@authhero/adapter-interfaces 4.22.0 → 4.24.0

package/dist/adapter-interfaces.mjs

@@ -37,7 +37,7 @@ var t = e.object({
 }), ee = c.partial().extend({
 	status: e.enum(["draft", "built"]).optional(),
 	deployed_at: e.string().optional()
-}), l = c.extend({
+}), te = c.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	status: e.enum(["draft", "built"]).default("built"),
@@ -46,23 +46,23 @@ var t = e.object({
 		name: e.string(),
 		value: e.string().optional()
 	})).optional()
-}).extend(t.shape), te = e.object({ name: e.string() }), ne = l.extend({ secrets: e.array(te).optional() }), re = e.string(), ie = e.enum([
+}).extend(t.shape), ne = e.object({ name: e.string() }), re = te.extend({ secrets: e.array(ne).optional() }), ie = e.string(), ae = e.enum([
 	"unspecified",
 	"pending",
 	"final",
 	"partial",
 	"canceled",
 	"suspended"
-]), ae = e.object({
+]), oe = e.object({
 	id: e.string(),
 	msg: e.string(),
 	url: e.string().optional()
-}), oe = e.object({
+}), se = e.object({
 	action_name: e.string(),
-	error: ae.nullable(),
+	error: oe.nullable(),
 	started_at: e.string(),
 	ended_at: e.string()
-}), se = e.object({
+}), ce = e.object({
 	level: e.enum([
 		"log",
 		"info",
@@ -71,23 +71,23 @@ var t = e.object({
 		"debug"
 	]),
 	message: e.string()
-}), ce = e.array(e.object({
+}), le = e.array(e.object({
 	action_name: e.string(),
-	lines: e.array(se)
-})), le = e.object({
+	lines: e.array(ce)
+})), ue = e.object({
 	id: e.string(),
 	tenant_id: e.string(),
-	trigger_id: re,
-	status: ie,
-	results: e.array(oe),
-	logs: ce.optional(),
+	trigger_id: ie,
+	status: ae,
+	results: e.array(se),
+	logs: le.optional(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), ue = le.omit({
+}), de = ue.omit({
 	tenant_id: !0,
 	created_at: !0,
 	updated_at: !0
-}), de = e.object({
+}), fe = e.object({
 	action_id: e.string(),
 	code: e.string().max(1e5),
 	runtime: e.string().max(50).optional(),
@@ -95,16 +95,16 @@ var t = e.object({
 	secrets: e.array(s).optional(),
 	supported_triggers: e.array(a).optional(),
 	deployed: e.boolean().default(!0)
-}), fe = de.extend({
+}), pe = fe.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	number: e.number().int()
-}).extend(t.shape), pe = e.enum([
+}).extend(t.shape), me = e.enum([
 	"user_action",
 	"admin_action",
 	"system",
 	"api"
-]), me = e.object({
+]), he = e.object({
 	type: e.enum([
 		"user",
 		"admin",
@@ -118,7 +118,7 @@ var t = e.object({
 	org_name: e.string().optional(),
 	scopes: e.array(e.string()).optional(),
 	client_id: e.string().optional()
-}), he = e.object({
+}), ge = e.object({
 	type: e.string(),
 	id: e.string(),
 	before: e.record(e.string(), e.unknown()).optional(),
@@ -127,7 +127,7 @@ var t = e.object({
 		old: e.unknown(),
 		new: e.unknown()
 	})).optional()
-}), ge = e.object({
+}), _e = e.object({
 	user: e.object({
 		user_id: e.string(),
 		name: e.string().optional(),
@@ -138,7 +138,7 @@ var t = e.object({
 		jti: e.string().optional(),
 		scopes: e.array(e.string()).optional()
 	}).optional()
-}), _e = e.object({
+}), ve = e.object({
 	method: e.string(),
 	path: e.string(),
 	query: e.record(e.string(), e.string()).optional(),
@@ -148,31 +148,31 @@ var t = e.object({
 	correlation_id: e.string().optional(),
 	redirect_uri: e.string().optional(),
 	authorization_url: e.string().optional(),
-	auth: ge.optional()
-}), ve = e.object({
+	auth: _e.optional()
+}), ye = e.object({
 	status_code: e.number(),
 	body: e.unknown().optional()
-}), ye = e.object({
+}), be = e.object({
 	country_code: e.string(),
 	city_name: e.string(),
 	latitude: e.string(),
 	longitude: e.string(),
 	time_zone: e.string(),
 	continent_code: e.string()
-}), be = e.object({
+}), xe = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.record(e.string(), e.string()).optional()
-}), xe = e.object({
+}), Se = e.object({
 	tenant_id: e.string(),
 	event_type: e.string(),
 	log_type: e.string(),
 	description: e.string().optional(),
-	category: pe,
-	actor: me,
-	target: he,
-	request: _e,
-	response: ve.optional(),
+	category: me,
+	actor: he,
+	target: ge,
+	request: ve,
+	response: ye.optional(),
 	connection: e.string().optional(),
 	connection_id: e.string().optional(),
 	client_name: e.string().optional(),
@@ -180,32 +180,32 @@ var t = e.object({
 	strategy_type: e.string().optional(),
 	audience: e.string().optional(),
 	scope: e.string().optional(),
-	location: ye.optional(),
-	auth0_client: be.optional(),
+	location: be.optional(),
+	auth0_client: xe.optional(),
 	hostname: e.string(),
 	is_mobile: e.boolean().optional(),
 	execution_id: e.string().optional(),
 	details: e.record(e.string(), e.unknown()).optional(),
 	login_session_id: e.string().optional(),
 	timestamp: e.string()
-}), Se = xe.extend({ id: e.string() }), Ce = e.enum([
+}), Ce = Se.extend({ id: e.string() }), we = e.enum([
 	"AUTH0",
 	"EMAIL",
 	"REDIRECT"
-]), we = e.enum([
+]), Te = e.enum([
 	"CREATE_USER",
 	"GET_USER",
 	"UPDATE_USER",
 	"SEND_REQUEST",
 	"SEND_EMAIL"
-]), Te = e.enum(["VERIFY_EMAIL"]), Ee = e.object({
+]), Ee = e.enum(["VERIFY_EMAIL"]), De = e.object({
 	require_mx_record: e.boolean().optional(),
 	block_aliases: e.boolean().optional(),
 	block_free_emails: e.boolean().optional(),
 	block_disposable_emails: e.boolean().optional(),
 	blocklist: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional()
-}), De = e.object({
+}), Oe = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("AUTH0"),
@@ -217,7 +217,7 @@ var t = e.object({
 		user_id: e.string(),
 		changes: e.record(e.string(), e.any())
 	})
-}), Oe = e.object({
+}), ke = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("EMAIL"),
@@ -226,13 +226,13 @@ var t = e.object({
 	mask_output: e.boolean().optional(),
 	params: e.object({
 		email: e.string(),
-		rules: Ee.optional()
+		rules: De.optional()
 	})
-}), ke = e.enum([
+}), Ae = e.enum([
 	"change-email",
 	"account",
 	"custom"
-]), Ae = e.object({
+]), je = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("REDIRECT"),
@@ -240,32 +240,32 @@ var t = e.object({
 	allow_failure: e.boolean().optional(),
 	mask_output: e.boolean().optional(),
 	params: e.object({
-		target: ke.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
+		target: Ae.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
 		custom_url: e.string().optional().openapi({ description: "Custom URL to redirect to when target is 'custom'" })
 	})
-}), je = e.union([
-	De,
+}), Me = e.union([
 	Oe,
-	Ae
-]), u = e.object({
+	ke,
+	je
+]), Ne = e.object({
 	name: e.string().min(1).max(150).openapi({ description: "The name of the flow" }),
-	actions: e.array(je).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
-}), Me = u.extend(t.shape).extend({ id: e.string().openapi({
+	actions: e.array(Me).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
+}), Pe = Ne.extend(t.shape).extend({ id: e.string().openapi({
 	description: "Unique identifier for the flow",
 	example: "af_12tMpdJ3iek7svMyZkSh5M"
-}) }), Ne = e.object({
+}) }), Fe = e.object({
 	page: e.string().min(0).optional().default("0").transform((e) => parseInt(e, 10)).openapi({ description: "The page number where 0 is the first page" }),
 	per_page: e.string().min(1).optional().default("50").transform((e) => parseInt(e, 10)).openapi({ description: "The number of items per page. Defaults to 50." }),
 	include_totals: e.string().optional().default("false").transform((e) => e === "true").openapi({ description: "If the total number of items should be included in the response" }),
 	sort: e.string().regex(/^.+:(-1|1)$/).optional().openapi({ description: "A property that should have the format 'string:-1' or 'string:1'" }),
 	q: e.string().optional().openapi({ description: "A lucene query string used to filter the results" })
-}), Pe = e.object({
+}), Ie = e.object({
 	start: e.number(),
 	limit: e.number(),
 	length: e.number(),
 	total: e.number().optional(),
 	next: e.string().optional()
-}), d = e.object({
+}), l = e.object({
 	email: e.string().optional(),
 	email_verified: e.boolean().optional(),
 	name: e.string().optional(),
@@ -274,7 +274,7 @@ var t = e.object({
 	phone_number: e.string().optional(),
 	phone_verified: e.boolean().optional(),
 	family_name: e.string().optional()
-}).catchall(e.any()), f = e.object({
+}).catchall(e.any()), u = e.object({
 	connection: e.string(),
 	user_id: e.string(),
 	provider: e.string(),
@@ -287,15 +287,15 @@ var t = e.object({
 	access_token: e.string().optional(),
 	access_token_secret: e.string().optional(),
 	refresh_token: e.string().optional(),
-	profileData: d.optional()
-}), p = e.object({
+	profileData: l.optional()
+}), d = e.object({
 	formatted: e.string().optional(),
 	street_address: e.string().optional(),
 	locality: e.string().optional(),
 	region: e.string().optional(),
 	postal_code: e.string().optional(),
 	country: e.string().optional()
-}).optional(), m = e.object({
+}).optional(), f = e.object({
 	email: e.string().transform((e) => e.toLowerCase()).optional(),
 	username: e.string().refine((e) => !e.includes("@"), { message: "Usernames must not contain \"@\". Use the email field for email addresses." }).optional(),
 	phone_number: e.string().optional(),
@@ -318,8 +318,8 @@ var t = e.object({
 	gender: e.string().optional(),
 	birthdate: e.string().optional(),
 	zoneinfo: e.string().optional(),
-	address: p
-}), h = m.extend({
+	address: d
+}), p = f.extend({
 	email_verified: e.boolean().default(!1),
 	verify_email: e.boolean().optional(),
 	last_ip: e.string().optional(),
@@ -334,29 +334,29 @@ var t = e.object({
 		hash: e.string(),
 		algorithm: e.string()
 	}).optional()
-}), g = h.omit({ password: !0 }).extend(t.shape).extend({
+}), m = p.omit({ password: !0 }).extend(t.shape).extend({
 	user_id: e.string(),
 	provider: e.string(),
 	is_social: e.boolean(),
 	email: e.string().optional(),
 	login_count: e.number().default(0),
-	identities: e.array(f).optional()
-}), Fe = g.omit({ registration_completed_at: !0 }), Ie = m.extend({
+	identities: e.array(u).optional()
+}), Le = m.omit({ registration_completed_at: !0 }), Re = f.extend({
 	login_count: e.number(),
 	multifactor: e.array(e.string()).optional(),
 	last_ip: e.string().optional(),
 	last_login: e.string().optional(),
 	user_id: e.string()
-}).catchall(e.any()), Le = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Re = (e = 21) => {
+}).catchall(e.any()), ze = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Be = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += Le[n[e] & 63];
+	for (; e--;) t += ze[n[e] & 63];
 	return t;
-}, _ = e.object({
+}, h = e.object({
 	client_id: e.string().optional().openapi({ description: "ID of this client. Generated server-side if omitted (Auth0 behavior)." }),
 	name: e.string().min(1).openapi({ description: "Name of this client (min length: 1 character, does not allow < or >)." }),
 	description: e.string().max(140).optional().openapi({ description: "Free text description of this client (max length: 140 characters)." }),
 	global: e.boolean().default(!1).openapi({ description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)." }),
-	client_secret: e.string().default(() => Re()).optional().openapi({ description: "Client secret (which you must not make public)." }),
+	client_secret: e.string().default(() => Be()).optional().openapi({ description: "Client secret (which you must not make public)." }),
 	app_type: e.enum([
 		"native",
 		"spa",
@@ -470,10 +470,10 @@ var t = e.object({
 	registration_metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Arbitrary metadata captured at Dynamic Client Registration time that isn't a first-class client field (e.g. integration_type, domain). Also stores `iat_constraints` for clients created via IAT so RFC 7592 PUT can enforce field immutability." }),
 	token_exchange: e.object({ allow_any_profile_of_type: e.array(e.literal("custom_authentication")).optional() }).optional().openapi({ description: "Custom Token Exchange settings. Set `allow_any_profile_of_type` to `[\"custom_authentication\"]` to let this client exchange subject tokens through the tenant's token exchange profiles." }),
 	user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({ description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies." })
-}), ze = e.object({
+}), Ve = e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(_.shape).extend({ client_id: e.string() }), v = e.object({
+}).extend(h.shape).extend({ client_id: e.string() }), g = e.object({
 	client_id: e.string().min(1).openapi({ description: "ID of the client." }),
 	audience: e.string().min(1).openapi({ description: "The audience (API identifier) of this client grant." }),
 	scope: e.array(e.string()).optional().openapi({ description: "Scopes allowed for this client grant." }),
@@ -486,38 +486,38 @@ var t = e.object({
 	is_system: e.boolean().optional().openapi({ description: "If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly." }),
 	subject_type: e.enum(["client", "user"]).optional().openapi({ description: "The type of application access the client grant allows. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." }),
 	authorization_details_types: e.array(e.string()).optional().openapi({ description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." })
-}), y = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(v.shape).extend({
+}), _ = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(g.shape).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Be = e.array(y), b = e.enum(["iat", "rat"]), x = e.object({
+}), He = e.array(_), v = e.enum(["iat", "rat"]), y = e.object({
 	id: e.string(),
 	token_hash: e.string(),
-	type: b,
+	type: v,
 	client_id: e.string().optional(),
 	sub: e.string().optional(),
 	constraints: e.record(e.string(), e.unknown()).optional(),
 	single_use: e.boolean().default(!1),
 	expires_at: e.string().optional()
-}), Ve = e.object({
+}), Ue = e.object({
 	created_at: e.string(),
 	used_at: e.string().optional(),
 	revoked_at: e.string().optional()
-}).extend(x.shape), S = e.object({
+}).extend(y.shape), b = e.object({
 	x: e.number(),
 	y: e.number()
-}), He = /* @__PURE__ */ function(e) {
+}), We = /* @__PURE__ */ function(e) {
 	return e.RICH_TEXT = "RICH_TEXT", e.NEXT_BUTTON = "NEXT_BUTTON", e.BACK_BUTTON = "BACK_BUTTON", e.SUBMIT_BUTTON = "SUBMIT_BUTTON", e.DIVIDER = "DIVIDER", e.TEXT = "TEXT", e.EMAIL = "EMAIL", e.PASSWORD = "PASSWORD", e.NUMBER = "NUMBER", e.PHONE = "PHONE", e.DATE = "DATE", e.CHECKBOX = "CHECKBOX", e.RADIO = "RADIO", e.SELECT = "SELECT", e.HIDDEN = "HIDDEN", e.LEGAL = "LEGAL", e;
-}({}), Ue = /* @__PURE__ */ function(e) {
+}({}), Ge = /* @__PURE__ */ function(e) {
 	return e.BLOCK = "BLOCK", e.FIELD = "FIELD", e;
-}({}), C = e.object({
+}({}), x = e.object({
 	id: e.string(),
-	category: e.nativeEnum(Ue),
-	type: e.nativeEnum(He)
-}), We = C.extend({
+	category: e.nativeEnum(Ge),
+	type: e.nativeEnum(We)
+}), Ke = x.extend({
 	category: e.literal("BLOCK"),
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string() }).passthrough()
-}), Ge = C.extend({
+}), qe = x.extend({
 	category: e.literal("BLOCK"),
 	type: e.union([
 		e.literal("NEXT_BUTTON"),
@@ -525,13 +525,13 @@ var t = e.object({
 		e.literal("SUBMIT_BUTTON")
 	]),
 	config: e.object({ text: e.string() }).passthrough()
-}), Ke = C.extend({
+}), Je = x.extend({
 	category: e.literal("FIELD"),
 	type: e.literal("LEGAL"),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional(),
 	config: e.object({ text: e.string() }).passthrough()
-}), qe = C.extend({
+}), Ye = x.extend({
 	category: e.literal("FIELD"),
 	type: e.union([
 		e.literal("TEXT"),
@@ -551,40 +551,40 @@ var t = e.object({
 		label: e.string().optional(),
 		placeholder: e.string().optional()
 	}).passthrough()
-}), Je = e.object({
+}), Xe = e.object({
 	id: e.string(),
 	category: e.string(),
 	type: e.string()
-}).passthrough(), Ye = e.union([
-	We,
-	Ge,
+}).passthrough(), Ze = e.union([
 	Ke,
 	qe,
-	Je
-]), Xe = /* @__PURE__ */ function(e) {
+	Je,
+	Ye,
+	Xe
+]), Qe = /* @__PURE__ */ function(e) {
 	return e.STEP = "STEP", e.FLOW = "FLOW", e.CONDITION = "CONDITION", e.ACTION = "ACTION", e;
-}({}), Ze = e.object({
+}({}), $e = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: S,
+	coordinates: b,
 	alias: e.string().optional(),
 	config: e.object({
-		components: e.array(Ye),
+		components: e.array(Ze),
 		next_node: e.string()
 	}).passthrough()
-}), Qe = e.object({
+}), et = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: S,
+	coordinates: b,
 	alias: e.string().optional(),
 	config: e.object({
 		flow_id: e.string(),
 		next_node: e.string()
 	})
-}), $e = e.object({
+}), tt = e.object({
 	id: e.string(),
 	type: e.literal("ACTION"),
-	coordinates: S,
+	coordinates: b,
 	alias: e.string().optional(),
 	config: e.object({
 		action_type: e.enum(["REDIRECT"]).openapi({ description: "The type of action to perform" }),
@@ -596,56 +596,56 @@ var t = e.object({
 		custom_url: e.string().optional().openapi({ description: "Custom URL when target is 'custom'" }),
 		next_node: e.string().openapi({ description: "The next node to navigate to after action (for non-redirect actions)" })
 	}).passthrough()
-}), et = e.object({
+}), nt = e.object({
 	id: e.string(),
 	type: e.string(),
-	coordinates: S
-}).passthrough(), tt = e.union([
-	Ze,
-	Qe,
+	coordinates: b
+}).passthrough(), rt = e.union([
 	$e,
-	et
-]), nt = e.object({
+	et,
+	tt,
+	nt
+]), it = e.object({
 	next_node: e.string(),
-	coordinates: S
-}).passthrough(), rt = e.object({
+	coordinates: b
+}).passthrough(), at = e.object({
 	resume_flow: e.boolean().optional(),
-	coordinates: S
-}).passthrough(), it = e.object({
+	coordinates: b
+}).passthrough(), ot = e.object({
 	id: e.string(),
 	name: e.string(),
 	languages: e.object({ primary: e.string() }).passthrough(),
-	nodes: e.array(tt),
-	start: nt,
-	ending: rt,
+	nodes: e.array(rt),
+	start: it,
+	ending: at,
 	created_at: e.string(),
 	updated_at: e.string(),
 	links: e.object({
 		sdkSrc: e.string().optional(),
 		sdk_src: e.string().optional()
 	}).passthrough()
-}).passthrough(), at = it.omit({
+}).passthrough(), st = ot.omit({
 	id: !0,
 	created_at: !0,
 	updated_at: !0
-}), w = /* @__PURE__ */ function(e) {
+}), S = /* @__PURE__ */ function(e) {
 	return e.TOKEN = "token", e.ID_TOKEN = "id_token", e.TOKEN_ID_TOKEN = "id_token token", e.CODE = "code", e.CODE_ID_TOKEN = "code id_token", e.CODE_TOKEN = "code token", e.CODE_ID_TOKEN_TOKEN = "code id_token token", e;
-}({}), T = /* @__PURE__ */ function(e) {
+}({}), C = /* @__PURE__ */ function(e) {
 	return e.QUERY = "query", e.FRAGMENT = "fragment", e.FORM_POST = "form_post", e.WEB_MESSAGE = "web_message", e.SAML_POST = "saml_post", e;
-}({}), ot = /* @__PURE__ */ function(e) {
+}({}), ct = /* @__PURE__ */ function(e) {
 	return e.S256 = "S256", e.Plain = "plain", e;
-}({}), st = e.union([e.null(), e.object({
+}({}), lt = e.union([e.null(), e.object({
 	essential: e.boolean().optional(),
 	value: e.unknown().optional(),
 	values: e.array(e.unknown()).optional()
-})]).nullable(), ct = e.object({
-	userinfo: e.record(e.string(), st).optional(),
-	id_token: e.record(e.string(), st).optional()
-}), lt = e.object({
+})]).nullable(), ut = e.object({
+	userinfo: e.record(e.string(), lt).optional(),
+	id_token: e.record(e.string(), lt).optional()
+}), dt = e.object({
 	client_id: e.string(),
 	act_as: e.string().optional(),
-	response_type: e.nativeEnum(w).optional(),
-	response_mode: e.nativeEnum(T).optional(),
+	response_type: e.nativeEnum(S).optional(),
+	response_mode: e.nativeEnum(C).optional(),
 	redirect_uri: e.string().optional(),
 	audience: e.string().optional(),
 	organization: e.string().optional(),
@@ -653,15 +653,15 @@ var t = e.object({
 	nonce: e.string().optional(),
 	scope: e.string().optional(),
 	prompt: e.string().optional(),
-	code_challenge_method: e.nativeEnum(ot).optional(),
+	code_challenge_method: e.nativeEnum(ct).optional(),
 	code_challenge: e.string().optional(),
 	username: e.string().optional(),
 	ui_locales: e.string().optional(),
 	max_age: e.number().optional(),
 	acr_values: e.string().optional(),
-	claims: ct.optional(),
+	claims: ut.optional(),
 	vendor_id: e.string().optional()
-}), ut = e.object({
+}), ft = e.object({
 	...i,
 	colors: e.object({
 		primary: e.string(),
@@ -681,7 +681,7 @@ var t = e.object({
 		"light",
 		"auto"
 	]).optional()
-}), dt = e.enum([
+}), pt = e.enum([
 	"password_reset",
 	"email_verification",
 	"otp",
@@ -691,11 +691,11 @@ var t = e.object({
 	"ticket",
 	"client_assertion_jti",
 	"subject_token_jti"
-]), ft = e.object({
+]), mt = e.object({
 	code_id: e.string().openapi({ description: "The code that will be used in for instance an email verification flow" }),
 	login_id: e.string().optional().openapi({ description: "The id of the login session that the code is connected to" }),
 	connection_id: e.string().optional().openapi({ description: "The connection that the code is connected to" }),
-	code_type: dt,
+	code_type: pt,
 	code_verifier: e.string().optional().openapi({ description: "The code verifier used in PKCE in outbound flows" }),
 	code_challenge: e.string().optional().openapi({ description: "The code challenge used in PKCE in outbound flows" }),
 	code_challenge_method: e.enum(["plain", "S256"]).optional().openapi({ description: "The code challenge method used in PKCE in outbound flows" }),
@@ -706,7 +706,25 @@ var t = e.object({
 	expires_at: e.string(),
 	used_at: e.string().optional(),
 	user_id: e.string().optional()
-}), pt = ft.extend({ created_at: e.string() }), mt = e.object({
+}), ht = mt.extend({ created_at: e.string() }), gt = e.object({
+	device_code_hash: e.string(),
+	user_code_hash: e.string(),
+	client_id: e.string(),
+	scope: e.string().optional(),
+	audience: e.string().optional(),
+	status: e.enum([
+		"pending",
+		"approved",
+		"denied",
+		"consumed"
+	]),
+	login_id: e.string().optional(),
+	expires_at: e.string(),
+	created_at: e.string(),
+	last_polled_at: e.string().optional(),
+	interval: e.number().int().positive(),
+	version: e.number().int().nonnegative()
+}), _t = e.object({
 	kid: e.string().optional(),
 	team_id: e.string().optional(),
 	realms: e.string().optional(),
@@ -826,36 +844,36 @@ var t = e.object({
 		"never_on_login"
 	]).optional()
 });
-function E(e) {
+function w(e) {
 	if (e !== null) {
-		if (Array.isArray(e)) return e.filter((e) => e !== null).map(E);
+		if (Array.isArray(e)) return e.filter((e) => e !== null).map(w);
 		if (e && typeof e == "object") {
 			let t = {};
-			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = E(r));
+			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = w(r));
 			return t;
 		}
 		return e;
 	}
 }
-var ht = e.object({
+var vt = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	display_name: e.string().optional(),
 	strategy: e.string(),
-	options: e.preprocess((e) => e === null ? {} : E(e), mt).default({}),
+	options: e.preprocess((e) => e === null ? {} : w(e), _t).default({}),
 	enabled_clients: e.array(e.string()).default([]).optional(),
-	response_type: e.nativeEnum(w).optional(),
-	response_mode: e.nativeEnum(T).optional(),
+	response_type: e.nativeEnum(S).optional(),
+	response_mode: e.nativeEnum(C).optional(),
 	is_domain_connection: e.boolean().optional(),
 	show_as_button: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional(),
 	is_system: e.boolean().optional(),
 	...i
-}), gt = e.object({
+}), yt = e.object({
 	id: e.string(),
 	created_at: e.string().transform((e) => e === null ? "" : e),
 	updated_at: e.string().transform((e) => e === null ? "" : e)
-}).extend(ht.shape), D = e.object({
+}).extend(vt.shape), T = e.object({
 	domain: e.string(),
 	custom_domain_id: e.string().optional(),
 	type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -869,7 +887,7 @@ var ht = e.object({
 		"null"
 	]).optional(),
 	domain_metadata: e.record(e.string(), e.string().max(255)).optional()
-}), _t = e.discriminatedUnion("name", [e.object({
+}), bt = e.discriminatedUnion("name", [e.object({
 	name: e.literal("txt"),
 	record: e.string(),
 	domain: e.string()
@@ -877,7 +895,7 @@ var ht = e.object({
 	name: e.literal("http"),
 	http_body: e.string(),
 	http_url: e.string()
-})]), vt = D.extend({
+})]), xt = T.extend({
 	custom_domain_id: e.string(),
 	primary: e.boolean(),
 	status: e.enum([
@@ -887,26 +905,26 @@ var ht = e.object({
 		"ready"
 	]),
 	origin_domain_name: e.string().optional(),
-	verification: e.object({ methods: e.array(_t) }).optional(),
+	verification: e.object({ methods: e.array(bt) }).optional(),
 	tls_policy: e.string().optional()
-}), yt = D.pick({
+}), St = T.pick({
 	tls_policy: !0,
 	custom_client_ip_header: !0,
 	domain_metadata: !0
-}).strict(), bt = vt.extend({ tenant_id: e.string() }), xt = e.object({
+}).strict(), Ct = xt.extend({ tenant_id: e.string() }), wt = e.object({
 	certificate: e.string().regex(/^-----BEGIN CERTIFICATE-----[\s\S]+-----END CERTIFICATE-----\s*$/, "must be PEM-encoded; include the full certificate chain in leaf-first order"),
 	private_key: e.string().regex(/-----BEGIN (RSA |EC |ENCRYPTED )?PRIVATE KEY-----[\s\S]+-----END \1PRIVATE KEY-----\s*$/, "must be a PEM-encoded private key")
-}), O = e.object({
+}), E = e.object({
 	id: e.string(),
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0)
-}), k = O.extend({ category: e.literal("BLOCK").optional() }), St = k.extend({
+}), D = E.extend({ category: e.literal("BLOCK").optional() }), Tt = D.extend({
 	type: e.literal("DIVIDER"),
 	config: e.object({ text: e.string().optional() }).optional()
-}), Ct = k.extend({
+}), Et = D.extend({
 	type: e.literal("HTML"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), wt = k.extend({
+}), Dt = D.extend({
 	type: e.literal("IMAGE"),
 	config: e.object({
 		src: e.string().optional(),
@@ -914,47 +932,47 @@ var ht = e.object({
 		width: e.number().optional(),
 		height: e.number().optional()
 	}).optional()
-}), Tt = k.extend({
+}), Ot = D.extend({
 	type: e.literal("JUMP_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		target_step: e.string().optional()
 	})
-}), Et = k.extend({
+}), kt = D.extend({
 	type: e.literal("RESEND_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		resend_action: e.string().optional()
 	})
-}), Dt = k.extend({
+}), At = D.extend({
 	type: e.literal("NEXT_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		variant: e.enum(["primary", "secondary"]).optional(),
 		skip_validation: e.boolean().optional()
 	})
-}), Ot = k.extend({
+}), jt = D.extend({
 	type: e.literal("PREVIOUS_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), kt = k.extend({
+}), Mt = D.extend({
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), A = O.extend({
+}), O = E.extend({
 	category: e.literal("WIDGET").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), At = A.extend({
+}), Nt = O.extend({
 	type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
 	config: e.object({ credential_type: e.string().optional() })
-}), jt = A.extend({
+}), Pt = O.extend({
 	type: e.literal("GMAPS_ADDRESS"),
 	config: e.object({ api_key: e.string().optional() })
-}), Mt = A.extend({
+}), Ft = O.extend({
 	type: e.literal("RECAPTCHA"),
 	config: e.object({ site_key: e.string().optional() })
-}), j = O.extend({
+}), k = E.extend({
 	category: e.literal("FIELD").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
@@ -970,10 +988,10 @@ var ht = e.object({
 	})).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), Nt = j.extend({
+}), It = k.extend({
 	type: e.literal("BOOLEAN"),
 	config: e.object({ default_value: e.boolean().optional() }).optional()
-}), Pt = j.extend({
+}), Lt = k.extend({
 	type: e.literal("CARDS"),
 	config: e.object({
 		options: e.array(e.object({
@@ -984,7 +1002,7 @@ var ht = e.object({
 		})).optional(),
 		multi_select: e.boolean().optional()
 	}).optional()
-}), Ft = j.extend({
+}), Rt = k.extend({
 	type: e.literal("CHOICE"),
 	config: e.object({
 		options: e.array(e.object({
@@ -995,7 +1013,7 @@ var ht = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), It = j.extend({
+}), zt = k.extend({
 	type: e.literal("CODE"),
 	config: e.object({
 		length: e.number().int().positive().max(100).optional(),
@@ -1012,7 +1030,7 @@ var ht = e.object({
 		message: "default_value is longer than the configured length",
 		path: ["default_value"]
 	}).optional()
-}), Lt = j.extend({
+}), Bt = k.extend({
 	type: e.literal("CUSTOM"),
 	config: e.object({
 		component: e.string().optional(),
@@ -1020,7 +1038,7 @@ var ht = e.object({
 		schema: e.record(e.string(), e.any()).optional(),
 		code: e.string().optional()
 	})
-}), Rt = j.extend({
+}), Vt = k.extend({
 	type: e.literal("DATE"),
 	config: e.object({
 		format: e.string().optional(),
@@ -1028,7 +1046,7 @@ var ht = e.object({
 		max: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), zt = j.extend({
+}), Ht = k.extend({
 	type: e.literal("DROPDOWN"),
 	config: e.object({
 		options: e.array(e.object({
@@ -1040,7 +1058,7 @@ var ht = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), Bt = j.extend({
+}), Ut = k.extend({
 	type: e.literal("EMAIL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1048,20 +1066,20 @@ var ht = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), Vt = j.extend({
+}), Wt = k.extend({
 	type: e.literal("FILE"),
 	config: e.object({
 		accept: e.string().optional(),
 		max_size: e.number().optional(),
 		multiple: e.boolean().optional()
 	}).optional()
-}), Ht = j.extend({
+}), Gt = k.extend({
 	type: e.literal("LEGAL"),
 	config: e.object({
 		text: e.string(),
 		html: e.boolean().optional()
 	}).optional()
-}), Ut = j.extend({
+}), Kt = k.extend({
 	type: e.literal("NUMBER"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1070,7 +1088,7 @@ var ht = e.object({
 		step: e.number().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Wt = j.extend({
+}), qt = k.extend({
 	type: e.literal("PASSWORD"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1079,13 +1097,13 @@ var ht = e.object({
 		forgot_password_link: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Gt = j.extend({
+}), Jt = k.extend({
 	type: e.literal("PAYMENT"),
 	config: e.object({
 		provider: e.string().optional(),
 		currency: e.string().optional()
 	}).optional()
-}), Kt = j.extend({
+}), Yt = k.extend({
 	type: e.literal("SOCIAL"),
 	config: e.object({
 		providers: e.array(e.string()).optional(),
@@ -1100,7 +1118,7 @@ var ht = e.object({
 			last_used_label: e.string().optional()
 		})).optional()
 	}).optional()
-}), qt = j.extend({
+}), Xt = k.extend({
 	type: e.literal("TEL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1108,7 +1126,7 @@ var ht = e.object({
 		default_value: e.string().optional(),
 		allow_email: e.boolean().optional()
 	}).optional()
-}), Jt = j.extend({
+}), Zt = k.extend({
 	type: e.literal("TEXT"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1118,40 +1136,37 @@ var ht = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), Yt = j.extend({
+}), Qt = k.extend({
 	type: e.literal("COUNTRY"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Xt = j.extend({
+}), $t = k.extend({
 	type: e.literal("URL"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Zt = e.discriminatedUnion("type", [
-	St,
-	Ct,
-	wt,
+}), en = e.discriminatedUnion("type", [
 	Tt,
 	Et,
 	Dt,
 	Ot,
-	kt
-]), Qt = e.discriminatedUnion("type", [
+	kt,
 	At,
 	jt,
 	Mt
-]), $t = e.discriminatedUnion("type", [
+]), tn = e.discriminatedUnion("type", [
 	Nt,
 	Pt,
-	Ft,
+	Ft
+]), nn = e.discriminatedUnion("type", [
 	It,
-	Yt,
 	Lt,
 	Rt,
 	zt,
+	Qt,
 	Bt,
 	Vt,
 	Ht,
@@ -1161,12 +1176,15 @@ var ht = e.object({
 	Kt,
 	qt,
 	Jt,
-	Xt
-]), M = e.union([
+	Yt,
+	Xt,
 	Zt,
-	Qt,
 	$t
-]), en = new Set([
+]), A = e.union([
+	en,
+	tn,
+	nn
+]), rn = new Set([
 	"BOOLEAN",
 	"CARDS",
 	"CHOICE",
@@ -1181,7 +1199,7 @@ var ht = e.object({
 	"TEL",
 	"TEXT",
 	"URL"
-]), tn = e.object({
+]), an = e.object({
 	id: e.string(),
 	type: e.literal("submit"),
 	label: e.string(),
@@ -1190,22 +1208,22 @@ var ht = e.object({
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0),
 	customizations: e.record(e.string(), e.any()).optional()
-}), N = e.object({
+}), j = e.object({
 	x: e.number(),
 	y: e.number()
-}), nn = e.object({
+}), on = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: N,
+	coordinates: j,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
 		flow_id: e.string().max(30),
 		next_node: e.string().optional()
 	})
-}), rn = e.object({
+}), sn = e.object({
 	id: e.string(),
 	type: e.literal("ROUTER"),
-	coordinates: N,
+	coordinates: j,
 	alias: e.string().min(1).max(150),
 	config: e.object({
 		rules: e.array(e.object({
@@ -1216,20 +1234,20 @@ var ht = e.object({
 		})),
 		fallback: e.string()
 	})
-}), an = e.object({
+}), cn = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: N,
+	coordinates: j,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
-		components: e.array(M),
+		components: e.array(A),
 		next_node: e.string().optional()
 	})
-}), on = e.discriminatedUnion("type", [
-	nn,
-	rn,
-	an
-]), sn = e.object({
+}), ln = e.discriminatedUnion("type", [
+	on,
+	sn,
+	cn
+]), un = e.object({
 	name: e.string().openapi({ description: "The name of the form" }),
 	messages: e.object({
 		errors: e.record(e.string(), e.any()).optional(),
@@ -1240,14 +1258,14 @@ var ht = e.object({
 		default: e.string().optional()
 	}).optional(),
 	translations: e.record(e.string(), e.any()).optional(),
-	nodes: e.array(on).optional(),
+	nodes: e.array(ln).optional(),
 	start: e.object({
 		hidden_fields: e.array(e.object({
 			key: e.string(),
 			value: e.string()
 		})).optional(),
 		next_node: e.string().optional(),
-		coordinates: N.optional()
+		coordinates: j.optional()
 	}).optional(),
 	ending: e.object({
 		redirection: e.object({
@@ -1255,7 +1273,7 @@ var ht = e.object({
 			target: e.string().optional()
 		}).optional(),
 		after_submit: e.object({ flow_id: e.string().optional() }).optional(),
-		coordinates: N.optional(),
+		coordinates: j.optional(),
 		resume_flow: e.boolean().optional()
 	}).optional(),
 	style: e.object({ css: e.string().optional() }).optional(),
@@ -1263,7 +1281,7 @@ var ht = e.object({
 		sdkSrc: e.string().optional(),
 		sdk_src: e.string().optional()
 	}).optional()
-}).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" }), cn = t.extend(sn.shape).extend({ id: e.string() }), ln = e.object({
+}).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" }), dn = t.extend(un.shape).extend({ id: e.string() }), fn = e.object({
 	id: e.number().optional(),
 	text: e.string(),
 	type: e.enum([
@@ -1272,42 +1290,42 @@ var ht = e.object({
 		"success",
 		"warning"
 	])
-}), un = e.object({
+}), pn = e.object({
 	id: e.string().optional(),
 	text: e.string(),
 	href: e.string(),
 	linkText: e.string().optional()
-}), dn = e.object({
+}), mn = e.object({
 	"form-content-start": e.string().optional(),
 	"form-content-end": e.string().optional(),
 	"form-footer-start": e.string().optional(),
 	"form-footer-end": e.string().optional(),
 	"secondary-actions-start": e.string().optional(),
 	"secondary-actions-end": e.string().optional()
-}).strict(), fn = e.object({
+}).strict(), hn = e.object({
 	name: e.string().optional(),
 	action: e.string(),
 	method: e.enum(["POST", "GET"]),
 	title: e.string().optional(),
 	description: e.string().optional(),
-	components: e.array(M),
-	messages: e.array(ln).optional(),
-	links: e.array(un).optional(),
-	partials: dn.optional(),
+	components: e.array(A),
+	messages: e.array(fn).optional(),
+	links: e.array(pn).optional(),
+	partials: mn.optional(),
 	footer: e.string().optional()
 });
-function pn(e) {
+function gn(e) {
 	return e.category === "BLOCK";
 }
-function mn(e) {
+function _n(e) {
 	return e.category === "WIDGET";
 }
-function hn(e) {
+function vn(e) {
 	return e.category === "FIELD";
 }
 //#endregion
 //#region src/types/Hook.ts
-var P = e.enum([
+var M = e.enum([
 	"pre-user-registration",
 	"post-user-registration",
 	"post-user-login",
@@ -1315,48 +1333,53 @@ var P = e.enum([
 	"validate-registration-username",
 	"pre-user-deletion",
 	"post-user-deletion"
-]), F = e.enum(["post-user-login"]), I = e.enum([
+]), N = e.enum(["post-user-login"]), P = e.enum([
 	"post-user-login",
 	"post-user-registration",
 	"post-user-update",
 	"credentials-exchange"
-]), L = e.enum([
+]), F = e.enum([
+	"validate-registration-username",
 	"post-user-login",
 	"credentials-exchange",
 	"pre-user-registration",
-	"post-user-registration"
-]), R = e.enum(["post-user-login"]), gn = [
+	"post-user-registration",
+	"pre-user-update",
+	"post-user-update",
+	"pre-user-deletion",
+	"post-user-deletion"
+]), I = e.enum(["post-user-login"]), yn = [
 	{
 		field: "url",
-		triggers: P.options
+		triggers: M.options
 	},
 	{
 		field: "form_id",
-		triggers: F.options
+		triggers: N.options
 	},
 	{
 		field: "template_id",
-		triggers: I.options
+		triggers: P.options
 	},
 	{
 		field: "code_id",
-		triggers: L.options
+		triggers: F.options
 	},
 	{
 		field: "page_id",
-		triggers: R.options
+		triggers: I.options
 	}
 ];
-function _n(e) {
+function bn(e) {
 	if (!(!e || typeof e != "object")) {
-		for (let t of gn) if (typeof Reflect.get(e, t.field) == "string") return t.triggers;
+		for (let t of yn) if (typeof Reflect.get(e, t.field) == "string") return t.triggers;
 	}
 }
-var z = e.enum(["impersonate"]), B = e.enum([
+var L = e.enum(["impersonate"]), R = e.enum([
 	"ensure-username",
 	"set-preferred-username",
 	"account-linking"
-]), vn = {
+]), xn = {
 	"ensure-username": {
 		name: "Ensure Username",
 		description: "Automatically assigns a username to users who sign in without one. Creates a linked username account for social/email users.",
@@ -1376,88 +1399,88 @@ var z = e.enum(["impersonate"]), B = e.enum([
 			"post-user-update"
 		]
 	}
-}, V = {
+}, z = {
 	enabled: e.boolean().default(!1),
 	synchronous: e.boolean().default(!1),
 	priority: e.number().optional(),
 	hook_id: e.string().optional(),
 	metadata: e.record(e.string(), e.unknown()).optional(),
 	...i
-}, yn = e.object({
-	...V,
-	trigger_id: P,
+}, Sn = e.object({
+	...z,
+	trigger_id: M,
 	url: e.string()
-}), bn = e.object({
-	...V,
-	trigger_id: F,
+}), Cn = e.object({
+	...z,
+	trigger_id: N,
 	form_id: e.string()
-}), xn = e.object({
-	...V,
-	trigger_id: I,
-	template_id: B
-}), Sn = e.object({
-	...V,
-	trigger_id: L,
+}), wn = e.object({
+	...z,
+	trigger_id: P,
+	template_id: R
+}), Tn = e.object({
+	...z,
+	trigger_id: F,
 	code_id: e.string()
-}), Cn = e.object({
-	...V,
-	trigger_id: R,
-	page_id: z,
+}), En = e.object({
+	...z,
+	trigger_id: I,
+	page_id: L,
 	permission_required: e.string().optional()
-}), wn = e.union([
-	yn,
-	bn,
-	xn,
+}), Dn = e.union([
 	Sn,
-	Cn
-]), Tn = e.object({
-	...V,
-	trigger_id: P
+	Cn,
+	wn,
+	Tn,
+	En
+]), On = e.object({
+	...z,
+	trigger_id: M
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	url: e.string()
-}), En = e.object({
-	...V,
-	trigger_id: F
+}), kn = e.object({
+	...z,
+	trigger_id: N
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	form_id: e.string()
-}), Dn = e.object({
-	...V,
-	trigger_id: I
+}), An = e.object({
+	...z,
+	trigger_id: P
 }).extend(t.shape).extend({
 	hook_id: e.string(),
-	template_id: B
-}), On = e.object({
-	...V,
-	trigger_id: L
+	template_id: R
+}), jn = e.object({
+	...z,
+	trigger_id: F
 }).extend(t.shape).extend({
 	hook_id: e.string(),
 	code_id: e.string()
-}), kn = e.object({
-	...V,
-	trigger_id: R
+}), Mn = e.object({
+	...z,
+	trigger_id: I
 }).extend(t.shape).extend({
 	hook_id: e.string(),
-	page_id: z,
+	page_id: L,
 	permission_required: e.string().optional()
-}), An = e.union([
-	Tn,
-	En,
-	Dn,
+}), Nn = e.union([
 	On,
-	kn
-]), jn = e.object({
+	kn,
+	An,
+	jn,
+	Mn
+]), Pn = e.object({
 	code: e.string().max(1e5),
 	secrets: e.record(e.string(), e.string()).optional()
-}), Mn = jn.extend({
+}), Fn = Pn.extend({
 	id: e.string(),
 	tenant_id: e.string()
-}).extend(t.shape), Nn = e.object({ name: e.string().optional() }), Pn = e.object({ email: e.string().optional() }), Fn = e.object({
+}).extend(t.shape), In = e.object({ name: e.string().optional() }), Ln = e.object({ email: e.string().optional() }), Rn = e.object({
 	id: e.string().optional(),
 	organization_id: e.string().max(50),
-	inviter: Nn,
-	invitee: Pn,
+	inviter: In,
+	invitee: Ln,
 	invitation_url: e.string().url(),
 	client_id: e.string(),
 	connection_id: e.string().optional(),
@@ -1466,13 +1489,13 @@ var z = e.enum(["impersonate"]), B = e.enum([
 	ttl_sec: e.number().int().max(2592e3).default(604800).optional(),
 	roles: e.array(e.string()).default([]).optional(),
 	send_invitation_email: e.boolean().default(!0).optional()
-}), In = e.object({
+}), zn = e.object({
 	id: e.string(),
 	organization_id: e.string().max(50),
 	created_at: e.string().datetime(),
 	expires_at: e.string().datetime(),
 	ticket_id: e.string().optional()
-}).extend(Fn.omit({ id: !0 }).shape), Ln = e.object({
+}).extend(Rn.omit({ id: !0 }).shape), Bn = e.object({
 	alg: e.enum([
 		"RS256",
 		"RS384",
@@ -1514,10 +1537,11 @@ var z = e.enum(["impersonate"]), B = e.enum([
 		path: [r],
 		message: `EC JWK is missing required member '${r}'`
 	});
-}), Rn = e.object({ keys: e.array(Ln) }), zn = e.object({
+}), Vn = e.object({ keys: e.array(Bn) }), Hn = e.object({
 	issuer: e.string(),
 	authorization_endpoint: e.string(),
 	token_endpoint: e.string(),
+	device_authorization_endpoint: e.string().optional(),
 	userinfo_endpoint: e.string(),
 	jwks_uri: e.string(),
 	registration_endpoint: e.string().optional(),
@@ -1540,33 +1564,33 @@ var z = e.enum(["impersonate"]), B = e.enum([
 	client_id_metadata_document_supported: e.boolean().optional(),
 	backchannel_logout_supported: e.boolean().optional(),
 	backchannel_logout_session_supported: e.boolean().optional()
-}), Bn = /* @__PURE__ */ function(e) {
+}), Un = /* @__PURE__ */ function(e) {
 	return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.AWAITING_CONSENT = "awaiting_consent", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
-}({}), Vn = e.nativeEnum(Bn), H = e.object({
+}({}), Wn = e.nativeEnum(Un), B = e.object({
 	strategy: e.string(),
 	strategy_type: e.string()
-}), Hn = e.object({
+}), Gn = e.object({
 	csrf_token: e.string(),
 	auth0Client: e.string().optional(),
-	authParams: lt,
+	authParams: dt,
 	expires_at: e.string(),
 	deleted_at: e.string().optional(),
 	ip: e.string().optional(),
 	useragent: e.string().optional(),
 	session_id: e.string().optional(),
 	authorization_url: e.string().optional(),
-	state: Vn.optional().default("pending"),
+	state: Wn.optional().default("pending"),
 	state_data: e.string().optional(),
 	failure_reason: e.string().optional(),
 	user_id: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: H.optional(),
+	auth_strategy: B.optional(),
 	authenticated_at: e.string().optional()
-}).openapi({ description: "This represents a login sesion" }), Un = Hn.extend({
+}).openapi({ description: "This represents a login sesion" }), Kn = Gn.extend({
 	id: e.string().openapi({ description: "This is is used as the state in the universal login" }),
 	created_at: e.string(),
 	updated_at: e.string()
-}), U = {
+}), V = {
 	ACLS_SUMMARY: "acls_summary",
 	ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
 	API_LIMIT: "api_limit",
@@ -1580,6 +1604,7 @@ var z = e.enum(["impersonate"]), B = e.enum([
 	CODE_SENT: "cs",
 	DEPRECATION_NOTICE: "depnote",
 	CONFIG_INHERITANCE_DIFF: "cfgdiff",
+	CONFIG_DRIFT: "cfgdrift",
 	FAILED_LOGIN: "f",
 	FAILED_BY_CONNECTOR: "fc",
 	FAILED_CHANGE_EMAIL: "fce",
@@ -1727,191 +1752,192 @@ var z = e.enum(["impersonate"]), B = e.enum([
 	WARNING_DURING_LOGIN: "w",
 	WARNING_SENDING_NOTIFICATION: "wn",
 	WARNING_USER_MANAGEMENT: "wum"
-}, Wn = e.string().refine((e) => Object.values(U).includes(e), { message: "Invalid log type" }), Gn = {
-	[U.ACLS_SUMMARY]: "ACLs Summary",
-	[U.ACTIONS_EXECUTION_FAILED]: "Actions Execution Failed",
-	[U.API_LIMIT]: "API Rate Limit Reached",
-	[U.API_LIMIT_WARNING]: "API Rate Limit Warning",
-	[U.APPI]: "API Operation",
-	[U.CIBA_EXCHANGE_FAILED]: "CIBA Exchange Failed",
-	[U.CIBA_EXCHANGE_SUCCEEDED]: "CIBA Exchange Succeeded",
-	[U.CIBA_START_FAILED]: "CIBA Start Failed",
-	[U.CIBA_START_SUCCEEDED]: "CIBA Start Succeeded",
-	[U.CODE_LINK_SENT]: "Code/Link Sent",
-	[U.CODE_SENT]: "Code Sent",
-	[U.DEPRECATION_NOTICE]: "Deprecation Notice",
-	[U.CONFIG_INHERITANCE_DIFF]: "Config Inheritance Shadow Difference",
-	[U.FAILED_LOGIN]: "Failed Login",
-	[U.FAILED_BY_CONNECTOR]: "Failed by Connector",
-	[U.FAILED_CHANGE_EMAIL]: "Failed Change Email",
-	[U.FAILED_BY_CORS]: "Failed by CORS",
-	[U.FAILED_CROSS_ORIGIN_AUTHENTICATION]: "Failed Cross Origin Authentication",
-	[U.FAILED_CHANGE_PASSWORD]: "Failed Change Password",
-	[U.FAILED_POST_CHANGE_PASSWORD_HOOK]: "Failed Post-Change Password Hook",
-	[U.FAILED_CHANGE_PHONE_NUMBER]: "Failed Change Phone Number",
-	[U.FAILED_CHANGE_PASSWORD_REQUEST]: "Failed Change Password Request",
-	[U.FAILED_CONNECTOR_PROVISIONING]: "Failed Connector Provisioning",
-	[U.FAILED_CHANGE_USERNAME]: "Failed Change Username",
-	[U.FAILED_DELEGATION]: "Failed Delegation",
-	[U.FAILED_DEVICE_ACTIVATION]: "Failed Device Activation",
-	[U.FAILED_DEVICE_AUTHORIZATION_REQUEST]: "Failed Device Authorization Request",
-	[U.USER_CANCELED_DEVICE_CONFIRMATION]: "User Canceled Device Confirmation",
-	[U.FAILED_USER_DELETION]: "Failed User Deletion",
-	[U.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Authorization Code for Access Token",
-	[U.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Failed Exchange Access Token for Client Credentials",
-	[U.FAILED_EXCHANGE_CUSTOM_TOKEN]: "Failed Exchange Custom Token",
-	[U.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Device Code for Access Token",
-	[U.FAILED_FEDERATED_LOGOUT]: "Failed Federated Logout",
-	[U.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Failed Exchange Native Social Login",
-	[U.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Failed Exchange Password OOB for Access Token",
-	[U.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Password OTP for Access Token",
-	[U.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Failed Exchange Password for Access Token",
-	[U.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Passwordless OTP for Access Token",
-	[U.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Failed Exchange Password MFA Recovery for Access Token",
-	[U.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN]: "Failed Exchange Rotating Refresh Token",
-	[U.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Refresh Token for Access Token",
-	[U.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Subject Token for Access Token",
-	[U.FAILED_HOOK]: "Failed Hook",
-	[U.FAILED_IMPERSONATION]: "Failed Impersonation",
-	[U.FAILED_INVITE_ACCEPT]: "Failed Invite Accept",
-	[U.FAILED_LOGOUT]: "Failed Logout",
-	[U.FLOWS_EXECUTION_COMPLETED]: "Flows Execution Completed",
-	[U.FLOWS_EXECUTION_FAILED]: "Flows Execution Failed",
-	[U.FAILED_SENDING_NOTIFICATION]: "Failed Sending Notification",
-	[U.FORMS_SUBMISSION_FAILED]: "Forms Submission Failed",
-	[U.FORMS_SUBMISSION_SUCCEEDED]: "Forms Submission Succeeded",
-	[U.FAILED_LOGIN_INCORRECT_PASSWORD]: "Failed Login - Incorrect Password",
-	[U.FAILED_PUSHED_AUTHORIZATION_REQUEST]: "Failed Pushed Authorization Request",
-	[U.FAILED_POST_USER_REGISTRATION_HOOK]: "Failed Post-User Registration Hook",
-	[U.FAILED_SIGNUP]: "Failed Signup",
-	[U.FAILED_SILENT_AUTH]: "Failed Silent Auth",
-	[U.FAILED_LOGIN_INVALID_EMAIL_USERNAME]: "Failed Login - Invalid Email/Username",
-	[U.FAILED_USERS_IMPORT]: "Failed Users Import",
-	[U.FAILED_VERIFICATION_EMAIL]: "Failed Verification Email",
-	[U.FAILED_VERIFICATION_EMAIL_REQUEST]: "Failed Verification Email Request",
-	[U.EMAIL_VERIFICATION_CONFIRMED]: "Email Verification Confirmed",
-	[U.EMAIL_VERIFICATION_FAILED]: "Email Verification Failed",
-	[U.MFA_AUTH_FAILED]: "MFA Auth Failed",
-	[U.MFA_AUTH_REJECTED]: "MFA Auth Rejected",
-	[U.MFA_AUTH_SUCCESS]: "MFA Auth Success",
-	[U.MFA_ENROLLMENT_COMPLETE]: "MFA Enrollment Complete",
-	[U.TOO_MANY_MFA_FAILURES]: "Too Many MFA Failures",
-	[U.MFA_RECOVERY_FAILED]: "MFA Recovery Failed",
-	[U.MFA_RECOVERY_RATE_LIMIT_EXCEED]: "MFA Recovery Rate Limit Exceeded",
-	[U.MFA_RECOVERY_SUCCESS]: "MFA Recovery Success",
-	[U.MFA_EMAIL_SENT]: "MFA Email Sent",
-	[U.EMAIL_VERIFICATION_SENT]: "Email Verification Sent",
-	[U.EMAIL_VERIFICATION_SEND_FAILURE]: "Email Verification Send Failure",
-	[U.PUSH_NOTIFICATION_SENT]: "Push Notification Sent",
-	[U.ERROR_SENDING_MFA_PUSH_NOTIFICATION]: "Error Sending MFA Push Notification",
-	[U.MFA_SMS_SENT]: "MFA SMS Sent",
-	[U.ERROR_SENDING_MFA_SMS]: "Error Sending MFA SMS",
-	[U.MFA_VOICE_CALL_SUCCESS]: "MFA Voice Call Success",
-	[U.MFA_VOICE_CALL_FAILED]: "MFA Voice Call Failed",
-	[U.SECOND_FACTOR_STARTED]: "Second Factor Started",
-	[U.MFA_ENROLL_STARTED]: "MFA Enroll Started",
-	[U.MFA_ENROLLMENT_FAILED]: "MFA Enrollment Failed",
-	[U.GUARDIAN_TENANT_UPDATE]: "Guardian Tenant Update",
-	[U.UNENROLL_DEVICE_ACCOUNT]: "Unenroll Device Account",
-	[U.UPDATE_DEVICE_ACCOUNT]: "Update Device Account",
-	[U.WEBAUTHN_CHALLENGE_FAILED]: "WebAuthn Challenge Failed",
-	[U.WEBAUTHN_ENROLLMENT_FAILED]: "WebAuthn Enrollment Failed",
-	[U.FAILED_KMS_API_OPERATION]: "Failed KMS API Operation",
-	[U.SUCCESS_KMS_API_OPERATION]: "Success KMS API Operation",
-	[U.KMS_KEY_STATE_CHANGED]: "KMS Key State Changed",
-	[U.TOO_MANY_CALLS_TO_DELEGATION]: "Too Many Calls to Delegation",
-	[U.BLOCKED_IP_ADDRESS]: "Blocked IP Address",
-	[U.BLOCKED_ACCOUNT_IP]: "Blocked Account (IP)",
-	[U.BLOCKED_ACCOUNT_EMAIL]: "Blocked Account (Email)",
-	[U.INFORMATION]: "Information",
-	[U.MFA_REQUIRED]: "MFA Required",
-	[U.MANAGEMENT_API_READ_OPERATION]: "Management API Read Operation",
-	[U.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Failed Authentication Method Operation (My Account)",
-	[U.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Successful Authentication Method Operation (My Account)",
-	[U.FAILED_OIDC_BACKCHANNEL_LOGOUT]: "Failed OIDC Backchannel Logout",
-	[U.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT]: "Successful OIDC Backchannel Logout",
-	[U.ORGANIZATION_MEMBER_ADDED]: "Organization Member Added",
-	[U.PASSKEY_CHALLENGE_FAILED]: "Passkey Challenge Failed",
-	[U.PASSKEY_CHALLENGE_STARTED]: "Passkey Challenge Started",
-	[U.PRE_LOGIN_ASSESSMENT]: "Pre-Login Assessment",
-	[U.BREACHED_PASSWORD]: "Breached Password",
-	[U.BREACHED_PASSWORD_ON_RESET]: "Breached Password on Reset",
-	[U.SUCCESS_RESOURCE_CLEANUP]: "Success Resource Cleanup",
-	[U.RICH_CONSENTS_ACCESS_ERROR]: "Rich Consents Access Error",
-	[U.SUCCESS_LOGIN]: "Success Login",
-	[U.SUCCESS_API_OPERATION]: "Success API Operation",
-	[U.FAILED_API_OPERATION]: "Failed API Operation",
-	[U.SUCCESS_CHANGE_EMAIL]: "Success Change Email",
-	[U.SUCCESS_CROSS_ORIGIN_AUTHENTICATION]: "Success Cross Origin Authentication",
-	[U.SUCCESS_CHANGE_PASSWORD]: "Success Change Password",
-	[U.SUCCESS_CHANGE_PHONE_NUMBER]: "Success Change Phone Number",
-	[U.SUCCESS_CHANGE_PASSWORD_REQUEST]: "Success Change Password Request",
-	[U.SUCCESS_CHANGE_USERNAME]: "Success Change Username",
-	[U.SUCCESS_CREDENTIAL_VALIDATION]: "Success Credential Validation",
-	[U.SUCCESS_DELEGATION]: "Success Delegation",
-	[U.SUCCESS_USER_DELETION]: "Success User Deletion",
-	[U.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Authorization Code for Access Token",
-	[U.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Success Exchange Access Token for Client Credentials",
-	[U.SUCCESS_EXCHANGE_CUSTOM_TOKEN]: "Success Exchange Custom Token",
-	[U.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Device Code for Access Token",
-	[U.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Success Exchange Native Social Login",
-	[U.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Password OOB for Access Token",
-	[U.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Password OTP for Access Token",
-	[U.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passwordless OTP for Access Token",
-	[U.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Success Exchange Password for Access Token",
-	[U.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OOB for Access Token",
-	[U.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OTP for Access Token",
-	[U.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Passkey MFA Recovery for Access Token",
-	[U.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Password MFA Recovery for Access Token",
-	[U.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Refresh Token for Access Token",
-	[U.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Subject Token for Access Token",
-	[U.SUCCESS_IMPERSONATION]: "Success Impersonation",
-	[U.SUCCESSFULLY_ACCEPTED_USER_INVITE]: "Successfully Accepted User Invite",
-	[U.BREACHED_PASSWORD_ON_SIGNUP]: "Breached Password on Signup",
-	[U.SUCCESS_LOGOUT]: "Success Logout",
-	[U.SUCCESS_HOOK]: "Success Hook",
-	[U.SUCCESS_PASSWORD_MIGRATION]: "Success Password Migration",
-	[U.SUCCESS_REVOCATION]: "Success Revocation",
-	[U.SUCCESS_SIGNUP]: "Success Signup",
-	[U.FAILED_SS_SSO_OPERATION]: "Failed SS SSO Operation",
-	[U.INFORMATION_FROM_SS_SSO_OPERATION]: "Information from SS SSO Operation",
-	[U.SUCCESS_SS_SSO_OPERATION]: "Success SS SSO Operation",
-	[U.SUCCESS_SILENT_AUTH]: "Success Silent Auth",
-	[U.SUCCESSFUL_SCIM_OPERATION]: "Successful SCIM Operation",
-	[U.SUCCESSFULLY_IMPORTED_USERS]: "Successfully Imported Users",
-	[U.SUCCESS_VERIFICATION_EMAIL]: "Success Verification Email",
-	[U.SUCCESS_VERIFICATION_EMAIL_REQUEST]: "Success Verification Email Request",
-	[U.MAX_AMOUNT_OF_AUTHENTICATORS]: "Max Amount of Authenticators",
-	[U.USER_LOGIN_BLOCK_RELEASED]: "User Login Block Released",
-	[U.FAILED_UNIVERSAL_LOGOUT]: "Failed Universal Logout",
-	[U.SUCCESSFUL_UNIVERSAL_LOGOUT]: "Successful Universal Logout",
-	[U.WARNING_DURING_LOGIN]: "Warning During Login",
-	[U.WARNING_SENDING_NOTIFICATION]: "Warning Sending Notification",
-	[U.WARNING_USER_MANAGEMENT]: "Warning User Management"
-}, Kn = (() => {
+}, qn = e.string().refine((e) => Object.values(V).includes(e), { message: "Invalid log type" }), Jn = {
+	[V.ACLS_SUMMARY]: "ACLs Summary",
+	[V.ACTIONS_EXECUTION_FAILED]: "Actions Execution Failed",
+	[V.API_LIMIT]: "API Rate Limit Reached",
+	[V.API_LIMIT_WARNING]: "API Rate Limit Warning",
+	[V.APPI]: "API Operation",
+	[V.CIBA_EXCHANGE_FAILED]: "CIBA Exchange Failed",
+	[V.CIBA_EXCHANGE_SUCCEEDED]: "CIBA Exchange Succeeded",
+	[V.CIBA_START_FAILED]: "CIBA Start Failed",
+	[V.CIBA_START_SUCCEEDED]: "CIBA Start Succeeded",
+	[V.CODE_LINK_SENT]: "Code/Link Sent",
+	[V.CODE_SENT]: "Code Sent",
+	[V.DEPRECATION_NOTICE]: "Deprecation Notice",
+	[V.CONFIG_INHERITANCE_DIFF]: "Config Inheritance Shadow Difference",
+	[V.CONFIG_DRIFT]: "Config Drift",
+	[V.FAILED_LOGIN]: "Failed Login",
+	[V.FAILED_BY_CONNECTOR]: "Failed by Connector",
+	[V.FAILED_CHANGE_EMAIL]: "Failed Change Email",
+	[V.FAILED_BY_CORS]: "Failed by CORS",
+	[V.FAILED_CROSS_ORIGIN_AUTHENTICATION]: "Failed Cross Origin Authentication",
+	[V.FAILED_CHANGE_PASSWORD]: "Failed Change Password",
+	[V.FAILED_POST_CHANGE_PASSWORD_HOOK]: "Failed Post-Change Password Hook",
+	[V.FAILED_CHANGE_PHONE_NUMBER]: "Failed Change Phone Number",
+	[V.FAILED_CHANGE_PASSWORD_REQUEST]: "Failed Change Password Request",
+	[V.FAILED_CONNECTOR_PROVISIONING]: "Failed Connector Provisioning",
+	[V.FAILED_CHANGE_USERNAME]: "Failed Change Username",
+	[V.FAILED_DELEGATION]: "Failed Delegation",
+	[V.FAILED_DEVICE_ACTIVATION]: "Failed Device Activation",
+	[V.FAILED_DEVICE_AUTHORIZATION_REQUEST]: "Failed Device Authorization Request",
+	[V.USER_CANCELED_DEVICE_CONFIRMATION]: "User Canceled Device Confirmation",
+	[V.FAILED_USER_DELETION]: "Failed User Deletion",
+	[V.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Authorization Code for Access Token",
+	[V.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Failed Exchange Access Token for Client Credentials",
+	[V.FAILED_EXCHANGE_CUSTOM_TOKEN]: "Failed Exchange Custom Token",
+	[V.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Failed Exchange Device Code for Access Token",
+	[V.FAILED_FEDERATED_LOGOUT]: "Failed Federated Logout",
+	[V.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Failed Exchange Native Social Login",
+	[V.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Failed Exchange Password OOB for Access Token",
+	[V.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Password OTP for Access Token",
+	[V.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Failed Exchange Password for Access Token",
+	[V.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Failed Exchange Passwordless OTP for Access Token",
+	[V.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Failed Exchange Password MFA Recovery for Access Token",
+	[V.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN]: "Failed Exchange Rotating Refresh Token",
+	[V.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Refresh Token for Access Token",
+	[V.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Failed Exchange Subject Token for Access Token",
+	[V.FAILED_HOOK]: "Failed Hook",
+	[V.FAILED_IMPERSONATION]: "Failed Impersonation",
+	[V.FAILED_INVITE_ACCEPT]: "Failed Invite Accept",
+	[V.FAILED_LOGOUT]: "Failed Logout",
+	[V.FLOWS_EXECUTION_COMPLETED]: "Flows Execution Completed",
+	[V.FLOWS_EXECUTION_FAILED]: "Flows Execution Failed",
+	[V.FAILED_SENDING_NOTIFICATION]: "Failed Sending Notification",
+	[V.FORMS_SUBMISSION_FAILED]: "Forms Submission Failed",
+	[V.FORMS_SUBMISSION_SUCCEEDED]: "Forms Submission Succeeded",
+	[V.FAILED_LOGIN_INCORRECT_PASSWORD]: "Failed Login - Incorrect Password",
+	[V.FAILED_PUSHED_AUTHORIZATION_REQUEST]: "Failed Pushed Authorization Request",
+	[V.FAILED_POST_USER_REGISTRATION_HOOK]: "Failed Post-User Registration Hook",
+	[V.FAILED_SIGNUP]: "Failed Signup",
+	[V.FAILED_SILENT_AUTH]: "Failed Silent Auth",
+	[V.FAILED_LOGIN_INVALID_EMAIL_USERNAME]: "Failed Login - Invalid Email/Username",
+	[V.FAILED_USERS_IMPORT]: "Failed Users Import",
+	[V.FAILED_VERIFICATION_EMAIL]: "Failed Verification Email",
+	[V.FAILED_VERIFICATION_EMAIL_REQUEST]: "Failed Verification Email Request",
+	[V.EMAIL_VERIFICATION_CONFIRMED]: "Email Verification Confirmed",
+	[V.EMAIL_VERIFICATION_FAILED]: "Email Verification Failed",
+	[V.MFA_AUTH_FAILED]: "MFA Auth Failed",
+	[V.MFA_AUTH_REJECTED]: "MFA Auth Rejected",
+	[V.MFA_AUTH_SUCCESS]: "MFA Auth Success",
+	[V.MFA_ENROLLMENT_COMPLETE]: "MFA Enrollment Complete",
+	[V.TOO_MANY_MFA_FAILURES]: "Too Many MFA Failures",
+	[V.MFA_RECOVERY_FAILED]: "MFA Recovery Failed",
+	[V.MFA_RECOVERY_RATE_LIMIT_EXCEED]: "MFA Recovery Rate Limit Exceeded",
+	[V.MFA_RECOVERY_SUCCESS]: "MFA Recovery Success",
+	[V.MFA_EMAIL_SENT]: "MFA Email Sent",
+	[V.EMAIL_VERIFICATION_SENT]: "Email Verification Sent",
+	[V.EMAIL_VERIFICATION_SEND_FAILURE]: "Email Verification Send Failure",
+	[V.PUSH_NOTIFICATION_SENT]: "Push Notification Sent",
+	[V.ERROR_SENDING_MFA_PUSH_NOTIFICATION]: "Error Sending MFA Push Notification",
+	[V.MFA_SMS_SENT]: "MFA SMS Sent",
+	[V.ERROR_SENDING_MFA_SMS]: "Error Sending MFA SMS",
+	[V.MFA_VOICE_CALL_SUCCESS]: "MFA Voice Call Success",
+	[V.MFA_VOICE_CALL_FAILED]: "MFA Voice Call Failed",
+	[V.SECOND_FACTOR_STARTED]: "Second Factor Started",
+	[V.MFA_ENROLL_STARTED]: "MFA Enroll Started",
+	[V.MFA_ENROLLMENT_FAILED]: "MFA Enrollment Failed",
+	[V.GUARDIAN_TENANT_UPDATE]: "Guardian Tenant Update",
+	[V.UNENROLL_DEVICE_ACCOUNT]: "Unenroll Device Account",
+	[V.UPDATE_DEVICE_ACCOUNT]: "Update Device Account",
+	[V.WEBAUTHN_CHALLENGE_FAILED]: "WebAuthn Challenge Failed",
+	[V.WEBAUTHN_ENROLLMENT_FAILED]: "WebAuthn Enrollment Failed",
+	[V.FAILED_KMS_API_OPERATION]: "Failed KMS API Operation",
+	[V.SUCCESS_KMS_API_OPERATION]: "Success KMS API Operation",
+	[V.KMS_KEY_STATE_CHANGED]: "KMS Key State Changed",
+	[V.TOO_MANY_CALLS_TO_DELEGATION]: "Too Many Calls to Delegation",
+	[V.BLOCKED_IP_ADDRESS]: "Blocked IP Address",
+	[V.BLOCKED_ACCOUNT_IP]: "Blocked Account (IP)",
+	[V.BLOCKED_ACCOUNT_EMAIL]: "Blocked Account (Email)",
+	[V.INFORMATION]: "Information",
+	[V.MFA_REQUIRED]: "MFA Required",
+	[V.MANAGEMENT_API_READ_OPERATION]: "Management API Read Operation",
+	[V.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Failed Authentication Method Operation (My Account)",
+	[V.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT]: "Successful Authentication Method Operation (My Account)",
+	[V.FAILED_OIDC_BACKCHANNEL_LOGOUT]: "Failed OIDC Backchannel Logout",
+	[V.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT]: "Successful OIDC Backchannel Logout",
+	[V.ORGANIZATION_MEMBER_ADDED]: "Organization Member Added",
+	[V.PASSKEY_CHALLENGE_FAILED]: "Passkey Challenge Failed",
+	[V.PASSKEY_CHALLENGE_STARTED]: "Passkey Challenge Started",
+	[V.PRE_LOGIN_ASSESSMENT]: "Pre-Login Assessment",
+	[V.BREACHED_PASSWORD]: "Breached Password",
+	[V.BREACHED_PASSWORD_ON_RESET]: "Breached Password on Reset",
+	[V.SUCCESS_RESOURCE_CLEANUP]: "Success Resource Cleanup",
+	[V.RICH_CONSENTS_ACCESS_ERROR]: "Rich Consents Access Error",
+	[V.SUCCESS_LOGIN]: "Success Login",
+	[V.SUCCESS_API_OPERATION]: "Success API Operation",
+	[V.FAILED_API_OPERATION]: "Failed API Operation",
+	[V.SUCCESS_CHANGE_EMAIL]: "Success Change Email",
+	[V.SUCCESS_CROSS_ORIGIN_AUTHENTICATION]: "Success Cross Origin Authentication",
+	[V.SUCCESS_CHANGE_PASSWORD]: "Success Change Password",
+	[V.SUCCESS_CHANGE_PHONE_NUMBER]: "Success Change Phone Number",
+	[V.SUCCESS_CHANGE_PASSWORD_REQUEST]: "Success Change Password Request",
+	[V.SUCCESS_CHANGE_USERNAME]: "Success Change Username",
+	[V.SUCCESS_CREDENTIAL_VALIDATION]: "Success Credential Validation",
+	[V.SUCCESS_DELEGATION]: "Success Delegation",
+	[V.SUCCESS_USER_DELETION]: "Success User Deletion",
+	[V.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Authorization Code for Access Token",
+	[V.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS]: "Success Exchange Access Token for Client Credentials",
+	[V.SUCCESS_EXCHANGE_CUSTOM_TOKEN]: "Success Exchange Custom Token",
+	[V.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN]: "Success Exchange Device Code for Access Token",
+	[V.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN]: "Success Exchange Native Social Login",
+	[V.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Password OOB for Access Token",
+	[V.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Password OTP for Access Token",
+	[V.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passwordless OTP for Access Token",
+	[V.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN]: "Success Exchange Password for Access Token",
+	[V.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OOB for Access Token",
+	[V.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN]: "Success Exchange Passkey OTP for Access Token",
+	[V.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Passkey MFA Recovery for Access Token",
+	[V.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN]: "Success Exchange Password MFA Recovery for Access Token",
+	[V.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Refresh Token for Access Token",
+	[V.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN]: "Success Exchange Subject Token for Access Token",
+	[V.SUCCESS_IMPERSONATION]: "Success Impersonation",
+	[V.SUCCESSFULLY_ACCEPTED_USER_INVITE]: "Successfully Accepted User Invite",
+	[V.BREACHED_PASSWORD_ON_SIGNUP]: "Breached Password on Signup",
+	[V.SUCCESS_LOGOUT]: "Success Logout",
+	[V.SUCCESS_HOOK]: "Success Hook",
+	[V.SUCCESS_PASSWORD_MIGRATION]: "Success Password Migration",
+	[V.SUCCESS_REVOCATION]: "Success Revocation",
+	[V.SUCCESS_SIGNUP]: "Success Signup",
+	[V.FAILED_SS_SSO_OPERATION]: "Failed SS SSO Operation",
+	[V.INFORMATION_FROM_SS_SSO_OPERATION]: "Information from SS SSO Operation",
+	[V.SUCCESS_SS_SSO_OPERATION]: "Success SS SSO Operation",
+	[V.SUCCESS_SILENT_AUTH]: "Success Silent Auth",
+	[V.SUCCESSFUL_SCIM_OPERATION]: "Successful SCIM Operation",
+	[V.SUCCESSFULLY_IMPORTED_USERS]: "Successfully Imported Users",
+	[V.SUCCESS_VERIFICATION_EMAIL]: "Success Verification Email",
+	[V.SUCCESS_VERIFICATION_EMAIL_REQUEST]: "Success Verification Email Request",
+	[V.MAX_AMOUNT_OF_AUTHENTICATORS]: "Max Amount of Authenticators",
+	[V.USER_LOGIN_BLOCK_RELEASED]: "User Login Block Released",
+	[V.FAILED_UNIVERSAL_LOGOUT]: "Failed Universal Logout",
+	[V.SUCCESSFUL_UNIVERSAL_LOGOUT]: "Successful Universal Logout",
+	[V.WARNING_DURING_LOGIN]: "Warning During Login",
+	[V.WARNING_SENDING_NOTIFICATION]: "Warning Sending Notification",
+	[V.WARNING_USER_MANAGEMENT]: "Warning User Management"
+}, Yn = (() => {
 	let e = {};
-	for (let [t, n] of Object.entries(U)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "CONFIG_INHERITANCE_DIFF" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
+	for (let [t, n] of Object.entries(V)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "CONFIG_INHERITANCE_DIFF" || t === "CONFIG_DRIFT" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
 	return e;
 })();
-function qn(e) {
-	return Gn[e] ?? e;
+function Xn(e) {
+	return Jn[e] ?? e;
 }
-function Jn(e) {
-	return Kn[e] ?? "other";
+function Zn(e) {
+	return Yn[e] ?? "other";
 }
-var Yn = e.object({
+var Qn = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.object({ node: e.string().optional() }).optional()
-}), Xn = e.object({
+}), $n = e.object({
 	country_code: e.string().length(2),
 	city_name: e.string(),
 	latitude: e.string(),
 	longitude: e.string(),
 	time_zone: e.string(),
 	continent_code: e.string()
-}), Zn = e.object({
-	type: Wn,
+}), er = e.object({
+	type: qn,
 	date: e.string(),
 	description: e.string().optional(),
 	ip: e.string().optional(),
@@ -1929,58 +1955,58 @@ var Yn = e.object({
 	strategy: e.string().optional(),
 	strategy_type: e.string().optional(),
 	hostname: e.string().optional(),
-	auth0_client: Yn.optional(),
+	auth0_client: Qn.optional(),
 	log_id: e.string().optional(),
-	location_info: Xn.optional()
-}), Qn = Zn.extend({ log_id: e.string() }), $n = e.enum([
+	location_info: $n.optional()
+}), tr = er.extend({ log_id: e.string() }), nr = e.enum([
 	"http",
 	"eventbridge",
 	"eventgrid",
 	"splunk",
 	"datadog",
 	"sumo"
-]), W = e.enum([
+]), H = e.enum([
 	"active",
 	"paused",
 	"suspended"
-]), er = e.object({
+]), rr = e.object({
 	type: e.string(),
 	name: e.string()
-}), tr = e.object({
+}), ir = e.object({
 	name: e.string(),
-	type: $n,
-	status: W.optional(),
+	type: nr,
+	status: H.optional(),
 	sink: e.record(e.string(), e.unknown()),
-	filters: e.array(er).optional(),
+	filters: e.array(rr).optional(),
 	isPriority: e.boolean().optional()
-}), nr = tr.extend({
+}), ar = ir.extend({
 	id: e.string(),
-	status: W,
+	status: H,
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), rr = e.enum([
+}), or = e.enum([
 	"auth0",
 	"cognito",
 	"okta",
 	"oidc"
-]), ir = e.object({
+]), sr = e.object({
 	domain: e.string(),
 	client_id: e.string(),
 	client_secret: e.string(),
 	audience: e.string().optional(),
 	scope: e.string().optional()
-}), ar = e.object({
+}), cr = e.object({
 	id: e.string().optional(),
 	name: e.string(),
-	provider: rr,
+	provider: or,
 	connection: e.string(),
 	enabled: e.boolean().default(!0),
-	credentials: ir
-}), or = e.object({
+	credentials: sr
+}), lr = e.object({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(ar.shape), sr = e.object({
+}).extend(cr.shape), ur = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	admin_notification_frequency: e.array(e.string()).optional(),
@@ -1989,13 +2015,13 @@ var Yn = e.object({
 		"pre-user-registration": e.object({ shields: e.array(e.string()).optional() }).optional(),
 		"pre-change-password": e.object({ shields: e.array(e.string()).optional() }).optional()
 	}).optional()
-}), cr = e.object({
+}), dr = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
 	mode: e.string().optional(),
 	max_attempts: e.number().optional()
-}), lr = e.object({
+}), fr = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
@@ -2009,28 +2035,28 @@ var Yn = e.object({
 			rate: e.number().optional()
 		}).optional()
 	}).optional()
-}), ur = e.object({
-	breached_password_detection: sr.optional(),
-	brute_force_protection: cr.optional(),
-	suspicious_ip_throttling: lr.optional()
-}), dr = e.object({
+}), pr = e.object({
+	breached_password_detection: ur.optional(),
+	brute_force_protection: dr.optional(),
+	suspicious_ip_throttling: fr.optional()
+}), mr = e.object({
 	id: e.string().optional(),
 	user_id: e.string(),
 	password: e.string(),
 	algorithm: e.enum(["bcrypt", "argon2id"]).default("argon2id"),
 	is_current: e.boolean().default(!0)
-}), fr = dr.extend({
+}), hr = mr.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), pr = e.object({
+}), U = e.object({
 	initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
 	initial_ip: e.string().describe("First IP address associated with this session"),
 	initial_asn: e.string().describe("First autonomous system number associated with this session"),
 	last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
 	last_ip: e.string().describe("Last IP address from which this user logged in"),
 	last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), mr = e.object({
+}), gr = e.object({
 	id: e.string(),
 	revoked_at: e.string().optional(),
 	used_at: e.string().optional(),
@@ -2038,14 +2064,14 @@ var Yn = e.object({
 	expires_at: e.string().optional(),
 	login_session_id: e.string(),
 	idle_expires_at: e.string().optional(),
-	device: pr.describe("Metadata related to the device used in the session"),
+	device: U.describe("Metadata related to the device used in the session"),
 	clients: e.array(e.string()).describe("List of client details for the session")
-}), hr = e.object({
+}), _r = e.object({
 	created_at: e.string(),
 	updated_at: e.string(),
 	authenticated_at: e.string(),
 	last_interaction_at: e.string()
-}).extend(mr.shape), gr = e.object({
+}).extend(gr.shape), vr = e.object({
 	kid: e.string().openapi({ description: "The key id of the signing key" }),
 	tenant_id: e.string().optional().openapi({ description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped." }),
 	cert: e.string().openapi({ description: "The public certificate of the signing key" }),
@@ -2061,9 +2087,16 @@ var Yn = e.object({
 	revoked_at: e.string().optional().openapi({ description: "The date and time when the key was revoked" }),
 	connection: e.string().optional().openapi({ description: "The connection identifier associated with the key" }),
 	type: e.enum(["jwt_signing", "saml_encryption"]).openapi({ description: "The type of the signing key" })
-}), _r = e.object({
+}), yr = e.object({
 	id: e.string().optional(),
 	parent_tenant_id: e.string().nullish(),
+	config_sync: e.enum([
+		"inherit-on-read",
+		"synced",
+		"detached"
+	]).nullish(),
+	config_sync_hash: e.string().nullish(),
+	config_synced_at: e.string().nullish(),
 	audience: e.string().optional(),
 	friendly_name: e.string(),
 	picture_url: e.string().optional(),
@@ -2180,7 +2213,7 @@ var Yn = e.object({
 		"shared_planetscale"
 	]).optional(),
 	d1_database_id: e.string().max(64).optional(),
-	attack_protection: ur.optional(),
+	attack_protection: pr.optional(),
 	mfa: e.object({
 		policy: e.enum(["never", "always"]).default("never").optional(),
 		factors: e.object({
@@ -2207,38 +2240,42 @@ var Yn = e.object({
 		}).optional(),
 		phone_message: e.object({ message: e.string().optional() }).optional()
 	}).optional()
-}), vr = e.object({
+}), br = e.object({
 	created_at: e.string().nullable().transform((e) => e ?? ""),
 	updated_at: e.string().nullable().transform((e) => e ?? "")
-}).extend(_r.shape).extend({
+}).extend(yr.shape).extend({
 	id: e.string(),
-	is_control_plane: e.boolean().optional()
-}), yr = e.enum([
+	is_control_plane: e.boolean().optional(),
+	has_children: e.boolean().optional()
+}), xr = e.enum([
 	"provision",
 	"seed",
 	"upgrade",
 	"backup",
 	"deprovision",
-	"users_import"
-]), br = e.enum([
+	"users_import",
+	"sync-defaults",
+	"detach",
+	"tenant-members-request"
+]), Sr = e.enum([
 	"pending",
 	"running",
 	"succeeded",
 	"failed",
 	"cancelled"
-]), xr = e.string().max(64), Sr = ["inline", "cloudflare-workflows"], Cr = e.object({
+]), Cr = e.string().max(64), wr = ["inline", "cloudflare-workflows"], Tr = e.object({
 	tenant_id: e.string().max(255).nullable().default(null),
 	rollout_id: e.string().max(255).nullable().optional(),
-	kind: yr,
-	engine: xr,
+	kind: xr,
+	engine: Cr,
 	engine_instance_id: e.string().max(100).nullable().optional(),
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	initiated_by: e.string().max(255).nullable().optional(),
 	input: e.record(e.string(), e.unknown()).nullable().optional()
-}), wr = Cr.extend({
+}), Er = Tr.extend({
 	id: e.string(),
-	status: br,
+	status: Sr,
 	current_step: e.string().max(255).nullable().optional(),
 	error: e.string().nullable().optional(),
 	result: e.record(e.string(), e.unknown()).nullable().optional(),
@@ -2247,7 +2284,7 @@ var Yn = e.object({
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
-}), Tr = wr.pick({
+}), Dr = Er.pick({
 	status: !0,
 	current_step: !0,
 	engine_instance_id: !0,
@@ -2258,87 +2295,123 @@ var Yn = e.object({
 	claimed_by: !0,
 	claim_expires_at: !0,
 	finished_at: !0
-}).partial(), Er = e.enum([
+}).partial(), Or = e.enum([
 	"started",
 	"succeeded",
 	"failed",
 	"retried",
 	"skipped",
 	"reconciled"
-]), Dr = e.object({
+]), kr = e.object({
 	operation_id: e.string().max(255),
 	step: e.string().max(255),
-	outcome: Er,
+	outcome: Or,
 	detail: e.record(e.string(), e.unknown()).nullable().optional(),
 	attempt: e.number().int().min(1).default(1)
-}), Or = Dr.extend({
+}), Ar = kr.extend({
 	id: e.string(),
 	created_at: e.string()
-}), G = e.enum([
+}), W = e.enum([
 	"pending",
 	"inserted",
 	"updated",
 	"failed",
 	"skipped"
-]), kr = [
+]), jr = [
 	"inserted",
 	"updated",
 	"failed",
 	"skipped"
-], Ar = e.object({
+], Mr = e.object({
 	operation_id: e.string().max(255),
 	seq: e.number().int().min(0),
 	payload: e.record(e.string(), e.unknown()),
-	status: G.default("pending"),
+	status: W.default("pending"),
 	error_code: e.string().max(64).nullable().optional(),
 	error_message: e.string().nullable().optional(),
 	error_path: e.string().max(255).nullable().optional(),
 	entity_id: e.string().max(255).nullable().optional()
-}), jr = Ar.extend({
-	status: G,
+}), Nr = Mr.extend({
+	status: W,
 	created_at: e.string(),
 	updated_at: e.string()
-}), Mr = e.object({
+}), Pr = e.object({
 	seq: e.number().int().min(0),
-	status: G,
+	status: W,
 	error_code: e.string().max(64).nullable().optional(),
 	error_message: e.string().nullable().optional(),
 	error_path: e.string().max(255).nullable().optional(),
 	entity_id: e.string().max(255).nullable().optional()
-}), Nr = e.enum([
+}), Fr = e.enum([
 	"upgrade",
 	"reseed",
-	"backup"
-]), Pr = e.enum([
+	"backup",
+	"config-sync"
+]), Ir = e.enum([
 	"pending",
 	"canary",
 	"rolling",
 	"paused",
 	"done",
 	"failed"
-]), Fr = e.object({
-	kind: Nr,
+]), Lr = e.object({
+	kind: Fr,
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	wave_size: e.number().int().min(1).default(10),
 	canary_tenant_ids: e.array(e.string()).nullable().optional(),
 	filter: e.record(e.string(), e.unknown()).nullable().optional(),
-	initiated_by: e.string().max(255).nullable().optional()
-}), Ir = Fr.extend({
+	initiated_by: e.string().max(255).nullable().optional(),
+	config: e.record(e.string(), e.unknown()).nullable().optional()
+}), Rr = Lr.extend({
 	id: e.string(),
-	status: Pr,
+	status: Ir,
 	created_at: e.string(),
 	updated_at: e.string(),
-	finished_at: e.string().nullable().optional()
-}), Lr = Ir.pick({
+	finished_at: e.string().nullable().optional(),
+	paused_reason: e.string().nullable().optional()
+}), zr = Rr.pick({
 	status: !0,
 	wave_size: !0,
 	canary_tenant_ids: !0,
 	filter: !0,
+	config: !0,
+	paused_reason: !0,
 	finished_at: !0
-}).partial(), Rr = /* @__PURE__ */ function(e) {
-	return e.RefreshToken = "refresh_token", e.AuthorizationCode = "authorization_code", e.ClientCredential = "client_credentials", e.Passwordless = "passwordless", e.Password = "password", e.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", e.TokenExchange = "urn:ietf:params:oauth:grant-type:token-exchange", e;
-}({}), zr = e.object({
+}).partial(), Br = e.enum([
+	"invite",
+	"add_members",
+	"remove_members",
+	"assign_roles",
+	"remove_roles",
+	"revoke_invitation"
+]), G = e.enum([
+	"pending",
+	"succeeded",
+	"failed"
+]), Vr = e.object({
+	kind: Br,
+	requested_by: e.string().min(1).max(255),
+	payload: e.record(e.string(), e.unknown())
+}), Hr = Vr.extend({
+	id: e.string(),
+	tenant_id: e.string(),
+	status: G,
+	result: e.record(e.string(), e.unknown()).nullable().optional(),
+	error: e.string().nullable().optional(),
+	notified_at: e.string().nullable().optional(),
+	created_at: e.string(),
+	updated_at: e.string(),
+	finished_at: e.string().nullable().optional()
+}), Ur = e.object({
+	status: G.optional(),
+	result: e.record(e.string(), e.unknown()).nullable().optional(),
+	error: e.string().nullable().optional(),
+	notified_at: e.string().nullable().optional(),
+	finished_at: e.string().nullable().optional()
+}), Wr = /* @__PURE__ */ function(e) {
+	return e.DeviceCode = "urn:ietf:params:oauth:grant-type:device_code", e.RefreshToken = "refresh_token", e.AuthorizationCode = "authorization_code", e.ClientCredential = "client_credentials", e.Passwordless = "passwordless", e.Password = "password", e.OTP = "http://auth0.com/oauth/grant-type/passwordless/otp", e.TokenExchange = "urn:ietf:params:oauth:grant-type:token-exchange", e;
+}({}), Gr = e.object({
 	access_token: e.string(),
 	id_token: e.string().optional(),
 	scope: e.string().optional(),
@@ -2353,7 +2426,7 @@ e.object({
 });
 //#endregion
 //#region src/types/Theme.ts
-var Br = e.object({
+var Kr = e.object({
 	button_border_radius: e.number(),
 	button_border_weight: e.number(),
 	buttons_style: e.enum([
@@ -2371,7 +2444,7 @@ var Br = e.object({
 	show_widget_shadow: e.boolean(),
 	widget_border_weight: e.number(),
 	widget_corner_radius: e.number()
-}), Vr = e.object({
+}), qr = e.object({
 	base_focus_color: e.string(),
 	base_hover_color: e.string(),
 	body_text: e.string(),
@@ -2398,7 +2471,7 @@ var Br = e.object({
 }), K = e.object({
 	bold: e.boolean(),
 	size: e.number()
-}), Hr = e.object({
+}), Jr = e.object({
 	body_text: K,
 	buttons_text: K,
 	font_url: e.string(),
@@ -2408,7 +2481,7 @@ var Br = e.object({
 	reference_text_size: e.number(),
 	subtitle: K,
 	title: K
-}), Ur = e.object({
+}), Yr = e.object({
 	background_color: e.string(),
 	background_image_url: e.string(),
 	page_layout: e.enum([
@@ -2421,7 +2494,7 @@ var Br = e.object({
 		"chip",
 		"none"
 	]).optional()
-}), Wr = e.object({
+}), Xr = e.object({
 	header_text_alignment: e.enum([
 		"center",
 		"left",
@@ -2436,44 +2509,44 @@ var Br = e.object({
 	]),
 	logo_url: e.string(),
 	social_buttons_layout: e.enum(["bottom", "top"])
-}), Gr = e.object({
-	borders: Br,
-	colors: Vr,
+}), Zr = e.object({
+	borders: Kr,
+	colors: qr,
 	displayName: e.string(),
-	fonts: Hr,
-	page_background: Ur,
-	widget: Wr
-}), Kr = Gr.extend({ themeId: e.string() }), qr = e.object({
+	fonts: Jr,
+	page_background: Yr,
+	widget: Xr
+}), Qr = Zr.extend({ themeId: e.string() }), $r = e.object({
 	...i,
 	universal_login_experience: e.enum(["new", "classic"]).default("new"),
 	identifier_first: e.boolean().default(!0),
 	password_first: e.boolean().default(!1),
 	show_last_used_connection: e.boolean().default(!1),
 	webauthn_platform_first_factor: e.boolean()
-}), Jr = e.object({
+}), ei = e.object({
 	hosts: e.array(e.string()).optional(),
 	methods: e.array(e.string()).optional(),
 	path: e.string().default("/*"),
 	headers: e.record(e.string(), e.string()).optional(),
 	query: e.record(e.string(), e.string()).optional()
-}), Yr = e.object({
+}), ti = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
 }), q = e.object({
 	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
-	match: Jr,
-	handlers: e.array(Yr).min(1)
-}), Xr = q.extend({
+	match: ei,
+	handlers: e.array(ti).min(1)
+}), ni = q.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), Zr = q.partial().omit({
+}), ri = q.partial().omit({
 	id: !0,
 	custom_domain_id: !0
-}), Qr = "custom_authentication", $r = [
+}), ii = "custom_authentication", ai = [
 	"urn:ietf:params:oauth:",
 	"urn:auth0",
 	"urn:okta",
@@ -2481,72 +2554,72 @@ var Br = e.object({
 	"https://auth0.com",
 	"http://okta.com",
 	"https://okta.com"
-], J = e.string().min(1).max(200).refine((e) => e.startsWith("https://") || e.startsWith("urn:"), { message: "subject_token_type must be a URI starting with https:// or urn:" }).refine((e) => !$r.some((t) => e.toLowerCase().startsWith(t)), { message: "subject_token_type uses a reserved namespace" }), ei = e.enum([
+], J = e.string().min(1).max(200).refine((e) => e.startsWith("https://") || e.startsWith("urn:"), { message: "subject_token_type must be a URI starting with https:// or urn:" }).refine((e) => !ai.some((t) => e.toLowerCase().startsWith(t)), { message: "subject_token_type uses a reserved namespace" }), oi = e.enum([
 	"RS256",
 	"RS384",
 	"RS512",
 	"ES256",
 	"ES384",
 	"ES512"
-]), ti = e.discriminatedUnion("type", [e.object({
+]), si = e.discriminatedUnion("type", [e.object({
 	type: e.literal("connection"),
 	connection: e.string().min(1),
 	create_if_not_exists: e.boolean().default(!0),
 	trust_email_verified: e.boolean().default(!1)
 }), e.object({ type: e.literal("user_id") })]), Y = e.object({
 	issuer: e.string().min(1).max(2048),
-	jwks: Rn.optional(),
+	jwks: Vn.optional(),
 	jwks_uri: e.string().url().optional(),
 	audience: e.array(e.string().min(1)).min(1).optional(),
-	algorithms: e.array(ei).min(1).optional(),
+	algorithms: e.array(oi).min(1).optional(),
 	max_lifetime_seconds: e.number().int().min(1).max(3600).default(300),
 	require_jti: e.boolean().default(!0),
-	user_mapping: ti
-}), ni = e.object({
+	user_mapping: si
+}), ci = e.object({
 	name: e.string().min(1).max(255),
 	subject_token_type: J,
 	action_id: e.string().min(1).optional(),
-	type: e.literal(Qr),
+	type: e.literal(ii),
 	jwt_verification: Y.optional()
-}), ri = ni.extend({
+}), li = ci.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), ii = e.object({
+}), ui = e.object({
 	name: e.string().min(1).max(255).optional(),
 	subject_token_type: J.optional(),
 	jwt_verification: Y.optional()
-}), ai = e.object({
+}), di = e.object({
 	scim: e.string(),
 	auth0: e.string()
-}), oi = e.object({
+}), fi = e.object({
 	connection_id: e.string(),
 	user_id_attribute: e.string().default("externalId"),
-	mapping: e.array(ai).default([])
-}), si = e.object({
+	mapping: e.array(di).default([])
+}), pi = e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(oi.shape), ci = e.object({
+}).extend(fi.shape), mi = e.object({
 	token_id: e.string(),
 	connection_id: e.string(),
 	token_hash: e.string(),
 	scopes: e.array(e.string()).default([]),
 	valid_until: e.string().optional()
-}), li = e.object({
+}), hi = e.object({
 	created_at: e.string(),
 	last_used_at: e.string().optional()
-}).extend(ci.shape), ui = e.object({
+}).extend(mi.shape), gi = e.object({
 	connection_id: e.string(),
 	external_id: e.string(),
 	user_id: e.string()
-}), di = e.object({ created_at: e.string() }).extend(ui.shape), fi = e.object({
+}), _i = e.object({ created_at: e.string() }).extend(gi.shape), vi = e.object({
 	...i,
 	name: e.string(),
 	enabled: e.boolean().optional().default(!0),
 	default_from_address: e.string().optional(),
 	credentials: e.record(e.string(), e.unknown()),
 	settings: e.object({}).optional()
-}), pi = e.enum([
+}), yi = e.enum([
 	"verify_email",
 	"verify_email_by_code",
 	"reset_email",
@@ -2559,8 +2632,8 @@ var Br = e.object({
 	"change_password",
 	"password_reset",
 	"user_invitation"
-]), mi = e.object({
-	template: pi,
+]), bi = e.object({
+	template: yi,
 	body: e.string(),
 	from: e.string(),
 	subject: e.string(),
@@ -2569,19 +2642,19 @@ var Br = e.object({
 	urlLifetimeInSeconds: e.number().int().nonnegative().optional(),
 	includeEmailInRedirect: e.boolean().default(!1),
 	enabled: e.boolean().default(!0)
-}), hi = e.object({
+}), xi = e.object({
 	id: e.string(),
 	login_id: e.string(),
 	session_id: e.string().optional(),
 	organization: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: H.optional(),
+	auth_strategy: B.optional(),
 	user_id: e.string(),
 	client_id: e.string(),
 	expires_at: e.string().optional(),
 	idle_expires_at: e.string().optional(),
 	last_exchanged_at: e.string().optional(),
-	device: pr,
+	device: U,
 	resource_servers: e.array(e.object({
 		audience: e.string(),
 		scopes: e.string()
@@ -2592,19 +2665,19 @@ var Br = e.object({
 	family_id: e.string().optional(),
 	rotated_to: e.string().optional(),
 	rotated_at: e.string().optional()
-}), gi = hi.extend({
+}), Si = xi.extend({
 	created_at: e.string(),
 	revoked_at: e.string().optional()
-}), _i = e.object({
+}), Ci = e.object({
 	to: e.string(),
 	message: e.string()
-}), vi = e.object({
+}), wi = e.object({
 	name: e.string(),
 	options: e.object({})
-}), yi = e.object({
+}), Ti = e.object({
 	value: e.string(),
 	description: e.string().optional()
-}), bi = e.object({
+}), Ei = e.object({
 	token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
 	enforce_policies: e.boolean().optional(),
 	allow_skipping_userinfo: e.boolean().optional(),
@@ -2612,11 +2685,11 @@ var Br = e.object({
 	persist_client_authorization: e.boolean().optional(),
 	enable_introspection_endpoint: e.boolean().optional(),
 	mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
-}), xi = e.object({
+}), Di = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	identifier: e.string(),
-	scopes: e.array(yi).optional(),
+	scopes: e.array(Ti).optional(),
 	signing_alg: e.string().optional(),
 	signing_secret: e.string().optional(),
 	token_lifetime: e.number().default(86400),
@@ -2624,38 +2697,38 @@ var Br = e.object({
 	skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
 	allow_offline_access: e.boolean().optional(),
 	verificationKey: e.string().optional(),
-	options: bi.optional(),
+	options: Ei.optional(),
 	is_system: e.boolean().optional(),
 	...i,
 	metadata: e.record(e.string(), e.any()).optional()
-}), Si = xi.extend({
+}), Oi = Di.extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Ci = e.array(Si), wi = e.object({
+}), ki = e.array(Oi), Ai = e.object({
 	role_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
-}), Ti = wi.extend({ created_at: e.string() }), Ei = e.array(Ti), Di = e.object({
+}), ji = Ai.extend({ created_at: e.string() }), Mi = e.array(ji), Ni = e.object({
 	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
 	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
 	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
 	scope: e.array(e.string()).default([]).openapi({ description: "The list of OAuth scopes the user has consented to" })
-}), Oi = Di.extend({ id: e.string() }), ki = e.object({
+}), Pi = Ni.extend({ id: e.string() }), Fi = e.object({
 	user_id: e.string(),
 	last_login: e.string().optional(),
 	last_ip: e.string().optional(),
 	login_count: e.number().default(0),
 	failed_logins: e.array(e.string()).optional(),
 	last_password_reset: e.string().optional()
-}), Ai = e.object({
+}), Ii = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
 	organization_id: e.string().optional()
-}), ji = Ai.extend({
+}), Li = Ii.extend({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
-}), Mi = e.array(ji), Ni = e.object({
+}), Ri = e.array(Li), zi = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -2663,65 +2736,65 @@ var Br = e.object({
 	description: e.string().nullable().optional(),
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
-}), Pi = e.array(Ni), Fi = e.object({
+}), Bi = e.array(zi), Vi = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
-}), Ii = Fi.extend({
+}), Hi = Vi.extend({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
-}), Li = e.array(Ii), Ri = e.object({
+}), Ui = e.array(Hi), Wi = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional().openapi({ description: "Metadata associated with the role. Can be used to control sync behavior in multi-tenancy scenarios." })
-}), zi = Ri.extend({
+}), Gi = Wi.extend({
 	id: e.string().openapi({ description: "The unique identifier of the role" }),
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Bi = e.array(zi), Vi = e.object({
+}), Ki = e.array(Gi), qi = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), Hi = e.object({
+}).optional(), Ji = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), Ui = e.object({ client_credentials: e.object({
+}), Yi = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
-}).optional() }).optional(), Wi = e.object({
+}).optional() }).optional(), Xi = e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: Vi,
+	branding: qi,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(Hi).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: Ui
-}), Gi = Wi.extend(t.shape).extend({
+	enabled_connections: e.array(Ji).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: Yi
+}), Zi = Xi.extend(t.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
-}), Ki = e.object({
+}), Qi = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
 	is_signup_enabled: e.boolean().optional().default(!0)
-}), qi = Ki.extend({
+}), $i = Qi.extend({
 	connection: e.object({
 		name: e.string().optional(),
 		strategy: e.string().optional()
 	}).optional(),
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Ji = e.array(qi), Yi = e.object({
+}), ea = e.array($i), ta = e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
-}), Xi = Yi.extend(t.shape).extend({ id: e.string() }), Zi = e.object({
+}), na = ta.extend(t.shape).extend({ id: e.string() }), ra = e.object({
 	idle_session_lifetime: e.number().default(72),
 	session_lifetime: e.number().default(168),
 	session_cookie: e.object({ mode: e.enum(["persistent", "non-persistent"]).optional() }).optional(),
@@ -2800,7 +2873,7 @@ var Br = e.object({
 		}).optional(),
 		phone_message: e.object({ message: e.string().optional() }).optional()
 	}).optional()
-}), Qi = e.object({
+}), ia = e.object({
 	date: e.string().openapi({
 		description: "Date these events occurred in ISO 8601 format",
 		example: "2025-12-19"
@@ -2825,10 +2898,10 @@ var Br = e.object({
 		description: "Approximate date and time the first event occurred in ISO 8601 format",
 		example: "2025-12-19T00:00:00.000Z"
 	})
-}), $i = e.number().openapi({
+}), aa = e.number().openapi({
 	description: "Number of active users in the last 30 days",
 	example: 1234
-}), ea = e.enum([
+}), oa = e.enum([
 	"active-users",
 	"logins",
 	"signups",
@@ -2840,81 +2913,81 @@ var Br = e.object({
 	"mfa",
 	"email-verifications",
 	"codes-sent"
-]), ta = e.enum([
+]), sa = e.enum([
 	"hour",
 	"day",
 	"week",
 	"month"
-]), na = e.enum([
+]), ca = e.enum([
 	"time",
 	"connection",
 	"client_id",
 	"user_type",
 	"event"
-]), ra = e.enum([
+]), la = e.enum([
 	"password",
 	"social",
 	"passwordless",
 	"enterprise"
-]), ia = e.object({
+]), ua = e.object({
 	cohort: e.string(),
 	sessions: e.number(),
 	active: e.array(e.number())
-}), aa = e.object({
+}), da = e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(ia)
-}), oa = e.object({
+	cohorts: e.array(ua)
+}), fa = e.object({
 	cohort: e.string(),
 	tokens: e.number(),
 	active: e.array(e.number())
-}), sa = e.object({
+}), pa = e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(oa)
-}), ca = e.object({
+	cohorts: e.array(fa)
+}), ma = e.object({
 	name: e.string(),
 	type: e.string()
-}), la = e.object({
+}), ha = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
-}), ua = e.object({
-	meta: e.array(ca),
+}), ga = e.object({
+	meta: e.array(ma),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: la.optional()
-}), da = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), fa = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+	statistics: ha.optional()
+}), _a = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), va = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
 		additionalProperties: { type: "string" }
 	}
-}), pa = e.object({
-	prompt: da,
+}), ya = e.object({
+	prompt: _a,
 	language: e.string(),
-	custom_text: fa
-}), ma = [
+	custom_text: va
+}), ba = [
 	"form-content-start",
 	"form-content-end",
 	"form-footer-start",
 	"form-footer-end",
 	"secondary-actions-start",
 	"secondary-actions-end"
-], ha = e.object({
+], xa = e.object({
 	"form-content-start": e.string().optional(),
 	"form-content-end": e.string().optional(),
 	"form-footer-start": e.string().optional(),
 	"form-footer-end": e.string().optional(),
 	"secondary-actions-start": e.string().optional(),
 	"secondary-actions-end": e.string().optional()
-}).strict(), ga = e.record(e.string(), ha), _a = e.object({
+}).strict(), Sa = e.record(e.string(), xa), Ca = e.object({
 	prompt: e.string(),
-	partials: ga
-}), va = {
+	partials: Sa
+}), wa = {
 	EMAIL: "email",
 	SMS: "sms",
 	USERNAME_PASSWORD: "Username-Password-Authentication",
@@ -2930,17 +3003,17 @@ var Br = e.object({
 	WAAD: "waad",
 	ADFS: "adfs",
 	OKTA: "okta"
-}, ya = {
+}, Ta = {
 	DATABASE: "database",
 	SOCIAL: "social",
 	PASSWORDLESS: "passwordless"
-}, ba = "auth0";
-function xa(e) {
-	return e === "auth0" || e === va.USERNAME_PASSWORD || e === "auth2";
+}, Ea = "auth0";
+function Da(e) {
+	return e === "auth0" || e === wa.USERNAME_PASSWORD || e === "auth2";
 }
 //#endregion
 //#region src/types/AuthenticationMethod.ts
-var Sa = e.enum([
+var Oa = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -2948,9 +3021,9 @@ var Sa = e.enum([
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), Ca = e.object({
+]), ka = e.object({
 	user_id: e.string(),
-	type: Sa,
+	type: Oa,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
 	credential_id: e.string().optional(),
@@ -2961,7 +3034,7 @@ var Sa = e.enum([
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function wa(t, n) {
+function Aa(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -2984,15 +3057,16 @@ function wa(t, n) {
 		path: ["public_key"]
 	}));
 }
-var Ta = Ca.superRefine(wa), Ea = Ca.extend({
+var ja = ka.superRefine(Aa), Ma = ka.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(wa), Da = e.object({
+}).superRefine(Aa), Na = e.object({
 	id: e.string().optional(),
 	created_at: e.string().datetime({ offset: !0 }).optional(),
 	updated_at: e.string().datetime({ offset: !0 }).optional()
-}), Oa = {
+}), Pa = {
+	"validate-registration-username": { access: ["deny"] },
 	"post-user-login": {
 		accessToken: ["setCustomClaim"],
 		idToken: ["setCustomClaim"],
@@ -3016,20 +3090,29 @@ var Ta = Ca.superRefine(wa), Ea = Ca.extend({
 		validation: ["error"]
 	},
 	"post-user-registration": {},
+	"pre-user-update": { access: ["deny"] },
+	"post-user-update": {},
+	"pre-user-deletion": { access: ["deny"] },
+	"post-user-deletion": {},
 	"custom-token-exchange": {
 		authentication: ["setUserById", "setUserByConnection"],
 		access: ["deny", "rejectInvalidSubjectToken"]
 	}
-}, ka = {
+}, Fa = {
+	"validate-registration-username": "onExecuteValidateRegistrationUsername",
 	"post-user-login": "onExecutePostLogin",
 	"credentials-exchange": "onExecuteCredentialsExchange",
 	"pre-user-registration": "onExecutePreUserRegistration",
 	"post-user-registration": "onExecutePostUserRegistration",
+	"pre-user-update": "onExecutePreUserUpdate",
+	"post-user-update": "onExecutePostUserUpdate",
+	"pre-user-deletion": "onExecutePreUserDeletion",
+	"post-user-deletion": "onExecutePostUserDeletion",
 	"custom-token-exchange": "onExecuteCustomTokenExchange"
 };
 //#endregion
 //#region src/utils/user-id.ts
-function Aa(e) {
+function Ia(e) {
 	let t = e.indexOf("|"), n = e.slice(0, t), r = e.slice(t + 1);
 	if (t === -1 || !n || !r) throw Error(`Invalid user_id: ${e}`);
 	return {
@@ -3039,10 +3122,10 @@ function Aa(e) {
 }
 //#endregion
 //#region src/utils/http.ts
-var ja = "x-authhero-preserve-location";
+var La = "x-authhero-preserve-location";
 //#endregion
 //#region src/utils/passthrough.ts
-function Ma(e) {
+function Ra(e) {
 	let { primary: t, secondaries: n, syncMethods: r = [
 		"create",
 		"rawCreate",
@@ -3076,12 +3159,12 @@ function Ma(e) {
 		} : i.bind(e) : i;
 	} });
 }
-function Na(e) {
+function za(e) {
 	return e;
 }
 //#endregion
 //#region src/utils/connection-attributes.ts
-function Pa(e) {
+function Ba(e) {
 	let t = e?.options;
 	if (!t) return {
 		usernameIdentifierActive: !1,
@@ -3104,35 +3187,35 @@ function Pa(e) {
 }
 //#endregion
 //#region src/utils/guards.ts
-function Fa(e) {
+function Va(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
 //#endregion
 //#region src/utils/base64url.ts
-function Ia(e) {
+function Ha(e) {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-function La(e) {
+function Ua(e) {
 	let t = e.replace(/-/g, "+").replace(/_/g, "/"), n = atob(t), r = new Uint8Array(n.length);
 	for (let e = 0; e < n.length; e++) r[e] = n.charCodeAt(e);
 	return r;
 }
-function Ra(e) {
-	return Ia(new TextEncoder().encode(e));
+function Wa(e) {
+	return Ha(new TextEncoder().encode(e));
 }
-function za(e) {
-	return new TextDecoder().decode(La(e));
+function Ga(e) {
+	return new TextDecoder().decode(Ua(e));
 }
 //#endregion
 //#region src/utils/base64.ts
-function Ba(e) {
+function Ka(e) {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t);
 }
-function Va(e) {
+function qa(e) {
 	let t = atob(e), n = new Uint8Array(t.length);
 	for (let e = 0; e < t.length; e++) n[e] = t.charCodeAt(e);
 	return n;
@@ -3140,12 +3223,12 @@ function Va(e) {
 //#endregion
 //#region src/utils/base32.ts
 var X = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
-function Ha(e) {
+function Ja(e) {
 	let t = "", n = 0, r = 0;
 	for (let i of e) for (n = n << 8 | i, r += 8; r >= 5;) r -= 5, t += X[n >> r & 31];
 	return r > 0 && (t += X[n << 5 - r & 31]), t;
 }
-function Ua(e) {
+function Ya(e) {
 	let t = e.replace(/=+$/, "").toUpperCase(), n = t.length % 8;
 	if (n === 1 || n === 3 || n === 6) throw Error(`Invalid base32 length: ${t.length}`);
 	let r = [], i = 0, a = 0;
@@ -3159,19 +3242,19 @@ function Ua(e) {
 }
 //#endregion
 //#region src/utils/hex.ts
-function Wa(e) {
+function Xa(e) {
 	let t = e instanceof Uint8Array ? e : new Uint8Array(e), n = "";
 	for (let e of t) n += e.toString(16).padStart(2, "0");
 	return n;
 }
 //#endregion
 //#region src/utils/cursor.ts
-function Ga(e) {
-	return Ra(JSON.stringify(e));
+function Za(e) {
+	return Wa(JSON.stringify(e));
 }
-function Ka(e) {
+function Qa(e) {
 	try {
-		let t = JSON.parse(za(e));
+		let t = JSON.parse(Ga(e));
 		return t && typeof t == "object" && typeof t.i == "string" ? t : null;
 	} catch {
 		return null;
@@ -3179,7 +3262,7 @@ function Ka(e) {
 }
 //#endregion
 //#region src/utils/lucene.ts
-function qa(e) {
+function $a(e) {
 	let t = [], n = "", r = !1;
 	for (let i = 0; i < e.length; i++) {
 		let a = e[i];
@@ -3187,53 +3270,53 @@ function qa(e) {
 	}
 	return n.trim() && t.push(n.trim()), t;
 }
-function Ja(e) {
+function eo(e) {
 	return e.replace(/\\([\\"+\-!(){}[\]^~*?:/&|])/g, "$1");
 }
-function Ya(e) {
+function to(e) {
 	return `"${e.replace(/([\\"])/g, "\\$1")}"`;
 }
-function Xa(e) {
+function no(e) {
 	let t = e.trim();
-	return Ja(t.length > 1 && t.startsWith("\"") && t.endsWith("\"") ? t.slice(1, -1) : t);
+	return eo(t.length > 1 && t.startsWith("\"") && t.endsWith("\"") ? t.slice(1, -1) : t);
 }
-function Za(e) {
+function ro(e) {
 	let t = [], n = [];
-	for (let r of qa(e)) /^or$/i.test(r) ? (t.push(n), n = []) : n.push(r);
+	for (let r of $a(e)) /^or$/i.test(r) ? (t.push(n), n = []) : n.push(r);
 	return t.push(n), t.filter((e) => e.length > 0);
 }
-function Qa(e, t) {
+function io(e, t) {
 	let n = new Set(t), r = (e) => {
 		let t = e.replace(/^([^:]+)=/, "$1:"), r = t.startsWith("-") ? t.slice(1) : t;
 		if (r.startsWith("_exists_:")) return n.has(r.slice(9));
 		let i = r.indexOf(":");
 		return i > 0 ? n.has(r.slice(0, i)) : !0;
 	};
-	return Za(e).map((e) => e.filter(r).join(" ")).filter((e) => e.length > 0).join(" OR ");
+	return ro(e).map((e) => e.filter(r).join(" ")).filter((e) => e.length > 0).join(" OR ");
 }
-var $a = /^[^\s@%_*?"'()[\]{}^~:\\/]+@[^\s@%_*?"'()[\]{}^~:\\/]+\.[^\s@%_*?"'()[\]{}^~:\\/]+$/;
-function eo(e) {
-	return $a.test(e);
+var ao = /^[^\s@%_*?"'()[\]{}^~:\\/]+@[^\s@%_*?"'()[\]{}^~:\\/]+\.[^\s@%_*?"'()[\]{}^~:\\/]+$/;
+function oo(e) {
+	return ao.test(e);
 }
 //#endregion
 //#region src/utils/session-retention.ts
 var Z = 10080 * 60 * 1e3, Q = 4320 * 60 * 1e3;
-function to(e) {
+function so(e) {
 	return Math.floor((e + Q) / Z);
 }
 function $(e) {
 	return e * Z - Q;
 }
-function no(e, t = Date.now()) {
-	let n = to(t), r = n - e + 1;
+function co(e, t = Date.now()) {
+	let n = so(t), r = n - e + 1;
 	return {
 		currentWeek: n,
 		firstWeek: r,
 		sinceMs: $(r)
 	};
 }
-function ro(e, t, n = Date.now()) {
-	let { currentWeek: r, firstWeek: i, sinceMs: a } = no(t, n), o = /* @__PURE__ */ new Map();
+function lo(e, t, n = Date.now()) {
+	let { currentWeek: r, firstWeek: i, sinceMs: a } = co(t, n), o = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		if (t.created_week < i || t.created_week > r) continue;
 		let e = Math.min(Math.max(0, t.used_week - t.created_week), r - t.created_week), n = o.get(t.created_week);
@@ -3256,8 +3339,8 @@ function ro(e, t, n = Date.now()) {
 		cohorts: s
 	};
 }
-function io(e, t, n = Date.now()) {
-	let r = ro(e, t, n);
+function uo(e, t, n = Date.now()) {
+	let r = lo(e, t, n);
 	return {
 		interval: r.interval,
 		from: r.from,
@@ -3271,16 +3354,16 @@ function io(e, t, n = Date.now()) {
 }
 //#endregion
 //#region src/utils/username-validation.ts
-var ao = /^[A-Za-z0-9_+\-.!#$'^`~]+$/, oo = "Username can only contain alphanumeric characters and the following characters: '_', '+', '-', '.', '!', '#', '$', \"'\", '^', '`', '~'", so = "Usernames must not contain \"@\". Use the email field for email addresses.";
-function co(e) {
-	return ao.test(e);
+var fo = /^[A-Za-z0-9_+\-.!#$'^`~]+$/, po = "Username can only contain alphanumeric characters and the following characters: '_', '+', '-', '.', '!', '#', '$', \"'\", '^', '`', '~'", mo = "Usernames must not contain \"@\". Use the email field for email addresses.";
+function ho(e) {
+	return fo.test(e);
 }
-function lo(e) {
+function go(e) {
 	return e.toLowerCase();
 }
-function uo(e, t) {
-	if (e.includes("@")) return so;
-	if (!co(e)) return oo;
+function _o(e, t) {
+	if (e.includes("@")) return mo;
+	if (!ho(e)) return po;
 	if (t) {
 		let n = [...e].length;
 		if (n < t.min) return `Username must be at least ${t.min} characters`;
@@ -3290,15 +3373,15 @@ function uo(e, t) {
 }
 //#endregion
 //#region src/utils/feature-not-supported.ts
-var fo = class extends Error {
+var vo = class extends Error {
 	feature;
 	adapter;
 	constructor(e, t, n) {
 		super(`${e} is not supported by the ${t} adapter.` + (n ? ` ${n}` : "")), this.name = "FeatureNotSupportedError", this.feature = e, this.adapter = t;
 	}
 };
-function po(e) {
+function yo(e) {
 	return e instanceof Error && e.name === "FeatureNotSupportedError";
 }
 //#endregion
-export { we as Auth0ActionEnum, Yn as Auth0Client, T as AuthorizationResponseMode, w as AuthorizationResponseType, ot as CodeChallengeMethod, Ue as ComponentCategory, He as ComponentType, ba as DATABASE_CONNECTION_STRATEGY, Te as EmailActionEnum, en as FORM_FIELD_TYPES, fo as FeatureNotSupportedError, Ce as FlowActionTypeEnum, Rr as GrantType, Sr as KNOWN_TENANT_OPERATION_ENGINES, Xn as LocationInfo, U as LogTypes, Bn as LoginSessionState, Q as MONDAY_EPOCH_SHIFT_MS, Xe as NodeType, ja as PRESERVE_LOCATION_HEADER, $r as RESERVED_SUBJECT_TOKEN_TYPE_PREFIXES, ke as RedirectTargetEnum, va as Strategy, ya as StrategyType, kr as TERMINAL_TENANT_OPERATION_ROW_STATUSES, Qr as TOKEN_EXCHANGE_PROFILE_TYPE, Oa as TRIGGER_API_SHAPES, ka as TRIGGER_FUNCTION_NAMES, so as USERNAME_CONTAINS_AT_MESSAGE, oo as USERNAME_INVALID_CHARACTERS_MESSAGE, Z as WEEK_MS, o as actionDependencySchema, ae as actionExecutionErrorSchema, ue as actionExecutionInsertSchema, se as actionExecutionLogEntrySchema, ce as actionExecutionLogsSchema, oe as actionExecutionResultSchema, le as actionExecutionSchema, ie as actionExecutionStatusSchema, re as actionExecutionTriggerIdSchema, c as actionInsertSchema, $e as actionNodeSchema, ne as actionResponseSchema, l as actionSchema, te as actionSecretNameSchema, s as actionSecretSchema, a as actionTriggerSchema, ee as actionUpdateSchema, de as actionVersionInsertSchema, fe as actionVersionSchema, $i as activeUsersResponseSchema, me as actorSchema, p as addressSchema, _n as allowedTriggersForHook, ca as analyticsColumnMetaSchema, na as analyticsGroupBySchema, ta as analyticsIntervalSchema, ua as analyticsQueryResponseSchema, ea as analyticsResourceSchema, la as analyticsStatisticsSchema, ra as analyticsUserTypeSchema, ur as attackProtectionSchema, pe as auditCategorySchema, xe as auditEventInsertSchema, Se as auditEventSchema, be as auth0ClientSchema, at as auth0FlowInsertSchema, it as auth0FlowSchema, Ne as auth0QuerySchema, De as auth0UpdateUserActionSchema, Fe as auth0UserResponseSchema, lt as authParamsSchema, Ta as authenticationMethodInsertSchema, Ea as authenticationMethodSchema, Sa as authenticationMethodTypeSchema, m as baseUserSchema, Zt as blockComponentSchema, Br as bordersSchema, ut as brandingSchema, sr as breachedPasswordDetectionSchema, cr as bruteForceProtectionSchema, io as buildRefreshTokenRetention, ro as buildSessionRetention, Ge as buttonComponentSchema, ct as claimsRequestSchema, v as clientGrantInsertSchema, Be as clientGrantListSchema, y as clientGrantSchema, _ as clientInsertSchema, x as clientRegistrationTokenInsertSchema, Ve as clientRegistrationTokenSchema, b as clientRegistrationTokenTypeSchema, ze as clientSchema, ft as codeInsertSchema, pt as codeSchema, dt as codeTypeSchema, Vr as colorsSchema, ln as componentMessageSchema, Ye as componentSchema, i as configInheritanceShape, r as configOverrideSchema, n as configScopeSchema, ht as connectionInsertSchema, mt as connectionOptionsSchema, gt as connectionSchema, S as coordinatesSchema, Ma as createPassthroughAdapter, Na as createWriteOnlyAdapter, xt as customDomainCertificateUploadSchema, D as customDomainInsertSchema, vt as customDomainSchema, yt as customDomainUpdateSchema, bt as customDomainWithTenantIdSchema, pa as customTextEntrySchema, fa as customTextSchema, Qi as dailyStatsSchema, Ua as decodeBase32, Va as decodeBase64, La as decodeBase64Url, za as decodeBase64UrlString, Ka as decodeCursor, fi as emailProviderSchema, pi as emailTemplateNameSchema, mi as emailTemplateSchema, Ee as emailVerificationRulesSchema, Oe as emailVerifyActionSchema, Ha as encodeBase32, Ba as encodeBase64, Ia as encodeBase64Url, Ra as encodeBase64UrlString, Ga as encodeCursor, Wa as encodeHex, rt as endingSchema, Ya as escapeLuceneValue, $t as fieldComponentSchema, je as flowActionStepSchema, u as flowInsertSchema, Me as flowSchema, qe as flowsFieldComponentSchema, Qe as flowsFlowNodeSchema, Ze as flowsStepNodeSchema, K as fontDetailsSchema, Hr as fontsSchema, tn as formControlSchema, sn as formInsertSchema, M as formNodeComponentDefinition, on as formNodeSchema, cn as formSchema, Je as genericComponentSchema, et as genericNodeSchema, Pa as getConnectionIdentifierConfig, Jn as getLogTypeCategory, qn as getLogTypeDescription, Di as grantInsertSchema, Oi as grantSchema, Yr as handlerConfigSchema, jn as hookCodeInsertSchema, Mn as hookCodeSchema, wn as hookInsertSchema, z as hookPageId, An as hookSchema, B as hookTemplateId, vn as hookTemplates, f as identitySchema, Da as importMetadataSchema, Fn as inviteInsertSchema, In as inviteSchema, Pn as inviteeSchema, Nn as inviterSchema, pn as isBlockComponent, xa as isDatabaseConnectionStrategy, eo as isEmailSearchTerm, po as isFeatureNotSupportedError, hn as isFieldComponent, Fa as isPlainObject, mn as isWidgetComponent, Rn as jwksKeySchema, Ln as jwksSchema, Ke as legalComponentSchema, ye as locationInfoSchema, Zn as logInsertSchema, Qn as logSchema, er as logStreamFilterSchema, tr as logStreamInsertSchema, nr as logStreamSchema, W as logStreamStatusSchema, $n as logStreamTypeSchema, Kn as logTypeCategories, Gn as logTypeDescriptions, H as loginSessionAuthStrategySchema, Hn as loginSessionInsertSchema, Un as loginSessionSchema, Vn as loginSessionStateSchema, Jr as matchSchema, rr as migrationProviderTypeSchema, ir as migrationSourceCredentialsSchema, ar as migrationSourceInsertSchema, or as migrationSourceSchema, tt as nodeSchema, lo as normalizeUsername, zn as openIDConfigurationSchema, Vi as organizationBrandingSchema, Ki as organizationConnectionInsertSchema, Ji as organizationConnectionListSchema, qi as organizationConnectionSchema, Hi as organizationEnabledConnectionSchema, Wi as organizationInsertSchema, Gi as organizationSchema, Ui as organizationTokenQuotaSchema, Ur as pageBackgroundSchema, Aa as parseUserId, dr as passwordInsertSchema, fr as passwordSchema, d as profileDataSchema, ma as promptPartialInsertionPoints, _a as promptPartialsEntrySchema, ga as promptPartialsSchema, da as promptScreenSchema, qr as promptSettingSchema, q as proxyRouteInsertSchema, Xr as proxyRouteSchema, Zr as proxyRouteUpdateSchema, Ae as redirectActionSchema, hi as refreshTokenInsertSchema, oa as refreshTokenRetentionCohortSchema, sa as refreshTokenRetentionResponseSchema, gi as refreshTokenSchema, ge as requestAuthSchema, _e as requestContextSchema, xi as resourceServerInsertSchema, Ci as resourceServerListSchema, bi as resourceServerOptionsSchema, Si as resourceServerSchema, yi as resourceServerScopeSchema, ve as responseContextSchema, We as richTextComponentSchema, Ri as roleInsertSchema, Bi as roleListSchema, wi as rolePermissionInsertSchema, Ei as rolePermissionListSchema, Ti as rolePermissionSchema, zi as roleSchema, Fr as rolloutInsertSchema, Nr as rolloutKindSchema, Ir as rolloutSchema, Pr as rolloutStatusSchema, Lr as rolloutUpdateSchema, Qa as sanitizeLuceneQuery, oi as scimConfigurationInsertSchema, si as scimConfigurationSchema, ui as scimExternalIdInsertSchema, di as scimExternalIdSchema, ai as scimMappingEntrySchema, ci as scimTokenInsertSchema, li as scimTokenSchema, un as screenLinkSchema, mr as sessionInsertSchema, ia as sessionRetentionCohortSchema, aa as sessionRetentionResponseSchema, no as sessionRetentionWindow, hr as sessionSchema, gr as signingKeySchema, vi as smsProviderSchema, _i as smsSendParamsSchema, Za as splitLuceneOrGroups, nt as startSchema, J as subjectTokenTypeSchema, lr as suspiciousIpThrottlingSchema, he as targetSchema, _r as tenantInsertSchema, xr as tenantOperationEngineSchema, Dr as tenantOperationEventInsertSchema, Er as tenantOperationEventOutcomeSchema, Or as tenantOperationEventSchema, Cr as tenantOperationInsertSchema, yr as tenantOperationKindSchema, Ar as tenantOperationRowInsertSchema, Mr as tenantOperationRowOutcomeSchema, jr as tenantOperationRowSchema, G as tenantOperationRowStatusSchema, wr as tenantOperationSchema, br as tenantOperationStatusSchema, Tr as tenantOperationUpdateSchema, vr as tenantSchema, Zi as tenantSettingsSchema, Gr as themeInsertSchema, Kr as themeSchema, ei as tokenExchangeJwtAlgorithmSchema, Y as tokenExchangeJwtVerificationSchema, ni as tokenExchangeProfileInsertSchema, ri as tokenExchangeProfileSchema, ii as tokenExchangeProfileUpdateSchema, ti as tokenExchangeUserMappingSchema, zr as tokenResponseSchema, qa as tokenizeLuceneQuery, Pe as totalsSchema, dn as uiScreenPartialsSchema, fn as uiScreenSchema, Ja as unescapeLuceneValue, Xa as unquoteLuceneValue, ki as userActivitySchema, h as userInsertSchema, Yi as userOrganizationInsertSchema, Xi as userOrganizationSchema, Ai as userPermissionInsertSchema, Mi as userPermissionListSchema, ji as userPermissionSchema, Pi as userPermissionWithDetailsListSchema, Ni as userPermissionWithDetailsSchema, Ie as userResponseSchema, Fi as userRoleInsertSchema, Li as userRoleListSchema, Ii as userRoleSchema, g as userSchema, co as usernameHasOnlyAllowedCharacters, uo as validateUsername, _t as verificationMethodsSchema, to as weekIndex, $ as weekStartMs, Qt as widgetComponentSchema, Wr as widgetSchema };
+export { Te as Auth0ActionEnum, Qn as Auth0Client, C as AuthorizationResponseMode, S as AuthorizationResponseType, ct as CodeChallengeMethod, Ge as ComponentCategory, We as ComponentType, Ea as DATABASE_CONNECTION_STRATEGY, Ee as EmailActionEnum, rn as FORM_FIELD_TYPES, vo as FeatureNotSupportedError, we as FlowActionTypeEnum, Wr as GrantType, wr as KNOWN_TENANT_OPERATION_ENGINES, $n as LocationInfo, V as LogTypes, Un as LoginSessionState, Q as MONDAY_EPOCH_SHIFT_MS, Qe as NodeType, La as PRESERVE_LOCATION_HEADER, ai as RESERVED_SUBJECT_TOKEN_TYPE_PREFIXES, Ae as RedirectTargetEnum, wa as Strategy, Ta as StrategyType, jr as TERMINAL_TENANT_OPERATION_ROW_STATUSES, ii as TOKEN_EXCHANGE_PROFILE_TYPE, Pa as TRIGGER_API_SHAPES, Fa as TRIGGER_FUNCTION_NAMES, mo as USERNAME_CONTAINS_AT_MESSAGE, po as USERNAME_INVALID_CHARACTERS_MESSAGE, Z as WEEK_MS, o as actionDependencySchema, oe as actionExecutionErrorSchema, de as actionExecutionInsertSchema, ce as actionExecutionLogEntrySchema, le as actionExecutionLogsSchema, se as actionExecutionResultSchema, ue as actionExecutionSchema, ae as actionExecutionStatusSchema, ie as actionExecutionTriggerIdSchema, c as actionInsertSchema, tt as actionNodeSchema, re as actionResponseSchema, te as actionSchema, ne as actionSecretNameSchema, s as actionSecretSchema, a as actionTriggerSchema, ee as actionUpdateSchema, fe as actionVersionInsertSchema, pe as actionVersionSchema, aa as activeUsersResponseSchema, he as actorSchema, d as addressSchema, bn as allowedTriggersForHook, ma as analyticsColumnMetaSchema, ca as analyticsGroupBySchema, sa as analyticsIntervalSchema, ga as analyticsQueryResponseSchema, oa as analyticsResourceSchema, ha as analyticsStatisticsSchema, la as analyticsUserTypeSchema, pr as attackProtectionSchema, me as auditCategorySchema, Se as auditEventInsertSchema, Ce as auditEventSchema, xe as auth0ClientSchema, st as auth0FlowInsertSchema, ot as auth0FlowSchema, Fe as auth0QuerySchema, Oe as auth0UpdateUserActionSchema, Le as auth0UserResponseSchema, dt as authParamsSchema, ja as authenticationMethodInsertSchema, Ma as authenticationMethodSchema, Oa as authenticationMethodTypeSchema, f as baseUserSchema, en as blockComponentSchema, Kr as bordersSchema, ft as brandingSchema, ur as breachedPasswordDetectionSchema, dr as bruteForceProtectionSchema, uo as buildRefreshTokenRetention, lo as buildSessionRetention, qe as buttonComponentSchema, ut as claimsRequestSchema, g as clientGrantInsertSchema, He as clientGrantListSchema, _ as clientGrantSchema, h as clientInsertSchema, y as clientRegistrationTokenInsertSchema, Ue as clientRegistrationTokenSchema, v as clientRegistrationTokenTypeSchema, Ve as clientSchema, mt as codeInsertSchema, ht as codeSchema, pt as codeTypeSchema, qr as colorsSchema, fn as componentMessageSchema, Ze as componentSchema, i as configInheritanceShape, r as configOverrideSchema, n as configScopeSchema, vt as connectionInsertSchema, _t as connectionOptionsSchema, yt as connectionSchema, b as coordinatesSchema, Ra as createPassthroughAdapter, za as createWriteOnlyAdapter, wt as customDomainCertificateUploadSchema, T as customDomainInsertSchema, xt as customDomainSchema, St as customDomainUpdateSchema, Ct as customDomainWithTenantIdSchema, ya as customTextEntrySchema, va as customTextSchema, ia as dailyStatsSchema, Ya as decodeBase32, qa as decodeBase64, Ua as decodeBase64Url, Ga as decodeBase64UrlString, Qa as decodeCursor, gt as deviceCodeSchema, vi as emailProviderSchema, yi as emailTemplateNameSchema, bi as emailTemplateSchema, De as emailVerificationRulesSchema, ke as emailVerifyActionSchema, Ja as encodeBase32, Ka as encodeBase64, Ha as encodeBase64Url, Wa as encodeBase64UrlString, Za as encodeCursor, Xa as encodeHex, at as endingSchema, to as escapeLuceneValue, nn as fieldComponentSchema, Me as flowActionStepSchema, Ne as flowInsertSchema, Pe as flowSchema, Ye as flowsFieldComponentSchema, et as flowsFlowNodeSchema, $e as flowsStepNodeSchema, K as fontDetailsSchema, Jr as fontsSchema, an as formControlSchema, un as formInsertSchema, A as formNodeComponentDefinition, ln as formNodeSchema, dn as formSchema, Xe as genericComponentSchema, nt as genericNodeSchema, Ba as getConnectionIdentifierConfig, Zn as getLogTypeCategory, Xn as getLogTypeDescription, Ni as grantInsertSchema, Pi as grantSchema, ti as handlerConfigSchema, Pn as hookCodeInsertSchema, Fn as hookCodeSchema, Dn as hookInsertSchema, L as hookPageId, Nn as hookSchema, R as hookTemplateId, xn as hookTemplates, u as identitySchema, Na as importMetadataSchema, Rn as inviteInsertSchema, zn as inviteSchema, Ln as inviteeSchema, In as inviterSchema, gn as isBlockComponent, Da as isDatabaseConnectionStrategy, oo as isEmailSearchTerm, yo as isFeatureNotSupportedError, vn as isFieldComponent, Va as isPlainObject, _n as isWidgetComponent, Vn as jwksKeySchema, Bn as jwksSchema, Je as legalComponentSchema, be as locationInfoSchema, er as logInsertSchema, tr as logSchema, rr as logStreamFilterSchema, ir as logStreamInsertSchema, ar as logStreamSchema, H as logStreamStatusSchema, nr as logStreamTypeSchema, Yn as logTypeCategories, Jn as logTypeDescriptions, B as loginSessionAuthStrategySchema, Gn as loginSessionInsertSchema, Kn as loginSessionSchema, Wn as loginSessionStateSchema, ei as matchSchema, or as migrationProviderTypeSchema, sr as migrationSourceCredentialsSchema, cr as migrationSourceInsertSchema, lr as migrationSourceSchema, rt as nodeSchema, go as normalizeUsername, Hn as openIDConfigurationSchema, qi as organizationBrandingSchema, Qi as organizationConnectionInsertSchema, ea as organizationConnectionListSchema, $i as organizationConnectionSchema, Ji as organizationEnabledConnectionSchema, Xi as organizationInsertSchema, Zi as organizationSchema, Yi as organizationTokenQuotaSchema, Yr as pageBackgroundSchema, Ia as parseUserId, mr as passwordInsertSchema, hr as passwordSchema, l as profileDataSchema, ba as promptPartialInsertionPoints, Ca as promptPartialsEntrySchema, Sa as promptPartialsSchema, _a as promptScreenSchema, $r as promptSettingSchema, q as proxyRouteInsertSchema, ni as proxyRouteSchema, ri as proxyRouteUpdateSchema, je as redirectActionSchema, xi as refreshTokenInsertSchema, fa as refreshTokenRetentionCohortSchema, pa as refreshTokenRetentionResponseSchema, Si as refreshTokenSchema, _e as requestAuthSchema, ve as requestContextSchema, Di as resourceServerInsertSchema, ki as resourceServerListSchema, Ei as resourceServerOptionsSchema, Oi as resourceServerSchema, Ti as resourceServerScopeSchema, ye as responseContextSchema, Ke as richTextComponentSchema, Wi as roleInsertSchema, Ki as roleListSchema, Ai as rolePermissionInsertSchema, Mi as rolePermissionListSchema, ji as rolePermissionSchema, Gi as roleSchema, Lr as rolloutInsertSchema, Fr as rolloutKindSchema, Rr as rolloutSchema, Ir as rolloutStatusSchema, zr as rolloutUpdateSchema, io as sanitizeLuceneQuery, fi as scimConfigurationInsertSchema, pi as scimConfigurationSchema, gi as scimExternalIdInsertSchema, _i as scimExternalIdSchema, di as scimMappingEntrySchema, mi as scimTokenInsertSchema, hi as scimTokenSchema, pn as screenLinkSchema, gr as sessionInsertSchema, ua as sessionRetentionCohortSchema, da as sessionRetentionResponseSchema, co as sessionRetentionWindow, _r as sessionSchema, vr as signingKeySchema, wi as smsProviderSchema, Ci as smsSendParamsSchema, ro as splitLuceneOrGroups, it as startSchema, J as subjectTokenTypeSchema, fr as suspiciousIpThrottlingSchema, ge as targetSchema, yr as tenantInsertSchema, Vr as tenantMemberRequestInsertSchema, Br as tenantMemberRequestKindSchema, Hr as tenantMemberRequestSchema, G as tenantMemberRequestStatusSchema, Ur as tenantMemberRequestUpdateSchema, Cr as tenantOperationEngineSchema, kr as tenantOperationEventInsertSchema, Or as tenantOperationEventOutcomeSchema, Ar as tenantOperationEventSchema, Tr as tenantOperationInsertSchema, xr as tenantOperationKindSchema, Mr as tenantOperationRowInsertSchema, Pr as tenantOperationRowOutcomeSchema, Nr as tenantOperationRowSchema, W as tenantOperationRowStatusSchema, Er as tenantOperationSchema, Sr as tenantOperationStatusSchema, Dr as tenantOperationUpdateSchema, br as tenantSchema, ra as tenantSettingsSchema, Zr as themeInsertSchema, Qr as themeSchema, oi as tokenExchangeJwtAlgorithmSchema, Y as tokenExchangeJwtVerificationSchema, ci as tokenExchangeProfileInsertSchema, li as tokenExchangeProfileSchema, ui as tokenExchangeProfileUpdateSchema, si as tokenExchangeUserMappingSchema, Gr as tokenResponseSchema, $a as tokenizeLuceneQuery, Ie as totalsSchema, mn as uiScreenPartialsSchema, hn as uiScreenSchema, eo as unescapeLuceneValue, no as unquoteLuceneValue, Fi as userActivitySchema, p as userInsertSchema, ta as userOrganizationInsertSchema, na as userOrganizationSchema, Ii as userPermissionInsertSchema, Ri as userPermissionListSchema, Li as userPermissionSchema, Bi as userPermissionWithDetailsListSchema, zi as userPermissionWithDetailsSchema, Re as userResponseSchema, Vi as userRoleInsertSchema, Ui as userRoleListSchema, Hi as userRoleSchema, m as userSchema, ho as usernameHasOnlyAllowedCharacters, _o as validateUsername, bt as verificationMethodsSchema, so as weekIndex, $ as weekStartMs, tn as widgetComponentSchema, Xr as widgetSchema };