
+}), mi = e.object({
 	name: e.string(),
 	options: e.object({})
-}), mi = e.object({
+}), hi = e.object({
 	value: e.string(),
 	description: e.string().optional()
-}), hi = e.object({
+}), gi = e.object({
 	token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
 	enforce_policies: e.boolean().optional(),
 	allow_skipping_userinfo: e.boolean().optional(),
@@ -2569,11 +2579,11 @@ var Fr = e.object({
 	persist_client_authorization: e.boolean().optional(),
 	enable_introspection_endpoint: e.boolean().optional(),
 	mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
-}), gi = e.object({
+}), _i = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	identifier: e.string(),
-	scopes: e.array(mi).optional(),
+	scopes: e.array(hi).optional(),
 	signing_alg: e.string().optional(),
 	signing_secret: e.string().optional(),
 	token_lifetime: e.number().default(86400),
@@ -2581,37 +2591,37 @@ var Fr = e.object({
 	skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
 	allow_offline_access: e.boolean().optional(),
 	verificationKey: e.string().optional(),
-	options: hi.optional(),
+	options: gi.optional(),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional()
-}), _i = gi.extend({
+}), vi = _i.extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), vi = e.array(_i), yi = e.object({
+}), yi = e.array(vi), bi = e.object({
 	role_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
-}), bi = yi.extend({ created_at: e.string() }), xi = e.array(bi), Si = e.object({
+}), xi = bi.extend({ created_at: e.string() }), Si = e.array(xi), Ci = e.object({
 	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
 	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
 	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
 	scope: e.array(e.string()).default([]).openapi({ description: "The list of OAuth scopes the user has consented to" })
-}), Ci = Si.extend({ id: e.string() }), wi = e.object({
+}), wi = Ci.extend({ id: e.string() }), Ti = e.object({
 	user_id: e.string(),
 	last_login: e.string().optional(),
 	last_ip: e.string().optional(),
 	login_count: e.number().default(0),
 	failed_logins: e.array(e.string()).optional(),
 	last_password_reset: e.string().optional()
-}), Ti = e.object({
+}), Ei = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
 	organization_id: e.string().optional()
-}), Ei = Ti.extend({
+}), Di = Ei.extend({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
-}), Di = e.array(Ei), Oi = e.object({
+}), Oi = e.array(Di), ki = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -2619,65 +2629,65 @@ var Fr = e.object({
 	description: e.string().nullable().optional(),
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
-}), ki = e.array(Oi), Ai = e.object({
+}), Ai = e.array(ki), ji = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
-}), ji = Ai.extend({
+}), Mi = ji.extend({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
-}), Mi = e.array(ji), Ni = e.object({
+}), Ni = e.array(Mi), Pi = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional().openapi({ description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios." })
-}), Pi = Ni.extend({
+}), Fi = Pi.extend({
 	id: e.string().openapi({ description: "The unique identifier of the role" }),
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Fi = e.array(Pi), Ii = e.object({
+}), Ii = e.array(Fi), Li = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), Li = e.object({
+}).optional(), Ri = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), Ri = e.object({ client_credentials: e.object({
+}), zi = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
-}).optional() }).optional(), zi = e.object({
+}).optional() }).optional(), Bi = e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: Ii,
+	branding: Li,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(Li).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: Ri
-}), Bi = zi.extend(t.shape).extend({
+	enabled_connections: e.array(Ri).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: zi
+}), Vi = Bi.extend(t.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
-}), Vi = e.object({
+}), Hi = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
 	is_signup_enabled: e.boolean().optional().default(!0)
-}), Hi = Vi.extend({
+}), Ui = Hi.extend({
 	connection: e.object({
 		name: e.string().optional(),
 		strategy: e.string().optional()
 	}).optional(),
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Ui = e.array(Hi), Wi = e.object({
+}), Wi = e.array(Ui), Gi = e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
-}), Gi = Wi.extend(t.shape).extend({ id: e.string() }), Ki = e.object({
+}), Ki = Gi.extend(t.shape).extend({ id: e.string() }), qi = e.object({
 	idle_session_lifetime: e.number().default(72),
 	session_lifetime: e.number().default(168),
 	session_cookie: e.object({ mode: e.enum(["persistent", "non-persistent"]).optional() }).optional(),
@@ -2756,7 +2766,7 @@ var Fr = e.object({
 		}).optional(),
 		phone_message: e.object({ message: e.string().optional() }).optional()
 	}).optional()
-}), qi = e.object({
+}), Ji = e.object({
 	date: e.string().openapi({
 		description: "Date these events occurred in ISO 8601 format",
 		example: "2025-12-19"
@@ -2781,10 +2791,10 @@ var Fr = e.object({
 		description: "Approximate date and time the first event occurred in ISO 8601 format",
 		example: "2025-12-19T00:00:00.000Z"
 	})
-}), Ji = e.number().openapi({
+}), Yi = e.number().openapi({
 	description: "Number of active users in the last 30 days",
 	example: 1234
-}), Yi = e.enum([
+}), Xi = e.enum([
 	"active-users",
 	"logins",
 	"signups",
@@ -2796,64 +2806,81 @@ var Fr = e.object({
 	"mfa",
 	"email-verifications",
 	"codes-sent"
-]), Xi = e.enum([
+]), Zi = e.enum([
 	"hour",
 	"day",
 	"week",
 	"month"
-]), Zi = e.enum([
+]), Qi = e.enum([
 	"time",
 	"connection",
 	"client_id",
 	"user_type",
 	"event"
-]), Qi = e.enum([
+]), $i = e.enum([
 	"password",
 	"social",
 	"passwordless",
 	"enterprise"
-]), $i = e.object({
+]), ea = e.object({
 	cohort: e.string(),
 	sessions: e.number(),
 	active: e.array(e.number())
-}), ea = e.object({
+}), ta = e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array($i)
-}), ta = e.object({
+	cohorts: e.array(ea)
+}), na = e.object({
 	cohort: e.string(),
 	tokens: e.number(),
 	active: e.array(e.number())
-}), na = e.object({
+}), ra = e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(ta)
-}), ra = e.object({
+	cohorts: e.array(na)
+}), ia = e.object({
 	name: e.string(),
 	type: e.string()
-}), ia = e.object({
+}), aa = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
-}), aa = e.object({
-	meta: e.array(ra),
+}), oa = e.object({
+	meta: e.array(ia),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: ia.optional()
-}), oa = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), sa = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+	statistics: aa.optional()
+}), sa = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), ca = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
 		additionalProperties: { type: "string" }
 	}
-}), ca = e.object({
-	prompt: oa,
+}), la = e.object({
+	prompt: sa,
 	language: e.string(),
-	custom_text: sa
-}), la = {
+	custom_text: ca
+}), ua = [
+	"form-content-start",
+	"form-content-end",
+	"form-footer-start",
+	"form-footer-end",
+	"secondary-actions-start",
+	"secondary-actions-end"
+], da = e.object({
+	"form-content-start": e.string().optional(),
+	"form-content-end": e.string().optional(),
+	"form-footer-start": e.string().optional(),
+	"form-footer-end": e.string().optional(),
+	"secondary-actions-start": e.string().optional(),
+	"secondary-actions-end": e.string().optional()
+}).strict(), fa = e.record(e.string(), da), pa = e.object({
+	prompt: e.string(),
+	partials: fa
+}), ma = {
 	EMAIL: "email",
 	SMS: "sms",
 	USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2869,17 +2896,17 @@ var Fr = e.object({
 	WAAD: "waad",
 	ADFS: "adfs",
 	OKTA: "okta"
-}, ua = {
+}, ha = {
 	DATABASE: "database",
 	SOCIAL: "social",
 	PASSWORDLESS: "passwordless"
-}, da = "auth0";
-function fa(e) {
-	return e === "auth0" || e === la.USERNAME_PASSWORD || e === "auth2";
+}, ga = "auth0";
+function _a(e) {
+	return e === "auth0" || e === ma.USERNAME_PASSWORD || e === "auth2";
 }
 //#endregion
 //#region src/types/AuthenticationMethod.ts
-var pa = e.enum([
+var va = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -2887,9 +2914,9 @@ var pa = e.enum([
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), ma = e.object({
+]), ya = e.object({
 	user_id: e.string(),
-	type: pa,
+	type: va,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
 	credential_id: e.string().optional(),
@@ -2900,7 +2927,7 @@ var pa = e.enum([
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function ha(t, n) {
+function ba(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -2923,15 +2950,15 @@ function ha(t, n) {
 		path: ["public_key"]
 	}));
 }
-var ga = ma.superRefine(ha), _a = ma.extend({
+var xa = ya.superRefine(ba), Sa = ya.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(ha), va = e.object({
+}).superRefine(ba), Ca = e.object({
 	id: e.string().optional(),
 	created_at: e.string().datetime({ offset: !0 }).optional(),
 	updated_at: e.string().datetime({ offset: !0 }).optional()
-}), ya = {
+}), wa = {
 	"post-user-login": {
 		accessToken: ["setCustomClaim"],
 		idToken: ["setCustomClaim"],
@@ -2946,15 +2973,20 @@ var ga = ma.superRefine(ha), _a = ma.extend({
 		access: ["deny"]
 	},
 	"pre-user-registration": {
-		user: ["setUserMetadata", "setLinkedTo"],
-		access: ["deny"]
+		user: [
+			"setUserMetadata",
+			"setAppMetadata",
+			"setLinkedTo"
+		],
+		access: ["deny"],
+		validation: ["error"]
 	},
 	"post-user-registration": {},
 	"custom-token-exchange": {
 		authentication: ["setUserById", "setUserByConnection"],
 		access: ["deny", "rejectInvalidSubjectToken"]
 	}
-}, ba = {
+}, Ta = {
 	"post-user-login": "onExecutePostLogin",
 	"credentials-exchange": "onExecuteCredentialsExchange",
 	"pre-user-registration": "onExecutePreUserRegistration",
@@ -2963,7 +2995,7 @@ var ga = ma.superRefine(ha), _a = ma.extend({
 };
 //#endregion
 //#region src/utils/user-id.ts
-function xa(e) {
+function Ea(e) {
 	let t = e.indexOf("|"), n = e.slice(0, t), r = e.slice(t + 1);
 	if (t === -1 || !n || !r) throw Error(`Invalid user_id: ${e}`);
 	return {
@@ -2973,10 +3005,10 @@ function xa(e) {
 }
 //#endregion
 //#region src/utils/http.ts
-var Sa = "x-authhero-preserve-location";
+var Da = "x-authhero-preserve-location";
 //#endregion
 //#region src/utils/passthrough.ts
-function Ca(e) {
+function Oa(e) {
 	let { primary: t, secondaries: n, syncMethods: r = [
 		"create",
 		"rawCreate",
@@ -3010,12 +3042,12 @@ function Ca(e) {
 		} : i.bind(e) : i;
 	} });
 }
-function wa(e) {
+function ka(e) {
 	return e;
 }
 //#endregion
 //#region src/utils/connection-attributes.ts
-function Ta(e) {
+function Aa(e) {
 	let t = e?.options;
 	if (!t) return {
 		usernameIdentifierActive: !1,
@@ -3038,35 +3070,35 @@ function Ta(e) {
 }
 //#endregion
 //#region src/utils/guards.ts
-function Ea(e) {
+function ja(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
 //#endregion
 //#region src/utils/base64url.ts
-function Da(e) {
+function Ma(e) {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-function Oa(e) {
+function Na(e) {
 	let t = e.replace(/-/g, "+").replace(/_/g, "/"), n = atob(t), r = new Uint8Array(n.length);
 	for (let e = 0; e < n.length; e++) r[e] = n.charCodeAt(e);
 	return r;
 }
-function ka(e) {
-	return Da(new TextEncoder().encode(e));
+function Pa(e) {
+	return Ma(new TextEncoder().encode(e));
 }
-function Aa(e) {
-	return new TextDecoder().decode(Oa(e));
+function Fa(e) {
+	return new TextDecoder().decode(Na(e));
 }
 //#endregion
 //#region src/utils/base64.ts
-function ja(e) {
+function Ia(e) {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t);
 }
-function Ma(e) {
+function La(e) {
 	let t = atob(e), n = new Uint8Array(t.length);
 	for (let e = 0; e < t.length; e++) n[e] = t.charCodeAt(e);
 	return n;
@@ -3074,12 +3106,12 @@ function Ma(e) {
 //#endregion
 //#region src/utils/base32.ts
 var X = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
-function Na(e) {
+function Ra(e) {
 	let t = "", n = 0, r = 0;
 	for (let i of e) for (n = n << 8 | i, r += 8; r >= 5;) r -= 5, t += X[n >> r & 31];
 	return r > 0 && (t += X[n << 5 - r & 31]), t;
 }
-function Pa(e) {
+function za(e) {
 	let t = e.replace(/=+$/, "").toUpperCase(), n = t.length % 8;
 	if (n === 1 || n === 3 || n === 6) throw Error(`Invalid base32 length: ${t.length}`);
 	let r = [], i = 0, a = 0;
@@ -3093,19 +3125,19 @@ function Pa(e) {
 }
 //#endregion
 //#region src/utils/hex.ts
-function Fa(e) {
+function Ba(e) {
 	let t = e instanceof Uint8Array ? e : new Uint8Array(e), n = "";
 	for (let e of t) n += e.toString(16).padStart(2, "0");
 	return n;
 }
 //#endregion
 //#region src/utils/cursor.ts
-function Ia(e) {
-	return ka(JSON.stringify(e));
+function Va(e) {
+	return Pa(JSON.stringify(e));
 }
-function La(e) {
+function Ha(e) {
 	try {
-		let t = JSON.parse(Aa(e));
+		let t = JSON.parse(Fa(e));
 		return t && typeof t == "object" && typeof t.i == "string" ? t : null;
 	} catch {
 		return null;
@@ -3113,7 +3145,7 @@ function La(e) {
 }
 //#endregion
 //#region src/utils/lucene.ts
-function Ra(e) {
+function Ua(e) {
 	let t = [], n = "", r = !1;
 	for (let i = 0; i < e.length; i++) {
 		let a = e[i];
@@ -3121,53 +3153,53 @@ function Ra(e) {
 	}
 	return n.trim() && t.push(n.trim()), t;
 }
-function za(e) {
+function Wa(e) {
 	return e.replace(/\\([\\"+\-!(){}[\]^~*?:/&|])/g, "$1");
 }
-function Ba(e) {
+function Ga(e) {
 	return `"${e.replace(/([\\"])/g, "\\$1")}"`;
 }
-function Va(e) {
+function Ka(e) {
 	let t = e.trim();
-	return za(t.length > 1 && t.startsWith("\"") && t.endsWith("\"") ? t.slice(1, -1) : t);
+	return Wa(t.length > 1 && t.startsWith("\"") && t.endsWith("\"") ? t.slice(1, -1) : t);
 }
-function Ha(e) {
+function qa(e) {
 	let t = [], n = [];
-	for (let r of Ra(e)) /^or$/i.test(r) ? (t.push(n), n = []) : n.push(r);
+	for (let r of Ua(e)) /^or$/i.test(r) ? (t.push(n), n = []) : n.push(r);
 	return t.push(n), t.filter((e) => e.length > 0);
 }
-function Ua(e, t) {
+function Ja(e, t) {
 	let n = new Set(t), r = (e) => {
 		let t = e.replace(/^([^:]+)=/, "$1:"), r = t.startsWith("-") ? t.slice(1) : t;
 		if (r.startsWith("_exists_:")) return n.has(r.slice(9));
 		let i = r.indexOf(":");
 		return i > 0 ? n.has(r.slice(0, i)) : !0;
 	};
-	return Ha(e).map((e) => e.filter(r).join(" ")).filter((e) => e.length > 0).join(" OR ");
+	return qa(e).map((e) => e.filter(r).join(" ")).filter((e) => e.length > 0).join(" OR ");
 }
-var Wa = /^[^\s@%_*?"'()[\]{}^~:\\/]+@[^\s@%_*?"'()[\]{}^~:\\/]+\.[^\s@%_*?"'()[\]{}^~:\\/]+$/;
-function Ga(e) {
-	return Wa.test(e);
+var Ya = /^[^\s@%_*?"'()[\]{}^~:\\/]+@[^\s@%_*?"'()[\]{}^~:\\/]+\.[^\s@%_*?"'()[\]{}^~:\\/]+$/;
+function Xa(e) {
+	return Ya.test(e);
 }
 //#endregion
 //#region src/utils/session-retention.ts
 var Z = 10080 * 60 * 1e3, Q = 4320 * 60 * 1e3;
-function Ka(e) {
+function Za(e) {
 	return Math.floor((e + Q) / Z);
 }
 function $(e) {
 	return e * Z - Q;
 }
-function qa(e, t = Date.now()) {
-	let n = Ka(t), r = n - e + 1;
+function Qa(e, t = Date.now()) {
+	let n = Za(t), r = n - e + 1;
 	return {
 		currentWeek: n,
 		firstWeek: r,
 		sinceMs: $(r)
 	};
 }
-function Ja(e, t, n = Date.now()) {
-	let { currentWeek: r, firstWeek: i, sinceMs: a } = qa(t, n), o = /* @__PURE__ */ new Map();
+function $a(e, t, n = Date.now()) {
+	let { currentWeek: r, firstWeek: i, sinceMs: a } = Qa(t, n), o = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		if (t.created_week < i || t.created_week > r) continue;
 		let e = Math.min(Math.max(0, t.used_week - t.created_week), r - t.created_week), n = o.get(t.created_week);
@@ -3190,8 +3222,8 @@ function Ja(e, t, n = Date.now()) {
 		cohorts: s
 	};
 }
-function Ya(e, t, n = Date.now()) {
-	let r = Ja(e, t, n);
+function eo(e, t, n = Date.now()) {
+	let r = $a(e, t, n);
 	return {
 		interval: r.interval,
 		from: r.from,
@@ -3205,16 +3237,16 @@ function Ya(e, t, n = Date.now()) {
 }
 //#endregion
 //#region src/utils/username-validation.ts
-var Xa = /^[A-Za-z0-9_+\-.!#$'^`~]+$/, Za = "Username can only contain alphanumeric characters and the following characters: '_', '+', '-', '.', '!', '#', '$', \"'\", '^', '`', '~'", Qa = "Usernames must not contain \"@\". Use the email field for email addresses.";
-function $a(e) {
-	return Xa.test(e);
+var to = /^[A-Za-z0-9_+\-.!#$'^`~]+$/, no = "Username can only contain alphanumeric characters and the following characters: '_', '+', '-', '.', '!', '#', '$', \"'\", '^', '`', '~'", ro = "Usernames must not contain \"@\". Use the email field for email addresses.";
+function io(e) {
+	return to.test(e);
 }
-function eo(e) {
+function ao(e) {
 	return e.toLowerCase();
 }
-function to(e, t) {
-	if (e.includes("@")) return Qa;
-	if (!$a(e)) return Za;
+function oo(e, t) {
+	if (e.includes("@")) return ro;
+	if (!io(e)) return no;
 	if (t) {
 		let n = [...e].length;
 		if (n < t.min) return `Username must be at least ${t.min} characters`;
@@ -3224,15 +3256,15 @@ function to(e, t) {
 }
 //#endregion
 //#region src/utils/feature-not-supported.ts
-var no = class extends Error {
+var so = class extends Error {
 	feature;
 	adapter;
 	constructor(e, t, n) {
 		super(`${e} is not supported by the ${t} adapter.` + (n ? ` ${n}` : "")), this.name = "FeatureNotSupportedError", this.feature = e, this.adapter = t;
 	}
 };
-function ro(e) {
+function co(e) {
 	return e instanceof Error && e.name === "FeatureNotSupportedError";
 }
 //#endregion
-export { xe as Auth0ActionEnum, Gn as Auth0Client, w as AuthorizationResponseMode, C as AuthorizationResponseType, rt as CodeChallengeMethod, f as ComponentCategory, d as ComponentType, da as DATABASE_CONNECTION_STRATEGY, Se as EmailActionEnum, Zt as FORM_FIELD_TYPES, no as FeatureNotSupportedError, be as FlowActionTypeEnum, Nr as GrantType, _r as KNOWN_TENANT_OPERATION_ENGINES, Kn as LocationInfo, H as LogTypes, In as LoginSessionState, Q as MONDAY_EPOCH_SHIFT_MS, Xe as NodeType, Sa as PRESERVE_LOCATION_HEADER, Jr as RESERVED_SUBJECT_TOKEN_TYPE_PREFIXES, Ee as RedirectTargetEnum, la as Strategy, ua as StrategyType, wr as TERMINAL_TENANT_OPERATION_ROW_STATUSES, qr as TOKEN_EXCHANGE_PROFILE_TYPE, ya as TRIGGER_API_SHAPES, ba as TRIGGER_FUNCTION_NAMES, Qa as USERNAME_CONTAINS_AT_MESSAGE, Za as USERNAME_INVALID_CHARACTERS_MESSAGE, Z as WEEK_MS, r as actionDependencySchema, re as actionExecutionErrorSchema, ce as actionExecutionInsertSchema, ae as actionExecutionLogEntrySchema, oe as actionExecutionLogsSchema, ie as actionExecutionResultSchema, se as actionExecutionSchema, c as actionExecutionStatusSchema, ne as actionExecutionTriggerIdSchema, a as actionInsertSchema, S as actionNodeSchema, te as actionResponseSchema, s as actionSchema, ee as actionSecretNameSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, le as actionVersionInsertSchema, ue as actionVersionSchema, Ji as activeUsersResponseSchema, fe as actorSchema, Fe as addressSchema, pn as allowedTriggersForHook, ra as analyticsColumnMetaSchema, Zi as analyticsGroupBySchema, Xi as analyticsIntervalSchema, aa as analyticsQueryResponseSchema, Yi as analyticsResourceSchema, ia as analyticsStatisticsSchema, Qi as analyticsUserTypeSchema, ar as attackProtectionSchema, de as auditCategorySchema, ve as auditEventInsertSchema, ye as auditEventSchema, _e as auth0ClientSchema, nt as auth0FlowInsertSchema, tt as auth0FlowSchema, je as auth0QuerySchema, we as auth0UpdateUserActionSchema, Re as auth0UserResponseSchema, ot as authParamsSchema, ga as authenticationMethodInsertSchema, _a as authenticationMethodSchema, pa as authenticationMethodTypeSchema, l as baseUserSchema, Jt as blockComponentSchema, Fr as bordersSchema, st as brandingSchema, nr as breachedPasswordDetectionSchema, rr as bruteForceProtectionSchema, Ya as buildRefreshTokenRetention, Ja as buildSessionRetention, h as buttonComponentSchema, at as claimsRequestSchema, We as clientGrantInsertSchema, Ke as clientGrantListSchema, Ge as clientGrantSchema, He as clientInsertSchema, Je as clientRegistrationTokenInsertSchema, Ye as clientRegistrationTokenSchema, qe as clientRegistrationTokenTypeSchema, Ue as clientSchema, lt as codeInsertSchema, ut as codeSchema, ct as codeTypeSchema, Ir as colorsSchema, on as componentMessageSchema, y as componentSchema, ft as connectionInsertSchema, dt as connectionOptionsSchema, pt as connectionSchema, u as coordinatesSchema, Ca as createPassthroughAdapter, wa as createWriteOnlyAdapter, vt as customDomainCertificateUploadSchema, E as customDomainInsertSchema, ht as customDomainSchema, gt as customDomainUpdateSchema, _t as customDomainWithTenantIdSchema, ca as customTextEntrySchema, sa as customTextSchema, qi as dailyStatsSchema, Pa as decodeBase32, Ma as decodeBase64, Oa as decodeBase64Url, Aa as decodeBase64UrlString, La as decodeCursor, si as emailProviderSchema, ci as emailTemplateNameSchema, li as emailTemplateSchema, Ce as emailVerificationRulesSchema, Te as emailVerifyActionSchema, Na as encodeBase32, ja as encodeBase64, Da as encodeBase64Url, ka as encodeBase64UrlString, Ia as encodeCursor, Fa as encodeHex, et as endingSchema, Ba as escapeLuceneValue, Xt as fieldComponentSchema, Oe as flowActionStepSchema, ke as flowInsertSchema, Ae as flowSchema, _ as flowsFieldComponentSchema, x as flowsFlowNodeSchema, b as flowsStepNodeSchema, K as fontDetailsSchema, Lr as fontsSchema, Qt as formControlSchema, rn as formInsertSchema, j as formNodeComponentDefinition, nn as formNodeSchema, an as formSchema, v as genericComponentSchema, Ze as genericNodeSchema, Ta as getConnectionIdentifierConfig, Wn as getLogTypeCategory, Un as getLogTypeDescription, Si as grantInsertSchema, Ci as grantSchema, Wr as handlerConfigSchema, Dn as hookCodeInsertSchema, On as hookCodeSchema, bn as hookInsertSchema, R as hookPageId, En as hookSchema, z as hookTemplateId, mn as hookTemplates, Pe as identitySchema, va as importMetadataSchema, jn as inviteInsertSchema, Mn as inviteSchema, An as inviteeSchema, kn as inviterSchema, ln as isBlockComponent, fa as isDatabaseConnectionStrategy, Ga as isEmailSearchTerm, ro as isFeatureNotSupportedError, dn as isFieldComponent, Ea as isPlainObject, un as isWidgetComponent, Pn as jwksKeySchema, Nn as jwksSchema, g as legalComponentSchema, ge as locationInfoSchema, qn as logInsertSchema, Jn as logSchema, Xn as logStreamFilterSchema, Zn as logStreamInsertSchema, Qn as logStreamSchema, U as logStreamStatusSchema, Yn as logStreamTypeSchema, Hn as logTypeCategories, Vn as logTypeDescriptions, V as loginSessionAuthStrategySchema, Rn as loginSessionInsertSchema, zn as loginSessionSchema, Ln as loginSessionStateSchema, Ur as matchSchema, $n as migrationProviderTypeSchema, W as migrationSourceCredentialsSchema, er as migrationSourceInsertSchema, tr as migrationSourceSchema, Qe as nodeSchema, eo as normalizeUsername, Fn as openIDConfigurationSchema, Ii as organizationBrandingSchema, Vi as organizationConnectionInsertSchema, Ui as organizationConnectionListSchema, Hi as organizationConnectionSchema, Li as organizationEnabledConnectionSchema, zi as organizationInsertSchema, Bi as organizationSchema, Ri as organizationTokenQuotaSchema, Rr as pageBackgroundSchema, xa as parseUserId, or as passwordInsertSchema, sr as passwordSchema, Ne as profileDataSchema, oa as promptScreenSchema, Hr as promptSettingSchema, q as proxyRouteInsertSchema, Gr as proxyRouteSchema, Kr as proxyRouteUpdateSchema, De as redirectActionSchema, ui as refreshTokenInsertSchema, ta as refreshTokenRetentionCohortSchema, na as refreshTokenRetentionResponseSchema, di as refreshTokenSchema, me as requestContextSchema, gi as resourceServerInsertSchema, vi as resourceServerListSchema, hi as resourceServerOptionsSchema, _i as resourceServerSchema, mi as resourceServerScopeSchema, he as responseContextSchema, m as richTextComponentSchema, Ni as roleInsertSchema, Fi as roleListSchema, yi as rolePermissionInsertSchema, xi as rolePermissionListSchema, bi as rolePermissionSchema, Pi as roleSchema, Ar as rolloutInsertSchema, Or as rolloutKindSchema, jr as rolloutSchema, kr as rolloutStatusSchema, Mr as rolloutUpdateSchema, Ua as sanitizeLuceneQuery, ti as scimConfigurationInsertSchema, ni as scimConfigurationSchema, ai as scimExternalIdInsertSchema, oi as scimExternalIdSchema, ei as scimMappingEntrySchema, ri as scimTokenInsertSchema, ii as scimTokenSchema, sn as screenLinkSchema, lr as sessionInsertSchema, $i as sessionRetentionCohortSchema, ea as sessionRetentionResponseSchema, qa as sessionRetentionWindow, ur as sessionSchema, dr as signingKeySchema, pi as smsProviderSchema, fi as smsSendParamsSchema, Ha as splitLuceneOrGroups, $e as startSchema, J as subjectTokenTypeSchema, ir as suspiciousIpThrottlingSchema, pe as targetSchema, fr as tenantInsertSchema, gr as tenantOperationEngineSchema, Sr as tenantOperationEventInsertSchema, xr as tenantOperationEventOutcomeSchema, Cr as tenantOperationEventSchema, vr as tenantOperationInsertSchema, mr as tenantOperationKindSchema, Tr as tenantOperationRowInsertSchema, Dr as tenantOperationRowOutcomeSchema, Er as tenantOperationRowSchema, G as tenantOperationRowStatusSchema, yr as tenantOperationSchema, hr as tenantOperationStatusSchema, br as tenantOperationUpdateSchema, pr as tenantSchema, Ki as tenantSettingsSchema, Br as themeInsertSchema, Vr as themeSchema, Yr as tokenExchangeJwtAlgorithmSchema, Y as tokenExchangeJwtVerificationSchema, Zr as tokenExchangeProfileInsertSchema, Qr as tokenExchangeProfileSchema, $r as tokenExchangeProfileUpdateSchema, Xr as tokenExchangeUserMappingSchema, Pr as tokenResponseSchema, Ra as tokenizeLuceneQuery, Me as totalsSchema, cn as uiScreenSchema, za as unescapeLuceneValue, Va as unquoteLuceneValue, wi as userActivitySchema, Ie as userInsertSchema, Wi as userOrganizationInsertSchema, Gi as userOrganizationSchema, Ti as userPermissionInsertSchema, Di as userPermissionListSchema, Ei as userPermissionSchema, ki as userPermissionWithDetailsListSchema, Oi as userPermissionWithDetailsSchema, ze as userResponseSchema, Ai as userRoleInsertSchema, Mi as userRoleListSchema, ji as userRoleSchema, Le as userSchema, $a as usernameHasOnlyAllowedCharacters, to as validateUsername, mt as verificationMethodsSchema, Ka as weekIndex, $ as weekStartMs, Yt as widgetComponentSchema, zr as widgetSchema };
+export { be as Auth0ActionEnum, Gn as Auth0Client, T as AuthorizationResponseMode, w as AuthorizationResponseType, nt as CodeChallengeMethod, S as ComponentCategory, x as ComponentType, ga as DATABASE_CONNECTION_STRATEGY, xe as EmailActionEnum, Xt as FORM_FIELD_TYPES, so as FeatureNotSupportedError, ye as FlowActionTypeEnum, Pr as GrantType, vr as KNOWN_TENANT_OPERATION_ENGINES, Kn as LocationInfo, U as LogTypes, In as LoginSessionState, Q as MONDAY_EPOCH_SHIFT_MS, Ke as NodeType, Da as PRESERVE_LOCATION_HEADER, Yr as RESERVED_SUBJECT_TOKEN_TYPE_PREFIXES, Te as RedirectTargetEnum, ma as Strategy, ha as StrategyType, Tr as TERMINAL_TENANT_OPERATION_ROW_STATUSES, Jr as TOKEN_EXCHANGE_PROFILE_TYPE, wa as TRIGGER_API_SHAPES, Ta as TRIGGER_FUNCTION_NAMES, ro as USERNAME_CONTAINS_AT_MESSAGE, no as USERNAME_INVALID_CHARACTERS_MESSAGE, Z as WEEK_MS, r as actionDependencySchema, ne as actionExecutionErrorSchema, se as actionExecutionInsertSchema, ie as actionExecutionLogEntrySchema, ae as actionExecutionLogsSchema, re as actionExecutionResultSchema, oe as actionExecutionSchema, l as actionExecutionStatusSchema, c as actionExecutionTriggerIdSchema, a as actionInsertSchema, Ye as actionNodeSchema, te as actionResponseSchema, s as actionSchema, ee as actionSecretNameSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, ce as actionVersionInsertSchema, le as actionVersionSchema, Yi as activeUsersResponseSchema, de as actorSchema, d as addressSchema, pn as allowedTriggersForHook, ia as analyticsColumnMetaSchema, Qi as analyticsGroupBySchema, Zi as analyticsIntervalSchema, oa as analyticsQueryResponseSchema, Xi as analyticsResourceSchema, aa as analyticsStatisticsSchema, $i as analyticsUserTypeSchema, or as attackProtectionSchema, ue as auditCategorySchema, _e as auditEventInsertSchema, ve as auditEventSchema, ge as auth0ClientSchema, tt as auth0FlowInsertSchema, et as auth0FlowSchema, Ae as auth0QuerySchema, Ce as auth0UpdateUserActionSchema, Ne as auth0UserResponseSchema, at as authParamsSchema, xa as authenticationMethodInsertSchema, Sa as authenticationMethodSchema, va as authenticationMethodTypeSchema, f as baseUserSchema, qt as blockComponentSchema, Ir as bordersSchema, ot as brandingSchema, rr as breachedPasswordDetectionSchema, ir as bruteForceProtectionSchema, eo as buildRefreshTokenRetention, $a as buildSessionRetention, Ve as buttonComponentSchema, it as claimsRequestSchema, g as clientGrantInsertSchema, Re as clientGrantListSchema, _ as clientGrantSchema, h as clientInsertSchema, y as clientRegistrationTokenInsertSchema, ze as clientRegistrationTokenSchema, v as clientRegistrationTokenTypeSchema, Le as clientSchema, ct as codeInsertSchema, lt as codeSchema, st as codeTypeSchema, Lr as colorsSchema, an as componentMessageSchema, Ge as componentSchema, dt as connectionInsertSchema, ut as connectionOptionsSchema, ft as connectionSchema, b as coordinatesSchema, Oa as createPassthroughAdapter, ka as createWriteOnlyAdapter, _t as customDomainCertificateUploadSchema, D as customDomainInsertSchema, mt as customDomainSchema, ht as customDomainUpdateSchema, gt as customDomainWithTenantIdSchema, la as customTextEntrySchema, ca as customTextSchema, Ji as dailyStatsSchema, za as decodeBase32, La as decodeBase64, Na as decodeBase64Url, Fa as decodeBase64UrlString, Ha as decodeCursor, ci as emailProviderSchema, li as emailTemplateNameSchema, ui as emailTemplateSchema, Se as emailVerificationRulesSchema, we as emailVerifyActionSchema, Ra as encodeBase32, Ia as encodeBase64, Ma as encodeBase64Url, Pa as encodeBase64UrlString, Va as encodeCursor, Ba as encodeHex, $e as endingSchema, Ga as escapeLuceneValue, Yt as fieldComponentSchema, De as flowActionStepSchema, Oe as flowInsertSchema, ke as flowSchema, Ue as flowsFieldComponentSchema, Je as flowsFlowNodeSchema, qe as flowsStepNodeSchema, K as fontDetailsSchema, Rr as fontsSchema, Zt as formControlSchema, nn as formInsertSchema, M as formNodeComponentDefinition, tn as formNodeSchema, rn as formSchema, We as genericComponentSchema, Xe as genericNodeSchema, Aa as getConnectionIdentifierConfig, Wn as getLogTypeCategory, Un as getLogTypeDescription, Ci as grantInsertSchema, wi as grantSchema, Gr as handlerConfigSchema, Dn as hookCodeInsertSchema, On as hookCodeSchema, bn as hookInsertSchema, z as hookPageId, En as hookSchema, B as hookTemplateId, mn as hookTemplates, Me as identitySchema, Ca as importMetadataSchema, jn as inviteInsertSchema, Mn as inviteSchema, An as inviteeSchema, kn as inviterSchema, ln as isBlockComponent, _a as isDatabaseConnectionStrategy, Xa as isEmailSearchTerm, co as isFeatureNotSupportedError, dn as isFieldComponent, ja as isPlainObject, un as isWidgetComponent, Pn as jwksKeySchema, Nn as jwksSchema, He as legalComponentSchema, he as locationInfoSchema, qn as logInsertSchema, Jn as logSchema, Xn as logStreamFilterSchema, Zn as logStreamInsertSchema, Qn as logStreamSchema, W as logStreamStatusSchema, Yn as logStreamTypeSchema, Hn as logTypeCategories, Vn as logTypeDescriptions, H as loginSessionAuthStrategySchema, Rn as loginSessionInsertSchema, zn as loginSessionSchema, Ln as loginSessionStateSchema, Wr as matchSchema, $n as migrationProviderTypeSchema, er as migrationSourceCredentialsSchema, tr as migrationSourceInsertSchema, nr as migrationSourceSchema, Ze as nodeSchema, ao as normalizeUsername, Fn as openIDConfigurationSchema, Li as organizationBrandingSchema, Hi as organizationConnectionInsertSchema, Wi as organizationConnectionListSchema, Ui as organizationConnectionSchema, Ri as organizationEnabledConnectionSchema, Bi as organizationInsertSchema, Vi as organizationSchema, zi as organizationTokenQuotaSchema, zr as pageBackgroundSchema, Ea as parseUserId, sr as passwordInsertSchema, cr as passwordSchema, u as profileDataSchema, ua as promptPartialInsertionPoints, pa as promptPartialsEntrySchema, fa as promptPartialsSchema, sa as promptScreenSchema, Ur as promptSettingSchema, q as proxyRouteInsertSchema, Kr as proxyRouteSchema, qr as proxyRouteUpdateSchema, Ee as redirectActionSchema, di as refreshTokenInsertSchema, na as refreshTokenRetentionCohortSchema, ra as refreshTokenRetentionResponseSchema, fi as refreshTokenSchema, pe as requestContextSchema, _i as resourceServerInsertSchema, yi as resourceServerListSchema, gi as resourceServerOptionsSchema, vi as resourceServerSchema, hi as resourceServerScopeSchema, me as responseContextSchema, Be as richTextComponentSchema, Pi as roleInsertSchema, Ii as roleListSchema, bi as rolePermissionInsertSchema, Si as rolePermissionListSchema, xi as rolePermissionSchema, Fi as roleSchema, jr as rolloutInsertSchema, kr as rolloutKindSchema, Mr as rolloutSchema, Ar as rolloutStatusSchema, Nr as rolloutUpdateSchema, Ja as sanitizeLuceneQuery, ni as scimConfigurationInsertSchema, ri as scimConfigurationSchema, oi as scimExternalIdInsertSchema, si as scimExternalIdSchema, ti as scimMappingEntrySchema, ii as scimTokenInsertSchema, ai as scimTokenSchema, on as screenLinkSchema, ur as sessionInsertSchema, ea as sessionRetentionCohortSchema, ta as sessionRetentionResponseSchema, Qa as sessionRetentionWindow, dr as sessionSchema, fr as signingKeySchema, mi as smsProviderSchema, pi as smsSendParamsSchema, qa as splitLuceneOrGroups, Qe as startSchema, J as subjectTokenTypeSchema, ar as suspiciousIpThrottlingSchema, fe as targetSchema, pr as tenantInsertSchema, _r as tenantOperationEngineSchema, Cr as tenantOperationEventInsertSchema, Sr as tenantOperationEventOutcomeSchema, wr as tenantOperationEventSchema, yr as tenantOperationInsertSchema, hr as tenantOperationKindSchema, Er as tenantOperationRowInsertSchema, Or as tenantOperationRowOutcomeSchema, Dr as tenantOperationRowSchema, G as tenantOperationRowStatusSchema, br as tenantOperationSchema, gr as tenantOperationStatusSchema, xr as tenantOperationUpdateSchema, mr as tenantSchema, qi as tenantSettingsSchema, Vr as themeInsertSchema, Hr as themeSchema, Xr as tokenExchangeJwtAlgorithmSchema, Y as tokenExchangeJwtVerificationSchema, Qr as tokenExchangeProfileInsertSchema, $r as tokenExchangeProfileSchema, ei as tokenExchangeProfileUpdateSchema, Zr as tokenExchangeUserMappingSchema, Fr as tokenResponseSchema, Ua as tokenizeLuceneQuery, je as totalsSchema, sn as uiScreenPartialsSchema, cn as uiScreenSchema, Wa as unescapeLuceneValue, Ka as unquoteLuceneValue, Ti as userActivitySchema, p as userInsertSchema, Gi as userOrganizationInsertSchema, Ki as userOrganizationSchema, Ei as userPermissionInsertSchema, Oi as userPermissionListSchema, Di as userPermissionSchema, Ai as userPermissionWithDetailsListSchema, ki as userPermissionWithDetailsSchema, Pe as userResponseSchema, ji as userRoleInsertSchema, Ni as userRoleListSchema, Mi as userRoleSchema, m as userSchema, io as usernameHasOnlyAllowedCharacters, oo as validateUsername, pt as verificationMethodsSchema, Za as weekIndex, $ as weekStartMs, Jt as widgetComponentSchema, Br as widgetSchema };