@authhero/saml 0.5.9 → 0.5.11

package/dist/core.mjs

@@ -3926,7 +3926,10 @@ var wn = U, W = e.object({
 On.partial().extend({
 	status: e.enum(["draft", "built"]).optional(),
 	deployed_at: e.string().optional()
-}), On.extend({
+});
+//#endregion
+//#region ../adapter-interfaces/dist/adapter-interfaces.mjs
+var kn = On.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	status: e.enum(["draft", "built"]).default("built"),
@@ -3935,26 +3938,25 @@ On.partial().extend({
 		name: e.string(),
 		value: e.string().optional()
 	})).optional()
-}).extend(W.shape);
-//#endregion
-//#region ../adapter-interfaces/dist/adapter-interfaces.mjs
-var kn = e.string(), An = e.enum([
+}).extend(W.shape), An = e.object({ name: e.string() });
+kn.extend({ secrets: e.array(An).optional() });
+var jn = e.string(), Mn = e.enum([
 	"unspecified",
 	"pending",
 	"final",
 	"partial",
 	"canceled",
 	"suspended"
-]), jn = e.object({
+]), Nn = e.object({
 	id: e.string(),
 	msg: e.string(),
 	url: e.string().optional()
-}), Mn = e.object({
+}), Pn = e.object({
 	action_name: e.string(),
-	error: jn.nullable(),
+	error: Nn.nullable(),
 	started_at: e.string(),
 	ended_at: e.string()
-}), Nn = e.object({
+}), Fn = e.object({
 	level: e.enum([
 		"log",
 		"info",
@@ -3963,17 +3965,17 @@ var kn = e.string(), An = e.enum([
 		"debug"
 	]),
 	message: e.string()
-}), Pn = e.array(e.object({
+}), In = e.array(e.object({
 	action_name: e.string(),
-	lines: e.array(Nn)
+	lines: e.array(Fn)
 }));
 e.object({
 	id: e.string(),
 	tenant_id: e.string(),
-	trigger_id: kn,
-	status: An,
-	results: e.array(Mn),
-	logs: Pn.optional(),
+	trigger_id: jn,
+	status: Mn,
+	results: e.array(Pn),
+	logs: In.optional(),
 	created_at: e.string(),
 	updated_at: e.string()
 }).omit({
@@ -3993,12 +3995,12 @@ e.object({
 	tenant_id: e.string(),
 	number: e.number().int()
 }).extend(W.shape);
-var Fn = e.enum([
+var Ln = e.enum([
 	"user_action",
 	"admin_action",
 	"system",
 	"api"
-]), In = e.object({
+]), Rn = e.object({
 	type: e.enum([
 		"user",
 		"admin",
@@ -4012,7 +4014,7 @@ var Fn = e.enum([
 	org_name: e.string().optional(),
 	scopes: e.array(e.string()).optional(),
 	client_id: e.string().optional()
-}), Ln = e.object({
+}), zn = e.object({
 	type: e.string(),
 	id: e.string(),
 	before: e.record(e.string(), e.unknown()).optional(),
@@ -4021,7 +4023,7 @@ var Fn = e.enum([
 		old: e.unknown(),
 		new: e.unknown()
 	})).optional()
-}), Rn = e.object({
+}), Bn = e.object({
 	method: e.string(),
 	path: e.string(),
 	query: e.record(e.string(), e.string()).optional(),
@@ -4030,17 +4032,17 @@ var Fn = e.enum([
 	user_agent: e.string().optional(),
 	correlation_id: e.string().optional(),
 	redirect_uri: e.string().optional()
-}), zn = e.object({
+}), Vn = e.object({
 	status_code: e.number(),
 	body: e.unknown().optional()
-}), Bn = e.object({
+}), Hn = e.object({
 	country_code: e.string(),
 	city_name: e.string(),
 	latitude: e.string(),
 	longitude: e.string(),
 	time_zone: e.string(),
 	continent_code: e.string()
-}), Vn = e.object({
+}), Un = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.record(e.string(), e.string()).optional()
@@ -4050,11 +4052,11 @@ e.object({
 	event_type: e.string(),
 	log_type: e.string(),
 	description: e.string().optional(),
-	category: Fn,
-	actor: In,
-	target: Ln,
-	request: Rn,
-	response: zn.optional(),
+	category: Ln,
+	actor: Rn,
+	target: zn,
+	request: Bn,
+	response: Vn.optional(),
 	connection: e.string().optional(),
 	connection_id: e.string().optional(),
 	client_name: e.string().optional(),
@@ -4062,8 +4064,8 @@ e.object({
 	strategy_type: e.string().optional(),
 	audience: e.string().optional(),
 	scope: e.string().optional(),
-	location: Bn.optional(),
-	auth0_client: Vn.optional(),
+	location: Hn.optional(),
+	auth0_client: Un.optional(),
 	hostname: e.string(),
 	is_mobile: e.boolean().optional(),
 	timestamp: e.string()
@@ -4078,14 +4080,14 @@ e.object({
 	"SEND_REQUEST",
 	"SEND_EMAIL"
 ]), e.enum(["VERIFY_EMAIL"]);
-var Hn = e.object({
+var Wn = e.object({
 	require_mx_record: e.boolean().optional(),
 	block_aliases: e.boolean().optional(),
 	block_free_emails: e.boolean().optional(),
 	block_disposable_emails: e.boolean().optional(),
 	blocklist: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional()
-}), Un = e.object({
+}), Gn = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("AUTH0"),
@@ -4097,7 +4099,7 @@ var Hn = e.object({
 		user_id: e.string(),
 		changes: e.record(e.string(), e.any())
 	})
-}), Wn = e.object({
+}), Kn = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("EMAIL"),
@@ -4106,13 +4108,13 @@ var Hn = e.object({
 	mask_output: e.boolean().optional(),
 	params: e.object({
 		email: e.string(),
-		rules: Hn.optional()
+		rules: Wn.optional()
 	})
-}), Gn = e.enum([
+}), qn = e.enum([
 	"change-email",
 	"account",
 	"custom"
-]), Kn = e.object({
+]), Jn = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("REDIRECT"),
@@ -4120,17 +4122,17 @@ var Hn = e.object({
 	allow_failure: e.boolean().optional(),
 	mask_output: e.boolean().optional(),
 	params: e.object({
-		target: Gn.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
+		target: qn.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
 		custom_url: e.string().optional().openapi({ description: "Custom URL to redirect to when target is 'custom'" })
 	})
-}), qn = e.union([
-	Un,
-	Wn,
-	Kn
+}), Yn = e.union([
+	Gn,
+	Kn,
+	Jn
 ]);
 e.object({
 	name: e.string().min(1).max(150).openapi({ description: "The name of the flow" }),
-	actions: e.array(qn).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
+	actions: e.array(Yn).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
 }).extend(W.shape).extend({ id: e.string().openapi({
 	description: "Unique identifier for the flow",
 	example: "af_12tMpdJ3iek7svMyZkSh5M"
@@ -4147,7 +4149,7 @@ e.object({
 	total: e.number().optional(),
 	next: e.string().optional()
 });
-var Jn = e.object({
+var Xn = e.object({
 	email: e.string().optional(),
 	email_verified: e.boolean().optional(),
 	name: e.string().optional(),
@@ -4156,7 +4158,7 @@ var Jn = e.object({
 	phone_number: e.string().optional(),
 	phone_verified: e.boolean().optional(),
 	family_name: e.string().optional()
-}).catchall(e.any()), Yn = e.object({
+}).catchall(e.any()), Zn = e.object({
 	connection: e.string(),
 	user_id: e.string(),
 	provider: e.string(),
@@ -4169,15 +4171,15 @@ var Jn = e.object({
 	access_token: e.string().optional(),
 	access_token_secret: e.string().optional(),
 	refresh_token: e.string().optional(),
-	profileData: Jn.optional()
-}), Xn = e.object({
+	profileData: Xn.optional()
+}), Qn = e.object({
 	formatted: e.string().optional(),
 	street_address: e.string().optional(),
 	locality: e.string().optional(),
 	region: e.string().optional(),
 	postal_code: e.string().optional(),
 	country: e.string().optional()
-}).optional(), Zn = e.object({
+}).optional(), $n = e.object({
 	email: e.string().transform((e) => e.toLowerCase()).optional(),
 	username: e.string().refine((e) => !e.includes("@"), { message: "Usernames must not contain \"@\". Use the email field for email addresses." }).optional(),
 	phone_number: e.string().optional(),
@@ -4200,9 +4202,9 @@ var Jn = e.object({
 	gender: e.string().optional(),
 	birthdate: e.string().optional(),
 	zoneinfo: e.string().optional(),
-	address: Xn
+	address: Qn
 });
-Zn.extend({
+$n.extend({
 	email_verified: e.boolean().default(!1),
 	verify_email: e.boolean().optional(),
 	last_ip: e.string().optional(),
@@ -4223,24 +4225,24 @@ Zn.extend({
 	is_social: e.boolean(),
 	email: e.string().optional(),
 	login_count: e.number().default(0),
-	identities: e.array(Yn).optional()
-}).omit({ registration_completed_at: !0 }), Zn.extend({
+	identities: e.array(Zn).optional()
+}).omit({ registration_completed_at: !0 }), $n.extend({
 	login_count: e.number(),
 	multifactor: e.array(e.string()).optional(),
 	last_ip: e.string().optional(),
 	last_login: e.string().optional(),
 	user_id: e.string()
 }).catchall(e.any());
-var Qn = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", $n = (e = 21) => {
+var er = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", tr = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += Qn[n[e] & 63];
+	for (; e--;) t += er[n[e] & 63];
 	return t;
-}, er = e.object({
+}, nr = e.object({
 	client_id: e.string().optional().openapi({ description: "ID of this client. Generated server-side if omitted (Auth0 behavior)." }),
 	name: e.string().min(1).openapi({ description: "Name of this client (min length: 1 character, does not allow < or >)." }),
 	description: e.string().max(140).optional().openapi({ description: "Free text description of this client (max length: 140 characters)." }),
 	global: e.boolean().default(!1).openapi({ description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)." }),
-	client_secret: e.string().default(() => $n()).optional().openapi({ description: "Client secret (which you must not make public)." }),
+	client_secret: e.string().default(() => tr()).optional().openapi({ description: "Client secret (which you must not make public)." }),
 	app_type: e.enum([
 		"native",
 		"spa",
@@ -4357,8 +4359,8 @@ var Qn = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", $n
 e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(er.shape).extend({ client_id: e.string() });
-var tr = e.object({
+}).extend(nr.shape).extend({ client_id: e.string() });
+var rr = e.object({
 	client_id: e.string().min(1).openapi({ description: "ID of the client." }),
 	audience: e.string().min(1).openapi({ description: "The audience (API identifier) of this client grant." }),
 	scope: e.array(e.string()).optional().openapi({ description: "Scopes allowed for this client grant." }),
@@ -4371,15 +4373,15 @@ var tr = e.object({
 	is_system: e.boolean().optional().openapi({ description: "If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly." }),
 	subject_type: e.enum(["client", "user"]).optional().openapi({ description: "The type of application access the client grant allows. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." }),
 	authorization_details_types: e.array(e.string()).optional().openapi({ description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." })
-}), nr = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(tr.shape).extend({
+}), ir = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(rr.shape).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(nr);
-var rr = e.enum(["iat", "rat"]), ir = e.object({
+e.array(ir);
+var ar = e.enum(["iat", "rat"]), or = e.object({
 	id: e.string(),
 	token_hash: e.string(),
-	type: rr,
+	type: ar,
 	client_id: e.string().optional(),
 	sub: e.string().optional(),
 	constraints: e.record(e.string(), e.unknown()).optional(),
@@ -4390,23 +4392,23 @@ e.object({
 	created_at: e.string(),
 	used_at: e.string().optional(),
 	revoked_at: e.string().optional()
-}).extend(ir.shape);
+}).extend(or.shape);
 var G = e.object({
 	x: e.number(),
 	y: e.number()
-}), ar = /* @__PURE__ */ function(e) {
+}), sr = /* @__PURE__ */ function(e) {
 	return e.RICH_TEXT = "RICH_TEXT", e.NEXT_BUTTON = "NEXT_BUTTON", e.BACK_BUTTON = "BACK_BUTTON", e.SUBMIT_BUTTON = "SUBMIT_BUTTON", e.DIVIDER = "DIVIDER", e.TEXT = "TEXT", e.EMAIL = "EMAIL", e.PASSWORD = "PASSWORD", e.NUMBER = "NUMBER", e.PHONE = "PHONE", e.DATE = "DATE", e.CHECKBOX = "CHECKBOX", e.RADIO = "RADIO", e.SELECT = "SELECT", e.HIDDEN = "HIDDEN", e.LEGAL = "LEGAL", e;
-}({}), or = /* @__PURE__ */ function(e) {
+}({}), cr = /* @__PURE__ */ function(e) {
 	return e.BLOCK = "BLOCK", e.FIELD = "FIELD", e;
 }({}), K = e.object({
 	id: e.string(),
-	category: e.nativeEnum(or),
-	type: e.nativeEnum(ar)
-}), sr = K.extend({
+	category: e.nativeEnum(cr),
+	type: e.nativeEnum(sr)
+}), lr = K.extend({
 	category: e.literal("BLOCK"),
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string() }).passthrough()
-}), cr = K.extend({
+}), ur = K.extend({
 	category: e.literal("BLOCK"),
 	type: e.union([
 		e.literal("NEXT_BUTTON"),
@@ -4414,13 +4416,13 @@ var G = e.object({
 		e.literal("SUBMIT_BUTTON")
 	]),
 	config: e.object({ text: e.string() }).passthrough()
-}), lr = K.extend({
+}), dr = K.extend({
 	category: e.literal("FIELD"),
 	type: e.literal("LEGAL"),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional(),
 	config: e.object({ text: e.string() }).passthrough()
-}), ur = K.extend({
+}), fr = K.extend({
 	category: e.literal("FIELD"),
 	type: e.union([
 		e.literal("TEXT"),
@@ -4440,26 +4442,26 @@ var G = e.object({
 		label: e.string().optional(),
 		placeholder: e.string().optional()
 	}).passthrough()
-}), dr = e.object({
+}), pr = e.object({
 	id: e.string(),
 	category: e.string(),
 	type: e.string()
-}).passthrough(), fr = e.union([
-	sr,
-	cr,
+}).passthrough(), mr = e.union([
 	lr,
 	ur,
-	dr
-]), pr = e.object({
+	dr,
+	fr,
+	pr
+]), hr = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
 	coordinates: G,
 	alias: e.string().optional(),
 	config: e.object({
-		components: e.array(fr),
+		components: e.array(mr),
 		next_node: e.string()
 	}).passthrough()
-}), mr = e.object({
+}), gr = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
 	coordinates: G,
@@ -4468,7 +4470,7 @@ var G = e.object({
 		flow_id: e.string(),
 		next_node: e.string()
 	})
-}), hr = e.object({
+}), _r = e.object({
 	id: e.string(),
 	type: e.literal("ACTION"),
 	coordinates: G,
@@ -4483,19 +4485,19 @@ var G = e.object({
 		custom_url: e.string().optional().openapi({ description: "Custom URL when target is 'custom'" }),
 		next_node: e.string().openapi({ description: "The next node to navigate to after action (for non-redirect actions)" })
 	}).passthrough()
-}), gr = e.object({
+}), vr = e.object({
 	id: e.string(),
 	type: e.string(),
 	coordinates: G
-}).passthrough(), _r = e.union([
-	pr,
-	mr,
+}).passthrough(), yr = e.union([
 	hr,
-	gr
-]), vr = e.object({
+	gr,
+	_r,
+	vr
+]), br = e.object({
 	next_node: e.string(),
 	coordinates: G
-}).passthrough(), yr = e.object({
+}).passthrough(), xr = e.object({
 	resume_flow: e.boolean().optional(),
 	coordinates: G
 }).passthrough();
@@ -4503,9 +4505,9 @@ e.object({
 	id: e.string(),
 	name: e.string(),
 	languages: e.object({ primary: e.string() }).passthrough(),
-	nodes: e.array(_r),
-	start: vr,
-	ending: yr,
+	nodes: e.array(yr),
+	start: br,
+	ending: xr,
 	created_at: e.string(),
 	updated_at: e.string(),
 	links: e.object({
@@ -4517,24 +4519,24 @@ e.object({
 	created_at: !0,
 	updated_at: !0
 });
-var br = /* @__PURE__ */ function(e) {
+var Sr = /* @__PURE__ */ function(e) {
 	return e.TOKEN = "token", e.ID_TOKEN = "id_token", e.TOKEN_ID_TOKEN = "id_token token", e.CODE = "code", e.CODE_ID_TOKEN = "code id_token", e.CODE_TOKEN = "code token", e.CODE_ID_TOKEN_TOKEN = "code id_token token", e;
-}({}), xr = /* @__PURE__ */ function(e) {
+}({}), Cr = /* @__PURE__ */ function(e) {
 	return e.QUERY = "query", e.FRAGMENT = "fragment", e.FORM_POST = "form_post", e.WEB_MESSAGE = "web_message", e.SAML_POST = "saml_post", e;
-}({}), Sr = /* @__PURE__ */ function(e) {
+}({}), wr = /* @__PURE__ */ function(e) {
 	return e.S256 = "S256", e.Plain = "plain", e;
-}({}), Cr = e.union([e.null(), e.object({
+}({}), Tr = e.union([e.null(), e.object({
 	essential: e.boolean().optional(),
 	value: e.unknown().optional(),
 	values: e.array(e.unknown()).optional()
-})]).nullable(), wr = e.object({
-	userinfo: e.record(e.string(), Cr).optional(),
-	id_token: e.record(e.string(), Cr).optional()
-}), Tr = e.object({
+})]).nullable(), Er = e.object({
+	userinfo: e.record(e.string(), Tr).optional(),
+	id_token: e.record(e.string(), Tr).optional()
+}), Dr = e.object({
 	client_id: e.string(),
 	act_as: e.string().optional(),
-	response_type: e.nativeEnum(br).optional(),
-	response_mode: e.nativeEnum(xr).optional(),
+	response_type: e.nativeEnum(Sr).optional(),
+	response_mode: e.nativeEnum(Cr).optional(),
 	redirect_uri: e.string().optional(),
 	audience: e.string().optional(),
 	organization: e.string().optional(),
@@ -4542,13 +4544,13 @@ var br = /* @__PURE__ */ function(e) {
 	nonce: e.string().optional(),
 	scope: e.string().optional(),
 	prompt: e.string().optional(),
-	code_challenge_method: e.nativeEnum(Sr).optional(),
+	code_challenge_method: e.nativeEnum(wr).optional(),
 	code_challenge: e.string().optional(),
 	username: e.string().optional(),
 	ui_locales: e.string().optional(),
 	max_age: e.number().optional(),
 	acr_values: e.string().optional(),
-	claims: wr.optional(),
+	claims: Er.optional(),
 	vendor_id: e.string().optional()
 });
 e.object({
@@ -4571,20 +4573,21 @@ e.object({
 		"auto"
 	]).optional()
 });
-var Er = e.enum([
+var Or = e.enum([
 	"password_reset",
 	"email_verification",
 	"otp",
 	"mfa_otp",
 	"authorization_code",
 	"oauth2_state",
-	"ticket"
+	"ticket",
+	"client_assertion_jti"
 ]);
 e.object({
 	code_id: e.string().openapi({ description: "The code that will be used in for instance an email verification flow" }),
-	login_id: e.string().openapi({ description: "The id of the login session that the code is connected to" }),
+	login_id: e.string().optional().openapi({ description: "The id of the login session that the code is connected to" }),
 	connection_id: e.string().optional().openapi({ description: "The connection that the code is connected to" }),
-	code_type: Er,
+	code_type: Or,
 	code_verifier: e.string().optional().openapi({ description: "The code verifier used in PKCE in outbound flows" }),
 	code_challenge: e.string().optional().openapi({ description: "The code challenge used in PKCE in outbound flows" }),
 	code_challenge_method: e.enum(["plain", "S256"]).optional().openapi({ description: "The code challenge method used in PKCE in outbound flows" }),
@@ -4596,7 +4599,7 @@ e.object({
 	used_at: e.string().optional(),
 	user_id: e.string().optional()
 }).extend({ created_at: e.string() });
-var Dr = e.object({
+var kr = e.object({
 	kid: e.string().optional(),
 	team_id: e.string().optional(),
 	realms: e.string().optional(),
@@ -4716,26 +4719,26 @@ var Dr = e.object({
 		"never_on_login"
 	]).optional()
 });
-function Or(e) {
+function Ar(e) {
 	if (e !== null) {
-		if (Array.isArray(e)) return e.filter((e) => e !== null).map(Or);
+		if (Array.isArray(e)) return e.filter((e) => e !== null).map(Ar);
 		if (e && typeof e == "object") {
 			let t = {};
-			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = Or(r));
+			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = Ar(r));
 			return t;
 		}
 		return e;
 	}
 }
-var kr = e.object({
+var jr = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	display_name: e.string().optional(),
 	strategy: e.string(),
-	options: e.preprocess((e) => e === null ? {} : Or(e), Dr).default({}),
+	options: e.preprocess((e) => e === null ? {} : Ar(e), kr).default({}),
 	enabled_clients: e.array(e.string()).default([]).optional(),
-	response_type: e.nativeEnum(br).optional(),
-	response_mode: e.nativeEnum(xr).optional(),
+	response_type: e.nativeEnum(Sr).optional(),
+	response_mode: e.nativeEnum(Cr).optional(),
 	is_domain_connection: e.boolean().optional(),
 	show_as_button: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional(),
@@ -4745,8 +4748,8 @@ e.object({
 	id: e.string(),
 	created_at: e.string().transform((e) => e === null ? "" : e),
 	updated_at: e.string().transform((e) => e === null ? "" : e)
-}).extend(kr.shape);
-var Ar = e.object({
+}).extend(jr.shape);
+var Mr = e.object({
 	domain: e.string(),
 	custom_domain_id: e.string().optional(),
 	type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -4760,7 +4763,7 @@ var Ar = e.object({
 		"null"
 	]).optional(),
 	domain_metadata: e.record(e.string(), e.string().max(255)).optional()
-}), jr = e.discriminatedUnion("name", [e.object({
+}), Nr = e.discriminatedUnion("name", [e.object({
 	name: e.literal("txt"),
 	record: e.string(),
 	domain: e.string()
@@ -4768,7 +4771,7 @@ var Ar = e.object({
 	name: e.literal("http"),
 	http_body: e.string(),
 	http_url: e.string()
-})]), Mr = Ar.extend({
+})]), Pr = Mr.extend({
 	custom_domain_id: e.string(),
 	primary: e.boolean(),
 	status: e.enum([
@@ -4778,28 +4781,28 @@ var Ar = e.object({
 		"ready"
 	]),
 	origin_domain_name: e.string().optional(),
-	verification: e.object({ methods: e.array(jr) }).optional(),
+	verification: e.object({ methods: e.array(Nr) }).optional(),
 	tls_policy: e.string().optional()
 });
-Ar.pick({
+Mr.pick({
 	tls_policy: !0,
 	custom_client_ip_header: !0,
 	domain_metadata: !0
-}).strict(), Mr.extend({ tenant_id: e.string() }), e.object({
+}).strict(), Pr.extend({ tenant_id: e.string() }), e.object({
 	certificate: e.string().regex(/^-----BEGIN CERTIFICATE-----[\s\S]+-----END CERTIFICATE-----\s*$/, "must be PEM-encoded; include the full certificate chain in leaf-first order"),
 	private_key: e.string().regex(/-----BEGIN (RSA |EC |ENCRYPTED )?PRIVATE KEY-----[\s\S]+-----END \1PRIVATE KEY-----\s*$/, "must be a PEM-encoded private key")
 });
-var Nr = e.object({
+var Fr = e.object({
 	id: e.string(),
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0)
-}), q = Nr.extend({ category: e.literal("BLOCK").optional() }), Pr = q.extend({
+}), q = Fr.extend({ category: e.literal("BLOCK").optional() }), Ir = q.extend({
 	type: e.literal("DIVIDER"),
 	config: e.object({ text: e.string().optional() }).optional()
-}), Fr = q.extend({
+}), Lr = q.extend({
 	type: e.literal("HTML"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), Ir = q.extend({
+}), Rr = q.extend({
 	type: e.literal("IMAGE"),
 	config: e.object({
 		src: e.string().optional(),
@@ -4807,43 +4810,43 @@ var Nr = e.object({
 		width: e.number().optional(),
 		height: e.number().optional()
 	}).optional()
-}), Lr = q.extend({
+}), zr = q.extend({
 	type: e.literal("JUMP_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		target_step: e.string().optional()
 	})
-}), Rr = q.extend({
+}), Br = q.extend({
 	type: e.literal("RESEND_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		resend_action: e.string().optional()
 	})
-}), zr = q.extend({
+}), Vr = q.extend({
 	type: e.literal("NEXT_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), Br = q.extend({
+}), Hr = q.extend({
 	type: e.literal("PREVIOUS_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), Vr = q.extend({
+}), Ur = q.extend({
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), J = Nr.extend({
+}), J = Fr.extend({
 	category: e.literal("WIDGET").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), Hr = J.extend({
+}), Wr = J.extend({
 	type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
 	config: e.object({ credential_type: e.string().optional() })
-}), Ur = J.extend({
+}), Gr = J.extend({
 	type: e.literal("GMAPS_ADDRESS"),
 	config: e.object({ api_key: e.string().optional() })
-}), Wr = J.extend({
+}), Kr = J.extend({
 	type: e.literal("RECAPTCHA"),
 	config: e.object({ site_key: e.string().optional() })
-}), Y = Nr.extend({
+}), Y = Fr.extend({
 	category: e.literal("FIELD").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
@@ -4859,10 +4862,10 @@ var Nr = e.object({
 	})).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), Gr = Y.extend({
+}), qr = Y.extend({
 	type: e.literal("BOOLEAN"),
 	config: e.object({ default_value: e.boolean().optional() }).optional()
-}), Kr = Y.extend({
+}), Jr = Y.extend({
 	type: e.literal("CARDS"),
 	config: e.object({
 		options: e.array(e.object({
@@ -4873,7 +4876,7 @@ var Nr = e.object({
 		})).optional(),
 		multi_select: e.boolean().optional()
 	}).optional()
-}), qr = Y.extend({
+}), Yr = Y.extend({
 	type: e.literal("CHOICE"),
 	config: e.object({
 		options: e.array(e.object({
@@ -4884,7 +4887,7 @@ var Nr = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), Jr = Y.extend({
+}), Xr = Y.extend({
 	type: e.literal("CODE"),
 	config: e.object({
 		length: e.number().int().positive().max(100).optional(),
@@ -4901,7 +4904,7 @@ var Nr = e.object({
 		message: "default_value is longer than the configured length",
 		path: ["default_value"]
 	}).optional()
-}), Yr = Y.extend({
+}), Zr = Y.extend({
 	type: e.literal("CUSTOM"),
 	config: e.object({
 		component: e.string().optional(),
@@ -4909,7 +4912,7 @@ var Nr = e.object({
 		schema: e.record(e.string(), e.any()).optional(),
 		code: e.string().optional()
 	})
-}), Xr = Y.extend({
+}), Qr = Y.extend({
 	type: e.literal("DATE"),
 	config: e.object({
 		format: e.string().optional(),
@@ -4917,7 +4920,7 @@ var Nr = e.object({
 		max: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Zr = Y.extend({
+}), $r = Y.extend({
 	type: e.literal("DROPDOWN"),
 	config: e.object({
 		options: e.array(e.object({
@@ -4929,7 +4932,7 @@ var Nr = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), Qr = Y.extend({
+}), ei = Y.extend({
 	type: e.literal("EMAIL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -4937,20 +4940,20 @@ var Nr = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), $r = Y.extend({
+}), ti = Y.extend({
 	type: e.literal("FILE"),
 	config: e.object({
 		accept: e.string().optional(),
 		max_size: e.number().optional(),
 		multiple: e.boolean().optional()
 	}).optional()
-}), ei = Y.extend({
+}), ni = Y.extend({
 	type: e.literal("LEGAL"),
 	config: e.object({
 		text: e.string(),
 		html: e.boolean().optional()
 	}).optional()
-}), ti = Y.extend({
+}), ri = Y.extend({
 	type: e.literal("NUMBER"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -4959,7 +4962,7 @@ var Nr = e.object({
 		step: e.number().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), ni = Y.extend({
+}), ii = Y.extend({
 	type: e.literal("PASSWORD"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -4968,13 +4971,13 @@ var Nr = e.object({
 		forgot_password_link: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), ri = Y.extend({
+}), ai = Y.extend({
 	type: e.literal("PAYMENT"),
 	config: e.object({
 		provider: e.string().optional(),
 		currency: e.string().optional()
 	}).optional()
-}), ii = Y.extend({
+}), oi = Y.extend({
 	type: e.literal("SOCIAL"),
 	config: e.object({
 		providers: e.array(e.string()).optional(),
@@ -4988,7 +4991,7 @@ var Nr = e.object({
 			last_used_label: e.string().optional()
 		})).optional()
 	}).optional()
-}), ai = Y.extend({
+}), si = Y.extend({
 	type: e.literal("TEL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -4996,7 +4999,7 @@ var Nr = e.object({
 		default_value: e.string().optional(),
 		allow_email: e.boolean().optional()
 	}).optional()
-}), oi = Y.extend({
+}), ci = Y.extend({
 	type: e.literal("TEXT"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -5006,39 +5009,37 @@ var Nr = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), si = Y.extend({
+}), li = Y.extend({
 	type: e.literal("COUNTRY"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), ci = Y.extend({
+}), ui = Y.extend({
 	type: e.literal("URL"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), li = e.discriminatedUnion("type", [
-	Pr,
-	Fr,
+}), di = e.discriminatedUnion("type", [
 	Ir,
 	Lr,
 	Rr,
 	zr,
 	Br,
-	Vr
-]), ui = e.discriminatedUnion("type", [
+	Vr,
 	Hr,
-	Ur,
-	Wr
-]), di = e.discriminatedUnion("type", [
+	Ur
+]), fi = e.discriminatedUnion("type", [
+	Wr,
 	Gr,
-	Kr,
+	Kr
+]), pi = e.discriminatedUnion("type", [
 	qr,
 	Jr,
-	si,
 	Yr,
 	Xr,
+	li,
 	Zr,
 	Qr,
 	$r,
@@ -5049,11 +5050,13 @@ var Nr = e.object({
 	ii,
 	ai,
 	oi,
-	ci
-]), fi = e.union([
-	li,
-	ui,
-	di
+	si,
+	ci,
+	ui
+]), mi = e.union([
+	di,
+	fi,
+	pi
 ]);
 new Set([
 	"BOOLEAN",
@@ -5083,7 +5086,7 @@ new Set([
 var X = e.object({
 	x: e.number(),
 	y: e.number()
-}), pi = e.object({
+}), hi = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
 	coordinates: X,
@@ -5092,7 +5095,7 @@ var X = e.object({
 		flow_id: e.string().max(30),
 		next_node: e.string().optional()
 	})
-}), mi = e.object({
+}), gi = e.object({
 	id: e.string(),
 	type: e.literal("ROUTER"),
 	coordinates: X,
@@ -5106,20 +5109,20 @@ var X = e.object({
 		})),
 		fallback: e.string()
 	})
-}), hi = e.object({
+}), _i = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
 	coordinates: X,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
-		components: e.array(fi),
+		components: e.array(mi),
 		next_node: e.string().optional()
 	})
-}), gi = e.discriminatedUnion("type", [
-	pi,
-	mi,
-	hi
-]), _i = e.object({
+}), vi = e.discriminatedUnion("type", [
+	hi,
+	gi,
+	_i
+]), yi = e.object({
 	name: e.string().openapi({ description: "The name of the form" }),
 	messages: e.object({
 		errors: e.record(e.string(), e.any()).optional(),
@@ -5130,7 +5133,7 @@ var X = e.object({
 		default: e.string().optional()
 	}).optional(),
 	translations: e.record(e.string(), e.any()).optional(),
-	nodes: e.array(gi).optional(),
+	nodes: e.array(vi).optional(),
 	start: e.object({
 		hidden_fields: e.array(e.object({
 			key: e.string(),
@@ -5154,8 +5157,8 @@ var X = e.object({
 		sdk_src: e.string().optional()
 	}).optional()
 }).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" });
-W.extend(_i.shape).extend({ id: e.string() });
-var vi = e.object({
+W.extend(yi.shape).extend({ id: e.string() });
+var bi = e.object({
 	id: e.number().optional(),
 	text: e.string(),
 	type: e.enum([
@@ -5164,7 +5167,7 @@ var vi = e.object({
 		"success",
 		"warning"
 	])
-}), yi = e.object({
+}), xi = e.object({
 	id: e.string().optional(),
 	text: e.string(),
 	href: e.string(),
@@ -5176,12 +5179,12 @@ e.object({
 	method: e.enum(["POST", "GET"]),
 	title: e.string().optional(),
 	description: e.string().optional(),
-	components: e.array(fi),
-	messages: e.array(vi).optional(),
-	links: e.array(yi).optional(),
+	components: e.array(mi),
+	messages: e.array(bi).optional(),
+	links: e.array(xi).optional(),
 	footer: e.string().optional()
 });
-var bi = e.enum([
+var Si = e.enum([
 	"pre-user-registration",
 	"post-user-registration",
 	"post-user-login",
@@ -5189,19 +5192,19 @@ var bi = e.enum([
 	"validate-registration-username",
 	"pre-user-deletion",
 	"post-user-deletion"
-]), xi = e.enum(["post-user-login"]), Si = e.enum([
+]), Ci = e.enum(["post-user-login"]), wi = e.enum([
 	"post-user-login",
 	"post-user-registration",
 	"post-user-update",
 	"credentials-exchange"
-]), Ci = e.enum([
+]), Ti = e.enum([
 	"post-user-login",
 	"credentials-exchange",
 	"pre-user-registration",
 	"post-user-registration"
-]), wi = e.enum(["post-user-login"]);
-bi.options, xi.options, Si.options, Ci.options, wi.options;
-var Ti = e.enum(["impersonate"]), Ei = e.enum([
+]), Ei = e.enum(["post-user-login"]);
+Si.options, Ci.options, wi.options, Ti.options, Ei.options;
+var Di = e.enum(["impersonate"]), Oi = e.enum([
 	"ensure-username",
 	"set-preferred-username",
 	"account-linking"
@@ -5211,73 +5214,73 @@ var Ti = e.enum(["impersonate"]), Ei = e.enum([
 	priority: e.number().optional(),
 	hook_id: e.string().optional(),
 	metadata: e.record(e.string(), e.unknown()).optional()
-}, Di = e.object({
-	...Z,
-	trigger_id: bi,
-	url: e.string()
-}), Oi = e.object({
-	...Z,
-	trigger_id: xi,
-	form_id: e.string()
-}), ki = e.object({
+}, ki = e.object({
 	...Z,
 	trigger_id: Si,
-	template_id: Ei
+	url: e.string()
 }), Ai = e.object({
 	...Z,
 	trigger_id: Ci,
-	code_id: e.string()
+	form_id: e.string()
 }), ji = e.object({
 	...Z,
 	trigger_id: wi,
-	page_id: Ti,
+	template_id: Oi
+}), Mi = e.object({
+	...Z,
+	trigger_id: Ti,
+	code_id: e.string()
+}), Ni = e.object({
+	...Z,
+	trigger_id: Ei,
+	page_id: Di,
 	permission_required: e.string().optional()
 });
 e.union([
-	Di,
-	Oi,
 	ki,
 	Ai,
-	ji
+	ji,
+	Mi,
+	Ni
 ]);
-var Mi = e.object({
+var Pi = e.object({
 	...Z,
-	trigger_id: bi
+	trigger_id: Si
 }).extend(W.shape).extend({
 	hook_id: e.string(),
 	url: e.string()
-}), Ni = e.object({
+}), Fi = e.object({
 	...Z,
-	trigger_id: xi
+	trigger_id: Ci
 }).extend(W.shape).extend({
 	hook_id: e.string(),
 	form_id: e.string()
-}), Pi = e.object({
+}), Ii = e.object({
 	...Z,
-	trigger_id: Si
+	trigger_id: wi
 }).extend(W.shape).extend({
 	hook_id: e.string(),
-	template_id: Ei
-}), Fi = e.object({
+	template_id: Oi
+}), Li = e.object({
 	...Z,
-	trigger_id: Ci
+	trigger_id: Ti
 }).extend(W.shape).extend({
 	hook_id: e.string(),
 	code_id: e.string()
-}), Ii = e.object({
+}), Ri = e.object({
 	...Z,
-	trigger_id: wi
+	trigger_id: Ei
 }).extend(W.shape).extend({
 	hook_id: e.string(),
-	page_id: Ti,
+	page_id: Di,
 	permission_required: e.string().optional()
 });
 e.union([
-	Mi,
-	Ni,
 	Pi,
 	Fi,
-	Ii
+	Ii,
+	Li,
+	Ri
 ]), e.object({
 	code: e.string().max(1e5),
 	secrets: e.record(e.string(), e.string()).optional()
@@ -5285,11 +5288,11 @@ e.union([
 	id: e.string(),
 	tenant_id: e.string()
 }).extend(W.shape);
-var Li = e.object({ name: e.string().optional() }), Ri = e.object({ email: e.string().optional() }), zi = e.object({
+var zi = e.object({ name: e.string().optional() }), Bi = e.object({ email: e.string().optional() }), Vi = e.object({
 	id: e.string().optional(),
 	organization_id: e.string().max(50),
-	inviter: Li,
-	invitee: Ri,
+	inviter: zi,
+	invitee: Bi,
 	invitation_url: e.string().url(),
 	client_id: e.string(),
 	connection_id: e.string().optional(),
@@ -5305,8 +5308,8 @@ e.object({
 	created_at: e.string().datetime(),
 	expires_at: e.string().datetime(),
 	ticket_id: e.string().optional()
-}).extend(zi.omit({ id: !0 }).shape);
-var Bi = e.object({
+}).extend(Vi.omit({ id: !0 }).shape);
+var Hi = e.object({
 	alg: e.enum([
 		"RS256",
 		"RS384",
@@ -5348,7 +5351,7 @@ var Bi = e.object({
 		message: `EC JWK is missing required member '${r}'`
 	});
 });
-e.object({ keys: e.array(Bi) }), e.object({
+e.object({ keys: e.array(Hi) }), e.object({
 	issuer: e.string(),
 	authorization_endpoint: e.string(),
 	token_endpoint: e.string(),
@@ -5375,28 +5378,28 @@ e.object({ keys: e.array(Bi) }), e.object({
 	backchannel_logout_supported: e.boolean().optional(),
 	backchannel_logout_session_supported: e.boolean().optional()
 });
-var Vi = /* @__PURE__ */ function(e) {
+var Ui = /* @__PURE__ */ function(e) {
 	return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.AWAITING_CONSENT = "awaiting_consent", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
-}({}), Hi = e.nativeEnum(Vi), Ui = e.object({
+}({}), Wi = e.nativeEnum(Ui), Gi = e.object({
 	strategy: e.string(),
 	strategy_type: e.string()
 });
 e.object({
 	csrf_token: e.string(),
 	auth0Client: e.string().optional(),
-	authParams: Tr,
+	authParams: Dr,
 	expires_at: e.string(),
 	deleted_at: e.string().optional(),
 	ip: e.string().optional(),
 	useragent: e.string().optional(),
 	session_id: e.string().optional(),
 	authorization_url: e.string().optional(),
-	state: Hi.optional().default("pending"),
+	state: Wi.optional().default("pending"),
 	state_data: e.string().optional(),
 	failure_reason: e.string().optional(),
 	user_id: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: Ui.optional(),
+	auth_strategy: Gi.optional(),
 	authenticated_at: e.string().optional()
 }).openapi({ description: "This represents a login sesion" }).extend({
 	id: e.string().openapi({ description: "This is is used as the state in the universal login" }),
@@ -5563,17 +5566,17 @@ var Q = {
 	WARNING_DURING_LOGIN: "w",
 	WARNING_SENDING_NOTIFICATION: "wn",
 	WARNING_USER_MANAGEMENT: "wum"
-}, Wi = e.string().refine((e) => Object.values(Q).includes(e), { message: "Invalid log type" });
+}, Ki = e.string().refine((e) => Object.values(Q).includes(e), { message: "Invalid log type" });
 Q.ACLS_SUMMARY, Q.ACTIONS_EXECUTION_FAILED, Q.API_LIMIT, Q.API_LIMIT_WARNING, Q.APPI, Q.CIBA_EXCHANGE_FAILED, Q.CIBA_EXCHANGE_SUCCEEDED, Q.CIBA_START_FAILED, Q.CIBA_START_SUCCEEDED, Q.CODE_LINK_SENT, Q.CODE_SENT, Q.DEPRECATION_NOTICE, Q.FAILED_LOGIN, Q.FAILED_BY_CONNECTOR, Q.FAILED_CHANGE_EMAIL, Q.FAILED_BY_CORS, Q.FAILED_CROSS_ORIGIN_AUTHENTICATION, Q.FAILED_CHANGE_PASSWORD, Q.FAILED_POST_CHANGE_PASSWORD_HOOK, Q.FAILED_CHANGE_PHONE_NUMBER, Q.FAILED_CHANGE_PASSWORD_REQUEST, Q.FAILED_CONNECTOR_PROVISIONING, Q.FAILED_CHANGE_USERNAME, Q.FAILED_DELEGATION, Q.FAILED_DEVICE_ACTIVATION, Q.FAILED_DEVICE_AUTHORIZATION_REQUEST, Q.USER_CANCELED_DEVICE_CONFIRMATION, Q.FAILED_USER_DELETION, Q.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, Q.FAILED_EXCHANGE_CUSTOM_TOKEN, Q.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, Q.FAILED_FEDERATED_LOGOUT, Q.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN, Q.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN, Q.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, Q.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, Q.FAILED_HOOK, Q.FAILED_IMPERSONATION, Q.FAILED_INVITE_ACCEPT, Q.FAILED_LOGOUT, Q.FLOWS_EXECUTION_COMPLETED, Q.FLOWS_EXECUTION_FAILED, Q.FAILED_SENDING_NOTIFICATION, Q.FORMS_SUBMISSION_FAILED, Q.FORMS_SUBMISSION_SUCCEEDED, Q.FAILED_LOGIN_INCORRECT_PASSWORD, Q.FAILED_PUSHED_AUTHORIZATION_REQUEST, Q.FAILED_POST_USER_REGISTRATION_HOOK, Q.FAILED_SIGNUP, Q.FAILED_SILENT_AUTH, Q.FAILED_LOGIN_INVALID_EMAIL_USERNAME, Q.FAILED_USERS_IMPORT, Q.FAILED_VERIFICATION_EMAIL, Q.FAILED_VERIFICATION_EMAIL_REQUEST, Q.EMAIL_VERIFICATION_CONFIRMED, Q.EMAIL_VERIFICATION_FAILED, Q.MFA_AUTH_FAILED, Q.MFA_AUTH_REJECTED, Q.MFA_AUTH_SUCCESS, Q.MFA_ENROLLMENT_COMPLETE, Q.TOO_MANY_MFA_FAILURES, Q.MFA_RECOVERY_FAILED, Q.MFA_RECOVERY_RATE_LIMIT_EXCEED, Q.MFA_RECOVERY_SUCCESS, Q.MFA_EMAIL_SENT, Q.EMAIL_VERIFICATION_SENT, Q.EMAIL_VERIFICATION_SEND_FAILURE, Q.PUSH_NOTIFICATION_SENT, Q.ERROR_SENDING_MFA_PUSH_NOTIFICATION, Q.MFA_SMS_SENT, Q.ERROR_SENDING_MFA_SMS, Q.MFA_VOICE_CALL_SUCCESS, Q.MFA_VOICE_CALL_FAILED, Q.SECOND_FACTOR_STARTED, Q.MFA_ENROLL_STARTED, Q.MFA_ENROLLMENT_FAILED, Q.GUARDIAN_TENANT_UPDATE, Q.UNENROLL_DEVICE_ACCOUNT, Q.UPDATE_DEVICE_ACCOUNT, Q.WEBAUTHN_CHALLENGE_FAILED, Q.WEBAUTHN_ENROLLMENT_FAILED, Q.FAILED_KMS_API_OPERATION, Q.SUCCESS_KMS_API_OPERATION, Q.KMS_KEY_STATE_CHANGED, Q.TOO_MANY_CALLS_TO_DELEGATION, Q.BLOCKED_IP_ADDRESS, Q.BLOCKED_ACCOUNT_IP, Q.BLOCKED_ACCOUNT_EMAIL, Q.INFORMATION, Q.MFA_REQUIRED, Q.MANAGEMENT_API_READ_OPERATION, Q.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, Q.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, Q.FAILED_OIDC_BACKCHANNEL_LOGOUT, Q.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT, Q.ORGANIZATION_MEMBER_ADDED, Q.PASSKEY_CHALLENGE_FAILED, Q.PASSKEY_CHALLENGE_STARTED, Q.PRE_LOGIN_ASSESSMENT, Q.BREACHED_PASSWORD, Q.BREACHED_PASSWORD_ON_RESET, Q.SUCCESS_RESOURCE_CLEANUP, Q.RICH_CONSENTS_ACCESS_ERROR, Q.SUCCESS_LOGIN, Q.SUCCESS_API_OPERATION, Q.FAILED_API_OPERATION, Q.SUCCESS_CHANGE_EMAIL, Q.SUCCESS_CROSS_ORIGIN_AUTHENTICATION, Q.SUCCESS_CHANGE_PASSWORD, Q.SUCCESS_CHANGE_PHONE_NUMBER, Q.SUCCESS_CHANGE_PASSWORD_REQUEST, Q.SUCCESS_CHANGE_USERNAME, Q.SUCCESS_CREDENTIAL_VALIDATION, Q.SUCCESS_DELEGATION, Q.SUCCESS_USER_DELETION, Q.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, Q.SUCCESS_EXCHANGE_CUSTOM_TOKEN, Q.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN, Q.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, Q.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, Q.SUCCESS_IMPERSONATION, Q.SUCCESSFULLY_ACCEPTED_USER_INVITE, Q.BREACHED_PASSWORD_ON_SIGNUP, Q.SUCCESS_LOGOUT, Q.SUCCESS_HOOK, Q.SUCCESS_PASSWORD_MIGRATION, Q.SUCCESS_REVOCATION, Q.SUCCESS_SIGNUP, Q.FAILED_SS_SSO_OPERATION, Q.INFORMATION_FROM_SS_SSO_OPERATION, Q.SUCCESS_SS_SSO_OPERATION, Q.SUCCESS_SILENT_AUTH, Q.SUCCESSFUL_SCIM_OPERATION, Q.SUCCESSFULLY_IMPORTED_USERS, Q.SUCCESS_VERIFICATION_EMAIL, Q.SUCCESS_VERIFICATION_EMAIL_REQUEST, Q.MAX_AMOUNT_OF_AUTHENTICATORS, Q.USER_LOGIN_BLOCK_RELEASED, Q.FAILED_UNIVERSAL_LOGOUT, Q.SUCCESSFUL_UNIVERSAL_LOGOUT, Q.WARNING_DURING_LOGIN, Q.WARNING_SENDING_NOTIFICATION, Q.WARNING_USER_MANAGEMENT, (() => {
 	let e = {};
 	for (let [t, n] of Object.entries(Q)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
 	return e;
 })();
-var Gi = e.object({
+var qi = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.object({ node: e.string().optional() }).optional()
-}), Ki = e.object({
+}), Ji = e.object({
 	country_code: e.string().length(2),
 	city_name: e.string(),
 	latitude: e.string(),
@@ -5582,7 +5585,7 @@ var Gi = e.object({
 	continent_code: e.string()
 });
 e.object({
-	type: Wi,
+	type: Ki,
 	date: e.string(),
 	description: e.string().optional(),
 	ip: e.string().optional(),
@@ -5600,63 +5603,63 @@ e.object({
 	strategy: e.string().optional(),
 	strategy_type: e.string().optional(),
 	hostname: e.string().optional(),
-	auth0_client: Gi.optional(),
+	auth0_client: qi.optional(),
 	log_id: e.string().optional(),
-	location_info: Ki.optional()
+	location_info: Ji.optional()
 }).extend({ log_id: e.string() });
-var qi = e.enum([
+var Yi = e.enum([
 	"http",
 	"eventbridge",
 	"eventgrid",
 	"splunk",
 	"datadog",
 	"sumo"
-]), Ji = e.enum([
+]), Xi = e.enum([
 	"active",
 	"paused",
 	"suspended"
-]), Yi = e.object({
+]), Zi = e.object({
 	type: e.string(),
 	name: e.string()
 });
 e.object({
 	name: e.string(),
-	type: qi,
-	status: Ji.optional(),
+	type: Yi,
+	status: Xi.optional(),
 	sink: e.record(e.string(), e.unknown()),
-	filters: e.array(Yi).optional(),
+	filters: e.array(Zi).optional(),
 	isPriority: e.boolean().optional()
 }).extend({
 	id: e.string(),
-	status: Ji,
+	status: Xi,
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-var Xi = e.enum([
+var Qi = e.enum([
 	"auth0",
 	"cognito",
 	"okta",
 	"oidc"
-]), Zi = e.object({
+]), $i = e.object({
 	domain: e.string(),
 	client_id: e.string(),
 	client_secret: e.string(),
 	audience: e.string().optional(),
 	scope: e.string().optional()
-}), Qi = e.object({
+}), ea = e.object({
 	id: e.string().optional(),
 	name: e.string(),
-	provider: Xi,
+	provider: Qi,
 	connection: e.string(),
 	enabled: e.boolean().default(!0),
-	credentials: Zi
+	credentials: $i
 });
 e.object({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(Qi.shape);
-var $i = e.object({
+}).extend(ea.shape);
+var ta = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	admin_notification_frequency: e.array(e.string()).optional(),
@@ -5665,13 +5668,13 @@ var $i = e.object({
 		"pre-user-registration": e.object({ shields: e.array(e.string()).optional() }).optional(),
 		"pre-change-password": e.object({ shields: e.array(e.string()).optional() }).optional()
 	}).optional()
-}), ea = e.object({
+}), na = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
 	mode: e.string().optional(),
 	max_attempts: e.number().optional()
-}), ta = e.object({
+}), ra = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
@@ -5685,10 +5688,10 @@ var $i = e.object({
 			rate: e.number().optional()
 		}).optional()
 	}).optional()
-}), na = e.object({
-	breached_password_detection: $i.optional(),
-	brute_force_protection: ea.optional(),
-	suspicious_ip_throttling: ta.optional()
+}), ia = e.object({
+	breached_password_detection: ta.optional(),
+	brute_force_protection: na.optional(),
+	suspicious_ip_throttling: ra.optional()
 });
 e.object({
 	id: e.string().optional(),
@@ -5701,14 +5704,14 @@ e.object({
 	created_at: e.string(),
 	updated_at: e.string()
 });
-var ra = e.object({
+var aa = e.object({
 	initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
 	initial_ip: e.string().describe("First IP address associated with this session"),
 	initial_asn: e.string().describe("First autonomous system number associated with this session"),
 	last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
 	last_ip: e.string().describe("Last IP address from which this user logged in"),
 	last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), ia = e.object({
+}), oa = e.object({
 	id: e.string(),
 	revoked_at: e.string().optional(),
 	used_at: e.string().optional(),
@@ -5716,7 +5719,7 @@ var ra = e.object({
 	expires_at: e.string().optional(),
 	login_session_id: e.string(),
 	idle_expires_at: e.string().optional(),
-	device: ra.describe("Metadata related to the device used in the session"),
+	device: aa.describe("Metadata related to the device used in the session"),
 	clients: e.array(e.string()).describe("List of client details for the session")
 });
 e.object({
@@ -5724,7 +5727,7 @@ e.object({
 	updated_at: e.string(),
 	authenticated_at: e.string(),
 	last_interaction_at: e.string()
-}).extend(ia.shape), e.object({
+}).extend(oa.shape), e.object({
 	kid: e.string().openapi({ description: "The key id of the signing key" }),
 	tenant_id: e.string().optional().openapi({ description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped." }),
 	cert: e.string().openapi({ description: "The public certificate of the signing key" }),
@@ -5741,7 +5744,7 @@ e.object({
 	connection: e.string().optional().openapi({ description: "The connection identifier associated with the key" }),
 	type: e.enum(["jwt_signing", "saml_encryption"]).openapi({ description: "The type of the signing key" })
 });
-var aa = e.object({
+var sa = e.object({
 	id: e.string().optional(),
 	audience: e.string().optional(),
 	friendly_name: e.string(),
@@ -5859,7 +5862,7 @@ var aa = e.object({
 		"shared_planetscale"
 	]).optional(),
 	d1_database_id: e.string().max(64).optional(),
-	attack_protection: na.optional(),
+	attack_protection: ia.optional(),
 	mfa: e.object({
 		policy: e.enum(["never", "always"]).default("never").optional(),
 		factors: e.object({
@@ -5890,37 +5893,42 @@ var aa = e.object({
 e.object({
 	created_at: e.string().nullable().transform((e) => e ?? ""),
 	updated_at: e.string().nullable().transform((e) => e ?? "")
-}).extend(aa.shape).extend({
+}).extend(sa.shape).extend({
 	id: e.string(),
 	is_control_plane: e.boolean().optional()
 });
-var oa = e.enum([
+var ca = e.enum([
 	"provision",
 	"seed",
 	"upgrade",
 	"backup",
-	"deprovision"
-]), sa = e.enum([
+	"deprovision",
+	"users_import"
+]), la = e.enum([
 	"pending",
 	"running",
 	"succeeded",
 	"failed",
 	"cancelled"
-]), ca = e.enum(["inline", "cloudflare-workflows"]);
+]), ua = e.string().max(64);
 e.object({
 	tenant_id: e.string().max(255).nullable().default(null),
 	rollout_id: e.string().max(255).nullable().optional(),
-	kind: oa,
-	engine: ca,
+	kind: ca,
+	engine: ua,
 	engine_instance_id: e.string().max(100).nullable().optional(),
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
-	initiated_by: e.string().max(255).nullable().optional()
+	initiated_by: e.string().max(255).nullable().optional(),
+	input: e.record(e.string(), e.unknown()).nullable().optional()
 }).extend({
 	id: e.string(),
-	status: sa,
+	status: la,
 	current_step: e.string().max(255).nullable().optional(),
 	error: e.string().nullable().optional(),
+	result: e.record(e.string(), e.unknown()).nullable().optional(),
+	claimed_by: e.string().max(255).nullable().optional(),
+	claim_expires_at: e.string().nullable().optional(),
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
@@ -5931,9 +5939,12 @@ e.object({
 	target_worker_version: !0,
 	target_database_version: !0,
 	error: !0,
+	result: !0,
+	claimed_by: !0,
+	claim_expires_at: !0,
 	finished_at: !0
 }).partial();
-var la = e.enum([
+var da = e.enum([
 	"started",
 	"succeeded",
 	"failed",
@@ -5944,18 +5955,46 @@ var la = e.enum([
 e.object({
 	operation_id: e.string().max(255),
 	step: e.string().max(255),
-	outcome: la,
+	outcome: da,
 	detail: e.record(e.string(), e.unknown()).nullable().optional(),
 	attempt: e.number().int().min(1).default(1)
 }).extend({
 	id: e.string(),
 	created_at: e.string()
 });
-var ua = e.enum([
+var fa = e.enum([
+	"pending",
+	"inserted",
+	"updated",
+	"failed",
+	"skipped"
+]);
+e.object({
+	operation_id: e.string().max(255),
+	seq: e.number().int().min(0),
+	payload: e.record(e.string(), e.unknown()),
+	status: fa.default("pending"),
+	error_code: e.string().max(64).nullable().optional(),
+	error_message: e.string().nullable().optional(),
+	error_path: e.string().max(255).nullable().optional(),
+	entity_id: e.string().max(255).nullable().optional()
+}).extend({
+	status: fa,
+	created_at: e.string(),
+	updated_at: e.string()
+}), e.object({
+	seq: e.number().int().min(0),
+	status: fa,
+	error_code: e.string().max(64).nullable().optional(),
+	error_message: e.string().nullable().optional(),
+	error_path: e.string().max(255).nullable().optional(),
+	entity_id: e.string().max(255).nullable().optional()
+});
+var pa = e.enum([
 	"upgrade",
 	"reseed",
 	"backup"
-]), da = e.enum([
+]), ma = e.enum([
 	"pending",
 	"canary",
 	"rolling",
@@ -5964,7 +6003,7 @@ var ua = e.enum([
 	"failed"
 ]);
 e.object({
-	kind: ua,
+	kind: pa,
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	wave_size: e.number().int().min(1).default(10),
@@ -5973,7 +6012,7 @@ e.object({
 	initiated_by: e.string().max(255).nullable().optional()
 }).extend({
 	id: e.string(),
-	status: da,
+	status: ma,
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
@@ -5995,7 +6034,7 @@ e.object({
 	code: e.string(),
 	state: e.string().optional()
 });
-var fa = e.object({
+var ha = e.object({
 	button_border_radius: e.number(),
 	button_border_weight: e.number(),
 	buttons_style: e.enum([
@@ -6013,7 +6052,7 @@ var fa = e.object({
 	show_widget_shadow: e.boolean(),
 	widget_border_weight: e.number(),
 	widget_corner_radius: e.number()
-}), pa = e.object({
+}), ga = e.object({
 	base_focus_color: e.string(),
 	base_hover_color: e.string(),
 	body_text: e.string(),
@@ -6040,7 +6079,7 @@ var fa = e.object({
 }), $ = e.object({
 	bold: e.boolean(),
 	size: e.number()
-}), ma = e.object({
+}), _a = e.object({
 	body_text: $,
 	buttons_text: $,
 	font_url: e.string(),
@@ -6050,7 +6089,7 @@ var fa = e.object({
 	reference_text_size: e.number(),
 	subtitle: $,
 	title: $
-}), ha = e.object({
+}), va = e.object({
 	background_color: e.string(),
 	background_image_url: e.string(),
 	page_layout: e.enum([
@@ -6063,7 +6102,7 @@ var fa = e.object({
 		"chip",
 		"none"
 	]).optional()
-}), ga = e.object({
+}), ya = e.object({
 	header_text_alignment: e.enum([
 		"center",
 		"left",
@@ -6080,12 +6119,12 @@ var fa = e.object({
 	social_buttons_layout: e.enum(["bottom", "top"])
 });
 e.object({
-	borders: fa,
-	colors: pa,
+	borders: ha,
+	colors: ga,
 	displayName: e.string(),
-	fonts: ma,
-	page_background: ha,
-	widget: ga
+	fonts: _a,
+	page_background: va,
+	widget: ya
 }).extend({ themeId: e.string() }), e.object({
 	universal_login_experience: e.enum(["new", "classic"]).default("new"),
 	identifier_first: e.boolean().default(!0),
@@ -6093,44 +6132,44 @@ e.object({
 	show_last_used_connection: e.boolean().default(!1),
 	webauthn_platform_first_factor: e.boolean()
 });
-var _a = e.object({
+var ba = e.object({
 	hosts: e.array(e.string()).optional(),
 	methods: e.array(e.string()).optional(),
 	path: e.string().default("/*"),
 	headers: e.record(e.string(), e.string()).optional(),
 	query: e.record(e.string(), e.string()).optional()
-}), va = e.object({
+}), xa = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
-}), ya = e.object({
+}), Sa = e.object({
 	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
-	match: _a,
-	handlers: e.array(va).min(1)
+	match: ba,
+	handlers: e.array(xa).min(1)
 });
-ya.extend({
+Sa.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), ya.partial().omit({
+}), Sa.partial().omit({
 	id: !0,
 	custom_domain_id: !0
 });
-var ba = e.object({
+var Ca = e.object({
 	scim: e.string(),
 	auth0: e.string()
-}), xa = e.object({
+}), wa = e.object({
 	connection_id: e.string(),
 	user_id_attribute: e.string().default("externalId"),
-	mapping: e.array(ba).default([])
+	mapping: e.array(Ca).default([])
 });
 e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(xa.shape);
-var Sa = e.object({
+}).extend(wa.shape);
+var Ta = e.object({
 	token_id: e.string(),
 	connection_id: e.string(),
 	token_hash: e.string(),
@@ -6140,20 +6179,20 @@ var Sa = e.object({
 e.object({
 	created_at: e.string(),
 	last_used_at: e.string().optional()
-}).extend(Sa.shape);
-var Ca = e.object({
+}).extend(Ta.shape);
+var Ea = e.object({
 	connection_id: e.string(),
 	external_id: e.string(),
 	user_id: e.string()
 });
-e.object({ created_at: e.string() }).extend(Ca.shape), e.object({
+e.object({ created_at: e.string() }).extend(Ea.shape), e.object({
 	name: e.string(),
 	enabled: e.boolean().optional().default(!0),
 	default_from_address: e.string().optional(),
 	credentials: e.record(e.string(), e.unknown()),
 	settings: e.object({}).optional()
 });
-var wa = e.enum([
+var Da = e.enum([
 	"verify_email",
 	"verify_email_by_code",
 	"reset_email",
@@ -6168,7 +6207,7 @@ var wa = e.enum([
 	"user_invitation"
 ]);
 e.object({
-	template: wa,
+	template: Da,
 	body: e.string(),
 	from: e.string(),
 	subject: e.string(),
@@ -6183,13 +6222,13 @@ e.object({
 	session_id: e.string().optional(),
 	organization: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: Ui.optional(),
+	auth_strategy: Gi.optional(),
 	user_id: e.string(),
 	client_id: e.string(),
 	expires_at: e.string().optional(),
 	idle_expires_at: e.string().optional(),
 	last_exchanged_at: e.string().optional(),
-	device: ra,
+	device: aa,
 	resource_servers: e.array(e.object({
 		audience: e.string(),
 		scopes: e.string()
@@ -6210,10 +6249,10 @@ e.object({
 	name: e.string(),
 	options: e.object({})
 });
-var Ta = e.object({
+var Oa = e.object({
 	value: e.string(),
 	description: e.string().optional()
-}), Ea = e.object({
+}), ka = e.object({
 	token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
 	enforce_policies: e.boolean().optional(),
 	allow_skipping_userinfo: e.boolean().optional(),
@@ -6221,11 +6260,11 @@ var Ta = e.object({
 	persist_client_authorization: e.boolean().optional(),
 	enable_introspection_endpoint: e.boolean().optional(),
 	mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
-}), Da = e.object({
+}), Aa = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	identifier: e.string(),
-	scopes: e.array(Ta).optional(),
+	scopes: e.array(Oa).optional(),
 	signing_alg: e.string().optional(),
 	signing_secret: e.string().optional(),
 	token_lifetime: e.number().default(86400),
@@ -6233,20 +6272,20 @@ var Ta = e.object({
 	skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
 	allow_offline_access: e.boolean().optional(),
 	verificationKey: e.string().optional(),
-	options: Ea.optional(),
+	options: ka.optional(),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional()
 }).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Da);
-var Oa = e.object({
+e.array(Aa);
+var ja = e.object({
 	role_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
 }).extend({ created_at: e.string() });
-e.array(Oa), e.object({
+e.array(ja), e.object({
 	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
 	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
 	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
@@ -6259,7 +6298,7 @@ e.array(Oa), e.object({
 	failed_logins: e.array(e.string()).optional(),
 	last_password_reset: e.string().optional()
 });
-var ka = e.object({
+var Ma = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
@@ -6268,8 +6307,8 @@ var ka = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(ka);
-var Aa = e.object({
+e.array(Ma);
+var Na = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -6278,8 +6317,8 @@ var Aa = e.object({
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
 });
-e.array(Aa);
-var ja = e.object({
+e.array(Na);
+var Pa = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
@@ -6287,8 +6326,8 @@ var ja = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(ja);
-var Ma = e.object({
+e.array(Pa);
+var Fa = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
@@ -6299,19 +6338,19 @@ var Ma = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Ma);
-var Na = e.object({
+e.array(Fa);
+var Ia = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), Pa = e.object({
+}).optional(), La = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), Fa = e.object({ client_credentials: e.object({
+}), Ra = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
@@ -6320,15 +6359,15 @@ e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: Na,
+	branding: Ia,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(Pa).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: Fa
+	enabled_connections: e.array(La).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: Ra
 }).extend(W.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
 });
-var Ia = e.object({
+var za = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
@@ -6341,7 +6380,7 @@ var Ia = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Ia), e.object({
+e.array(za), e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
 }).extend(W.shape).extend({ id: e.string() }), e.object({
@@ -6480,7 +6519,7 @@ e.array(Ia), e.object({
 	"passwordless",
 	"enterprise"
 ]);
-var La = e.object({
+var Ba = e.object({
 	cohort: e.string(),
 	sessions: e.number(),
 	active: e.array(e.number())
@@ -6489,9 +6528,9 @@ e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(La)
+	cohorts: e.array(Ba)
 });
-var Ra = e.object({
+var Va = e.object({
 	cohort: e.string(),
 	tokens: e.number(),
 	active: e.array(e.number())
@@ -6500,24 +6539,24 @@ e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(Ra)
+	cohorts: e.array(Va)
 });
-var za = e.object({
+var Ha = e.object({
 	name: e.string(),
 	type: e.string()
-}), Ba = e.object({
+}), Ua = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
 });
 e.object({
-	meta: e.array(za),
+	meta: e.array(Ha),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: Ba.optional()
+	statistics: Ua.optional()
 });
-var Va = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), Ha = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+var Wa = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), Ga = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
@@ -6525,11 +6564,11 @@ var Va = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.
 	}
 });
 e.object({
-	prompt: Va,
+	prompt: Wa,
 	language: e.string(),
-	custom_text: Ha
+	custom_text: Ga
 });
-var Ua = e.enum([
+var Ka = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -6537,9 +6576,9 @@ var Ua = e.enum([
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), Wa = e.object({
+]), qa = e.object({
 	user_id: e.string(),
-	type: Ua,
+	type: Ka,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
 	credential_id: e.string().optional(),
@@ -6550,7 +6589,7 @@ var Ua = e.enum([
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function Ga(t, n) {
+function Ja(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -6573,51 +6612,51 @@ function Ga(t, n) {
 		path: ["public_key"]
 	}));
 }
-Wa.superRefine(Ga), Wa.extend({
+qa.superRefine(Ja), qa.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(Ga), e.object({
+}).superRefine(Ja), e.object({
 	id: e.string().optional(),
 	created_at: e.string().datetime({ offset: !0 }).optional(),
 	updated_at: e.string().datetime({ offset: !0 }).optional()
 });
-function Ka(e) {
+function Ya(e) {
 	let t = atob(e), n = new Uint8Array(t.length);
 	for (let e = 0; e < t.length; e++) n[e] = t.charCodeAt(e);
 	return n;
 }
 //#endregion
 //#region ../../node_modules/.pnpm/nanoid@5.1.11/node_modules/nanoid/url-alphabet/index.js
-var qa = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Ja = (e = 21) => {
+var Xa = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Za = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += qa[n[e] & 63];
+	for (; e--;) t += Xa[n[e] & 63];
 	return t;
 };
 //#endregion
 //#region src/helpers.ts
-async function Ya(e) {
+async function Qa(e) {
 	let t = new DecompressionStream("deflate-raw"), n = new Uint8Array(e), r = new Blob([n]).stream().pipeThrough(t);
 	return new Uint8Array(await new Response(r).arrayBuffer());
 }
-async function Xa(e) {
-	let t = Ka(e.replace(/ /g, "+"));
+async function $a(e) {
+	let t = Ya(e.replace(/ /g, "+"));
 	try {
-		let e = await Ya(t);
+		let e = await Qa(t);
 		return new TextDecoder().decode(e);
 	} catch (e) {
 		return console.warn("Decompression failed, assuming data is not compressed:", e), new TextDecoder().decode(t);
 	}
 }
-async function Za(e) {
-	let t = await Xa(e), n = new an({
+async function eo(e) {
+	let t = await $a(e), n = new an({
 		attributeNamePrefix: "@_",
 		alwaysCreateTextNode: !0,
 		ignoreAttributes: !1
 	}).parse(t);
 	return r.parse(n);
 }
-function Qa(e) {
+function to(e) {
 	let t = e.certificates.map((e) => ({
 		"@_use": "signing",
 		KeyInfo: {
@@ -6691,8 +6730,8 @@ function Qa(e) {
 		attributeNamePrefix: "@_"
 	}).build(n);
 }
-async function $a(e, t) {
-	let n = e.notBefore || (/* @__PURE__ */ new Date()).toISOString(), r = e.notAfter || new Date(new Date(n).getTime() + 600 * 1e3).toISOString(), i = e.issueInstant || n, a = e.sessionNotOnOrAfter || r, o = e.responseId || `_${Ja()}`, s = e.assertionId || `_${Ja()}`, c = [{
+async function no(e, t) {
+	let n = e.notBefore || (/* @__PURE__ */ new Date()).toISOString(), r = e.notAfter || new Date(new Date(n).getTime() + 600 * 1e3).toISOString(), i = e.issueInstant || n, a = e.sessionNotOnOrAfter || r, o = e.responseId || `_${Za()}`, s = e.assertionId || `_${Za()}`, c = [{
 		"samlp:Response": [
 			{ "saml:Issuer": [{ "#text": e.issuer }] },
 			{ "samlp:Status": [{
@@ -6873,7 +6912,7 @@ async function $a(e, t) {
 }
 //#endregion
 //#region src/signers/http.ts
-var eo = class {
+var ro = class {
 	signUrl;
 	constructor(e) {
 		this.signUrl = e;
@@ -6893,4 +6932,4 @@ var eo = class {
 	}
 };
 //#endregion
-export { eo as HttpSamlSigner, Qa as createSamlMetadata, $a as createSamlResponse, s as dsSignatureSchema, Xa as inflateDecompress, Ya as inflateRaw, Za as parseSamlRequestQuery, n as samlIssuerSchema, i as samlMetadataResponseSchema, r as samlRequestSchema, c as samlResponseJsonSchema };
+export { ro as HttpSamlSigner, to as createSamlMetadata, no as createSamlResponse, s as dsSignatureSchema, $a as inflateDecompress, Qa as inflateRaw, eo as parseSamlRequestQuery, n as samlIssuerSchema, i as samlMetadataResponseSchema, r as samlRequestSchema, c as samlResponseJsonSchema };