@logto/api 1.40.1 → 1.42.0

package/lib/generated-types/management.d.ts

@@ -75,6 +75,30 @@ export interface paths {
         patch: operations["UpdateApplicationCustomData"];
         trace?: never;
     };
+    "/api/applications/{applicationId}/access-control": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get application access-control rules
+         * @description Get the app-level access-control rule configuration for the specified application.
+         */
+        get: operations["GetApplicationAccessControl"];
+        /**
+         * Replace application access-control rules
+         * @description Replace the app-level access-control rule configuration for the specified application.
+         */
+        put: operations["ReplaceApplicationAccessControl"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/applications/{applicationId}/roles": {
         parameters: {
             query?: never;
@@ -94,7 +118,7 @@ export interface paths {
         put: operations["ReplaceApplicationRoles"];
         /**
          * Assign API resource roles to application
-         * @description Assign API resource roles to the specified application. The API resource roles will be added to the existing API resource roles.
+         * @description Assign API resource roles to the specified application. The API resource roles will be added to the existing API resource roles. Role IDs that are already assigned to the application are silently ignored.
          */
         post: operations["AssignApplicationRoles"];
         delete?: never;
@@ -199,9 +223,7 @@ export interface paths {
         post?: never;
         /**
          * Delete application legacy secret
-         * @description Delete the legacy secret for the application and replace it with a new internal secret.
-         *
-         *     Note: This operation does not "really" delete the legacy secret because it is still needed for internal validation. We may remove the display of the legacy secret (the `secret` field in the application response) in the future.
+         * @description Delete the legacy secret for the application and replace it with an internal secret used only by Logto. The internal secret is not returned by Management APIs and cannot be used for client authentication.
          */
         delete: operations["DeleteApplicationLegacySecret"];
         options?: never;
@@ -587,6 +609,78 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/configs/actions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get all actions
+         * @description Get all action configurations for the tenant.
+         */
+        get: operations["ListActions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/configs/actions/test": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Test action
+         * @description Test an action script with a sample context.
+         */
+        post: operations["TestAction"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/configs/actions/{actionType}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get action
+         * @description Get the action configuration for the given action type.
+         */
+        get: operations["GetAction"];
+        /**
+         * Create or update action
+         * @description Create or update an action configuration for the given action type.
+         */
+        put: operations["UpsertAction"];
+        post?: never;
+        /**
+         * Delete action
+         * @description Delete the action configuration for the given action type.
+         */
+        delete: operations["DeleteAction"];
+        options?: never;
+        head?: never;
+        /**
+         * Update action
+         * @description Update the action configuration for the given action type.
+         */
+        patch: operations["UpdateAction"];
+        trace?: never;
+    };
     "/api/connectors": {
         parameters: {
             query?: never;
@@ -905,6 +999,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/sign-in-exp/username-policy/case-sensitivity-conflicts": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get username case-sensitivity conflicts
+         * @description List groups of usernames that collide when compared case-insensitively (i.e. usernames that would clash if the tenant switched to a case-insensitive username policy), with the total group count and a capped sample. Useful for surfacing conflicts before disabling case sensitivity.
+         */
+        get: operations["GetUsernameCaseSensitivityConflicts"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/users/{userId}": {
         parameters: {
             query?: never;
@@ -1047,6 +1161,26 @@ export interface paths {
         patch: operations["UpdateUserPassword"];
         trace?: never;
     };
+    "/api/users/{userId}/password/expiration": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Update user password expiration
+         * @description Update the user's password expiration state for the next sign-in attempt.
+         */
+        patch: operations["UpdateUserPasswordExpiration"];
+        trace?: never;
+    };
     "/api/users/{userId}/password/verify": {
         parameters: {
             query?: never;
@@ -2047,6 +2181,30 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/domains/{id}/verification-files": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get domain verification files
+         * @description Get the verification files served from the custom domain.
+         */
+        get: operations["ListDomainVerificationFiles"];
+        /**
+         * Replace domain verification files
+         * @description Replace the verification files served from the custom domain.
+         */
+        put: operations["ReplaceDomainVerificationFiles"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/domains/cleanup": {
         parameters: {
             query?: never;
@@ -3688,7 +3846,7 @@ export interface components {
         Translation: string;
         /**
          * @deprecated
-         * @description The internal client secret. Note it is only used for internal validation, and the actual secrets should be retrieved from `/api/applications/{id}/secrets` endpoints.
+         * @description The legacy client secret. This field is omitted after the legacy secret has been replaced by an internal secret. Retrieve current application secrets from the `/api/applications/{id}/secrets` endpoints.
          */
         ApplicationLegacySecret: string;
         SamlApplicationResponse: {
@@ -3863,7 +4021,7 @@ export interface operations {
                         tenantId: string;
                         id: string;
                         name: string;
-                        secret: components["schemas"]["ApplicationLegacySecret"];
+                        secret?: components["schemas"]["ApplicationLegacySecret"];
                         description: string | null;
                         /** @enum {string} */
                         type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
@@ -4019,7 +4177,7 @@ export interface operations {
                         tenantId: string;
                         id: string;
                         name: string;
-                        secret: components["schemas"]["ApplicationLegacySecret"];
+                        secret?: components["schemas"]["ApplicationLegacySecret"];
                         description: string | null;
                         /** @enum {string} */
                         type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
@@ -4147,7 +4305,7 @@ export interface operations {
                         tenantId: string;
                         id: string;
                         name: string;
-                        secret: components["schemas"]["ApplicationLegacySecret"];
+                        secret?: components["schemas"]["ApplicationLegacySecret"];
                         description: string | null;
                         /** @enum {string} */
                         type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
@@ -4346,10 +4504,8 @@ export interface operations {
                     customData?: {
                         [key: string]: unknown;
                     };
-                    /** @description Validator function */
-                    appLevelAccessControlEnabled?: {
-                        [key: string]: unknown;
-                    };
+                    /** @description Whether app-level access control is enabled for this application. */
+                    appLevelAccessControlEnabled?: boolean;
                     protectedAppMetadata?: {
                         origin?: string;
                         sessionDuration?: number;
@@ -4374,7 +4530,7 @@ export interface operations {
                         tenantId: string;
                         id: string;
                         name: string;
-                        secret: components["schemas"]["ApplicationLegacySecret"];
+                        secret?: components["schemas"]["ApplicationLegacySecret"];
                         description: string | null;
                         /** @enum {string} */
                         type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
@@ -4539,6 +4695,147 @@ export interface operations {
             };
         };
     };
+    GetApplicationAccessControl: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the application. */
+                applicationId: components["parameters"]["applicationId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The app-level access-control rule configuration. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        userIds: string[];
+                        userRoleIds: string[];
+                        organizationIds: string[];
+                        organizationRoleRules: {
+                            organizationId: string;
+                            organizationRoleIds: string[];
+                        }[];
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The application was not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    ReplaceApplicationAccessControl: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the application. */
+                applicationId: components["parameters"]["applicationId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description An array of user IDs that can access the application. */
+                    userIds: string[];
+                    /** @description An array of user role IDs whose assigned users can access the application. */
+                    userRoleIds: string[];
+                    /** @description An array of organization IDs whose members can access the application. */
+                    organizationIds: string[];
+                    /** @description An array of organization-role rule groups. Each group contains an organization ID and the organization role IDs that can access the application in that organization. */
+                    organizationRoleRules: {
+                        organizationId: string;
+                        organizationRoleIds: string[];
+                    }[];
+                };
+            };
+        };
+        responses: {
+            /** @description The app-level access-control rule configuration was replaced successfully. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        userIds: string[];
+                        userRoleIds: string[];
+                        organizationIds: string[];
+                        organizationRoleRules: {
+                            organizationId: string;
+                            organizationRoleIds: string[];
+                        }[];
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The application or referenced entities were not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The access-control rule payload contains invalid role types or empty organization-role groups. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     ListApplicationRoles: {
         parameters: {
             query?: {
@@ -4704,7 +5001,12 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": unknown;
+                    "application/json": {
+                        /** @description An array of API resource role IDs requested for assignment. */
+                        roleIds: string[];
+                        /** @description An array of API resource role IDs newly assigned to the application. Role IDs already attached to the application are silently ignored and not present in this array. */
+                        addedRoleIds: string[];
+                    };
                 };
             };
             /** @description Bad Request */
@@ -5118,7 +5420,7 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description OK */
+            /** @description The legacy secret was deleted successfully. */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -5128,7 +5430,7 @@ export interface operations {
                         tenantId: string;
                         id: string;
                         name: string;
-                        secret: string;
+                        secret?: string;
                         description: string | null;
                         /** @enum {string} */
                         type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
@@ -5197,13 +5499,6 @@ export interface operations {
                     };
                 };
             };
-            /** @description The legacy secret was deleted successfully. */
-            204: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
             /** @description The application does not have a legacy secret. */
             400: {
                 headers: {
@@ -6873,6 +7168,8 @@ export interface operations {
                                     };
                                     oneTimeTokenContext?: {
                                         jitOrganizationIds?: string[];
+                                        /** @enum {string} */
+                                        interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                     };
                                 } | {
                                     id: string;
@@ -6958,6 +7255,15 @@ export interface operations {
                                 appLevelAccessControlEnabled?: boolean;
                                 createdAt?: number;
                             };
+                            organization?: {
+                                id?: string;
+                                name?: string;
+                                description?: string | null;
+                                /** @description arbitrary */
+                                customData?: {
+                                    [key: string]: unknown;
+                                };
+                            };
                         };
                         blockIssuanceOnError?: boolean;
                         tokenSample?: {
@@ -7360,6 +7666,8 @@ export interface operations {
                                     };
                                     oneTimeTokenContext?: {
                                         jitOrganizationIds?: string[];
+                                        /** @enum {string} */
+                                        interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                     };
                                 } | {
                                     id: string;
@@ -7445,6 +7753,15 @@ export interface operations {
                                 appLevelAccessControlEnabled?: boolean;
                                 createdAt?: number;
                             };
+                            organization?: {
+                                id?: string;
+                                name?: string;
+                                description?: string | null;
+                                /** @description arbitrary */
+                                customData?: {
+                                    [key: string]: unknown;
+                                };
+                            };
                         };
                         blockIssuanceOnError?: boolean;
                         tokenSample?: {
@@ -7790,6 +8107,8 @@ export interface operations {
                                     };
                                     oneTimeTokenContext?: {
                                         jitOrganizationIds?: string[];
+                                        /** @enum {string} */
+                                        interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                     };
                                 } | {
                                     id: string;
@@ -7875,6 +8194,15 @@ export interface operations {
                                 appLevelAccessControlEnabled?: boolean;
                                 createdAt?: number;
                             };
+                            organization?: {
+                                id?: string;
+                                name?: string;
+                                description?: string | null;
+                                /** @description arbitrary */
+                                customData?: {
+                                    [key: string]: unknown;
+                                };
+                            };
                         };
                         blockIssuanceOnError?: boolean;
                         tokenSample?: {
@@ -8319,6 +8647,8 @@ export interface operations {
                                     };
                                     oneTimeTokenContext?: {
                                         jitOrganizationIds?: string[];
+                                        /** @enum {string} */
+                                        interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                     };
                                 } | {
                                     id: string;
@@ -8404,6 +8734,15 @@ export interface operations {
                                 appLevelAccessControlEnabled?: boolean;
                                 createdAt?: number;
                             };
+                            organization?: {
+                                id?: string;
+                                name?: string;
+                                description?: string | null;
+                                /** @description arbitrary */
+                                customData?: {
+                                    [key: string]: unknown;
+                                };
+                            };
                         };
                         blockIssuanceOnError?: boolean;
                         tokenSample?: {
@@ -8791,6 +9130,8 @@ export interface operations {
                                         };
                                         oneTimeTokenContext?: {
                                             jitOrganizationIds?: string[];
+                                            /** @enum {string} */
+                                            interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                         };
                                     } | {
                                         id: string;
@@ -8876,6 +9217,15 @@ export interface operations {
                                     appLevelAccessControlEnabled?: boolean;
                                     createdAt?: number;
                                 };
+                                organization?: {
+                                    id?: string;
+                                    name?: string;
+                                    description?: string | null;
+                                    /** @description arbitrary */
+                                    customData?: {
+                                        [key: string]: unknown;
+                                    };
+                                };
                             };
                             blockIssuanceOnError?: boolean;
                             tokenSample?: {
@@ -9274,6 +9624,8 @@ export interface operations {
                                 };
                                 oneTimeTokenContext?: {
                                     jitOrganizationIds?: string[];
+                                    /** @enum {string} */
+                                    interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                 };
                             } | {
                                 id: string;
@@ -9359,6 +9711,15 @@ export interface operations {
                             appLevelAccessControlEnabled?: boolean;
                             createdAt?: number;
                         };
+                        organization?: {
+                            id?: string;
+                            name?: string;
+                            description?: string | null;
+                            /** @description arbitrary */
+                            customData?: {
+                                [key: string]: unknown;
+                            };
+                        };
                     };
                 } | {
                     /** Format: "client-credentials" */
@@ -9585,142 +9946,41 @@ export interface operations {
             };
         };
     };
-    ListConnectors: {
+    ListActions: {
         parameters: {
-            query?: {
-                /** @description Filter connectors by target. */
-                target?: string;
-            };
+            query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description An array of connectors. */
+            /** @description The action configurations. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
                     "application/json": {
-                        id: string;
-                        syncProfile: boolean;
-                        enableTokenStorage: boolean;
-                        /** @description arbitrary */
-                        config: {
-                            [key: string]: unknown;
-                        };
-                        metadata: {
-                            target?: string;
-                            /** @description Validator function */
-                            name?: {
-                                [key: string]: unknown;
+                        /** @enum {string} */
+                        key: "action.postFirstFactorVerification" | "action.postSignIn";
+                        value: {
+                            script: string;
+                            environmentVariables?: {
+                                [key: string]: string;
                             };
-                            logo?: string;
-                            logoDark?: string | null;
-                        };
-                        connectorId: string;
-                        target: string;
-                        /** @description Validator function */
-                        name: {
-                            [key: string]: unknown;
-                        };
-                        /** @description Validator function */
-                        description: {
-                            [key: string]: unknown;
-                        };
-                        logo: string;
-                        logoDark: string | null;
-                        readme: string;
-                        configTemplate?: string;
-                        formItems?: ({
-                            /** Format: "Select" */
-                            type: string;
-                            selectItems: {
-                                value: string;
-                                title: string;
-                            }[];
-                            key: string;
-                            label: string;
-                            placeholder?: string;
-                            required?: boolean;
-                            /** @example {} */
-                            defaultValue?: unknown;
-                            showConditions?: {
-                                targetKey: string;
-                                /** @example {} */
-                                expectValue?: unknown;
-                            }[];
-                            description?: string;
-                            tooltip?: string;
-                            isConfidential?: boolean;
-                            isDevFeature?: boolean;
-                        } | {
-                            /** Format: "MultiSelect" */
-                            type: string;
-                            selectItems: {
-                                value: string;
-                            }[];
-                            key: string;
-                            label: string;
-                            placeholder?: string;
-                            required?: boolean;
-                            /** @example {} */
-                            defaultValue?: unknown;
-                            showConditions?: {
-                                targetKey: string;
-                                /** @example {} */
-                                expectValue?: unknown;
-                            }[];
-                            description?: string;
-                            tooltip?: string;
-                            isConfidential?: boolean;
-                            isDevFeature?: boolean;
-                        } | {
+                            contextSample?: ({
+                                [key: string]: unknown;
+                            } | (string | number | boolean | (string | null) | {
+                                [key: string]: unknown;
+                            })[] | string | number | boolean) | null;
+                            enabled?: boolean;
                             /** @enum {string} */
-                            type: "Text" | "Number" | "MultilineText" | "Switch" | "Json";
-                            key: string;
-                            label: string;
-                            placeholder?: string;
-                            required?: boolean;
-                            /** @example {} */
-                            defaultValue?: unknown;
-                            showConditions?: {
-                                targetKey: string;
-                                /** @example {} */
-                                expectValue?: unknown;
-                            }[];
-                            description?: string;
-                            tooltip?: string;
-                            isConfidential?: boolean;
-                            isDevFeature?: boolean;
-                        })[];
-                        customData?: {
-                            [key: string]: unknown;
-                        };
-                        fromEmail?: string;
-                        /** @enum {string|null} */
-                        platform: "Native" | "Universal" | "Web" | null;
-                        isStandard?: boolean;
-                        isTokenStorageSupported?: boolean;
-                        /** @enum {string} */
-                        type: "Email" | "Sms" | "Social";
-                        isDemo?: boolean;
-                        extraInfo?: {
-                            [key: string]: unknown;
+                            onExecutionError?: "block" | "allow";
                         };
-                        usage?: number;
                     }[];
                 };
             };
-            /** @description The target only allows one connector to exist, but there are multiple connectors with this target. */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
             /** @description Unauthorized */
             401: {
                 headers: {
@@ -9737,7 +9997,7 @@ export interface operations {
             };
         };
     };
-    CreateConnector: {
+    TestAction: {
         parameters: {
             query?: never;
             header?: never;
@@ -9747,85 +10007,622 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    /** @description The connector config object that will be passed to the connector. The config object should be compatible with the connector factory. */
-                    config?: {
+                    /** @description The action script to test. */
+                    script: string;
+                    /**
+                     * @description The action type to test.
+                     * @enum {string}
+                     */
+                    actionType: "action.postFirstFactorVerification" | "action.postSignIn";
+                    /** @description The sample event for action script testing. */
+                    event: ({
                         [key: string]: unknown;
+                    } | (string | number | boolean | (string | null) | {
+                        [key: string]: unknown;
+                    })[] | string | number | boolean) | null;
+                    /** @description The environment variables for the action script. */
+                    environmentVariables?: {
+                        [key: string]: string;
                     };
-                    /** @description The connector factory ID for creating the connector. */
-                    connectorId: string;
-                    /** @description Custom connector metadata, will be used to overwrite the default connector factory metadata. */
-                    metadata?: {
-                        target?: string;
-                        /** @description Validator function */
-                        name?: {
-                            [key: string]: unknown;
-                        };
-                        logo?: string;
-                        logoDark?: string | null;
-                    };
-                    /** @description Whether to sync user profile from the identity provider to Logto at each sign-in. If `false`, the user profile will only be synced when the user is created. */
-                    syncProfile?: boolean;
-                    enableTokenStorage?: boolean;
-                    /** @description The unique ID for the connector. If not provided, a random ID will be generated. */
-                    id?: string;
                 };
             };
         };
         responses: {
-            /** @description The created connector. */
+            /** @description The result of the action script testing. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": {
-                        id: string;
-                        syncProfile: boolean;
-                        enableTokenStorage: boolean;
-                        /** @description arbitrary */
-                        config: {
-                            [key: string]: unknown;
-                        };
-                        metadata: {
-                            target?: string;
-                            /** @description Validator function */
-                            name?: {
-                                [key: string]: unknown;
-                            };
-                            logo?: string;
-                            logoDark?: string | null;
-                        };
-                        connectorId: string;
-                        target: string;
-                        /** @description Validator function */
-                        name: {
-                            [key: string]: unknown;
-                        };
-                        /** @description Validator function */
-                        description: {
-                            [key: string]: unknown;
-                        };
-                        logo: string;
-                        logoDark: string | null;
-                        readme: string;
-                        configTemplate?: string;
-                        formItems?: ({
-                            /** Format: "Select" */
-                            type: string;
-                            selectItems: {
-                                value: string;
-                                title: string;
-                            }[];
-                            key: string;
-                            label: string;
-                            placeholder?: string;
-                            required?: boolean;
-                            /** @example {} */
-                            defaultValue?: unknown;
-                            showConditions?: {
-                                targetKey: string;
-                                /** @example {} */
-                                expectValue?: unknown;
+                    "application/json": ({
+                        [key: string]: unknown;
+                    } | (string | number | boolean | (string | null) | {
+                        [key: string]: unknown;
+                    })[] | string | number | boolean) | null;
+                };
+            };
+            /** @description The action script returned no result. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The request body or response body is invalid. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Cloud connection does not have enough permission to perform the action or the tenant's subscription plan does not support this feature. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The action script failed to execute. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    GetAction: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The action type to get. */
+                actionType: "action.postFirstFactorVerification" | "action.postSignIn";
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The action configuration. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        script: string;
+                        environmentVariables?: {
+                            [key: string]: string;
+                        };
+                        contextSample?: ({
+                            [key: string]: unknown;
+                        } | (string | number | boolean | (string | null) | {
+                            [key: string]: unknown;
+                        })[] | string | number | boolean) | null;
+                        enabled?: boolean;
+                        /** @enum {string} */
+                        onExecutionError?: "block" | "allow";
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The action configuration does not exist. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    UpsertAction: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The action type to create or update. */
+                actionType: "action.postFirstFactorVerification" | "action.postSignIn";
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description The action script. */
+                    script: string;
+                    /** @description The environment variables for the action script. */
+                    environmentVariables?: {
+                        [key: string]: string;
+                    };
+                    /** @description The sample context for action script testing. */
+                    contextSample?: ({
+                        [key: string]: unknown;
+                    } | (string | number | boolean | (string | null) | {
+                        [key: string]: unknown;
+                    })[] | string | number | boolean) | null;
+                    /** @description Whether the action is enabled. */
+                    enabled?: boolean;
+                    /**
+                     * @description The action execution error handling policy.
+                     * @enum {string}
+                     */
+                    onExecutionError?: "block" | "allow";
+                };
+            };
+        };
+        responses: {
+            /** @description The updated action configuration. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        script: string;
+                        environmentVariables?: {
+                            [key: string]: string;
+                        };
+                        contextSample?: ({
+                            [key: string]: unknown;
+                        } | (string | number | boolean | (string | null) | {
+                            [key: string]: unknown;
+                        })[] | string | number | boolean) | null;
+                        enabled?: boolean;
+                        /** @enum {string} */
+                        onExecutionError?: "block" | "allow";
+                    };
+                };
+            };
+            /** @description The created action configuration. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        script: string;
+                        environmentVariables?: {
+                            [key: string]: string;
+                        };
+                        contextSample?: ({
+                            [key: string]: unknown;
+                        } | (string | number | boolean | (string | null) | {
+                            [key: string]: unknown;
+                        })[] | string | number | boolean) | null;
+                        enabled?: boolean;
+                        /** @enum {string} */
+                        onExecutionError?: "block" | "allow";
+                    };
+                };
+            };
+            /** @description The request body is invalid. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The tenant's subscription plan does not support this feature. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    DeleteAction: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The action type to delete. */
+                actionType: "action.postFirstFactorVerification" | "action.postSignIn";
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The action configuration was deleted successfully. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The action configuration does not exist. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    UpdateAction: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The action type to update. */
+                actionType: "action.postFirstFactorVerification" | "action.postSignIn";
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description The action script. */
+                    script?: string;
+                    /** @description The environment variables for the action script. */
+                    environmentVariables?: {
+                        [key: string]: string;
+                    };
+                    /** @description The sample context for action script testing. */
+                    contextSample?: ({
+                        [key: string]: unknown;
+                    } | (string | number | boolean | (string | null) | {
+                        [key: string]: unknown;
+                    })[] | string | number | boolean) | null;
+                    /** @description Whether the action is enabled. */
+                    enabled?: boolean;
+                    /**
+                     * @description The action execution error handling policy.
+                     * @enum {string}
+                     */
+                    onExecutionError?: "block" | "allow";
+                };
+            };
+        };
+        responses: {
+            /** @description The updated action configuration. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        script: string;
+                        environmentVariables?: {
+                            [key: string]: string;
+                        };
+                        contextSample?: ({
+                            [key: string]: unknown;
+                        } | (string | number | boolean | (string | null) | {
+                            [key: string]: unknown;
+                        })[] | string | number | boolean) | null;
+                        enabled?: boolean;
+                        /** @enum {string} */
+                        onExecutionError?: "block" | "allow";
+                    };
+                };
+            };
+            /** @description The request body is invalid. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The tenant's subscription plan does not support this feature. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The action configuration does not exist. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    ListConnectors: {
+        parameters: {
+            query?: {
+                /** @description Filter connectors by target. */
+                target?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description An array of connectors. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        id: string;
+                        syncProfile: boolean;
+                        enableTokenStorage: boolean;
+                        /** @description arbitrary */
+                        config: {
+                            [key: string]: unknown;
+                        };
+                        metadata: {
+                            target?: string;
+                            /** @description Validator function */
+                            name?: {
+                                [key: string]: unknown;
+                            };
+                            logo?: string;
+                            logoDark?: string | null;
+                        };
+                        connectorId: string;
+                        target: string;
+                        /** @description Validator function */
+                        name: {
+                            [key: string]: unknown;
+                        };
+                        /** @description Validator function */
+                        description: {
+                            [key: string]: unknown;
+                        };
+                        logo: string;
+                        logoDark: string | null;
+                        readme: string;
+                        configTemplate?: string;
+                        formItems?: ({
+                            /** Format: "Select" */
+                            type: string;
+                            selectItems: {
+                                value: string;
+                                title: string;
+                            }[];
+                            key: string;
+                            label: string;
+                            placeholder?: string;
+                            required?: boolean;
+                            /** @example {} */
+                            defaultValue?: unknown;
+                            showConditions?: {
+                                targetKey: string;
+                                /** @example {} */
+                                expectValue?: unknown;
+                            }[];
+                            description?: string;
+                            tooltip?: string;
+                            isConfidential?: boolean;
+                            isDevFeature?: boolean;
+                        } | {
+                            /** Format: "MultiSelect" */
+                            type: string;
+                            selectItems: {
+                                value: string;
+                            }[];
+                            key: string;
+                            label: string;
+                            placeholder?: string;
+                            required?: boolean;
+                            /** @example {} */
+                            defaultValue?: unknown;
+                            showConditions?: {
+                                targetKey: string;
+                                /** @example {} */
+                                expectValue?: unknown;
+                            }[];
+                            description?: string;
+                            tooltip?: string;
+                            isConfidential?: boolean;
+                            isDevFeature?: boolean;
+                        } | {
+                            /** @enum {string} */
+                            type: "Text" | "Number" | "MultilineText" | "Switch" | "Json";
+                            key: string;
+                            label: string;
+                            placeholder?: string;
+                            required?: boolean;
+                            /** @example {} */
+                            defaultValue?: unknown;
+                            showConditions?: {
+                                targetKey: string;
+                                /** @example {} */
+                                expectValue?: unknown;
+                            }[];
+                            description?: string;
+                            tooltip?: string;
+                            isConfidential?: boolean;
+                            isDevFeature?: boolean;
+                        })[];
+                        customData?: {
+                            [key: string]: unknown;
+                        };
+                        fromEmail?: string;
+                        /** @enum {string|null} */
+                        platform: "Native" | "Universal" | "Web" | null;
+                        isStandard?: boolean;
+                        isTokenStorageSupported?: boolean;
+                        /** @enum {string} */
+                        type: "Email" | "Sms" | "Social";
+                        isDemo?: boolean;
+                        extraInfo?: {
+                            [key: string]: unknown;
+                        };
+                        usage?: number;
+                    }[];
+                };
+            };
+            /** @description The target only allows one connector to exist, but there are multiple connectors with this target. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    CreateConnector: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description The connector config object that will be passed to the connector. The config object should be compatible with the connector factory. */
+                    config?: {
+                        [key: string]: unknown;
+                    };
+                    /** @description The connector factory ID for creating the connector. */
+                    connectorId: string;
+                    /** @description Custom connector metadata, will be used to overwrite the default connector factory metadata. */
+                    metadata?: {
+                        target?: string;
+                        /** @description Validator function */
+                        name?: {
+                            [key: string]: unknown;
+                        };
+                        logo?: string;
+                        logoDark?: string | null;
+                    };
+                    /** @description Whether to sync user profile from the identity provider to Logto at each sign-in. If `false`, the user profile will only be synced when the user is created. */
+                    syncProfile?: boolean;
+                    enableTokenStorage?: boolean;
+                    /** @description The unique ID for the connector. If not provided, a random ID will be generated. */
+                    id?: string;
+                };
+            };
+        };
+        responses: {
+            /** @description The created connector. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        id: string;
+                        syncProfile: boolean;
+                        enableTokenStorage: boolean;
+                        /** @description arbitrary */
+                        config: {
+                            [key: string]: unknown;
+                        };
+                        metadata: {
+                            target?: string;
+                            /** @description Validator function */
+                            name?: {
+                                [key: string]: unknown;
+                            };
+                            logo?: string;
+                            logoDark?: string | null;
+                        };
+                        connectorId: string;
+                        target: string;
+                        /** @description Validator function */
+                        name: {
+                            [key: string]: unknown;
+                        };
+                        /** @description Validator function */
+                        description: {
+                            [key: string]: unknown;
+                        };
+                        logo: string;
+                        logoDark: string | null;
+                        readme: string;
+                        configTemplate?: string;
+                        formItems?: ({
+                            /** Format: "Select" */
+                            type: string;
+                            selectItems: {
+                                value: string;
+                                title: string;
+                            }[];
+                            key: string;
+                            label: string;
+                            placeholder?: string;
+                            required?: boolean;
+                            /** @example {} */
+                            defaultValue?: unknown;
+                            showConditions?: {
+                                targetKey: string;
+                                /** @example {} */
+                                expectValue?: unknown;
                             }[];
                             description?: string;
                             tooltip?: string;
@@ -10118,8 +10915,15 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description Connector not found. */
-            404: {
+            /** @description Connector not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The connector cannot be deleted because password expiration requires at least one available forgot password method. */
+            422: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -11500,15 +12304,20 @@ export interface operations {
                             maxAttempts?: number;
                             lockoutDuration?: number;
                         };
-                        /** @description Define email restriction policies. Users will be prohibited from registering or linking any email addresses that are included in the blocklist. */
+                        /** @description Define email restriction policies for registering or linking email addresses. */
                         emailBlocklistPolicy: {
+                            /** @description Cloud only.  Whether to block disposable email addresses. Once enabled, Logto will check the email domain against a list of known disposable email domains. If the domain is found in the list, the email address will be blocked. */
                             blockDisposableAddresses?: boolean;
                             /** @description Whether to block sub-addresses. (E.g., example+shopping@test.com) */
                             blockSubaddressing?: boolean;
-                            /** @description Custom blocklist of email addresses or domains. */
+                            /** @description Custom allowlist of email addresses, domains, or wildcard email address patterns. Examples: `bar@example.com`, `@example.com`, `foo*@example.com`, `@*.example.com`. */
+                            customAllowlist?: string[];
+                            /** @description Custom blocklist of email addresses, domains, or wildcard email address patterns. Examples: `bar@example.com`, `@example.com`, `foo*@example.com`, `@*.example.com`. */
                             customBlocklist?: string[];
-                            /** @description Cloud only.  Whether to block disposable email addresses. Once enabled, Logto will check the email domain against a list of known disposable email domains. If the domain is found in the list, the email address will be blocked. */
-                            blockDisposableAddress?: unknown;
+                        };
+                        verificationCodePolicy: {
+                            expirationDuration?: number;
+                            maxRetryAttempts?: number;
                         };
                         forgotPasswordMethods: ("EmailVerificationCode" | "PhoneVerificationCode")[] | null;
                         passkeySignIn: {
@@ -11519,6 +12328,25 @@ export interface operations {
                         signUpProfileFields: {
                             name: string;
                         }[] | null;
+                        /** @description Password expiration policy used to force users to reset their password during sign-in. When enabled is false, the period field is ignored. */
+                        passwordExpiration: {
+                            /** @description Whether password expiration is enabled. */
+                            enabled?: unknown;
+                            /** @description Number of days a password remains valid before it expires. */
+                            validPeriodDays?: unknown;
+                        } & ({
+                            /** Format: false */
+                            enabled?: boolean;
+                        } | {
+                            /** Format: true */
+                            enabled: boolean;
+                            validPeriodDays: number;
+                            enabledAt?: number;
+                        });
+                        /** @description Validator function */
+                        usernamePolicy: {
+                            [key: string]: unknown;
+                        };
                     };
                 };
             };
@@ -11681,15 +12509,16 @@ export interface operations {
                         maxAttempts?: number;
                         lockoutDuration?: number;
                     };
-                    /** @description Define email restriction policies. Users will be prohibited from registering or linking any email addresses that are included in the blocklist. */
+                    /** @description Define email restriction policies for registering or linking email addresses. */
                     emailBlocklistPolicy?: {
+                        /** @description Cloud only.  Whether to block disposable email addresses. Once enabled, Logto will check the email domain against a list of known disposable email domains. If the domain is found in the list, the email address will be blocked. */
                         blockDisposableAddresses?: boolean;
                         /** @description Whether to block sub-addresses. (E.g., example+shopping@test.com) */
                         blockSubaddressing?: boolean;
-                        /** @description Custom blocklist of email addresses or domains. */
+                        /** @description Custom allowlist of email addresses, domains, or wildcard email address patterns. Examples: `bar@example.com`, `@example.com`, `foo*@example.com`, `@*.example.com`. */
+                        customAllowlist?: string[];
+                        /** @description Custom blocklist of email addresses, domains, or wildcard email address patterns. Examples: `bar@example.com`, `@example.com`, `foo*@example.com`, `@*.example.com`. */
                         customBlocklist?: string[];
-                        /** @description Cloud only.  Whether to block disposable email addresses. Once enabled, Logto will check the email domain against a list of known disposable email domains. If the domain is found in the list, the email address will be blocked. */
-                        blockDisposableAddress?: unknown;
                     };
                     forgotPasswordMethods?: ("EmailVerificationCode" | "PhoneVerificationCode")[] | null;
                     passkeySignIn?: {
@@ -11700,6 +12529,10 @@ export interface operations {
                     signUpProfileFields?: {
                         name: string;
                     }[] | null;
+                    /** @description Validator function */
+                    usernamePolicy?: {
+                        [key: string]: unknown;
+                    };
                     termsOfUseUrl?: (string | null) | string;
                     privacyPolicyUrl?: (string | null) | string;
                     /** @description The support email address to display on the error pages. */
@@ -11708,6 +12541,25 @@ export interface operations {
                     supportWebsiteUrl?: (string | null) | string;
                     /** @description The fallback URL to redirect users when the sign-in session does not exist or unknown. Client should initiate a new authentication flow after the redirection. */
                     unknownSessionRedirectUrl?: (string | null) | string;
+                    /** @description Password expiration policy used to force users to reset their password during sign-in. When enabled is false, the period field is ignored. */
+                    passwordExpiration?: {
+                        /** @description Whether password expiration is enabled. */
+                        enabled?: unknown;
+                        /** @description Number of days a password remains valid before it expires. */
+                        validPeriodDays?: unknown;
+                    } & ({
+                        /** Format: false */
+                        enabled?: boolean;
+                    } | {
+                        /** Format: true */
+                        enabled: boolean;
+                        validPeriodDays: number;
+                        enabledAt?: number;
+                    });
+                    verificationCodePolicy?: {
+                        expirationDuration?: number;
+                        maxRetryAttempts?: number;
+                    };
                 };
             };
         };
@@ -11834,8 +12686,13 @@ export interface operations {
                         emailBlocklistPolicy: {
                             blockDisposableAddresses?: boolean;
                             blockSubaddressing?: boolean;
+                            customAllowlist?: string[];
                             customBlocklist?: string[];
                         };
+                        verificationCodePolicy: {
+                            expirationDuration?: number;
+                            maxRetryAttempts?: number;
+                        };
                         forgotPasswordMethods: ("EmailVerificationCode" | "PhoneVerificationCode")[] | null;
                         passkeySignIn: {
                             enabled?: boolean;
@@ -11845,6 +12702,19 @@ export interface operations {
                         signUpProfileFields: {
                             name: string;
                         }[] | null;
+                        passwordExpiration: {
+                            /** Format: false */
+                            enabled?: boolean;
+                        } | {
+                            /** Format: true */
+                            enabled: boolean;
+                            validPeriodDays: number;
+                            enabledAt?: number;
+                        };
+                        /** @description Validator function */
+                        usernamePolicy: {
+                            [key: string]: unknown;
+                        };
                     };
                 };
             };
@@ -11876,6 +12746,13 @@ export interface operations {
                 };
                 content?: never;
             };
+            /** @description Conflict */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
             /** @description Unprocessable Entity. Invalid data provided. */
             422: {
                 headers: {
@@ -12004,6 +12881,55 @@ export interface operations {
             };
         };
     };
+    GetUsernameCaseSensitivityConflicts: {
+        parameters: {
+            query: {
+                limit: number;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The total number of case-insensitive username collision groups and a sample of them. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        totalConflicts: number;
+                        samples: {
+                            usernameLower: string;
+                            userIds: string[];
+                        }[];
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     GetUser: {
         parameters: {
             query?: {
@@ -12074,6 +13000,7 @@ export interface operations {
                         applicationId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
+                        hasSecurityVerificationMethod?: boolean;
                         /** @description List of SSO identities associated with the user. Only available when the `includeSsoIdentities` query parameter is provided with a truthy value. */
                         ssoIdentities?: {
                             tenantId: string;
@@ -12283,6 +13210,7 @@ export interface operations {
                         applicationId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
+                        hasSecurityVerificationMethod?: boolean;
                         ssoIdentities?: {
                             tenantId: string;
                             id: string;
@@ -12755,6 +13683,7 @@ export interface operations {
                         applicationId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
+                        hasSecurityVerificationMethod?: boolean;
                         ssoIdentities?: {
                             tenantId: string;
                             id: string;
@@ -12808,62 +13737,192 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    /**
-                     * Format: regex
-                     * @description Primary phone number for the user. It should be unique across all users.
-                     */
-                    primaryPhone?: string;
-                    /**
-                     * Format: regex
-                     * @description Primary email address for the user. It should be unique across all users.
-                     */
-                    primaryEmail?: string;
-                    /**
-                     * Format: regex
-                     * @description Username for the user. It should be unique across all users.
-                     */
-                    username?: string;
-                    /** @description Plain text password for the user. */
-                    password?: string;
-                    /** @description In case you already have the password digests and not the passwords, you can use them for the newly created user via this property. The algorithm can be specified using the `passwordAlgorithm` property. For `Legacy`, pass a JSON string in the format `[algorithm, args, encryptedPassword]`, where `args` is a string array that MUST contain an `@` placeholder, which will be replaced by the plain text password at runtime. For PBKDF2 under `Legacy`, `args` is expected to be in the order `[salt, iterations, keylen, digest, '@']`. The salt supports a plain string or a `hex:`-prefixed hex string (for binary salt bytes). */
-                    passwordDigest?: string;
-                    /**
-                     * @description The hash algorithm used for the password. It should be one of the supported algorithms, including `Legacy` for custom legacy expressions. Should the encryption algorithm differ from `Argon2i`, it will automatically be upgraded to `Argon2i` upon the user's next sign-in.
-                     * @enum {string}
-                     */
-                    passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy";
-                    name?: string;
-                    avatar?: (string) | null;
-                    /** @description arbitrary */
-                    customData?: {
-                        [key: string]: unknown;
-                    };
-                    profile?: {
-                        familyName?: string;
-                        givenName?: string;
-                        middleName?: string;
-                        nickname?: string;
-                        preferredUsername?: string;
-                        profile?: string;
-                        website?: string;
-                        gender?: string;
-                        birthdate?: string;
-                        zoneinfo?: string;
-                        locale?: string;
-                        address?: {
-                            formatted?: string;
-                            streetAddress?: string;
-                            locality?: string;
-                            region?: string;
-                            postalCode?: string;
-                            country?: string;
-                        };
-                    };
+                    /**
+                     * Format: regex
+                     * @description Primary phone number for the user. It should be unique across all users.
+                     */
+                    primaryPhone?: string;
+                    /**
+                     * Format: regex
+                     * @description Primary email address for the user. It should be unique across all users.
+                     */
+                    primaryEmail?: string;
+                    /**
+                     * Format: regex
+                     * @description Username for the user. It should be unique across all users.
+                     */
+                    username?: string;
+                    /** @description Plain text password for the user. */
+                    password?: string;
+                    /** @description In case you already have the password digests and not the passwords, you can use them for the newly created user via this property. The algorithm can be specified using the `passwordAlgorithm` property. For `Legacy`, pass a JSON string in the format `[algorithm, args, encryptedPassword]`, where `args` is a string array that MUST contain an `@` placeholder, which will be replaced by the plain text password at runtime. For PBKDF2 under `Legacy`, `args` is expected to be in the order `[salt, iterations, keylen, digest, '@']`. The salt supports a plain string or a `hex:`-prefixed hex string (for binary salt bytes). */
+                    passwordDigest?: string;
+                    /**
+                     * @description The hash algorithm used for the password. It should be one of the supported algorithms, including `Legacy` for custom legacy expressions. Should the encryption algorithm differ from `Argon2i`, it will automatically be upgraded to `Argon2i` upon the user's next sign-in.
+                     * @enum {string}
+                     */
+                    passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy";
+                    name?: string;
+                    avatar?: (string) | null;
+                    /** @description arbitrary */
+                    customData?: {
+                        [key: string]: unknown;
+                    };
+                    profile?: {
+                        familyName?: string;
+                        givenName?: string;
+                        middleName?: string;
+                        nickname?: string;
+                        preferredUsername?: string;
+                        profile?: string;
+                        website?: string;
+                        gender?: string;
+                        birthdate?: string;
+                        zoneinfo?: string;
+                        locale?: string;
+                        address?: {
+                            formatted?: string;
+                            streetAddress?: string;
+                            locality?: string;
+                            region?: string;
+                            postalCode?: string;
+                            country?: string;
+                        };
+                    };
+                };
+            };
+        };
+        responses: {
+            /** @description User data for the newly created user. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        id: string;
+                        username: string | null;
+                        primaryEmail: string | null;
+                        primaryPhone: string | null;
+                        name: string | null;
+                        avatar: string | null;
+                        /** @description arbitrary */
+                        customData: {
+                            [key: string]: unknown;
+                        };
+                        identities: {
+                            [key: string]: {
+                                userId: string;
+                                /** @description arbitrary */
+                                details?: {
+                                    [key: string]: unknown;
+                                };
+                            };
+                        };
+                        lastSignInAt: number | null;
+                        createdAt: number;
+                        updatedAt: number;
+                        profile: {
+                            familyName?: string;
+                            givenName?: string;
+                            middleName?: string;
+                            nickname?: string;
+                            preferredUsername?: string;
+                            profile?: string;
+                            website?: string;
+                            gender?: string;
+                            birthdate?: string;
+                            zoneinfo?: string;
+                            locale?: string;
+                            address?: {
+                                formatted?: string;
+                                streetAddress?: string;
+                                locality?: string;
+                                region?: string;
+                                postalCode?: string;
+                                country?: string;
+                            };
+                        };
+                        applicationId: string | null;
+                        isSuspended: boolean;
+                        hasPassword?: boolean;
+                        hasSecurityVerificationMethod?: boolean;
+                        ssoIdentities?: {
+                            tenantId: string;
+                            id: string;
+                            userId: string;
+                            issuer: string;
+                            identityId: string;
+                            /** @description arbitrary */
+                            detail: {
+                                [key: string]: unknown;
+                            };
+                            createdAt: number;
+                            updatedAt: number;
+                            ssoConnectorId: string;
+                        }[];
+                        passwordDigest?: string | null;
+                        /** @enum {string|null} */
+                        passwordAlgorithm?: "Argon2i" | "Argon2id" | "Argon2d" | "SHA1" | "SHA256" | "MD5" | "Bcrypt" | "Legacy" | null;
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unprocessable Content */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    UpdateUserPassword: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the user. */
+                userId: components["parameters"]["userId"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description New password for the user. */
+                    password: string;
                 };
             };
         };
         responses: {
-            /** @description User data for the newly created user. */
+            /** @description User password updated successfully. */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -12916,6 +13975,7 @@ export interface operations {
                         applicationId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
+                        hasSecurityVerificationMethod?: boolean;
                         ssoIdentities?: {
                             tenantId: string;
                             id: string;
@@ -12957,13 +14017,6 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description Not Found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
             /** @description Unprocessable Content */
             422: {
                 headers: {
@@ -12973,7 +14026,7 @@ export interface operations {
             };
         };
     };
-    UpdateUserPassword: {
+    UpdateUserPasswordExpiration: {
         parameters: {
             query?: never;
             header?: never;
@@ -12986,13 +14039,13 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    /** @description New password for the user. */
-                    password: string;
+                    /** @description Whether the user's password should be marked as expired. */
+                    isExpired: boolean;
                 };
             };
         };
         responses: {
-            /** @description User password updated successfully. */
+            /** @description User password expiration state has been updated successfully. */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -13045,6 +14098,7 @@ export interface operations {
                         applicationId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
+                        hasSecurityVerificationMethod?: boolean;
                         ssoIdentities?: {
                             tenantId: string;
                             id: string;
@@ -13065,7 +14119,7 @@ export interface operations {
                     };
                 };
             };
-            /** @description Bad Request */
+            /** @description Password expiration policy is not enabled in the sign-in experience settings. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -13086,8 +14140,8 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description Unprocessable Content */
-            422: {
+            /** @description Not Found */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -13283,6 +14337,7 @@ export interface operations {
                         applicationId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
+                        hasSecurityVerificationMethod?: boolean;
                         ssoIdentities?: {
                             tenantId: string;
                             id: string;
@@ -13835,6 +14890,7 @@ export interface operations {
                         applicationId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
+                        hasSecurityVerificationMethod?: boolean;
                         ssoIdentities?: {
                             tenantId: string;
                             id: string;
@@ -14077,6 +15133,10 @@ export interface operations {
                                 accountId: string;
                             };
                             expiresAt: number;
+                            application: {
+                                id: string;
+                                name: string;
+                            };
                         }[];
                     };
                 };
@@ -15118,6 +16178,8 @@ export interface operations {
                                     };
                                     oneTimeTokenContext?: {
                                         jitOrganizationIds?: string[];
+                                        /** @enum {string} */
+                                        interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                     };
                                 } | {
                                     id: string;
@@ -15342,6 +16404,8 @@ export interface operations {
                                 };
                                 oneTimeTokenContext?: {
                                     jitOrganizationIds?: string[];
+                                    /** @enum {string} */
+                                    interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                 };
                             } | {
                                 id: string;
@@ -15472,9 +16536,9 @@ export interface operations {
                 logKey?: string;
                 /** @description When `true`, short-circuits the underlying `count(*)` query: any tenant with more than 10,000 matching logs saturates `Total-Number` at the sentinel value `10001` and the response emits `Total-Number-Is-Capped: true`. The `Link` header then omits `rel="last"` and `rel="next"` because the real total is unknown. Default `false`; recommended `true` for any client whose tenant volume may exceed 10,000 matching logs to avoid `statement_timeout`. */
                 enableCap?: string;
-                /** @description Exclusive lower bound on `createdAt`, in unix milliseconds. When set, returns only logs where `createdAt > start_time`. Recommended for clients paginating across very large log ranges to keep query latency consistent. */
+                /** @description Inclusive lower bound on `createdAt`, in unix milliseconds. When set, returns only logs where `createdAt >= start_time`. Recommended for clients paginating across very large log ranges to keep query latency consistent. Because the bound is inclusive, when resuming pagination from the last fetched log, pass its `createdAt + 1` as `start_time` (or de-duplicate by log `id`) to avoid re-fetching the boundary log. */
                 start_time?: string;
-                /** @description Exclusive upper bound on `createdAt`, in unix milliseconds. When set, returns only logs where `createdAt < end_time`. Returns `400` if `start_time >= end_time` when both are present. */
+                /** @description Inclusive upper bound on `createdAt`, in unix milliseconds. When set, returns only logs where `createdAt <= end_time`. Returns `400` if `start_time > end_time` when both are present. */
                 end_time?: string;
                 /** @description Page number (starts from 1). */
                 page?: number;
@@ -15548,7 +16612,7 @@ export interface operations {
                     }[];
                 };
             };
-            /** @description Returned when `start_time` or `end_time` is not a finite number, or when `start_time >= end_time`. */
+            /** @description Returned when `start_time` or `end_time` is not a finite number, or when `start_time > end_time`. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -16082,6 +17146,7 @@ export interface operations {
                         applicationId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
+                        hasSecurityVerificationMethod?: boolean;
                         ssoIdentities?: {
                             tenantId: string;
                             id: string;
@@ -16276,7 +17341,7 @@ export interface operations {
                         tenantId: string;
                         id: string;
                         name: string;
-                        secret: string;
+                        secret?: string;
                         description: string | null;
                         /** @enum {string} */
                         type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
@@ -17082,8 +18147,8 @@ export interface operations {
                         id: string;
                         name: string;
                         /** @enum {string|null} */
-                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | null;
-                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout")[];
+                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
+                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                         config: {
                             url: string;
                             headers?: {
@@ -17142,9 +18207,9 @@ export interface operations {
                      * @description Use `events` instead.
                      * @enum {string}
                      */
-                    event?: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout";
+                    event?: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded";
                     /** @description An array of hook events. */
-                    events?: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout")[];
+                    events?: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                     config: {
                         url: string;
                         headers?: {
@@ -17173,8 +18238,8 @@ export interface operations {
                         id: string;
                         name: string;
                         /** @enum {string|null} */
-                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | null;
-                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout")[];
+                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
+                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                         config: {
                             url: string;
                             headers?: {
@@ -17237,8 +18302,8 @@ export interface operations {
                         id: string;
                         name: string;
                         /** @enum {string|null} */
-                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | null;
-                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout")[];
+                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
+                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                         config: {
                             url: string;
                             headers?: {
@@ -17356,9 +18421,9 @@ export interface operations {
                      * @description Use `events` instead.
                      * @enum {string|null}
                      */
-                    event?: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | null;
+                    event?: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
                     /** @description An array of updated hook events. */
-                    events?: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout")[];
+                    events?: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                     config?: {
                         url: string;
                         headers?: {
@@ -17387,8 +18452,8 @@ export interface operations {
                         id: string;
                         name: string;
                         /** @enum {string|null} */
-                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | null;
-                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout")[];
+                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
+                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                         config: {
                             url: string;
                             headers?: {
@@ -17439,9 +18504,9 @@ export interface operations {
                 logKey?: string;
                 /** @description When `true`, short-circuits the underlying `count(*)` query: results with more than 10,000 matching logs saturate `Total-Number` at the sentinel `10001` and emit `Total-Number-Is-Capped: true`; the `Link` header omits `rel="last"` and `rel="next"`. Default `false`. (This endpoint is already scoped to a single hook over the last 24 hours, so the cap rarely triggers in practice.) */
                 enableCap?: string;
-                /** @description Exclusive lower bound on `createdAt`, in unix milliseconds. Supplying either `start_time` or `end_time` replaces the endpoint's default 24-hour lower bound, so callers can query an arbitrary historical window. Returns `400` if `start_time >= end_time` when both are present. */
+                /** @description Inclusive lower bound on `createdAt`, in unix milliseconds. Supplying either `start_time` or `end_time` replaces the endpoint's default 24-hour lower bound, so callers can query an arbitrary historical window. Returns `400` if `start_time > end_time` when both are present. */
                 start_time?: string;
-                /** @description Exclusive upper bound on `createdAt`, in unix milliseconds. Supplying either `start_time` or `end_time` replaces the endpoint's default 24-hour lower bound. */
+                /** @description Inclusive upper bound on `createdAt`, in unix milliseconds. Supplying either `start_time` or `end_time` replaces the endpoint's default 24-hour lower bound. */
                 end_time?: string;
                 /** @description Page number (starts from 1). */
                 page?: number;
@@ -17517,7 +18582,7 @@ export interface operations {
                     }[];
                 };
             };
-            /** @description Returned when `start_time` or `end_time` is not a finite number, or when `start_time >= end_time`. */
+            /** @description Returned when `start_time` or `end_time` is not a finite number, or when `start_time > end_time`. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -17554,7 +18619,7 @@ export interface operations {
             content: {
                 "application/json": {
                     /** @description An array of hook events for testing. */
-                    events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout")[];
+                    events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                     /** @description The hook configuration for testing. */
                     config: {
                         url: string;
@@ -17643,8 +18708,8 @@ export interface operations {
                         id: string;
                         name: string;
                         /** @enum {string|null} */
-                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | null;
-                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout")[];
+                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
+                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                         config: {
                             url: string;
                             headers?: {
@@ -17735,6 +18800,13 @@ export interface operations {
                 };
                 content?: never;
             };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
             /** @description Not Implemented */
             501: {
                 headers: {
@@ -17814,6 +18886,7 @@ export interface operations {
                         status: string;
                         allowUploadMimeTypes?: ("image/jpeg" | "image/png" | "image/gif" | "image/vnd.microsoft.icon" | "image/x-icon" | "image/svg+xml" | "image/tiff" | "image/webp" | "image/bmp" | "application/zip")[];
                         maxUploadFileSize?: number;
+                        isExperienceAvatarUploadEnabled?: boolean;
                     };
                 };
             };
@@ -18101,6 +19174,121 @@ export interface operations {
             };
         };
     };
+    ListDomainVerificationFiles: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the domain. */
+                id: components["parameters"]["domainId-root"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The configured domain verification files. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The domain with the specified ID was not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    ReplaceDomainVerificationFiles: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the domain. */
+                id: components["parameters"]["domainId-root"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description Up to 10 text or JSON verification files served as filenames with extensions at the domain root, or at paths under `/.well-known/`. */
+                    verificationFiles: {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+        };
+        responses: {
+            /** @description The domain verification files were replaced successfully. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Validation error. Please check the request body. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The domain with the specified ID was not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     CleanupDomains: {
         parameters: {
             query?: never;
@@ -19498,6 +20686,13 @@ export interface operations {
                 };
                 content?: never;
             };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
             /** @description No email connector is configured for the tenant. */
             501: {
                 headers: {
@@ -19557,6 +20752,13 @@ export interface operations {
                 };
                 content?: never;
             };
+            /** @description Too Many Requests */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
         };
     };
     ReplaceOrganizationInvitationStatus: {
@@ -19830,6 +21032,13 @@ export interface operations {
                 };
                 content?: never;
             };
+            /** @description Unprocessable Content */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
         };
     };
     GetOrganization: {
@@ -20074,6 +21283,13 @@ export interface operations {
                 };
                 content?: never;
             };
+            /** @description Unprocessable Content */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
         };
     };
     ListOrganizationUsers: {
@@ -20083,6 +21299,10 @@ export interface operations {
                  *
                  *     If not provided, all users will be returned. */
                 q?: string;
+                /** @description The organization role ID used to filter organization members.
+                 *
+                 *     If not provided, all organization members will be returned. */
+                organizationRoleId?: string;
                 /** @description Page number (starts from 1). */
                 page?: number;
                 /** @description Entries per page. */
@@ -20757,7 +21977,7 @@ export interface operations {
                         tenantId: string;
                         id: string;
                         name: string;
-                        secret: components["schemas"]["ApplicationLegacySecret"];
+                        secret?: components["schemas"]["ApplicationLegacySecret"];
                         description: string | null;
                         /** @enum {string} */
                         type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
@@ -22596,6 +23816,8 @@ export interface operations {
                             /** @enum {string} */
                             mfa?: "Off" | "ReadOnly" | "Edit";
                             /** @enum {string} */
+                            passkey?: "Off" | "ReadOnly" | "Edit";
+                            /** @enum {string} */
                             session?: "Off" | "ReadOnly" | "Edit";
                         };
                         webauthnRelatedOrigins: string[];
@@ -22658,6 +23880,8 @@ export interface operations {
                         /** @enum {string} */
                         mfa?: "Off" | "ReadOnly" | "Edit";
                         /** @enum {string} */
+                        passkey?: "Off" | "ReadOnly" | "Edit";
+                        /** @enum {string} */
                         session?: "Off" | "ReadOnly" | "Edit";
                     };
                     /** @description The allowed domains for webauthn. */
@@ -22707,6 +23931,8 @@ export interface operations {
                             /** @enum {string} */
                             mfa?: "Off" | "ReadOnly" | "Edit";
                             /** @enum {string} */
+                            passkey?: "Off" | "ReadOnly" | "Edit";
+                            /** @enum {string} */
                             session?: "Off" | "ReadOnly" | "Edit";
                         };
                         webauthnRelatedOrigins: string[];
@@ -23096,6 +24322,8 @@ export interface operations {
                     customData?: {
                         [key: string]: unknown;
                     };
+                    /** @description Whether app-level access control is enabled for this application. */
+                    appLevelAccessControlEnabled?: boolean;
                     attributeMapping?: {
                         sub?: string;
                         name?: string;
@@ -23940,6 +25168,8 @@ export interface operations {
                         token: string;
                         context: {
                             jitOrganizationIds?: string[];
+                            /** @enum {string} */
+                            interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                         };
                         /** @enum {string} */
                         status: "active" | "consumed" | "revoked" | "expired";
@@ -23983,9 +25213,11 @@ export interface operations {
                 "application/json": {
                     /** @description The email address to associate with the one-time token. */
                     email: string;
-                    /** @description Additional context to store with the one-time token. This can be used to store arbitrary data that will be associated with the token. */
+                    /** @description Additional context to store with the one-time token. Set `interactionEvent` to scope the token to a specific flow, such as `ForgotPassword` for reset-password magic links. */
                     context?: {
                         jitOrganizationIds?: string[];
+                        /** @enum {string} */
+                        interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                     };
                     /** @description The expiration time in seconds. If not provided, defaults to 10 mins (600 seconds). */
                     expiresIn?: number;
@@ -24006,6 +25238,8 @@ export interface operations {
                         token: string;
                         context: {
                             jitOrganizationIds?: string[];
+                            /** @enum {string} */
+                            interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                         };
                         /** @enum {string} */
                         status: "active" | "consumed" | "revoked" | "expired";
@@ -24062,6 +25296,8 @@ export interface operations {
                         token: string;
                         context: {
                             jitOrganizationIds?: string[];
+                            /** @enum {string} */
+                            interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                         };
                         /** @enum {string} */
                         status: "active" | "consumed" | "revoked" | "expired";
@@ -24180,6 +25416,8 @@ export interface operations {
                         token: string;
                         context: {
                             jitOrganizationIds?: string[];
+                            /** @enum {string} */
+                            interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                         };
                         /** @enum {string} */
                         status: "active" | "consumed" | "revoked" | "expired";
@@ -24253,6 +25491,8 @@ export interface operations {
                         token: string;
                         context: {
                             jitOrganizationIds?: string[];
+                            /** @enum {string} */
+                            interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                         };
                         /** @enum {string} */
                         status: "active" | "consumed" | "revoked" | "expired";
@@ -25746,10 +26986,9 @@ export interface operations {
                             maxAttempts?: number;
                             lockoutDuration?: number;
                         };
-                        emailBlocklistPolicy: {
-                            blockDisposableAddresses?: boolean;
-                            blockSubaddressing?: boolean;
-                            customBlocklist?: string[];
+                        verificationCodePolicy: {
+                            expirationDuration?: number;
+                            maxRetryAttempts?: number;
                         };
                         passkeySignIn: {
                             enabled?: boolean;
@@ -25759,6 +26998,19 @@ export interface operations {
                         signUpProfileFields: {
                             name: string;
                         }[] | null;
+                        passwordExpiration: {
+                            /** Format: false */
+                            enabled?: boolean;
+                        } | {
+                            /** Format: true */
+                            enabled: boolean;
+                            validPeriodDays: number;
+                            enabledAt?: number;
+                        };
+                        /** @description Validator function */
+                        usernamePolicy: {
+                            [key: string]: unknown;
+                        };
                         socialConnectors: {
                             id: string;
                             target: string;
@@ -26076,10 +27328,9 @@ export interface operations {
                             maxAttempts?: number;
                             lockoutDuration?: number;
                         };
-                        emailBlocklistPolicy: {
-                            blockDisposableAddresses?: boolean;
-                            blockSubaddressing?: boolean;
-                            customBlocklist?: string[];
+                        verificationCodePolicy: {
+                            expirationDuration?: number;
+                            maxRetryAttempts?: number;
                         };
                         passkeySignIn: {
                             enabled?: boolean;
@@ -26089,6 +27340,19 @@ export interface operations {
                         signUpProfileFields: {
                             name: string;
                         }[] | null;
+                        passwordExpiration: {
+                            /** Format: false */
+                            enabled?: boolean;
+                        } | {
+                            /** Format: true */
+                            enabled: boolean;
+                            validPeriodDays: number;
+                            enabledAt?: number;
+                        };
+                        /** @description Validator function */
+                        usernamePolicy: {
+                            [key: string]: unknown;
+                        };
                         socialConnectors: {
                             id: string;
                             target: string;
@@ -26282,6 +27546,8 @@ export interface operations {
                             /** @enum {string} */
                             mfa?: "Off" | "ReadOnly" | "Edit";
                             /** @enum {string} */
+                            passkey?: "Off" | "ReadOnly" | "Edit";
+                            /** @enum {string} */
                             session?: "Off" | "ReadOnly" | "Edit";
                         };
                         webauthnRelatedOrigins: string[];