@authhero/saml 0.5.10 → 0.5.12

package/dist/core.mjs

@@ -5902,14 +5902,15 @@ var ca = e.enum([
 	"seed",
 	"upgrade",
 	"backup",
-	"deprovision"
+	"deprovision",
+	"users_import"
 ]), la = e.enum([
 	"pending",
 	"running",
 	"succeeded",
 	"failed",
 	"cancelled"
-]), ua = e.enum(["inline", "cloudflare-workflows"]);
+]), ua = e.string().max(64);
 e.object({
 	tenant_id: e.string().max(255).nullable().default(null),
 	rollout_id: e.string().max(255).nullable().optional(),
@@ -5918,12 +5919,16 @@ e.object({
 	engine_instance_id: e.string().max(100).nullable().optional(),
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
-	initiated_by: e.string().max(255).nullable().optional()
+	initiated_by: e.string().max(255).nullable().optional(),
+	input: e.record(e.string(), e.unknown()).nullable().optional()
 }).extend({
 	id: e.string(),
 	status: la,
 	current_step: e.string().max(255).nullable().optional(),
 	error: e.string().nullable().optional(),
+	result: e.record(e.string(), e.unknown()).nullable().optional(),
+	claimed_by: e.string().max(255).nullable().optional(),
+	claim_expires_at: e.string().nullable().optional(),
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
@@ -5934,6 +5939,9 @@ e.object({
 	target_worker_version: !0,
 	target_database_version: !0,
 	error: !0,
+	result: !0,
+	claimed_by: !0,
+	claim_expires_at: !0,
 	finished_at: !0
 }).partial();
 var da = e.enum([
@@ -5955,10 +5963,38 @@ e.object({
 	created_at: e.string()
 });
 var fa = e.enum([
+	"pending",
+	"inserted",
+	"updated",
+	"failed",
+	"skipped"
+]);
+e.object({
+	operation_id: e.string().max(255),
+	seq: e.number().int().min(0),
+	payload: e.record(e.string(), e.unknown()),
+	status: fa.default("pending"),
+	error_code: e.string().max(64).nullable().optional(),
+	error_message: e.string().nullable().optional(),
+	error_path: e.string().max(255).nullable().optional(),
+	entity_id: e.string().max(255).nullable().optional()
+}).extend({
+	status: fa,
+	created_at: e.string(),
+	updated_at: e.string()
+}), e.object({
+	seq: e.number().int().min(0),
+	status: fa,
+	error_code: e.string().max(64).nullable().optional(),
+	error_message: e.string().nullable().optional(),
+	error_path: e.string().max(255).nullable().optional(),
+	entity_id: e.string().max(255).nullable().optional()
+});
+var pa = e.enum([
 	"upgrade",
 	"reseed",
 	"backup"
-]), pa = e.enum([
+]), ma = e.enum([
 	"pending",
 	"canary",
 	"rolling",
@@ -5967,7 +6003,7 @@ var fa = e.enum([
 	"failed"
 ]);
 e.object({
-	kind: fa,
+	kind: pa,
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	wave_size: e.number().int().min(1).default(10),
@@ -5976,7 +6012,7 @@ e.object({
 	initiated_by: e.string().max(255).nullable().optional()
 }).extend({
 	id: e.string(),
-	status: pa,
+	status: ma,
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
@@ -5998,7 +6034,7 @@ e.object({
 	code: e.string(),
 	state: e.string().optional()
 });
-var ma = e.object({
+var ha = e.object({
 	button_border_radius: e.number(),
 	button_border_weight: e.number(),
 	buttons_style: e.enum([
@@ -6016,7 +6052,7 @@ var ma = e.object({
 	show_widget_shadow: e.boolean(),
 	widget_border_weight: e.number(),
 	widget_corner_radius: e.number()
-}), ha = e.object({
+}), ga = e.object({
 	base_focus_color: e.string(),
 	base_hover_color: e.string(),
 	body_text: e.string(),
@@ -6043,7 +6079,7 @@ var ma = e.object({
 }), $ = e.object({
 	bold: e.boolean(),
 	size: e.number()
-}), ga = e.object({
+}), _a = e.object({
 	body_text: $,
 	buttons_text: $,
 	font_url: e.string(),
@@ -6053,7 +6089,7 @@ var ma = e.object({
 	reference_text_size: e.number(),
 	subtitle: $,
 	title: $
-}), _a = e.object({
+}), va = e.object({
 	background_color: e.string(),
 	background_image_url: e.string(),
 	page_layout: e.enum([
@@ -6066,7 +6102,7 @@ var ma = e.object({
 		"chip",
 		"none"
 	]).optional()
-}), va = e.object({
+}), ya = e.object({
 	header_text_alignment: e.enum([
 		"center",
 		"left",
@@ -6083,12 +6119,12 @@ var ma = e.object({
 	social_buttons_layout: e.enum(["bottom", "top"])
 });
 e.object({
-	borders: ma,
-	colors: ha,
+	borders: ha,
+	colors: ga,
 	displayName: e.string(),
-	fonts: ga,
-	page_background: _a,
-	widget: va
+	fonts: _a,
+	page_background: va,
+	widget: ya
 }).extend({ themeId: e.string() }), e.object({
 	universal_login_experience: e.enum(["new", "classic"]).default("new"),
 	identifier_first: e.boolean().default(!0),
@@ -6096,44 +6132,44 @@ e.object({
 	show_last_used_connection: e.boolean().default(!1),
 	webauthn_platform_first_factor: e.boolean()
 });
-var ya = e.object({
+var ba = e.object({
 	hosts: e.array(e.string()).optional(),
 	methods: e.array(e.string()).optional(),
 	path: e.string().default("/*"),
 	headers: e.record(e.string(), e.string()).optional(),
 	query: e.record(e.string(), e.string()).optional()
-}), ba = e.object({
+}), xa = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
-}), xa = e.object({
+}), Sa = e.object({
 	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
-	match: ya,
-	handlers: e.array(ba).min(1)
+	match: ba,
+	handlers: e.array(xa).min(1)
 });
-xa.extend({
+Sa.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), xa.partial().omit({
+}), Sa.partial().omit({
 	id: !0,
 	custom_domain_id: !0
 });
-var Sa = e.object({
+var Ca = e.object({
 	scim: e.string(),
 	auth0: e.string()
-}), Ca = e.object({
+}), wa = e.object({
 	connection_id: e.string(),
 	user_id_attribute: e.string().default("externalId"),
-	mapping: e.array(Sa).default([])
+	mapping: e.array(Ca).default([])
 });
 e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(Ca.shape);
-var wa = e.object({
+}).extend(wa.shape);
+var Ta = e.object({
 	token_id: e.string(),
 	connection_id: e.string(),
 	token_hash: e.string(),
@@ -6143,20 +6179,20 @@ var wa = e.object({
 e.object({
 	created_at: e.string(),
 	last_used_at: e.string().optional()
-}).extend(wa.shape);
-var Ta = e.object({
+}).extend(Ta.shape);
+var Ea = e.object({
 	connection_id: e.string(),
 	external_id: e.string(),
 	user_id: e.string()
 });
-e.object({ created_at: e.string() }).extend(Ta.shape), e.object({
+e.object({ created_at: e.string() }).extend(Ea.shape), e.object({
 	name: e.string(),
 	enabled: e.boolean().optional().default(!0),
 	default_from_address: e.string().optional(),
 	credentials: e.record(e.string(), e.unknown()),
 	settings: e.object({}).optional()
 });
-var Ea = e.enum([
+var Da = e.enum([
 	"verify_email",
 	"verify_email_by_code",
 	"reset_email",
@@ -6171,7 +6207,7 @@ var Ea = e.enum([
 	"user_invitation"
 ]);
 e.object({
-	template: Ea,
+	template: Da,
 	body: e.string(),
 	from: e.string(),
 	subject: e.string(),
@@ -6213,10 +6249,10 @@ e.object({
 	name: e.string(),
 	options: e.object({})
 });
-var Da = e.object({
+var Oa = e.object({
 	value: e.string(),
 	description: e.string().optional()
-}), Oa = e.object({
+}), ka = e.object({
 	token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
 	enforce_policies: e.boolean().optional(),
 	allow_skipping_userinfo: e.boolean().optional(),
@@ -6224,11 +6260,11 @@ var Da = e.object({
 	persist_client_authorization: e.boolean().optional(),
 	enable_introspection_endpoint: e.boolean().optional(),
 	mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
-}), ka = e.object({
+}), Aa = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	identifier: e.string(),
-	scopes: e.array(Da).optional(),
+	scopes: e.array(Oa).optional(),
 	signing_alg: e.string().optional(),
 	signing_secret: e.string().optional(),
 	token_lifetime: e.number().default(86400),
@@ -6236,20 +6272,20 @@ var Da = e.object({
 	skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
 	allow_offline_access: e.boolean().optional(),
 	verificationKey: e.string().optional(),
-	options: Oa.optional(),
+	options: ka.optional(),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional()
 }).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(ka);
-var Aa = e.object({
+e.array(Aa);
+var ja = e.object({
 	role_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
 }).extend({ created_at: e.string() });
-e.array(Aa), e.object({
+e.array(ja), e.object({
 	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
 	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
 	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
@@ -6262,7 +6298,7 @@ e.array(Aa), e.object({
 	failed_logins: e.array(e.string()).optional(),
 	last_password_reset: e.string().optional()
 });
-var ja = e.object({
+var Ma = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
@@ -6271,8 +6307,8 @@ var ja = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(ja);
-var Ma = e.object({
+e.array(Ma);
+var Na = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -6281,8 +6317,8 @@ var Ma = e.object({
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
 });
-e.array(Ma);
-var Na = e.object({
+e.array(Na);
+var Pa = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
@@ -6290,8 +6326,8 @@ var Na = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(Na);
-var Pa = e.object({
+e.array(Pa);
+var Fa = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
@@ -6302,19 +6338,19 @@ var Pa = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Pa);
-var Fa = e.object({
+e.array(Fa);
+var Ia = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), Ia = e.object({
+}).optional(), La = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), La = e.object({ client_credentials: e.object({
+}), Ra = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
@@ -6323,15 +6359,15 @@ e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: Fa,
+	branding: Ia,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(Ia).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: La
+	enabled_connections: e.array(La).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: Ra
 }).extend(W.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
 });
-var Ra = e.object({
+var za = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
@@ -6344,7 +6380,7 @@ var Ra = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Ra), e.object({
+e.array(za), e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
 }).extend(W.shape).extend({ id: e.string() }), e.object({
@@ -6483,7 +6519,7 @@ e.array(Ra), e.object({
 	"passwordless",
 	"enterprise"
 ]);
-var za = e.object({
+var Ba = e.object({
 	cohort: e.string(),
 	sessions: e.number(),
 	active: e.array(e.number())
@@ -6492,9 +6528,9 @@ e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(za)
+	cohorts: e.array(Ba)
 });
-var Ba = e.object({
+var Va = e.object({
 	cohort: e.string(),
 	tokens: e.number(),
 	active: e.array(e.number())
@@ -6503,24 +6539,24 @@ e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(Ba)
+	cohorts: e.array(Va)
 });
-var Va = e.object({
+var Ha = e.object({
 	name: e.string(),
 	type: e.string()
-}), Ha = e.object({
+}), Ua = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
 });
 e.object({
-	meta: e.array(Va),
+	meta: e.array(Ha),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: Ha.optional()
+	statistics: Ua.optional()
 });
-var Ua = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), Wa = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+var Wa = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), Ga = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
@@ -6528,11 +6564,11 @@ var Ua = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.
 	}
 });
 e.object({
-	prompt: Ua,
+	prompt: Wa,
 	language: e.string(),
-	custom_text: Wa
+	custom_text: Ga
 });
-var Ga = e.enum([
+var Ka = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -6540,9 +6576,9 @@ var Ga = e.enum([
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), Ka = e.object({
+]), qa = e.object({
 	user_id: e.string(),
-	type: Ga,
+	type: Ka,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
 	credential_id: e.string().optional(),
@@ -6553,7 +6589,7 @@ var Ga = e.enum([
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function qa(t, n) {
+function Ja(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -6576,51 +6612,51 @@ function qa(t, n) {
 		path: ["public_key"]
 	}));
 }
-Ka.superRefine(qa), Ka.extend({
+qa.superRefine(Ja), qa.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(qa), e.object({
+}).superRefine(Ja), e.object({
 	id: e.string().optional(),
 	created_at: e.string().datetime({ offset: !0 }).optional(),
 	updated_at: e.string().datetime({ offset: !0 }).optional()
 });
-function Ja(e) {
+function Ya(e) {
 	let t = atob(e), n = new Uint8Array(t.length);
 	for (let e = 0; e < t.length; e++) n[e] = t.charCodeAt(e);
 	return n;
 }
 //#endregion
 //#region ../../node_modules/.pnpm/nanoid@5.1.11/node_modules/nanoid/url-alphabet/index.js
-var Ya = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Xa = (e = 21) => {
+var Xa = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Za = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += Ya[n[e] & 63];
+	for (; e--;) t += Xa[n[e] & 63];
 	return t;
 };
 //#endregion
 //#region src/helpers.ts
-async function Za(e) {
+async function Qa(e) {
 	let t = new DecompressionStream("deflate-raw"), n = new Uint8Array(e), r = new Blob([n]).stream().pipeThrough(t);
 	return new Uint8Array(await new Response(r).arrayBuffer());
 }
-async function Qa(e) {
-	let t = Ja(e.replace(/ /g, "+"));
+async function $a(e) {
+	let t = Ya(e.replace(/ /g, "+"));
 	try {
-		let e = await Za(t);
+		let e = await Qa(t);
 		return new TextDecoder().decode(e);
 	} catch (e) {
 		return console.warn("Decompression failed, assuming data is not compressed:", e), new TextDecoder().decode(t);
 	}
 }
-async function $a(e) {
-	let t = await Qa(e), n = new an({
+async function eo(e) {
+	let t = await $a(e), n = new an({
 		attributeNamePrefix: "@_",
 		alwaysCreateTextNode: !0,
 		ignoreAttributes: !1
 	}).parse(t);
 	return r.parse(n);
 }
-function eo(e) {
+function to(e) {
 	let t = e.certificates.map((e) => ({
 		"@_use": "signing",
 		KeyInfo: {
@@ -6694,8 +6730,8 @@ function eo(e) {
 		attributeNamePrefix: "@_"
 	}).build(n);
 }
-async function to(e, t) {
-	let n = e.notBefore || (/* @__PURE__ */ new Date()).toISOString(), r = e.notAfter || new Date(new Date(n).getTime() + 600 * 1e3).toISOString(), i = e.issueInstant || n, a = e.sessionNotOnOrAfter || r, o = e.responseId || `_${Xa()}`, s = e.assertionId || `_${Xa()}`, c = [{
+async function no(e, t) {
+	let n = e.notBefore || (/* @__PURE__ */ new Date()).toISOString(), r = e.notAfter || new Date(new Date(n).getTime() + 600 * 1e3).toISOString(), i = e.issueInstant || n, a = e.sessionNotOnOrAfter || r, o = e.responseId || `_${Za()}`, s = e.assertionId || `_${Za()}`, c = [{
 		"samlp:Response": [
 			{ "saml:Issuer": [{ "#text": e.issuer }] },
 			{ "samlp:Status": [{
@@ -6876,7 +6912,7 @@ async function to(e, t) {
 }
 //#endregion
 //#region src/signers/http.ts
-var no = class {
+var ro = class {
 	signUrl;
 	constructor(e) {
 		this.signUrl = e;
@@ -6896,4 +6932,4 @@ var no = class {
 	}
 };
 //#endregion
-export { no as HttpSamlSigner, eo as createSamlMetadata, to as createSamlResponse, s as dsSignatureSchema, Qa as inflateDecompress, Za as inflateRaw, $a as parseSamlRequestQuery, n as samlIssuerSchema, i as samlMetadataResponseSchema, r as samlRequestSchema, c as samlResponseJsonSchema };
+export { ro as HttpSamlSigner, to as createSamlMetadata, no as createSamlResponse, s as dsSignatureSchema, $a as inflateDecompress, Qa as inflateRaw, eo as parseSamlRequestQuery, n as samlIssuerSchema, i as samlMetadataResponseSchema, r as samlRequestSchema, c as samlResponseJsonSchema };