@authhero/adapter-interfaces 4.21.0 → 4.23.0

package/dist/adapter-interfaces.mjs

@@ -3,28 +3,41 @@ import { z as e } from "@hono/zod-openapi";
 var t = e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}), n = e.object({
+}), n = e.enum([
+	"local",
+	"shared",
+	"platform"
+]), r = e.enum([
+	"none",
+	"secrets",
+	"fields"
+]), i = {
+	scope: n.optional(),
+	override: r.optional(),
+	enforce: e.boolean().optional()
+}, a = e.object({
 	id: e.string(),
 	version: e.string().optional()
-}), r = e.object({
+}), o = e.object({
 	name: e.string(),
 	version: e.string()
-}), i = e.object({
+}), s = e.object({
 	name: e.string(),
 	value: e.string().optional()
-}), a = e.object({
+}), c = e.object({
 	name: e.string().max(255),
 	code: e.string().max(1e5),
-	supported_triggers: e.array(n).optional(),
+	supported_triggers: e.array(a).optional(),
 	runtime: e.string().max(50).optional(),
-	dependencies: e.array(r).optional(),
-	secrets: e.array(i).optional(),
+	dependencies: e.array(o).optional(),
+	secrets: e.array(s).optional(),
 	is_system: e.boolean().optional(),
+	...i,
 	inherit: e.boolean().optional()
-}), o = a.partial().extend({
+}), ee = c.partial().extend({
 	status: e.enum(["draft", "built"]).optional(),
 	deployed_at: e.string().optional()
-}), s = a.extend({
+}), l = c.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	status: e.enum(["draft", "built"]).default("built"),
@@ -33,23 +46,23 @@ var t = e.object({
 		name: e.string(),
 		value: e.string().optional()
 	})).optional()
-}).extend(t.shape), ee = e.object({ name: e.string() }), te = s.extend({ secrets: e.array(ee).optional() }), c = e.string(), l = e.enum([
+}).extend(t.shape), te = e.object({ name: e.string() }), ne = l.extend({ secrets: e.array(te).optional() }), re = e.string(), ie = e.enum([
 	"unspecified",
 	"pending",
 	"final",
 	"partial",
 	"canceled",
 	"suspended"
-]), ne = e.object({
+]), ae = e.object({
 	id: e.string(),
 	msg: e.string(),
 	url: e.string().optional()
-}), re = e.object({
+}), oe = e.object({
 	action_name: e.string(),
-	error: ne.nullable(),
+	error: ae.nullable(),
 	started_at: e.string(),
 	ended_at: e.string()
-}), ie = e.object({
+}), se = e.object({
 	level: e.enum([
 		"log",
 		"info",
@@ -58,40 +71,40 @@ var t = e.object({
 		"debug"
 	]),
 	message: e.string()
-}), ae = e.array(e.object({
+}), ce = e.array(e.object({
 	action_name: e.string(),
-	lines: e.array(ie)
-})), oe = e.object({
+	lines: e.array(se)
+})), le = e.object({
 	id: e.string(),
 	tenant_id: e.string(),
-	trigger_id: c,
-	status: l,
-	results: e.array(re),
-	logs: ae.optional(),
+	trigger_id: re,
+	status: ie,
+	results: e.array(oe),
+	logs: ce.optional(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), se = oe.omit({
+}), ue = le.omit({
 	tenant_id: !0,
 	created_at: !0,
 	updated_at: !0
-}), ce = e.object({
+}), de = e.object({
 	action_id: e.string(),
 	code: e.string().max(1e5),
 	runtime: e.string().max(50).optional(),
-	dependencies: e.array(r).optional(),
-	secrets: e.array(i).optional(),
-	supported_triggers: e.array(n).optional(),
+	dependencies: e.array(o).optional(),
+	secrets: e.array(s).optional(),
+	supported_triggers: e.array(a).optional(),
 	deployed: e.boolean().default(!0)
-}), le = ce.extend({
+}), fe = de.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	number: e.number().int()
-}).extend(t.shape), ue = e.enum([
+}).extend(t.shape), pe = e.enum([
 	"user_action",
 	"admin_action",
 	"system",
 	"api"
-]), de = e.object({
+]), me = e.object({
 	type: e.enum([
 		"user",
 		"admin",
@@ -105,7 +118,7 @@ var t = e.object({
 	org_name: e.string().optional(),
 	scopes: e.array(e.string()).optional(),
 	client_id: e.string().optional()
-}), fe = e.object({
+}), he = e.object({
 	type: e.string(),
 	id: e.string(),
 	before: e.record(e.string(), e.unknown()).optional(),
@@ -114,7 +127,18 @@ var t = e.object({
 		old: e.unknown(),
 		new: e.unknown()
 	})).optional()
-}), pe = e.object({
+}), ge = e.object({
+	user: e.object({
+		user_id: e.string(),
+		name: e.string().optional(),
+		email: e.string().optional()
+	}).optional(),
+	strategy: e.string(),
+	credentials: e.object({
+		jti: e.string().optional(),
+		scopes: e.array(e.string()).optional()
+	}).optional()
+}), _e = e.object({
 	method: e.string(),
 	path: e.string(),
 	query: e.record(e.string(), e.string()).optional(),
@@ -123,31 +147,32 @@ var t = e.object({
 	user_agent: e.string().optional(),
 	correlation_id: e.string().optional(),
 	redirect_uri: e.string().optional(),
-	authorization_url: e.string().optional()
-}), me = e.object({
+	authorization_url: e.string().optional(),
+	auth: ge.optional()
+}), ve = e.object({
 	status_code: e.number(),
 	body: e.unknown().optional()
-}), he = e.object({
+}), ye = e.object({
 	country_code: e.string(),
 	city_name: e.string(),
 	latitude: e.string(),
 	longitude: e.string(),
 	time_zone: e.string(),
 	continent_code: e.string()
-}), ge = e.object({
+}), be = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.record(e.string(), e.string()).optional()
-}), _e = e.object({
+}), xe = e.object({
 	tenant_id: e.string(),
 	event_type: e.string(),
 	log_type: e.string(),
 	description: e.string().optional(),
-	category: ue,
-	actor: de,
-	target: fe,
-	request: pe,
-	response: me.optional(),
+	category: pe,
+	actor: me,
+	target: he,
+	request: _e,
+	response: ve.optional(),
 	connection: e.string().optional(),
 	connection_id: e.string().optional(),
 	client_name: e.string().optional(),
@@ -155,32 +180,32 @@ var t = e.object({
 	strategy_type: e.string().optional(),
 	audience: e.string().optional(),
 	scope: e.string().optional(),
-	location: he.optional(),
-	auth0_client: ge.optional(),
+	location: ye.optional(),
+	auth0_client: be.optional(),
 	hostname: e.string(),
 	is_mobile: e.boolean().optional(),
 	execution_id: e.string().optional(),
 	details: e.record(e.string(), e.unknown()).optional(),
 	login_session_id: e.string().optional(),
 	timestamp: e.string()
-}), ve = _e.extend({ id: e.string() }), ye = e.enum([
+}), Se = xe.extend({ id: e.string() }), Ce = e.enum([
 	"AUTH0",
 	"EMAIL",
 	"REDIRECT"
-]), be = e.enum([
+]), we = e.enum([
 	"CREATE_USER",
 	"GET_USER",
 	"UPDATE_USER",
 	"SEND_REQUEST",
 	"SEND_EMAIL"
-]), xe = e.enum(["VERIFY_EMAIL"]), Se = e.object({
+]), Te = e.enum(["VERIFY_EMAIL"]), Ee = e.object({
 	require_mx_record: e.boolean().optional(),
 	block_aliases: e.boolean().optional(),
 	block_free_emails: e.boolean().optional(),
 	block_disposable_emails: e.boolean().optional(),
 	blocklist: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional()
-}), Ce = e.object({
+}), De = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("AUTH0"),
@@ -192,7 +217,7 @@ var t = e.object({
 		user_id: e.string(),
 		changes: e.record(e.string(), e.any())
 	})
-}), we = e.object({
+}), Oe = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("EMAIL"),
@@ -201,13 +226,13 @@ var t = e.object({
 	mask_output: e.boolean().optional(),
 	params: e.object({
 		email: e.string(),
-		rules: Se.optional()
+		rules: Ee.optional()
 	})
-}), Te = e.enum([
+}), ke = e.enum([
 	"change-email",
 	"account",
 	"custom"
-]), Ee = e.object({
+]), Ae = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("REDIRECT"),
@@ -215,32 +240,32 @@ var t = e.object({
 	allow_failure: e.boolean().optional(),
 	mask_output: e.boolean().optional(),
 	params: e.object({
-		target: Te.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
+		target: ke.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
 		custom_url: e.string().optional().openapi({ description: "Custom URL to redirect to when target is 'custom'" })
 	})
-}), De = e.union([
-	Ce,
-	we,
-	Ee
-]), Oe = e.object({
+}), je = e.union([
+	De,
+	Oe,
+	Ae
+]), u = e.object({
 	name: e.string().min(1).max(150).openapi({ description: "The name of the flow" }),
-	actions: e.array(De).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
-}), ke = Oe.extend(t.shape).extend({ id: e.string().openapi({
+	actions: e.array(je).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
+}), Me = u.extend(t.shape).extend({ id: e.string().openapi({
 	description: "Unique identifier for the flow",
 	example: "af_12tMpdJ3iek7svMyZkSh5M"
-}) }), Ae = e.object({
+}) }), Ne = e.object({
 	page: e.string().min(0).optional().default("0").transform((e) => parseInt(e, 10)).openapi({ description: "The page number where 0 is the first page" }),
 	per_page: e.string().min(1).optional().default("50").transform((e) => parseInt(e, 10)).openapi({ description: "The number of items per page. Defaults to 50." }),
 	include_totals: e.string().optional().default("false").transform((e) => e === "true").openapi({ description: "If the total number of items should be included in the response" }),
 	sort: e.string().regex(/^.+:(-1|1)$/).optional().openapi({ description: "A property that should have the format 'string:-1' or 'string:1'" }),
 	q: e.string().optional().openapi({ description: "A lucene query string used to filter the results" })
-}), je = e.object({
+}), Pe = e.object({
 	start: e.number(),
 	limit: e.number(),
 	length: e.number(),
 	total: e.number().optional(),
 	next: e.string().optional()
-}), u = e.object({
+}), d = e.object({
 	email: e.string().optional(),
 	email_verified: e.boolean().optional(),
 	name: e.string().optional(),
@@ -249,7 +274,7 @@ var t = e.object({
 	phone_number: e.string().optional(),
 	phone_verified: e.boolean().optional(),
 	family_name: e.string().optional()
-}).catchall(e.any()), Me = e.object({
+}).catchall(e.any()), f = e.object({
 	connection: e.string(),
 	user_id: e.string(),
 	provider: e.string(),
@@ -262,15 +287,15 @@ var t = e.object({
 	access_token: e.string().optional(),
 	access_token_secret: e.string().optional(),
 	refresh_token: e.string().optional(),
-	profileData: u.optional()
-}), d = e.object({
+	profileData: d.optional()
+}), p = e.object({
 	formatted: e.string().optional(),
 	street_address: e.string().optional(),
 	locality: e.string().optional(),
 	region: e.string().optional(),
 	postal_code: e.string().optional(),
 	country: e.string().optional()
-}).optional(), f = e.object({
+}).optional(), m = e.object({
 	email: e.string().transform((e) => e.toLowerCase()).optional(),
 	username: e.string().refine((e) => !e.includes("@"), { message: "Usernames must not contain \"@\". Use the email field for email addresses." }).optional(),
 	phone_number: e.string().optional(),
@@ -293,8 +318,8 @@ var t = e.object({
 	gender: e.string().optional(),
 	birthdate: e.string().optional(),
 	zoneinfo: e.string().optional(),
-	address: d
-}), p = f.extend({
+	address: p
+}), h = m.extend({
 	email_verified: e.boolean().default(!1),
 	verify_email: e.boolean().optional(),
 	last_ip: e.string().optional(),
@@ -309,29 +334,29 @@ var t = e.object({
 		hash: e.string(),
 		algorithm: e.string()
 	}).optional()
-}), m = p.omit({ password: !0 }).extend(t.shape).extend({
+}), g = h.omit({ password: !0 }).extend(t.shape).extend({
 	user_id: e.string(),
 	provider: e.string(),
 	is_social: e.boolean(),
 	email: e.string().optional(),
 	login_count: e.number().default(0),
-	identities: e.array(Me).optional()
-}), Ne = m.omit({ registration_completed_at: !0 }), Pe = f.extend({
+	identities: e.array(f).optional()
+}), Fe = g.omit({ registration_completed_at: !0 }), Ie = m.extend({
 	login_count: e.number(),
 	multifactor: e.array(e.string()).optional(),
 	last_ip: e.string().optional(),
 	last_login: e.string().optional(),
 	user_id: e.string()
-}).catchall(e.any()), Fe = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Ie = (e = 21) => {
+}).catchall(e.any()), Le = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Re = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += Fe[n[e] & 63];
+	for (; e--;) t += Le[n[e] & 63];
 	return t;
-}, h = e.object({
+}, _ = e.object({
 	client_id: e.string().optional().openapi({ description: "ID of this client. Generated server-side if omitted (Auth0 behavior)." }),
 	name: e.string().min(1).openapi({ description: "Name of this client (min length: 1 character, does not allow < or >)." }),
 	description: e.string().max(140).optional().openapi({ description: "Free text description of this client (max length: 140 characters)." }),
 	global: e.boolean().default(!1).openapi({ description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)." }),
-	client_secret: e.string().default(() => Ie()).optional().openapi({ description: "Client secret (which you must not make public)." }),
+	client_secret: e.string().default(() => Re()).optional().openapi({ description: "Client secret (which you must not make public)." }),
 	app_type: e.enum([
 		"native",
 		"spa",
@@ -445,10 +470,10 @@ var t = e.object({
 	registration_metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Arbitrary metadata captured at Dynamic Client Registration time that isn't a first-class client field (e.g. integration_type, domain). Also stores `iat_constraints` for clients created via IAT so RFC 7592 PUT can enforce field immutability." }),
 	token_exchange: e.object({ allow_any_profile_of_type: e.array(e.literal("custom_authentication")).optional() }).optional().openapi({ description: "Custom Token Exchange settings. Set `allow_any_profile_of_type` to `[\"custom_authentication\"]` to let this client exchange subject tokens through the tenant's token exchange profiles." }),
 	user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({ description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies." })
-}), Le = e.object({
+}), ze = e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(h.shape).extend({ client_id: e.string() }), g = e.object({
+}).extend(_.shape).extend({ client_id: e.string() }), v = e.object({
 	client_id: e.string().min(1).openapi({ description: "ID of the client." }),
 	audience: e.string().min(1).openapi({ description: "The audience (API identifier) of this client grant." }),
 	scope: e.array(e.string()).optional().openapi({ description: "Scopes allowed for this client grant." }),
@@ -461,38 +486,38 @@ var t = e.object({
 	is_system: e.boolean().optional().openapi({ description: "If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly." }),
 	subject_type: e.enum(["client", "user"]).optional().openapi({ description: "The type of application access the client grant allows. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." }),
 	authorization_details_types: e.array(e.string()).optional().openapi({ description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." })
-}), _ = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(g.shape).extend({
+}), y = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(v.shape).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Re = e.array(_), v = e.enum(["iat", "rat"]), y = e.object({
+}), Be = e.array(y), b = e.enum(["iat", "rat"]), x = e.object({
 	id: e.string(),
 	token_hash: e.string(),
-	type: v,
+	type: b,
 	client_id: e.string().optional(),
 	sub: e.string().optional(),
 	constraints: e.record(e.string(), e.unknown()).optional(),
 	single_use: e.boolean().default(!1),
 	expires_at: e.string().optional()
-}), ze = e.object({
+}), Ve = e.object({
 	created_at: e.string(),
 	used_at: e.string().optional(),
 	revoked_at: e.string().optional()
-}).extend(y.shape), b = e.object({
+}).extend(x.shape), S = e.object({
 	x: e.number(),
 	y: e.number()
-}), x = /* @__PURE__ */ function(e) {
+}), He = /* @__PURE__ */ function(e) {
 	return e.RICH_TEXT = "RICH_TEXT", e.NEXT_BUTTON = "NEXT_BUTTON", e.BACK_BUTTON = "BACK_BUTTON", e.SUBMIT_BUTTON = "SUBMIT_BUTTON", e.DIVIDER = "DIVIDER", e.TEXT = "TEXT", e.EMAIL = "EMAIL", e.PASSWORD = "PASSWORD", e.NUMBER = "NUMBER", e.PHONE = "PHONE", e.DATE = "DATE", e.CHECKBOX = "CHECKBOX", e.RADIO = "RADIO", e.SELECT = "SELECT", e.HIDDEN = "HIDDEN", e.LEGAL = "LEGAL", e;
-}({}), S = /* @__PURE__ */ function(e) {
+}({}), Ue = /* @__PURE__ */ function(e) {
 	return e.BLOCK = "BLOCK", e.FIELD = "FIELD", e;
 }({}), C = e.object({
 	id: e.string(),
-	category: e.nativeEnum(S),
-	type: e.nativeEnum(x)
-}), Be = C.extend({
+	category: e.nativeEnum(Ue),
+	type: e.nativeEnum(He)
+}), We = C.extend({
 	category: e.literal("BLOCK"),
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string() }).passthrough()
-}), Ve = C.extend({
+}), Ge = C.extend({
 	category: e.literal("BLOCK"),
 	type: e.union([
 		e.literal("NEXT_BUTTON"),
@@ -500,13 +525,13 @@ var t = e.object({
 		e.literal("SUBMIT_BUTTON")
 	]),
 	config: e.object({ text: e.string() }).passthrough()
-}), He = C.extend({
+}), Ke = C.extend({
 	category: e.literal("FIELD"),
 	type: e.literal("LEGAL"),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional(),
 	config: e.object({ text: e.string() }).passthrough()
-}), Ue = C.extend({
+}), qe = C.extend({
 	category: e.literal("FIELD"),
 	type: e.union([
 		e.literal("TEXT"),
@@ -526,40 +551,40 @@ var t = e.object({
 		label: e.string().optional(),
 		placeholder: e.string().optional()
 	}).passthrough()
-}), We = e.object({
+}), Je = e.object({
 	id: e.string(),
 	category: e.string(),
 	type: e.string()
-}).passthrough(), Ge = e.union([
-	Be,
-	Ve,
-	He,
-	Ue,
-	We
-]), Ke = /* @__PURE__ */ function(e) {
+}).passthrough(), Ye = e.union([
+	We,
+	Ge,
+	Ke,
+	qe,
+	Je
+]), Xe = /* @__PURE__ */ function(e) {
 	return e.STEP = "STEP", e.FLOW = "FLOW", e.CONDITION = "CONDITION", e.ACTION = "ACTION", e;
-}({}), qe = e.object({
+}({}), Ze = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: b,
+	coordinates: S,
 	alias: e.string().optional(),
 	config: e.object({
-		components: e.array(Ge),
+		components: e.array(Ye),
 		next_node: e.string()
 	}).passthrough()
-}), Je = e.object({
+}), Qe = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: b,
+	coordinates: S,
 	alias: e.string().optional(),
 	config: e.object({
 		flow_id: e.string(),
 		next_node: e.string()
 	})
-}), Ye = e.object({
+}), $e = e.object({
 	id: e.string(),
 	type: e.literal("ACTION"),
-	coordinates: b,
+	coordinates: S,
 	alias: e.string().optional(),
 	config: e.object({
 		action_type: e.enum(["REDIRECT"]).openapi({ description: "The type of action to perform" }),
@@ -571,35 +596,35 @@ var t = e.object({
 		custom_url: e.string().optional().openapi({ description: "Custom URL when target is 'custom'" }),
 		next_node: e.string().openapi({ description: "The next node to navigate to after action (for non-redirect actions)" })
 	}).passthrough()
-}), Xe = e.object({
+}), et = e.object({
 	id: e.string(),
 	type: e.string(),
-	coordinates: b
-}).passthrough(), Ze = e.union([
-	qe,
-	Je,
-	Ye,
-	Xe
-]), Qe = e.object({
+	coordinates: S
+}).passthrough(), tt = e.union([
+	Ze,
+	Qe,
+	$e,
+	et
+]), nt = e.object({
 	next_node: e.string(),
-	coordinates: b
-}).passthrough(), $e = e.object({
+	coordinates: S
+}).passthrough(), rt = e.object({
 	resume_flow: e.boolean().optional(),
-	coordinates: b
-}).passthrough(), et = e.object({
+	coordinates: S
+}).passthrough(), it = e.object({
 	id: e.string(),
 	name: e.string(),
 	languages: e.object({ primary: e.string() }).passthrough(),
-	nodes: e.array(Ze),
-	start: Qe,
-	ending: $e,
+	nodes: e.array(tt),
+	start: nt,
+	ending: rt,
 	created_at: e.string(),
 	updated_at: e.string(),
 	links: e.object({
 		sdkSrc: e.string().optional(),
 		sdk_src: e.string().optional()
 	}).passthrough()
-}).passthrough(), tt = et.omit({
+}).passthrough(), at = it.omit({
 	id: !0,
 	created_at: !0,
 	updated_at: !0
@@ -607,16 +632,16 @@ var t = e.object({
 	return e.TOKEN = "token", e.ID_TOKEN = "id_token", e.TOKEN_ID_TOKEN = "id_token token", e.CODE = "code", e.CODE_ID_TOKEN = "code id_token", e.CODE_TOKEN = "code token", e.CODE_ID_TOKEN_TOKEN = "code id_token token", e;
 }({}), T = /* @__PURE__ */ function(e) {
 	return e.QUERY = "query", e.FRAGMENT = "fragment", e.FORM_POST = "form_post", e.WEB_MESSAGE = "web_message", e.SAML_POST = "saml_post", e;
-}({}), nt = /* @__PURE__ */ function(e) {
+}({}), ot = /* @__PURE__ */ function(e) {
 	return e.S256 = "S256", e.Plain = "plain", e;
-}({}), rt = e.union([e.null(), e.object({
+}({}), st = e.union([e.null(), e.object({
 	essential: e.boolean().optional(),
 	value: e.unknown().optional(),
 	values: e.array(e.unknown()).optional()
-})]).nullable(), it = e.object({
-	userinfo: e.record(e.string(), rt).optional(),
-	id_token: e.record(e.string(), rt).optional()
-}), at = e.object({
+})]).nullable(), ct = e.object({
+	userinfo: e.record(e.string(), st).optional(),
+	id_token: e.record(e.string(), st).optional()
+}), lt = e.object({
 	client_id: e.string(),
 	act_as: e.string().optional(),
 	response_type: e.nativeEnum(w).optional(),
@@ -628,15 +653,16 @@ var t = e.object({
 	nonce: e.string().optional(),
 	scope: e.string().optional(),
 	prompt: e.string().optional(),
-	code_challenge_method: e.nativeEnum(nt).optional(),
+	code_challenge_method: e.nativeEnum(ot).optional(),
 	code_challenge: e.string().optional(),
 	username: e.string().optional(),
 	ui_locales: e.string().optional(),
 	max_age: e.number().optional(),
 	acr_values: e.string().optional(),
-	claims: it.optional(),
+	claims: ct.optional(),
 	vendor_id: e.string().optional()
-}), ot = e.object({
+}), ut = e.object({
+	...i,
 	colors: e.object({
 		primary: e.string(),
 		page_background: e.union([e.string(), e.object({
@@ -655,7 +681,7 @@ var t = e.object({
 		"light",
 		"auto"
 	]).optional()
-}), st = e.enum([
+}), dt = e.enum([
 	"password_reset",
 	"email_verification",
 	"otp",
@@ -665,11 +691,11 @@ var t = e.object({
 	"ticket",
 	"client_assertion_jti",
 	"subject_token_jti"
-]), ct = e.object({
+]), ft = e.object({
 	code_id: e.string().openapi({ description: "The code that will be used in for instance an email verification flow" }),
 	login_id: e.string().optional().openapi({ description: "The id of the login session that the code is connected to" }),
 	connection_id: e.string().optional().openapi({ description: "The connection that the code is connected to" }),
-	code_type: st,
+	code_type: dt,
 	code_verifier: e.string().optional().openapi({ description: "The code verifier used in PKCE in outbound flows" }),
 	code_challenge: e.string().optional().openapi({ description: "The code challenge used in PKCE in outbound flows" }),
 	code_challenge_method: e.enum(["plain", "S256"]).optional().openapi({ description: "The code challenge method used in PKCE in outbound flows" }),
@@ -680,7 +706,7 @@ var t = e.object({
 	expires_at: e.string(),
 	used_at: e.string().optional(),
 	user_id: e.string().optional()
-}), lt = ct.extend({ created_at: e.string() }), ut = e.object({
+}), pt = ft.extend({ created_at: e.string() }), mt = e.object({
 	kid: e.string().optional(),
 	team_id: e.string().optional(),
 	realms: e.string().optional(),
@@ -811,24 +837,25 @@ function E(e) {
 		return e;
 	}
 }
-var dt = e.object({
+var ht = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	display_name: e.string().optional(),
 	strategy: e.string(),
-	options: e.preprocess((e) => e === null ? {} : E(e), ut).default({}),
+	options: e.preprocess((e) => e === null ? {} : E(e), mt).default({}),
 	enabled_clients: e.array(e.string()).default([]).optional(),
 	response_type: e.nativeEnum(w).optional(),
 	response_mode: e.nativeEnum(T).optional(),
 	is_domain_connection: e.boolean().optional(),
 	show_as_button: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional(),
-	is_system: e.boolean().optional()
-}), ft = e.object({
+	is_system: e.boolean().optional(),
+	...i
+}), gt = e.object({
 	id: e.string(),
 	created_at: e.string().transform((e) => e === null ? "" : e),
 	updated_at: e.string().transform((e) => e === null ? "" : e)
-}).extend(dt.shape), D = e.object({
+}).extend(ht.shape), D = e.object({
 	domain: e.string(),
 	custom_domain_id: e.string().optional(),
 	type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -842,7 +869,7 @@ var dt = e.object({
 		"null"
 	]).optional(),
 	domain_metadata: e.record(e.string(), e.string().max(255)).optional()
-}), pt = e.discriminatedUnion("name", [e.object({
+}), _t = e.discriminatedUnion("name", [e.object({
 	name: e.literal("txt"),
 	record: e.string(),
 	domain: e.string()
@@ -850,7 +877,7 @@ var dt = e.object({
 	name: e.literal("http"),
 	http_body: e.string(),
 	http_url: e.string()
-})]), mt = D.extend({
+})]), vt = D.extend({
 	custom_domain_id: e.string(),
 	primary: e.boolean(),
 	status: e.enum([
@@ -860,26 +887,26 @@ var dt = e.object({
 		"ready"
 	]),
 	origin_domain_name: e.string().optional(),
-	verification: e.object({ methods: e.array(pt) }).optional(),
+	verification: e.object({ methods: e.array(_t) }).optional(),
 	tls_policy: e.string().optional()
-}), ht = D.pick({
+}), yt = D.pick({
 	tls_policy: !0,
 	custom_client_ip_header: !0,
 	domain_metadata: !0
-}).strict(), gt = mt.extend({ tenant_id: e.string() }), _t = e.object({
+}).strict(), bt = vt.extend({ tenant_id: e.string() }), xt = e.object({
 	certificate: e.string().regex(/^-----BEGIN CERTIFICATE-----[\s\S]+-----END CERTIFICATE-----\s*$/, "must be PEM-encoded; include the full certificate chain in leaf-first order"),
 	private_key: e.string().regex(/-----BEGIN (RSA |EC |ENCRYPTED )?PRIVATE KEY-----[\s\S]+-----END \1PRIVATE KEY-----\s*$/, "must be a PEM-encoded private key")
 }), O = e.object({
 	id: e.string(),
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0)
-}), k = O.extend({ category: e.literal("BLOCK").optional() }), vt = k.extend({
+}), k = O.extend({ category: e.literal("BLOCK").optional() }), St = k.extend({
 	type: e.literal("DIVIDER"),
 	config: e.object({ text: e.string().optional() }).optional()
-}), yt = k.extend({
+}), Ct = k.extend({
 	type: e.literal("HTML"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), bt = k.extend({
+}), wt = k.extend({
 	type: e.literal("IMAGE"),
 	config: e.object({
 		src: e.string().optional(),
@@ -887,29 +914,29 @@ var dt = e.object({
 		width: e.number().optional(),
 		height: e.number().optional()
 	}).optional()
-}), xt = k.extend({
+}), Tt = k.extend({
 	type: e.literal("JUMP_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		target_step: e.string().optional()
 	})
-}), St = k.extend({
+}), Et = k.extend({
 	type: e.literal("RESEND_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		resend_action: e.string().optional()
 	})
-}), Ct = k.extend({
+}), Dt = k.extend({
 	type: e.literal("NEXT_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		variant: e.enum(["primary", "secondary"]).optional(),
 		skip_validation: e.boolean().optional()
 	})
-}), wt = k.extend({
+}), Ot = k.extend({
 	type: e.literal("PREVIOUS_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), Tt = k.extend({
+}), kt = k.extend({
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string().optional() }).optional()
 }), A = O.extend({
@@ -918,13 +945,13 @@ var dt = e.object({
 	hint: e.string().min(1).max(500).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), Et = A.extend({
+}), At = A.extend({
 	type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
 	config: e.object({ credential_type: e.string().optional() })
-}), Dt = A.extend({
+}), jt = A.extend({
 	type: e.literal("GMAPS_ADDRESS"),
 	config: e.object({ api_key: e.string().optional() })
-}), Ot = A.extend({
+}), Mt = A.extend({
 	type: e.literal("RECAPTCHA"),
 	config: e.object({ site_key: e.string().optional() })
 }), j = O.extend({
@@ -943,10 +970,10 @@ var dt = e.object({
 	})).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), kt = j.extend({
+}), Nt = j.extend({
 	type: e.literal("BOOLEAN"),
 	config: e.object({ default_value: e.boolean().optional() }).optional()
-}), At = j.extend({
+}), Pt = j.extend({
 	type: e.literal("CARDS"),
 	config: e.object({
 		options: e.array(e.object({
@@ -957,7 +984,7 @@ var dt = e.object({
 		})).optional(),
 		multi_select: e.boolean().optional()
 	}).optional()
-}), jt = j.extend({
+}), Ft = j.extend({
 	type: e.literal("CHOICE"),
 	config: e.object({
 		options: e.array(e.object({
@@ -968,7 +995,7 @@ var dt = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), Mt = j.extend({
+}), It = j.extend({
 	type: e.literal("CODE"),
 	config: e.object({
 		length: e.number().int().positive().max(100).optional(),
@@ -985,7 +1012,7 @@ var dt = e.object({
 		message: "default_value is longer than the configured length",
 		path: ["default_value"]
 	}).optional()
-}), Nt = j.extend({
+}), Lt = j.extend({
 	type: e.literal("CUSTOM"),
 	config: e.object({
 		component: e.string().optional(),
@@ -993,7 +1020,7 @@ var dt = e.object({
 		schema: e.record(e.string(), e.any()).optional(),
 		code: e.string().optional()
 	})
-}), Pt = j.extend({
+}), Rt = j.extend({
 	type: e.literal("DATE"),
 	config: e.object({
 		format: e.string().optional(),
@@ -1001,7 +1028,7 @@ var dt = e.object({
 		max: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Ft = j.extend({
+}), zt = j.extend({
 	type: e.literal("DROPDOWN"),
 	config: e.object({
 		options: e.array(e.object({
@@ -1013,7 +1040,7 @@ var dt = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), It = j.extend({
+}), Bt = j.extend({
 	type: e.literal("EMAIL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1021,20 +1048,20 @@ var dt = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), Lt = j.extend({
+}), Vt = j.extend({
 	type: e.literal("FILE"),
 	config: e.object({
 		accept: e.string().optional(),
 		max_size: e.number().optional(),
 		multiple: e.boolean().optional()
 	}).optional()
-}), Rt = j.extend({
+}), Ht = j.extend({
 	type: e.literal("LEGAL"),
 	config: e.object({
 		text: e.string(),
 		html: e.boolean().optional()
 	}).optional()
-}), zt = j.extend({
+}), Ut = j.extend({
 	type: e.literal("NUMBER"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1043,7 +1070,7 @@ var dt = e.object({
 		step: e.number().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Bt = j.extend({
+}), Wt = j.extend({
 	type: e.literal("PASSWORD"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1052,13 +1079,13 @@ var dt = e.object({
 		forgot_password_link: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Vt = j.extend({
+}), Gt = j.extend({
 	type: e.literal("PAYMENT"),
 	config: e.object({
 		provider: e.string().optional(),
 		currency: e.string().optional()
 	}).optional()
-}), Ht = j.extend({
+}), Kt = j.extend({
 	type: e.literal("SOCIAL"),
 	config: e.object({
 		providers: e.array(e.string()).optional(),
@@ -1073,7 +1100,7 @@ var dt = e.object({
 			last_used_label: e.string().optional()
 		})).optional()
 	}).optional()
-}), Ut = j.extend({
+}), qt = j.extend({
 	type: e.literal("TEL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1081,7 +1108,7 @@ var dt = e.object({
 		default_value: e.string().optional(),
 		allow_email: e.boolean().optional()
 	}).optional()
-}), Wt = j.extend({
+}), Jt = j.extend({
 	type: e.literal("TEXT"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1091,41 +1118,37 @@ var dt = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), Gt = j.extend({
+}), Yt = j.extend({
 	type: e.literal("COUNTRY"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Kt = j.extend({
+}), Xt = j.extend({
 	type: e.literal("URL"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), qt = e.discriminatedUnion("type", [
-	vt,
-	yt,
-	bt,
-	xt,
+}), Zt = e.discriminatedUnion("type", [
 	St,
 	Ct,
 	wt,
-	Tt
-]), Jt = e.discriminatedUnion("type", [
+	Tt,
 	Et,
 	Dt,
-	Ot
-]), Yt = e.discriminatedUnion("type", [
-	kt,
+	Ot,
+	kt
+]), Qt = e.discriminatedUnion("type", [
 	At,
 	jt,
-	Mt,
-	Gt,
+	Mt
+]), $t = e.discriminatedUnion("type", [
 	Nt,
 	Pt,
 	Ft,
 	It,
+	Yt,
 	Lt,
 	Rt,
 	zt,
@@ -1134,12 +1157,16 @@ var dt = e.object({
 	Ht,
 	Ut,
 	Wt,
-	Kt
-]), M = e.union([
+	Gt,
+	Kt,
 	qt,
 	Jt,
-	Yt
-]), Xt = new Set([
+	Xt
+]), M = e.union([
+	Zt,
+	Qt,
+	$t
+]), en = new Set([
 	"BOOLEAN",
 	"CARDS",
 	"CHOICE",
@@ -1154,7 +1181,7 @@ var dt = e.object({
 	"TEL",
 	"TEXT",
 	"URL"
-]), Zt = e.object({
+]), tn = e.object({
 	id: e.string(),
 	type: e.literal("submit"),
 	label: e.string(),
@@ -1166,7 +1193,7 @@ var dt = e.object({
 }), N = e.object({
 	x: e.number(),
 	y: e.number()
-}), Qt = e.object({
+}), nn = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
 	coordinates: N,
@@ -1175,7 +1202,7 @@ var dt = e.object({
 		flow_id: e.string().max(30),
 		next_node: e.string().optional()
 	})
-}), $t = e.object({
+}), rn = e.object({
 	id: e.string(),
 	type: e.literal("ROUTER"),
 	coordinates: N,
@@ -1189,7 +1216,7 @@ var dt = e.object({
 		})),
 		fallback: e.string()
 	})
-}), en = e.object({
+}), an = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
 	coordinates: N,
@@ -1198,11 +1225,11 @@ var dt = e.object({
 		components: e.array(M),
 		next_node: e.string().optional()
 	})
-}), tn = e.discriminatedUnion("type", [
-	Qt,
-	$t,
-	en
-]), nn = e.object({
+}), on = e.discriminatedUnion("type", [
+	nn,
+	rn,
+	an
+]), sn = e.object({
 	name: e.string().openapi({ description: "The name of the form" }),
 	messages: e.object({
 		errors: e.record(e.string(), e.any()).optional(),
@@ -1213,7 +1240,7 @@ var dt = e.object({
 		default: e.string().optional()
 	}).optional(),
 	translations: e.record(e.string(), e.any()).optional(),
-	nodes: e.array(tn).optional(),
+	nodes: e.array(on).optional(),
 	start: e.object({
 		hidden_fields: e.array(e.object({
 			key: e.string(),
@@ -1236,7 +1263,7 @@ var dt = e.object({
 		sdkSrc: e.string().optional(),
 		sdk_src: e.string().optional()
 	}).optional()
-}).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" }), rn = t.extend(nn.shape).extend({ id: e.string() }), an = e.object({
+}).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" }), cn = t.extend(sn.shape).extend({ id: e.string() }), ln = e.object({
 	id: e.number().optional(),
 	text: e.string(),
 	type: e.enum([
@@ -1245,37 +1272,37 @@ var dt = e.object({
 		"success",
 		"warning"
 	])
-}), on = e.object({
+}), un = e.object({
 	id: e.string().optional(),
 	text: e.string(),
 	href: e.string(),
 	linkText: e.string().optional()
-}), sn = e.object({
+}), dn = e.object({
 	"form-content-start": e.string().optional(),
 	"form-content-end": e.string().optional(),
 	"form-footer-start": e.string().optional(),
 	"form-footer-end": e.string().optional(),
 	"secondary-actions-start": e.string().optional(),
 	"secondary-actions-end": e.string().optional()
-}).strict(), cn = e.object({
+}).strict(), fn = e.object({
 	name: e.string().optional(),
 	action: e.string(),
 	method: e.enum(["POST", "GET"]),
 	title: e.string().optional(),
 	description: e.string().optional(),
 	components: e.array(M),
-	messages: e.array(an).optional(),
-	links: e.array(on).optional(),
-	partials: sn.optional(),
+	messages: e.array(ln).optional(),
+	links: e.array(un).optional(),
+	partials: dn.optional(),
 	footer: e.string().optional()
 });
-function ln(e) {
+function pn(e) {
 	return e.category === "BLOCK";
 }
-function un(e) {
+function mn(e) {
 	return e.category === "WIDGET";
 }
-function dn(e) {
+function hn(e) {
 	return e.category === "FIELD";
 }
 //#endregion
@@ -1298,7 +1325,7 @@ var P = e.enum([
 	"credentials-exchange",
 	"pre-user-registration",
 	"post-user-registration"
-]), R = e.enum(["post-user-login"]), fn = [
+]), R = e.enum(["post-user-login"]), gn = [
 	{
 		field: "url",
 		triggers: P.options
@@ -1320,16 +1347,16 @@ var P = e.enum([
 		triggers: R.options
 	}
 ];
-function pn(e) {
+function _n(e) {
 	if (!(!e || typeof e != "object")) {
-		for (let t of fn) if (typeof Reflect.get(e, t.field) == "string") return t.triggers;
+		for (let t of gn) if (typeof Reflect.get(e, t.field) == "string") return t.triggers;
 	}
 }
 var z = e.enum(["impersonate"]), B = e.enum([
 	"ensure-username",
 	"set-preferred-username",
 	"account-linking"
-]), mn = {
+]), vn = {
 	"ensure-username": {
 		name: "Ensure Username",
 		description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1354,82 +1381,83 @@ var z = e.enum(["impersonate"]), B = e.enum([
 	synchronous: e.boolean().default(!1),
 	priority: e.number().optional(),
 	hook_id: e.string().optional(),
-	metadata: e.record(e.string(), e.unknown()).optional()
-}, hn = e.object({
+	metadata: e.record(e.string(), e.unknown()).optional(),
+	...i
+}, yn = e.object({
 	...V,
 	trigger_id: P,
 	url: e.string()
-}), gn = e.object({
+}), bn = e.object({
 	...V,
 	trigger_id: F,
 	form_id: e.string()
-}), _n = e.object({
+}), xn = e.object({
 	...V,
 	trigger_id: I,
 	template_id: B
-}), vn = e.object({
+}), Sn = e.object({
 	...V,
 	trigger_id: L,
 	code_id: e.string()
-}), yn = e.object({
+}), Cn = e.object({
 	...V,
 	trigger_id: R,
 	page_id: z,
 	permission_required: e.string().optional()
-}), bn = e.union([
-	hn,
-	gn,
-	_n,
-	vn,
-	yn
-]), xn = e.object({
+}), wn = e.union([
+	yn,
+	bn,
+	xn,
+	Sn,
+	Cn
+]), Tn = e.object({
 	...V,
 	trigger_id: P
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	url: e.string()
-}), Sn = e.object({
+}), En = e.object({
 	...V,
 	trigger_id: F
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	form_id: e.string()
-}), Cn = e.object({
+}), Dn = e.object({
 	...V,
 	trigger_id: I
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	template_id: B
-}), wn = e.object({
+}), On = e.object({
 	...V,
 	trigger_id: L
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	code_id: e.string()
-}), Tn = e.object({
+}), kn = e.object({
 	...V,
 	trigger_id: R
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	page_id: z,
 	permission_required: e.string().optional()
-}), En = e.union([
-	xn,
-	Sn,
-	Cn,
-	wn,
-	Tn
-]), Dn = e.object({
+}), An = e.union([
+	Tn,
+	En,
+	Dn,
+	On,
+	kn
+]), jn = e.object({
 	code: e.string().max(1e5),
 	secrets: e.record(e.string(), e.string()).optional()
-}), On = Dn.extend({
+}), Mn = jn.extend({
 	id: e.string(),
 	tenant_id: e.string()
-}).extend(t.shape), kn = e.object({ name: e.string().optional() }), An = e.object({ email: e.string().optional() }), jn = e.object({
+}).extend(t.shape), Nn = e.object({ name: e.string().optional() }), Pn = e.object({ email: e.string().optional() }), Fn = e.object({
 	id: e.string().optional(),
 	organization_id: e.string().max(50),
-	inviter: kn,
-	invitee: An,
+	inviter: Nn,
+	invitee: Pn,
 	invitation_url: e.string().url(),
 	client_id: e.string(),
 	connection_id: e.string().optional(),
@@ -1438,13 +1466,13 @@ var z = e.enum(["impersonate"]), B = e.enum([
 	ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
 	roles: e.array(e.string()).default([]).optional(),
 	send_invitation_email: e.boolean().default(!0).optional()
-}), Mn = e.object({
+}), In = e.object({
 	id: e.string(),
 	organization_id: e.string().max(50),
 	created_at: e.string().datetime(),
 	expires_at: e.string().datetime(),
 	ticket_id: e.string().optional()
-}).extend(jn.omit({ id: !0 }).shape), Nn = e.object({
+}).extend(Fn.omit({ id: !0 }).shape), Ln = e.object({
 	alg: e.enum([
 		"RS256",
 		"RS384",
@@ -1486,7 +1514,7 @@ var z = e.enum(["impersonate"]), B = e.enum([
 		path: [r],
 		message: `EC JWK is missing required member '${r}'`
 	});
-}), Pn = e.object({ keys: e.array(Nn) }), Fn = e.object({
+}), Rn = e.object({ keys: e.array(Ln) }), zn = e.object({
 	issuer: e.string(),
 	authorization_endpoint: e.string(),
 	token_endpoint: e.string(),
@@ -1512,29 +1540,29 @@ var z = e.enum(["impersonate"]), B = e.enum([
 	client_id_metadata_document_supported: e.boolean().optional(),
 	backchannel_logout_supported: e.boolean().optional(),
 	backchannel_logout_session_supported: e.boolean().optional()
-}), In = /* @__PURE__ */ function(e) {
+}), Bn = /* @__PURE__ */ function(e) {
 	return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.AWAITING_CONSENT = "awaiting_consent", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
-}({}), Ln = e.nativeEnum(In), H = e.object({
+}({}), Vn = e.nativeEnum(Bn), H = e.object({
 	strategy: e.string(),
 	strategy_type: e.string()
-}), Rn = e.object({
+}), Hn = e.object({
 	csrf_token: e.string(),
 	auth0Client: e.string().optional(),
-	authParams: at,
+	authParams: lt,
 	expires_at: e.string(),
 	deleted_at: e.string().optional(),
 	ip: e.string().optional(),
 	useragent: e.string().optional(),
 	session_id: e.string().optional(),
 	authorization_url: e.string().optional(),
-	state: Ln.optional().default("pending"),
+	state: Vn.optional().default("pending"),
 	state_data: e.string().optional(),
 	failure_reason: e.string().optional(),
 	user_id: e.string().optional(),
 	auth_connection: e.string().optional(),
 	auth_strategy: H.optional(),
 	authenticated_at: e.string().optional()
-}).openapi({ description: "This represents a login sesion" }), zn = Rn.extend({
+}).openapi({ description: "This represents a login sesion" }), Un = Hn.extend({
 	id: e.string().openapi({ description: "This is is used as the state in the universal login" }),
 	created_at: e.string(),
 	updated_at: e.string()
@@ -1551,6 +1579,8 @@ var z = e.enum(["impersonate"]), B = e.enum([
 	CODE_LINK_SENT: "cls",
 	CODE_SENT: "cs",
 	DEPRECATION_NOTICE: "depnote",
+	CONFIG_INHERITANCE_DIFF: "cfgdiff",
+	CONFIG_DRIFT: "cfgdrift",
 	FAILED_LOGIN: "f",
 	FAILED_BY_CONNECTOR: "fc",
 	FAILED_CHANGE_EMAIL: "fce",
@@ -1698,7 +1728,7 @@ var z = e.enum(["impersonate"]), B = e.enum([
 	WARNING_DURING_LOGIN: "w",
 	WARNING_SENDING_NOTIFICATION: "wn",
 	WARNING_USER_MANAGEMENT: "wum"
-}, Bn = e.string().refine((e) => Object.values(U).includes(e), { message: "Invalid log type" }), Vn = {
+}, Wn = e.string().refine((e) => Object.values(U).includes(e), { message: "Invalid log type" }), Gn = {
 	[U.ACLS_SUMMARY]: "ACLs Summary",
 	[U.ACTIONS_EXECUTION_FAILED]: "Actions Execution Failed",
 	[U.API_LIMIT]: "API Rate Limit Reached",
@@ -1711,6 +1741,8 @@ var z = e.enum(["impersonate"]), B = e.enum([
 	[U.CODE_LINK_SENT]: "Code/Link Sent",
 	[U.CODE_SENT]: "Code Sent",
 	[U.DEPRECATION_NOTICE]: "Deprecation Notice",
+	[U.CONFIG_INHERITANCE_DIFF]: "Config Inheritance Shadow Difference",
+	[U.CONFIG_DRIFT]: "Config Drift",
 	[U.FAILED_LOGIN]: "Failed Login",
 	[U.FAILED_BY_CONNECTOR]: "Failed by Connector",
 	[U.FAILED_CHANGE_EMAIL]: "Failed Change Email",
@@ -1858,30 +1890,30 @@ var z = e.enum(["impersonate"]), B = e.enum([
 	[U.WARNING_DURING_LOGIN]: "Warning During Login",
 	[U.WARNING_SENDING_NOTIFICATION]: "Warning Sending Notification",
 	[U.WARNING_USER_MANAGEMENT]: "Warning User Management"
-}, Hn = (() => {
+}, Kn = (() => {
 	let e = {};
-	for (let [t, n] of Object.entries(U)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
+	for (let [t, n] of Object.entries(U)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "CONFIG_INHERITANCE_DIFF" || t === "CONFIG_DRIFT" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
 	return e;
 })();
-function Un(e) {
-	return Vn[e] ?? e;
+function qn(e) {
+	return Gn[e] ?? e;
 }
-function Wn(e) {
-	return Hn[e] ?? "other";
+function Jn(e) {
+	return Kn[e] ?? "other";
 }
-var Gn = e.object({
+var Yn = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.object({ node: e.string().optional() }).optional()
-}), Kn = e.object({
+}), Xn = e.object({
 	country_code: e.string().length(2),
 	city_name: e.string(),
 	latitude: e.string(),
 	longitude: e.string(),
 	time_zone: e.string(),
 	continent_code: e.string()
-}), qn = e.object({
-	type: Bn,
+}), Zn = e.object({
+	type: Wn,
 	date: e.string(),
 	description: e.string().optional(),
 	ip: e.string().optional(),
@@ -1899,10 +1931,10 @@ var Gn = e.object({
 	strategy: e.string().optional(),
 	strategy_type: e.string().optional(),
 	hostname: e.string().optional(),
-	auth0_client: Gn.optional(),
+	auth0_client: Yn.optional(),
 	log_id: e.string().optional(),
-	location_info: Kn.optional()
-}), Jn = qn.extend({ log_id: e.string() }), Yn = e.enum([
+	location_info: Xn.optional()
+}), Qn = Zn.extend({ log_id: e.string() }), $n = e.enum([
 	"http",
 	"eventbridge",
 	"eventgrid",
@@ -1913,44 +1945,44 @@ var Gn = e.object({
 	"active",
 	"paused",
 	"suspended"
-]), Xn = e.object({
+]), er = e.object({
 	type: e.string(),
 	name: e.string()
-}), Zn = e.object({
+}), tr = e.object({
 	name: e.string(),
-	type: Yn,
+	type: $n,
 	status: W.optional(),
 	sink: e.record(e.string(), e.unknown()),
-	filters: e.array(Xn).optional(),
+	filters: e.array(er).optional(),
 	isPriority: e.boolean().optional()
-}), Qn = Zn.extend({
+}), nr = tr.extend({
 	id: e.string(),
 	status: W,
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), $n = e.enum([
+}), rr = e.enum([
 	"auth0",
 	"cognito",
 	"okta",
 	"oidc"
-]), er = e.object({
+]), ir = e.object({
 	domain: e.string(),
 	client_id: e.string(),
 	client_secret: e.string(),
 	audience: e.string().optional(),
 	scope: e.string().optional()
-}), tr = e.object({
+}), ar = e.object({
 	id: e.string().optional(),
 	name: e.string(),
-	provider: $n,
+	provider: rr,
 	connection: e.string(),
 	enabled: e.boolean().default(!0),
-	credentials: er
-}), nr = e.object({
+	credentials: ir
+}), or = e.object({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(tr.shape), rr = e.object({
+}).extend(ar.shape), sr = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	admin_notification_frequency: e.array(e.string()).optional(),
@@ -1959,13 +1991,13 @@ var Gn = e.object({
 		"pre-user-registration": e.object({ shields: e.array(e.string()).optional() }).optional(),
 		"pre-change-password": e.object({ shields: e.array(e.string()).optional() }).optional()
 	}).optional()
-}), ir = e.object({
+}), cr = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
 	mode: e.string().optional(),
 	max_attempts: e.number().optional()
-}), ar = e.object({
+}), lr = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
@@ -1979,28 +2011,28 @@ var Gn = e.object({
 			rate: e.number().optional()
 		}).optional()
 	}).optional()
-}), or = e.object({
-	breached_password_detection: rr.optional(),
-	brute_force_protection: ir.optional(),
-	suspicious_ip_throttling: ar.optional()
-}), sr = e.object({
+}), ur = e.object({
+	breached_password_detection: sr.optional(),
+	brute_force_protection: cr.optional(),
+	suspicious_ip_throttling: lr.optional()
+}), dr = e.object({
 	id: e.string().optional(),
 	user_id: e.string(),
 	password: e.string(),
 	algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
 	is_current: e.boolean().default(!0)
-}), cr = sr.extend({
+}), fr = dr.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), lr = e.object({
+}), pr = e.object({
 	initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
 	initial_ip: e.string().describe("First IP address associated with this session"),
 	initial_asn: e.string().describe("First autonomous system number associated with this session"),
 	last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
 	last_ip: e.string().describe("Last IP address from which this user logged in"),
 	last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), ur = e.object({
+}), mr = e.object({
 	id: e.string(),
 	revoked_at: e.string().optional(),
 	used_at: e.string().optional(),
@@ -2008,14 +2040,14 @@ var Gn = e.object({
 	expires_at: e.string().optional(),
 	login_session_id: e.string(),
 	idle_expires_at: e.string().optional(),
-	device: lr.describe("Metadata related to the device used in the session"),
+	device: pr.describe("Metadata related to the device used in the session"),
 	clients: e.array(e.string()).describe("List of client details for the session")
-}), dr = e.object({
+}), hr = e.object({
 	created_at: e.string(),
 	updated_at: e.string(),
 	authenticated_at: e.string(),
 	last_interaction_at: e.string()
-}).extend(ur.shape), fr = e.object({
+}).extend(mr.shape), gr = e.object({
 	kid: e.string().openapi({ description: "The key id of the signing key" }),
 	tenant_id: e.string().optional().openapi({ description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped." }),
 	cert: e.string().openapi({ description: "The public certificate of the signing key" }),
@@ -2031,8 +2063,12 @@ var Gn = e.object({
 	revoked_at: e.string().optional().openapi({ description: "The date and time when the key was revoked" }),
 	connection: e.string().optional().openapi({ description: "The connection identifier associated with the key" }),
 	type: e.enum(["jwt_signing", "saml_encryption"]).openapi({ description: "The type of the signing key" })
-}), pr = e.object({
+}), _r = e.object({
 	id: e.string().optional(),
+	parent_tenant_id: e.string().nullish(),
+	config_sync: e.enum(["inherit-on-read", "synced"]).nullish(),
+	config_sync_hash: e.string().nullish(),
+	config_synced_at: e.string().nullish(),
 	audience: e.string().optional(),
 	friendly_name: e.string(),
 	picture_url: e.string().optional(),
@@ -2149,7 +2185,7 @@ var Gn = e.object({
 		"shared_planetscale"
 	]).optional(),
 	d1_database_id: e.string().max(64).optional(),
-	attack_protection: or.optional(),
+	attack_protection: ur.optional(),
 	mfa: e.object({
 		policy: e.enum(["never", "always"]).default("never").optional(),
 		factors: e.object({
@@ -2176,38 +2212,39 @@ var Gn = e.object({
 		}).optional(),
 		phone_message: e.object({ message: e.string().optional() }).optional()
 	}).optional()
-}), mr = e.object({
+}), vr = e.object({
 	created_at: e.string().nullable().transform((e) => e ?? ""),
 	updated_at: e.string().nullable().transform((e) => e ?? "")
-}).extend(pr.shape).extend({
+}).extend(_r.shape).extend({
 	id: e.string(),
 	is_control_plane: e.boolean().optional()
-}), hr = e.enum([
+}), yr = e.enum([
 	"provision",
 	"seed",
 	"upgrade",
 	"backup",
 	"deprovision",
-	"users_import"
-]), gr = e.enum([
+	"users_import",
+	"sync-defaults"
+]), br = e.enum([
 	"pending",
 	"running",
 	"succeeded",
 	"failed",
 	"cancelled"
-]), _r = e.string().max(64), vr = ["inline", "cloudflare-workflows"], yr = e.object({
+]), xr = e.string().max(64), Sr = ["inline", "cloudflare-workflows"], Cr = e.object({
 	tenant_id: e.string().max(255).nullable().default(null),
 	rollout_id: e.string().max(255).nullable().optional(),
-	kind: hr,
-	engine: _r,
+	kind: yr,
+	engine: xr,
 	engine_instance_id: e.string().max(100).nullable().optional(),
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	initiated_by: e.string().max(255).nullable().optional(),
 	input: e.record(e.string(), e.unknown()).nullable().optional()
-}), br = yr.extend({
+}), wr = Cr.extend({
 	id: e.string(),
-	status: gr,
+	status: br,
 	current_step: e.string().max(255).nullable().optional(),
 	error: e.string().nullable().optional(),
 	result: e.record(e.string(), e.unknown()).nullable().optional(),
@@ -2216,7 +2253,7 @@ var Gn = e.object({
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
-}), xr = br.pick({
+}), Tr = wr.pick({
 	status: !0,
 	current_step: !0,
 	engine_instance_id: !0,
@@ -2227,20 +2264,20 @@ var Gn = e.object({
 	claimed_by: !0,
 	claim_expires_at: !0,
 	finished_at: !0
-}).partial(), Sr = e.enum([
+}).partial(), Er = e.enum([
 	"started",
 	"succeeded",
 	"failed",
 	"retried",
 	"skipped",
 	"reconciled"
-]), Cr = e.object({
+]), Dr = e.object({
 	operation_id: e.string().max(255),
 	step: e.string().max(255),
-	outcome: Sr,
+	outcome: Er,
 	detail: e.record(e.string(), e.unknown()).nullable().optional(),
 	attempt: e.number().int().min(1).default(1)
-}), wr = Cr.extend({
+}), Or = Dr.extend({
 	id: e.string(),
 	created_at: e.string()
 }), G = e.enum([
@@ -2249,12 +2286,12 @@ var Gn = e.object({
 	"updated",
 	"failed",
 	"skipped"
-]), Tr = [
+]), kr = [
 	"inserted",
 	"updated",
 	"failed",
 	"skipped"
-], Er = e.object({
+], Ar = e.object({
 	operation_id: e.string().max(255),
 	seq: e.number().int().min(0),
 	payload: e.record(e.string(), e.unknown()),
@@ -2263,51 +2300,56 @@ var Gn = e.object({
 	error_message: e.string().nullable().optional(),
 	error_path: e.string().max(255).nullable().optional(),
 	entity_id: e.string().max(255).nullable().optional()
-}), Dr = Er.extend({
+}), jr = Ar.extend({
 	status: G,
 	created_at: e.string(),
 	updated_at: e.string()
-}), Or = e.object({
+}), Mr = e.object({
 	seq: e.number().int().min(0),
 	status: G,
 	error_code: e.string().max(64).nullable().optional(),
 	error_message: e.string().nullable().optional(),
 	error_path: e.string().max(255).nullable().optional(),
 	entity_id: e.string().max(255).nullable().optional()
-}), kr = e.enum([
+}), Nr = e.enum([
 	"upgrade",
 	"reseed",
-	"backup"
-]), Ar = e.enum([
+	"backup",
+	"config-sync"
+]), Pr = e.enum([
 	"pending",
 	"canary",
 	"rolling",
 	"paused",
 	"done",
 	"failed"
-]), jr = e.object({
-	kind: kr,
+]), Fr = e.object({
+	kind: Nr,
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	wave_size: e.number().int().min(1).default(10),
 	canary_tenant_ids: e.array(e.string()).nullable().optional(),
 	filter: e.record(e.string(), e.unknown()).nullable().optional(),
-	initiated_by: e.string().max(255).nullable().optional()
-}), Mr = jr.extend({
+	initiated_by: e.string().max(255).nullable().optional(),
+	config: e.record(e.string(), e.unknown()).nullable().optional()
+}), Ir = Fr.extend({
 	id: e.string(),
-	status: Ar,
+	status: Pr,
 	created_at: e.string(),
 	updated_at: e.string(),
-	finished_at: e.string().nullable().optional()
-}), Nr = Mr.pick({
+	finished_at: e.string().nullable().optional(),
+	paused_reason: e.string().nullable().optional()
+}), Lr = Ir.pick({
 	status: !0,
 	wave_size: !0,
 	canary_tenant_ids: !0,
 	filter: !0,
+	config: !0,
+	paused_reason: !0,
 	finished_at: !0
-}).partial(), Pr = /* @__PURE__ */ function(e) {
+}).partial(), Rr = /* @__PURE__ */ function(e) {
 	return e.RefreshToken = "refresh_token", e.AuthorizationCode = "authorization_code", e.ClientCredential = "client_credentials", e.Passwordless = "passwordless", e.Password = "password", e.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", e.TokenExchange = "urn:ietf:params:oauth:grant-type:token-exchange", e;
-}({}), Fr = e.object({
+}({}), zr = e.object({
 	access_token: e.string(),
 	id_token: e.string().optional(),
 	scope: e.string().optional(),
@@ -2322,7 +2364,7 @@ e.object({
 });
 //#endregion
 //#region src/types/Theme.ts
-var Ir = e.object({
+var Br = e.object({
 	button_border_radius: e.number(),
 	button_border_weight: e.number(),
 	buttons_style: e.enum([
@@ -2340,7 +2382,7 @@ var Ir = e.object({
 	show_widget_shadow: e.boolean(),
 	widget_border_weight: e.number(),
 	widget_corner_radius: e.number()
-}), Lr = e.object({
+}), Vr = e.object({
 	base_focus_color: e.string(),
 	base_hover_color: e.string(),
 	body_text: e.string(),
@@ -2367,7 +2409,7 @@ var Ir = e.object({
 }), K = e.object({
 	bold: e.boolean(),
 	size: e.number()
-}), Rr = e.object({
+}), Hr = e.object({
 	body_text: K,
 	buttons_text: K,
 	font_url: e.string(),
@@ -2377,7 +2419,7 @@ var Ir = e.object({
 	reference_text_size: e.number(),
 	subtitle: K,
 	title: K
-}), zr = e.object({
+}), Ur = e.object({
 	background_color: e.string(),
 	background_image_url: e.string(),
 	page_layout: e.enum([
@@ -2390,7 +2432,7 @@ var Ir = e.object({
 		"chip",
 		"none"
 	]).optional()
-}), Br = e.object({
+}), Wr = e.object({
 	header_text_alignment: e.enum([
 		"center",
 		"left",
@@ -2405,43 +2447,44 @@ var Ir = e.object({
 	]),
 	logo_url: e.string(),
 	social_buttons_layout: e.enum(["bottom", "top"])
-}), Vr = e.object({
-	borders: Ir,
-	colors: Lr,
+}), Gr = e.object({
+	borders: Br,
+	colors: Vr,
 	displayName: e.string(),
-	fonts: Rr,
-	page_background: zr,
-	widget: Br
-}), Hr = Vr.extend({ themeId: e.string() }), Ur = e.object({
+	fonts: Hr,
+	page_background: Ur,
+	widget: Wr
+}), Kr = Gr.extend({ themeId: e.string() }), qr = e.object({
+	...i,
 	universal_login_experience: e.enum(["new", "classic"]).default("new"),
 	identifier_first: e.boolean().default(!0),
 	password_first: e.boolean().default(!1),
 	show_last_used_connection: e.boolean().default(!1),
 	webauthn_platform_first_factor: e.boolean()
-}), Wr = e.object({
+}), Jr = e.object({
 	hosts: e.array(e.string()).optional(),
 	methods: e.array(e.string()).optional(),
 	path: e.string().default("/*"),
 	headers: e.record(e.string(), e.string()).optional(),
 	query: e.record(e.string(), e.string()).optional()
-}), Gr = e.object({
+}), Yr = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
 }), q = e.object({
 	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
-	match: Wr,
-	handlers: e.array(Gr).min(1)
-}), Kr = q.extend({
+	match: Jr,
+	handlers: e.array(Yr).min(1)
+}), Xr = q.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), qr = q.partial().omit({
+}), Zr = q.partial().omit({
 	id: !0,
 	custom_domain_id: !0
-}), Jr = "custom_authentication", Yr = [
+}), Qr = "custom_authentication", $r = [
 	"urn:ietf:params:oauth:",
 	"urn:auth0",
 	"urn:okta",
@@ -2449,71 +2492,72 @@ var Ir = e.object({
 	"https://auth0.com",
 	"http://okta.com",
 	"https://okta.com"
-], J = e.string().min(1).max(200).refine((e) => e.startsWith("https://") || e.startsWith("urn:"), { message: "subject_token_type must be a URI starting with https:// or urn:" }).refine((e) => !Yr.some((t) => e.toLowerCase().startsWith(t)), { message: "subject_token_type uses a reserved namespace" }), Xr = e.enum([
+], J = e.string().min(1).max(200).refine((e) => e.startsWith("https://") || e.startsWith("urn:"), { message: "subject_token_type must be a URI starting with https:// or urn:" }).refine((e) => !$r.some((t) => e.toLowerCase().startsWith(t)), { message: "subject_token_type uses a reserved namespace" }), ei = e.enum([
 	"RS256",
 	"RS384",
 	"RS512",
 	"ES256",
 	"ES384",
 	"ES512"
-]), Zr = e.discriminatedUnion("type", [e.object({
+]), ti = e.discriminatedUnion("type", [e.object({
 	type: e.literal("connection"),
 	connection: e.string().min(1),
 	create_if_not_exists: e.boolean().default(!0),
 	trust_email_verified: e.boolean().default(!1)
 }), e.object({ type: e.literal("user_id") })]), Y = e.object({
 	issuer: e.string().min(1).max(2048),
-	jwks: Pn.optional(),
+	jwks: Rn.optional(),
 	jwks_uri: e.string().url().optional(),
 	audience: e.array(e.string().min(1)).min(1).optional(),
-	algorithms: e.array(Xr).min(1).optional(),
+	algorithms: e.array(ei).min(1).optional(),
 	max_lifetime_seconds: e.number().int().min(1).max(3600).default(300),
 	require_jti: e.boolean().default(!0),
-	user_mapping: Zr
-}), Qr = e.object({
+	user_mapping: ti
+}), ni = e.object({
 	name: e.string().min(1).max(255),
 	subject_token_type: J,
 	action_id: e.string().min(1).optional(),
-	type: e.literal(Jr),
+	type: e.literal(Qr),
 	jwt_verification: Y.optional()
-}), $r = Qr.extend({
+}), ri = ni.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), ei = e.object({
+}), ii = e.object({
 	name: e.string().min(1).max(255).optional(),
 	subject_token_type: J.optional(),
 	jwt_verification: Y.optional()
-}), ti = e.object({
+}), ai = e.object({
 	scim: e.string(),
 	auth0: e.string()
-}), ni = e.object({
+}), oi = e.object({
 	connection_id: e.string(),
 	user_id_attribute: e.string().default("externalId"),
-	mapping: e.array(ti).default([])
-}), ri = e.object({
+	mapping: e.array(ai).default([])
+}), si = e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(ni.shape), ii = e.object({
+}).extend(oi.shape), ci = e.object({
 	token_id: e.string(),
 	connection_id: e.string(),
 	token_hash: e.string(),
 	scopes: e.array(e.string()).default([]),
 	valid_until: e.string().optional()
-}), ai = e.object({
+}), li = e.object({
 	created_at: e.string(),
 	last_used_at: e.string().optional()
-}).extend(ii.shape), oi = e.object({
+}).extend(ci.shape), ui = e.object({
 	connection_id: e.string(),
 	external_id: e.string(),
 	user_id: e.string()
-}), si = e.object({ created_at: e.string() }).extend(oi.shape), ci = e.object({
+}), di = e.object({ created_at: e.string() }).extend(ui.shape), fi = e.object({
+	...i,
 	name: e.string(),
 	enabled: e.boolean().optional().default(!0),
 	default_from_address: e.string().optional(),
 	credentials: e.record(e.string(), e.unknown()),
 	settings: e.object({}).optional()
-}), li = e.enum([
+}), pi = e.enum([
 	"verify_email",
 	"verify_email_by_code",
 	"reset_email",
@@ -2526,8 +2570,8 @@ var Ir = e.object({
 	"change_password",
 	"password_reset",
 	"user_invitation"
-]), ui = e.object({
-	template: li,
+]), mi = e.object({
+	template: pi,
 	body: e.string(),
 	from: e.string(),
 	subject: e.string(),
@@ -2536,7 +2580,7 @@ var Ir = e.object({
 	urlLifetimeInSeconds: e.number().int().nonnegative().optional(),
 	includeEmailInRedirect: e.boolean().default(!1),
 	enabled: e.boolean().default(!0)
-}), di = e.object({
+}), hi = e.object({
 	id: e.string(),
 	login_id: e.string(),
 	session_id: e.string().optional(),
@@ -2548,7 +2592,7 @@ var Ir = e.object({
 	expires_at: e.string().optional(),
 	idle_expires_at: e.string().optional(),
 	last_exchanged_at: e.string().optional(),
-	device: lr,
+	device: pr,
 	resource_servers: e.array(e.object({
 		audience: e.string(),
 		scopes: e.string()
@@ -2559,19 +2603,19 @@ var Ir = e.object({
 	family_id: e.string().optional(),
 	rotated_to: e.string().optional(),
 	rotated_at: e.string().optional()
-}), fi = di.extend({
+}), gi = hi.extend({
 	created_at: e.string(),
 	revoked_at: e.string().optional()
-}), pi = e.object({
+}), _i = e.object({
 	to: e.string(),
 	message: e.string()
-}), mi = e.object({
+}), vi = e.object({
 	name: e.string(),
 	options: e.object({})
-}), hi = e.object({
+}), yi = e.object({
 	value: e.string(),
 	description: e.string().optional()
-}), gi = e.object({
+}), bi = e.object({
 	token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
 	enforce_policies: e.boolean().optional(),
 	allow_skipping_userinfo: e.boolean().optional(),
@@ -2579,11 +2623,11 @@ var Ir = e.object({
 	persist_client_authorization: e.boolean().optional(),
 	enable_introspection_endpoint: e.boolean().optional(),
 	mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
-}), _i = e.object({
+}), xi = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	identifier: e.string(),
-	scopes: e.array(hi).optional(),
+	scopes: e.array(yi).optional(),
 	signing_alg: e.string().optional(),
 	signing_secret: e.string().optional(),
 	token_lifetime: e.number().default(86400),
@@ -2591,37 +2635,38 @@ var Ir = e.object({
 	skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
 	allow_offline_access: e.boolean().optional(),
 	verificationKey: e.string().optional(),
-	options: gi.optional(),
+	options: bi.optional(),
 	is_system: e.boolean().optional(),
+	...i,
 	metadata: e.record(e.string(), e.any()).optional()
-}), vi = _i.extend({
+}), Si = xi.extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), yi = e.array(vi), bi = e.object({
+}), Ci = e.array(Si), wi = e.object({
 	role_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
-}), xi = bi.extend({ created_at: e.string() }), Si = e.array(xi), Ci = e.object({
+}), Ti = wi.extend({ created_at: e.string() }), Ei = e.array(Ti), Di = e.object({
 	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
 	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
 	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
 	scope: e.array(e.string()).default([]).openapi({ description: "The list of OAuth scopes the user has consented to" })
-}), wi = Ci.extend({ id: e.string() }), Ti = e.object({
+}), Oi = Di.extend({ id: e.string() }), ki = e.object({
 	user_id: e.string(),
 	last_login: e.string().optional(),
 	last_ip: e.string().optional(),
 	login_count: e.number().default(0),
 	failed_logins: e.array(e.string()).optional(),
 	last_password_reset: e.string().optional()
-}), Ei = e.object({
+}), Ai = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
 	organization_id: e.string().optional()
-}), Di = Ei.extend({
+}), ji = Ai.extend({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
-}), Oi = e.array(Di), ki = e.object({
+}), Mi = e.array(ji), Ni = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -2629,65 +2674,65 @@ var Ir = e.object({
 	description: e.string().nullable().optional(),
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
-}), Ai = e.array(ki), ji = e.object({
+}), Pi = e.array(Ni), Fi = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
-}), Mi = ji.extend({
+}), Ii = Fi.extend({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
-}), Ni = e.array(Mi), Pi = e.object({
+}), Li = e.array(Ii), Ri = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional().openapi({ description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios." })
-}), Fi = Pi.extend({
+}), zi = Ri.extend({
 	id: e.string().openapi({ description: "The unique identifier of the role" }),
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Ii = e.array(Fi), Li = e.object({
+}), Bi = e.array(zi), Vi = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), Ri = e.object({
+}).optional(), Hi = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), zi = e.object({ client_credentials: e.object({
+}), Ui = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
-}).optional() }).optional(), Bi = e.object({
+}).optional() }).optional(), Wi = e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: Li,
+	branding: Vi,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(Ri).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: zi
-}), Vi = Bi.extend(t.shape).extend({
+	enabled_connections: e.array(Hi).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: Ui
+}), Gi = Wi.extend(t.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
-}), Hi = e.object({
+}), Ki = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
 	is_signup_enabled: e.boolean().optional().default(!0)
-}), Ui = Hi.extend({
+}), qi = Ki.extend({
 	connection: e.object({
 		name: e.string().optional(),
 		strategy: e.string().optional()
 	}).optional(),
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Wi = e.array(Ui), Gi = e.object({
+}), Ji = e.array(qi), Yi = e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
-}), Ki = Gi.extend(t.shape).extend({ id: e.string() }), qi = e.object({
+}), Xi = Yi.extend(t.shape).extend({ id: e.string() }), Zi = e.object({
 	idle_session_lifetime: e.number().default(72),
 	session_lifetime: e.number().default(168),
 	session_cookie: e.object({ mode: e.enum(["persistent", "non-persistent"]).optional() }).optional(),
@@ -2766,7 +2811,7 @@ var Ir = e.object({
 		}).optional(),
 		phone_message: e.object({ message: e.string().optional() }).optional()
 	}).optional()
-}), Ji = e.object({
+}), Qi = e.object({
 	date: e.string().openapi({
 		description: "Date these events occurred in ISO 8601 format",
 		example: "2025-12-19"
@@ -2791,10 +2836,10 @@ var Ir = e.object({
 		description: "Approximate date and time the first event occurred in ISO 8601 format",
 		example: "2025-12-19T00:00:00.000Z"
 	})
-}), Yi = e.number().openapi({
+}), $i = e.number().openapi({
 	description: "Number of active users in the last 30 days",
 	example: 1234
-}), Xi = e.enum([
+}), ea = e.enum([
 	"active-users",
 	"logins",
 	"signups",
@@ -2806,81 +2851,81 @@ var Ir = e.object({
 	"mfa",
 	"email-verifications",
 	"codes-sent"
-]), Zi = e.enum([
+]), ta = e.enum([
 	"hour",
 	"day",
 	"week",
 	"month"
-]), Qi = e.enum([
+]), na = e.enum([
 	"time",
 	"connection",
 	"client_id",
 	"user_type",
 	"event"
-]), $i = e.enum([
+]), ra = e.enum([
 	"password",
 	"social",
 	"passwordless",
 	"enterprise"
-]), ea = e.object({
+]), ia = e.object({
 	cohort: e.string(),
 	sessions: e.number(),
 	active: e.array(e.number())
-}), ta = e.object({
+}), aa = e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(ea)
-}), na = e.object({
+	cohorts: e.array(ia)
+}), oa = e.object({
 	cohort: e.string(),
 	tokens: e.number(),
 	active: e.array(e.number())
-}), ra = e.object({
+}), sa = e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(na)
-}), ia = e.object({
+	cohorts: e.array(oa)
+}), ca = e.object({
 	name: e.string(),
 	type: e.string()
-}), aa = e.object({
+}), la = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
-}), oa = e.object({
-	meta: e.array(ia),
+}), ua = e.object({
+	meta: e.array(ca),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: aa.optional()
-}), sa = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), ca = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+	statistics: la.optional()
+}), da = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), fa = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
 		additionalProperties: { type: "string" }
 	}
-}), la = e.object({
-	prompt: sa,
+}), pa = e.object({
+	prompt: da,
 	language: e.string(),
-	custom_text: ca
-}), ua = [
+	custom_text: fa
+}), ma = [
 	"form-content-start",
 	"form-content-end",
 	"form-footer-start",
 	"form-footer-end",
 	"secondary-actions-start",
 	"secondary-actions-end"
-], da = e.object({
+], ha = e.object({
 	"form-content-start": e.string().optional(),
 	"form-content-end": e.string().optional(),
 	"form-footer-start": e.string().optional(),
 	"form-footer-end": e.string().optional(),
 	"secondary-actions-start": e.string().optional(),
 	"secondary-actions-end": e.string().optional()
-}).strict(), fa = e.record(e.string(), da), pa = e.object({
+}).strict(), ga = e.record(e.string(), ha), _a = e.object({
 	prompt: e.string(),
-	partials: fa
-}), ma = {
+	partials: ga
+}), va = {
 	EMAIL: "email",
 	SMS: "sms",
 	USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2896,17 +2941,17 @@ var Ir = e.object({
 	WAAD: "waad",
 	ADFS: "adfs",
 	OKTA: "okta"
-}, ha = {
+}, ya = {
 	DATABASE: "database",
 	SOCIAL: "social",
 	PASSWORDLESS: "passwordless"
-}, ga = "auth0";
-function _a(e) {
-	return e === "auth0" || e === ma.USERNAME_PASSWORD || e === "auth2";
+}, ba = "auth0";
+function xa(e) {
+	return e === "auth0" || e === va.USERNAME_PASSWORD || e === "auth2";
 }
 //#endregion
 //#region src/types/AuthenticationMethod.ts
-var va = e.enum([
+var Sa = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -2914,9 +2959,9 @@ var va = e.enum([
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), ya = e.object({
+]), Ca = e.object({
 	user_id: e.string(),
-	type: va,
+	type: Sa,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
 	credential_id: e.string().optional(),
@@ -2927,7 +2972,7 @@ var va = e.enum([
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function ba(t, n) {
+function wa(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -2950,15 +2995,15 @@ function ba(t, n) {
 		path: ["public_key"]
 	}));
 }
-var xa = ya.superRefine(ba), Sa = ya.extend({
+var Ta = Ca.superRefine(wa), Ea = Ca.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(ba), Ca = e.object({
+}).superRefine(wa), Da = e.object({
 	id: e.string().optional(),
 	created_at: e.string().datetime({ offset: !0 }).optional(),
 	updated_at: e.string().datetime({ offset: !0 }).optional()
-}), wa = {
+}), Oa = {
 	"post-user-login": {
 		accessToken: ["setCustomClaim"],
 		idToken: ["setCustomClaim"],
@@ -2986,7 +3031,7 @@ var xa = ya.superRefine(ba), Sa = ya.extend({
 		authentication: ["setUserById", "setUserByConnection"],
 		access: ["deny", "rejectInvalidSubjectToken"]
 	}
-}, Ta = {
+}, ka = {
 	"post-user-login": "onExecutePostLogin",
 	"credentials-exchange": "onExecuteCredentialsExchange",
 	"pre-user-registration": "onExecutePreUserRegistration",
@@ -2995,7 +3040,7 @@ var xa = ya.superRefine(ba), Sa = ya.extend({
 };
 //#endregion
 //#region src/utils/user-id.ts
-function Ea(e) {
+function Aa(e) {
 	let t = e.indexOf("|"), n = e.slice(0, t), r = e.slice(t + 1);
 	if (t === -1 || !n || !r) throw Error(`Invalid user_id: ${e}`);
 	return {
@@ -3005,10 +3050,10 @@ function Ea(e) {
 }
 //#endregion
 //#region src/utils/http.ts
-var Da = "x-authhero-preserve-location";
+var ja = "x-authhero-preserve-location";
 //#endregion
 //#region src/utils/passthrough.ts
-function Oa(e) {
+function Ma(e) {
 	let { primary: t, secondaries: n, syncMethods: r = [
 		"create",
 		"rawCreate",
@@ -3042,12 +3087,12 @@ function Oa(e) {
 		} : i.bind(e) : i;
 	} });
 }
-function ka(e) {
+function Na(e) {
 	return e;
 }
 //#endregion
 //#region src/utils/connection-attributes.ts
-function Aa(e) {
+function Pa(e) {
 	let t = e?.options;
 	if (!t) return {
 		usernameIdentifierActive: !1,
@@ -3070,35 +3115,35 @@ function Aa(e) {
 }
 //#endregion
 //#region src/utils/guards.ts
-function ja(e) {
+function Fa(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
 //#endregion
 //#region src/utils/base64url.ts
-function Ma(e) {
+function Ia(e) {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-function Na(e) {
+function La(e) {
 	let t = e.replace(/-/g, "+").replace(/_/g, "/"), n = atob(t), r = new Uint8Array(n.length);
 	for (let e = 0; e < n.length; e++) r[e] = n.charCodeAt(e);
 	return r;
 }
-function Pa(e) {
-	return Ma(new TextEncoder().encode(e));
+function Ra(e) {
+	return Ia(new TextEncoder().encode(e));
 }
-function Fa(e) {
-	return new TextDecoder().decode(Na(e));
+function za(e) {
+	return new TextDecoder().decode(La(e));
 }
 //#endregion
 //#region src/utils/base64.ts
-function Ia(e) {
+function Ba(e) {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t);
 }
-function La(e) {
+function Va(e) {
 	let t = atob(e), n = new Uint8Array(t.length);
 	for (let e = 0; e < t.length; e++) n[e] = t.charCodeAt(e);
 	return n;
@@ -3106,12 +3151,12 @@ function La(e) {
 //#endregion
 //#region src/utils/base32.ts
 var X = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
-function Ra(e) {
+function Ha(e) {
 	let t = "", n = 0, r = 0;
 	for (let i of e) for (n = n << 8 | i, r += 8; r >= 5;) r -= 5, t += X[n >> r & 31];
 	return r > 0 && (t += X[n << 5 - r & 31]), t;
 }
-function za(e) {
+function Ua(e) {
 	let t = e.replace(/=+$/, "").toUpperCase(), n = t.length % 8;
 	if (n === 1 || n === 3 || n === 6) throw Error(`Invalid base32 length: ${t.length}`);
 	let r = [], i = 0, a = 0;
@@ -3125,19 +3170,19 @@ function za(e) {
 }
 //#endregion
 //#region src/utils/hex.ts
-function Ba(e) {
+function Wa(e) {
 	let t = e instanceof Uint8Array ? e : new Uint8Array(e), n = "";
 	for (let e of t) n += e.toString(16).padStart(2, "0");
 	return n;
 }
 //#endregion
 //#region src/utils/cursor.ts
-function Va(e) {
-	return Pa(JSON.stringify(e));
+function Ga(e) {
+	return Ra(JSON.stringify(e));
 }
-function Ha(e) {
+function Ka(e) {
 	try {
-		let t = JSON.parse(Fa(e));
+		let t = JSON.parse(za(e));
 		return t && typeof t == "object" && typeof t.i == "string" ? t : null;
 	} catch {
 		return null;
@@ -3145,7 +3190,7 @@ function Ha(e) {
 }
 //#endregion
 //#region src/utils/lucene.ts
-function Ua(e) {
+function qa(e) {
 	let t = [], n = "", r = !1;
 	for (let i = 0; i < e.length; i++) {
 		let a = e[i];
@@ -3153,53 +3198,53 @@ function Ua(e) {
 	}
 	return n.trim() && t.push(n.trim()), t;
 }
-function Wa(e) {
+function Ja(e) {
 	return e.replace(/\\([\\"+\-!(){}[\]^~*?:/&|])/g, "$1");
 }
-function Ga(e) {
+function Ya(e) {
 	return `"${e.replace(/([\\"])/g, "\\$1")}"`;
 }
-function Ka(e) {
+function Xa(e) {
 	let t = e.trim();
-	return Wa(t.length > 1 && t.startsWith("\"") && t.endsWith("\"") ? t.slice(1, -1) : t);
+	return Ja(t.length > 1 && t.startsWith("\"") && t.endsWith("\"") ? t.slice(1, -1) : t);
 }
-function qa(e) {
+function Za(e) {
 	let t = [], n = [];
-	for (let r of Ua(e)) /^or$/i.test(r) ? (t.push(n), n = []) : n.push(r);
+	for (let r of qa(e)) /^or$/i.test(r) ? (t.push(n), n = []) : n.push(r);
 	return t.push(n), t.filter((e) => e.length > 0);
 }
-function Ja(e, t) {
+function Qa(e, t) {
 	let n = new Set(t), r = (e) => {
 		let t = e.replace(/^([^:]+)=/, "$1:"), r = t.startsWith("-") ? t.slice(1) : t;
 		if (r.startsWith("_exists_:")) return n.has(r.slice(9));
 		let i = r.indexOf(":");
 		return i > 0 ? n.has(r.slice(0, i)) : !0;
 	};
-	return qa(e).map((e) => e.filter(r).join(" ")).filter((e) => e.length > 0).join(" OR ");
+	return Za(e).map((e) => e.filter(r).join(" ")).filter((e) => e.length > 0).join(" OR ");
 }
-var Ya = /^[^\s@%_*?"'()[\]{}^~:\\/]+@[^\s@%_*?"'()[\]{}^~:\\/]+\.[^\s@%_*?"'()[\]{}^~:\\/]+$/;
-function Xa(e) {
-	return Ya.test(e);
+var $a = /^[^\s@%_*?"'()[\]{}^~:\\/]+@[^\s@%_*?"'()[\]{}^~:\\/]+\.[^\s@%_*?"'()[\]{}^~:\\/]+$/;
+function eo(e) {
+	return $a.test(e);
 }
 //#endregion
 //#region src/utils/session-retention.ts
 var Z = 10080 * 60 * 1e3, Q = 4320 * 60 * 1e3;
-function Za(e) {
+function to(e) {
 	return Math.floor((e + Q) / Z);
 }
 function $(e) {
 	return e * Z - Q;
 }
-function Qa(e, t = Date.now()) {
-	let n = Za(t), r = n - e + 1;
+function no(e, t = Date.now()) {
+	let n = to(t), r = n - e + 1;
 	return {
 		currentWeek: n,
 		firstWeek: r,
 		sinceMs: $(r)
 	};
 }
-function $a(e, t, n = Date.now()) {
-	let { currentWeek: r, firstWeek: i, sinceMs: a } = Qa(t, n), o = /* @__PURE__ */ new Map();
+function ro(e, t, n = Date.now()) {
+	let { currentWeek: r, firstWeek: i, sinceMs: a } = no(t, n), o = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		if (t.created_week < i || t.created_week > r) continue;
 		let e = Math.min(Math.max(0, t.used_week - t.created_week), r - t.created_week), n = o.get(t.created_week);
@@ -3222,8 +3267,8 @@ function $a(e, t, n = Date.now()) {
 		cohorts: s
 	};
 }
-function eo(e, t, n = Date.now()) {
-	let r = $a(e, t, n);
+function io(e, t, n = Date.now()) {
+	let r = ro(e, t, n);
 	return {
 		interval: r.interval,
 		from: r.from,
@@ -3237,16 +3282,16 @@ function eo(e, t, n = Date.now()) {
 }
 //#endregion
 //#region src/utils/username-validation.ts
-var to = /^[A-Za-z0-9_+\-.!#$'^`~]+$/, no = "Username can only contain alphanumeric characters and the following characters: '_', '+', '-', '.', '!', '#', '$', \"'\", '^', '`', '~'", ro = "Usernames must not contain \"@\". Use the email field for email addresses.";
-function io(e) {
-	return to.test(e);
+var ao = /^[A-Za-z0-9_+\-.!#$'^`~]+$/, oo = "Username can only contain alphanumeric characters and the following characters: '_', '+', '-', '.', '!', '#', '$', \"'\", '^', '`', '~'", so = "Usernames must not contain \"@\". Use the email field for email addresses.";
+function co(e) {
+	return ao.test(e);
 }
-function ao(e) {
+function lo(e) {
 	return e.toLowerCase();
 }
-function oo(e, t) {
-	if (e.includes("@")) return ro;
-	if (!io(e)) return no;
+function uo(e, t) {
+	if (e.includes("@")) return so;
+	if (!co(e)) return oo;
 	if (t) {
 		let n = [...e].length;
 		if (n < t.min) return `Username must be at least ${t.min} characters`;
@@ -3256,15 +3301,15 @@ function oo(e, t) {
 }
 //#endregion
 //#region src/utils/feature-not-supported.ts
-var so = class extends Error {
+var fo = class extends Error {
 	feature;
 	adapter;
 	constructor(e, t, n) {
 		super(`${e} is not supported by the ${t} adapter.` + (n ? ` ${n}` : "")), this.name = "FeatureNotSupportedError", this.feature = e, this.adapter = t;
 	}
 };
-function co(e) {
+function po(e) {
 	return e instanceof Error && e.name === "FeatureNotSupportedError";
 }
 //#endregion
-export { be as Auth0ActionEnum, Gn as Auth0Client, T as AuthorizationResponseMode, w as AuthorizationResponseType, nt as CodeChallengeMethod, S as ComponentCategory, x as ComponentType, ga as DATABASE_CONNECTION_STRATEGY, xe as EmailActionEnum, Xt as FORM_FIELD_TYPES, so as FeatureNotSupportedError, ye as FlowActionTypeEnum, Pr as GrantType, vr as KNOWN_TENANT_OPERATION_ENGINES, Kn as LocationInfo, U as LogTypes, In as LoginSessionState, Q as MONDAY_EPOCH_SHIFT_MS, Ke as NodeType, Da as PRESERVE_LOCATION_HEADER, Yr as RESERVED_SUBJECT_TOKEN_TYPE_PREFIXES, Te as RedirectTargetEnum, ma as Strategy, ha as StrategyType, Tr as TERMINAL_TENANT_OPERATION_ROW_STATUSES, Jr as TOKEN_EXCHANGE_PROFILE_TYPE, wa as TRIGGER_API_SHAPES, Ta as TRIGGER_FUNCTION_NAMES, ro as USERNAME_CONTAINS_AT_MESSAGE, no as USERNAME_INVALID_CHARACTERS_MESSAGE, Z as WEEK_MS, r as actionDependencySchema, ne as actionExecutionErrorSchema, se as actionExecutionInsertSchema, ie as actionExecutionLogEntrySchema, ae as actionExecutionLogsSchema, re as actionExecutionResultSchema, oe as actionExecutionSchema, l as actionExecutionStatusSchema, c as actionExecutionTriggerIdSchema, a as actionInsertSchema, Ye as actionNodeSchema, te as actionResponseSchema, s as actionSchema, ee as actionSecretNameSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, ce as actionVersionInsertSchema, le as actionVersionSchema, Yi as activeUsersResponseSchema, de as actorSchema, d as addressSchema, pn as allowedTriggersForHook, ia as analyticsColumnMetaSchema, Qi as analyticsGroupBySchema, Zi as analyticsIntervalSchema, oa as analyticsQueryResponseSchema, Xi as analyticsResourceSchema, aa as analyticsStatisticsSchema, $i as analyticsUserTypeSchema, or as attackProtectionSchema, ue as auditCategorySchema, _e as auditEventInsertSchema, ve as auditEventSchema, ge as auth0ClientSchema, tt as auth0FlowInsertSchema, et as auth0FlowSchema, Ae as auth0QuerySchema, Ce as auth0UpdateUserActionSchema, Ne as auth0UserResponseSchema, at as authParamsSchema, xa as authenticationMethodInsertSchema, Sa as authenticationMethodSchema, va as authenticationMethodTypeSchema, f as baseUserSchema, qt as blockComponentSchema, Ir as bordersSchema, ot as brandingSchema, rr as breachedPasswordDetectionSchema, ir as bruteForceProtectionSchema, eo as buildRefreshTokenRetention, $a as buildSessionRetention, Ve as buttonComponentSchema, it as claimsRequestSchema, g as clientGrantInsertSchema, Re as clientGrantListSchema, _ as clientGrantSchema, h as clientInsertSchema, y as clientRegistrationTokenInsertSchema, ze as clientRegistrationTokenSchema, v as clientRegistrationTokenTypeSchema, Le as clientSchema, ct as codeInsertSchema, lt as codeSchema, st as codeTypeSchema, Lr as colorsSchema, an as componentMessageSchema, Ge as componentSchema, dt as connectionInsertSchema, ut as connectionOptionsSchema, ft as connectionSchema, b as coordinatesSchema, Oa as createPassthroughAdapter, ka as createWriteOnlyAdapter, _t as customDomainCertificateUploadSchema, D as customDomainInsertSchema, mt as customDomainSchema, ht as customDomainUpdateSchema, gt as customDomainWithTenantIdSchema, la as customTextEntrySchema, ca as customTextSchema, Ji as dailyStatsSchema, za as decodeBase32, La as decodeBase64, Na as decodeBase64Url, Fa as decodeBase64UrlString, Ha as decodeCursor, ci as emailProviderSchema, li as emailTemplateNameSchema, ui as emailTemplateSchema, Se as emailVerificationRulesSchema, we as emailVerifyActionSchema, Ra as encodeBase32, Ia as encodeBase64, Ma as encodeBase64Url, Pa as encodeBase64UrlString, Va as encodeCursor, Ba as encodeHex, $e as endingSchema, Ga as escapeLuceneValue, Yt as fieldComponentSchema, De as flowActionStepSchema, Oe as flowInsertSchema, ke as flowSchema, Ue as flowsFieldComponentSchema, Je as flowsFlowNodeSchema, qe as flowsStepNodeSchema, K as fontDetailsSchema, Rr as fontsSchema, Zt as formControlSchema, nn as formInsertSchema, M as formNodeComponentDefinition, tn as formNodeSchema, rn as formSchema, We as genericComponentSchema, Xe as genericNodeSchema, Aa as getConnectionIdentifierConfig, Wn as getLogTypeCategory, Un as getLogTypeDescription, Ci as grantInsertSchema, wi as grantSchema, Gr as handlerConfigSchema, Dn as hookCodeInsertSchema, On as hookCodeSchema, bn as hookInsertSchema, z as hookPageId, En as hookSchema, B as hookTemplateId, mn as hookTemplates, Me as identitySchema, Ca as importMetadataSchema, jn as inviteInsertSchema, Mn as inviteSchema, An as inviteeSchema, kn as inviterSchema, ln as isBlockComponent, _a as isDatabaseConnectionStrategy, Xa as isEmailSearchTerm, co as isFeatureNotSupportedError, dn as isFieldComponent, ja as isPlainObject, un as isWidgetComponent, Pn as jwksKeySchema, Nn as jwksSchema, He as legalComponentSchema, he as locationInfoSchema, qn as logInsertSchema, Jn as logSchema, Xn as logStreamFilterSchema, Zn as logStreamInsertSchema, Qn as logStreamSchema, W as logStreamStatusSchema, Yn as logStreamTypeSchema, Hn as logTypeCategories, Vn as logTypeDescriptions, H as loginSessionAuthStrategySchema, Rn as loginSessionInsertSchema, zn as loginSessionSchema, Ln as loginSessionStateSchema, Wr as matchSchema, $n as migrationProviderTypeSchema, er as migrationSourceCredentialsSchema, tr as migrationSourceInsertSchema, nr as migrationSourceSchema, Ze as nodeSchema, ao as normalizeUsername, Fn as openIDConfigurationSchema, Li as organizationBrandingSchema, Hi as organizationConnectionInsertSchema, Wi as organizationConnectionListSchema, Ui as organizationConnectionSchema, Ri as organizationEnabledConnectionSchema, Bi as organizationInsertSchema, Vi as organizationSchema, zi as organizationTokenQuotaSchema, zr as pageBackgroundSchema, Ea as parseUserId, sr as passwordInsertSchema, cr as passwordSchema, u as profileDataSchema, ua as promptPartialInsertionPoints, pa as promptPartialsEntrySchema, fa as promptPartialsSchema, sa as promptScreenSchema, Ur as promptSettingSchema, q as proxyRouteInsertSchema, Kr as proxyRouteSchema, qr as proxyRouteUpdateSchema, Ee as redirectActionSchema, di as refreshTokenInsertSchema, na as refreshTokenRetentionCohortSchema, ra as refreshTokenRetentionResponseSchema, fi as refreshTokenSchema, pe as requestContextSchema, _i as resourceServerInsertSchema, yi as resourceServerListSchema, gi as resourceServerOptionsSchema, vi as resourceServerSchema, hi as resourceServerScopeSchema, me as responseContextSchema, Be as richTextComponentSchema, Pi as roleInsertSchema, Ii as roleListSchema, bi as rolePermissionInsertSchema, Si as rolePermissionListSchema, xi as rolePermissionSchema, Fi as roleSchema, jr as rolloutInsertSchema, kr as rolloutKindSchema, Mr as rolloutSchema, Ar as rolloutStatusSchema, Nr as rolloutUpdateSchema, Ja as sanitizeLuceneQuery, ni as scimConfigurationInsertSchema, ri as scimConfigurationSchema, oi as scimExternalIdInsertSchema, si as scimExternalIdSchema, ti as scimMappingEntrySchema, ii as scimTokenInsertSchema, ai as scimTokenSchema, on as screenLinkSchema, ur as sessionInsertSchema, ea as sessionRetentionCohortSchema, ta as sessionRetentionResponseSchema, Qa as sessionRetentionWindow, dr as sessionSchema, fr as signingKeySchema, mi as smsProviderSchema, pi as smsSendParamsSchema, qa as splitLuceneOrGroups, Qe as startSchema, J as subjectTokenTypeSchema, ar as suspiciousIpThrottlingSchema, fe as targetSchema, pr as tenantInsertSchema, _r as tenantOperationEngineSchema, Cr as tenantOperationEventInsertSchema, Sr as tenantOperationEventOutcomeSchema, wr as tenantOperationEventSchema, yr as tenantOperationInsertSchema, hr as tenantOperationKindSchema, Er as tenantOperationRowInsertSchema, Or as tenantOperationRowOutcomeSchema, Dr as tenantOperationRowSchema, G as tenantOperationRowStatusSchema, br as tenantOperationSchema, gr as tenantOperationStatusSchema, xr as tenantOperationUpdateSchema, mr as tenantSchema, qi as tenantSettingsSchema, Vr as themeInsertSchema, Hr as themeSchema, Xr as tokenExchangeJwtAlgorithmSchema, Y as tokenExchangeJwtVerificationSchema, Qr as tokenExchangeProfileInsertSchema, $r as tokenExchangeProfileSchema, ei as tokenExchangeProfileUpdateSchema, Zr as tokenExchangeUserMappingSchema, Fr as tokenResponseSchema, Ua as tokenizeLuceneQuery, je as totalsSchema, sn as uiScreenPartialsSchema, cn as uiScreenSchema, Wa as unescapeLuceneValue, Ka as unquoteLuceneValue, Ti as userActivitySchema, p as userInsertSchema, Gi as userOrganizationInsertSchema, Ki as userOrganizationSchema, Ei as userPermissionInsertSchema, Oi as userPermissionListSchema, Di as userPermissionSchema, Ai as userPermissionWithDetailsListSchema, ki as userPermissionWithDetailsSchema, Pe as userResponseSchema, ji as userRoleInsertSchema, Ni as userRoleListSchema, Mi as userRoleSchema, m as userSchema, io as usernameHasOnlyAllowedCharacters, oo as validateUsername, pt as verificationMethodsSchema, Za as weekIndex, $ as weekStartMs, Jt as widgetComponentSchema, Br as widgetSchema };
+export { we as Auth0ActionEnum, Yn as Auth0Client, T as AuthorizationResponseMode, w as AuthorizationResponseType, ot as CodeChallengeMethod, Ue as ComponentCategory, He as ComponentType, ba as DATABASE_CONNECTION_STRATEGY, Te as EmailActionEnum, en as FORM_FIELD_TYPES, fo as FeatureNotSupportedError, Ce as FlowActionTypeEnum, Rr as GrantType, Sr as KNOWN_TENANT_OPERATION_ENGINES, Xn as LocationInfo, U as LogTypes, Bn as LoginSessionState, Q as MONDAY_EPOCH_SHIFT_MS, Xe as NodeType, ja as PRESERVE_LOCATION_HEADER, $r as RESERVED_SUBJECT_TOKEN_TYPE_PREFIXES, ke as RedirectTargetEnum, va as Strategy, ya as StrategyType, kr as TERMINAL_TENANT_OPERATION_ROW_STATUSES, Qr as TOKEN_EXCHANGE_PROFILE_TYPE, Oa as TRIGGER_API_SHAPES, ka as TRIGGER_FUNCTION_NAMES, so as USERNAME_CONTAINS_AT_MESSAGE, oo as USERNAME_INVALID_CHARACTERS_MESSAGE, Z as WEEK_MS, o as actionDependencySchema, ae as actionExecutionErrorSchema, ue as actionExecutionInsertSchema, se as actionExecutionLogEntrySchema, ce as actionExecutionLogsSchema, oe as actionExecutionResultSchema, le as actionExecutionSchema, ie as actionExecutionStatusSchema, re as actionExecutionTriggerIdSchema, c as actionInsertSchema, $e as actionNodeSchema, ne as actionResponseSchema, l as actionSchema, te as actionSecretNameSchema, s as actionSecretSchema, a as actionTriggerSchema, ee as actionUpdateSchema, de as actionVersionInsertSchema, fe as actionVersionSchema, $i as activeUsersResponseSchema, me as actorSchema, p as addressSchema, _n as allowedTriggersForHook, ca as analyticsColumnMetaSchema, na as analyticsGroupBySchema, ta as analyticsIntervalSchema, ua as analyticsQueryResponseSchema, ea as analyticsResourceSchema, la as analyticsStatisticsSchema, ra as analyticsUserTypeSchema, ur as attackProtectionSchema, pe as auditCategorySchema, xe as auditEventInsertSchema, Se as auditEventSchema, be as auth0ClientSchema, at as auth0FlowInsertSchema, it as auth0FlowSchema, Ne as auth0QuerySchema, De as auth0UpdateUserActionSchema, Fe as auth0UserResponseSchema, lt as authParamsSchema, Ta as authenticationMethodInsertSchema, Ea as authenticationMethodSchema, Sa as authenticationMethodTypeSchema, m as baseUserSchema, Zt as blockComponentSchema, Br as bordersSchema, ut as brandingSchema, sr as breachedPasswordDetectionSchema, cr as bruteForceProtectionSchema, io as buildRefreshTokenRetention, ro as buildSessionRetention, Ge as buttonComponentSchema, ct as claimsRequestSchema, v as clientGrantInsertSchema, Be as clientGrantListSchema, y as clientGrantSchema, _ as clientInsertSchema, x as clientRegistrationTokenInsertSchema, Ve as clientRegistrationTokenSchema, b as clientRegistrationTokenTypeSchema, ze as clientSchema, ft as codeInsertSchema, pt as codeSchema, dt as codeTypeSchema, Vr as colorsSchema, ln as componentMessageSchema, Ye as componentSchema, i as configInheritanceShape, r as configOverrideSchema, n as configScopeSchema, ht as connectionInsertSchema, mt as connectionOptionsSchema, gt as connectionSchema, S as coordinatesSchema, Ma as createPassthroughAdapter, Na as createWriteOnlyAdapter, xt as customDomainCertificateUploadSchema, D as customDomainInsertSchema, vt as customDomainSchema, yt as customDomainUpdateSchema, bt as customDomainWithTenantIdSchema, pa as customTextEntrySchema, fa as customTextSchema, Qi as dailyStatsSchema, Ua as decodeBase32, Va as decodeBase64, La as decodeBase64Url, za as decodeBase64UrlString, Ka as decodeCursor, fi as emailProviderSchema, pi as emailTemplateNameSchema, mi as emailTemplateSchema, Ee as emailVerificationRulesSchema, Oe as emailVerifyActionSchema, Ha as encodeBase32, Ba as encodeBase64, Ia as encodeBase64Url, Ra as encodeBase64UrlString, Ga as encodeCursor, Wa as encodeHex, rt as endingSchema, Ya as escapeLuceneValue, $t as fieldComponentSchema, je as flowActionStepSchema, u as flowInsertSchema, Me as flowSchema, qe as flowsFieldComponentSchema, Qe as flowsFlowNodeSchema, Ze as flowsStepNodeSchema, K as fontDetailsSchema, Hr as fontsSchema, tn as formControlSchema, sn as formInsertSchema, M as formNodeComponentDefinition, on as formNodeSchema, cn as formSchema, Je as genericComponentSchema, et as genericNodeSchema, Pa as getConnectionIdentifierConfig, Jn as getLogTypeCategory, qn as getLogTypeDescription, Di as grantInsertSchema, Oi as grantSchema, Yr as handlerConfigSchema, jn as hookCodeInsertSchema, Mn as hookCodeSchema, wn as hookInsertSchema, z as hookPageId, An as hookSchema, B as hookTemplateId, vn as hookTemplates, f as identitySchema, Da as importMetadataSchema, Fn as inviteInsertSchema, In as inviteSchema, Pn as inviteeSchema, Nn as inviterSchema, pn as isBlockComponent, xa as isDatabaseConnectionStrategy, eo as isEmailSearchTerm, po as isFeatureNotSupportedError, hn as isFieldComponent, Fa as isPlainObject, mn as isWidgetComponent, Rn as jwksKeySchema, Ln as jwksSchema, Ke as legalComponentSchema, ye as locationInfoSchema, Zn as logInsertSchema, Qn as logSchema, er as logStreamFilterSchema, tr as logStreamInsertSchema, nr as logStreamSchema, W as logStreamStatusSchema, $n as logStreamTypeSchema, Kn as logTypeCategories, Gn as logTypeDescriptions, H as loginSessionAuthStrategySchema, Hn as loginSessionInsertSchema, Un as loginSessionSchema, Vn as loginSessionStateSchema, Jr as matchSchema, rr as migrationProviderTypeSchema, ir as migrationSourceCredentialsSchema, ar as migrationSourceInsertSchema, or as migrationSourceSchema, tt as nodeSchema, lo as normalizeUsername, zn as openIDConfigurationSchema, Vi as organizationBrandingSchema, Ki as organizationConnectionInsertSchema, Ji as organizationConnectionListSchema, qi as organizationConnectionSchema, Hi as organizationEnabledConnectionSchema, Wi as organizationInsertSchema, Gi as organizationSchema, Ui as organizationTokenQuotaSchema, Ur as pageBackgroundSchema, Aa as parseUserId, dr as passwordInsertSchema, fr as passwordSchema, d as profileDataSchema, ma as promptPartialInsertionPoints, _a as promptPartialsEntrySchema, ga as promptPartialsSchema, da as promptScreenSchema, qr as promptSettingSchema, q as proxyRouteInsertSchema, Xr as proxyRouteSchema, Zr as proxyRouteUpdateSchema, Ae as redirectActionSchema, hi as refreshTokenInsertSchema, oa as refreshTokenRetentionCohortSchema, sa as refreshTokenRetentionResponseSchema, gi as refreshTokenSchema, ge as requestAuthSchema, _e as requestContextSchema, xi as resourceServerInsertSchema, Ci as resourceServerListSchema, bi as resourceServerOptionsSchema, Si as resourceServerSchema, yi as resourceServerScopeSchema, ve as responseContextSchema, We as richTextComponentSchema, Ri as roleInsertSchema, Bi as roleListSchema, wi as rolePermissionInsertSchema, Ei as rolePermissionListSchema, Ti as rolePermissionSchema, zi as roleSchema, Fr as rolloutInsertSchema, Nr as rolloutKindSchema, Ir as rolloutSchema, Pr as rolloutStatusSchema, Lr as rolloutUpdateSchema, Qa as sanitizeLuceneQuery, oi as scimConfigurationInsertSchema, si as scimConfigurationSchema, ui as scimExternalIdInsertSchema, di as scimExternalIdSchema, ai as scimMappingEntrySchema, ci as scimTokenInsertSchema, li as scimTokenSchema, un as screenLinkSchema, mr as sessionInsertSchema, ia as sessionRetentionCohortSchema, aa as sessionRetentionResponseSchema, no as sessionRetentionWindow, hr as sessionSchema, gr as signingKeySchema, vi as smsProviderSchema, _i as smsSendParamsSchema, Za as splitLuceneOrGroups, nt as startSchema, J as subjectTokenTypeSchema, lr as suspiciousIpThrottlingSchema, he as targetSchema, _r as tenantInsertSchema, xr as tenantOperationEngineSchema, Dr as tenantOperationEventInsertSchema, Er as tenantOperationEventOutcomeSchema, Or as tenantOperationEventSchema, Cr as tenantOperationInsertSchema, yr as tenantOperationKindSchema, Ar as tenantOperationRowInsertSchema, Mr as tenantOperationRowOutcomeSchema, jr as tenantOperationRowSchema, G as tenantOperationRowStatusSchema, wr as tenantOperationSchema, br as tenantOperationStatusSchema, Tr as tenantOperationUpdateSchema, vr as tenantSchema, Zi as tenantSettingsSchema, Gr as themeInsertSchema, Kr as themeSchema, ei as tokenExchangeJwtAlgorithmSchema, Y as tokenExchangeJwtVerificationSchema, ni as tokenExchangeProfileInsertSchema, ri as tokenExchangeProfileSchema, ii as tokenExchangeProfileUpdateSchema, ti as tokenExchangeUserMappingSchema, zr as tokenResponseSchema, qa as tokenizeLuceneQuery, Pe as totalsSchema, dn as uiScreenPartialsSchema, fn as uiScreenSchema, Ja as unescapeLuceneValue, Xa as unquoteLuceneValue, ki as userActivitySchema, h as userInsertSchema, Yi as userOrganizationInsertSchema, Xi as userOrganizationSchema, Ai as userPermissionInsertSchema, Mi as userPermissionListSchema, ji as userPermissionSchema, Pi as userPermissionWithDetailsListSchema, Ni as userPermissionWithDetailsSchema, Ie as userResponseSchema, Fi as userRoleInsertSchema, Li as userRoleListSchema, Ii as userRoleSchema, g as userSchema, co as usernameHasOnlyAllowedCharacters, uo as validateUsername, _t as verificationMethodsSchema, to as weekIndex, $ as weekStartMs, Qt as widgetComponentSchema, Wr as widgetSchema };