authhero 5.19.0 → 5.21.0

package/dist/authhero.d.ts

@@ -1,7 +1,7 @@
 import * as hono_utils_http_status from 'hono/utils/http-status';
 import * as hono_utils_types from 'hono/utils/types';
 import * as _authhero_adapter_interfaces from '@authhero/adapter-interfaces';
-import { LoginSession, DataAdapters, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, CustomDomain, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Hook, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, AuditEvent, OutboxAdapter, HooksAdapter, LogsDataAdapter, LogInsert, UserDataAdapter, CustomDomainsAdapter, ProxyRoutesAdapter, ListParams, CodeExecutionResult } from '@authhero/adapter-interfaces';
+import { LoginSession, DataAdapters, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, CustomDomain, ProxyRoute, Tenant, TenantsDataAdapter, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, CreateTenantParams, Hook, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, AuditEvent, OutboxAdapter, HooksAdapter, LogsDataAdapter, LogInsert, UserDataAdapter, CustomDomainsAdapter, ProxyRoutesAdapter, ListParams, CodeExecutionResult } from '@authhero/adapter-interfaces';
 export * from '@authhero/adapter-interfaces';
 import * as hono_types from 'hono/types';
 import { z, OpenAPIHono } from '@hono/zod-openapi';
@@ -304,6 +304,26 @@ declare const enrichedClientSchema: z.ZodObject<{
         }, z.core.$strip>>>;
         pushed_authorization_requests_supported: z.ZodOptional<z.ZodBoolean>;
         authorization_response_iss_parameter_supported: z.ZodOptional<z.ZodBoolean>;
+        deployment_type: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            shared: "shared";
+            wfp: "wfp";
+        }>>>;
+        provisioning_state: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            pending: "pending";
+            ready: "ready";
+            failed: "failed";
+        }>>>;
+        provisioning_error: z.ZodOptional<z.ZodString>;
+        provisioning_state_changed_at: z.ZodOptional<z.ZodString>;
+        bundle_configuration: z.ZodOptional<z.ZodString>;
+        worker_version: z.ZodOptional<z.ZodString>;
+        worker_script_name: z.ZodOptional<z.ZodString>;
+        storage_kind: z.ZodOptional<z.ZodEnum<{
+            own_d1: "own_d1";
+            existing_d1: "existing_d1";
+            shared_planetscale: "shared_planetscale";
+        }>>;
+        d1_database_id: z.ZodOptional<z.ZodString>;
         attack_protection: z.ZodOptional<z.ZodObject<{
             breached_password_detection: z.ZodOptional<z.ZodObject<{
                 enabled: z.ZodOptional<z.ZodBoolean>;
@@ -862,6 +882,41 @@ declare function createAuthMiddleware(app: OpenAPIHono<{
     Variables: any;
 }>, next: Next) => Promise<void>;
 
+interface TenantProvisionerContext {
+    tenants: TenantsDataAdapter;
+}
+/**
+ * Drives a tenant from `provisioning_state: "pending"` to `"ready"` or
+ * `"failed"`. Owns whatever side effects are required to make the tenant
+ * actually serve traffic — creating a D1, uploading a worker to a dispatch
+ * namespace, wiring secrets, etc. — and writes the resulting state back via
+ * `ctx.tenants.update(...)`.
+ *
+ * Contract:
+ *  - Implementations MUST be idempotent. The same tenant may be passed in
+ *    twice if a previous run crashed mid-flight, the API is retried, or an
+ *    operator manually re-triggers provisioning.
+ *  - `provision()` MUST resolve (not reject) even on failure. Errors should
+ *    be captured into `provisioning_error` and the state set to `"failed"`
+ *    so the admin UI can render a useful message.
+ *  - `provision()` should be safe to schedule via `ctx.executionCtx.waitUntil`
+ *    on Cloudflare Workers — it must not depend on the originating request
+ *    surviving.
+ */
+interface TenantProvisioner {
+    provision(tenant: Tenant, ctx: TenantProvisionerContext): Promise<void>;
+}
+
+/**
+ * Default provisioner. Flips `provisioning_state` to `"ready"` and clears any
+ * prior error, doing nothing else. Correct for `deployment_type: "shared"`
+ * tenants (the historical default) and useful as a stand-in until the
+ * Cloudflare WFP provisioner is wired in.
+ */
+declare class NoopTenantProvisioner implements TenantProvisioner {
+    provision(tenant: Tenant, ctx: TenantProvisionerContext): Promise<void>;
+}
+
 /**
  * Parameters passed to a custom webhook invoker function.
  */
@@ -1174,6 +1229,17 @@ interface AuthHeroConfig {
         /** Per-request timeout for the sync POST (default: 10_000ms). */
         timeoutMs?: number;
     };
+    /**
+     * Optional tenant provisioner. Drives a tenant from
+     * `provisioning_state: "pending"` to `"ready"` or `"failed"` whenever a
+     * tenant is created or re-provisioned via the management API. For shared
+     * tenants this is effectively a no-op; for `wfp` tenants the provisioner
+     * uploads the worker to a Cloudflare dispatch namespace, creates any
+     * per-tenant D1, and wires bindings. When omitted, `NoopTenantProvisioner`
+     * is used — adequate for single-deployment installs where every tenant is
+     * `shared`.
+     */
+    provisioner?: TenantProvisioner;
     /**
      * Optional powered-by logo to display at the bottom left of the login widget.
      * This is only configurable in code, not stored in the database.
@@ -2655,7 +2721,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        type: "push" | "email" | "passkey" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
+                        type: "email" | "passkey" | "push" | "webauthn-roaming" | "webauthn-platform" | "phone" | "totp";
                         phone_number?: string | undefined;
                         totp_secret?: string | undefined;
                         credential_id?: string | undefined;
@@ -2795,7 +2861,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 }[];
@@ -2950,7 +3016,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        factor_name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                        factor_name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -2958,7 +3024,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -2971,7 +3037,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        factor_name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                        factor_name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -2983,7 +3049,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -9219,7 +9285,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                    prompt: "mfa" | "organizations" | "signup" | "status" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                     language: string;
                 }[];
                 outputFormat: "json";
@@ -9257,7 +9323,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "mfa" | "organizations" | "signup" | "status" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -9279,7 +9345,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "mfa" | "organizations" | "signup" | "status" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -9303,7 +9369,7 @@ declare function init(config: AuthHeroConfig): {
             $delete: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "mfa" | "organizations" | "signup" | "status" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -10201,7 +10267,7 @@ declare function init(config: AuthHeroConfig): {
                     tenant_id: string;
                     created_at: string;
                     updated_at: string;
-                    deploymentStatus: "deployed" | "failed" | "not_required";
+                    deploymentStatus: "failed" | "deployed" | "not_required";
                     secrets?: {
                         [x: string]: string;
                     } | undefined;
@@ -10291,7 +10357,7 @@ declare function init(config: AuthHeroConfig): {
                     tenant_id: string;
                     created_at: string;
                     updated_at: string;
-                    deploymentStatus: "deployed" | "failed" | "not_required";
+                    deploymentStatus: "failed" | "deployed" | "not_required";
                     secrets?: {
                         [x: string]: string;
                     } | undefined;
@@ -10744,7 +10810,7 @@ declare function init(config: AuthHeroConfig): {
                         log_type: string;
                         category: "user_action" | "admin_action" | "system" | "api";
                         actor: {
-                            type: "user" | "client_credentials" | "system" | "admin" | "api_key";
+                            type: "client_credentials" | "user" | "system" | "admin" | "api_key";
                             id?: string | undefined;
                             email?: string | undefined;
                             org_id?: string | undefined;
@@ -11052,7 +11118,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "oidc" | "cognito" | "okta";
+                    provider: "auth0" | "cognito" | "okta" | "oidc";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -11084,7 +11150,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "oidc" | "cognito" | "okta";
+                    provider: "auth0" | "cognito" | "okta" | "oidc";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -11110,7 +11176,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     json: {
                         name: string;
-                        provider: "auth0" | "oidc" | "cognito" | "okta";
+                        provider: "auth0" | "cognito" | "okta" | "oidc";
                         connection: string;
                         credentials: {
                             domain: string;
@@ -11127,7 +11193,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "oidc" | "cognito" | "okta";
+                    provider: "auth0" | "cognito" | "okta" | "oidc";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -11158,7 +11224,7 @@ declare function init(config: AuthHeroConfig): {
                     json: {
                         id?: string | undefined;
                         name?: string | undefined;
-                        provider?: "auth0" | "oidc" | "cognito" | "okta" | undefined;
+                        provider?: "auth0" | "cognito" | "okta" | "oidc" | undefined;
                         connection?: string | undefined;
                         enabled?: boolean | undefined;
                         credentials?: {
@@ -11174,7 +11240,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "oidc" | "cognito" | "okta";
+                    provider: "auth0" | "cognito" | "okta" | "oidc";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -11392,7 +11458,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -11431,7 +11497,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fn" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -11485,7 +11551,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -11640,7 +11706,7 @@ declare function init(config: AuthHeroConfig): {
                         audience?: string | undefined;
                         client_id?: string | undefined;
                         allow_any_organization?: string | undefined;
-                        subject_type?: "user" | "client" | undefined;
+                        subject_type?: "client" | "user" | undefined;
                     };
                 } & {
                     header: {
@@ -11655,7 +11721,7 @@ declare function init(config: AuthHeroConfig): {
                     organization_usage?: "deny" | "allow" | "require" | undefined;
                     allow_any_organization?: boolean | undefined;
                     is_system?: boolean | undefined;
-                    subject_type?: "user" | "client" | undefined;
+                    subject_type?: "client" | "user" | undefined;
                     authorization_details_types?: string[] | undefined;
                     created_at?: string | undefined;
                     updated_at?: string | undefined;
@@ -11671,7 +11737,7 @@ declare function init(config: AuthHeroConfig): {
                         organization_usage?: "deny" | "allow" | "require" | undefined;
                         allow_any_organization?: boolean | undefined;
                         is_system?: boolean | undefined;
-                        subject_type?: "user" | "client" | undefined;
+                        subject_type?: "client" | "user" | undefined;
                         authorization_details_types?: string[] | undefined;
                         created_at?: string | undefined;
                         updated_at?: string | undefined;
@@ -11702,7 +11768,7 @@ declare function init(config: AuthHeroConfig): {
                     organization_usage?: "deny" | "allow" | "require" | undefined;
                     allow_any_organization?: boolean | undefined;
                     is_system?: boolean | undefined;
-                    subject_type?: "user" | "client" | undefined;
+                    subject_type?: "client" | "user" | undefined;
                     authorization_details_types?: string[] | undefined;
                     created_at?: string | undefined;
                     updated_at?: string | undefined;
@@ -11747,7 +11813,7 @@ declare function init(config: AuthHeroConfig): {
                         organization_usage?: "deny" | "allow" | "require" | undefined;
                         allow_any_organization?: boolean | undefined;
                         is_system?: boolean | undefined;
-                        subject_type?: "user" | "client" | undefined;
+                        subject_type?: "client" | "user" | undefined;
                         authorization_details_types?: string[] | undefined;
                     };
                 };
@@ -11759,7 +11825,7 @@ declare function init(config: AuthHeroConfig): {
                     organization_usage?: "deny" | "allow" | "require" | undefined;
                     allow_any_organization?: boolean | undefined;
                     is_system?: boolean | undefined;
-                    subject_type?: "user" | "client" | undefined;
+                    subject_type?: "client" | "user" | undefined;
                     authorization_details_types?: string[] | undefined;
                     created_at?: string | undefined;
                     updated_at?: string | undefined;
@@ -11783,7 +11849,7 @@ declare function init(config: AuthHeroConfig): {
                         organization_usage?: "deny" | "allow" | "require" | undefined;
                         allow_any_organization?: boolean | undefined;
                         is_system?: boolean | undefined;
-                        subject_type?: "user" | "client" | undefined;
+                        subject_type?: "client" | "user" | undefined;
                         authorization_details_types?: string[] | undefined;
                     };
                 };
@@ -11795,7 +11861,7 @@ declare function init(config: AuthHeroConfig): {
                     organization_usage?: "deny" | "allow" | "require" | undefined;
                     allow_any_organization?: boolean | undefined;
                     is_system?: boolean | undefined;
-                    subject_type?: "user" | "client" | undefined;
+                    subject_type?: "client" | "user" | undefined;
                     authorization_details_types?: string[] | undefined;
                     created_at?: string | undefined;
                     updated_at?: string | undefined;
@@ -11873,7 +11939,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -11969,7 +12035,7 @@ declare function init(config: AuthHeroConfig): {
                         addons?: {
                             [x: string]: any;
                         } | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         client_metadata?: {
                             [x: string]: string;
                         } | undefined;
@@ -12080,7 +12146,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -12190,7 +12256,7 @@ declare function init(config: AuthHeroConfig): {
                         custom_login_page_preview?: string | undefined;
                         form_template?: string | undefined;
                         addons?: Record<string, any> | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         client_metadata?: Record<string, string> | undefined;
                         hide_sign_up_disabled_error?: boolean | undefined;
                         mobile?: Record<string, any> | undefined;
@@ -12270,7 +12336,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -12359,7 +12425,7 @@ declare function init(config: AuthHeroConfig): {
                         custom_login_page_preview?: string | undefined;
                         form_template?: string | undefined;
                         addons?: Record<string, any> | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         client_metadata?: Record<string, string> | undefined;
                         hide_sign_up_disabled_error?: boolean | undefined;
                         mobile?: Record<string, any> | undefined;
@@ -12439,7 +12505,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -13703,7 +13769,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -13742,7 +13808,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fn" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -14176,13 +14242,13 @@ declare function init(config: AuthHeroConfig): {
                     json: {
                         template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
-                        from: string;
                         subject: string;
                         syntax?: "liquid" | undefined;
                         resultUrl?: string | undefined;
                         urlLifetimeInSeconds?: number | undefined;
                         includeEmailInRedirect?: boolean | undefined;
                         enabled?: boolean | undefined;
+                        from?: string | undefined;
                     };
                 };
                 output: {
@@ -14264,6 +14330,63 @@ declare function init(config: AuthHeroConfig): {
                 status: 200;
             };
         };
+    } & {
+        "/:templateName": {
+            $delete: {
+                input: {
+                    param: {
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    };
+                } & {
+                    header: {
+                        "tenant-id"?: string | undefined;
+                    };
+                };
+                output: {};
+                outputFormat: string;
+                status: 204;
+            } | {
+                input: {
+                    param: {
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    };
+                } & {
+                    header: {
+                        "tenant-id"?: string | undefined;
+                    };
+                };
+                output: {};
+                outputFormat: string;
+                status: 404;
+            };
+        };
+    } & {
+        "/:templateName/try": {
+            $post: {
+                input: {
+                    param: {
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    };
+                } & {
+                    header: {
+                        "tenant-id"?: string | undefined;
+                    };
+                } & {
+                    json: {
+                        to: string;
+                        body?: string | undefined;
+                        subject?: string | undefined;
+                        from?: string | undefined;
+                        language?: string | undefined;
+                    };
+                };
+                output: {
+                    sent: boolean;
+                };
+                outputFormat: "json";
+                status: 200;
+            };
+        };
     }, "/email-templates"> & hono_types.MergeSchemaPath<{
         "/": {
             $get: {
@@ -14525,7 +14648,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "disabled" | "pending" | "pending_verification" | "ready";
+                    status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -14566,7 +14689,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "disabled" | "pending" | "pending_verification" | "ready";
+                    status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -14627,7 +14750,7 @@ declare function init(config: AuthHeroConfig): {
                         domain_metadata?: Record<string, string> | undefined;
                         custom_domain_id?: string | undefined;
                         primary?: boolean | undefined;
-                        status?: "disabled" | "pending" | "pending_verification" | "ready" | undefined;
+                        status?: "pending" | "ready" | "disabled" | "pending_verification" | undefined;
                         origin_domain_name?: string | undefined;
                         verification?: {
                             methods: ({
@@ -14648,7 +14771,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "disabled" | "pending" | "pending_verification" | "ready";
+                    status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -14695,7 +14818,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "disabled" | "pending" | "pending_verification" | "ready";
+                    status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -14741,7 +14864,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "disabled" | "pending" | "pending_verification" | "ready";
+                    status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -14782,7 +14905,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "disabled" | "pending" | "pending_verification" | "ready";
+                    status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -15389,7 +15512,7 @@ declare function init(config: AuthHeroConfig): {
                     logs: {
                         action_name: string;
                         lines: {
-                            level: "log" | "error" | "info" | "warn" | "debug";
+                            level: "error" | "log" | "info" | "warn" | "debug";
                             message: string;
                         }[];
                     }[];
@@ -16056,7 +16179,7 @@ declare function init(config: AuthHeroConfig): {
                         args: hono_utils_types.JSONValue[];
                     }[];
                     logs: {
-                        level: "log" | "error" | "info" | "warn" | "debug";
+                        level: "error" | "log" | "info" | "warn" | "debug";
                         message: string;
                     }[];
                     error?: string | undefined;
@@ -16354,7 +16477,7 @@ declare function init(config: AuthHeroConfig): {
                         scope?: string | undefined;
                         grant_types?: string[] | undefined;
                         response_types?: string[] | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         jwks_uri?: string | undefined;
                         jwks?: Record<string, unknown> | undefined;
                         software_id?: string | undefined;
@@ -16443,7 +16566,7 @@ declare function init(config: AuthHeroConfig): {
                         scope?: string | undefined;
                         grant_types?: string[] | undefined;
                         response_types?: string[] | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         jwks_uri?: string | undefined;
                         jwks?: Record<string, unknown> | undefined;
                         software_id?: string | undefined;
@@ -16789,20 +16912,20 @@ declare function init(config: AuthHeroConfig): {
                         email: string;
                         send: "code" | "link";
                         authParams: {
-                            username?: string | undefined;
-                            state?: string | undefined;
                             audience?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                             scope?: string | undefined;
+                            username?: string | undefined;
+                            state?: string | undefined;
+                            prompt?: string | undefined;
+                            ui_locales?: string | undefined;
                             organization?: string | undefined;
-                            nonce?: string | undefined;
                             redirect_uri?: string | undefined;
                             act_as?: string | undefined;
-                            prompt?: string | undefined;
+                            nonce?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
                             code_challenge?: string | undefined;
-                            ui_locales?: string | undefined;
                             max_age?: number | undefined;
                             acr_values?: string | undefined;
                             claims?: {
@@ -16825,20 +16948,20 @@ declare function init(config: AuthHeroConfig): {
                         phone_number: string;
                         send: "code" | "link";
                         authParams: {
-                            username?: string | undefined;
-                            state?: string | undefined;
                             audience?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                             scope?: string | undefined;
+                            username?: string | undefined;
+                            state?: string | undefined;
+                            prompt?: string | undefined;
+                            ui_locales?: string | undefined;
                             organization?: string | undefined;
-                            nonce?: string | undefined;
                             redirect_uri?: string | undefined;
                             act_as?: string | undefined;
-                            prompt?: string | undefined;
+                            nonce?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
                             code_challenge?: string | undefined;
-                            ui_locales?: string | undefined;
                             max_age?: number | undefined;
                             acr_values?: string | undefined;
                             claims?: {
@@ -16969,14 +17092,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -16988,14 +17111,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -17010,14 +17133,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -17068,6 +17191,17 @@ declare function init(config: AuthHeroConfig): {
                         username: string;
                         otp: string;
                         realm: "sms" | "email";
+                    } | {
+                        grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
+                        subject_token: string;
+                        subject_token_type: "urn:ietf:params:oauth:token-type:access_token";
+                        organization: string;
+                        audience?: string | undefined;
+                        scope?: string | undefined;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
                     };
                 } & {
                     json: {
@@ -17104,6 +17238,17 @@ declare function init(config: AuthHeroConfig): {
                         username: string;
                         otp: string;
                         realm: "sms" | "email";
+                    } | {
+                        grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
+                        subject_token: string;
+                        subject_token_type: "urn:ietf:params:oauth:token-type:access_token";
+                        organization: string;
+                        audience?: string | undefined;
+                        scope?: string | undefined;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
                     };
                 };
                 output: {};
@@ -17145,6 +17290,17 @@ declare function init(config: AuthHeroConfig): {
                         username: string;
                         otp: string;
                         realm: "sms" | "email";
+                    } | {
+                        grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
+                        subject_token: string;
+                        subject_token_type: "urn:ietf:params:oauth:token-type:access_token";
+                        organization: string;
+                        audience?: string | undefined;
+                        scope?: string | undefined;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
                     };
                 } & {
                     json: {
@@ -17181,6 +17337,17 @@ declare function init(config: AuthHeroConfig): {
                         username: string;
                         otp: string;
                         realm: "sms" | "email";
+                    } | {
+                        grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
+                        subject_token: string;
+                        subject_token_type: "urn:ietf:params:oauth:token-type:access_token";
+                        organization: string;
+                        audience?: string | undefined;
+                        scope?: string | undefined;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
                     };
                 };
                 output: {
@@ -17230,6 +17397,17 @@ declare function init(config: AuthHeroConfig): {
                         username: string;
                         otp: string;
                         realm: "sms" | "email";
+                    } | {
+                        grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
+                        subject_token: string;
+                        subject_token_type: "urn:ietf:params:oauth:token-type:access_token";
+                        organization: string;
+                        audience?: string | undefined;
+                        scope?: string | undefined;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
                     };
                 } & {
                     json: {
@@ -17266,6 +17444,17 @@ declare function init(config: AuthHeroConfig): {
                         username: string;
                         otp: string;
                         realm: "sms" | "email";
+                    } | {
+                        grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
+                        subject_token: string;
+                        subject_token_type: "urn:ietf:params:oauth:token-type:access_token";
+                        organization: string;
+                        audience?: string | undefined;
+                        scope?: string | undefined;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
                     };
                 };
                 output: {
@@ -17310,6 +17499,17 @@ declare function init(config: AuthHeroConfig): {
                         username: string;
                         otp: string;
                         realm: "sms" | "email";
+                    } | {
+                        grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
+                        subject_token: string;
+                        subject_token_type: "urn:ietf:params:oauth:token-type:access_token";
+                        organization: string;
+                        audience?: string | undefined;
+                        scope?: string | undefined;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
                     };
                 } & {
                     json: {
@@ -17346,6 +17546,17 @@ declare function init(config: AuthHeroConfig): {
                         username: string;
                         otp: string;
                         realm: "sms" | "email";
+                    } | {
+                        grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
+                        subject_token: string;
+                        subject_token_type: "urn:ietf:params:oauth:token-type:access_token";
+                        organization: string;
+                        audience?: string | undefined;
+                        scope?: string | undefined;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
                     };
                 };
                 output: {
@@ -17390,6 +17601,17 @@ declare function init(config: AuthHeroConfig): {
                         username: string;
                         otp: string;
                         realm: "sms" | "email";
+                    } | {
+                        grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
+                        subject_token: string;
+                        subject_token_type: "urn:ietf:params:oauth:token-type:access_token";
+                        organization: string;
+                        audience?: string | undefined;
+                        scope?: string | undefined;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
                     };
                 } & {
                     json: {
@@ -17426,6 +17648,17 @@ declare function init(config: AuthHeroConfig): {
                         username: string;
                         otp: string;
                         realm: "sms" | "email";
+                    } | {
+                        grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
+                        subject_token: string;
+                        subject_token_type: "urn:ietf:params:oauth:token-type:access_token";
+                        organization: string;
+                        audience?: string | undefined;
+                        scope?: string | undefined;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
                     };
                 };
                 output: {
@@ -17443,8 +17676,8 @@ declare function init(config: AuthHeroConfig): {
                 output: {
                     keys: {
                         alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
-                        kid: string;
                         kty: "EC" | "RSA" | "oct";
+                        kid?: string | undefined;
                         use?: "sig" | "enc" | undefined;
                         n?: string | undefined;
                         e?: string | undefined;
@@ -18634,7 +18867,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -18650,7 +18883,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -18666,7 +18899,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -18686,7 +18919,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     param: {
-                        screen: "signup" | "consent" | "login" | "reset-password" | "enter-password" | "impersonate" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "login" | "reset-password" | "consent" | "enter-password" | "impersonate" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -18704,7 +18937,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "consent" | "login" | "reset-password" | "enter-password" | "impersonate" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "login" | "reset-password" | "consent" | "enter-password" | "impersonate" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -18722,7 +18955,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "consent" | "login" | "reset-password" | "enter-password" | "impersonate" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "login" | "reset-password" | "consent" | "enter-password" | "impersonate" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -18820,5 +19053,5 @@ declare function init(config: AuthHeroConfig): {
     createX509Certificate: typeof createX509Certificate;
 };
 
-export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_SYNC_EVENT_PREFIX, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, ControlPlaneSyncDestination, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, SignupPage as SignUpPage, SocialButton, Spinner, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, cleanupOutbox, cleanupSessions, cleanupUserSessions, clientInfoMiddleware, createApplySyncEvents, createAuthMiddleware, createDefaultDestinations, createEncryptedDataAdapter, createInMemoryCache, decryptField, deepMergePatch, drainOutbox, encryptField, fetchAll, init, injectTailwindCSS, isEncrypted, loadEncryptionKey, mailgunCredentialsSchema, postmarkCredentialsSchema, index_d as preDefinedHooks, resendCredentialsSchema, runOutboxRelay, seed, tailwindCss, tenantMiddleware, waitUntil };
-export type { AuthHeroConfig, ControlPlaneSyncDestinationOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetServiceToken, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, PostmarkCredentials, PostmarkEmailServiceOptions, ResendCredentials, ResendEmailServiceOptions, RolePermissionHooks, RunOutboxRelayConfig, SeedOptions, SeedResult, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams };
+export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_SYNC_EVENT_PREFIX, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, ControlPlaneSyncDestination, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, NoopTenantProvisioner, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, SignupPage as SignUpPage, SocialButton, Spinner, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, cleanupOutbox, cleanupSessions, cleanupUserSessions, clientInfoMiddleware, createApplySyncEvents, createAuthMiddleware, createDefaultDestinations, createEncryptedDataAdapter, createInMemoryCache, decryptField, deepMergePatch, drainOutbox, encryptField, fetchAll, init, injectTailwindCSS, isEncrypted, loadEncryptionKey, mailgunCredentialsSchema, postmarkCredentialsSchema, index_d as preDefinedHooks, resendCredentialsSchema, runOutboxRelay, seed, tailwindCss, tenantMiddleware, waitUntil };
+export type { AuthHeroConfig, ControlPlaneSyncDestinationOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetServiceToken, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, PostmarkCredentials, PostmarkEmailServiceOptions, ResendCredentials, ResendEmailServiceOptions, RolePermissionHooks, RunOutboxRelayConfig, SeedOptions, SeedResult, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantProvisioner, TenantProvisionerContext, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams };