@logto/api 1.41.0 → 1.43.0

package/lib/generated-types/management.d.ts

@@ -223,9 +223,7 @@ export interface paths {
         post?: never;
         /**
          * Delete application legacy secret
-         * @description Delete the legacy secret for the application and replace it with a new internal secret.
-         *
-         *     Note: This operation does not "really" delete the legacy secret because it is still needed for internal validation. We may remove the display of the legacy secret (the `secret` field in the application response) in the future.
+         * @description Delete the legacy secret for the application and replace it with an internal secret used only by Logto. The internal secret is not returned by Management APIs and cannot be used for client authentication.
          */
         delete: operations["DeleteApplicationLegacySecret"];
         options?: never;
@@ -611,6 +609,102 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/configs/actions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get all actions
+         * @description Get all action configurations for the tenant.
+         */
+        get: operations["ListActions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/configs/actions/test": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Test action
+         * @description Test an action script with a sample context.
+         */
+        post: operations["TestAction"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/configs/actions/{actionType}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get action
+         * @description Get the action configuration for the given action type.
+         */
+        get: operations["GetAction"];
+        /**
+         * Create or update action
+         * @description Create or update an action configuration for the given action type.
+         */
+        put: operations["UpsertAction"];
+        post?: never;
+        /**
+         * Delete action
+         * @description Delete the action configuration for the given action type.
+         */
+        delete: operations["DeleteAction"];
+        options?: never;
+        head?: never;
+        /**
+         * Update action
+         * @description Update the action configuration for the given action type.
+         */
+        patch: operations["UpdateAction"];
+        trace?: never;
+    };
+    "/api/configs/cimd": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get CIMD config
+         * @description Get the tenant-level OAuth Client ID Metadata Document (CIMD) configuration. A missing configuration resolves to the disabled state.
+         */
+        get: operations["GetCimdConfig"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Update CIMD config
+         * @description Update the tenant-level OAuth Client ID Metadata Document (CIMD) switch. Enabling requires the OIDC provider SSRF protection to be active.
+         */
+        patch: operations["UpdateCimdConfig"];
+        trace?: never;
+    };
     "/api/connectors": {
         parameters: {
             query?: never;
@@ -2111,6 +2205,30 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/domains/{id}/verification-files": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get domain verification files
+         * @description Get the verification files served from the custom domain.
+         */
+        get: operations["ListDomainVerificationFiles"];
+        /**
+         * Replace domain verification files
+         * @description Replace the verification files served from the custom domain.
+         */
+        put: operations["ReplaceDomainVerificationFiles"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/domains/cleanup": {
         parameters: {
             query?: never;
@@ -2939,6 +3057,54 @@ export interface paths {
         patch: operations["UpdateSsoConnector"];
         trace?: never;
     };
+    "/api/sso-connectors/{id}/signing-keys": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List SP signing keys
+         * @description List the Service Provider signing keys of the given SAML SSO connector. The response contains the certificate, fingerprints, activation state and expiry of each key — the private key is never returned.
+         */
+        get: operations["ListSsoConnectorSigningKeys"];
+        put?: never;
+        /**
+         * Create an SP signing key
+         * @description Generate a new Service Provider signing key pair for the given SAML SSO connector. Create the key inactive (default) to stage a graceful rotation — register its certificate at the identity provider before activating it. Creating an active key deactivates the currently active key atomically.
+         */
+        post: operations["CreateSsoConnectorSigningKey"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/sso-connectors/{id}/signing-keys/{keyId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Delete an SP signing key
+         * @description Delete the given Service Provider signing key. The active key cannot be deleted — activate a replacement key first, or disable signed authentication requests and deactivate this key.
+         */
+        delete: operations["DeleteSsoConnectorSigningKey"];
+        options?: never;
+        head?: never;
+        /**
+         * Activate or deactivate an SP signing key
+         * @description Update the activation state of the given Service Provider signing key. Activating a key atomically deactivates the currently active key — the switch step of a graceful rotation. Deactivating the active key is rejected while signed authentication requests are enabled — disable them first (key routes never modify the connector config).
+         */
+        patch: operations["UpdateSsoConnectorSigningKey"];
+        trace?: never;
+    };
     "/api/systems/application": {
         parameters: {
             query?: never;
@@ -3419,6 +3585,50 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/cimd/user-consent-scopes": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List CIMD user consent scopes
+         * @description List the tenant-level permission ceiling for CIMD clients: user scopes, API resource scopes, organization scopes, and organization API resource scopes.
+         */
+        get: operations["ListCimdUserConsentScopes"];
+        put?: never;
+        /**
+         * Assign CIMD user consent scopes
+         * @description Add scopes to the tenant-level permission ceiling for CIMD clients. Database-backed scopes are referenced by ID; Management API scopes can never be selected.
+         */
+        post: operations["AssignCimdUserConsentScopes"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/cimd/user-consent-scopes/{scopeType}/{scopeId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Delete a CIMD user consent scope
+         * @description Remove a scope from the tenant-level permission ceiling for CIMD clients.
+         */
+        delete: operations["DeleteCimdUserConsentScope"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/.well-known/sign-in-exp": {
         parameters: {
             query?: never;
@@ -3752,7 +3962,7 @@ export interface components {
         Translation: string;
         /**
          * @deprecated
-         * @description The internal client secret. Note it is only used for internal validation, and the actual secrets should be retrieved from `/api/applications/{id}/secrets` endpoints.
+         * @description The legacy client secret. This field is omitted after the legacy secret has been replaced by an internal secret. Retrieve current application secrets from the `/api/applications/{id}/secrets` endpoints.
          */
         ApplicationLegacySecret: string;
         SamlApplicationResponse: {
@@ -3927,7 +4137,7 @@ export interface operations {
                         tenantId: string;
                         id: string;
                         name: string;
-                        secret: components["schemas"]["ApplicationLegacySecret"];
+                        secret?: components["schemas"]["ApplicationLegacySecret"];
                         description: string | null;
                         /** @enum {string} */
                         type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
@@ -4083,7 +4293,7 @@ export interface operations {
                         tenantId: string;
                         id: string;
                         name: string;
-                        secret: components["schemas"]["ApplicationLegacySecret"];
+                        secret?: components["schemas"]["ApplicationLegacySecret"];
                         description: string | null;
                         /** @enum {string} */
                         type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
@@ -4211,7 +4421,7 @@ export interface operations {
                         tenantId: string;
                         id: string;
                         name: string;
-                        secret: components["schemas"]["ApplicationLegacySecret"];
+                        secret?: components["schemas"]["ApplicationLegacySecret"];
                         description: string | null;
                         /** @enum {string} */
                         type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
@@ -4436,7 +4646,7 @@ export interface operations {
                         tenantId: string;
                         id: string;
                         name: string;
-                        secret: components["schemas"]["ApplicationLegacySecret"];
+                        secret?: components["schemas"]["ApplicationLegacySecret"];
                         description: string | null;
                         /** @enum {string} */
                         type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
@@ -5326,7 +5536,7 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description OK */
+            /** @description The legacy secret was deleted successfully. */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -5336,7 +5546,7 @@ export interface operations {
                         tenantId: string;
                         id: string;
                         name: string;
-                        secret: string;
+                        secret?: string;
                         description: string | null;
                         /** @enum {string} */
                         type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
@@ -5405,13 +5615,6 @@ export interface operations {
                     };
                 };
             };
-            /** @description The legacy secret was deleted successfully. */
-            204: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
             /** @description The application does not have a legacy secret. */
             400: {
                 headers: {
@@ -5765,7 +5968,7 @@ export interface operations {
                             }[];
                         }[];
                         /** @description A list of user scope enum value assigned to the application. */
-                        userScopes: ("profile" | "email" | "phone" | "address" | "custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles" | "urn:logto:scope:sessions")[];
+                        userScopes: ("profile" | "email" | "phone" | "address" | "custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles" | "urn:logto:scope:sessions" | "urn:logto:scope:trusted_devices")[];
                     };
                 };
             };
@@ -5819,7 +6022,7 @@ export interface operations {
                     /** @description A list of organization resource scope id to assign to the application. Throws error if any given resource scope is not found. */
                     organizationResourceScopes?: string[];
                     /** @description A list of user scope enum value to assign to the application. */
-                    userScopes?: ("profile" | "email" | "phone" | "address" | "custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles" | "urn:logto:scope:sessions")[];
+                    userScopes?: ("profile" | "email" | "phone" | "address" | "custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles" | "urn:logto:scope:sessions" | "urn:logto:scope:trusted_devices")[];
                 };
             };
         };
@@ -6898,6 +7101,7 @@ export interface operations {
                                     };
                                 };
                                 applicationId?: string | null;
+                                cimdClientId?: string | null;
                                 isSuspended?: boolean;
                                 hasPassword?: boolean;
                                 ssoIdentities?: {
@@ -7081,6 +7285,8 @@ export interface operations {
                                     };
                                     oneTimeTokenContext?: {
                                         jitOrganizationIds?: string[];
+                                        /** @enum {string} */
+                                        interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                     };
                                 } | {
                                     id: string;
@@ -7394,6 +7600,7 @@ export interface operations {
                                     };
                                 };
                                 applicationId?: string | null;
+                                cimdClientId?: string | null;
                                 isSuspended?: boolean;
                                 hasPassword?: boolean;
                                 ssoIdentities?: {
@@ -7577,6 +7784,8 @@ export interface operations {
                                     };
                                     oneTimeTokenContext?: {
                                         jitOrganizationIds?: string[];
+                                        /** @enum {string} */
+                                        interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                     };
                                 } | {
                                     id: string;
@@ -7833,6 +8042,7 @@ export interface operations {
                                     };
                                 };
                                 applicationId?: string | null;
+                                cimdClientId?: string | null;
                                 isSuspended?: boolean;
                                 hasPassword?: boolean;
                                 ssoIdentities?: {
@@ -8016,6 +8226,8 @@ export interface operations {
                                     };
                                     oneTimeTokenContext?: {
                                         jitOrganizationIds?: string[];
+                                        /** @enum {string} */
+                                        interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                     };
                                 } | {
                                     id: string;
@@ -8371,6 +8583,7 @@ export interface operations {
                                     };
                                 };
                                 applicationId?: string | null;
+                                cimdClientId?: string | null;
                                 isSuspended?: boolean;
                                 hasPassword?: boolean;
                                 ssoIdentities?: {
@@ -8554,6 +8767,8 @@ export interface operations {
                                     };
                                     oneTimeTokenContext?: {
                                         jitOrganizationIds?: string[];
+                                        /** @enum {string} */
+                                        interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                     };
                                 } | {
                                     id: string;
@@ -8852,6 +9067,7 @@ export interface operations {
                                         };
                                     };
                                     applicationId?: string | null;
+                                    cimdClientId?: string | null;
                                     isSuspended?: boolean;
                                     hasPassword?: boolean;
                                     ssoIdentities?: {
@@ -9035,6 +9251,8 @@ export interface operations {
                                         };
                                         oneTimeTokenContext?: {
                                             jitOrganizationIds?: string[];
+                                            /** @enum {string} */
+                                            interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                         };
                                     } | {
                                         id: string;
@@ -9344,6 +9562,7 @@ export interface operations {
                                 };
                             };
                             applicationId?: string | null;
+                            cimdClientId?: string | null;
                             isSuspended?: boolean;
                             hasPassword?: boolean;
                             ssoIdentities?: {
@@ -9527,6 +9746,8 @@ export interface operations {
                                 };
                                 oneTimeTokenContext?: {
                                     jitOrganizationIds?: string[];
+                                    /** @enum {string} */
+                                    interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                 };
                             } | {
                                 id: string;
@@ -9847,97 +10068,625 @@ export interface operations {
             };
         };
     };
-    ListConnectors: {
+    ListActions: {
         parameters: {
-            query?: {
-                /** @description Filter connectors by target. */
-                target?: string;
-            };
+            query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description An array of connectors. */
+            /** @description The action configurations. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
                     "application/json": {
-                        id: string;
-                        syncProfile: boolean;
-                        enableTokenStorage: boolean;
-                        /** @description arbitrary */
-                        config: {
-                            [key: string]: unknown;
-                        };
-                        metadata: {
-                            target?: string;
-                            /** @description Validator function */
-                            name?: {
-                                [key: string]: unknown;
+                        /** @enum {string} */
+                        key: "action.postFirstFactorVerification" | "action.postSignIn";
+                        value: {
+                            script: string;
+                            environmentVariables?: {
+                                [key: string]: string;
                             };
-                            logo?: string;
-                            logoDark?: string | null;
-                        };
-                        connectorId: string;
-                        target: string;
-                        /** @description Validator function */
-                        name: {
-                            [key: string]: unknown;
-                        };
-                        /** @description Validator function */
-                        description: {
-                            [key: string]: unknown;
+                            contextSample?: ({
+                                [key: string]: unknown;
+                            } | (string | number | boolean | (string | null) | {
+                                [key: string]: unknown;
+                            })[] | string | number | boolean) | null;
+                            enabled?: boolean;
+                            /** @enum {string} */
+                            onExecutionError?: "block" | "allow";
                         };
-                        logo: string;
-                        logoDark: string | null;
-                        readme: string;
-                        configTemplate?: string;
-                        formItems?: ({
-                            /** Format: "Select" */
-                            type: string;
-                            selectItems: {
-                                value: string;
-                                title: string;
-                            }[];
-                            key: string;
-                            label: string;
-                            placeholder?: string;
-                            required?: boolean;
-                            /** @example {} */
-                            defaultValue?: unknown;
-                            showConditions?: {
-                                targetKey: string;
-                                /** @example {} */
-                                expectValue?: unknown;
-                            }[];
-                            description?: string;
-                            tooltip?: string;
-                            isConfidential?: boolean;
-                            isDevFeature?: boolean;
-                        } | {
-                            /** Format: "MultiSelect" */
-                            type: string;
-                            selectItems: {
-                                value: string;
-                            }[];
-                            key: string;
-                            label: string;
-                            placeholder?: string;
-                            required?: boolean;
-                            /** @example {} */
-                            defaultValue?: unknown;
-                            showConditions?: {
-                                targetKey: string;
-                                /** @example {} */
-                                expectValue?: unknown;
-                            }[];
-                            description?: string;
-                            tooltip?: string;
-                            isConfidential?: boolean;
+                    }[];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    TestAction: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description The action script to test. */
+                    script: string;
+                    /**
+                     * @description The action type to test.
+                     * @enum {string}
+                     */
+                    actionType: "action.postFirstFactorVerification" | "action.postSignIn";
+                    /** @description The sample event for action script testing. */
+                    event: ({
+                        [key: string]: unknown;
+                    } | (string | number | boolean | (string | null) | {
+                        [key: string]: unknown;
+                    })[] | string | number | boolean) | null;
+                    /** @description The environment variables for the action script. */
+                    environmentVariables?: {
+                        [key: string]: string;
+                    };
+                };
+            };
+        };
+        responses: {
+            /** @description The result of the action script testing. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": ({
+                        [key: string]: unknown;
+                    } | (string | number | boolean | (string | null) | {
+                        [key: string]: unknown;
+                    })[] | string | number | boolean) | null;
+                };
+            };
+            /** @description The action script returned no result. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The request body or response body is invalid. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Cloud connection does not have enough permission to perform the action or the tenant's subscription plan does not support this feature. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The action script failed to execute. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    GetAction: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The action type to get. */
+                actionType: "action.postFirstFactorVerification" | "action.postSignIn";
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The action configuration. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        script: string;
+                        environmentVariables?: {
+                            [key: string]: string;
+                        };
+                        contextSample?: ({
+                            [key: string]: unknown;
+                        } | (string | number | boolean | (string | null) | {
+                            [key: string]: unknown;
+                        })[] | string | number | boolean) | null;
+                        enabled?: boolean;
+                        /** @enum {string} */
+                        onExecutionError?: "block" | "allow";
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The action configuration does not exist. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    UpsertAction: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The action type to create or update. */
+                actionType: "action.postFirstFactorVerification" | "action.postSignIn";
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description The action script. */
+                    script: string;
+                    /** @description The environment variables for the action script. */
+                    environmentVariables?: {
+                        [key: string]: string;
+                    };
+                    /** @description The sample context for action script testing. */
+                    contextSample?: ({
+                        [key: string]: unknown;
+                    } | (string | number | boolean | (string | null) | {
+                        [key: string]: unknown;
+                    })[] | string | number | boolean) | null;
+                    /** @description Whether the action is enabled. */
+                    enabled?: boolean;
+                    /**
+                     * @description The action execution error handling policy.
+                     * @enum {string}
+                     */
+                    onExecutionError?: "block" | "allow";
+                };
+            };
+        };
+        responses: {
+            /** @description The updated action configuration. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        script: string;
+                        environmentVariables?: {
+                            [key: string]: string;
+                        };
+                        contextSample?: ({
+                            [key: string]: unknown;
+                        } | (string | number | boolean | (string | null) | {
+                            [key: string]: unknown;
+                        })[] | string | number | boolean) | null;
+                        enabled?: boolean;
+                        /** @enum {string} */
+                        onExecutionError?: "block" | "allow";
+                    };
+                };
+            };
+            /** @description The created action configuration. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        script: string;
+                        environmentVariables?: {
+                            [key: string]: string;
+                        };
+                        contextSample?: ({
+                            [key: string]: unknown;
+                        } | (string | number | boolean | (string | null) | {
+                            [key: string]: unknown;
+                        })[] | string | number | boolean) | null;
+                        enabled?: boolean;
+                        /** @enum {string} */
+                        onExecutionError?: "block" | "allow";
+                    };
+                };
+            };
+            /** @description The request body is invalid. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The tenant's subscription plan does not support this feature. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    DeleteAction: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The action type to delete. */
+                actionType: "action.postFirstFactorVerification" | "action.postSignIn";
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The action configuration was deleted successfully. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The action configuration does not exist. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    UpdateAction: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The action type to update. */
+                actionType: "action.postFirstFactorVerification" | "action.postSignIn";
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description The action script. */
+                    script?: string;
+                    /** @description The environment variables for the action script. */
+                    environmentVariables?: {
+                        [key: string]: string;
+                    };
+                    /** @description The sample context for action script testing. */
+                    contextSample?: ({
+                        [key: string]: unknown;
+                    } | (string | number | boolean | (string | null) | {
+                        [key: string]: unknown;
+                    })[] | string | number | boolean) | null;
+                    /** @description Whether the action is enabled. */
+                    enabled?: boolean;
+                    /**
+                     * @description The action execution error handling policy.
+                     * @enum {string}
+                     */
+                    onExecutionError?: "block" | "allow";
+                };
+            };
+        };
+        responses: {
+            /** @description The updated action configuration. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        script: string;
+                        environmentVariables?: {
+                            [key: string]: string;
+                        };
+                        contextSample?: ({
+                            [key: string]: unknown;
+                        } | (string | number | boolean | (string | null) | {
+                            [key: string]: unknown;
+                        })[] | string | number | boolean) | null;
+                        enabled?: boolean;
+                        /** @enum {string} */
+                        onExecutionError?: "block" | "allow";
+                    };
+                };
+            };
+            /** @description The request body is invalid. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The tenant's subscription plan does not support this feature. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The action configuration does not exist. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    GetCimdConfig: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The CIMD configuration. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        enabled: boolean;
+                    };
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    UpdateCimdConfig: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    enabled?: boolean;
+                };
+            };
+        };
+        responses: {
+            /** @description The updated CIMD configuration. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        enabled: boolean;
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The OIDC provider SSRF protection is disabled, so CIMD cannot be enabled. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    ListConnectors: {
+        parameters: {
+            query?: {
+                /** @description Filter connectors by target. */
+                target?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description An array of connectors. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        id: string;
+                        syncProfile: boolean;
+                        enableTokenStorage: boolean;
+                        /** @description arbitrary */
+                        config: {
+                            [key: string]: unknown;
+                        };
+                        metadata: {
+                            target?: string;
+                            /** @description Validator function */
+                            name?: {
+                                [key: string]: unknown;
+                            };
+                            logo?: string;
+                            logoDark?: string | null;
+                        };
+                        connectorId: string;
+                        target: string;
+                        /** @description Validator function */
+                        name: {
+                            [key: string]: unknown;
+                        };
+                        /** @description Validator function */
+                        description: {
+                            [key: string]: unknown;
+                        };
+                        logo: string;
+                        logoDark: string | null;
+                        readme: string;
+                        configTemplate?: string;
+                        formItems?: ({
+                            /** Format: "Select" */
+                            type: string;
+                            selectItems: {
+                                value: string;
+                                title: string;
+                            }[];
+                            key: string;
+                            label: string;
+                            placeholder?: string;
+                            required?: boolean;
+                            /** @example {} */
+                            defaultValue?: unknown;
+                            showConditions?: {
+                                targetKey: string;
+                                /** @example {} */
+                                expectValue?: unknown;
+                            }[];
+                            description?: string;
+                            tooltip?: string;
+                            isConfidential?: boolean;
+                            isDevFeature?: boolean;
+                        } | {
+                            /** Format: "MultiSelect" */
+                            type: string;
+                            selectItems: {
+                                value: string;
+                            }[];
+                            key: string;
+                            label: string;
+                            placeholder?: string;
+                            required?: boolean;
+                            /** @example {} */
+                            defaultValue?: unknown;
+                            showConditions?: {
+                                targetKey: string;
+                                /** @example {} */
+                                expectValue?: unknown;
+                            }[];
+                            description?: string;
+                            tooltip?: string;
+                            isConfidential?: boolean;
                             isDevFeature?: boolean;
                         } | {
                             /** @enum {string} */
@@ -11662,7 +12411,7 @@ export interface operations {
                         languageInfo: {
                             autoDetect: boolean;
                             /** @enum {string} */
-                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "es-MX" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                         };
                         termsOfUseUrl: string | null;
                         privacyPolicyUrl: string | null;
@@ -11769,15 +12518,16 @@ export interface operations {
                             maxAttempts?: number;
                             lockoutDuration?: number;
                         };
-                        /** @description Define email restriction policies. Users will be prohibited from registering or linking any email addresses that are included in the blocklist. */
+                        /** @description Define email restriction policies for registering or linking email addresses. */
                         emailBlocklistPolicy: {
+                            /** @description Cloud only.  Whether to block disposable email addresses. Once enabled, Logto will check the email domain against a list of known disposable email domains. If the domain is found in the list, the email address will be blocked. */
                             blockDisposableAddresses?: boolean;
                             /** @description Whether to block sub-addresses. (E.g., example+shopping@test.com) */
                             blockSubaddressing?: boolean;
-                            /** @description Custom blocklist of email addresses or domains. */
+                            /** @description Custom allowlist of email addresses, domains, or wildcard email address patterns. Examples: `bar@example.com`, `@example.com`, `foo*@example.com`, `@*.example.com`. */
+                            customAllowlist?: string[];
+                            /** @description Custom blocklist of email addresses, domains, or wildcard email address patterns. Examples: `bar@example.com`, `@example.com`, `foo*@example.com`, `@*.example.com`. */
                             customBlocklist?: string[];
-                            /** @description Cloud only.  Whether to block disposable email addresses. Once enabled, Logto will check the email domain against a list of known disposable email domains. If the domain is found in the list, the email address will be blocked. */
-                            blockDisposableAddress?: unknown;
                         };
                         verificationCodePolicy: {
                             expirationDuration?: number;
@@ -11875,7 +12625,7 @@ export interface operations {
                     languageInfo?: {
                         autoDetect: boolean;
                         /** @enum {string} */
-                        fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                        fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "es-MX" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                     };
                     /** @enum {string} */
                     agreeToTermsPolicy?: "Automatic" | "ManualRegistrationOnly" | "Manual";
@@ -11973,15 +12723,16 @@ export interface operations {
                         maxAttempts?: number;
                         lockoutDuration?: number;
                     };
-                    /** @description Define email restriction policies. Users will be prohibited from registering or linking any email addresses that are included in the blocklist. */
+                    /** @description Define email restriction policies for registering or linking email addresses. */
                     emailBlocklistPolicy?: {
+                        /** @description Cloud only.  Whether to block disposable email addresses. Once enabled, Logto will check the email domain against a list of known disposable email domains. If the domain is found in the list, the email address will be blocked. */
                         blockDisposableAddresses?: boolean;
                         /** @description Whether to block sub-addresses. (E.g., example+shopping@test.com) */
                         blockSubaddressing?: boolean;
-                        /** @description Custom blocklist of email addresses or domains. */
+                        /** @description Custom allowlist of email addresses, domains, or wildcard email address patterns. Examples: `bar@example.com`, `@example.com`, `foo*@example.com`, `@*.example.com`. */
+                        customAllowlist?: string[];
+                        /** @description Custom blocklist of email addresses, domains, or wildcard email address patterns. Examples: `bar@example.com`, `@example.com`, `foo*@example.com`, `@*.example.com`. */
                         customBlocklist?: string[];
-                        /** @description Cloud only.  Whether to block disposable email addresses. Once enabled, Logto will check the email domain against a list of known disposable email domains. If the domain is found in the list, the email address will be blocked. */
-                        blockDisposableAddress?: unknown;
                     };
                     forgotPasswordMethods?: ("EmailVerificationCode" | "PhoneVerificationCode")[] | null;
                     passkeySignIn?: {
@@ -12057,7 +12808,7 @@ export interface operations {
                         languageInfo: {
                             autoDetect: boolean;
                             /** @enum {string} */
-                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "es-MX" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                         };
                         termsOfUseUrl: string | null;
                         privacyPolicyUrl: string | null;
@@ -12149,6 +12900,7 @@ export interface operations {
                         emailBlocklistPolicy: {
                             blockDisposableAddresses?: boolean;
                             blockSubaddressing?: boolean;
+                            customAllowlist?: string[];
                             customBlocklist?: string[];
                         };
                         verificationCodePolicy: {
@@ -12460,6 +13212,8 @@ export interface operations {
                             };
                         };
                         applicationId: string | null;
+                        /** @description The identifier of the CIMD (client ID metadata document) client from the user's first consent. `null` unless the user's first consent was granted to a CIMD client. Mutually exclusive with `applicationId`. */
+                        cimdClientId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
                         hasSecurityVerificationMethod?: boolean;
@@ -12670,6 +13424,8 @@ export interface operations {
                             };
                         };
                         applicationId: string | null;
+                        /** @description The identifier of the CIMD (client ID metadata document) client from the user's first consent. `null` unless the user's first consent was granted to a CIMD client. Mutually exclusive with `applicationId`. */
+                        cimdClientId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
                         hasSecurityVerificationMethod?: boolean;
@@ -13143,6 +13899,8 @@ export interface operations {
                             };
                         };
                         applicationId: string | null;
+                        /** @description The identifier of the CIMD (client ID metadata document) client from the user's first consent. `null` unless the user's first consent was granted to a CIMD client. Mutually exclusive with `applicationId`. */
+                        cimdClientId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
                         hasSecurityVerificationMethod?: boolean;
@@ -13305,6 +14063,8 @@ export interface operations {
                             };
                         };
                         applicationId: string | null;
+                        /** @description The identifier of the CIMD (client ID metadata document) client from the user's first consent. `null` unless the user's first consent was granted to a CIMD client. Mutually exclusive with `applicationId`. */
+                        cimdClientId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
                         hasSecurityVerificationMethod?: boolean;
@@ -13435,6 +14195,8 @@ export interface operations {
                             };
                         };
                         applicationId: string | null;
+                        /** @description The identifier of the CIMD (client ID metadata document) client from the user's first consent. `null` unless the user's first consent was granted to a CIMD client. Mutually exclusive with `applicationId`. */
+                        cimdClientId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
                         hasSecurityVerificationMethod?: boolean;
@@ -13558,6 +14320,8 @@ export interface operations {
                             };
                         };
                         applicationId: string | null;
+                        /** @description The identifier of the CIMD (client ID metadata document) client from the user's first consent. `null` unless the user's first consent was granted to a CIMD client. Mutually exclusive with `applicationId`. */
+                        cimdClientId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
                         hasSecurityVerificationMethod?: boolean;
@@ -13797,6 +14561,8 @@ export interface operations {
                             };
                         };
                         applicationId: string | null;
+                        /** @description The identifier of the CIMD (client ID metadata document) client from the user's first consent. `null` unless the user's first consent was granted to a CIMD client. Mutually exclusive with `applicationId`. */
+                        cimdClientId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
                         hasSecurityVerificationMethod?: boolean;
@@ -14350,6 +15116,8 @@ export interface operations {
                             };
                         };
                         applicationId: string | null;
+                        /** @description The identifier of the CIMD (client ID metadata document) client from the user's first consent. `null` unless the user's first consent was granted to a CIMD client. Mutually exclusive with `applicationId`. */
+                        cimdClientId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
                         hasSecurityVerificationMethod?: boolean;
@@ -15640,6 +16408,8 @@ export interface operations {
                                     };
                                     oneTimeTokenContext?: {
                                         jitOrganizationIds?: string[];
+                                        /** @enum {string} */
+                                        interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                     };
                                 } | {
                                     id: string;
@@ -15864,6 +16634,8 @@ export interface operations {
                                 };
                                 oneTimeTokenContext?: {
                                     jitOrganizationIds?: string[];
+                                    /** @enum {string} */
+                                    interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                                 };
                             } | {
                                 id: string;
@@ -15994,9 +16766,9 @@ export interface operations {
                 logKey?: string;
                 /** @description When `true`, short-circuits the underlying `count(*)` query: any tenant with more than 10,000 matching logs saturates `Total-Number` at the sentinel value `10001` and the response emits `Total-Number-Is-Capped: true`. The `Link` header then omits `rel="last"` and `rel="next"` because the real total is unknown. Default `false`; recommended `true` for any client whose tenant volume may exceed 10,000 matching logs to avoid `statement_timeout`. */
                 enableCap?: string;
-                /** @description Exclusive lower bound on `createdAt`, in unix milliseconds. When set, returns only logs where `createdAt > start_time`. Recommended for clients paginating across very large log ranges to keep query latency consistent. */
+                /** @description Inclusive lower bound on `createdAt`, in unix milliseconds. When set, returns only logs where `createdAt >= start_time`. Recommended for clients paginating across very large log ranges to keep query latency consistent. Because the bound is inclusive, when resuming pagination from the last fetched log, pass its `createdAt + 1` as `start_time` (or de-duplicate by log `id`) to avoid re-fetching the boundary log. */
                 start_time?: string;
-                /** @description Exclusive upper bound on `createdAt`, in unix milliseconds. When set, returns only logs where `createdAt < end_time`. Returns `400` if `start_time >= end_time` when both are present. */
+                /** @description Inclusive upper bound on `createdAt`, in unix milliseconds. When set, returns only logs where `createdAt <= end_time`. Returns `400` if `start_time > end_time` when both are present. */
                 end_time?: string;
                 /** @description Page number (starts from 1). */
                 page?: number;
@@ -16061,6 +16833,7 @@ export interface operations {
                             };
                             userId?: string;
                             applicationId?: string;
+                            cimdClientId?: string;
                             sessionId?: string;
                             params?: {
                                 [key: string]: unknown;
@@ -16070,7 +16843,7 @@ export interface operations {
                     }[];
                 };
             };
-            /** @description Returned when `start_time` or `end_time` is not a finite number, or when `start_time >= end_time`. */
+            /** @description Returned when `start_time` or `end_time` is not a finite number, or when `start_time > end_time`. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -16151,6 +16924,7 @@ export interface operations {
                             };
                             userId?: string;
                             applicationId?: string;
+                            cimdClientId?: string;
                             sessionId?: string;
                             params?: {
                                 [key: string]: unknown;
@@ -16602,6 +17376,8 @@ export interface operations {
                             };
                         };
                         applicationId: string | null;
+                        /** @description The identifier of the CIMD (client ID metadata document) client from the user's first consent. `null` unless the user's first consent was granted to a CIMD client. Mutually exclusive with `applicationId`. */
+                        cimdClientId: string | null;
                         isSuspended: boolean;
                         hasPassword?: boolean;
                         hasSecurityVerificationMethod?: boolean;
@@ -16799,7 +17575,7 @@ export interface operations {
                         tenantId: string;
                         id: string;
                         name: string;
-                        secret: string;
+                        secret?: string;
                         description: string | null;
                         /** @enum {string} */
                         type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
@@ -17410,7 +18186,7 @@ export interface operations {
             query?: never;
             header?: never;
             path: {
-                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "es-MX" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
             };
             cookie?: never;
         };
@@ -17465,7 +18241,7 @@ export interface operations {
             query?: never;
             header?: never;
             path: {
-                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "es-MX" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
             };
             cookie?: never;
         };
@@ -17528,7 +18304,7 @@ export interface operations {
             query?: never;
             header?: never;
             path: {
-                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                languageTag: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "es-MX" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
             };
             cookie?: never;
         };
@@ -17605,8 +18381,8 @@ export interface operations {
                         id: string;
                         name: string;
                         /** @enum {string|null} */
-                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | null;
-                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited")[];
+                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
+                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                         config: {
                             url: string;
                             headers?: {
@@ -17665,9 +18441,9 @@ export interface operations {
                      * @description Use `events` instead.
                      * @enum {string}
                      */
-                    event?: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited";
+                    event?: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded";
                     /** @description An array of hook events. */
-                    events?: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited")[];
+                    events?: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                     config: {
                         url: string;
                         headers?: {
@@ -17696,8 +18472,8 @@ export interface operations {
                         id: string;
                         name: string;
                         /** @enum {string|null} */
-                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | null;
-                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited")[];
+                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
+                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                         config: {
                             url: string;
                             headers?: {
@@ -17760,8 +18536,8 @@ export interface operations {
                         id: string;
                         name: string;
                         /** @enum {string|null} */
-                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | null;
-                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited")[];
+                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
+                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                         config: {
                             url: string;
                             headers?: {
@@ -17879,9 +18655,9 @@ export interface operations {
                      * @description Use `events` instead.
                      * @enum {string|null}
                      */
-                    event?: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | null;
+                    event?: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
                     /** @description An array of updated hook events. */
-                    events?: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited")[];
+                    events?: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                     config?: {
                         url: string;
                         headers?: {
@@ -17910,8 +18686,8 @@ export interface operations {
                         id: string;
                         name: string;
                         /** @enum {string|null} */
-                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | null;
-                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited")[];
+                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
+                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                         config: {
                             url: string;
                             headers?: {
@@ -17962,9 +18738,9 @@ export interface operations {
                 logKey?: string;
                 /** @description When `true`, short-circuits the underlying `count(*)` query: results with more than 10,000 matching logs saturate `Total-Number` at the sentinel `10001` and emit `Total-Number-Is-Capped: true`; the `Link` header omits `rel="last"` and `rel="next"`. Default `false`. (This endpoint is already scoped to a single hook over the last 24 hours, so the cap rarely triggers in practice.) */
                 enableCap?: string;
-                /** @description Exclusive lower bound on `createdAt`, in unix milliseconds. Supplying either `start_time` or `end_time` replaces the endpoint's default 24-hour lower bound, so callers can query an arbitrary historical window. Returns `400` if `start_time >= end_time` when both are present. */
+                /** @description Inclusive lower bound on `createdAt`, in unix milliseconds. Supplying either `start_time` or `end_time` replaces the endpoint's default 24-hour lower bound, so callers can query an arbitrary historical window. Returns `400` if `start_time > end_time` when both are present. */
                 start_time?: string;
-                /** @description Exclusive upper bound on `createdAt`, in unix milliseconds. Supplying either `start_time` or `end_time` replaces the endpoint's default 24-hour lower bound. */
+                /** @description Inclusive upper bound on `createdAt`, in unix milliseconds. Supplying either `start_time` or `end_time` replaces the endpoint's default 24-hour lower bound. */
                 end_time?: string;
                 /** @description Page number (starts from 1). */
                 page?: number;
@@ -18031,6 +18807,7 @@ export interface operations {
                             };
                             userId?: string;
                             applicationId?: string;
+                            cimdClientId?: string;
                             sessionId?: string;
                             params?: {
                                 [key: string]: unknown;
@@ -18040,7 +18817,7 @@ export interface operations {
                     }[];
                 };
             };
-            /** @description Returned when `start_time` or `end_time` is not a finite number, or when `start_time >= end_time`. */
+            /** @description Returned when `start_time` or `end_time` is not a finite number, or when `start_time > end_time`. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -18077,7 +18854,7 @@ export interface operations {
             content: {
                 "application/json": {
                     /** @description An array of hook events for testing. */
-                    events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited")[];
+                    events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                     /** @description The hook configuration for testing. */
                     config: {
                         url: string;
@@ -18166,8 +18943,8 @@ export interface operations {
                         id: string;
                         name: string;
                         /** @enum {string|null} */
-                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | null;
-                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited")[];
+                        event: "PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded" | null;
+                        events: ("PostRegister" | "PostSignIn" | "PostSignInAdaptiveMfaTriggered" | "PostResetPassword" | "User.Created" | "User.Deleted" | "User.Data.Updated" | "User.SuspensionStatus.Updated" | "Role.Created" | "Role.Deleted" | "Role.Data.Updated" | "Role.Scopes.Updated" | "Scope.Created" | "Scope.Deleted" | "Scope.Data.Updated" | "Organization.Created" | "Organization.Deleted" | "Organization.Data.Updated" | "Organization.Membership.Updated" | "OrganizationRole.Created" | "OrganizationRole.Deleted" | "OrganizationRole.Data.Updated" | "OrganizationRole.Scopes.Updated" | "OrganizationScope.Created" | "OrganizationScope.Deleted" | "OrganizationScope.Data.Updated" | "Identifier.Lockout" | "Message.RateLimited" | "Grant.LimitExceeded")[];
                         config: {
                             url: string;
                             headers?: {
@@ -18591,18 +19368,133 @@ export interface operations {
                 /** @description The unique identifier of the domain. */
                 id: components["parameters"]["domainId-root"];
             };
-            cookie?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The domain was deleted successfully. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The domain with the specified ID was not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    ListDomainVerificationFiles: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the domain. */
+                id: components["parameters"]["domainId-root"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The configured domain verification files. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The domain with the specified ID was not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    ReplaceDomainVerificationFiles: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the domain. */
+                id: components["parameters"]["domainId-root"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description Up to 10 text or JSON verification files served as filenames with extensions at the domain root, or at paths under `/.well-known/`. */
+                    verificationFiles: {
+                        [key: string]: unknown;
+                    };
+                };
+            };
         };
-        requestBody?: never;
         responses: {
-            /** @description The domain was deleted successfully. */
-            204: {
+            /** @description The domain verification files were replaced successfully. */
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content?: never;
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
             };
-            /** @description Bad Request */
+            /** @description Validation error. Please check the request body. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -18806,7 +19698,6 @@ export interface operations {
             content: {
                 "application/json": {
                     tenantId?: string;
-                    id?: string;
                     /** @description The updated name of the organization role. It must be unique within the organization template. */
                     name?: string;
                     /** @description The updated description of the organization role. */
@@ -19701,7 +20592,6 @@ export interface operations {
             content: {
                 "application/json": {
                     tenantId?: string;
-                    id?: string;
                     /** @description The updated name of the organization scope. It must be unique within the organization template. */
                     name?: string;
                     /** @description The updated description of the organization scope. */
@@ -20375,6 +21265,13 @@ export interface operations {
                 };
                 content?: never;
             };
+            /** @description Unprocessable Content */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
         };
     };
     GetOrganization: {
@@ -20520,7 +21417,6 @@ export interface operations {
             content: {
                 "application/json": {
                     tenantId?: string;
-                    id?: string;
                     /** @description The updated name of the organization. */
                     name?: string;
                     /** @description The updated description of the organization. */
@@ -20619,6 +21515,13 @@ export interface operations {
                 };
                 content?: never;
             };
+            /** @description Unprocessable Content */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
         };
     };
     ListOrganizationUsers: {
@@ -20697,6 +21600,8 @@ export interface operations {
                             };
                         };
                         applicationId: string | null;
+                        /** @description The identifier of the CIMD (client ID metadata document) client from the user's first consent. `null` unless the user's first consent was granted to a CIMD client. Mutually exclusive with `applicationId`. */
+                        cimdClientId: string | null;
                         isSuspended: boolean;
                         organizationRoles: {
                             id: string;
@@ -21306,7 +22211,7 @@ export interface operations {
                         tenantId: string;
                         id: string;
                         name: string;
-                        secret: components["schemas"]["ApplicationLegacySecret"];
+                        secret?: components["schemas"]["ApplicationLegacySecret"];
                         description: string | null;
                         /** @enum {string} */
                         type: "Native" | "SPA" | "Traditional" | "MachineToMachine" | "Protected" | "SAML";
@@ -21921,8 +22826,233 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description Forbidden */
-            403: {
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    ReplaceOrganizationJitEmailDomains: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the organization. */
+                id: components["parameters"]["organizationId-root"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description An array of email domains to replace existing email domains. */
+                    emailDomains: string[];
+                };
+            };
+        };
+        responses: {
+            /** @description The email domains were replaced successfully. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    CreateOrganizationJitEmailDomain: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the organization. */
+                id: components["parameters"]["organizationId-root"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description The email domain to add. */
+                    emailDomain: string;
+                };
+            };
+        };
+        responses: {
+            /** @description The email domain was added successfully. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        tenantId: string;
+                        organizationId: string;
+                        emailDomain: string;
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The email domain is already in use. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    DeleteOrganizationJitEmailDomain: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The unique identifier of the organization. */
+                id: components["parameters"]["organizationId-root"];
+                /** @description The email domain to remove. */
+                emailDomain: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The email domain was removed successfully. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The email domain was not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    ListOrganizationJitRoles: {
+        parameters: {
+            query?: {
+                /** @description Page number (starts from 1). */
+                page?: number;
+                /** @description Entries per page. */
+                page_size?: number;
+            };
+            header?: never;
+            path: {
+                /** @description The unique identifier of the organization. */
+                id: components["parameters"]["organizationId-root"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description A list of organization roles. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        tenantId: string;
+                        id: string;
+                        name: string;
+                        description: string | null;
+                        /** @enum {string} */
+                        type: "User" | "MachineToMachine";
+                    }[];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not Found */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -21930,7 +23060,7 @@ export interface operations {
             };
         };
     };
-    ReplaceOrganizationJitEmailDomains: {
+    ReplaceOrganizationJitRoles: {
         parameters: {
             query?: never;
             header?: never;
@@ -21943,13 +23073,13 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    /** @description An array of email domains to replace existing email domains. */
-                    emailDomains: string[];
+                    /** @description An array of organization role IDs to replace existing organization roles. */
+                    organizationRoleIds: string[];
                 };
             };
         };
         responses: {
-            /** @description The email domains were replaced successfully. */
+            /** @description The organization roles were replaced successfully. */
             204: {
                 headers: {
                     [name: string]: unknown;
@@ -21977,9 +23107,16 @@ export interface operations {
                 };
                 content?: never;
             };
+            /** @description The organization roles could not be replaced. Some of the organization roles may not exist. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
         };
     };
-    CreateOrganizationJitEmailDomain: {
+    CreateOrganizationJitRole: {
         parameters: {
             query?: never;
             header?: never;
@@ -21992,23 +23129,19 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    /** @description The email domain to add. */
-                    emailDomain: string;
+                    /** @description The organization role IDs to add. */
+                    organizationRoleIds: string[];
                 };
             };
         };
         responses: {
-            /** @description The email domain was added successfully. */
+            /** @description The organization roles were added successfully. */
             201: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": {
-                        tenantId: string;
-                        organizationId: string;
-                        emailDomain: string;
-                    };
+                    "application/json": unknown;
                 };
             };
             /** @description Bad Request */
@@ -22032,7 +23165,7 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description The email domain is already in use. */
+            /** @description The organization roles could not be added. Some of the organization roles may not exist. */
             422: {
                 headers: {
                     [name: string]: unknown;
@@ -22041,21 +23174,21 @@ export interface operations {
             };
         };
     };
-    DeleteOrganizationJitEmailDomain: {
+    DeleteOrganizationJitRole: {
         parameters: {
             query?: never;
             header?: never;
             path: {
                 /** @description The unique identifier of the organization. */
                 id: components["parameters"]["organizationId-root"];
-                /** @description The email domain to remove. */
-                emailDomain: string;
+                /** @description The unique identifier of the organization role. */
+                organizationRoleId: components["parameters"]["organizationRoleId"];
             };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description The email domain was removed successfully. */
+            /** @description The organization role was removed successfully. */
             204: {
                 headers: {
                     [name: string]: unknown;
@@ -22083,8 +23216,8 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description The email domain was not found. */
-            404: {
+            /** @description The organization role could not be removed. The organization role may not exist. */
+            422: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -22092,7 +23225,7 @@ export interface operations {
             };
         };
     };
-    ListOrganizationJitRoles: {
+    ListOrganizationJitSsoConnectors: {
         parameters: {
             query?: {
                 /** @description Page number (starts from 1). */
@@ -22109,7 +23242,7 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description A list of organization roles. */
+            /** @description A list of SSO connectors. */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -22118,10 +23251,21 @@ export interface operations {
                     "application/json": {
                         tenantId: string;
                         id: string;
-                        name: string;
-                        description: string | null;
-                        /** @enum {string} */
-                        type: "User" | "MachineToMachine";
+                        providerName: string;
+                        connectorName: string;
+                        /** @description arbitrary */
+                        config: {
+                            [key: string]: unknown;
+                        };
+                        domains: string[];
+                        branding: {
+                            displayName?: string;
+                            logo?: string;
+                            darkLogo?: string;
+                        };
+                        syncProfile: boolean;
+                        enableTokenStorage: boolean;
+                        createdAt: number;
                     }[];
                 };
             };
@@ -22155,7 +23299,7 @@ export interface operations {
             };
         };
     };
-    ReplaceOrganizationJitRoles: {
+    ReplaceOrganizationJitSsoConnectors: {
         parameters: {
             query?: never;
             header?: never;
@@ -22168,13 +23312,13 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    /** @description An array of organization role IDs to replace existing organization roles. */
-                    organizationRoleIds: string[];
+                    /** @description An array of SSO connector IDs to replace existing SSO connectors. */
+                    ssoConnectorIds: string[];
                 };
             };
         };
         responses: {
-            /** @description The organization roles were replaced successfully. */
+            /** @description The SSO connectors were replaced successfully. */
             204: {
                 headers: {
                     [name: string]: unknown;
@@ -22202,7 +23346,7 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description The organization roles could not be replaced. Some of the organization roles may not exist. */
+            /** @description The SSO connectors could not be replaced. Some of the SSO connectors may not exist. */
             422: {
                 headers: {
                     [name: string]: unknown;
@@ -22211,7 +23355,7 @@ export interface operations {
             };
         };
     };
-    CreateOrganizationJitRole: {
+    CreateOrganizationJitSsoConnector: {
         parameters: {
             query?: never;
             header?: never;
@@ -22224,13 +23368,13 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    /** @description The organization role IDs to add. */
-                    organizationRoleIds: string[];
+                    /** @description The SSO connector IDs to add. */
+                    ssoConnectorIds: string[];
                 };
             };
         };
         responses: {
-            /** @description The organization roles were added successfully. */
+            /** @description The SSO connectors were added successfully. */
             201: {
                 headers: {
                     [name: string]: unknown;
@@ -22260,7 +23404,7 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description The organization roles could not be added. Some of the organization roles may not exist. */
+            /** @description The SSO connectors could not be added. Some of the SSO connectors may not exist. */
             422: {
                 headers: {
                     [name: string]: unknown;
@@ -22269,21 +23413,21 @@ export interface operations {
             };
         };
     };
-    DeleteOrganizationJitRole: {
+    DeleteOrganizationJitSsoConnector: {
         parameters: {
             query?: never;
             header?: never;
             path: {
                 /** @description The unique identifier of the organization. */
                 id: components["parameters"]["organizationId-root"];
-                /** @description The unique identifier of the organization role. */
-                organizationRoleId: components["parameters"]["organizationRoleId"];
+                /** @description The unique identifier of the sso connector. */
+                ssoConnectorId: components["parameters"]["ssoConnectorId"];
             };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description The organization role was removed successfully. */
+            /** @description The SSO connector was removed successfully. */
             204: {
                 headers: {
                     [name: string]: unknown;
@@ -22311,7 +23455,7 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description The organization role could not be removed. The organization role may not exist. */
+            /** @description The SSO connector could not be removed. The SSO connector may not exist. */
             422: {
                 headers: {
                     [name: string]: unknown;
@@ -22320,7 +23464,50 @@ export interface operations {
             };
         };
     };
-    ListOrganizationJitSsoConnectors: {
+    ListSsoConnectorProviders: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description A list of SSO provider data. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @enum {string} */
+                        providerName: "OIDC" | "SAML" | "AzureAD" | "GoogleWorkspace" | "Okta" | "AzureAdOidc";
+                        /** @enum {string} */
+                        providerType: "oidc" | "saml";
+                        logo: string;
+                        logoDark: string;
+                        description: string;
+                        name: string;
+                    }[];
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    ListSsoConnectors: {
         parameters: {
             query?: {
                 /** @description Page number (starts from 1). */
@@ -22329,10 +23516,7 @@ export interface operations {
                 page_size?: number;
             };
             header?: never;
-            path: {
-                /** @description The unique identifier of the organization. */
-                id: components["parameters"]["organizationId-root"];
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -22346,7 +23530,8 @@ export interface operations {
                     "application/json": {
                         tenantId: string;
                         id: string;
-                        providerName: string;
+                        /** @enum {string} */
+                        providerName: "OIDC" | "SAML" | "AzureAD" | "GoogleWorkspace" | "Okta" | "AzureAdOidc";
                         connectorName: string;
                         /** @description arbitrary */
                         config: {
@@ -22361,16 +23546,17 @@ export interface operations {
                         syncProfile: boolean;
                         enableTokenStorage: boolean;
                         createdAt: number;
+                        name: string;
+                        /** @enum {string} */
+                        providerType: "oidc" | "saml";
+                        providerLogo: string;
+                        providerLogoDark: string;
+                        providerConfig?: {
+                            [key: string]: unknown;
+                        };
                     }[];
                 };
             };
-            /** @description Bad Request */
-            400: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
             /** @description Unauthorized */
             401: {
                 headers: {
@@ -22385,40 +23571,62 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description Not Found */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
         };
     };
-    ReplaceOrganizationJitSsoConnectors: {
+    CreateSsoConnector: {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                /** @description The unique identifier of the organization. */
-                id: components["parameters"]["organizationId-root"];
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody: {
             content: {
                 "application/json": {
-                    /** @description An array of SSO connector IDs to replace existing SSO connectors. */
-                    ssoConnectorIds: string[];
+                    /** @description arbitrary */
+                    config?: {
+                        [key: string]: unknown;
+                    };
+                    domains?: string[];
+                    branding?: {
+                        displayName?: string;
+                        logo?: string;
+                        darkLogo?: string;
+                    };
+                    syncProfile?: boolean;
+                    enableTokenStorage?: boolean;
+                    providerName: string;
+                    connectorName: string;
                 };
             };
         };
         responses: {
-            /** @description The SSO connectors were replaced successfully. */
-            204: {
+            /** @description The created SSO connector. */
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content?: never;
+                content: {
+                    "application/json": {
+                        tenantId: string;
+                        id: string;
+                        providerName: string;
+                        connectorName: string;
+                        /** @description arbitrary */
+                        config: {
+                            [key: string]: unknown;
+                        };
+                        domains: string[];
+                        branding: {
+                            displayName?: string;
+                            logo?: string;
+                            darkLogo?: string;
+                        };
+                        syncProfile: boolean;
+                        enableTokenStorage: boolean;
+                        createdAt: number;
+                    };
+                };
             };
             /** @description Bad Request */
             400: {
@@ -22441,7 +23649,14 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description The SSO connectors could not be replaced. Some of the SSO connectors may not exist. */
+            /** @description Conflict */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description At lease one of the given input fields is invalid or IdP connection cannot be verified with the given config. */
             422: {
                 headers: {
                     [name: string]: unknown;
@@ -22450,32 +23665,52 @@ export interface operations {
             };
         };
     };
-    CreateOrganizationJitSsoConnector: {
+    GetSsoConnector: {
         parameters: {
             query?: never;
             header?: never;
             path: {
-                /** @description The unique identifier of the organization. */
-                id: components["parameters"]["organizationId-root"];
+                /** @description The unique identifier of the sso connector. */
+                id: components["parameters"]["ssoConnectorId-root"];
             };
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": {
-                    /** @description The SSO connector IDs to add. */
-                    ssoConnectorIds: string[];
-                };
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description The SSO connectors were added successfully. */
-            201: {
+            /** @description The SSO connector data with the given ID. */
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": unknown;
+                    "application/json": {
+                        tenantId: string;
+                        id: string;
+                        /** @enum {string} */
+                        providerName: "OIDC" | "SAML" | "AzureAD" | "GoogleWorkspace" | "Okta" | "AzureAdOidc";
+                        connectorName: string;
+                        /** @description arbitrary */
+                        config: {
+                            [key: string]: unknown;
+                        };
+                        domains: string[];
+                        branding: {
+                            displayName?: string;
+                            logo?: string;
+                            darkLogo?: string;
+                        };
+                        syncProfile: boolean;
+                        enableTokenStorage: boolean;
+                        createdAt: number;
+                        name: string;
+                        /** @enum {string} */
+                        providerType: "oidc" | "saml";
+                        providerLogo: string;
+                        providerLogoDark: string;
+                        providerConfig?: {
+                            [key: string]: unknown;
+                        };
+                    };
                 };
             };
             /** @description Bad Request */
@@ -22499,8 +23734,8 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description The SSO connectors could not be added. Some of the SSO connectors may not exist. */
-            422: {
+            /** @description SSO connector not found. */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -22508,21 +23743,19 @@ export interface operations {
             };
         };
     };
-    DeleteOrganizationJitSsoConnector: {
+    DeleteSsoConnector: {
         parameters: {
             query?: never;
             header?: never;
             path: {
-                /** @description The unique identifier of the organization. */
-                id: components["parameters"]["organizationId-root"];
                 /** @description The unique identifier of the sso connector. */
-                ssoConnectorId: components["parameters"]["ssoConnectorId"];
+                id: components["parameters"]["ssoConnectorId-root"];
             };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description The SSO connector was removed successfully. */
+            /** @description SSO connector deleted successfully. */
             204: {
                 headers: {
                     [name: string]: unknown;
@@ -22550,8 +23783,8 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description The SSO connector could not be removed. The SSO connector may not exist. */
-            422: {
+            /** @description SSO connector not found. */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -22559,64 +23792,37 @@ export interface operations {
             };
         };
     };
-    ListSsoConnectorProviders: {
+    UpdateSsoConnector: {
         parameters: {
             query?: never;
             header?: never;
-            path?: never;
+            path: {
+                /** @description The unique identifier of the sso connector. */
+                id: components["parameters"]["ssoConnectorId-root"];
+            };
             cookie?: never;
         };
-        requestBody?: never;
-        responses: {
-            /** @description A list of SSO provider data. */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": {
-                        /** @enum {string} */
-                        providerName: "OIDC" | "SAML" | "AzureAD" | "GoogleWorkspace" | "Okta" | "AzureAdOidc";
-                        /** @enum {string} */
-                        providerType: "oidc" | "saml";
-                        logo: string;
-                        logoDark: string;
-                        description: string;
-                        name: string;
-                    }[];
-                };
-            };
-            /** @description Unauthorized */
-            401: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description Forbidden */
-            403: {
-                headers: {
-                    [name: string]: unknown;
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description arbitrary */
+                    config?: {
+                        [key: string]: unknown;
+                    };
+                    domains?: string[];
+                    branding?: {
+                        displayName?: string;
+                        logo?: string;
+                        darkLogo?: string;
+                    };
+                    syncProfile?: boolean;
+                    connectorName?: string;
+                    enableTokenStorage?: boolean;
                 };
-                content?: never;
             };
         };
-    };
-    ListSsoConnectors: {
-        parameters: {
-            query?: {
-                /** @description Page number (starts from 1). */
-                page?: number;
-                /** @description Entries per page. */
-                page_size?: number;
-            };
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: never;
         responses: {
-            /** @description A list of SSO connectors. */
+            /** @description The updated SSO connector. */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -22649,8 +23855,15 @@ export interface operations {
                         providerConfig?: {
                             [key: string]: unknown;
                         };
-                    }[];
+                    };
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
                 };
+                content?: never;
             };
             /** @description Unauthorized */
             401: {
@@ -22666,61 +23879,60 @@ export interface operations {
                 };
                 content?: never;
             };
+            /** @description SSO connector not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Conflict */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description At lease one of the update fields is invalid or IdP connection can not be verified with the given connection config. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
         };
     };
-    CreateSsoConnector: {
+    ListSsoConnectorSigningKeys: {
         parameters: {
             query?: never;
             header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/json": {
-                    /** @description arbitrary */
-                    config?: {
-                        [key: string]: unknown;
-                    };
-                    domains?: string[];
-                    branding?: {
-                        displayName?: string;
-                        logo?: string;
-                        darkLogo?: string;
-                    };
-                    syncProfile?: boolean;
-                    enableTokenStorage?: boolean;
-                    providerName: string;
-                    connectorName: string;
-                };
+            path: {
+                /** @description The unique identifier of the sso connector. */
+                id: components["parameters"]["ssoConnectorId-root"];
             };
+            cookie?: never;
         };
+        requestBody?: never;
         responses: {
-            /** @description The created SSO connector. */
+            /** @description The SP signing keys of the connector. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
                     "application/json": {
-                        tenantId: string;
                         id: string;
-                        providerName: string;
-                        connectorName: string;
-                        /** @description arbitrary */
-                        config: {
-                            [key: string]: unknown;
-                        };
-                        domains: string[];
-                        branding: {
-                            displayName?: string;
-                            logo?: string;
-                            darkLogo?: string;
-                        };
-                        syncProfile: boolean;
-                        enableTokenStorage: boolean;
+                        certificate: string;
                         createdAt: number;
-                    };
+                        expiresAt: number;
+                        active: boolean;
+                        fingerprints: {
+                            sha256: {
+                                formatted: string;
+                                unformatted: string;
+                            };
+                        };
+                    }[];
                 };
             };
             /** @description Bad Request */
@@ -22744,15 +23956,8 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description Conflict */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description At lease one of the given input fields is invalid or IdP connection cannot be verified with the given config. */
-            422: {
+            /** @description The SSO connector is not found or is not a SAML connector. */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -22760,7 +23965,7 @@ export interface operations {
             };
         };
     };
-    GetSsoConnector: {
+    CreateSsoConnectorSigningKey: {
         parameters: {
             query?: never;
             header?: never;
@@ -22770,40 +23975,35 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": {
+                    /**
+                     * @description Whether the new key should become the active signing key immediately. Defaults to `false` (staged rotation).
+                     * @default false
+                     */
+                    active: boolean;
+                };
+            };
+        };
         responses: {
-            /** @description The SSO connector data with the given ID. */
-            200: {
+            /** @description The created SP signing key. */
+            201: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
                     "application/json": {
-                        tenantId: string;
                         id: string;
-                        /** @enum {string} */
-                        providerName: "OIDC" | "SAML" | "AzureAD" | "GoogleWorkspace" | "Okta" | "AzureAdOidc";
-                        connectorName: string;
-                        /** @description arbitrary */
-                        config: {
-                            [key: string]: unknown;
-                        };
-                        domains: string[];
-                        branding: {
-                            displayName?: string;
-                            logo?: string;
-                            darkLogo?: string;
-                        };
-                        syncProfile: boolean;
-                        enableTokenStorage: boolean;
+                        certificate: string;
                         createdAt: number;
-                        name: string;
-                        /** @enum {string} */
-                        providerType: "oidc" | "saml";
-                        providerLogo: string;
-                        providerLogoDark: string;
-                        providerConfig?: {
-                            [key: string]: unknown;
+                        expiresAt: number;
+                        active: boolean;
+                        fingerprints: {
+                            sha256: {
+                                formatted: string;
+                                unformatted: string;
+                            };
                         };
                     };
                 };
@@ -22829,7 +24029,7 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description SSO connector not found. */
+            /** @description The SSO connector is not found or is not a SAML connector. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -22838,26 +24038,28 @@ export interface operations {
             };
         };
     };
-    DeleteSsoConnector: {
+    DeleteSsoConnectorSigningKey: {
         parameters: {
             query?: never;
             header?: never;
             path: {
                 /** @description The unique identifier of the sso connector. */
                 id: components["parameters"]["ssoConnectorId-root"];
+                /** @description The unique identifier of the key. */
+                keyId: components["parameters"]["keyId"];
             };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description SSO connector deleted successfully. */
+            /** @description The SP signing key was deleted. */
             204: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Bad Request */
+            /** @description The key is the active signing key and cannot be deleted. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -22878,7 +24080,7 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description SSO connector not found. */
+            /** @description The SSO connector is not found, is not a SAML connector, or the signing key is not found. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -22887,73 +24089,49 @@ export interface operations {
             };
         };
     };
-    UpdateSsoConnector: {
+    UpdateSsoConnectorSigningKey: {
         parameters: {
             query?: never;
             header?: never;
             path: {
                 /** @description The unique identifier of the sso connector. */
                 id: components["parameters"]["ssoConnectorId-root"];
+                /** @description The unique identifier of the key. */
+                keyId: components["parameters"]["keyId"];
             };
             cookie?: never;
         };
         requestBody: {
             content: {
                 "application/json": {
-                    /** @description arbitrary */
-                    config?: {
-                        [key: string]: unknown;
-                    };
-                    domains?: string[];
-                    branding?: {
-                        displayName?: string;
-                        logo?: string;
-                        darkLogo?: string;
-                    };
-                    syncProfile?: boolean;
-                    connectorName?: string;
-                    enableTokenStorage?: boolean;
+                    /** @description Whether the key should be the active signing key. */
+                    active: boolean;
                 };
             };
         };
         responses: {
-            /** @description The updated SSO connector. */
+            /** @description The updated SP signing key. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
                     "application/json": {
-                        tenantId: string;
                         id: string;
-                        /** @enum {string} */
-                        providerName: "OIDC" | "SAML" | "AzureAD" | "GoogleWorkspace" | "Okta" | "AzureAdOidc";
-                        connectorName: string;
-                        /** @description arbitrary */
-                        config: {
-                            [key: string]: unknown;
-                        };
-                        domains: string[];
-                        branding: {
-                            displayName?: string;
-                            logo?: string;
-                            darkLogo?: string;
-                        };
-                        syncProfile: boolean;
-                        enableTokenStorage: boolean;
+                        certificate: string;
                         createdAt: number;
-                        name: string;
-                        /** @enum {string} */
-                        providerType: "oidc" | "saml";
-                        providerLogo: string;
-                        providerLogoDark: string;
-                        providerConfig?: {
-                            [key: string]: unknown;
+                        expiresAt: number;
+                        active: boolean;
+                        fingerprints: {
+                            sha256: {
+                                formatted: string;
+                                unformatted: string;
+                            };
                         };
                     };
                 };
             };
-            /** @description Bad Request */
+            /** @description The key is the active signing key and signed authentication requests are enabled — it cannot be deactivated until they are disabled. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -22974,27 +24152,13 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description SSO connector not found. */
+            /** @description The SSO connector is not found, is not a SAML connector, or the signing key is not found. */
             404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content?: never;
             };
-            /** @description Conflict */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            /** @description At lease one of the update fields is invalid or IdP connection can not be verified with the given connection config. */
-            422: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
         };
     };
     GetSystemApplicationConfig: {
@@ -23273,7 +24437,7 @@ export interface operations {
                     };
                 };
             };
-            /** @description Bad Request */
+            /** @description The request body is invalid. E.g. `profileFields` contains names that do not exist in the custom profile fields catalog, or contains duplicate names. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -24497,6 +25661,8 @@ export interface operations {
                         token: string;
                         context: {
                             jitOrganizationIds?: string[];
+                            /** @enum {string} */
+                            interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                         };
                         /** @enum {string} */
                         status: "active" | "consumed" | "revoked" | "expired";
@@ -24540,9 +25706,11 @@ export interface operations {
                 "application/json": {
                     /** @description The email address to associate with the one-time token. */
                     email: string;
-                    /** @description Additional context to store with the one-time token. This can be used to store arbitrary data that will be associated with the token. */
+                    /** @description Additional context to store with the one-time token. Set `interactionEvent` to scope the token to a specific flow, such as `ForgotPassword` for reset-password magic links. */
                     context?: {
                         jitOrganizationIds?: string[];
+                        /** @enum {string} */
+                        interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                     };
                     /** @description The expiration time in seconds. If not provided, defaults to 10 mins (600 seconds). */
                     expiresIn?: number;
@@ -24563,6 +25731,8 @@ export interface operations {
                         token: string;
                         context: {
                             jitOrganizationIds?: string[];
+                            /** @enum {string} */
+                            interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                         };
                         /** @enum {string} */
                         status: "active" | "consumed" | "revoked" | "expired";
@@ -24619,6 +25789,8 @@ export interface operations {
                         token: string;
                         context: {
                             jitOrganizationIds?: string[];
+                            /** @enum {string} */
+                            interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                         };
                         /** @enum {string} */
                         status: "active" | "consumed" | "revoked" | "expired";
@@ -24737,6 +25909,8 @@ export interface operations {
                         token: string;
                         context: {
                             jitOrganizationIds?: string[];
+                            /** @enum {string} */
+                            interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                         };
                         /** @enum {string} */
                         status: "active" | "consumed" | "revoked" | "expired";
@@ -24810,6 +25984,8 @@ export interface operations {
                         token: string;
                         context: {
                             jitOrganizationIds?: string[];
+                            /** @enum {string} */
+                            interactionEvent?: "SignIn" | "Register" | "ForgotPassword";
                         };
                         /** @enum {string} */
                         status: "active" | "consumed" | "revoked" | "expired";
@@ -26172,6 +27348,179 @@ export interface operations {
             };
         };
     };
+    ListCimdUserConsentScopes: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The configured scopes. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        organizationScopes: {
+                            id: string;
+                            name: string;
+                            description: string | null;
+                        }[];
+                        resourceScopes: {
+                            resource: {
+                                id: string;
+                                name: string;
+                                indicator: string;
+                            };
+                            scopes: {
+                                id: string;
+                                name: string;
+                                description: string | null;
+                            }[];
+                        }[];
+                        organizationResourceScopes: {
+                            resource: {
+                                id: string;
+                                name: string;
+                                indicator: string;
+                            };
+                            scopes: {
+                                id: string;
+                                name: string;
+                                description: string | null;
+                            }[];
+                        }[];
+                        userScopes: ("profile" | "email" | "phone" | "address" | "custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles" | "urn:logto:scope:sessions" | "urn:logto:scope:trusted_devices")[];
+                    };
+                };
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    AssignCimdUserConsentScopes: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    organizationScopes?: string[];
+                    resourceScopes?: string[];
+                    organizationResourceScopes?: string[];
+                    userScopes?: ("profile" | "email" | "phone" | "address" | "custom_data" | "identities" | "roles" | "urn:logto:scope:organizations" | "urn:logto:scope:organization_roles" | "urn:logto:scope:sessions" | "urn:logto:scope:trusted_devices")[];
+                };
+            };
+        };
+        responses: {
+            /** @description The scopes were assigned. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": unknown;
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Some scopes do not exist or are not allowed. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    DeleteCimdUserConsentScope: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description The scope type. */
+                scopeType: "organization-scopes" | "resource-scopes" | "organization-resource-scopes" | "user-scopes";
+                /** @description The unique identifier of the scope. */
+                scopeId: components["parameters"]["scopeId"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The scope was removed. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthorized */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description The scope relation was not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     GetSignInExperienceConfig: {
         parameters: {
             query?: {
@@ -26214,7 +27563,7 @@ export interface operations {
                         languageInfo: {
                             autoDetect: boolean;
                             /** @enum {string} */
-                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "es-MX" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                         };
                         termsOfUseUrl: string | null;
                         privacyPolicyUrl: string | null;
@@ -26303,11 +27652,6 @@ export interface operations {
                             maxAttempts?: number;
                             lockoutDuration?: number;
                         };
-                        emailBlocklistPolicy: {
-                            blockDisposableAddresses?: boolean;
-                            blockSubaddressing?: boolean;
-                            customBlocklist?: string[];
-                        };
                         verificationCodePolicy: {
                             expirationDuration?: number;
                             maxRetryAttempts?: number;
@@ -26333,6 +27677,10 @@ export interface operations {
                         usernamePolicy: {
                             [key: string]: unknown;
                         };
+                        trustedDevice?: {
+                            enabled?: boolean;
+                            durationDays?: number;
+                        };
                         socialConnectors: {
                             id: string;
                             target: string;
@@ -26561,7 +27909,7 @@ export interface operations {
                         languageInfo: {
                             autoDetect: boolean;
                             /** @enum {string} */
-                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
+                            fallbackLanguage: "af-ZA" | "am-ET" | "ar" | "ar-AR" | "as-IN" | "az-AZ" | "be-BY" | "bg-BG" | "bn-IN" | "br-FR" | "bs-BA" | "ca-ES" | "cb-IQ" | "co-FR" | "cs" | "cs-CZ" | "cx-PH" | "cy-GB" | "da-DK" | "de" | "de-DE" | "el-GR" | "en" | "en-GB" | "en-US" | "eo-EO" | "es" | "es-ES" | "es-419" | "es-MX" | "et-EE" | "eu-ES" | "fa-IR" | "ff-NG" | "fi" | "fi-FI" | "fo-FO" | "fr" | "fr-CA" | "fr-FR" | "fy-NL" | "ga-IE" | "gl-ES" | "gn-PY" | "gu-IN" | "ha-NG" | "he-IL" | "hi-IN" | "hr-HR" | "ht-HT" | "hu-HU" | "hy-AM" | "id-ID" | "ik-US" | "is-IS" | "it" | "it-IT" | "iu-CA" | "ja" | "ja-JP" | "ja-KS" | "jv-ID" | "ka-GE" | "kk-KZ" | "km-KH" | "kn-IN" | "ko" | "ko-KR" | "ku-TR" | "ky-KG" | "lo-LA" | "lt-LT" | "lv-LV" | "mg-MG" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "ms-MY" | "mt-MT" | "my-MM" | "nb-NO" | "ne-NP" | "nl" | "nl-BE" | "nl-NL" | "nn-NO" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "pt" | "pt-BR" | "pt-PT" | "ro-RO" | "ru" | "ru-RU" | "rw-RW" | "sc-IT" | "si-LK" | "sk-SK" | "sl-SI" | "sn-ZW" | "sq-AL" | "sr-RS" | "sv" | "sv-SE" | "sw-KE" | "sy-SY" | "sz-PL" | "ta-IN" | "te-IN" | "tg-TJ" | "th" | "th-TH" | "tl-PH" | "tr" | "tr-TR" | "tt-RU" | "tz-MA" | "uk-UA" | "ur-PK" | "uz-UZ" | "vi-VN" | "zh" | "zh-CN" | "zh-HK" | "zh-MO" | "zh-TW" | "zz-TR";
                         };
                         termsOfUseUrl: string | null;
                         privacyPolicyUrl: string | null;
@@ -26650,11 +27998,6 @@ export interface operations {
                             maxAttempts?: number;
                             lockoutDuration?: number;
                         };
-                        emailBlocklistPolicy: {
-                            blockDisposableAddresses?: boolean;
-                            blockSubaddressing?: boolean;
-                            customBlocklist?: string[];
-                        };
                         verificationCodePolicy: {
                             expirationDuration?: number;
                             maxRetryAttempts?: number;
@@ -26680,6 +28023,10 @@ export interface operations {
                         usernamePolicy: {
                             [key: string]: unknown;
                         };
+                        trustedDevice?: {
+                            enabled?: boolean;
+                            durationDays?: number;
+                        };
                         socialConnectors: {
                             id: string;
                             target: string;