@authhero/saml 0.6.4 → 0.6.6

package/dist/saml.mjs

@@ -2688,7 +2688,7 @@ var N = class {
 		description: "style= attribute containing javascript: (e.g. background:url(javascript:...))",
 		pattern: /style\s*=[\s\S]{0,60}javascript\s*:/i
 	}
-], L = [
+], xt = [
 	{
 		id: "sql-block-comment-open",
 		description: "SQL block comment open: /* ... */ — unusual in legitimate user text",
@@ -2764,7 +2764,7 @@ var N = class {
 		description: "INFORMATION_SCHEMA — reconnaissance query for table/column enumeration",
 		pattern: /\bINFORMATION_SCHEMA\b/i
 	}
-], xt = [
+], St = [
 	{
 		id: "shell-path-traversal-unix",
 		description: "Unix path traversal: ../  — climbing the directory tree",
@@ -2855,7 +2855,7 @@ var N = class {
 		description: "curl/wget with URL or flags — can exfiltrate data or download payloads",
 		pattern: /\b(?:curl|wget)\s+(?:https?:\/\/|ftp:\/\/|-)/i
 	}
-], St = [
+], Ct = [
 	{
 		id: "redos-nested-quantifier-plus",
 		description: "Nested + quantifier inside a group with outer quantifier: (a+)+, (.+b)*, etc.",
@@ -2896,71 +2896,71 @@ var N = class {
 		description: "Long alternation with many similar branches — polynomial backtracking risk",
 		pattern: /\([^)]{0,200}(?:\|[^|)]{0,50}){9,}\)/
 	}
-], R = "[\"'\\s]*:", Ct = [
+], L = "[\"'\\s]*:", wt = [
 	{
 		id: "nosql-where-operator",
 		description: "$where — executes arbitrary JavaScript server-side in MongoDB",
-		pattern: RegExp(`\\$where${R}`, "i")
+		pattern: RegExp(`\\$where${L}`, "i")
 	},
 	{
 		id: "nosql-ne-operator",
 		description: "$ne — \"not equal\" operator used to bypass equality checks",
-		pattern: RegExp(`\\$ne${R}`, "i")
+		pattern: RegExp(`\\$ne${L}`, "i")
 	},
 	{
 		id: "nosql-gt-operator",
 		description: "$gt — \"greater than\" used to bypass password/value checks",
-		pattern: RegExp(`\\$gte?${R}`, "i")
+		pattern: RegExp(`\\$gte?${L}`, "i")
 	},
 	{
 		id: "nosql-lt-operator",
 		description: "$lt / $lte — \"less than\" bypass variants",
-		pattern: RegExp(`\\$lte?${R}`, "i")
+		pattern: RegExp(`\\$lte?${L}`, "i")
 	},
 	{
 		id: "nosql-regex-operator",
 		description: "$regex — can be used to extract data character by character (blind injection)",
-		pattern: RegExp(`\\$regex${R}`, "i")
+		pattern: RegExp(`\\$regex${L}`, "i")
 	},
 	{
 		id: "nosql-or-operator",
 		description: "$or — logical OR; used to create always-true conditions",
-		pattern: RegExp(`\\$or${R}\\s*\\[`, "i")
+		pattern: RegExp(`\\$or${L}\\s*\\[`, "i")
 	},
 	{
 		id: "nosql-and-operator",
 		description: "$and — logical AND operator injection",
-		pattern: RegExp(`\\$and${R}\\s*\\[`, "i")
+		pattern: RegExp(`\\$and${L}\\s*\\[`, "i")
 	},
 	{
 		id: "nosql-nor-operator",
 		description: "$nor — logical NOR operator injection",
-		pattern: RegExp(`\\$nor${R}\\s*\\[`, "i")
+		pattern: RegExp(`\\$nor${L}\\s*\\[`, "i")
 	},
 	{
 		id: "nosql-exists-operator",
 		description: "$exists — can enumerate fields to determine schema",
-		pattern: RegExp(`\\$exists${R}`, "i")
+		pattern: RegExp(`\\$exists${L}`, "i")
 	},
 	{
 		id: "nosql-in-operator",
 		description: "$in — matches any value in a list; can enumerate values",
-		pattern: RegExp(`\\$in${R}\\s*\\[`, "i")
+		pattern: RegExp(`\\$in${L}\\s*\\[`, "i")
 	},
 	{
 		id: "nosql-expr-operator",
 		description: "$expr — allows aggregation expressions in queries (MongoDB 3.6+)",
-		pattern: RegExp(`\\$expr${R}`, "i")
+		pattern: RegExp(`\\$expr${L}`, "i")
 	},
 	{
 		id: "nosql-function-operator",
 		description: "$function — executes arbitrary JavaScript in MongoDB 4.4+",
-		pattern: RegExp(`\\$function${R}`, "i")
+		pattern: RegExp(`\\$function${L}`, "i")
 	},
 	{
 		id: "nosql-accumulator-operator",
 		description: "$accumulator — custom aggregation with arbitrary JS execution",
-		pattern: RegExp(`\\$accumulator${R}`, "i")
+		pattern: RegExp(`\\$accumulator${L}`, "i")
 	},
 	{
 		id: "nosql-proto-pollution",
@@ -2977,7 +2977,7 @@ var N = class {
 		description: "[\"__proto__\"] — bracket-notation prototype pollution",
 		pattern: /\[["']__proto__["']\]/
 	}
-], wt = [
+], Tt = [
 	{
 		id: "log-crlf-injection",
 		description: "CRLF injection: literal \\r or \\n embeds fake log lines",
@@ -3038,7 +3038,7 @@ var N = class {
 		description: "ANSI escape sequence: ESC[ — can manipulate terminal output when logs are tailed",
 		pattern: /\x1b\[/
 	}
-], Tt = [
+], Et = [
 	{
 		id: "sql-line-comment",
 		description: "SQL line comment: -- followed by whitespace or end of string",
@@ -3054,22 +3054,22 @@ var N = class {
 		description: "Hex-encoded string injection: 0x41414141 style (MySQL)",
 		pattern: /\b0x[0-9a-f]{4,}/i
 	}
-], Et = [...L, ...Tt];
-F.label = "HTML", I.label = "XML", bt.label = "SVG", L.label = "SQL", Et.label = "SQL-STRICT", xt.label = "SHELL", St.label = "REDOS", Ct.label = "NOSQL", wt.label = "LOG", Object.freeze({
+], Dt = [...xt, ...Et];
+F.label = "HTML", I.label = "XML", bt.label = "SVG", xt.label = "SQL", Dt.label = "SQL-STRICT", St.label = "SHELL", Ct.label = "REDOS", wt.label = "NOSQL", Tt.label = "LOG", Object.freeze({
 	HTML: F,
 	XML: I,
 	SVG: bt,
-	SQL: L,
-	"SQL-STRICT": Et,
-	SHELL: xt,
-	REDOS: St,
-	NOSQL: Ct,
-	LOG: wt
+	SQL: xt,
+	"SQL-STRICT": Dt,
+	SHELL: St,
+	REDOS: Ct,
+	NOSQL: wt,
+	LOG: Tt
 });
-function Dt(e) {
+function Ot(e) {
 	if (typeof e != "string") throw TypeError(`is-unsafe: first argument must be a string, got ${typeof e}`);
 }
-function Ot(e) {
+function kt(e) {
 	if (!(e instanceof RegExp)) {
 		if (Array.isArray(e)) {
 			if (e.length === 0) throw TypeError("is-unsafe: context must not be an empty array");
@@ -3081,7 +3081,7 @@ function Ot(e) {
 		throw TypeError(`is-unsafe: second argument must be a PatternList (e.g. HTML), an array of PatternLists (e.g. [HTML, XML]), or a RegExp. Got: ${typeof e}`);
 	}
 }
-function kt(e) {
+function At(e) {
 	return e instanceof RegExp ? {
 		lists: null,
 		regex: e
@@ -3093,7 +3093,7 @@ function kt(e) {
 		regex: null
 	};
 }
-function At(e, t) {
+function jt(e, t) {
 	let n = t.label ?? "CUSTOM";
 	for (let r of t) if (r.pattern.test(e)) return {
 		context: n,
@@ -3103,16 +3103,16 @@ function At(e, t) {
 	};
 	return null;
 }
-function jt(e, t) {
-	Dt(e), Ot(t);
-	let { lists: n, regex: r } = kt(t);
+function Mt(e, t) {
+	Ot(e), kt(t);
+	let { lists: n, regex: r } = At(t);
 	if (r) return r.test(e);
-	for (let t of n) if (At(e, t) !== null) return !0;
+	for (let t of n) if (jt(e, t) !== null) return !0;
 	return !1;
 }
 //#endregion
 //#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/OrderedObjParser.js
-function Mt(e, t) {
+function Nt(e, t) {
 	if (!e) return {};
 	let n = t.attributesGroupName ? e[t.attributesGroupName] : e;
 	if (!n) return {};
@@ -3123,7 +3123,7 @@ function Mt(e, t) {
 	} else r[e] = n[e];
 	return r;
 }
-function Nt(e) {
+function Pt(e) {
 	if (!e || typeof e != "string") return;
 	let t = e.indexOf(":");
 	if (t !== -1 && t > 0) {
@@ -3131,9 +3131,9 @@ function Nt(e) {
 		if (n !== "xmlns") return n;
 	}
 }
-var Pt = class {
+var Ft = class {
 	constructor(e, t) {
-		this.options = e, this.currentNode = null, this.tagsNodeStack = [], this.parseXml = zt, this.parseTextData = Ft, this.resolveNameSpace = It, this.buildAttributesMap = Rt, this.isItStopNode = Ut, this.replaceEntitiesValue = Vt, this.readStopNodeData = qt, this.saveTextToParentTag = Ht, this.addChild = Bt, this.ignoreAttributesFn = _t(this.options.ignoreAttributes), this.entityExpansionCount = 0, this.currentExpandedLength = 0;
+		this.options = e, this.currentNode = null, this.tagsNodeStack = [], this.parseXml = Bt, this.parseTextData = It, this.resolveNameSpace = Lt, this.buildAttributesMap = zt, this.isItStopNode = Wt, this.replaceEntitiesValue = Ht, this.readStopNodeData = Jt, this.saveTextToParentTag = Ut, this.addChild = Vt, this.ignoreAttributesFn = _t(this.options.ignoreAttributes), this.entityExpansionCount = 0, this.currentExpandedLength = 0;
 		let n = { ...Te };
 		this.options.entityDecoder ? this.entityDecoder = this.options.entityDecoder : (typeof this.options.htmlEntities == "object" ? n = this.options.htmlEntities : this.options.htmlEntities === !0 && (n = {
 			...Ee,
@@ -3149,7 +3149,7 @@ var Pt = class {
 				maxExpandedLength: this.options.processEntities.maxExpandedLength,
 				applyLimitsTo: this.options.processEntities.appliesTo
 			},
-			onInputEntity: (e, t) => jt(t, [F, I]) ? x.BLOCK : x.ALLOW
+			onInputEntity: (e, t) => Mt(t, [F, I]) ? x.BLOCK : x.ALLOW
 		})), this.matcher = new P(), this.readonlyMatcher = this.matcher.readOnly(), this.isCurrentNodeStopNode = !1, this.stopNodeExpressionsSet = new vt();
 		let r = this.options.stopNodes;
 		if (r && r.length > 0) {
@@ -3161,15 +3161,15 @@ var Pt = class {
 		}
 	}
 };
-function Ft(e, t, n, r, i, a, o) {
+function It(e, t, n, r, i, a, o) {
 	let s = this.options;
 	if (e !== void 0 && (s.trimValues && !r && (e = e.trim()), e.length > 0)) {
 		o || (e = this.replaceEntitiesValue(e, t, n));
 		let r = s.jPath ? n.toString() : n, c = s.tagValueProcessor(t, e, r, i, a);
-		return c == null ? e : typeof c != typeof e || c !== e ? c : s.trimValues || e.trim() === e ? Jt(e, s.parseTagValue, s.numberParseOptions) : e;
+		return c == null ? e : typeof c != typeof e || c !== e ? c : s.trimValues || e.trim() === e ? Yt(e, s.parseTagValue, s.numberParseOptions) : e;
 	}
 }
-function It(e) {
+function Lt(e) {
 	if (this.options.removeNSPrefix) {
 		let t = e.split(":"), n = e.charAt(0) === "/" ? "/" : "";
 		if (t[0] === "xmlns") return "";
@@ -3177,11 +3177,11 @@ function It(e) {
 	}
 	return e;
 }
-var Lt = /* @__PURE__ */ RegExp("([^\\s=]+)\\s*(=\\s*(['\"])([\\s\\S]*?)\\3)?", "gm");
-function Rt(e, t, n, r = !1) {
+var Rt = /* @__PURE__ */ RegExp("([^\\s=]+)\\s*(=\\s*(['\"])([\\s\\S]*?)\\3)?", "gm");
+function zt(e, t, n, r = !1) {
 	let i = this.options;
 	if (r === !0 || i.ignoreAttributes !== !0 && typeof e == "string") {
-		let r = d(e, Lt), a = r.length, o = {}, s = Array(a), c = !1, l = {};
+		let r = d(e, Rt), a = r.length, o = {}, s = Array(a), c = !1, l = {};
 		for (let e = 0; e < a; e++) {
 			let t = this.resolveNameSpace(r[e][1]), a = r[e][4];
 			if (t.length && a !== void 0) {
@@ -3195,9 +3195,9 @@ function Rt(e, t, n, r = !1) {
 			let t = this.resolveNameSpace(r[e][1]);
 			if (this.ignoreAttributesFn(t, u)) continue;
 			let n = i.attributeNamePrefix + t;
-			if (t.length) if (i.transformAttributeName && (n = i.transformAttributeName(n)), n = Xt(n, i), r[e][4] !== void 0) {
+			if (t.length) if (i.transformAttributeName && (n = i.transformAttributeName(n)), n = Zt(n, i), r[e][4] !== void 0) {
 				let r = s[e], a = i.attributeValueProcessor(t, r, u);
-				a == null ? o[n] = r : typeof a != typeof r || a !== r ? o[n] = a : o[n] = Jt(r, i.parseAttributeValue, i.numberParseOptions), f = !0;
+				a == null ? o[n] = r : typeof a != typeof r || a !== r ? o[n] = a : o[n] = Yt(r, i.parseAttributeValue, i.numberParseOptions), f = !0;
 			} else i.allowBooleanAttributes && (o[n] = !0, f = !0);
 		}
 		if (!f) return;
@@ -3208,7 +3208,7 @@ function Rt(e, t, n, r = !1) {
 		return o;
 	}
 }
-var zt = function(e) {
+var Bt = function(e) {
 	e = e.replace(/\r\n?/g, "\n");
 	let t = new D("!xml"), n = t, r = "";
 	this.matcher.reset(), this.entityDecoder.reset(), this.entityExpansionCount = 0, this.currentExpandedLength = 0;
@@ -3216,17 +3216,17 @@ var zt = function(e) {
 	for (let s = 0; s < o; s++) if (e[s] === "<") {
 		let c = e.charCodeAt(s + 1);
 		if (c === 47) {
-			let t = z(e, ">", s, "Closing Tag is not closed."), a = e.substring(s + 2, t).trim();
+			let t = R(e, ">", s, "Closing Tag is not closed."), a = e.substring(s + 2, t).trim();
 			if (i.removeNSPrefix) {
 				let e = a.indexOf(":");
 				e !== -1 && (a = a.substr(e + 1));
 			}
-			a = Yt(i.transformTagName, a, "", i).tagName, n && (r = this.saveTextToParentTag(r, n, this.readonlyMatcher));
+			a = Xt(i.transformTagName, a, "", i).tagName, n && (r = this.saveTextToParentTag(r, n, this.readonlyMatcher));
 			let o = this.matcher.getCurrentTag();
 			if (a && i.unpairedTagsSet.has(a)) throw Error(`Unpaired tag can not be used as closing tag: </${a}>`);
 			o && i.unpairedTagsSet.has(o) && (this.matcher.pop(), this.tagsNodeStack.pop()), this.matcher.pop(), this.isCurrentNodeStopNode = !1, n = this.tagsNodeStack.pop(), r = "", s = t;
 		} else if (c === 63) {
-			let t = Kt(e, s, !1, "?>");
+			let t = qt(e, s, !1, "?>");
 			if (!t) throw Error("Pi Tag is not closed.");
 			r = this.saveTextToParentTag(r, n, this.readonlyMatcher);
 			let o = this.buildAttributesMap(t.tagExp, this.matcher, t.tagName, !0);
@@ -3240,7 +3240,7 @@ var zt = function(e) {
 			}
 			s = t.closeIndex + 1;
 		} else if (c === 33 && e.charCodeAt(s + 2) === 45 && e.charCodeAt(s + 3) === 45) {
-			let t = z(e, "-->", s + 4, "Comment is not closed.");
+			let t = R(e, "-->", s + 4, "Comment is not closed.");
 			if (i.commentPropName) {
 				let a = e.substring(s + 4, t - 2);
 				r = this.saveTextToParentTag(r, n, this.readonlyMatcher), n.add(i.commentPropName, [{ [i.textNodeName]: a }]);
@@ -3250,25 +3250,25 @@ var zt = function(e) {
 			let t = a.readDocType(e, s);
 			this.entityDecoder.addInputEntities(t.entities), s = t.i;
 		} else if (c === 33 && e.charCodeAt(s + 2) === 91) {
-			let t = z(e, "]]>", s, "CDATA is not closed.") - 2, a = e.substring(s + 9, t);
+			let t = R(e, "]]>", s, "CDATA is not closed.") - 2, a = e.substring(s + 9, t);
 			r = this.saveTextToParentTag(r, n, this.readonlyMatcher);
 			let o = this.parseTextData(a, n.tagname, this.readonlyMatcher, !0, !1, !0, !0);
 			o ??= "", i.cdataPropName ? n.add(i.cdataPropName, [{ [i.textNodeName]: a }]) : n.add(i.textNodeName, o), s = t + 2;
 		} else {
-			let a = Kt(e, s, i.removeNSPrefix);
+			let a = qt(e, s, i.removeNSPrefix);
 			if (!a) {
 				let t = e.substring(Math.max(0, s - 50), Math.min(o, s + 50));
 				throw Error(`readTagExp returned undefined at position ${s}. Context: "${t}"`);
 			}
 			let c = a.tagName, l = a.rawTagName, u = a.tagExp, d = a.attrExpPresent, f = a.closeIndex;
-			if ({tagName: c, tagExp: u} = Yt(i.transformTagName, c, u, i), i.strictReservedNames && (c === i.commentPropName || c === i.cdataPropName || c === i.textNodeName || c === i.attributesGroupName)) throw Error(`Invalid tag name: ${c}`);
+			if ({tagName: c, tagExp: u} = Xt(i.transformTagName, c, u, i), i.strictReservedNames && (c === i.commentPropName || c === i.cdataPropName || c === i.textNodeName || c === i.attributesGroupName)) throw Error(`Invalid tag name: ${c}`);
 			n && r && n.tagname !== "!xml" && (r = this.saveTextToParentTag(r, n, this.readonlyMatcher, !1));
 			let p = n;
 			p && i.unpairedTagsSet.has(p.tagname) && (n = this.tagsNodeStack.pop(), this.matcher.pop());
 			let m = !1;
 			u.length > 0 && u.lastIndexOf("/") === u.length - 1 && (m = !0, c[c.length - 1] === "/" ? (c = c.substr(0, c.length - 1), u = c) : u = u.substr(0, u.length - 1), d = c !== u);
 			let h = null, g;
-			g = Nt(l), c !== t.tagname && this.matcher.push(c, {}, g), c !== u && d && (h = this.buildAttributesMap(u, this.matcher, c), h && Mt(h, i)), c !== t.tagname && (this.isCurrentNodeStopNode = this.isItStopNode());
+			g = Pt(l), c !== t.tagname && this.matcher.push(c, {}, g), c !== u && d && (h = this.buildAttributesMap(u, this.matcher, c), h && Nt(h, i)), c !== t.tagname && (this.isCurrentNodeStopNode = this.isItStopNode());
 			let _ = s;
 			if (this.isCurrentNodeStopNode) {
 				let t = "";
@@ -3283,7 +3283,7 @@ var zt = function(e) {
 				h && (r[":@"] = h), r.add(i.textNodeName, t), this.matcher.pop(), this.isCurrentNodeStopNode = !1, this.addChild(n, r, this.readonlyMatcher, _);
 			} else {
 				if (m) {
-					({tagName: c, tagExp: u} = Yt(i.transformTagName, c, u, i));
+					({tagName: c, tagExp: u} = Xt(i.transformTagName, c, u, i));
 					let e = new D(c);
 					h && (e[":@"] = h), this.addChild(n, e, this.readonlyMatcher, _), this.matcher.pop(), this.isCurrentNodeStopNode = !1;
 				} else if (i.unpairedTagsSet.has(c)) {
@@ -3301,12 +3301,12 @@ var zt = function(e) {
 	} else r += e[s];
 	return t.child;
 };
-function Bt(e, t, n, r) {
+function Vt(e, t, n, r) {
 	this.options.captureMetaData || (r = void 0);
 	let i = this.options.jPath ? n.toString() : n, a = this.options.updateTag(t.tagname, i, t[":@"]);
 	a === !1 || (typeof a == "string" && (t.tagname = a), e.addChild(t, r));
 }
-function Vt(e, t, n) {
+function Ht(e, t, n) {
 	let r = this.options.processEntities;
 	if (!r || !r.enabled) return e;
 	if (r.allowedTags) {
@@ -3319,13 +3319,13 @@ function Vt(e, t, n) {
 	}
 	return this.entityDecoder.decode(e);
 }
-function Ht(e, t, n, r) {
+function Ut(e, t, n, r) {
 	return e &&= (r === void 0 && (r = t.child.length === 0), e = this.parseTextData(e, t.tagname, n, !1, t[":@"] ? Object.keys(t[":@"]).length !== 0 : !1, r), e !== void 0 && e !== "" && t.add(this.options.textNodeName, e), ""), e;
 }
-function Ut() {
+function Wt() {
 	return this.stopNodeExpressionsSet.size === 0 ? !1 : this.matcher.matchesAny(this.stopNodeExpressionsSet);
 }
-function Wt(e, t, n = ">") {
+function Gt(e, t, n = ">") {
 	let r = 0, i = e.length, a = n.charCodeAt(0), o = n.length > 1 ? n.charCodeAt(1) : -1, s = "", c = t;
 	for (let n = t; n < i; n++) {
 		let t = e.charCodeAt(n);
@@ -3343,18 +3343,18 @@ function Wt(e, t, n = ">") {
 		else t === 9 && !r && (s += e.substring(c, n) + " ", c = n + 1);
 	}
 }
-function z(e, t, n, r) {
+function R(e, t, n, r) {
 	let i = e.indexOf(t, n);
 	if (i === -1) throw Error(r);
 	return i + t.length - 1;
 }
-function Gt(e, t, n, r) {
+function Kt(e, t, n, r) {
 	let i = e.indexOf(t, n);
 	if (i === -1) throw Error(r);
 	return i;
 }
-function Kt(e, t, n, r = ">") {
-	let i = Wt(e, t + 1, r);
+function qt(e, t, n, r = ">") {
+	let i = Gt(e, t + 1, r);
 	if (!i) return;
 	let a = i.data, o = i.index, s = a.search(/\s/), c = a, l = !0;
 	s !== -1 && (c = a.substring(0, s), a = a.substring(s + 1).trimStart());
@@ -3371,51 +3371,51 @@ function Kt(e, t, n, r = ">") {
 		rawTagName: u
 	};
 }
-function qt(e, t, n) {
+function Jt(e, t, n) {
 	let r = n, i = 1, a = e.length;
 	for (; n < a; n++) if (e[n] === "<") {
 		let a = e.charCodeAt(n + 1);
 		if (a === 47) {
-			let a = Gt(e, ">", n, `${t} is not closed`);
+			let a = Kt(e, ">", n, `${t} is not closed`);
 			if (e.substring(n + 2, a).trim() === t && (i--, i === 0)) return {
 				tagContent: e.substring(r, n),
 				i: a
 			};
 			n = a;
-		} else if (a === 63) n = z(e, "?>", n + 1, "StopNode is not closed.");
-		else if (a === 33 && e.charCodeAt(n + 2) === 45 && e.charCodeAt(n + 3) === 45) n = z(e, "-->", n + 3, "StopNode is not closed.");
-		else if (a === 33 && e.charCodeAt(n + 2) === 91) n = z(e, "]]>", n, "StopNode is not closed.") - 2;
+		} else if (a === 63) n = R(e, "?>", n + 1, "StopNode is not closed.");
+		else if (a === 33 && e.charCodeAt(n + 2) === 45 && e.charCodeAt(n + 3) === 45) n = R(e, "-->", n + 3, "StopNode is not closed.");
+		else if (a === 33 && e.charCodeAt(n + 2) === 91) n = R(e, "]]>", n, "StopNode is not closed.") - 2;
 		else {
-			let r = Kt(e, n, !1);
+			let r = qt(e, n, !1);
 			r && ((r && r.tagName) === t && r.tagExp[r.tagExp.length - 1] !== "/" && i++, n = r.closeIndex);
 		}
 	}
 }
-function Jt(e, t, n) {
+function Yt(e, t, n) {
 	if (t && typeof e == "string") {
 		let t = e.trim();
 		return t === "true" ? !0 : t === "false" ? !1 : ft(e, n);
 	} else if (p(e)) return e;
 	else return "";
 }
-function Yt(e, t, n, r) {
+function Xt(e, t, n, r) {
 	if (e) {
 		let r = e(t);
 		n === t && (n = r), t = r;
 	}
-	return t = Xt(t, r), {
+	return t = Zt(t, r), {
 		tagName: t,
 		tagExp: n
 	};
 }
-function Xt(e, t) {
+function Zt(e, t) {
 	if (h.includes(e)) throw Error(`[SECURITY] Invalid name: "${e}" is a reserved JavaScript keyword that could cause prototype pollution`);
 	return m.includes(e) ? t.onDangerousProperty(e) : e;
 }
 //#endregion
 //#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/node2json.js
-var Zt = D.getMetaDataSymbol();
-function Qt(e, t) {
+var Qt = D.getMetaDataSymbol();
+function $t(e, t) {
 	if (!e || typeof e != "object") return {};
 	if (!t) return e;
 	let n = {};
@@ -3425,22 +3425,22 @@ function Qt(e, t) {
 	} else n[r] = e[r];
 	return n;
 }
-function $t(e, t, n, r) {
-	return en(e, t, n, r);
-}
 function en(e, t, n, r) {
+	return tn(e, t, n, r);
+}
+function tn(e, t, n, r) {
 	let i, a = {};
 	for (let o = 0; o < e.length; o++) {
-		let s = e[o], c = tn(s);
+		let s = e[o], c = nn(s);
 		if (c !== void 0 && c !== t.textNodeName) {
-			let e = Qt(s[":@"] || {}, t.attributeNamePrefix);
+			let e = $t(s[":@"] || {}, t.attributeNamePrefix);
 			n.push(c, e);
 		}
 		if (c === t.textNodeName) i === void 0 ? i = s[c] : i += "" + s[c];
 		else if (c === void 0) continue;
 		else if (s[c]) {
-			let e = en(s[c], t, n, r), i = rn(e, t);
-			if (Object.keys(e).length === 0 && t.alwaysCreateTextNode && (e[t.textNodeName] = ""), s[":@"] ? nn(e, s[":@"], r, t) : Object.keys(e).length === 1 && e[t.textNodeName] !== void 0 && !t.alwaysCreateTextNode ? e = e[t.textNodeName] : Object.keys(e).length === 0 && (t.alwaysCreateTextNode ? e[t.textNodeName] = "" : e = ""), s[Zt] !== void 0 && typeof e == "object" && e && (e[Zt] = s[Zt]), a[c] !== void 0 && Object.prototype.hasOwnProperty.call(a, c)) Array.isArray(a[c]) || (a[c] = [a[c]]), a[c].push(e);
+			let e = tn(s[c], t, n, r), i = an(e, t);
+			if (Object.keys(e).length === 0 && t.alwaysCreateTextNode && (e[t.textNodeName] = ""), s[":@"] ? rn(e, s[":@"], r, t) : Object.keys(e).length === 1 && e[t.textNodeName] !== void 0 && !t.alwaysCreateTextNode ? e = e[t.textNodeName] : Object.keys(e).length === 0 && (t.alwaysCreateTextNode ? e[t.textNodeName] = "" : e = ""), s[Qt] !== void 0 && typeof e == "object" && e && (e[Qt] = s[Qt]), a[c] !== void 0 && Object.prototype.hasOwnProperty.call(a, c)) Array.isArray(a[c]) || (a[c] = [a[c]]), a[c].push(e);
 			else {
 				let n = t.jPath ? r.toString() : r;
 				t.isArray(c, n, i) ? a[c] = [e] : a[c] = e;
@@ -3450,14 +3450,14 @@ function en(e, t, n, r) {
 	}
 	return typeof i == "string" ? i.length > 0 && (a[t.textNodeName] = i) : i !== void 0 && (a[t.textNodeName] = i), a;
 }
-function tn(e) {
+function nn(e) {
 	let t = Object.keys(e);
 	for (let e = 0; e < t.length; e++) {
 		let n = t[e];
 		if (n !== ":@") return n;
 	}
 }
-function nn(e, t, n, r) {
+function rn(e, t, n, r) {
 	if (t) {
 		let i = Object.keys(t), a = i.length;
 		for (let o = 0; o < a; o++) {
@@ -3466,13 +3466,13 @@ function nn(e, t, n, r) {
 		}
 	}
 }
-function rn(e, t) {
+function an(e, t) {
 	let { textNodeName: n } = t, r = Object.keys(e).length;
 	return !!(r === 0 || r === 1 && (e[n] || typeof e[n] == "boolean" || e[n] === 0));
 }
 //#endregion
 //#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlparser/XMLParser.js
-var an = class {
+var on = class {
 	constructor(e) {
 		this.externalEntities = {}, this.options = Le(e);
 	}
@@ -3484,8 +3484,8 @@ var an = class {
 			let n = _(e, t);
 			if (n !== !0) throw Error(`${n.err.msg}:${n.err.line}:${n.err.col}`);
 		}
-		let n = new Pt(this.options, this.externalEntities), r = n.parseXml(e);
-		return this.options.preserveOrder || r === void 0 ? r : $t(r, this.options, n.matcher, n.readonlyMatcher);
+		let n = new Ft(this.options, this.externalEntities), r = n.parseXml(e);
+		return this.options.preserveOrder || r === void 0 ? r : en(r, this.options, n.matcher, n.readonlyMatcher);
 	}
 	addEntity(e, t) {
 		if (t.indexOf("&") !== -1) throw Error("Entity value can't have '&'");
@@ -3499,22 +3499,22 @@ var an = class {
 };
 //#endregion
 //#region ../../node_modules/.pnpm/fast-xml-builder@1.3.0/node_modules/fast-xml-builder/src/util.js
-function on(e) {
+function sn(e) {
 	return String(e).replace(/--/g, "- -").replace(/--/g, "- -").replace(/-$/, "- ");
 }
-function sn(e) {
+function cn(e) {
 	return String(e).replace(/\]\]>/g, "]]]]><![CDATA[>");
 }
-function B(e) {
+function z(e) {
 	return String(e).replace(/"/g, "&quot;").replace(/'/g, "&apos;");
 }
 //#endregion
 //#region ../../node_modules/.pnpm/fast-xml-builder@1.3.0/node_modules/fast-xml-builder/src/orderedJs2Xml.js
-var cn = "\n";
-function ln(e, t) {
+var ln = "\n";
+function un(e, t) {
 	if (!Array.isArray(e) || e.length === 0) return "1.0";
 	let n = e[0];
-	if (gn(n) === "?xml") {
+	if (_n(n) === "?xml") {
 		let e = n[":@"];
 		if (e) {
 			let n = t.attributeNamePrefix + "version";
@@ -3523,121 +3523,121 @@ function ln(e, t) {
 	}
 	return "1.0";
 }
-function un(e, t, n, r, i) {
+function dn(e, t, n, r, i) {
 	return !n.sanitizeName || i(e) ? e : n.sanitizeName(e, {
 		isAttribute: t,
 		matcher: r.readOnly()
 	});
 }
-function dn(e, t) {
+function fn(e, t) {
 	let n = "";
-	t.format && (n = cn);
+	t.format && (n = ln);
 	let r = [];
 	if (t.stopNodes && Array.isArray(t.stopNodes)) for (let e = 0; e < t.stopNodes.length; e++) {
 		let n = t.stopNodes[e];
 		typeof n == "string" ? r.push(new N(n)) : n instanceof N && r.push(n);
 	}
-	let i = Xe("qName", { xmlVersion: ln(e, t) }), a = new P();
-	return fn(e, t, n, a, r, i);
+	let i = Xe("qName", { xmlVersion: un(e, t) }), a = new P();
+	return pn(e, t, n, a, r, i);
 }
-function fn(e, t, n, r, i, a) {
+function pn(e, t, n, r, i, a) {
 	let o = "", s = !1;
 	if (t.maxNestedTags && r.getDepth() > t.maxNestedTags) throw Error("Maximum nested tags exceeded");
 	if (!Array.isArray(e)) {
 		if (e != null) {
 			let n = e.toString();
-			return n = yn(n, t), n;
+			return n = B(n, t), n;
 		}
 		return "";
 	}
 	for (let c = 0; c < e.length; c++) {
-		let l = e[c], u = gn(l);
+		let l = e[c], u = _n(l);
 		if (u === void 0) continue;
-		let d = u === t.textNodeName || u === t.cdataPropName || u === t.commentPropName || u[0] === "?" ? u : un(u, !1, t, r, a), f = pn(l[":@"], t);
+		let d = u === t.textNodeName || u === t.cdataPropName || u === t.commentPropName || u[0] === "?" ? u : dn(u, !1, t, r, a), f = mn(l[":@"], t);
 		r.push(d, f);
-		let p = vn(r, i);
+		let p = yn(r, i);
 		if (d === t.textNodeName) {
 			let e = l[u];
-			p || (e = t.tagValueProcessor(d, e), e = yn(e, t)), s && (o += n), o += e, s = !1, r.pop();
+			p || (e = t.tagValueProcessor(d, e), e = B(e, t)), s && (o += n), o += e, s = !1, r.pop();
 			continue;
 		} else if (d === t.cdataPropName) {
 			s && (o += n);
-			let e = l[u][0][t.textNodeName], i = sn(e);
+			let e = l[u][0][t.textNodeName], i = cn(e);
 			o += `<![CDATA[${i}]]>`, s = !1, r.pop();
 			continue;
 		} else if (d === t.commentPropName) {
-			let e = l[u][0][t.textNodeName], i = on(e);
+			let e = l[u][0][t.textNodeName], i = sn(e);
 			o += n + `<!--${i}-->`, s = !0, r.pop();
 			continue;
 		} else if (d[0] === "?") {
-			let e = _n(l[":@"], t, p, r, a);
+			let e = vn(l[":@"], t, p, r, a);
 			o += (d === "?xml" ? "" : n) + `<${d}${e}?>`, s = !0, r.pop();
 			continue;
 		}
 		let m = n;
 		m !== "" && (m += t.indentBy);
-		let h = n + `<${d}${_n(l[":@"], t, p, r, a)}`, g;
-		g = p ? mn(l[u], t) : fn(l[u], t, m, r, i, a), t.unpairedTags.indexOf(d) === -1 ? (!g || g.length === 0) && t.suppressEmptyNode ? o += h + "/>" : g && g.endsWith(">") ? o += h + `>${g}${n}</${d}>` : (o += h + ">", g && n !== "" && (g.includes("/>") || g.includes("</")) ? o += n + t.indentBy + g + n : o += g, o += `</${d}>`) : t.suppressUnpairedNode ? o += h + ">" : o += h + "/>", s = !0, r.pop();
+		let h = n + `<${d}${vn(l[":@"], t, p, r, a)}`, g;
+		g = p ? hn(l[u], t) : pn(l[u], t, m, r, i, a), t.unpairedTags.indexOf(d) === -1 ? (!g || g.length === 0) && t.suppressEmptyNode ? o += h + "/>" : g && g.endsWith(">") ? o += h + `>${g}${n}</${d}>` : (o += h + ">", g && n !== "" && (g.includes("/>") || g.includes("</")) ? o += n + t.indentBy + g + n : o += g, o += `</${d}>`) : t.suppressUnpairedNode ? o += h + ">" : o += h + "/>", s = !0, r.pop();
 	}
 	return o;
 }
-function pn(e, t) {
+function mn(e, t) {
 	if (!e || t.ignoreAttributes) return null;
 	let n = {}, r = !1;
 	for (let i in e) {
 		if (!Object.prototype.hasOwnProperty.call(e, i)) continue;
 		let a = i.startsWith(t.attributeNamePrefix) ? i.substr(t.attributeNamePrefix.length) : i;
-		n[a] = B(e[i]), r = !0;
+		n[a] = z(e[i]), r = !0;
 	}
 	return r ? n : null;
 }
-function mn(e, t) {
+function hn(e, t) {
 	if (!Array.isArray(e)) return e == null ? "" : e.toString();
 	let n = "";
 	for (let r = 0; r < e.length; r++) {
-		let i = e[r], a = gn(i);
+		let i = e[r], a = _n(i);
 		if (a === t.textNodeName) n += i[a];
 		else if (a === t.cdataPropName) n += i[a][0][t.textNodeName];
 		else if (a === t.commentPropName) n += i[a][0][t.textNodeName];
 		else if (a && a[0] === "?") continue;
 		else if (a) {
-			let e = hn(i[":@"], t), r = mn(i[a], t);
+			let e = gn(i[":@"], t), r = hn(i[a], t);
 			!r || r.length === 0 ? n += `<${a}${e}/>` : n += `<${a}${e}>${r}</${a}>`;
 		}
 	}
 	return n;
 }
-function hn(e, t) {
+function gn(e, t) {
 	let n = "";
 	if (e && !t.ignoreAttributes) for (let r in e) {
 		if (!Object.prototype.hasOwnProperty.call(e, r)) continue;
 		let i = e[r];
-		i === !0 && t.suppressBooleanAttributes ? n += ` ${r.substr(t.attributeNamePrefix.length)}` : n += ` ${r.substr(t.attributeNamePrefix.length)}="${B(i)}"`;
+		i === !0 && t.suppressBooleanAttributes ? n += ` ${r.substr(t.attributeNamePrefix.length)}` : n += ` ${r.substr(t.attributeNamePrefix.length)}="${z(i)}"`;
 	}
 	return n;
 }
-function gn(e) {
+function _n(e) {
 	let t = Object.keys(e);
 	for (let n = 0; n < t.length; n++) {
 		let r = t[n];
 		if (Object.prototype.hasOwnProperty.call(e, r) && r !== ":@") return r;
 	}
 }
-function _n(e, t, n, r, i) {
+function vn(e, t, n, r, i) {
 	let a = "";
 	if (e && !t.ignoreAttributes) for (let o in e) {
 		if (!Object.prototype.hasOwnProperty.call(e, o)) continue;
-		let s = o.substr(t.attributeNamePrefix.length), c = n ? s : un(s, !0, t, r, i), l;
-		n ? l = e[o] : (l = t.attributeValueProcessor(o, e[o]), l = yn(l, t)), l === !0 && t.suppressBooleanAttributes ? a += ` ${c}` : a += ` ${c}="${B(l)}"`;
+		let s = o.substr(t.attributeNamePrefix.length), c = n ? s : dn(s, !0, t, r, i), l;
+		n ? l = e[o] : (l = t.attributeValueProcessor(o, e[o]), l = B(l, t)), l === !0 && t.suppressBooleanAttributes ? a += ` ${c}` : a += ` ${c}="${z(l)}"`;
 	}
 	return a;
 }
-function vn(e, t) {
+function yn(e, t) {
 	if (!t || t.length === 0) return !1;
 	for (let n = 0; n < t.length; n++) if (e.matches(t[n])) return !0;
 	return !1;
 }
-function yn(e, t) {
+function B(e, t) {
 	if (e && e.length > 0 && t.processEntities) for (let n = 0; n < t.entities.length; n++) {
 		let r = t.entities[n];
 		e = e.replace(r.regex, r.val);
@@ -3709,7 +3709,7 @@ function V(e) {
 	}
 	this.options.ignoreAttributes === !0 || this.options.attributesGroupName ? this.isAttribute = function() {
 		return !1;
-	} : (this.ignoreAttributesFn = bn(this.options.ignoreAttributes), this.attrPrefixLen = this.options.attributeNamePrefix.length, this.isAttribute = En), this.processTextOrObjNode = wn, this.options.format ? (this.indentate = Tn, this.tagEndChar = ">\n", this.newLine = "\n") : (this.indentate = function() {
+	} : (this.ignoreAttributesFn = bn(this.options.ignoreAttributes), this.attrPrefixLen = this.options.attributeNamePrefix.length, this.isAttribute = Tn), this.processTextOrObjNode = Cn, this.options.format ? (this.indentate = wn, this.tagEndChar = ">\n", this.newLine = "\n") : (this.indentate = function() {
 		return "";
 	}, this.tagEndChar = ">", this.newLine = "");
 }
@@ -3725,14 +3725,14 @@ function Sn(e, t) {
 	}
 	return "1.0";
 }
-function Cn(e, t, n, r, i) {
+function H(e, t, n, r, i) {
 	return !n.sanitizeName || i(e) ? e : n.sanitizeName(e, {
 		isAttribute: t,
 		matcher: r.readOnly()
 	});
 }
 V.prototype.build = function(e) {
-	if (this.options.preserveOrder) return dn(e, this.options);
+	if (this.options.preserveOrder) return fn(e, this.options);
 	{
 		Array.isArray(e) && this.options.arrayNodeName && this.options.arrayNodeName.length > 1 && (e = { [this.options.arrayNodeName]: e });
 		let t = new P(), n = Xe("qName", { xmlVersion: Sn(e, this.options) });
@@ -3744,14 +3744,14 @@ V.prototype.build = function(e) {
 	let o = this.options.jPath ? n.toString() : n, s = this.checkStopNode(n);
 	for (let c in e) {
 		if (!Object.prototype.hasOwnProperty.call(e, c)) continue;
-		let l = c === this.options.textNodeName || c === this.options.cdataPropName || c === this.options.commentPropName || this.options.attributesGroupName && c === this.options.attributesGroupName || this.isAttribute(c) || c[0] === "?" ? c : Cn(c, !1, this.options, n, r);
+		let l = c === this.options.textNodeName || c === this.options.cdataPropName || c === this.options.commentPropName || this.options.attributesGroupName && c === this.options.attributesGroupName || this.isAttribute(c) || c[0] === "?" ? c : H(c, !1, this.options, n, r);
 		if (e[c] === void 0) this.isAttribute(c) && (a += "");
 		else if (e[c] === null) this.isAttribute(c) || l === this.options.cdataPropName || l === this.options.commentPropName ? a += "" : l[0] === "?" ? a += this.indentate(t) + "<" + l + "?" + this.tagEndChar : a += this.indentate(t) + "<" + l + "/" + this.tagEndChar;
 		else if (e[c] instanceof Date) a += this.buildTextValNode(e[c], l, "", t, n);
 		else if (typeof e[c] != "object") {
 			let u = this.isAttribute(c);
 			if (u && !this.ignoreAttributesFn(u, o)) {
-				let t = Cn(u, !0, this.options, n, r);
+				let t = H(u, !0, this.options, n, r);
 				i += this.buildAttrPairStr(t, "" + e[c], s);
 			} else if (!u) if (c === this.options.textNodeName) {
 				let t = this.options.tagValueProcessor(c, "" + e[c]);
@@ -3790,7 +3790,7 @@ V.prototype.build = function(e) {
 		} else if (this.options.attributesGroupName && c === this.options.attributesGroupName) {
 			let t = Object.keys(e[c]), a = t.length;
 			for (let o = 0; o < a; o++) {
-				let a = Cn(t[o], !0, this.options, n, r);
+				let a = H(t[o], !0, this.options, n, r);
 				i += this.buildAttrPairStr(a, "" + e[c][t[o]], s);
 			}
 		} else a += this.processTextOrObjNode(e[c], l, t, n, r);
@@ -3800,9 +3800,9 @@ V.prototype.build = function(e) {
 		val: a
 	};
 }, V.prototype.buildAttrPairStr = function(e, t, n) {
-	return n || (t = this.options.attributeValueProcessor(e, "" + t), t = this.replaceEntitiesValue(t)), this.options.suppressBooleanAttributes && t === "true" ? " " + e : " " + e + "=\"" + B(t) + "\"";
+	return n || (t = this.options.attributeValueProcessor(e, "" + t), t = this.replaceEntitiesValue(t)), this.options.suppressBooleanAttributes && t === "true" ? " " + e : " " + e + "=\"" + z(t) + "\"";
 };
-function wn(e, t, n, r, i) {
+function Cn(e, t, n, r, i) {
 	let a = this.extractAttributes(e);
 	if (r.push(t, a), this.checkStopNode(r)) {
 		let i = this.buildRawContent(e), a = this.buildAttributesForStopNode(e);
@@ -3819,12 +3819,12 @@ V.prototype.extractAttributes = function(e) {
 		for (let e in r) {
 			if (!Object.prototype.hasOwnProperty.call(r, e)) continue;
 			let i = e.startsWith(this.options.attributeNamePrefix) ? e.substring(this.options.attributeNamePrefix.length) : e;
-			t[i] = B(r[e]), n = !0;
+			t[i] = z(r[e]), n = !0;
 		}
 	} else for (let r in e) {
 		if (!Object.prototype.hasOwnProperty.call(e, r)) continue;
 		let i = this.isAttribute(r);
-		i && (t[i] = B(e[r]), n = !0);
+		i && (t[i] = z(e[r]), n = !0);
 	}
 	return n ? t : null;
 }, V.prototype.buildRawContent = function(e) {
@@ -3856,14 +3856,14 @@ V.prototype.extractAttributes = function(e) {
 		for (let e in n) {
 			if (!Object.prototype.hasOwnProperty.call(n, e)) continue;
 			let r = e.startsWith(this.options.attributeNamePrefix) ? e.substring(this.options.attributeNamePrefix.length) : e, i = n[e];
-			i === !0 && this.options.suppressBooleanAttributes ? t += " " + r : t += " " + r + "=\"" + B(i) + "\"";
+			i === !0 && this.options.suppressBooleanAttributes ? t += " " + r : t += " " + r + "=\"" + z(i) + "\"";
 		}
 	} else for (let n in e) {
 		if (!Object.prototype.hasOwnProperty.call(e, n)) continue;
 		let r = this.isAttribute(n);
 		if (r) {
 			let i = e[n];
-			i === !0 && this.options.suppressBooleanAttributes ? t += " " + r : t += " " + r + "=\"" + B(i) + "\"";
+			i === !0 && this.options.suppressBooleanAttributes ? t += " " + r : t += " " + r + "=\"" + z(i) + "\"";
 		}
 	}
 	return t;
@@ -3872,7 +3872,7 @@ V.prototype.extractAttributes = function(e) {
 	if (t[0] === "?") return this.indentate(r) + "<" + t + n + "?" + this.tagEndChar;
 	{
 		let i = "</" + t + this.tagEndChar, a = "";
-		return t[0] === "?" && (a = "?", i = ""), (n || n === "") && e.indexOf("<") === -1 ? this.indentate(r) + "<" + t + n + a + ">" + e + i : this.options.commentPropName !== !1 && t === this.options.commentPropName && a.length === 0 ? this.indentate(r) + `<!--${on(e)}-->` + this.newLine : this.indentate(r) + "<" + t + n + a + this.tagEndChar + e + this.indentate(r) + i;
+		return t[0] === "?" && (a = "?", i = ""), (n || n === "") && e.indexOf("<") === -1 ? this.indentate(r) + "<" + t + n + a + ">" + e + i : this.options.commentPropName !== !1 && t === this.options.commentPropName && a.length === 0 ? this.indentate(r) + `<!--${sn(e)}-->` + this.newLine : this.indentate(r) + "<" + t + n + a + this.tagEndChar + e + this.indentate(r) + i;
 	}
 }, V.prototype.closeTag = function(e) {
 	let t = "";
@@ -3883,10 +3883,10 @@ V.prototype.extractAttributes = function(e) {
 	return !1;
 }, V.prototype.buildTextValNode = function(e, t, n, r, i) {
 	if (this.options.cdataPropName !== !1 && t === this.options.cdataPropName) {
-		let t = sn(e);
+		let t = cn(e);
 		return this.indentate(r) + `<![CDATA[${t}]]>` + this.newLine;
 	} else if (this.options.commentPropName !== !1 && t === this.options.commentPropName) {
-		let t = on(e);
+		let t = sn(e);
 		return this.indentate(r) + `<!--${t}-->` + this.newLine;
 	} else if (t[0] === "?") return this.indentate(r) + "<" + t + n + "?" + this.tagEndChar;
 	else {
@@ -3900,56 +3900,56 @@ V.prototype.extractAttributes = function(e) {
 	}
 	return e;
 };
-function Tn(e) {
+function wn(e) {
 	return this.options.indentBy.repeat(e);
 }
-function En(e) {
+function Tn(e) {
 	return e.startsWith(this.options.attributeNamePrefix) && e !== this.options.textNodeName ? e.substr(this.attrPrefixLen) : !1;
 }
 //#endregion
 //#region ../../node_modules/.pnpm/fast-xml-parser@5.10.0/node_modules/fast-xml-parser/src/xmlbuilder/json2xml.js
-var Dn = V, H = e.object({
+var En = V, U = e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}), On = e.enum([
+}), Dn = e.enum([
 	"local",
 	"shared",
 	"platform"
-]), kn = e.enum([
+]), On = e.enum([
 	"none",
 	"secrets",
 	"fields"
-]), U = {
-	scope: On.optional(),
-	override: kn.optional(),
+]), W = {
+	scope: Dn.optional(),
+	override: On.optional(),
 	enforce: e.boolean().optional()
-}, An = e.object({
+}, kn = e.object({
 	id: e.string(),
 	version: e.string().optional()
-}), jn = e.object({
+}), An = e.object({
 	name: e.string(),
 	version: e.string()
-}), Mn = e.object({
+}), jn = e.object({
 	name: e.string(),
 	value: e.string().optional()
-}), Nn = e.object({
+}), Mn = e.object({
 	name: e.string().max(255),
 	code: e.string().max(1e5),
-	supported_triggers: e.array(An).optional(),
+	supported_triggers: e.array(kn).optional(),
 	runtime: e.string().max(50).optional(),
-	dependencies: e.array(jn).optional(),
-	secrets: e.array(Mn).optional(),
+	dependencies: e.array(An).optional(),
+	secrets: e.array(jn).optional(),
 	is_system: e.boolean().optional(),
-	...U,
+	...W,
 	inherit: e.boolean().optional()
 });
-Nn.partial().extend({
+Mn.partial().extend({
 	status: e.enum(["draft", "built"]).optional(),
 	deployed_at: e.string().optional()
 });
 //#endregion
 //#region ../adapter-interfaces/dist/adapter-interfaces.mjs
-var Pn = Nn.extend({
+var Nn = Mn.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	status: e.enum(["draft", "built"]).default("built"),
@@ -3958,25 +3958,25 @@ var Pn = Nn.extend({
 		name: e.string(),
 		value: e.string().optional()
 	})).optional()
-}).extend(H.shape), Fn = e.object({ name: e.string() });
-Pn.extend({ secrets: e.array(Fn).optional() });
-var In = e.string(), Ln = e.enum([
+}).extend(U.shape), Pn = e.object({ name: e.string() });
+Nn.extend({ secrets: e.array(Pn).optional() });
+var Fn = e.string(), In = e.enum([
 	"unspecified",
 	"pending",
 	"final",
 	"partial",
 	"canceled",
 	"suspended"
-]), Rn = e.object({
+]), Ln = e.object({
 	id: e.string(),
 	msg: e.string(),
 	url: e.string().optional()
-}), zn = e.object({
+}), Rn = e.object({
 	action_name: e.string(),
-	error: Rn.nullable(),
+	error: Ln.nullable(),
 	started_at: e.string(),
 	ended_at: e.string()
-}), Bn = e.object({
+}), zn = e.object({
 	level: e.enum([
 		"log",
 		"info",
@@ -3985,17 +3985,17 @@ var In = e.string(), Ln = e.enum([
 		"debug"
 	]),
 	message: e.string()
-}), Vn = e.array(e.object({
+}), Bn = e.array(e.object({
 	action_name: e.string(),
-	lines: e.array(Bn)
+	lines: e.array(zn)
 }));
 e.object({
 	id: e.string(),
 	tenant_id: e.string(),
-	trigger_id: In,
-	status: Ln,
-	results: e.array(zn),
-	logs: Vn.optional(),
+	trigger_id: Fn,
+	status: In,
+	results: e.array(Rn),
+	logs: Bn.optional(),
 	created_at: e.string(),
 	updated_at: e.string()
 }).omit({
@@ -4006,21 +4006,21 @@ e.object({
 	action_id: e.string(),
 	code: e.string().max(1e5),
 	runtime: e.string().max(50).optional(),
-	dependencies: e.array(jn).optional(),
-	secrets: e.array(Mn).optional(),
-	supported_triggers: e.array(An).optional(),
+	dependencies: e.array(An).optional(),
+	secrets: e.array(jn).optional(),
+	supported_triggers: e.array(kn).optional(),
 	deployed: e.boolean().default(!0)
 }).extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	number: e.number().int()
-}).extend(H.shape);
-var Hn = e.enum([
+}).extend(U.shape);
+var Vn = e.enum([
 	"user_action",
 	"admin_action",
 	"system",
 	"api"
-]), Un = e.object({
+]), Hn = e.object({
 	type: e.enum([
 		"user",
 		"admin",
@@ -4034,7 +4034,7 @@ var Hn = e.enum([
 	org_name: e.string().optional(),
 	scopes: e.array(e.string()).optional(),
 	client_id: e.string().optional()
-}), Wn = e.object({
+}), Un = e.object({
 	type: e.string(),
 	id: e.string(),
 	before: e.record(e.string(), e.unknown()).optional(),
@@ -4043,7 +4043,7 @@ var Hn = e.enum([
 		old: e.unknown(),
 		new: e.unknown()
 	})).optional()
-}), Gn = e.object({
+}), Wn = e.object({
 	user: e.object({
 		user_id: e.string(),
 		name: e.string().optional(),
@@ -4054,7 +4054,7 @@ var Hn = e.enum([
 		jti: e.string().optional(),
 		scopes: e.array(e.string()).optional()
 	}).optional()
-}), Kn = e.object({
+}), Gn = e.object({
 	method: e.string(),
 	path: e.string(),
 	query: e.record(e.string(), e.string()).optional(),
@@ -4064,18 +4064,18 @@ var Hn = e.enum([
 	correlation_id: e.string().optional(),
 	redirect_uri: e.string().optional(),
 	authorization_url: e.string().optional(),
-	auth: Gn.optional()
-}), qn = e.object({
+	auth: Wn.optional()
+}), Kn = e.object({
 	status_code: e.number(),
 	body: e.unknown().optional()
-}), Jn = e.object({
+}), qn = e.object({
 	country_code: e.string(),
 	city_name: e.string(),
 	latitude: e.string(),
 	longitude: e.string(),
 	time_zone: e.string(),
 	continent_code: e.string()
-}), Yn = e.object({
+}), Jn = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.record(e.string(), e.string()).optional()
@@ -4085,11 +4085,11 @@ e.object({
 	event_type: e.string(),
 	log_type: e.string(),
 	description: e.string().optional(),
-	category: Hn,
-	actor: Un,
-	target: Wn,
-	request: Kn,
-	response: qn.optional(),
+	category: Vn,
+	actor: Hn,
+	target: Un,
+	request: Gn,
+	response: Kn.optional(),
 	connection: e.string().optional(),
 	connection_id: e.string().optional(),
 	client_name: e.string().optional(),
@@ -4097,8 +4097,8 @@ e.object({
 	strategy_type: e.string().optional(),
 	audience: e.string().optional(),
 	scope: e.string().optional(),
-	location: Jn.optional(),
-	auth0_client: Yn.optional(),
+	location: qn.optional(),
+	auth0_client: Jn.optional(),
 	hostname: e.string(),
 	is_mobile: e.boolean().optional(),
 	execution_id: e.string().optional(),
@@ -4116,14 +4116,14 @@ e.object({
 	"SEND_REQUEST",
 	"SEND_EMAIL"
 ]), e.enum(["VERIFY_EMAIL"]);
-var Xn = e.object({
+var Yn = e.object({
 	require_mx_record: e.boolean().optional(),
 	block_aliases: e.boolean().optional(),
 	block_free_emails: e.boolean().optional(),
 	block_disposable_emails: e.boolean().optional(),
 	blocklist: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional()
-}), Zn = e.object({
+}), Xn = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("AUTH0"),
@@ -4135,7 +4135,7 @@ var Xn = e.object({
 		user_id: e.string(),
 		changes: e.record(e.string(), e.any())
 	})
-}), Qn = e.object({
+}), Zn = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("EMAIL"),
@@ -4144,13 +4144,13 @@ var Xn = e.object({
 	mask_output: e.boolean().optional(),
 	params: e.object({
 		email: e.string(),
-		rules: Xn.optional()
+		rules: Yn.optional()
 	})
-}), $n = e.enum([
+}), Qn = e.enum([
 	"change-email",
 	"account",
 	"custom"
-]), er = e.object({
+]), $n = e.object({
 	id: e.string(),
 	alias: e.string().max(100).optional(),
 	type: e.literal("REDIRECT"),
@@ -4158,18 +4158,18 @@ var Xn = e.object({
 	allow_failure: e.boolean().optional(),
 	mask_output: e.boolean().optional(),
 	params: e.object({
-		target: $n.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
+		target: Qn.openapi({ description: "The predefined target to redirect to, or 'custom' for a custom URL" }),
 		custom_url: e.string().optional().openapi({ description: "Custom URL to redirect to when target is 'custom'" })
 	})
-}), tr = e.union([
+}), er = e.union([
+	Xn,
 	Zn,
-	Qn,
-	er
+	$n
 ]);
 e.object({
 	name: e.string().min(1).max(150).openapi({ description: "The name of the flow" }),
-	actions: e.array(tr).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
-}).extend(H.shape).extend({ id: e.string().openapi({
+	actions: e.array(er).optional().default([]).openapi({ description: "The list of actions to execute in sequence" })
+}).extend(U.shape).extend({ id: e.string().openapi({
 	description: "Unique identifier for the flow",
 	example: "af_12tMpdJ3iek7svMyZkSh5M"
 }) }), e.object({
@@ -4185,7 +4185,7 @@ e.object({
 	total: e.number().optional(),
 	next: e.string().optional()
 });
-var nr = e.object({
+var tr = e.object({
 	email: e.string().optional(),
 	email_verified: e.boolean().optional(),
 	name: e.string().optional(),
@@ -4194,7 +4194,7 @@ var nr = e.object({
 	phone_number: e.string().optional(),
 	phone_verified: e.boolean().optional(),
 	family_name: e.string().optional()
-}).catchall(e.any()), rr = e.object({
+}).catchall(e.any()), nr = e.object({
 	connection: e.string(),
 	user_id: e.string(),
 	provider: e.string(),
@@ -4207,15 +4207,15 @@ var nr = e.object({
 	access_token: e.string().optional(),
 	access_token_secret: e.string().optional(),
 	refresh_token: e.string().optional(),
-	profileData: nr.optional()
-}), ir = e.object({
+	profileData: tr.optional()
+}), rr = e.object({
 	formatted: e.string().optional(),
 	street_address: e.string().optional(),
 	locality: e.string().optional(),
 	region: e.string().optional(),
 	postal_code: e.string().optional(),
 	country: e.string().optional()
-}).optional(), ar = e.object({
+}).optional(), ir = e.object({
 	email: e.string().transform((e) => e.toLowerCase()).optional(),
 	username: e.string().refine((e) => !e.includes("@"), { message: "Usernames must not contain \"@\". Use the email field for email addresses." }).optional(),
 	phone_number: e.string().optional(),
@@ -4238,9 +4238,9 @@ var nr = e.object({
 	gender: e.string().optional(),
 	birthdate: e.string().optional(),
 	zoneinfo: e.string().optional(),
-	address: ir
+	address: rr
 });
-ar.extend({
+ir.extend({
 	email_verified: e.boolean().default(!1),
 	verify_email: e.boolean().optional(),
 	last_ip: e.string().optional(),
@@ -4255,30 +4255,30 @@ ar.extend({
 		hash: e.string(),
 		algorithm: e.string()
 	}).optional()
-}).omit({ password: !0 }).extend(H.shape).extend({
+}).omit({ password: !0 }).extend(U.shape).extend({
 	user_id: e.string(),
 	provider: e.string(),
 	is_social: e.boolean(),
 	email: e.string().optional(),
 	login_count: e.number().default(0),
-	identities: e.array(rr).optional()
-}).omit({ registration_completed_at: !0 }), ar.extend({
+	identities: e.array(nr).optional()
+}).omit({ registration_completed_at: !0 }), ir.extend({
 	login_count: e.number(),
 	multifactor: e.array(e.string()).optional(),
 	last_ip: e.string().optional(),
 	last_login: e.string().optional(),
 	user_id: e.string()
 }).catchall(e.any());
-var or = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", sr = (e = 21) => {
+var ar = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", or = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += or[n[e] & 63];
+	for (; e--;) t += ar[n[e] & 63];
 	return t;
-}, cr = e.object({
+}, sr = e.object({
 	client_id: e.string().optional().openapi({ description: "ID of this client. Generated server-side if omitted (Auth0 behavior)." }),
 	name: e.string().min(1).openapi({ description: "Name of this client (min length: 1 character, does not allow < or >)." }),
 	description: e.string().max(140).optional().openapi({ description: "Free text description of this client (max length: 140 characters)." }),
 	global: e.boolean().default(!1).openapi({ description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)." }),
-	client_secret: e.string().default(() => sr()).optional().openapi({ description: "Client secret (which you must not make public)." }),
+	client_secret: e.string().default(() => or()).optional().openapi({ description: "Client secret (which you must not make public)." }),
 	app_type: e.enum([
 		"native",
 		"spa",
@@ -4396,8 +4396,8 @@ var or = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", sr
 e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(cr.shape).extend({ client_id: e.string() });
-var lr = e.object({
+}).extend(sr.shape).extend({ client_id: e.string() });
+var cr = e.object({
 	client_id: e.string().min(1).openapi({ description: "ID of the client." }),
 	audience: e.string().min(1).openapi({ description: "The audience (API identifier) of this client grant." }),
 	scope: e.array(e.string()).optional().openapi({ description: "Scopes allowed for this client grant." }),
@@ -4410,15 +4410,15 @@ var lr = e.object({
 	is_system: e.boolean().optional().openapi({ description: "If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly." }),
 	subject_type: e.enum(["client", "user"]).optional().openapi({ description: "The type of application access the client grant allows. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." }),
 	authorization_details_types: e.array(e.string()).optional().openapi({ description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." })
-}), ur = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(lr.shape).extend({
+}), lr = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(cr.shape).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(ur);
-var dr = e.enum(["iat", "rat"]), fr = e.object({
+e.array(lr);
+var ur = e.enum(["iat", "rat"]), dr = e.object({
 	id: e.string(),
 	token_hash: e.string(),
-	type: dr,
+	type: ur,
 	client_id: e.string().optional(),
 	sub: e.string().optional(),
 	constraints: e.record(e.string(), e.unknown()).optional(),
@@ -4429,23 +4429,23 @@ e.object({
 	created_at: e.string(),
 	used_at: e.string().optional(),
 	revoked_at: e.string().optional()
-}).extend(fr.shape);
-var W = e.object({
+}).extend(dr.shape);
+var G = e.object({
 	x: e.number(),
 	y: e.number()
-}), pr = /* @__PURE__ */ function(e) {
+}), fr = /* @__PURE__ */ function(e) {
 	return e.RICH_TEXT = "RICH_TEXT", e.NEXT_BUTTON = "NEXT_BUTTON", e.BACK_BUTTON = "BACK_BUTTON", e.SUBMIT_BUTTON = "SUBMIT_BUTTON", e.DIVIDER = "DIVIDER", e.TEXT = "TEXT", e.EMAIL = "EMAIL", e.PASSWORD = "PASSWORD", e.NUMBER = "NUMBER", e.PHONE = "PHONE", e.DATE = "DATE", e.CHECKBOX = "CHECKBOX", e.RADIO = "RADIO", e.SELECT = "SELECT", e.HIDDEN = "HIDDEN", e.LEGAL = "LEGAL", e;
-}({}), mr = /* @__PURE__ */ function(e) {
+}({}), pr = /* @__PURE__ */ function(e) {
 	return e.BLOCK = "BLOCK", e.FIELD = "FIELD", e;
-}({}), G = e.object({
+}({}), K = e.object({
 	id: e.string(),
-	category: e.nativeEnum(mr),
-	type: e.nativeEnum(pr)
-}), hr = G.extend({
+	category: e.nativeEnum(pr),
+	type: e.nativeEnum(fr)
+}), mr = K.extend({
 	category: e.literal("BLOCK"),
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string() }).passthrough()
-}), gr = G.extend({
+}), hr = K.extend({
 	category: e.literal("BLOCK"),
 	type: e.union([
 		e.literal("NEXT_BUTTON"),
@@ -4453,13 +4453,13 @@ var W = e.object({
 		e.literal("SUBMIT_BUTTON")
 	]),
 	config: e.object({ text: e.string() }).passthrough()
-}), _r = G.extend({
+}), gr = K.extend({
 	category: e.literal("FIELD"),
 	type: e.literal("LEGAL"),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional(),
 	config: e.object({ text: e.string() }).passthrough()
-}), vr = G.extend({
+}), _r = K.extend({
 	category: e.literal("FIELD"),
 	type: e.union([
 		e.literal("TEXT"),
@@ -4479,38 +4479,38 @@ var W = e.object({
 		label: e.string().optional(),
 		placeholder: e.string().optional()
 	}).passthrough()
-}), yr = e.object({
+}), vr = e.object({
 	id: e.string(),
 	category: e.string(),
 	type: e.string()
-}).passthrough(), br = e.union([
+}).passthrough(), yr = e.union([
+	mr,
 	hr,
 	gr,
 	_r,
-	vr,
-	yr
-]), xr = e.object({
+	vr
+]), br = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: W,
+	coordinates: G,
 	alias: e.string().optional(),
 	config: e.object({
-		components: e.array(br),
+		components: e.array(yr),
 		next_node: e.string()
 	}).passthrough()
-}), Sr = e.object({
+}), xr = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: W,
+	coordinates: G,
 	alias: e.string().optional(),
 	config: e.object({
 		flow_id: e.string(),
 		next_node: e.string()
 	})
-}), Cr = e.object({
+}), Sr = e.object({
 	id: e.string(),
 	type: e.literal("ACTION"),
-	coordinates: W,
+	coordinates: G,
 	alias: e.string().optional(),
 	config: e.object({
 		action_type: e.enum(["REDIRECT"]).openapi({ description: "The type of action to perform" }),
@@ -4522,29 +4522,29 @@ var W = e.object({
 		custom_url: e.string().optional().openapi({ description: "Custom URL when target is 'custom'" }),
 		next_node: e.string().openapi({ description: "The next node to navigate to after action (for non-redirect actions)" })
 	}).passthrough()
-}), wr = e.object({
+}), Cr = e.object({
 	id: e.string(),
 	type: e.string(),
-	coordinates: W
-}).passthrough(), Tr = e.union([
+	coordinates: G
+}).passthrough(), wr = e.union([
+	br,
 	xr,
 	Sr,
-	Cr,
-	wr
-]), Er = e.object({
+	Cr
+]), Tr = e.object({
 	next_node: e.string(),
-	coordinates: W
-}).passthrough(), Dr = e.object({
+	coordinates: G
+}).passthrough(), Er = e.object({
 	resume_flow: e.boolean().optional(),
-	coordinates: W
+	coordinates: G
 }).passthrough();
 e.object({
 	id: e.string(),
 	name: e.string(),
 	languages: e.object({ primary: e.string() }).passthrough(),
-	nodes: e.array(Tr),
-	start: Er,
-	ending: Dr,
+	nodes: e.array(wr),
+	start: Tr,
+	ending: Er,
 	created_at: e.string(),
 	updated_at: e.string(),
 	links: e.object({
@@ -4556,24 +4556,24 @@ e.object({
 	created_at: !0,
 	updated_at: !0
 });
-var Or = /* @__PURE__ */ function(e) {
+var Dr = /* @__PURE__ */ function(e) {
 	return e.TOKEN = "token", e.ID_TOKEN = "id_token", e.TOKEN_ID_TOKEN = "id_token token", e.CODE = "code", e.CODE_ID_TOKEN = "code id_token", e.CODE_TOKEN = "code token", e.CODE_ID_TOKEN_TOKEN = "code id_token token", e;
-}({}), kr = /* @__PURE__ */ function(e) {
+}({}), Or = /* @__PURE__ */ function(e) {
 	return e.QUERY = "query", e.FRAGMENT = "fragment", e.FORM_POST = "form_post", e.WEB_MESSAGE = "web_message", e.SAML_POST = "saml_post", e;
-}({}), Ar = /* @__PURE__ */ function(e) {
+}({}), kr = /* @__PURE__ */ function(e) {
 	return e.S256 = "S256", e.Plain = "plain", e;
-}({}), jr = e.union([e.null(), e.object({
+}({}), Ar = e.union([e.null(), e.object({
 	essential: e.boolean().optional(),
 	value: e.unknown().optional(),
 	values: e.array(e.unknown()).optional()
-})]).nullable(), Mr = e.object({
-	userinfo: e.record(e.string(), jr).optional(),
-	id_token: e.record(e.string(), jr).optional()
-}), Nr = e.object({
+})]).nullable(), jr = e.object({
+	userinfo: e.record(e.string(), Ar).optional(),
+	id_token: e.record(e.string(), Ar).optional()
+}), Mr = e.object({
 	client_id: e.string(),
 	act_as: e.string().optional(),
-	response_type: e.nativeEnum(Or).optional(),
-	response_mode: e.nativeEnum(kr).optional(),
+	response_type: e.nativeEnum(Dr).optional(),
+	response_mode: e.nativeEnum(Or).optional(),
 	redirect_uri: e.string().optional(),
 	audience: e.string().optional(),
 	organization: e.string().optional(),
@@ -4581,17 +4581,17 @@ var Or = /* @__PURE__ */ function(e) {
 	nonce: e.string().optional(),
 	scope: e.string().optional(),
 	prompt: e.string().optional(),
-	code_challenge_method: e.nativeEnum(Ar).optional(),
+	code_challenge_method: e.nativeEnum(kr).optional(),
 	code_challenge: e.string().optional(),
 	username: e.string().optional(),
 	ui_locales: e.string().optional(),
 	max_age: e.number().optional(),
 	acr_values: e.string().optional(),
-	claims: Mr.optional(),
+	claims: jr.optional(),
 	vendor_id: e.string().optional()
 });
 e.object({
-	...U,
+	...W,
 	colors: e.object({
 		primary: e.string(),
 		page_background: e.union([e.string(), e.object({
@@ -4611,7 +4611,7 @@ e.object({
 		"auto"
 	]).optional()
 });
-var Pr = e.enum([
+var Nr = e.enum([
 	"password_reset",
 	"email_verification",
 	"otp",
@@ -4626,7 +4626,7 @@ e.object({
 	code_id: e.string().openapi({ description: "The code that will be used in for instance an email verification flow" }),
 	login_id: e.string().optional().openapi({ description: "The id of the login session that the code is connected to" }),
 	connection_id: e.string().optional().openapi({ description: "The connection that the code is connected to" }),
-	code_type: Pr,
+	code_type: Nr,
 	code_verifier: e.string().optional().openapi({ description: "The code verifier used in PKCE in outbound flows" }),
 	code_challenge: e.string().optional().openapi({ description: "The code challenge used in PKCE in outbound flows" }),
 	code_challenge_method: e.enum(["plain", "S256"]).optional().openapi({ description: "The code challenge method used in PKCE in outbound flows" }),
@@ -4656,7 +4656,7 @@ e.object({
 	interval: e.number().int().positive(),
 	version: e.number().int().nonnegative()
 });
-var Fr = e.object({
+var Pr = e.object({
 	kid: e.string().optional(),
 	team_id: e.string().optional(),
 	realms: e.string().optional(),
@@ -4776,38 +4776,38 @@ var Fr = e.object({
 		"never_on_login"
 	]).optional()
 });
-function Ir(e) {
+function Fr(e) {
 	if (e !== null) {
-		if (Array.isArray(e)) return e.filter((e) => e !== null).map(Ir);
+		if (Array.isArray(e)) return e.filter((e) => e !== null).map(Fr);
 		if (e && typeof e == "object") {
 			let t = {};
-			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = Ir(r));
+			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = Fr(r));
 			return t;
 		}
 		return e;
 	}
 }
-var Lr = e.object({
+var Ir = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	display_name: e.string().optional(),
 	strategy: e.string(),
-	options: e.preprocess((e) => e === null ? {} : Ir(e), Fr).default({}),
+	options: e.preprocess((e) => e === null ? {} : Fr(e), Pr).default({}),
 	enabled_clients: e.array(e.string()).default([]).optional(),
-	response_type: e.nativeEnum(Or).optional(),
-	response_mode: e.nativeEnum(kr).optional(),
+	response_type: e.nativeEnum(Dr).optional(),
+	response_mode: e.nativeEnum(Or).optional(),
 	is_domain_connection: e.boolean().optional(),
 	show_as_button: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional(),
 	is_system: e.boolean().optional(),
-	...U
+	...W
 });
 e.object({
 	id: e.string(),
 	created_at: e.string().transform((e) => e === null ? "" : e),
 	updated_at: e.string().transform((e) => e === null ? "" : e)
-}).extend(Lr.shape);
-var Rr = e.object({
+}).extend(Ir.shape);
+var Lr = e.object({
 	domain: e.string(),
 	custom_domain_id: e.string().optional(),
 	type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -4821,7 +4821,7 @@ var Rr = e.object({
 		"null"
 	]).optional(),
 	domain_metadata: e.record(e.string(), e.string().max(255)).optional()
-}), zr = e.discriminatedUnion("name", [e.object({
+}), Rr = e.discriminatedUnion("name", [e.object({
 	name: e.literal("txt"),
 	record: e.string(),
 	domain: e.string()
@@ -4829,7 +4829,7 @@ var Rr = e.object({
 	name: e.literal("http"),
 	http_body: e.string(),
 	http_url: e.string()
-})]), Br = Rr.extend({
+})]), zr = Lr.extend({
 	custom_domain_id: e.string(),
 	primary: e.boolean(),
 	status: e.enum([
@@ -4839,28 +4839,28 @@ var Rr = e.object({
 		"ready"
 	]),
 	origin_domain_name: e.string().optional(),
-	verification: e.object({ methods: e.array(zr) }).optional(),
+	verification: e.object({ methods: e.array(Rr) }).optional(),
 	tls_policy: e.string().optional()
 });
-Rr.pick({
+Lr.pick({
 	tls_policy: !0,
 	custom_client_ip_header: !0,
 	domain_metadata: !0
-}).strict(), Br.extend({ tenant_id: e.string() }), e.object({
+}).strict(), zr.extend({ tenant_id: e.string() }), e.object({
 	certificate: e.string().regex(/^-----BEGIN CERTIFICATE-----[\s\S]+-----END CERTIFICATE-----\s*$/, "must be PEM-encoded; include the full certificate chain in leaf-first order"),
 	private_key: e.string().regex(/-----BEGIN (RSA |EC |ENCRYPTED )?PRIVATE KEY-----[\s\S]+-----END \1PRIVATE KEY-----\s*$/, "must be a PEM-encoded private key")
 });
-var Vr = e.object({
+var Br = e.object({
 	id: e.string(),
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0)
-}), K = Vr.extend({ category: e.literal("BLOCK").optional() }), Hr = K.extend({
+}), q = Br.extend({ category: e.literal("BLOCK").optional() }), Vr = q.extend({
 	type: e.literal("DIVIDER"),
 	config: e.object({ text: e.string().optional() }).optional()
-}), Ur = K.extend({
+}), Hr = q.extend({
 	type: e.literal("HTML"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), Wr = K.extend({
+}), Ur = q.extend({
 	type: e.literal("IMAGE"),
 	config: e.object({
 		src: e.string().optional(),
@@ -4868,47 +4868,47 @@ var Vr = e.object({
 		width: e.number().optional(),
 		height: e.number().optional()
 	}).optional()
-}), Gr = K.extend({
+}), Wr = q.extend({
 	type: e.literal("JUMP_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		target_step: e.string().optional()
 	})
-}), Kr = K.extend({
+}), Gr = q.extend({
 	type: e.literal("RESEND_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		resend_action: e.string().optional()
 	})
-}), qr = K.extend({
+}), Kr = q.extend({
 	type: e.literal("NEXT_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		variant: e.enum(["primary", "secondary"]).optional(),
 		skip_validation: e.boolean().optional()
 	})
-}), Jr = K.extend({
+}), qr = q.extend({
 	type: e.literal("PREVIOUS_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), Yr = K.extend({
+}), Jr = q.extend({
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), Xr = Vr.extend({
+}), Yr = Br.extend({
 	category: e.literal("WIDGET").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), Zr = Xr.extend({
+}), Xr = Yr.extend({
 	type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
 	config: e.object({ credential_type: e.string().optional() })
-}), Qr = Xr.extend({
+}), Zr = Yr.extend({
 	type: e.literal("GMAPS_ADDRESS"),
 	config: e.object({ api_key: e.string().optional() })
-}), $r = Xr.extend({
+}), Qr = Yr.extend({
 	type: e.literal("RECAPTCHA"),
 	config: e.object({ site_key: e.string().optional() })
-}), q = Vr.extend({
+}), J = Br.extend({
 	category: e.literal("FIELD").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
@@ -4924,10 +4924,10 @@ var Vr = e.object({
 	})).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), ei = q.extend({
+}), $r = J.extend({
 	type: e.literal("BOOLEAN"),
 	config: e.object({ default_value: e.boolean().optional() }).optional()
-}), ti = q.extend({
+}), ei = J.extend({
 	type: e.literal("CARDS"),
 	config: e.object({
 		options: e.array(e.object({
@@ -4938,7 +4938,7 @@ var Vr = e.object({
 		})).optional(),
 		multi_select: e.boolean().optional()
 	}).optional()
-}), ni = q.extend({
+}), ti = J.extend({
 	type: e.literal("CHOICE"),
 	config: e.object({
 		options: e.array(e.object({
@@ -4949,7 +4949,7 @@ var Vr = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), ri = q.extend({
+}), ni = J.extend({
 	type: e.literal("CODE"),
 	config: e.object({
 		length: e.number().int().positive().max(100).optional(),
@@ -4966,7 +4966,7 @@ var Vr = e.object({
 		message: "default_value is longer than the configured length",
 		path: ["default_value"]
 	}).optional()
-}), ii = q.extend({
+}), ri = J.extend({
 	type: e.literal("CUSTOM"),
 	config: e.object({
 		component: e.string().optional(),
@@ -4974,7 +4974,7 @@ var Vr = e.object({
 		schema: e.record(e.string(), e.any()).optional(),
 		code: e.string().optional()
 	})
-}), ai = q.extend({
+}), ii = J.extend({
 	type: e.literal("DATE"),
 	config: e.object({
 		format: e.string().optional(),
@@ -4982,7 +4982,7 @@ var Vr = e.object({
 		max: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), oi = q.extend({
+}), ai = J.extend({
 	type: e.literal("DROPDOWN"),
 	config: e.object({
 		options: e.array(e.object({
@@ -4994,7 +4994,7 @@ var Vr = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), si = q.extend({
+}), oi = J.extend({
 	type: e.literal("EMAIL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -5002,20 +5002,20 @@ var Vr = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), ci = q.extend({
+}), si = J.extend({
 	type: e.literal("FILE"),
 	config: e.object({
 		accept: e.string().optional(),
 		max_size: e.number().optional(),
 		multiple: e.boolean().optional()
 	}).optional()
-}), li = q.extend({
+}), ci = J.extend({
 	type: e.literal("LEGAL"),
 	config: e.object({
 		text: e.string(),
 		html: e.boolean().optional()
 	}).optional()
-}), ui = q.extend({
+}), li = J.extend({
 	type: e.literal("NUMBER"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -5024,7 +5024,7 @@ var Vr = e.object({
 		step: e.number().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), di = q.extend({
+}), ui = J.extend({
 	type: e.literal("PASSWORD"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -5033,13 +5033,13 @@ var Vr = e.object({
 		forgot_password_link: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), fi = q.extend({
+}), di = J.extend({
 	type: e.literal("PAYMENT"),
 	config: e.object({
 		provider: e.string().optional(),
 		currency: e.string().optional()
 	}).optional()
-}), pi = q.extend({
+}), fi = J.extend({
 	type: e.literal("SOCIAL"),
 	config: e.object({
 		providers: e.array(e.string()).optional(),
@@ -5054,7 +5054,7 @@ var Vr = e.object({
 			last_used_label: e.string().optional()
 		})).optional()
 	}).optional()
-}), mi = q.extend({
+}), pi = J.extend({
 	type: e.literal("TEL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -5062,7 +5062,7 @@ var Vr = e.object({
 		default_value: e.string().optional(),
 		allow_email: e.boolean().optional()
 	}).optional()
-}), hi = q.extend({
+}), mi = J.extend({
 	type: e.literal("TEXT"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -5072,37 +5072,38 @@ var Vr = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), gi = q.extend({
+}), hi = J.extend({
 	type: e.literal("COUNTRY"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), _i = q.extend({
+}), gi = J.extend({
 	type: e.literal("URL"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), vi = e.discriminatedUnion("type", [
+}), _i = e.discriminatedUnion("type", [
+	Vr,
 	Hr,
 	Ur,
 	Wr,
 	Gr,
 	Kr,
 	qr,
-	Jr,
-	Yr
-]), yi = e.discriminatedUnion("type", [
+	Jr
+]), vi = e.discriminatedUnion("type", [
+	Xr,
 	Zr,
-	Qr,
-	$r
-]), bi = e.discriminatedUnion("type", [
+	Qr
+]), yi = e.discriminatedUnion("type", [
+	$r,
 	ei,
 	ti,
 	ni,
+	hi,
 	ri,
-	gi,
 	ii,
 	ai,
 	oi,
@@ -5114,12 +5115,11 @@ var Vr = e.object({
 	fi,
 	pi,
 	mi,
-	hi,
-	_i
-]), xi = e.union([
+	gi
+]), bi = e.union([
+	_i,
 	vi,
-	yi,
-	bi
+	yi
 ]);
 new Set([
 	"BOOLEAN",
@@ -5146,22 +5146,22 @@ new Set([
 	visible: e.boolean().optional().default(!0),
 	customizations: e.record(e.string(), e.any()).optional()
 });
-var J = e.object({
+var Y = e.object({
 	x: e.number(),
 	y: e.number()
-}), Si = e.object({
+}), xi = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: J,
+	coordinates: Y,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
 		flow_id: e.string().max(30),
 		next_node: e.string().optional()
 	})
-}), Ci = e.object({
+}), Si = e.object({
 	id: e.string(),
 	type: e.literal("ROUTER"),
-	coordinates: J,
+	coordinates: Y,
 	alias: e.string().min(1).max(150),
 	config: e.object({
 		rules: e.array(e.object({
@@ -5172,20 +5172,20 @@ var J = e.object({
 		})),
 		fallback: e.string()
 	})
-}), wi = e.object({
+}), Ci = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: J,
+	coordinates: Y,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
-		components: e.array(xi),
+		components: e.array(bi),
 		next_node: e.string().optional()
 	})
-}), Ti = e.discriminatedUnion("type", [
+}), wi = e.discriminatedUnion("type", [
+	xi,
 	Si,
-	Ci,
-	wi
-]), Ei = e.object({
+	Ci
+]), Ti = e.object({
 	name: e.string().openapi({ description: "The name of the form" }),
 	messages: e.object({
 		errors: e.record(e.string(), e.any()).optional(),
@@ -5196,14 +5196,14 @@ var J = e.object({
 		default: e.string().optional()
 	}).optional(),
 	translations: e.record(e.string(), e.any()).optional(),
-	nodes: e.array(Ti).optional(),
+	nodes: e.array(wi).optional(),
 	start: e.object({
 		hidden_fields: e.array(e.object({
 			key: e.string(),
 			value: e.string()
 		})).optional(),
 		next_node: e.string().optional(),
-		coordinates: J.optional()
+		coordinates: Y.optional()
 	}).optional(),
 	ending: e.object({
 		redirection: e.object({
@@ -5211,7 +5211,7 @@ var J = e.object({
 			target: e.string().optional()
 		}).optional(),
 		after_submit: e.object({ flow_id: e.string().optional() }).optional(),
-		coordinates: J.optional(),
+		coordinates: Y.optional(),
 		resume_flow: e.boolean().optional()
 	}).optional(),
 	style: e.object({ css: e.string().optional() }).optional(),
@@ -5220,8 +5220,8 @@ var J = e.object({
 		sdk_src: e.string().optional()
 	}).optional()
 }).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" });
-H.extend(Ei.shape).extend({ id: e.string() });
-var Di = e.object({
+U.extend(Ti.shape).extend({ id: e.string() });
+var Ei = e.object({
 	id: e.number().optional(),
 	text: e.string(),
 	type: e.enum([
@@ -5230,12 +5230,12 @@ var Di = e.object({
 		"success",
 		"warning"
 	])
-}), Oi = e.object({
+}), Di = e.object({
 	id: e.string().optional(),
 	text: e.string(),
 	href: e.string(),
 	linkText: e.string().optional()
-}), ki = e.object({
+}), Oi = e.object({
 	"form-content-start": e.string().optional(),
 	"form-content-end": e.string().optional(),
 	"form-footer-start": e.string().optional(),
@@ -5249,13 +5249,13 @@ e.object({
 	method: e.enum(["POST", "GET"]),
 	title: e.string().optional(),
 	description: e.string().optional(),
-	components: e.array(xi),
-	messages: e.array(Di).optional(),
-	links: e.array(Oi).optional(),
-	partials: ki.optional(),
+	components: e.array(bi),
+	messages: e.array(Ei).optional(),
+	links: e.array(Di).optional(),
+	partials: Oi.optional(),
 	footer: e.string().optional()
 });
-var Ai = e.enum([
+var ki = e.enum([
 	"pre-user-registration",
 	"post-user-registration",
 	"post-user-login",
@@ -5263,12 +5263,12 @@ var Ai = e.enum([
 	"validate-registration-username",
 	"pre-user-deletion",
 	"post-user-deletion"
-]), ji = e.enum(["post-user-login"]), Mi = e.enum([
+]), Ai = e.enum(["post-user-login"]), ji = e.enum([
 	"post-user-login",
 	"post-user-registration",
 	"post-user-update",
 	"credentials-exchange"
-]), Ni = e.enum([
+]), Mi = e.enum([
 	"validate-registration-username",
 	"post-user-login",
 	"credentials-exchange",
@@ -5278,98 +5278,98 @@ var Ai = e.enum([
 	"post-user-update",
 	"pre-user-deletion",
 	"post-user-deletion"
-]), Pi = e.enum(["post-user-login"]);
-Ai.options, ji.options, Mi.options, Ni.options, Pi.options;
-var Fi = e.enum(["impersonate"]), Ii = e.enum([
+]), Ni = e.enum(["post-user-login"]);
+ki.options, Ai.options, ji.options, Mi.options, Ni.options;
+var Pi = e.enum(["impersonate"]), Fi = e.enum([
 	"ensure-username",
 	"set-preferred-username",
 	"account-linking"
-]), Y = {
+]), X = {
 	enabled: e.boolean().default(!1),
 	synchronous: e.boolean().default(!1),
 	priority: e.number().optional(),
 	hook_id: e.string().optional(),
 	metadata: e.record(e.string(), e.unknown()).optional(),
-	...U
-}, Li = e.object({
-	...Y,
-	trigger_id: Ai,
+	...W
+}, Ii = e.object({
+	...X,
+	trigger_id: ki,
 	url: e.string()
+}), Li = e.object({
+	...X,
+	trigger_id: Ai,
+	form_id: e.string()
 }), Ri = e.object({
-	...Y,
+	...X,
 	trigger_id: ji,
-	form_id: e.string()
+	template_id: Fi
 }), zi = e.object({
-	...Y,
+	...X,
 	trigger_id: Mi,
-	template_id: Ii
+	code_id: e.string()
 }), Bi = e.object({
-	...Y,
+	...X,
 	trigger_id: Ni,
-	code_id: e.string()
-}), Vi = e.object({
-	...Y,
-	trigger_id: Pi,
-	page_id: Fi,
+	page_id: Pi,
 	permission_required: e.string().optional()
 });
 e.union([
+	Ii,
 	Li,
 	Ri,
 	zi,
-	Bi,
-	Vi
+	Bi
 ]);
-var Hi = e.object({
-	...Y,
-	trigger_id: Ai
-}).extend(H.shape).extend({
+var Vi = e.object({
+	...X,
+	trigger_id: ki
+}).extend(U.shape).extend({
 	hook_id: e.string(),
 	url: e.string()
+}), Hi = e.object({
+	...X,
+	trigger_id: Ai
+}).extend(U.shape).extend({
+	hook_id: e.string(),
+	form_id: e.string()
 }), Ui = e.object({
-	...Y,
+	...X,
 	trigger_id: ji
-}).extend(H.shape).extend({
+}).extend(U.shape).extend({
 	hook_id: e.string(),
-	form_id: e.string()
+	template_id: Fi
 }), Wi = e.object({
-	...Y,
+	...X,
 	trigger_id: Mi
-}).extend(H.shape).extend({
+}).extend(U.shape).extend({
 	hook_id: e.string(),
-	template_id: Ii
+	code_id: e.string()
 }), Gi = e.object({
-	...Y,
+	...X,
 	trigger_id: Ni
-}).extend(H.shape).extend({
-	hook_id: e.string(),
-	code_id: e.string()
-}), Ki = e.object({
-	...Y,
-	trigger_id: Pi
-}).extend(H.shape).extend({
+}).extend(U.shape).extend({
 	hook_id: e.string(),
-	page_id: Fi,
+	page_id: Pi,
 	permission_required: e.string().optional()
 });
 e.union([
+	Vi,
 	Hi,
 	Ui,
 	Wi,
-	Gi,
-	Ki
+	Gi
 ]), e.object({
 	code: e.string().max(1e5),
 	secrets: e.record(e.string(), e.string()).optional()
 }).extend({
 	id: e.string(),
 	tenant_id: e.string()
-}).extend(H.shape);
-var qi = e.object({ name: e.string().optional() }), Ji = e.object({ email: e.string().optional() }), Yi = e.object({
+}).extend(U.shape);
+var Ki = e.object({ name: e.string().optional() }), qi = e.object({ email: e.string().optional() }), Ji = e.object({
 	id: e.string().optional(),
 	organization_id: e.string().max(50),
-	inviter: qi,
-	invitee: Ji,
+	inviter: Ki,
+	invitee: qi,
 	invitation_url: e.string().url(),
 	client_id: e.string(),
 	connection_id: e.string().optional(),
@@ -5385,8 +5385,8 @@ e.object({
 	created_at: e.string().datetime(),
 	expires_at: e.string().datetime(),
 	ticket_id: e.string().optional()
-}).extend(Yi.omit({ id: !0 }).shape);
-var Xi = e.object({
+}).extend(Ji.omit({ id: !0 }).shape);
+var Yi = e.object({
 	alg: e.enum([
 		"RS256",
 		"RS384",
@@ -5428,7 +5428,7 @@ var Xi = e.object({
 		path: [r],
 		message: `EC JWK is missing required member '${r}'`
 	});
-}), Zi = e.object({ keys: e.array(Xi) });
+}), Xi = e.object({ keys: e.array(Yi) });
 e.object({
 	issuer: e.string(),
 	authorization_endpoint: e.string(),
@@ -5457,35 +5457,35 @@ e.object({
 	backchannel_logout_supported: e.boolean().optional(),
 	backchannel_logout_session_supported: e.boolean().optional()
 });
-var Qi = /* @__PURE__ */ function(e) {
+var Zi = /* @__PURE__ */ function(e) {
 	return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.AWAITING_CONSENT = "awaiting_consent", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
-}({}), $i = e.nativeEnum(Qi), ea = e.object({
+}({}), Qi = e.nativeEnum(Zi), $i = e.object({
 	strategy: e.string(),
 	strategy_type: e.string()
 });
 e.object({
 	csrf_token: e.string(),
 	auth0Client: e.string().optional(),
-	authParams: Nr,
+	authParams: Mr,
 	expires_at: e.string(),
 	deleted_at: e.string().optional(),
 	ip: e.string().optional(),
 	useragent: e.string().optional(),
 	session_id: e.string().optional(),
 	authorization_url: e.string().optional(),
-	state: $i.optional().default("pending"),
+	state: Qi.optional().default("pending"),
 	state_data: e.string().optional(),
 	failure_reason: e.string().optional(),
 	user_id: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: ea.optional(),
+	auth_strategy: $i.optional(),
 	authenticated_at: e.string().optional()
 }).openapi({ description: "This represents a login sesion" }).extend({
 	id: e.string().openapi({ description: "This is is used as the state in the universal login" }),
 	created_at: e.string(),
 	updated_at: e.string()
 });
-var X = {
+var Z = {
 	ACLS_SUMMARY: "acls_summary",
 	ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
 	API_LIMIT: "api_limit",
@@ -5647,17 +5647,17 @@ var X = {
 	WARNING_DURING_LOGIN: "w",
 	WARNING_SENDING_NOTIFICATION: "wn",
 	WARNING_USER_MANAGEMENT: "wum"
-}, ta = e.string().refine((e) => Object.values(X).includes(e), { message: "Invalid log type" });
-X.ACLS_SUMMARY, X.ACTIONS_EXECUTION_FAILED, X.API_LIMIT, X.API_LIMIT_WARNING, X.APPI, X.CIBA_EXCHANGE_FAILED, X.CIBA_EXCHANGE_SUCCEEDED, X.CIBA_START_FAILED, X.CIBA_START_SUCCEEDED, X.CODE_LINK_SENT, X.CODE_SENT, X.DEPRECATION_NOTICE, X.CONFIG_INHERITANCE_DIFF, X.CONFIG_DRIFT, X.FAILED_LOGIN, X.FAILED_BY_CONNECTOR, X.FAILED_CHANGE_EMAIL, X.FAILED_BY_CORS, X.FAILED_CROSS_ORIGIN_AUTHENTICATION, X.FAILED_CHANGE_PASSWORD, X.FAILED_POST_CHANGE_PASSWORD_HOOK, X.FAILED_CHANGE_PHONE_NUMBER, X.FAILED_CHANGE_PASSWORD_REQUEST, X.FAILED_CONNECTOR_PROVISIONING, X.FAILED_CHANGE_USERNAME, X.FAILED_DELEGATION, X.FAILED_DEVICE_ACTIVATION, X.FAILED_DEVICE_AUTHORIZATION_REQUEST, X.USER_CANCELED_DEVICE_CONFIRMATION, X.FAILED_USER_DELETION, X.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, X.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, X.FAILED_EXCHANGE_CUSTOM_TOKEN, X.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, X.FAILED_FEDERATED_LOGOUT, X.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN, X.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, X.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, X.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, X.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, X.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, X.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN, X.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, X.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, X.FAILED_HOOK, X.FAILED_IMPERSONATION, X.FAILED_INVITE_ACCEPT, X.FAILED_LOGOUT, X.FLOWS_EXECUTION_COMPLETED, X.FLOWS_EXECUTION_FAILED, X.FAILED_SENDING_NOTIFICATION, X.FORMS_SUBMISSION_FAILED, X.FORMS_SUBMISSION_SUCCEEDED, X.FAILED_LOGIN_INCORRECT_PASSWORD, X.FAILED_PUSHED_AUTHORIZATION_REQUEST, X.FAILED_POST_USER_REGISTRATION_HOOK, X.FAILED_SIGNUP, X.FAILED_SILENT_AUTH, X.FAILED_LOGIN_INVALID_EMAIL_USERNAME, X.FAILED_USERS_IMPORT, X.FAILED_VERIFICATION_EMAIL, X.FAILED_VERIFICATION_EMAIL_REQUEST, X.EMAIL_VERIFICATION_CONFIRMED, X.EMAIL_VERIFICATION_FAILED, X.MFA_AUTH_FAILED, X.MFA_AUTH_REJECTED, X.MFA_AUTH_SUCCESS, X.MFA_ENROLLMENT_COMPLETE, X.TOO_MANY_MFA_FAILURES, X.MFA_RECOVERY_FAILED, X.MFA_RECOVERY_RATE_LIMIT_EXCEED, X.MFA_RECOVERY_SUCCESS, X.MFA_EMAIL_SENT, X.EMAIL_VERIFICATION_SENT, X.EMAIL_VERIFICATION_SEND_FAILURE, X.PUSH_NOTIFICATION_SENT, X.ERROR_SENDING_MFA_PUSH_NOTIFICATION, X.MFA_SMS_SENT, X.ERROR_SENDING_MFA_SMS, X.MFA_VOICE_CALL_SUCCESS, X.MFA_VOICE_CALL_FAILED, X.SECOND_FACTOR_STARTED, X.MFA_ENROLL_STARTED, X.MFA_ENROLLMENT_FAILED, X.GUARDIAN_TENANT_UPDATE, X.UNENROLL_DEVICE_ACCOUNT, X.UPDATE_DEVICE_ACCOUNT, X.WEBAUTHN_CHALLENGE_FAILED, X.WEBAUTHN_ENROLLMENT_FAILED, X.FAILED_KMS_API_OPERATION, X.SUCCESS_KMS_API_OPERATION, X.KMS_KEY_STATE_CHANGED, X.TOO_MANY_CALLS_TO_DELEGATION, X.BLOCKED_IP_ADDRESS, X.BLOCKED_ACCOUNT_IP, X.BLOCKED_ACCOUNT_EMAIL, X.INFORMATION, X.MFA_REQUIRED, X.MANAGEMENT_API_READ_OPERATION, X.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, X.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, X.FAILED_OIDC_BACKCHANNEL_LOGOUT, X.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT, X.ORGANIZATION_MEMBER_ADDED, X.PASSKEY_CHALLENGE_FAILED, X.PASSKEY_CHALLENGE_STARTED, X.PRE_LOGIN_ASSESSMENT, X.BREACHED_PASSWORD, X.BREACHED_PASSWORD_ON_RESET, X.SUCCESS_RESOURCE_CLEANUP, X.RICH_CONSENTS_ACCESS_ERROR, X.SUCCESS_LOGIN, X.SUCCESS_API_OPERATION, X.FAILED_API_OPERATION, X.SUCCESS_CHANGE_EMAIL, X.SUCCESS_CROSS_ORIGIN_AUTHENTICATION, X.SUCCESS_CHANGE_PASSWORD, X.SUCCESS_CHANGE_PHONE_NUMBER, X.SUCCESS_CHANGE_PASSWORD_REQUEST, X.SUCCESS_CHANGE_USERNAME, X.SUCCESS_CREDENTIAL_VALIDATION, X.SUCCESS_DELEGATION, X.SUCCESS_USER_DELETION, X.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, X.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, X.SUCCESS_EXCHANGE_CUSTOM_TOKEN, X.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, X.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN, X.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, X.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, X.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, X.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, X.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN, X.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN, X.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN, X.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, X.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, X.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, X.SUCCESS_IMPERSONATION, X.SUCCESSFULLY_ACCEPTED_USER_INVITE, X.BREACHED_PASSWORD_ON_SIGNUP, X.SUCCESS_LOGOUT, X.SUCCESS_HOOK, X.SUCCESS_PASSWORD_MIGRATION, X.SUCCESS_REVOCATION, X.SUCCESS_SIGNUP, X.FAILED_SS_SSO_OPERATION, X.INFORMATION_FROM_SS_SSO_OPERATION, X.SUCCESS_SS_SSO_OPERATION, X.SUCCESS_SILENT_AUTH, X.SUCCESSFUL_SCIM_OPERATION, X.SUCCESSFULLY_IMPORTED_USERS, X.SUCCESS_VERIFICATION_EMAIL, X.SUCCESS_VERIFICATION_EMAIL_REQUEST, X.MAX_AMOUNT_OF_AUTHENTICATORS, X.USER_LOGIN_BLOCK_RELEASED, X.FAILED_UNIVERSAL_LOGOUT, X.SUCCESSFUL_UNIVERSAL_LOGOUT, X.WARNING_DURING_LOGIN, X.WARNING_SENDING_NOTIFICATION, X.WARNING_USER_MANAGEMENT, (() => {
+}, ea = e.string().refine((e) => Object.values(Z).includes(e), { message: "Invalid log type" });
+Z.ACLS_SUMMARY, Z.ACTIONS_EXECUTION_FAILED, Z.API_LIMIT, Z.API_LIMIT_WARNING, Z.APPI, Z.CIBA_EXCHANGE_FAILED, Z.CIBA_EXCHANGE_SUCCEEDED, Z.CIBA_START_FAILED, Z.CIBA_START_SUCCEEDED, Z.CODE_LINK_SENT, Z.CODE_SENT, Z.DEPRECATION_NOTICE, Z.CONFIG_INHERITANCE_DIFF, Z.CONFIG_DRIFT, Z.FAILED_LOGIN, Z.FAILED_BY_CONNECTOR, Z.FAILED_CHANGE_EMAIL, Z.FAILED_BY_CORS, Z.FAILED_CROSS_ORIGIN_AUTHENTICATION, Z.FAILED_CHANGE_PASSWORD, Z.FAILED_POST_CHANGE_PASSWORD_HOOK, Z.FAILED_CHANGE_PHONE_NUMBER, Z.FAILED_CHANGE_PASSWORD_REQUEST, Z.FAILED_CONNECTOR_PROVISIONING, Z.FAILED_CHANGE_USERNAME, Z.FAILED_DELEGATION, Z.FAILED_DEVICE_ACTIVATION, Z.FAILED_DEVICE_AUTHORIZATION_REQUEST, Z.USER_CANCELED_DEVICE_CONFIRMATION, Z.FAILED_USER_DELETION, Z.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, Z.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, Z.FAILED_EXCHANGE_CUSTOM_TOKEN, Z.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, Z.FAILED_FEDERATED_LOGOUT, Z.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN, Z.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, Z.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, Z.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, Z.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, Z.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, Z.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN, Z.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, Z.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, Z.FAILED_HOOK, Z.FAILED_IMPERSONATION, Z.FAILED_INVITE_ACCEPT, Z.FAILED_LOGOUT, Z.FLOWS_EXECUTION_COMPLETED, Z.FLOWS_EXECUTION_FAILED, Z.FAILED_SENDING_NOTIFICATION, Z.FORMS_SUBMISSION_FAILED, Z.FORMS_SUBMISSION_SUCCEEDED, Z.FAILED_LOGIN_INCORRECT_PASSWORD, Z.FAILED_PUSHED_AUTHORIZATION_REQUEST, Z.FAILED_POST_USER_REGISTRATION_HOOK, Z.FAILED_SIGNUP, Z.FAILED_SILENT_AUTH, Z.FAILED_LOGIN_INVALID_EMAIL_USERNAME, Z.FAILED_USERS_IMPORT, Z.FAILED_VERIFICATION_EMAIL, Z.FAILED_VERIFICATION_EMAIL_REQUEST, Z.EMAIL_VERIFICATION_CONFIRMED, Z.EMAIL_VERIFICATION_FAILED, Z.MFA_AUTH_FAILED, Z.MFA_AUTH_REJECTED, Z.MFA_AUTH_SUCCESS, Z.MFA_ENROLLMENT_COMPLETE, Z.TOO_MANY_MFA_FAILURES, Z.MFA_RECOVERY_FAILED, Z.MFA_RECOVERY_RATE_LIMIT_EXCEED, Z.MFA_RECOVERY_SUCCESS, Z.MFA_EMAIL_SENT, Z.EMAIL_VERIFICATION_SENT, Z.EMAIL_VERIFICATION_SEND_FAILURE, Z.PUSH_NOTIFICATION_SENT, Z.ERROR_SENDING_MFA_PUSH_NOTIFICATION, Z.MFA_SMS_SENT, Z.ERROR_SENDING_MFA_SMS, Z.MFA_VOICE_CALL_SUCCESS, Z.MFA_VOICE_CALL_FAILED, Z.SECOND_FACTOR_STARTED, Z.MFA_ENROLL_STARTED, Z.MFA_ENROLLMENT_FAILED, Z.GUARDIAN_TENANT_UPDATE, Z.UNENROLL_DEVICE_ACCOUNT, Z.UPDATE_DEVICE_ACCOUNT, Z.WEBAUTHN_CHALLENGE_FAILED, Z.WEBAUTHN_ENROLLMENT_FAILED, Z.FAILED_KMS_API_OPERATION, Z.SUCCESS_KMS_API_OPERATION, Z.KMS_KEY_STATE_CHANGED, Z.TOO_MANY_CALLS_TO_DELEGATION, Z.BLOCKED_IP_ADDRESS, Z.BLOCKED_ACCOUNT_IP, Z.BLOCKED_ACCOUNT_EMAIL, Z.INFORMATION, Z.MFA_REQUIRED, Z.MANAGEMENT_API_READ_OPERATION, Z.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, Z.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, Z.FAILED_OIDC_BACKCHANNEL_LOGOUT, Z.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT, Z.ORGANIZATION_MEMBER_ADDED, Z.PASSKEY_CHALLENGE_FAILED, Z.PASSKEY_CHALLENGE_STARTED, Z.PRE_LOGIN_ASSESSMENT, Z.BREACHED_PASSWORD, Z.BREACHED_PASSWORD_ON_RESET, Z.SUCCESS_RESOURCE_CLEANUP, Z.RICH_CONSENTS_ACCESS_ERROR, Z.SUCCESS_LOGIN, Z.SUCCESS_API_OPERATION, Z.FAILED_API_OPERATION, Z.SUCCESS_CHANGE_EMAIL, Z.SUCCESS_CROSS_ORIGIN_AUTHENTICATION, Z.SUCCESS_CHANGE_PASSWORD, Z.SUCCESS_CHANGE_PHONE_NUMBER, Z.SUCCESS_CHANGE_PASSWORD_REQUEST, Z.SUCCESS_CHANGE_USERNAME, Z.SUCCESS_CREDENTIAL_VALIDATION, Z.SUCCESS_DELEGATION, Z.SUCCESS_USER_DELETION, Z.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, Z.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, Z.SUCCESS_EXCHANGE_CUSTOM_TOKEN, Z.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, Z.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN, Z.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, Z.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, Z.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, Z.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, Z.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN, Z.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN, Z.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN, Z.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, Z.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, Z.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, Z.SUCCESS_IMPERSONATION, Z.SUCCESSFULLY_ACCEPTED_USER_INVITE, Z.BREACHED_PASSWORD_ON_SIGNUP, Z.SUCCESS_LOGOUT, Z.SUCCESS_HOOK, Z.SUCCESS_PASSWORD_MIGRATION, Z.SUCCESS_REVOCATION, Z.SUCCESS_SIGNUP, Z.FAILED_SS_SSO_OPERATION, Z.INFORMATION_FROM_SS_SSO_OPERATION, Z.SUCCESS_SS_SSO_OPERATION, Z.SUCCESS_SILENT_AUTH, Z.SUCCESSFUL_SCIM_OPERATION, Z.SUCCESSFULLY_IMPORTED_USERS, Z.SUCCESS_VERIFICATION_EMAIL, Z.SUCCESS_VERIFICATION_EMAIL_REQUEST, Z.MAX_AMOUNT_OF_AUTHENTICATORS, Z.USER_LOGIN_BLOCK_RELEASED, Z.FAILED_UNIVERSAL_LOGOUT, Z.SUCCESSFUL_UNIVERSAL_LOGOUT, Z.WARNING_DURING_LOGIN, Z.WARNING_SENDING_NOTIFICATION, Z.WARNING_USER_MANAGEMENT, (() => {
 	let e = {};
-	for (let [t, n] of Object.entries(X)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "CONFIG_INHERITANCE_DIFF" || t === "CONFIG_DRIFT" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
+	for (let [t, n] of Object.entries(Z)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "CONFIG_INHERITANCE_DIFF" || t === "CONFIG_DRIFT" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
 	return e;
 })();
-var na = e.object({
+var ta = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.object({ node: e.string().optional() }).optional()
-}), ra = e.object({
+}), na = e.object({
 	country_code: e.string().length(2),
 	city_name: e.string(),
 	latitude: e.string(),
@@ -5666,7 +5666,7 @@ var na = e.object({
 	continent_code: e.string()
 });
 e.object({
-	type: ta,
+	type: ea,
 	date: e.string(),
 	description: e.string().optional(),
 	ip: e.string().optional(),
@@ -5684,63 +5684,63 @@ e.object({
 	strategy: e.string().optional(),
 	strategy_type: e.string().optional(),
 	hostname: e.string().optional(),
-	auth0_client: na.optional(),
+	auth0_client: ta.optional(),
 	log_id: e.string().optional(),
-	location_info: ra.optional()
+	location_info: na.optional()
 }).extend({ log_id: e.string() });
-var ia = e.enum([
+var ra = e.enum([
 	"http",
 	"eventbridge",
 	"eventgrid",
 	"splunk",
 	"datadog",
 	"sumo"
-]), aa = e.enum([
+]), ia = e.enum([
 	"active",
 	"paused",
 	"suspended"
-]), oa = e.object({
+]), aa = e.object({
 	type: e.string(),
 	name: e.string()
 });
 e.object({
 	name: e.string(),
-	type: ia,
-	status: aa.optional(),
+	type: ra,
+	status: ia.optional(),
 	sink: e.record(e.string(), e.unknown()),
-	filters: e.array(oa).optional(),
+	filters: e.array(aa).optional(),
 	isPriority: e.boolean().optional()
 }).extend({
 	id: e.string(),
-	status: aa,
+	status: ia,
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-var sa = e.enum([
+var oa = e.enum([
 	"auth0",
 	"cognito",
 	"okta",
 	"oidc"
-]), ca = e.object({
+]), sa = e.object({
 	domain: e.string(),
 	client_id: e.string(),
 	client_secret: e.string(),
 	audience: e.string().optional(),
 	scope: e.string().optional()
-}), la = e.object({
+}), ca = e.object({
 	id: e.string().optional(),
 	name: e.string(),
-	provider: sa,
+	provider: oa,
 	connection: e.string(),
 	enabled: e.boolean().default(!0),
-	credentials: ca
+	credentials: sa
 });
 e.object({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(la.shape);
-var ua = e.object({
+}).extend(ca.shape);
+var la = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	admin_notification_frequency: e.array(e.string()).optional(),
@@ -5749,13 +5749,13 @@ var ua = e.object({
 		"pre-user-registration": e.object({ shields: e.array(e.string()).optional() }).optional(),
 		"pre-change-password": e.object({ shields: e.array(e.string()).optional() }).optional()
 	}).optional()
-}), da = e.object({
+}), ua = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
 	mode: e.string().optional(),
 	max_attempts: e.number().optional()
-}), fa = e.object({
+}), da = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
@@ -5769,10 +5769,10 @@ var ua = e.object({
 			rate: e.number().optional()
 		}).optional()
 	}).optional()
-}), pa = e.object({
-	breached_password_detection: ua.optional(),
-	brute_force_protection: da.optional(),
-	suspicious_ip_throttling: fa.optional()
+}), fa = e.object({
+	breached_password_detection: la.optional(),
+	brute_force_protection: ua.optional(),
+	suspicious_ip_throttling: da.optional()
 });
 e.object({
 	id: e.string().optional(),
@@ -5785,14 +5785,18 @@ e.object({
 	created_at: e.string(),
 	updated_at: e.string()
 });
-var ma = e.object({
+var pa = e.object({
 	initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
 	initial_ip: e.string().describe("First IP address associated with this session"),
 	initial_asn: e.string().describe("First autonomous system number associated with this session"),
 	last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
 	last_ip: e.string().describe("Last IP address from which this user logged in"),
 	last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), ha = e.object({
+}), ma = e.object({
+	name: e.string().describe("Authentication method name, e.g. \"mfa\" for a completed second factor"),
+	timestamp: e.string().describe("When the method was completed (ISO 8601)"),
+	type: e.string().optional().describe("For \"mfa\": the authentication method type used, e.g. \"totp\", \"phone\", \"passkey\"")
+}), ha = e.object({ methods: e.array(ma) }), ga = e.object({
 	id: e.string(),
 	revoked_at: e.string().optional(),
 	used_at: e.string().optional(),
@@ -5800,15 +5804,16 @@ var ma = e.object({
 	expires_at: e.string().optional(),
 	login_session_id: e.string(),
 	idle_expires_at: e.string().optional(),
-	device: ma.describe("Metadata related to the device used in the session"),
-	clients: e.array(e.string()).describe("List of client details for the session")
+	device: pa.describe("Metadata related to the device used in the session"),
+	clients: e.array(e.string()).describe("List of client details for the session"),
+	authentication: ha.optional().describe("Authentication methods completed in this session (currently MFA only)")
 });
 e.object({
 	created_at: e.string(),
 	updated_at: e.string(),
 	authenticated_at: e.string(),
 	last_interaction_at: e.string()
-}).extend(ha.shape), e.object({
+}).extend(ga.shape), e.object({
 	kid: e.string().openapi({ description: "The key id of the signing key" }),
 	tenant_id: e.string().optional().openapi({ description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped." }),
 	cert: e.string().openapi({ description: "The public certificate of the signing key" }),
@@ -5825,7 +5830,93 @@ e.object({
 	connection: e.string().optional().openapi({ description: "The connection identifier associated with the key" }),
 	type: e.enum(["jwt_signing", "saml_encryption"]).openapi({ description: "The type of the signing key" })
 });
-var ga = e.object({
+var _a = e.enum([
+	"never",
+	"always",
+	"all-applications",
+	"confidence-score"
+]);
+e.object({
+	idle_session_lifetime: e.number().default(72),
+	session_lifetime: e.number().default(168),
+	session_cookie: e.object({ mode: e.enum(["persistent", "non-persistent"]).optional() }).optional(),
+	enable_client_connections: e.boolean().optional(),
+	default_redirection_uri: e.string().optional(),
+	enabled_locales: e.array(e.string()).optional(),
+	default_directory: e.string().optional(),
+	error_page: e.object({
+		html: e.string().optional(),
+		show_log_link: e.boolean().optional(),
+		url: e.string().optional()
+	}).optional(),
+	flags: e.object({
+		allow_legacy_delegation_grant_types: e.boolean().optional(),
+		allow_legacy_ro_grant_types: e.boolean().optional(),
+		allow_legacy_tokeninfo_endpoint: e.boolean().optional(),
+		disable_clickjack_protection_headers: e.boolean().optional(),
+		enable_apis_section: e.boolean().optional(),
+		enable_client_connections: e.boolean().optional(),
+		enable_custom_domain_in_emails: e.boolean().optional(),
+		enable_dynamic_client_registration: e.boolean().optional(),
+		enable_idtoken_api2: e.boolean().optional(),
+		enable_legacy_logs_search_v2: e.boolean().optional(),
+		enable_legacy_profile: e.boolean().optional(),
+		enable_pipeline2: e.boolean().optional(),
+		enable_public_signup_user_exists_error: e.boolean().optional(),
+		use_scope_descriptions_for_consent: e.boolean().optional(),
+		disable_management_api_sms_obfuscation: e.boolean().optional(),
+		enable_adfs_waad_email_verification: e.boolean().optional(),
+		revoke_refresh_token_grant: e.boolean().optional(),
+		dashboard_log_streams_next: e.boolean().optional(),
+		dashboard_insights_view: e.boolean().optional(),
+		disable_fields_map_fix: e.boolean().optional(),
+		mfa_show_factor_list_on_enrollment: e.boolean().optional()
+	}).optional(),
+	friendly_name: e.string().optional(),
+	picture_url: e.string().optional(),
+	support_email: e.string().optional(),
+	support_url: e.string().optional(),
+	sandbox_version: e.string().optional(),
+	sandbox_versions_available: e.array(e.string()).optional(),
+	change_password: e.object({
+		enabled: e.boolean(),
+		html: e.string()
+	}).optional(),
+	guardian_mfa_page: e.object({
+		enabled: e.boolean(),
+		html: e.string()
+	}).optional(),
+	default_audience: e.string().optional(),
+	default_organization: e.string().optional(),
+	sessions: e.object({ oidc_logout_prompt_enabled: e.boolean().optional() }).optional(),
+	mfa: e.object({
+		policy: _a.default("never").optional(),
+		factors: e.object({
+			sms: e.boolean().default(!1),
+			otp: e.boolean().default(!1),
+			email: e.boolean().default(!1),
+			push_notification: e.boolean().default(!1),
+			webauthn_roaming: e.boolean().default(!1),
+			webauthn_platform: e.boolean().default(!1),
+			recovery_code: e.boolean().default(!1),
+			duo: e.boolean().default(!1)
+		}).optional(),
+		sms_provider: e.object({ provider: e.enum([
+			"twilio",
+			"vonage",
+			"aws_sns",
+			"phone_message_hook"
+		]).optional() }).optional(),
+		twilio: e.object({
+			sid: e.string().optional(),
+			auth_token: e.string().optional(),
+			from: e.string().optional(),
+			messaging_service_sid: e.string().optional()
+		}).optional(),
+		phone_message: e.object({ message: e.string().optional() }).optional()
+	}).optional()
+});
+var va = e.object({
 	id: e.string().optional(),
 	parent_tenant_id: e.string().nullish(),
 	config_sync: e.enum([
@@ -5951,9 +6042,9 @@ var ga = e.object({
 		"shared_planetscale"
 	]).optional(),
 	d1_database_id: e.string().max(64).optional(),
-	attack_protection: pa.optional(),
+	attack_protection: fa.optional(),
 	mfa: e.object({
-		policy: e.enum(["never", "always"]).default("never").optional(),
+		policy: _a.default("never").optional(),
 		factors: e.object({
 			sms: e.boolean().default(!1),
 			otp: e.boolean().default(!1),
@@ -5982,12 +6073,35 @@ var ga = e.object({
 e.object({
 	created_at: e.string().nullable().transform((e) => e ?? ""),
 	updated_at: e.string().nullable().transform((e) => e ?? "")
-}).extend(ga.shape).extend({
+}).extend(va.shape).extend({
 	id: e.string(),
 	is_control_plane: e.boolean().optional(),
 	has_children: e.boolean().optional()
 });
-var _a = e.enum([
+var ya = va.shape.mfa.unwrap().shape, ba = e.object({
+	...ya,
+	policy: _a.optional(),
+	factors: e.object({
+		sms: e.boolean().optional(),
+		otp: e.boolean().optional(),
+		email: e.boolean().optional(),
+		push_notification: e.boolean().optional(),
+		webauthn_roaming: e.boolean().optional(),
+		webauthn_platform: e.boolean().optional(),
+		recovery_code: e.boolean().optional(),
+		duo: e.boolean().optional()
+	}).optional()
+});
+e.object(va.shape).extend({
+	deployment_type: e.enum(["shared", "wfp"]),
+	provisioning_state: e.enum([
+		"pending",
+		"ready",
+		"failed"
+	]),
+	mfa: ba
+}).partial();
+var xa = e.enum([
 	"provision",
 	"seed",
 	"upgrade",
@@ -5997,18 +6111,18 @@ var _a = e.enum([
 	"sync-defaults",
 	"detach",
 	"tenant-members-request"
-]), va = e.enum([
+]), Sa = e.enum([
 	"pending",
 	"running",
 	"succeeded",
 	"failed",
 	"cancelled"
-]), ya = e.string().max(64);
+]), Ca = e.string().max(64);
 e.object({
 	tenant_id: e.string().max(255).nullable().default(null),
 	rollout_id: e.string().max(255).nullable().optional(),
-	kind: _a,
-	engine: ya,
+	kind: xa,
+	engine: Ca,
 	engine_instance_id: e.string().max(100).nullable().optional(),
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
@@ -6016,7 +6130,7 @@ e.object({
 	input: e.record(e.string(), e.unknown()).nullable().optional()
 }).extend({
 	id: e.string(),
-	status: va,
+	status: Sa,
 	current_step: e.string().max(255).nullable().optional(),
 	error: e.string().nullable().optional(),
 	result: e.record(e.string(), e.unknown()).nullable().optional(),
@@ -6037,7 +6151,7 @@ e.object({
 	claim_expires_at: !0,
 	finished_at: !0
 }).partial();
-var ba = e.enum([
+var wa = e.enum([
 	"started",
 	"succeeded",
 	"failed",
@@ -6048,14 +6162,14 @@ var ba = e.enum([
 e.object({
 	operation_id: e.string().max(255),
 	step: e.string().max(255),
-	outcome: ba,
+	outcome: wa,
 	detail: e.record(e.string(), e.unknown()).nullable().optional(),
 	attempt: e.number().int().min(1).default(1)
 }).extend({
 	id: e.string(),
 	created_at: e.string()
 });
-var xa = e.enum([
+var Q = e.enum([
 	"pending",
 	"inserted",
 	"updated",
@@ -6066,29 +6180,29 @@ e.object({
 	operation_id: e.string().max(255),
 	seq: e.number().int().min(0),
 	payload: e.record(e.string(), e.unknown()),
-	status: xa.default("pending"),
+	status: Q.default("pending"),
 	error_code: e.string().max(64).nullable().optional(),
 	error_message: e.string().nullable().optional(),
 	error_path: e.string().max(255).nullable().optional(),
 	entity_id: e.string().max(255).nullable().optional()
 }).extend({
-	status: xa,
+	status: Q,
 	created_at: e.string(),
 	updated_at: e.string()
 }), e.object({
 	seq: e.number().int().min(0),
-	status: xa,
+	status: Q,
 	error_code: e.string().max(64).nullable().optional(),
 	error_message: e.string().nullable().optional(),
 	error_path: e.string().max(255).nullable().optional(),
 	entity_id: e.string().max(255).nullable().optional()
 });
-var Sa = e.enum([
+var Ta = e.enum([
 	"upgrade",
 	"reseed",
 	"backup",
 	"config-sync"
-]), Ca = e.enum([
+]), Ea = e.enum([
 	"pending",
 	"canary",
 	"rolling",
@@ -6097,7 +6211,7 @@ var Sa = e.enum([
 	"failed"
 ]);
 e.object({
-	kind: Sa,
+	kind: Ta,
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	wave_size: e.number().int().min(1).default(10),
@@ -6107,7 +6221,7 @@ e.object({
 	config: e.record(e.string(), e.unknown()).nullable().optional()
 }).extend({
 	id: e.string(),
-	status: Ca,
+	status: Ea,
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional(),
@@ -6121,26 +6235,26 @@ e.object({
 	paused_reason: !0,
 	finished_at: !0
 }).partial();
-var wa = e.enum([
+var Da = e.enum([
 	"invite",
 	"add_members",
 	"remove_members",
 	"assign_roles",
 	"remove_roles",
 	"revoke_invitation"
-]), Ta = e.enum([
+]), Oa = e.enum([
 	"pending",
 	"succeeded",
 	"failed"
 ]);
 e.object({
-	kind: wa,
+	kind: Da,
 	requested_by: e.string().min(1).max(255),
 	payload: e.record(e.string(), e.unknown())
 }).extend({
 	id: e.string(),
 	tenant_id: e.string(),
-	status: Ta,
+	status: Oa,
 	result: e.record(e.string(), e.unknown()).nullable().optional(),
 	error: e.string().nullable().optional(),
 	notified_at: e.string().nullable().optional(),
@@ -6148,7 +6262,7 @@ e.object({
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
 }), e.object({
-	status: Ta.optional(),
+	status: Oa.optional(),
 	result: e.record(e.string(), e.unknown()).nullable().optional(),
 	error: e.string().nullable().optional(),
 	notified_at: e.string().nullable().optional(),
@@ -6165,7 +6279,7 @@ e.object({
 	code: e.string(),
 	state: e.string().optional()
 });
-var Ea = e.object({
+var ka = e.object({
 	button_border_radius: e.number(),
 	button_border_weight: e.number(),
 	buttons_style: e.enum([
@@ -6183,7 +6297,7 @@ var Ea = e.object({
 	show_widget_shadow: e.boolean(),
 	widget_border_weight: e.number(),
 	widget_corner_radius: e.number()
-}), Da = e.object({
+}), Aa = e.object({
 	base_focus_color: e.string(),
 	base_hover_color: e.string(),
 	body_text: e.string(),
@@ -6207,20 +6321,20 @@ var Ea = e.object({
 	success: e.string(),
 	widget_background: e.string(),
 	widget_border: e.string()
-}), Z = e.object({
+}), $ = e.object({
 	bold: e.boolean(),
 	size: e.number()
-}), Oa = e.object({
-	body_text: Z,
-	buttons_text: Z,
+}), ja = e.object({
+	body_text: $,
+	buttons_text: $,
 	font_url: e.string(),
-	input_labels: Z,
-	links: Z,
+	input_labels: $,
+	links: $,
 	links_style: e.enum(["normal", "underlined"]),
 	reference_text_size: e.number(),
-	subtitle: Z,
-	title: Z
-}), ka = e.object({
+	subtitle: $,
+	title: $
+}), Ma = e.object({
 	background_color: e.string(),
 	background_image_url: e.string(),
 	page_layout: e.enum([
@@ -6233,7 +6347,7 @@ var Ea = e.object({
 		"chip",
 		"none"
 	]).optional()
-}), Aa = e.object({
+}), Na = e.object({
 	header_text_alignment: e.enum([
 		"center",
 		"left",
@@ -6250,46 +6364,46 @@ var Ea = e.object({
 	social_buttons_layout: e.enum(["bottom", "top"])
 });
 e.object({
-	borders: Ea,
-	colors: Da,
+	borders: ka,
+	colors: Aa,
 	displayName: e.string(),
-	fonts: Oa,
-	page_background: ka,
-	widget: Aa
+	fonts: ja,
+	page_background: Ma,
+	widget: Na
 }).extend({ themeId: e.string() }), e.object({
-	...U,
+	...W,
 	universal_login_experience: e.enum(["new", "classic"]).default("new"),
 	identifier_first: e.boolean().default(!0),
 	password_first: e.boolean().default(!1),
 	show_last_used_connection: e.boolean().default(!1),
 	webauthn_platform_first_factor: e.boolean()
 });
-var ja = e.object({
+var Pa = e.object({
 	hosts: e.array(e.string()).optional(),
 	methods: e.array(e.string()).optional(),
 	path: e.string().default("/*"),
 	headers: e.record(e.string(), e.string()).optional(),
 	query: e.record(e.string(), e.string()).optional()
-}), Ma = e.object({
+}), Fa = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
-}), Na = e.object({
+}), Ia = e.object({
 	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
-	match: ja,
-	handlers: e.array(Ma).min(1)
+	match: Pa,
+	handlers: e.array(Fa).min(1)
 });
-Na.extend({
+Ia.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), Na.partial().omit({
+}), Ia.partial().omit({
 	id: !0,
 	custom_domain_id: !0
 });
-var Pa = "custom_authentication", Fa = [
+var La = "custom_authentication", Ra = [
 	"urn:ietf:params:oauth:",
 	"urn:auth0",
 	"urn:okta",
@@ -6297,56 +6411,56 @@ var Pa = "custom_authentication", Fa = [
 	"https://auth0.com",
 	"http://okta.com",
 	"https://okta.com"
-], Ia = e.string().min(1).max(200).refine((e) => e.startsWith("https://") || e.startsWith("urn:"), { message: "subject_token_type must be a URI starting with https:// or urn:" }).refine((e) => !Fa.some((t) => e.toLowerCase().startsWith(t)), { message: "subject_token_type uses a reserved namespace" }), La = e.enum([
+], za = e.string().min(1).max(200).refine((e) => e.startsWith("https://") || e.startsWith("urn:"), { message: "subject_token_type must be a URI starting with https:// or urn:" }).refine((e) => !Ra.some((t) => e.toLowerCase().startsWith(t)), { message: "subject_token_type uses a reserved namespace" }), Ba = e.enum([
 	"RS256",
 	"RS384",
 	"RS512",
 	"ES256",
 	"ES384",
 	"ES512"
-]), Ra = e.discriminatedUnion("type", [e.object({
+]), Va = e.discriminatedUnion("type", [e.object({
 	type: e.literal("connection"),
 	connection: e.string().min(1),
 	create_if_not_exists: e.boolean().default(!0),
 	trust_email_verified: e.boolean().default(!1)
-}), e.object({ type: e.literal("user_id") })]), za = e.object({
+}), e.object({ type: e.literal("user_id") })]), Ha = e.object({
 	issuer: e.string().min(1).max(2048),
-	jwks: Zi.optional(),
+	jwks: Xi.optional(),
 	jwks_uri: e.string().url().optional(),
 	audience: e.array(e.string().min(1)).min(1).optional(),
-	algorithms: e.array(La).min(1).optional(),
+	algorithms: e.array(Ba).min(1).optional(),
 	max_lifetime_seconds: e.number().int().min(1).max(3600).default(300),
 	require_jti: e.boolean().default(!0),
-	user_mapping: Ra
+	user_mapping: Va
 });
 e.object({
 	name: e.string().min(1).max(255),
-	subject_token_type: Ia,
+	subject_token_type: za,
 	action_id: e.string().min(1).optional(),
-	type: e.literal(Pa),
-	jwt_verification: za.optional()
+	type: e.literal(La),
+	jwt_verification: Ha.optional()
 }).extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
 }), e.object({
 	name: e.string().min(1).max(255).optional(),
-	subject_token_type: Ia.optional(),
-	jwt_verification: za.optional()
+	subject_token_type: za.optional(),
+	jwt_verification: Ha.optional()
 });
-var Ba = e.object({
+var Ua = e.object({
 	scim: e.string(),
 	auth0: e.string()
-}), Va = e.object({
+}), Wa = e.object({
 	connection_id: e.string(),
 	user_id_attribute: e.string().default("externalId"),
-	mapping: e.array(Ba).default([])
+	mapping: e.array(Ua).default([])
 });
 e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(Va.shape);
-var Ha = e.object({
+}).extend(Wa.shape);
+var Ga = e.object({
 	token_id: e.string(),
 	connection_id: e.string(),
 	token_hash: e.string(),
@@ -6356,21 +6470,21 @@ var Ha = e.object({
 e.object({
 	created_at: e.string(),
 	last_used_at: e.string().optional()
-}).extend(Ha.shape);
-var Ua = e.object({
+}).extend(Ga.shape);
+var Ka = e.object({
 	connection_id: e.string(),
 	external_id: e.string(),
 	user_id: e.string()
 });
-e.object({ created_at: e.string() }).extend(Ua.shape), e.object({
-	...U,
+e.object({ created_at: e.string() }).extend(Ka.shape), e.object({
+	...W,
 	name: e.string(),
 	enabled: e.boolean().optional().default(!0),
 	default_from_address: e.string().optional(),
 	credentials: e.record(e.string(), e.unknown()),
 	settings: e.object({}).optional()
 });
-var Wa = e.enum([
+var qa = e.enum([
 	"verify_email",
 	"verify_email_by_code",
 	"reset_email",
@@ -6385,7 +6499,7 @@ var Wa = e.enum([
 	"user_invitation"
 ]);
 e.object({
-	template: Wa,
+	template: qa,
 	body: e.string(),
 	from: e.string(),
 	subject: e.string(),
@@ -6400,13 +6514,13 @@ e.object({
 	session_id: e.string().optional(),
 	organization: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: ea.optional(),
+	auth_strategy: $i.optional(),
 	user_id: e.string(),
 	client_id: e.string(),
 	expires_at: e.string().optional(),
 	idle_expires_at: e.string().optional(),
 	last_exchanged_at: e.string().optional(),
-	device: ma,
+	device: pa,
 	resource_servers: e.array(e.object({
 		audience: e.string(),
 		scopes: e.string()
@@ -6427,10 +6541,10 @@ e.object({
 	name: e.string(),
 	options: e.object({})
 });
-var Ga = e.object({
+var Ja = e.object({
 	value: e.string(),
 	description: e.string().optional()
-}), Ka = e.object({
+}), Ya = e.object({
 	token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
 	enforce_policies: e.boolean().optional(),
 	allow_skipping_userinfo: e.boolean().optional(),
@@ -6438,11 +6552,11 @@ var Ga = e.object({
 	persist_client_authorization: e.boolean().optional(),
 	enable_introspection_endpoint: e.boolean().optional(),
 	mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
-}), qa = e.object({
+}), Xa = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	identifier: e.string(),
-	scopes: e.array(Ga).optional(),
+	scopes: e.array(Ja).optional(),
 	signing_alg: e.string().optional(),
 	signing_secret: e.string().optional(),
 	token_lifetime: e.number().default(86400),
@@ -6450,21 +6564,21 @@ var Ga = e.object({
 	skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
 	allow_offline_access: e.boolean().optional(),
 	verificationKey: e.string().optional(),
-	options: Ka.optional(),
+	options: Ya.optional(),
 	is_system: e.boolean().optional(),
-	...U,
+	...W,
 	metadata: e.record(e.string(), e.any()).optional()
 }).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(qa);
-var Ja = e.object({
+e.array(Xa);
+var Za = e.object({
 	role_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
 }).extend({ created_at: e.string() });
-e.array(Ja), e.object({
+e.array(Za), e.object({
 	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
 	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
 	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
@@ -6477,7 +6591,7 @@ e.array(Ja), e.object({
 	failed_logins: e.array(e.string()).optional(),
 	last_password_reset: e.string().optional()
 });
-var Ya = e.object({
+var Qa = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
@@ -6486,8 +6600,8 @@ var Ya = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(Ya);
-var Xa = e.object({
+e.array(Qa);
+var $a = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -6496,8 +6610,8 @@ var Xa = e.object({
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
 });
-e.array(Xa);
-var Za = e.object({
+e.array($a);
+var eo = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
@@ -6505,8 +6619,8 @@ var Za = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(Za);
-var Qa = e.object({
+e.array(eo);
+var to = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
@@ -6517,19 +6631,19 @@ var Qa = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Qa);
-var $a = e.object({
+e.array(to);
+var no = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), eo = e.object({
+}).optional(), ro = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), to = e.object({ client_credentials: e.object({
+}), io = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
@@ -6538,15 +6652,15 @@ e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: $a,
+	branding: no,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(eo).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: to
-}).extend(H.shape).extend({
+	enabled_connections: e.array(ro).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: io
+}).extend(U.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
 });
-var no = e.object({
+var ao = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
@@ -6559,89 +6673,10 @@ var no = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(no), e.object({
+e.array(ao), e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
-}).extend(H.shape).extend({ id: e.string() }), e.object({
-	idle_session_lifetime: e.number().default(72),
-	session_lifetime: e.number().default(168),
-	session_cookie: e.object({ mode: e.enum(["persistent", "non-persistent"]).optional() }).optional(),
-	enable_client_connections: e.boolean().optional(),
-	default_redirection_uri: e.string().optional(),
-	enabled_locales: e.array(e.string()).optional(),
-	default_directory: e.string().optional(),
-	error_page: e.object({
-		html: e.string().optional(),
-		show_log_link: e.boolean().optional(),
-		url: e.string().optional()
-	}).optional(),
-	flags: e.object({
-		allow_legacy_delegation_grant_types: e.boolean().optional(),
-		allow_legacy_ro_grant_types: e.boolean().optional(),
-		allow_legacy_tokeninfo_endpoint: e.boolean().optional(),
-		disable_clickjack_protection_headers: e.boolean().optional(),
-		enable_apis_section: e.boolean().optional(),
-		enable_client_connections: e.boolean().optional(),
-		enable_custom_domain_in_emails: e.boolean().optional(),
-		enable_dynamic_client_registration: e.boolean().optional(),
-		enable_idtoken_api2: e.boolean().optional(),
-		enable_legacy_logs_search_v2: e.boolean().optional(),
-		enable_legacy_profile: e.boolean().optional(),
-		enable_pipeline2: e.boolean().optional(),
-		enable_public_signup_user_exists_error: e.boolean().optional(),
-		use_scope_descriptions_for_consent: e.boolean().optional(),
-		disable_management_api_sms_obfuscation: e.boolean().optional(),
-		enable_adfs_waad_email_verification: e.boolean().optional(),
-		revoke_refresh_token_grant: e.boolean().optional(),
-		dashboard_log_streams_next: e.boolean().optional(),
-		dashboard_insights_view: e.boolean().optional(),
-		disable_fields_map_fix: e.boolean().optional(),
-		mfa_show_factor_list_on_enrollment: e.boolean().optional()
-	}).optional(),
-	friendly_name: e.string().optional(),
-	picture_url: e.string().optional(),
-	support_email: e.string().optional(),
-	support_url: e.string().optional(),
-	sandbox_version: e.string().optional(),
-	sandbox_versions_available: e.array(e.string()).optional(),
-	change_password: e.object({
-		enabled: e.boolean(),
-		html: e.string()
-	}).optional(),
-	guardian_mfa_page: e.object({
-		enabled: e.boolean(),
-		html: e.string()
-	}).optional(),
-	default_audience: e.string().optional(),
-	default_organization: e.string().optional(),
-	sessions: e.object({ oidc_logout_prompt_enabled: e.boolean().optional() }).optional(),
-	mfa: e.object({
-		policy: e.enum(["never", "always"]).default("never").optional(),
-		factors: e.object({
-			sms: e.boolean().default(!1),
-			otp: e.boolean().default(!1),
-			email: e.boolean().default(!1),
-			push_notification: e.boolean().default(!1),
-			webauthn_roaming: e.boolean().default(!1),
-			webauthn_platform: e.boolean().default(!1),
-			recovery_code: e.boolean().default(!1),
-			duo: e.boolean().default(!1)
-		}).optional(),
-		sms_provider: e.object({ provider: e.enum([
-			"twilio",
-			"vonage",
-			"aws_sns",
-			"phone_message_hook"
-		]).optional() }).optional(),
-		twilio: e.object({
-			sid: e.string().optional(),
-			auth_token: e.string().optional(),
-			from: e.string().optional(),
-			messaging_service_sid: e.string().optional()
-		}).optional(),
-		phone_message: e.object({ message: e.string().optional() }).optional()
-	}).optional()
-}), e.object({
+}).extend(U.shape).extend({ id: e.string() }), e.object({
 	date: e.string().openapi({
 		description: "Date these events occurred in ISO 8601 format",
 		example: "2025-12-19"
@@ -6698,7 +6733,7 @@ e.array(no), e.object({
 	"passwordless",
 	"enterprise"
 ]);
-var ro = e.object({
+var oo = e.object({
 	cohort: e.string(),
 	sessions: e.number(),
 	active: e.array(e.number())
@@ -6707,9 +6742,9 @@ e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(ro)
+	cohorts: e.array(oo)
 });
-var io = e.object({
+var so = e.object({
 	cohort: e.string(),
 	tokens: e.number(),
 	active: e.array(e.number())
@@ -6718,24 +6753,24 @@ e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(io)
+	cohorts: e.array(so)
 });
-var ao = e.object({
+var co = e.object({
 	name: e.string(),
 	type: e.string()
-}), oo = e.object({
+}), lo = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
 });
 e.object({
-	meta: e.array(ao),
+	meta: e.array(co),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: oo.optional()
+	statistics: lo.optional()
 });
-var so = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), co = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+var uo = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), fo = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
@@ -6743,23 +6778,23 @@ var so = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.
 	}
 });
 e.object({
-	prompt: so,
+	prompt: uo,
 	language: e.string(),
-	custom_text: co
+	custom_text: fo
 });
-var lo = e.object({
+var po = e.object({
 	"form-content-start": e.string().optional(),
 	"form-content-end": e.string().optional(),
 	"form-footer-start": e.string().optional(),
 	"form-footer-end": e.string().optional(),
 	"secondary-actions-start": e.string().optional(),
 	"secondary-actions-end": e.string().optional()
-}).strict(), uo = e.record(e.string(), lo);
+}).strict(), mo = e.record(e.string(), po);
 e.object({
 	prompt: e.string(),
-	partials: uo
+	partials: mo
 });
-var fo = e.enum([
+var ho = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -6767,11 +6802,12 @@ var fo = e.enum([
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), po = e.object({
+]), go = e.object({
 	user_id: e.string(),
-	type: fo,
+	type: ho,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
+	totp_last_step: e.number().int().nonnegative().optional(),
 	credential_id: e.string().optional(),
 	public_key: e.string().optional(),
 	sign_count: e.number().int().nonnegative().optional(),
@@ -6780,7 +6816,7 @@ var fo = e.enum([
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function mo(t, n) {
+function _o(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -6803,64 +6839,64 @@ function mo(t, n) {
 		path: ["public_key"]
 	}));
 }
-po.superRefine(mo), po.extend({
+go.superRefine(_o), go.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(mo), e.object({
+}).superRefine(_o), e.object({
 	id: e.string().optional(),
 	created_at: e.string().datetime({ offset: !0 }).optional(),
 	updated_at: e.string().datetime({ offset: !0 }).optional()
 });
-function ho(e) {
+function vo(e) {
 	let t = atob(e), n = new Uint8Array(t.length);
 	for (let e = 0; e < t.length; e++) n[e] = t.charCodeAt(e);
 	return n;
 }
 //#endregion
 //#region ../../node_modules/.pnpm/nanoid@5.1.11/node_modules/nanoid/url-alphabet/index.js
-var go = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", Q = (e = 21) => {
+var yo = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", bo = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += go[n[e] & 63];
+	for (; e--;) t += yo[n[e] & 63];
 	return t;
 };
 //#endregion
 //#region src/helpers.ts
-async function _o(e) {
+async function xo(e) {
 	let t = new DecompressionStream("deflate-raw"), n = new Uint8Array(e), r = new Blob([n]).stream().pipeThrough(t);
 	return new Uint8Array(await new Response(r).arrayBuffer());
 }
-async function $(e) {
-	let t = ho(e.replace(/ /g, "+"));
+async function So(e) {
+	let t = vo(e.replace(/ /g, "+"));
 	try {
-		let e = await _o(t);
+		let e = await xo(t);
 		return new TextDecoder().decode(e);
 	} catch (e) {
 		return console.warn("Decompression failed, assuming data is not compressed:", e), new TextDecoder().decode(t);
 	}
 }
-async function vo(e) {
-	let t = await $(e), n = new an({
+async function Co(e) {
+	let t = await So(e), n = new on({
 		attributeNamePrefix: "@_",
 		alwaysCreateTextNode: !0,
 		ignoreAttributes: !1
 	}).parse(t);
 	return r.parse(n);
 }
-async function yo(e) {
-	let t = await $(e), n = new an({
+async function wo(e) {
+	let t = await So(e), n = new on({
 		attributeNamePrefix: "@_",
 		alwaysCreateTextNode: !0,
 		ignoreAttributes: !1
 	});
 	return i.parse(n.parse(t));
 }
-async function bo(e) {
-	let t = (e) => e.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;"), n = e.success ? "urn:oasis:names:tc:SAML:2.0:status:Success" : "urn:oasis:names:tc:SAML:2.0:status:Responder", r = e.inResponseTo ? ` InResponseTo="${t(e.inResponseTo)}"` : "", i = !e.success && e.statusMessage ? `<samlp:StatusMessage>${t(e.statusMessage)}</samlp:StatusMessage>` : "", a = `<samlp:LogoutResponse xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_${Q()}" Version="2.0" IssueInstant="${(/* @__PURE__ */ new Date()).toISOString()}" Destination="${t(e.destination)}"${r}><saml:Issuer>${t(e.issuer)}</saml:Issuer><samlp:Status><samlp:StatusCode Value="${n}"/>${i}</samlp:Status></samlp:LogoutResponse>`, o = new Blob([new TextEncoder().encode(a)]).stream().pipeThrough(new CompressionStream("deflate-raw")), s = new Uint8Array(await new Response(o).arrayBuffer()), c = "";
+async function To(e) {
+	let t = (e) => e.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;"), n = e.success ? "urn:oasis:names:tc:SAML:2.0:status:Success" : "urn:oasis:names:tc:SAML:2.0:status:Responder", r = e.inResponseTo ? ` InResponseTo="${t(e.inResponseTo)}"` : "", i = !e.success && e.statusMessage ? `<samlp:StatusMessage>${t(e.statusMessage)}</samlp:StatusMessage>` : "", a = `<samlp:LogoutResponse xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_${bo()}" Version="2.0" IssueInstant="${(/* @__PURE__ */ new Date()).toISOString()}" Destination="${t(e.destination)}"${r}><saml:Issuer>${t(e.issuer)}</saml:Issuer><samlp:Status><samlp:StatusCode Value="${n}"/>${i}</samlp:Status></samlp:LogoutResponse>`, o = new Blob([new TextEncoder().encode(a)]).stream().pipeThrough(new CompressionStream("deflate-raw")), s = new Uint8Array(await new Response(o).arrayBuffer()), c = "";
 	for (let e of s) c += String.fromCharCode(e);
 	return btoa(c);
 }
-function xo(e) {
+function Eo(e) {
 	let t = e.certificates.map((e) => ({
 		"@_use": "signing",
 		KeyInfo: {
@@ -6926,7 +6962,7 @@ function xo(e) {
 			]
 		}
 	} };
-	return new Dn({
+	return new En({
 		ignoreAttributes: !1,
 		suppressEmptyNode: !0,
 		preserveOrder: !1,
@@ -6934,8 +6970,8 @@ function xo(e) {
 		attributeNamePrefix: "@_"
 	}).build(n);
 }
-async function So(e, t) {
-	let n = e.notBefore || (/* @__PURE__ */ new Date()).toISOString(), r = e.notAfter || new Date(new Date(n).getTime() + 600 * 1e3).toISOString(), i = e.issueInstant || n, a = e.sessionNotOnOrAfter || r, o = e.responseId || `_${Q()}`, s = e.assertionId || `_${Q()}`, c = [{
+async function Do(e, t) {
+	let n = e.notBefore || (/* @__PURE__ */ new Date()).toISOString(), r = e.notAfter || new Date(new Date(n).getTime() + 600 * 1e3).toISOString(), i = e.issueInstant || n, a = e.sessionNotOnOrAfter || r, o = e.responseId || `_${bo()}`, s = e.assertionId || `_${bo()}`, c = [{
 		"samlp:Response": [
 			{ "saml:Issuer": [{ "#text": e.issuer }] },
 			{ "samlp:Status": [{
@@ -7107,7 +7143,7 @@ async function So(e, t) {
 			"@_IssueInstant": i,
 			"@_Version": "2.0"
 		}
-	}], l = new Dn({
+	}], l = new En({
 		ignoreAttributes: !1,
 		suppressEmptyNode: !0,
 		preserveOrder: !0
@@ -7116,7 +7152,7 @@ async function So(e, t) {
 }
 //#endregion
 //#region src/signers/local.ts
-var Co = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", wo = "http://www.w3.org/2001/04/xmlenc#sha256", To = "http://www.w3.org/2001/10/xml-exc-c14n#", Eo = class {
+var Oo = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", ko = "http://www.w3.org/2001/04/xmlenc#sha256", Ao = "http://www.w3.org/2001/10/xml-exc-c14n#", jo = class {
 	async signSAML(e, t, n) {
 		try {
 			let r = await import("xml-crypto"), i = r.SignedXml || r.default?.SignedXml;
@@ -7125,11 +7161,11 @@ var Co = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", wo = "http://www.w
 				privateKey: t,
 				publicCert: n
 			});
-			a.canonicalizationAlgorithm = To, a.addReference({
+			a.canonicalizationAlgorithm = Ao, a.addReference({
 				xpath: "(/*[local-name()='Response']/*[local-name()='Assertion'])[1]",
-				digestAlgorithm: wo,
-				transforms: ["http://www.w3.org/2000/09/xmldsig#enveloped-signature", To]
-			}), a.signatureAlgorithm = Co;
+				digestAlgorithm: ko,
+				transforms: ["http://www.w3.org/2000/09/xmldsig#enveloped-signature", Ao]
+			}), a.signatureAlgorithm = Oo;
 			let o = n.replace(/-----BEGIN CERTIFICATE-----|-----END CERTIFICATE-----/g, "").replace(/\s/g, "");
 			return a.keyInfoProvider = { getKeyInfo: () => `<X509Data><X509Certificate>${o}</X509Certificate></X509Data>` }, a.computeSignature(e, { location: {
 				reference: "/*[local-name()='Response']/*[local-name()='Assertion']/*[local-name()='Issuer']",
@@ -7139,7 +7175,7 @@ var Co = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", wo = "http://www.w
 			throw Error(`Failed to sign SAML locally. Make sure xml-crypto is installed. Error: ${e}`);
 		}
 	}
-}, Do = class {
+}, Mo = class {
 	signUrl;
 	constructor(e) {
 		this.signUrl = e;
@@ -7159,4 +7195,4 @@ var Co = "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", wo = "http://www.w
 	}
 };
 //#endregion
-export { Do as HttpSamlSigner, Eo as LocalSamlSigner, bo as createSamlLogoutResponse, xo as createSamlMetadata, So as createSamlResponse, c as dsSignatureSchema, $ as inflateDecompress, _o as inflateRaw, yo as parseSamlLogoutRequestQuery, vo as parseSamlRequestQuery, n as samlIssuerSchema, i as samlLogoutRequestSchema, a as samlMetadataResponseSchema, r as samlRequestSchema, l as samlResponseJsonSchema };
+export { Mo as HttpSamlSigner, jo as LocalSamlSigner, To as createSamlLogoutResponse, Eo as createSamlMetadata, Do as createSamlResponse, c as dsSignatureSchema, So as inflateDecompress, xo as inflateRaw, wo as parseSamlLogoutRequestQuery, Co as parseSamlRequestQuery, n as samlIssuerSchema, i as samlLogoutRequestSchema, a as samlMetadataResponseSchema, r as samlRequestSchema, l as samlResponseJsonSchema };