@authhero/adapter-interfaces 4.9.0 → 4.11.0

package/dist/adapter-interfaces.d.ts

@@ -11557,8 +11557,14 @@ declare function decodeCursor(token: string): CursorPayload | null;
 /**
  * Shared pieces of the Lucene-style `q` filter handling. The SQL generation
  * itself is ORM-specific and lives in each adapter; what is shared here is
- * the query-string sanitization that enforces the tenant boundary.
+ * the tokenizer (including the OR split) and the query-string sanitization
+ * that enforces the tenant boundary.
  */
+declare function tokenizeLuceneQuery(query: string): string[];
+declare function unescapeLuceneValue(value: string): string;
+declare function escapeLuceneValue(value: string): string;
+declare function unquoteLuceneValue(value: string): string;
+declare function splitLuceneOrGroups(query: string): string[][];
 declare function sanitizeLuceneQuery(query: string, allowedFields: string[]): string;
 declare function isEmailSearchTerm(value: string): boolean;
 
@@ -12110,6 +12116,23 @@ interface UpdateRefreshTokenOptions {
         expires_at: string;
     };
 }
+/**
+ * Update payload for a refresh token.
+ *
+ * The two expiry columns are three-valued on the way in: `undefined` leaves
+ * the stored value alone, a string overwrites it, and `null` clears it — the
+ * token stops expiring on that axis.
+ *
+ * Clearing exists for the in-place refresh exchange. A rotating client
+ * reconciles a changed refresh-token config for free, because the child row is
+ * minted from the current lifetimes; a non-rotating one keeps handing back the
+ * row it was given, so switching a client to non-expiring has to be able to
+ * drop the expiries that row was stamped with.
+ */
+type RefreshTokenUpdate = Partial<Omit<RefreshToken, "expires_at" | "idle_expires_at">> & {
+    expires_at?: string | null;
+    idle_expires_at?: string | null;
+};
 interface RefreshTokensAdapter {
     create: (tenant_id: string, refresh_token: RefreshTokenInsert) => Promise<RefreshToken>;
     get: (tenant_id: string, id: string) => Promise<RefreshToken | null>;
@@ -12120,7 +12143,7 @@ interface RefreshTokensAdapter {
      */
     getByLookup: (tenant_id: string, token_lookup: string) => Promise<RefreshToken | null>;
     list(tenant_id: string, params?: RefreshTokenListParams): Promise<ListRefreshTokenResponse>;
-    update: (tenant_id: string, id: string, refresh_token: Partial<RefreshToken>, options?: UpdateRefreshTokenOptions) => Promise<boolean>;
+    update: (tenant_id: string, id: string, refresh_token: RefreshTokenUpdate, options?: UpdateRefreshTokenOptions) => Promise<boolean>;
     remove: (tenant_id: string, id: string) => Promise<boolean>;
     /**
      * Soft-revoke every refresh token belonging to a user that isn't already
@@ -12135,6 +12158,23 @@ interface RefreshTokensAdapter {
      */
     revokeByUser: (tenant_id: string, user_id: string, revoked_at: string) => Promise<number>;
     revokeByLoginSession: (tenant_id: string, login_session_id: string, revoked_at: string) => Promise<number>;
+    /**
+     * Soft-revoke every refresh token owned by a session that isn't already
+     * revoked. This is the cascade behind "revoking a session revokes its
+     * refresh tokens" — deliberate revocation only.
+     *
+     * It must never be called for a session that merely *expired* or that
+     * cleanup removed: a refresh token is designed to outlive its session, and
+     * killing tokens on an SSO timeout would log out every long-lived native
+     * client. Lifetime does not couple; revocation does.
+     *
+     * Rows minted before `session_id` existed carry no value here and are not
+     * matched — callers sweep `revokeByLoginSession` alongside this until those
+     * rows have aged out (#1259).
+     *
+     * Returns the number of tokens revoked.
+     */
+    revokeBySession: (tenant_id: string, session_id: string, revoked_at: string) => Promise<number>;
     /**
      * Soft-revoke every refresh token that shares `family_id` and isn't already
      * revoked. Used for reuse detection (entire rotation chain torched) and for
@@ -12823,5 +12863,5 @@ interface DataAdapters {
     };
 }
 
-export { Auth0ActionEnum, Auth0Client, AuthorizationResponseMode, AuthorizationResponseType, CodeChallengeMethod, ComponentCategory, ComponentType, DATABASE_CONNECTION_STRATEGY, EmailActionEnum, FORM_FIELD_TYPES, FlowActionTypeEnum, GrantType, LocationInfo, LogTypes, LoginSessionState, MONDAY_EPOCH_SHIFT_MS, NodeType, RedirectTargetEnum, Strategy, StrategyType, TRIGGER_API_SHAPES, USERNAME_CONTAINS_AT_MESSAGE, USERNAME_INVALID_CHARACTERS_MESSAGE, WEEK_MS, actionDependencySchema, actionExecutionErrorSchema, actionExecutionInsertSchema, actionExecutionLogEntrySchema, actionExecutionLogsSchema, actionExecutionResultSchema, actionExecutionSchema, actionExecutionStatusSchema, actionExecutionTriggerIdSchema, actionInsertSchema, actionNodeSchema, actionSchema, actionSecretSchema, actionTriggerSchema, actionUpdateSchema, actionVersionInsertSchema, actionVersionSchema, activeUsersResponseSchema, actorSchema, addressSchema, allowedTriggersForHook, analyticsColumnMetaSchema, analyticsGroupBySchema, analyticsIntervalSchema, analyticsQueryResponseSchema, analyticsResourceSchema, analyticsStatisticsSchema, analyticsUserTypeSchema, attackProtectionSchema, auditCategorySchema, auditEventInsertSchema, auditEventSchema, auth0ClientSchema, auth0FlowInsertSchema, auth0FlowSchema, auth0QuerySchema, auth0UpdateUserActionSchema, auth0UserResponseSchema, authParamsSchema, authenticationMethodInsertSchema, authenticationMethodSchema, authenticationMethodTypeSchema, baseUserSchema, blockComponentSchema, bordersSchema, brandingSchema, breachedPasswordDetectionSchema, bruteForceProtectionSchema, buildRefreshTokenRetention, buildSessionRetention, buttonComponentSchema, claimsRequestSchema, clientGrantInsertSchema, clientGrantListSchema, clientGrantSchema, clientInsertSchema, clientRegistrationTokenInsertSchema, clientRegistrationTokenSchema, clientRegistrationTokenTypeSchema, clientSchema, codeInsertSchema, codeSchema, codeTypeSchema, colorsSchema, componentMessageSchema, componentSchema, connectionInsertSchema, connectionOptionsSchema, connectionSchema, coordinatesSchema, createPassthroughAdapter, createWriteOnlyAdapter, customDomainCertificateUploadSchema, customDomainInsertSchema, customDomainSchema, customDomainUpdateSchema, customDomainWithTenantIdSchema, customTextEntrySchema, customTextSchema, dailyStatsSchema, decodeBase32, decodeBase64, decodeBase64Url, decodeBase64UrlString, decodeCursor, emailProviderSchema, emailTemplateNameSchema, emailTemplateSchema, emailVerificationRulesSchema, emailVerifyActionSchema, encodeBase32, encodeBase64, encodeBase64Url, encodeBase64UrlString, encodeCursor, encodeHex, endingSchema, fieldComponentSchema, flowActionStepSchema, flowInsertSchema, flowSchema, fieldComponentSchema$1 as flowsFieldComponentSchema, flowNodeSchema$1 as flowsFlowNodeSchema, stepNodeSchema$1 as flowsStepNodeSchema, fontDetailsSchema, fontsSchema, formControlSchema, formInsertSchema, formNodeComponentDefinition, formNodeSchema, formSchema, genericComponentSchema, genericNodeSchema, getConnectionIdentifierConfig, getLogTypeCategory, getLogTypeDescription, grantInsertSchema, grantSchema, handlerConfigSchema, hookCodeInsertSchema, hookCodeSchema, hookInsertSchema, hookPageId, hookSchema, hookTemplateId, hookTemplates, identitySchema, importMetadataSchema, inviteInsertSchema, inviteSchema, inviteeSchema, inviterSchema, isBlockComponent, isDatabaseConnectionStrategy, isEmailSearchTerm, isFieldComponent, isPlainObject, isWidgetComponent, jwksKeySchema, jwksSchema, legalComponentSchema, locationInfoSchema, logInsertSchema, logSchema, logStreamFilterSchema, logStreamInsertSchema, logStreamSchema, logStreamStatusSchema, logStreamTypeSchema, logTypeCategories, logTypeDescriptions, loginSessionAuthStrategySchema, loginSessionInsertSchema, loginSessionSchema, loginSessionStateSchema, matchSchema, migrationProviderTypeSchema, migrationSourceCredentialsSchema, migrationSourceInsertSchema, migrationSourceSchema, nodeSchema, normalizeUsername, openIDConfigurationSchema, organizationBrandingSchema, organizationConnectionInsertSchema, organizationConnectionListSchema, organizationConnectionSchema, organizationEnabledConnectionSchema, organizationInsertSchema, organizationSchema, organizationTokenQuotaSchema, pageBackgroundSchema, parseUserId, passwordInsertSchema, passwordSchema, profileDataSchema, promptScreenSchema, promptSettingSchema, proxyRouteInsertSchema, proxyRouteSchema, proxyRouteUpdateSchema, redirectActionSchema, refreshTokenInsertSchema, refreshTokenRetentionCohortSchema, refreshTokenRetentionResponseSchema, refreshTokenSchema, requestContextSchema, resourceServerInsertSchema, resourceServerListSchema, resourceServerOptionsSchema, resourceServerSchema, resourceServerScopeSchema, responseContextSchema, richTextComponentSchema, roleInsertSchema, roleListSchema, rolePermissionInsertSchema, rolePermissionListSchema, rolePermissionSchema, roleSchema, rolloutInsertSchema, rolloutKindSchema, rolloutSchema, rolloutStatusSchema, rolloutUpdateSchema, sanitizeLuceneQuery, scimConfigurationInsertSchema, scimConfigurationSchema, scimExternalIdInsertSchema, scimExternalIdSchema, scimMappingEntrySchema, scimTokenInsertSchema, scimTokenSchema, screenLinkSchema, sessionInsertSchema, sessionRetentionCohortSchema, sessionRetentionResponseSchema, sessionRetentionWindow, sessionSchema, signingKeySchema, smsProviderSchema, smsSendParamsSchema, startSchema, suspiciousIpThrottlingSchema, targetSchema, tenantInsertSchema, tenantOperationEngineSchema, tenantOperationEventInsertSchema, tenantOperationEventOutcomeSchema, tenantOperationEventSchema, tenantOperationInsertSchema, tenantOperationKindSchema, tenantOperationSchema, tenantOperationStatusSchema, tenantOperationUpdateSchema, tenantSchema, tenantSettingsSchema, themeInsertSchema, themeSchema, tokenResponseSchema, totalsSchema, uiScreenSchema, userActivitySchema, userInsertSchema, userOrganizationInsertSchema, userOrganizationSchema, userPermissionInsertSchema, userPermissionListSchema, userPermissionSchema, userPermissionWithDetailsListSchema, userPermissionWithDetailsSchema, userResponseSchema, userRoleInsertSchema, userRoleListSchema, userRoleSchema, userSchema, usernameHasOnlyAllowedCharacters, validateUsername, verificationMethodsSchema, weekIndex, weekStartMs, widgetComponentSchema, widgetSchema };
-export type { Action, ActionExecution, ActionExecutionError, ActionExecutionInsert, ActionExecutionLogEntry, ActionExecutionLogs, ActionExecutionResult, ActionExecutionStatus, ActionExecutionsAdapter, ActionInsert, ActionNode, ActionUpdate, ActionVersion, ActionVersionInsert, ActionVersionsAdapter, ActionsAdapter, ActiveUsersResponse, Actor, Address, AnalyticsAdapter, AnalyticsColumnMeta, AnalyticsFilters, AnalyticsGroupBy, AnalyticsInterval, AnalyticsQueryParams, AnalyticsQueryResponse, AnalyticsResource, AnalyticsUserType, AttackProtection, AuditCategory, AuditEvent, AuditEventInsert, Auth0Flow, Auth0FlowInsert, Auth0UpdateUserAction, AuthParams, AuthenticationMethod, AuthenticationMethodInsert, AuthenticationMethodType, AuthenticationMethodUpdate, AuthenticationMethodsAdapter, BaseUser, BlockComponent, BooleanField, Branding, BrandingAdapter, BreachedPasswordDetection, BruteForceProtection, ButtonComponent, CacheAdapter, CacheItem, CardsField, ChoiceField, ClaimsRequest, Client, ClientConnectionsAdapter, ClientGrant, ClientGrantInsert, ClientGrantList, ClientGrantsAdapter, ClientInsert, ClientRegistrationToken, ClientRegistrationTokenInsert, ClientRegistrationTokenType, ClientRegistrationTokensAdapter, ClientWithTenantId, ClientsAdapter, Code, CodeExecutionLog, CodeExecutionResult, CodeExecutor, CodeField, CodeInsert, CodeResponse, CodeType, CodesAdapter, Component, ComponentMessage, Connection, ConnectionInsert, ConnectionsAdapter, ContinuationScope, Coordinates, CountryField, CreateOptions, CreateServiceTokenFn, CreateServiceTokenParams, CreateTenantParams, CursorPayload, CustomDomain, CustomDomainCertificateUpload, CustomDomainInsert, CustomDomainUpdate, CustomDomainWithTenantId, CustomDomainsAdapter, CustomField, CustomText, CustomTextAdapter, CustomTextEntry, DailyStats, DataAdapters, DateField, DividerComponent, DropdownField, EmailField, EmailProvider, EmailProvidersAdapter, EmailServiceAdapter, EmailServiceSendParams, EmailTemplate, EmailTemplateName, EmailTemplatesAdapter, EmailVerificationRules, EmailVerifyAction, Ending, FieldComponent, FileField, Flow, FlowActionStep, FlowActionType, FlowInsert, FlowNode, FlowsAdapter, FieldComponent$1 as FlowsFieldComponent, FlowNode$1 as FlowsFlowNode, StepNode$1 as FlowsStepNode, Form, FormControl, FormInsert, FormNode, FormNodeComponent, FormsAdapter, GenericComponent, GenericNode, GeoAdapter, GeoInfo, GmapsAddressWidget, Grant, GrantInsert, GrantsAdapter, HandlerConfig, Hook, HookCode, HookCodeAdapter, HookCodeInsert, HookInsert, HookPageId, HookTemplateId, HooksAdapter, HtmlComponent, Identity, ImageComponent, ImportMetadata, Invite, InviteInsert, Invitee, Inviter, InvitesAdapter, JumpButtonComponent, Jwk, Jwks, KeysAdapter, LegalComponent, LegalField, LinkCandidate, ListActionVersionsResponse, ListActionsResponse, ListClientGrantsResponse, ListCodesResponse, ListConnectionsResponse, ListFailedEventsResponse, ListFlowsResponse, ListFormsResponse, ListGrantsResponse, ListHooksResponse, ListInvitesResponse, ListKeysResponse, ListOrganizationsResponse, ListParams, ListProxyRoutesParams, ListProxyRoutesResult, ListRefreshTokenResponse, ListResourceServersResponse, ListRoleUsersResponse, ListRolesResponse, ListRolloutsResult, ListSesssionsResponse, ListTenantOperationEventsResult, ListTenantOperationsParams, ListTenantOperationsResult, ListUserRolesResponse, ListUsersResponse, Log, LogCategory, LogInsert, LogStream, LogStreamInsert, LogStreamsAdapter, LogType, LoginSession, LoginSessionAuthStrategy, LoginSessionInsert, LoginSessionsAdapter, LogsDataAdapter, MigrationProviderType, MigrationSource, MigrationSourceCredentials, MigrationSourceInsert, MigrationSourcesAdapter, NextButtonComponent, Node, NumberField, Organization, OrganizationConnection, OrganizationConnectionInsert, OrganizationConnectionList, OrganizationConnectionsAdapter, OrganizationInsert, OrganizationsAdapter, OutboxAdapter, OutboxEvent, OutboxEventInsert, PassthroughConfig, Password, PasswordField, PasswordInsert, PasswordsAdapter, PaymentField, PostUsersBody, PreviousButtonComponent, PromptScreen, PromptSetting, PromptSettingsAdapter, ProxyRoute, ProxyRouteInsert, ProxyRouteUpdate, ProxyRoutesAdapter, RateLimitAdapter, RateLimitDecision, RateLimitScope, RecaptchaWidget, RedirectAction, RedirectTarget, RefreshToken, RefreshTokenInsert, RefreshTokenListParams, RefreshTokenRetentionCohort, RefreshTokenRetentionParams, RefreshTokenRetentionResponse, RefreshTokensAdapter, RequestContext, ResendButtonComponent, ResourceServer, ResourceServerInsert, ResourceServerList, ResourceServerOptions, ResourceServerScope, ResourceServersAdapter, ResponseContext, RichTextComponent, Role, RoleInsert, RoleList, RolePermission, RolePermissionInsert, RolePermissionList, RolePermissionsAdapter, RolesAdapter, Rollout, RolloutInsert, RolloutKind, RolloutStatus, RolloutUpdate, RolloutsAdapter, RouteMatch, RouterNode, RuntimeComponent, ScimConfiguration, ScimConfigurationInsert, ScimConfigurationsAdapter, ScimExternalId, ScimExternalIdInsert, ScimExternalIdsAdapter, ScimMappingEntry, ScimToken, ScimTokenInsert, ScimTokensAdapter, ScreenLink, SecondaryAdapterConfig, Session, SessionCleanupParams, SessionInsert, SessionRetentionCohort, SessionRetentionParams, SessionRetentionRawRow, SessionRetentionResponse, SessionRetentionWindow, SessionsAdapter, SigningKey, SmsProvider, SmsSendParams, SmsServiceAdapter, SmsServiceSendParams, SocialField, Start, StatsAdapter, StatsListParams, StepNode, SuspiciousIpThrottling, Target, TelField, Tenant, TenantOperation, TenantOperationEngine, TenantOperationEvent, TenantOperationEventInsert, TenantOperationEventOutcome, TenantOperationEventsAdapter, TenantOperationInsert, TenantOperationKind, TenantOperationStatus, TenantOperationUpdate, TenantOperationsAdapter, TenantSettings, TenantSettingsAdapter, TenantsDataAdapter, TextField, Theme, ThemeInsert, ThemesAdapter, TokenResponse, Totals, UiScreen, UniversalLoginTemplate, UniversalLoginTemplatesAdapter, UpdateRefreshTokenOptions, UrlField, User, UserActivity, UserActivityAdapter, UserActivityUpdate, UserDataAdapter, UserInsert, UserOrganization, UserOrganizationInsert, UserOrganizationsAdapter, UserPermission, UserPermissionInsert, UserPermissionList, UserPermissionWithDetails, UserPermissionWithDetailsList, UserPermissionsAdapter, UserResponse, UserRole, UserRoleInsert, UserRoleList, UserRolesAdapter, UsernameLengthBounds, VerifiableCredentialsWidget, VerificationMethods, WidgetComponent, WriteOptions };
+export { Auth0ActionEnum, Auth0Client, AuthorizationResponseMode, AuthorizationResponseType, CodeChallengeMethod, ComponentCategory, ComponentType, DATABASE_CONNECTION_STRATEGY, EmailActionEnum, FORM_FIELD_TYPES, FlowActionTypeEnum, GrantType, LocationInfo, LogTypes, LoginSessionState, MONDAY_EPOCH_SHIFT_MS, NodeType, RedirectTargetEnum, Strategy, StrategyType, TRIGGER_API_SHAPES, USERNAME_CONTAINS_AT_MESSAGE, USERNAME_INVALID_CHARACTERS_MESSAGE, WEEK_MS, actionDependencySchema, actionExecutionErrorSchema, actionExecutionInsertSchema, actionExecutionLogEntrySchema, actionExecutionLogsSchema, actionExecutionResultSchema, actionExecutionSchema, actionExecutionStatusSchema, actionExecutionTriggerIdSchema, actionInsertSchema, actionNodeSchema, actionSchema, actionSecretSchema, actionTriggerSchema, actionUpdateSchema, actionVersionInsertSchema, actionVersionSchema, activeUsersResponseSchema, actorSchema, addressSchema, allowedTriggersForHook, analyticsColumnMetaSchema, analyticsGroupBySchema, analyticsIntervalSchema, analyticsQueryResponseSchema, analyticsResourceSchema, analyticsStatisticsSchema, analyticsUserTypeSchema, attackProtectionSchema, auditCategorySchema, auditEventInsertSchema, auditEventSchema, auth0ClientSchema, auth0FlowInsertSchema, auth0FlowSchema, auth0QuerySchema, auth0UpdateUserActionSchema, auth0UserResponseSchema, authParamsSchema, authenticationMethodInsertSchema, authenticationMethodSchema, authenticationMethodTypeSchema, baseUserSchema, blockComponentSchema, bordersSchema, brandingSchema, breachedPasswordDetectionSchema, bruteForceProtectionSchema, buildRefreshTokenRetention, buildSessionRetention, buttonComponentSchema, claimsRequestSchema, clientGrantInsertSchema, clientGrantListSchema, clientGrantSchema, clientInsertSchema, clientRegistrationTokenInsertSchema, clientRegistrationTokenSchema, clientRegistrationTokenTypeSchema, clientSchema, codeInsertSchema, codeSchema, codeTypeSchema, colorsSchema, componentMessageSchema, componentSchema, connectionInsertSchema, connectionOptionsSchema, connectionSchema, coordinatesSchema, createPassthroughAdapter, createWriteOnlyAdapter, customDomainCertificateUploadSchema, customDomainInsertSchema, customDomainSchema, customDomainUpdateSchema, customDomainWithTenantIdSchema, customTextEntrySchema, customTextSchema, dailyStatsSchema, decodeBase32, decodeBase64, decodeBase64Url, decodeBase64UrlString, decodeCursor, emailProviderSchema, emailTemplateNameSchema, emailTemplateSchema, emailVerificationRulesSchema, emailVerifyActionSchema, encodeBase32, encodeBase64, encodeBase64Url, encodeBase64UrlString, encodeCursor, encodeHex, endingSchema, escapeLuceneValue, fieldComponentSchema, flowActionStepSchema, flowInsertSchema, flowSchema, fieldComponentSchema$1 as flowsFieldComponentSchema, flowNodeSchema$1 as flowsFlowNodeSchema, stepNodeSchema$1 as flowsStepNodeSchema, fontDetailsSchema, fontsSchema, formControlSchema, formInsertSchema, formNodeComponentDefinition, formNodeSchema, formSchema, genericComponentSchema, genericNodeSchema, getConnectionIdentifierConfig, getLogTypeCategory, getLogTypeDescription, grantInsertSchema, grantSchema, handlerConfigSchema, hookCodeInsertSchema, hookCodeSchema, hookInsertSchema, hookPageId, hookSchema, hookTemplateId, hookTemplates, identitySchema, importMetadataSchema, inviteInsertSchema, inviteSchema, inviteeSchema, inviterSchema, isBlockComponent, isDatabaseConnectionStrategy, isEmailSearchTerm, isFieldComponent, isPlainObject, isWidgetComponent, jwksKeySchema, jwksSchema, legalComponentSchema, locationInfoSchema, logInsertSchema, logSchema, logStreamFilterSchema, logStreamInsertSchema, logStreamSchema, logStreamStatusSchema, logStreamTypeSchema, logTypeCategories, logTypeDescriptions, loginSessionAuthStrategySchema, loginSessionInsertSchema, loginSessionSchema, loginSessionStateSchema, matchSchema, migrationProviderTypeSchema, migrationSourceCredentialsSchema, migrationSourceInsertSchema, migrationSourceSchema, nodeSchema, normalizeUsername, openIDConfigurationSchema, organizationBrandingSchema, organizationConnectionInsertSchema, organizationConnectionListSchema, organizationConnectionSchema, organizationEnabledConnectionSchema, organizationInsertSchema, organizationSchema, organizationTokenQuotaSchema, pageBackgroundSchema, parseUserId, passwordInsertSchema, passwordSchema, profileDataSchema, promptScreenSchema, promptSettingSchema, proxyRouteInsertSchema, proxyRouteSchema, proxyRouteUpdateSchema, redirectActionSchema, refreshTokenInsertSchema, refreshTokenRetentionCohortSchema, refreshTokenRetentionResponseSchema, refreshTokenSchema, requestContextSchema, resourceServerInsertSchema, resourceServerListSchema, resourceServerOptionsSchema, resourceServerSchema, resourceServerScopeSchema, responseContextSchema, richTextComponentSchema, roleInsertSchema, roleListSchema, rolePermissionInsertSchema, rolePermissionListSchema, rolePermissionSchema, roleSchema, rolloutInsertSchema, rolloutKindSchema, rolloutSchema, rolloutStatusSchema, rolloutUpdateSchema, sanitizeLuceneQuery, scimConfigurationInsertSchema, scimConfigurationSchema, scimExternalIdInsertSchema, scimExternalIdSchema, scimMappingEntrySchema, scimTokenInsertSchema, scimTokenSchema, screenLinkSchema, sessionInsertSchema, sessionRetentionCohortSchema, sessionRetentionResponseSchema, sessionRetentionWindow, sessionSchema, signingKeySchema, smsProviderSchema, smsSendParamsSchema, splitLuceneOrGroups, startSchema, suspiciousIpThrottlingSchema, targetSchema, tenantInsertSchema, tenantOperationEngineSchema, tenantOperationEventInsertSchema, tenantOperationEventOutcomeSchema, tenantOperationEventSchema, tenantOperationInsertSchema, tenantOperationKindSchema, tenantOperationSchema, tenantOperationStatusSchema, tenantOperationUpdateSchema, tenantSchema, tenantSettingsSchema, themeInsertSchema, themeSchema, tokenResponseSchema, tokenizeLuceneQuery, totalsSchema, uiScreenSchema, unescapeLuceneValue, unquoteLuceneValue, userActivitySchema, userInsertSchema, userOrganizationInsertSchema, userOrganizationSchema, userPermissionInsertSchema, userPermissionListSchema, userPermissionSchema, userPermissionWithDetailsListSchema, userPermissionWithDetailsSchema, userResponseSchema, userRoleInsertSchema, userRoleListSchema, userRoleSchema, userSchema, usernameHasOnlyAllowedCharacters, validateUsername, verificationMethodsSchema, weekIndex, weekStartMs, widgetComponentSchema, widgetSchema };
+export type { Action, ActionExecution, ActionExecutionError, ActionExecutionInsert, ActionExecutionLogEntry, ActionExecutionLogs, ActionExecutionResult, ActionExecutionStatus, ActionExecutionsAdapter, ActionInsert, ActionNode, ActionUpdate, ActionVersion, ActionVersionInsert, ActionVersionsAdapter, ActionsAdapter, ActiveUsersResponse, Actor, Address, AnalyticsAdapter, AnalyticsColumnMeta, AnalyticsFilters, AnalyticsGroupBy, AnalyticsInterval, AnalyticsQueryParams, AnalyticsQueryResponse, AnalyticsResource, AnalyticsUserType, AttackProtection, AuditCategory, AuditEvent, AuditEventInsert, Auth0Flow, Auth0FlowInsert, Auth0UpdateUserAction, AuthParams, AuthenticationMethod, AuthenticationMethodInsert, AuthenticationMethodType, AuthenticationMethodUpdate, AuthenticationMethodsAdapter, BaseUser, BlockComponent, BooleanField, Branding, BrandingAdapter, BreachedPasswordDetection, BruteForceProtection, ButtonComponent, CacheAdapter, CacheItem, CardsField, ChoiceField, ClaimsRequest, Client, ClientConnectionsAdapter, ClientGrant, ClientGrantInsert, ClientGrantList, ClientGrantsAdapter, ClientInsert, ClientRegistrationToken, ClientRegistrationTokenInsert, ClientRegistrationTokenType, ClientRegistrationTokensAdapter, ClientWithTenantId, ClientsAdapter, Code, CodeExecutionLog, CodeExecutionResult, CodeExecutor, CodeField, CodeInsert, CodeResponse, CodeType, CodesAdapter, Component, ComponentMessage, Connection, ConnectionInsert, ConnectionsAdapter, ContinuationScope, Coordinates, CountryField, CreateOptions, CreateServiceTokenFn, CreateServiceTokenParams, CreateTenantParams, CursorPayload, CustomDomain, CustomDomainCertificateUpload, CustomDomainInsert, CustomDomainUpdate, CustomDomainWithTenantId, CustomDomainsAdapter, CustomField, CustomText, CustomTextAdapter, CustomTextEntry, DailyStats, DataAdapters, DateField, DividerComponent, DropdownField, EmailField, EmailProvider, EmailProvidersAdapter, EmailServiceAdapter, EmailServiceSendParams, EmailTemplate, EmailTemplateName, EmailTemplatesAdapter, EmailVerificationRules, EmailVerifyAction, Ending, FieldComponent, FileField, Flow, FlowActionStep, FlowActionType, FlowInsert, FlowNode, FlowsAdapter, FieldComponent$1 as FlowsFieldComponent, FlowNode$1 as FlowsFlowNode, StepNode$1 as FlowsStepNode, Form, FormControl, FormInsert, FormNode, FormNodeComponent, FormsAdapter, GenericComponent, GenericNode, GeoAdapter, GeoInfo, GmapsAddressWidget, Grant, GrantInsert, GrantsAdapter, HandlerConfig, Hook, HookCode, HookCodeAdapter, HookCodeInsert, HookInsert, HookPageId, HookTemplateId, HooksAdapter, HtmlComponent, Identity, ImageComponent, ImportMetadata, Invite, InviteInsert, Invitee, Inviter, InvitesAdapter, JumpButtonComponent, Jwk, Jwks, KeysAdapter, LegalComponent, LegalField, LinkCandidate, ListActionVersionsResponse, ListActionsResponse, ListClientGrantsResponse, ListCodesResponse, ListConnectionsResponse, ListFailedEventsResponse, ListFlowsResponse, ListFormsResponse, ListGrantsResponse, ListHooksResponse, ListInvitesResponse, ListKeysResponse, ListOrganizationsResponse, ListParams, ListProxyRoutesParams, ListProxyRoutesResult, ListRefreshTokenResponse, ListResourceServersResponse, ListRoleUsersResponse, ListRolesResponse, ListRolloutsResult, ListSesssionsResponse, ListTenantOperationEventsResult, ListTenantOperationsParams, ListTenantOperationsResult, ListUserRolesResponse, ListUsersResponse, Log, LogCategory, LogInsert, LogStream, LogStreamInsert, LogStreamsAdapter, LogType, LoginSession, LoginSessionAuthStrategy, LoginSessionInsert, LoginSessionsAdapter, LogsDataAdapter, MigrationProviderType, MigrationSource, MigrationSourceCredentials, MigrationSourceInsert, MigrationSourcesAdapter, NextButtonComponent, Node, NumberField, Organization, OrganizationConnection, OrganizationConnectionInsert, OrganizationConnectionList, OrganizationConnectionsAdapter, OrganizationInsert, OrganizationsAdapter, OutboxAdapter, OutboxEvent, OutboxEventInsert, PassthroughConfig, Password, PasswordField, PasswordInsert, PasswordsAdapter, PaymentField, PostUsersBody, PreviousButtonComponent, PromptScreen, PromptSetting, PromptSettingsAdapter, ProxyRoute, ProxyRouteInsert, ProxyRouteUpdate, ProxyRoutesAdapter, RateLimitAdapter, RateLimitDecision, RateLimitScope, RecaptchaWidget, RedirectAction, RedirectTarget, RefreshToken, RefreshTokenInsert, RefreshTokenListParams, RefreshTokenRetentionCohort, RefreshTokenRetentionParams, RefreshTokenRetentionResponse, RefreshTokenUpdate, RefreshTokensAdapter, RequestContext, ResendButtonComponent, ResourceServer, ResourceServerInsert, ResourceServerList, ResourceServerOptions, ResourceServerScope, ResourceServersAdapter, ResponseContext, RichTextComponent, Role, RoleInsert, RoleList, RolePermission, RolePermissionInsert, RolePermissionList, RolePermissionsAdapter, RolesAdapter, Rollout, RolloutInsert, RolloutKind, RolloutStatus, RolloutUpdate, RolloutsAdapter, RouteMatch, RouterNode, RuntimeComponent, ScimConfiguration, ScimConfigurationInsert, ScimConfigurationsAdapter, ScimExternalId, ScimExternalIdInsert, ScimExternalIdsAdapter, ScimMappingEntry, ScimToken, ScimTokenInsert, ScimTokensAdapter, ScreenLink, SecondaryAdapterConfig, Session, SessionCleanupParams, SessionInsert, SessionRetentionCohort, SessionRetentionParams, SessionRetentionRawRow, SessionRetentionResponse, SessionRetentionWindow, SessionsAdapter, SigningKey, SmsProvider, SmsSendParams, SmsServiceAdapter, SmsServiceSendParams, SocialField, Start, StatsAdapter, StatsListParams, StepNode, SuspiciousIpThrottling, Target, TelField, Tenant, TenantOperation, TenantOperationEngine, TenantOperationEvent, TenantOperationEventInsert, TenantOperationEventOutcome, TenantOperationEventsAdapter, TenantOperationInsert, TenantOperationKind, TenantOperationStatus, TenantOperationUpdate, TenantOperationsAdapter, TenantSettings, TenantSettingsAdapter, TenantsDataAdapter, TextField, Theme, ThemeInsert, ThemesAdapter, TokenResponse, Totals, UiScreen, UniversalLoginTemplate, UniversalLoginTemplatesAdapter, UpdateRefreshTokenOptions, UrlField, User, UserActivity, UserActivityAdapter, UserActivityUpdate, UserDataAdapter, UserInsert, UserOrganization, UserOrganizationInsert, UserOrganizationsAdapter, UserPermission, UserPermissionInsert, UserPermissionList, UserPermissionWithDetails, UserPermissionWithDetailsList, UserPermissionsAdapter, UserResponse, UserRole, UserRoleInsert, UserRoleList, UserRolesAdapter, UsernameLengthBounds, VerifiableCredentialsWidget, VerificationMethods, WidgetComponent, WriteOptions };

package/dist/adapter-interfaces.mjs

@@ -236,7 +236,7 @@ var t = e.object({
 	length: e.number(),
 	total: e.number().optional(),
 	next: e.string().optional()
-}), Oe = e.object({
+}), f = e.object({
 	email: e.string().optional(),
 	email_verified: e.boolean().optional(),
 	name: e.string().optional(),
@@ -245,7 +245,7 @@ var t = e.object({
 	phone_number: e.string().optional(),
 	phone_verified: e.boolean().optional(),
 	family_name: e.string().optional()
-}).catchall(e.any()), f = e.object({
+}).catchall(e.any()), p = e.object({
 	connection: e.string(),
 	user_id: e.string(),
 	provider: e.string(),
@@ -258,15 +258,15 @@ var t = e.object({
 	access_token: e.string().optional(),
 	access_token_secret: e.string().optional(),
 	refresh_token: e.string().optional(),
-	profileData: Oe.optional()
-}), p = e.object({
+	profileData: f.optional()
+}), m = e.object({
 	formatted: e.string().optional(),
 	street_address: e.string().optional(),
 	locality: e.string().optional(),
 	region: e.string().optional(),
 	postal_code: e.string().optional(),
 	country: e.string().optional()
-}).optional(), m = e.object({
+}).optional(), h = e.object({
 	email: e.string().transform((e) => e.toLowerCase()).optional(),
 	username: e.string().refine((e) => !e.includes("@"), { message: "Usernames must not contain \"@\". Use the email field for email addresses." }).optional(),
 	phone_number: e.string().optional(),
@@ -289,8 +289,8 @@ var t = e.object({
 	gender: e.string().optional(),
 	birthdate: e.string().optional(),
 	zoneinfo: e.string().optional(),
-	address: p
-}), h = m.extend({
+	address: m
+}), g = h.extend({
 	email_verified: e.boolean().default(!1),
 	verify_email: e.boolean().optional(),
 	last_ip: e.string().optional(),
@@ -305,29 +305,29 @@ var t = e.object({
 		hash: e.string(),
 		algorithm: e.string()
 	}).optional()
-}), g = h.omit({ password: !0 }).extend(t.shape).extend({
+}), _ = g.omit({ password: !0 }).extend(t.shape).extend({
 	user_id: e.string(),
 	provider: e.string(),
 	is_social: e.boolean(),
 	email: e.string().optional(),
 	login_count: e.number().default(0),
-	identities: e.array(f).optional()
-}), ke = g.omit({ registration_completed_at: !0 }), Ae = m.extend({
+	identities: e.array(p).optional()
+}), Oe = _.omit({ registration_completed_at: !0 }), ke = h.extend({
 	login_count: e.number(),
 	multifactor: e.array(e.string()).optional(),
 	last_ip: e.string().optional(),
 	last_login: e.string().optional(),
 	user_id: e.string()
-}).catchall(e.any()), je = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Me = (e = 21) => {
+}).catchall(e.any()), Ae = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", je = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += je[n[e] & 63];
+	for (; e--;) t += Ae[n[e] & 63];
 	return t;
-}, _ = e.object({
+}, v = e.object({
 	client_id: e.string().optional().openapi({ description: "ID of this client. Generated server-side if omitted (Auth0 behavior)." }),
 	name: e.string().min(1).openapi({ description: "Name of this client (min length: 1 character, does not allow < or >)." }),
 	description: e.string().max(140).optional().openapi({ description: "Free text description of this client (max length: 140 characters)." }),
 	global: e.boolean().default(!1).openapi({ description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)." }),
-	client_secret: e.string().default(() => Me()).optional().openapi({ description: "Client secret (which you must not make public)." }),
+	client_secret: e.string().default(() => je()).optional().openapi({ description: "Client secret (which you must not make public)." }),
 	app_type: e.enum([
 		"native",
 		"spa",
@@ -402,11 +402,11 @@ var t = e.object({
 	refresh_token: e.object({
 		rotation_type: e.enum(["rotating", "non-rotating"]).optional().openapi({ description: "Whether refresh tokens for this client are rotated on every exchange (Auth0 'rotating' behavior) or kept stable (legacy non-rotating). Defaults to 'non-rotating' when unset." }),
 		leeway: e.number().int().min(0).max(600).optional().openapi({ description: "Seconds after a parent token's first rotation during which presenting it again still mints a fresh sibling child instead of triggering reuse-detection. Defaults to 30s when unset." }),
-		expiration_type: e.enum(["expiring", "non-expiring"]).optional().openapi({ description: "Auth0-compatible: whether refresh tokens expire." }),
-		token_lifetime: e.number().int().min(0).optional().openapi({ description: "Auth0-compatible: refresh-token absolute lifetime in seconds." }),
-		infinite_token_lifetime: e.boolean().optional().openapi({ description: "Auth0-compatible: when true, refresh tokens have no absolute expiry." }),
-		idle_token_lifetime: e.number().int().min(0).optional().openapi({ description: "Auth0-compatible: refresh-token idle (sliding) lifetime in seconds." }),
-		infinite_idle_token_lifetime: e.boolean().optional().openapi({ description: "Auth0-compatible: when true, refresh tokens have no idle expiry." })
+		expiration_type: e.enum(["expiring", "non-expiring"]).optional().openapi({ description: "Whether refresh tokens for this client expire at all. 'non-expiring' overrides both the absolute and the idle lifetime." }),
+		token_lifetime: e.number().int().min(0).optional().openapi({ description: "Refresh-token absolute lifetime in seconds. Falls back to the tenant's `session_lifetime` when unset." }),
+		infinite_token_lifetime: e.boolean().optional().openapi({ description: "When true, refresh tokens have no absolute expiry (overrides `token_lifetime`)." }),
+		idle_token_lifetime: e.number().int().min(0).optional().openapi({ description: "Refresh-token idle (sliding) lifetime in seconds, refreshed on every exchange. Falls back to the tenant's `idle_session_lifetime` when unset." }),
+		infinite_idle_token_lifetime: e.boolean().optional().openapi({ description: "When true, refresh tokens have no idle expiry (overrides `idle_token_lifetime`)." })
 	}).default({}).optional().openapi({ description: "Refresh token configuration" }),
 	default_organization: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Defines the default Organization ID and flows" }),
 	organization_usage: e.enum([
@@ -440,10 +440,10 @@ var t = e.object({
 	]).optional().openapi({ description: "Provenance of this client. `manual` = Management API; `open_dcr` = RFC 7591 without IAT; `iat_dcr` = RFC 7591 with an Initial Access Token." }),
 	registration_metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Arbitrary metadata captured at Dynamic Client Registration time that isn't a first-class client field (e.g. integration_type, domain). Also stores `iat_constraints` for clients created via IAT so RFC 7592 PUT can enforce field immutability." }),
 	user_linking_mode: e.enum(["builtin", "off"]).optional().openapi({ description: "Per-client override for the built-in email-based user-linking path. `builtin` runs the legacy in-process linking at user creation/email update. `off` disables the legacy path; linking only happens if the tenant has enabled the `account-linking` template hook. When unset, the service-level `userLinkingMode` default applies." })
-}), Ne = e.object({
+}), Me = e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(_.shape).extend({ client_id: e.string() }), v = e.object({
+}).extend(v.shape).extend({ client_id: e.string() }), y = e.object({
 	client_id: e.string().min(1).openapi({ description: "ID of the client." }),
 	audience: e.string().min(1).openapi({ description: "The audience (API identifier) of this client grant." }),
 	scope: e.array(e.string()).optional().openapi({ description: "Scopes allowed for this client grant." }),
@@ -456,33 +456,33 @@ var t = e.object({
 	is_system: e.boolean().optional().openapi({ description: "If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly." }),
 	subject_type: e.enum(["client", "user"]).optional().openapi({ description: "The type of application access the client grant allows. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." }),
 	authorization_details_types: e.array(e.string()).optional().openapi({ description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." })
-}), y = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(v.shape).extend({
+}), b = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(y.shape).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
-}), Pe = e.array(y), b = e.enum(["iat", "rat"]), x = e.object({
+}), Ne = e.array(b), x = e.enum(["iat", "rat"]), S = e.object({
 	id: e.string(),
 	token_hash: e.string(),
-	type: b,
+	type: x,
 	client_id: e.string().optional(),
 	sub: e.string().optional(),
 	constraints: e.record(e.string(), e.unknown()).optional(),
 	single_use: e.boolean().default(!1),
 	expires_at: e.string().optional()
-}), Fe = e.object({
+}), Pe = e.object({
 	created_at: e.string(),
 	used_at: e.string().optional(),
 	revoked_at: e.string().optional()
-}).extend(x.shape), S = e.object({
+}).extend(S.shape), C = e.object({
 	x: e.number(),
 	y: e.number()
-}), C = /* @__PURE__ */ function(e) {
+}), Fe = /* @__PURE__ */ function(e) {
 	return e.RICH_TEXT = "RICH_TEXT", e.NEXT_BUTTON = "NEXT_BUTTON", e.BACK_BUTTON = "BACK_BUTTON", e.SUBMIT_BUTTON = "SUBMIT_BUTTON", e.DIVIDER = "DIVIDER", e.TEXT = "TEXT", e.EMAIL = "EMAIL", e.PASSWORD = "PASSWORD", e.NUMBER = "NUMBER", e.PHONE = "PHONE", e.DATE = "DATE", e.CHECKBOX = "CHECKBOX", e.RADIO = "RADIO", e.SELECT = "SELECT", e.HIDDEN = "HIDDEN", e.LEGAL = "LEGAL", e;
 }({}), w = /* @__PURE__ */ function(e) {
 	return e.BLOCK = "BLOCK", e.FIELD = "FIELD", e;
 }({}), T = e.object({
 	id: e.string(),
 	category: e.nativeEnum(w),
-	type: e.nativeEnum(C)
+	type: e.nativeEnum(Fe)
 }), E = T.extend({
 	category: e.literal("BLOCK"),
 	type: e.literal("RICH_TEXT"),
@@ -536,7 +536,7 @@ var t = e.object({
 }({}), He = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: S,
+	coordinates: C,
 	alias: e.string().optional(),
 	config: e.object({
 		components: e.array(Be),
@@ -545,7 +545,7 @@ var t = e.object({
 }), Ue = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: S,
+	coordinates: C,
 	alias: e.string().optional(),
 	config: e.object({
 		flow_id: e.string(),
@@ -554,7 +554,7 @@ var t = e.object({
 }), We = e.object({
 	id: e.string(),
 	type: e.literal("ACTION"),
-	coordinates: S,
+	coordinates: C,
 	alias: e.string().optional(),
 	config: e.object({
 		action_type: e.enum(["REDIRECT"]).openapi({ description: "The type of action to perform" }),
@@ -569,7 +569,7 @@ var t = e.object({
 }), Ge = e.object({
 	id: e.string(),
 	type: e.string(),
-	coordinates: S
+	coordinates: C
 }).passthrough(), Ke = e.union([
 	He,
 	Ue,
@@ -577,10 +577,10 @@ var t = e.object({
 	Ge
 ]), qe = e.object({
 	next_node: e.string(),
-	coordinates: S
+	coordinates: C
 }).passthrough(), Je = e.object({
 	resume_flow: e.boolean().optional(),
-	coordinates: S
+	coordinates: C
 }).passthrough(), Ye = e.object({
 	id: e.string(),
 	name: e.string(),
@@ -3007,45 +3007,61 @@ function va(e) {
 }
 //#endregion
 //#region src/utils/lucene.ts
-function ya(e, t) {
-	let n = new Set(t), r = (e) => {
-		let t = [], r = "", i = !1;
-		for (let n = 0; n < e.length; n++) {
-			let a = e[n];
-			a === "\"" ? (i = !i, r += a) : a === " " && !i ? (r.trim() && t.push(r.trim()), r = "") : r += a;
-		}
-		return r.trim() && t.push(r.trim()), t.filter((e) => {
-			let t = e.replace(/^([^:]+)=/, "$1:"), r = t.startsWith("-") ? t.slice(1) : t;
-			if (r.startsWith("_exists_:")) return n.has(r.slice(9));
-			let i = r.indexOf(":");
-			return i > 0 ? n.has(r.slice(0, i)) : !0;
-		}).join(" ");
-	}, i = e.split(/ OR /i);
-	return i.length > 1 ? i.map(r).filter((e) => e.length > 0).join(" OR ") : r(e);
+function ya(e) {
+	let t = [], n = "", r = !1;
+	for (let i = 0; i < e.length; i++) {
+		let a = e[i];
+		a === "\\" && i + 1 < e.length ? (n += a + e[i + 1], i++) : a === "\"" ? (r = !r, n += a) : a === " " && !r ? (n.trim() && t.push(n.trim()), n = "") : n += a;
+	}
+	return n.trim() && t.push(n.trim()), t;
+}
+function ba(e) {
+	return e.replace(/\\([\\"+\-!(){}[\]^~*?:/&|])/g, "$1");
 }
-var ba = /^[^\s@%_*?"'()[\]{}^~:\\/]+@[^\s@%_*?"'()[\]{}^~:\\/]+\.[^\s@%_*?"'()[\]{}^~:\\/]+$/;
 function xa(e) {
-	return ba.test(e);
+	return `"${e.replace(/([\\"])/g, "\\$1")}"`;
+}
+function Sa(e) {
+	let t = e.trim();
+	return ba(t.length > 1 && t.startsWith("\"") && t.endsWith("\"") ? t.slice(1, -1) : t);
+}
+function Ca(e) {
+	let t = [], n = [];
+	for (let r of ya(e)) /^or$/i.test(r) ? (t.push(n), n = []) : n.push(r);
+	return t.push(n), t.filter((e) => e.length > 0);
+}
+function wa(e, t) {
+	let n = new Set(t), r = (e) => {
+		let t = e.replace(/^([^:]+)=/, "$1:"), r = t.startsWith("-") ? t.slice(1) : t;
+		if (r.startsWith("_exists_:")) return n.has(r.slice(9));
+		let i = r.indexOf(":");
+		return i > 0 ? n.has(r.slice(0, i)) : !0;
+	};
+	return Ca(e).map((e) => e.filter(r).join(" ")).filter((e) => e.length > 0).join(" OR ");
+}
+var Ta = /^[^\s@%_*?"'()[\]{}^~:\\/]+@[^\s@%_*?"'()[\]{}^~:\\/]+\.[^\s@%_*?"'()[\]{}^~:\\/]+$/;
+function Ea(e) {
+	return Ta.test(e);
 }
 //#endregion
 //#region src/utils/session-retention.ts
 var Z = 10080 * 60 * 1e3, Q = 4320 * 60 * 1e3;
-function Sa(e) {
+function Da(e) {
 	return Math.floor((e + Q) / Z);
 }
 function $(e) {
 	return e * Z - Q;
 }
-function Ca(e, t = Date.now()) {
-	let n = Sa(t), r = n - e + 1;
+function Oa(e, t = Date.now()) {
+	let n = Da(t), r = n - e + 1;
 	return {
 		currentWeek: n,
 		firstWeek: r,
 		sinceMs: $(r)
 	};
 }
-function wa(e, t, n = Date.now()) {
-	let { currentWeek: r, firstWeek: i, sinceMs: a } = Ca(t, n), o = /* @__PURE__ */ new Map();
+function ka(e, t, n = Date.now()) {
+	let { currentWeek: r, firstWeek: i, sinceMs: a } = Oa(t, n), o = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		if (t.created_week < i || t.created_week > r) continue;
 		let e = Math.min(Math.max(0, t.used_week - t.created_week), r - t.created_week), n = o.get(t.created_week);
@@ -3068,8 +3084,8 @@ function wa(e, t, n = Date.now()) {
 		cohorts: s
 	};
 }
-function Ta(e, t, n = Date.now()) {
-	let r = wa(e, t, n);
+function Aa(e, t, n = Date.now()) {
+	let r = ka(e, t, n);
 	return {
 		interval: r.interval,
 		from: r.from,
@@ -3083,16 +3099,16 @@ function Ta(e, t, n = Date.now()) {
 }
 //#endregion
 //#region src/utils/username-validation.ts
-var Ea = /^[A-Za-z0-9_+\-.!#$'^`~]+$/, Da = "Username can only contain alphanumeric characters and the following characters: '_', '+', '-', '.', '!', '#', '$', \"'\", '^', '`', '~'", Oa = "Usernames must not contain \"@\". Use the email field for email addresses.";
-function ka(e) {
-	return Ea.test(e);
+var ja = /^[A-Za-z0-9_+\-.!#$'^`~]+$/, Ma = "Username can only contain alphanumeric characters and the following characters: '_', '+', '-', '.', '!', '#', '$', \"'\", '^', '`', '~'", Na = "Usernames must not contain \"@\". Use the email field for email addresses.";
+function Pa(e) {
+	return ja.test(e);
 }
-function Aa(e) {
+function Fa(e) {
 	return e.toLowerCase();
 }
-function ja(e, t) {
-	if (e.includes("@")) return Oa;
-	if (!ka(e)) return Da;
+function Ia(e, t) {
+	if (e.includes("@")) return Na;
+	if (!Pa(e)) return Ma;
 	if (t) {
 		let n = [...e].length;
 		if (n < t.min) return `Username must be at least ${t.min} characters`;
@@ -3101,4 +3117,4 @@ function ja(e, t) {
 	return null;
 }
 //#endregion
-export { _e as Auth0ActionEnum, zn as Auth0Client, O as AuthorizationResponseMode, D as AuthorizationResponseType, Ze as CodeChallengeMethod, w as ComponentCategory, C as ComponentType, Ji as DATABASE_CONNECTION_STRATEGY, ve as EmailActionEnum, Gt as FORM_FIELD_TYPES, ge as FlowActionTypeEnum, Cr as GrantType, Bn as LocationInfo, K as LogTypes, An as LoginSessionState, Q as MONDAY_EPOCH_SHIFT_MS, Ve as NodeType, Se as RedirectTargetEnum, Ki as Strategy, qi as StrategyType, na as TRIGGER_API_SHAPES, Oa as USERNAME_CONTAINS_AT_MESSAGE, Da as USERNAME_INVALID_CHARACTERS_MESSAGE, Z as WEEK_MS, r as actionDependencySchema, l as actionExecutionErrorSchema, ie as actionExecutionInsertSchema, te as actionExecutionLogEntrySchema, ne as actionExecutionLogsSchema, u as actionExecutionResultSchema, re as actionExecutionSchema, c as actionExecutionStatusSchema, ee as actionExecutionTriggerIdSchema, a as actionInsertSchema, We as actionNodeSchema, s as actionSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, ae as actionVersionInsertSchema, oe as actionVersionSchema, ji as activeUsersResponseSchema, ce as actorSchema, p as addressSchema, sn as allowedTriggersForHook, Bi as analyticsColumnMetaSchema, Pi as analyticsGroupBySchema, Ni as analyticsIntervalSchema, Hi as analyticsQueryResponseSchema, Mi as analyticsResourceSchema, Vi as analyticsStatisticsSchema, Fi as analyticsUserTypeSchema, er as attackProtectionSchema, se as auditCategorySchema, me as auditEventInsertSchema, he as auditEventSchema, pe as auth0ClientSchema, Xe as auth0FlowInsertSchema, Ye as auth0FlowSchema, Ee as auth0QuerySchema, be as auth0UpdateUserActionSchema, ke as auth0UserResponseSchema, et as authParamsSchema, $i as authenticationMethodInsertSchema, ea as authenticationMethodSchema, Xi as authenticationMethodTypeSchema, m as baseUserSchema, Ht as blockComponentSchema, Tr as bordersSchema, tt as brandingSchema, Zn as breachedPasswordDetectionSchema, Qn as bruteForceProtectionSchema, Ta as buildRefreshTokenRetention, wa as buildSessionRetention, Ie as buttonComponentSchema, $e as claimsRequestSchema, v as clientGrantInsertSchema, Pe as clientGrantListSchema, y as clientGrantSchema, _ as clientInsertSchema, x as clientRegistrationTokenInsertSchema, Fe as clientRegistrationTokenSchema, b as clientRegistrationTokenTypeSchema, Ne as clientSchema, rt as codeInsertSchema, it as codeSchema, nt as codeTypeSchema, Er as colorsSchema, $t as componentMessageSchema, Be as componentSchema, ot as connectionInsertSchema, at as connectionOptionsSchema, st as connectionSchema, S as coordinatesSchema, ia as createPassthroughAdapter, aa as createWriteOnlyAdapter, ft as customDomainCertificateUploadSchema, A as customDomainInsertSchema, lt as customDomainSchema, ut as customDomainUpdateSchema, dt as customDomainWithTenantIdSchema, Gi as customTextEntrySchema, Wi as customTextSchema, Ai as dailyStatsSchema, ha as decodeBase32, pa as decodeBase64, la as decodeBase64Url, da as decodeBase64UrlString, va as decodeCursor, Wr as emailProviderSchema, Gr as emailTemplateNameSchema, Kr as emailTemplateSchema, ye as emailVerificationRulesSchema, xe as emailVerifyActionSchema, ma as encodeBase32, fa as encodeBase64, ca as encodeBase64Url, ua as encodeBase64UrlString, _a as encodeCursor, ga as encodeHex, Je as endingSchema, Wt as fieldComponentSchema, d as flowActionStepSchema, we as flowInsertSchema, Te as flowSchema, Re as flowsFieldComponentSchema, Ue as flowsFlowNodeSchema, He as flowsStepNodeSchema, J as fontDetailsSchema, Dr as fontsSchema, Kt as formControlSchema, Zt as formInsertSchema, F as formNodeComponentDefinition, Xt as formNodeSchema, Qt as formSchema, ze as genericComponentSchema, Ge as genericNodeSchema, oa as getConnectionIdentifierConfig, Rn as getLogTypeCategory, Ln as getLogTypeDescription, ai as grantInsertSchema, oi as grantSchema, Pr as handlerConfigSchema, xn as hookCodeInsertSchema, Sn as hookCodeSchema, mn as hookInsertSchema, H as hookPageId, bn as hookSchema, U as hookTemplateId, cn as hookTemplates, f as identitySchema, ta as importMetadataSchema, Tn as inviteInsertSchema, En as inviteSchema, wn as inviteeSchema, Cn as inviterSchema, nn as isBlockComponent, Yi as isDatabaseConnectionStrategy, xa as isEmailSearchTerm, an as isFieldComponent, sa as isPlainObject, rn as isWidgetComponent, On as jwksKeySchema, Dn as jwksSchema, Le as legalComponentSchema, fe as locationInfoSchema, Vn as logInsertSchema, Hn as logSchema, Wn as logStreamFilterSchema, Gn as logStreamInsertSchema, Kn as logStreamSchema, q as logStreamStatusSchema, Un as logStreamTypeSchema, In as logTypeCategories, Fn as logTypeDescriptions, G as loginSessionAuthStrategySchema, Mn as loginSessionInsertSchema, Nn as loginSessionSchema, jn as loginSessionStateSchema, Nr as matchSchema, qn as migrationProviderTypeSchema, Jn as migrationSourceCredentialsSchema, Yn as migrationSourceInsertSchema, Xn as migrationSourceSchema, Ke as nodeSchema, Aa as normalizeUsername, kn as openIDConfigurationSchema, yi as organizationBrandingSchema, wi as organizationConnectionInsertSchema, Ei as organizationConnectionListSchema, Ti as organizationConnectionSchema, bi as organizationEnabledConnectionSchema, Si as organizationInsertSchema, Ci as organizationSchema, xi as organizationTokenQuotaSchema, Or as pageBackgroundSchema, ra as parseUserId, tr as passwordInsertSchema, nr as passwordSchema, Oe as profileDataSchema, Ui as promptScreenSchema, Mr as promptSettingSchema, Y as proxyRouteInsertSchema, Fr as proxyRouteSchema, Ir as proxyRouteUpdateSchema, Ce as redirectActionSchema, qr as refreshTokenInsertSchema, Ri as refreshTokenRetentionCohortSchema, zi as refreshTokenRetentionResponseSchema, Jr as refreshTokenSchema, ue as requestContextSchema, $r as resourceServerInsertSchema, ti as resourceServerListSchema, Qr as resourceServerOptionsSchema, ei as resourceServerSchema, Zr as resourceServerScopeSchema, de as responseContextSchema, E as richTextComponentSchema, gi as roleInsertSchema, vi as roleListSchema, ni as rolePermissionInsertSchema, ii as rolePermissionListSchema, ri as rolePermissionSchema, _i as roleSchema, br as rolloutInsertSchema, vr as rolloutKindSchema, xr as rolloutSchema, yr as rolloutStatusSchema, Sr as rolloutUpdateSchema, ya as sanitizeLuceneQuery, Rr as scimConfigurationInsertSchema, zr as scimConfigurationSchema, Hr as scimExternalIdInsertSchema, Ur as scimExternalIdSchema, Lr as scimMappingEntrySchema, Br as scimTokenInsertSchema, Vr as scimTokenSchema, en as screenLinkSchema, ir as sessionInsertSchema, Ii as sessionRetentionCohortSchema, Li as sessionRetentionResponseSchema, Ca as sessionRetentionWindow, ar as sessionSchema, or as signingKeySchema, Xr as smsProviderSchema, Yr as smsSendParamsSchema, qe as startSchema, $n as suspiciousIpThrottlingSchema, le as targetSchema, sr as tenantInsertSchema, dr as tenantOperationEngineSchema, gr as tenantOperationEventInsertSchema, hr as tenantOperationEventOutcomeSchema, _r as tenantOperationEventSchema, fr as tenantOperationInsertSchema, lr as tenantOperationKindSchema, pr as tenantOperationSchema, ur as tenantOperationStatusSchema, mr as tenantOperationUpdateSchema, cr as tenantSchema, ki as tenantSettingsSchema, Ar as themeInsertSchema, jr as themeSchema, wr as tokenResponseSchema, De as totalsSchema, tn as uiScreenSchema, si as userActivitySchema, h as userInsertSchema, Di as userOrganizationInsertSchema, Oi as userOrganizationSchema, ci as userPermissionInsertSchema, ui as userPermissionListSchema, li as userPermissionSchema, fi as userPermissionWithDetailsListSchema, di as userPermissionWithDetailsSchema, Ae as userResponseSchema, pi as userRoleInsertSchema, hi as userRoleListSchema, mi as userRoleSchema, g as userSchema, ka as usernameHasOnlyAllowedCharacters, ja as validateUsername, ct as verificationMethodsSchema, Sa as weekIndex, $ as weekStartMs, Ut as widgetComponentSchema, kr as widgetSchema };
+export { _e as Auth0ActionEnum, zn as Auth0Client, O as AuthorizationResponseMode, D as AuthorizationResponseType, Ze as CodeChallengeMethod, w as ComponentCategory, Fe as ComponentType, Ji as DATABASE_CONNECTION_STRATEGY, ve as EmailActionEnum, Gt as FORM_FIELD_TYPES, ge as FlowActionTypeEnum, Cr as GrantType, Bn as LocationInfo, K as LogTypes, An as LoginSessionState, Q as MONDAY_EPOCH_SHIFT_MS, Ve as NodeType, Se as RedirectTargetEnum, Ki as Strategy, qi as StrategyType, na as TRIGGER_API_SHAPES, Na as USERNAME_CONTAINS_AT_MESSAGE, Ma as USERNAME_INVALID_CHARACTERS_MESSAGE, Z as WEEK_MS, r as actionDependencySchema, l as actionExecutionErrorSchema, ie as actionExecutionInsertSchema, te as actionExecutionLogEntrySchema, ne as actionExecutionLogsSchema, u as actionExecutionResultSchema, re as actionExecutionSchema, c as actionExecutionStatusSchema, ee as actionExecutionTriggerIdSchema, a as actionInsertSchema, We as actionNodeSchema, s as actionSchema, i as actionSecretSchema, n as actionTriggerSchema, o as actionUpdateSchema, ae as actionVersionInsertSchema, oe as actionVersionSchema, ji as activeUsersResponseSchema, ce as actorSchema, m as addressSchema, sn as allowedTriggersForHook, Bi as analyticsColumnMetaSchema, Pi as analyticsGroupBySchema, Ni as analyticsIntervalSchema, Hi as analyticsQueryResponseSchema, Mi as analyticsResourceSchema, Vi as analyticsStatisticsSchema, Fi as analyticsUserTypeSchema, er as attackProtectionSchema, se as auditCategorySchema, me as auditEventInsertSchema, he as auditEventSchema, pe as auth0ClientSchema, Xe as auth0FlowInsertSchema, Ye as auth0FlowSchema, Ee as auth0QuerySchema, be as auth0UpdateUserActionSchema, Oe as auth0UserResponseSchema, et as authParamsSchema, $i as authenticationMethodInsertSchema, ea as authenticationMethodSchema, Xi as authenticationMethodTypeSchema, h as baseUserSchema, Ht as blockComponentSchema, Tr as bordersSchema, tt as brandingSchema, Zn as breachedPasswordDetectionSchema, Qn as bruteForceProtectionSchema, Aa as buildRefreshTokenRetention, ka as buildSessionRetention, Ie as buttonComponentSchema, $e as claimsRequestSchema, y as clientGrantInsertSchema, Ne as clientGrantListSchema, b as clientGrantSchema, v as clientInsertSchema, S as clientRegistrationTokenInsertSchema, Pe as clientRegistrationTokenSchema, x as clientRegistrationTokenTypeSchema, Me as clientSchema, rt as codeInsertSchema, it as codeSchema, nt as codeTypeSchema, Er as colorsSchema, $t as componentMessageSchema, Be as componentSchema, ot as connectionInsertSchema, at as connectionOptionsSchema, st as connectionSchema, C as coordinatesSchema, ia as createPassthroughAdapter, aa as createWriteOnlyAdapter, ft as customDomainCertificateUploadSchema, A as customDomainInsertSchema, lt as customDomainSchema, ut as customDomainUpdateSchema, dt as customDomainWithTenantIdSchema, Gi as customTextEntrySchema, Wi as customTextSchema, Ai as dailyStatsSchema, ha as decodeBase32, pa as decodeBase64, la as decodeBase64Url, da as decodeBase64UrlString, va as decodeCursor, Wr as emailProviderSchema, Gr as emailTemplateNameSchema, Kr as emailTemplateSchema, ye as emailVerificationRulesSchema, xe as emailVerifyActionSchema, ma as encodeBase32, fa as encodeBase64, ca as encodeBase64Url, ua as encodeBase64UrlString, _a as encodeCursor, ga as encodeHex, Je as endingSchema, xa as escapeLuceneValue, Wt as fieldComponentSchema, d as flowActionStepSchema, we as flowInsertSchema, Te as flowSchema, Re as flowsFieldComponentSchema, Ue as flowsFlowNodeSchema, He as flowsStepNodeSchema, J as fontDetailsSchema, Dr as fontsSchema, Kt as formControlSchema, Zt as formInsertSchema, F as formNodeComponentDefinition, Xt as formNodeSchema, Qt as formSchema, ze as genericComponentSchema, Ge as genericNodeSchema, oa as getConnectionIdentifierConfig, Rn as getLogTypeCategory, Ln as getLogTypeDescription, ai as grantInsertSchema, oi as grantSchema, Pr as handlerConfigSchema, xn as hookCodeInsertSchema, Sn as hookCodeSchema, mn as hookInsertSchema, H as hookPageId, bn as hookSchema, U as hookTemplateId, cn as hookTemplates, p as identitySchema, ta as importMetadataSchema, Tn as inviteInsertSchema, En as inviteSchema, wn as inviteeSchema, Cn as inviterSchema, nn as isBlockComponent, Yi as isDatabaseConnectionStrategy, Ea as isEmailSearchTerm, an as isFieldComponent, sa as isPlainObject, rn as isWidgetComponent, On as jwksKeySchema, Dn as jwksSchema, Le as legalComponentSchema, fe as locationInfoSchema, Vn as logInsertSchema, Hn as logSchema, Wn as logStreamFilterSchema, Gn as logStreamInsertSchema, Kn as logStreamSchema, q as logStreamStatusSchema, Un as logStreamTypeSchema, In as logTypeCategories, Fn as logTypeDescriptions, G as loginSessionAuthStrategySchema, Mn as loginSessionInsertSchema, Nn as loginSessionSchema, jn as loginSessionStateSchema, Nr as matchSchema, qn as migrationProviderTypeSchema, Jn as migrationSourceCredentialsSchema, Yn as migrationSourceInsertSchema, Xn as migrationSourceSchema, Ke as nodeSchema, Fa as normalizeUsername, kn as openIDConfigurationSchema, yi as organizationBrandingSchema, wi as organizationConnectionInsertSchema, Ei as organizationConnectionListSchema, Ti as organizationConnectionSchema, bi as organizationEnabledConnectionSchema, Si as organizationInsertSchema, Ci as organizationSchema, xi as organizationTokenQuotaSchema, Or as pageBackgroundSchema, ra as parseUserId, tr as passwordInsertSchema, nr as passwordSchema, f as profileDataSchema, Ui as promptScreenSchema, Mr as promptSettingSchema, Y as proxyRouteInsertSchema, Fr as proxyRouteSchema, Ir as proxyRouteUpdateSchema, Ce as redirectActionSchema, qr as refreshTokenInsertSchema, Ri as refreshTokenRetentionCohortSchema, zi as refreshTokenRetentionResponseSchema, Jr as refreshTokenSchema, ue as requestContextSchema, $r as resourceServerInsertSchema, ti as resourceServerListSchema, Qr as resourceServerOptionsSchema, ei as resourceServerSchema, Zr as resourceServerScopeSchema, de as responseContextSchema, E as richTextComponentSchema, gi as roleInsertSchema, vi as roleListSchema, ni as rolePermissionInsertSchema, ii as rolePermissionListSchema, ri as rolePermissionSchema, _i as roleSchema, br as rolloutInsertSchema, vr as rolloutKindSchema, xr as rolloutSchema, yr as rolloutStatusSchema, Sr as rolloutUpdateSchema, wa as sanitizeLuceneQuery, Rr as scimConfigurationInsertSchema, zr as scimConfigurationSchema, Hr as scimExternalIdInsertSchema, Ur as scimExternalIdSchema, Lr as scimMappingEntrySchema, Br as scimTokenInsertSchema, Vr as scimTokenSchema, en as screenLinkSchema, ir as sessionInsertSchema, Ii as sessionRetentionCohortSchema, Li as sessionRetentionResponseSchema, Oa as sessionRetentionWindow, ar as sessionSchema, or as signingKeySchema, Xr as smsProviderSchema, Yr as smsSendParamsSchema, Ca as splitLuceneOrGroups, qe as startSchema, $n as suspiciousIpThrottlingSchema, le as targetSchema, sr as tenantInsertSchema, dr as tenantOperationEngineSchema, gr as tenantOperationEventInsertSchema, hr as tenantOperationEventOutcomeSchema, _r as tenantOperationEventSchema, fr as tenantOperationInsertSchema, lr as tenantOperationKindSchema, pr as tenantOperationSchema, ur as tenantOperationStatusSchema, mr as tenantOperationUpdateSchema, cr as tenantSchema, ki as tenantSettingsSchema, Ar as themeInsertSchema, jr as themeSchema, wr as tokenResponseSchema, ya as tokenizeLuceneQuery, De as totalsSchema, tn as uiScreenSchema, ba as unescapeLuceneValue, Sa as unquoteLuceneValue, si as userActivitySchema, g as userInsertSchema, Di as userOrganizationInsertSchema, Oi as userOrganizationSchema, ci as userPermissionInsertSchema, ui as userPermissionListSchema, li as userPermissionSchema, fi as userPermissionWithDetailsListSchema, di as userPermissionWithDetailsSchema, ke as userResponseSchema, pi as userRoleInsertSchema, hi as userRoleListSchema, mi as userRoleSchema, _ as userSchema, Pa as usernameHasOnlyAllowedCharacters, Ia as validateUsername, ct as verificationMethodsSchema, Da as weekIndex, $ as weekStartMs, Ut as widgetComponentSchema, kr as widgetSchema };