authhero 6.0.0 → 7.1.0

package/dist/authhero.d.ts

@@ -10,6 +10,7 @@ import { SamlSigner } from '@authhero/saml/core';
 export { HttpSamlSigner, SamlSigner } from '@authhero/saml/core';
 import { Context, Next, Handler, MiddlewareHandler } from 'hono';
 import * as _authhero_proxy from '@authhero/proxy';
+export { PROXY_RESOLVE_HOST_SCOPE } from '@authhero/proxy';
 import { FC, PropsWithChildren, JSXNode } from 'hono/jsx';
 import * as hono_jsx_jsx_dev_runtime from 'hono/jsx/jsx-dev-runtime';
 
@@ -1194,14 +1195,24 @@ interface AuthHeroConfig {
      * data plane. When set, mounts `GET /api/v2/proxy/control-plane/hosts/:host`
      * which returns the cross-tenant `ResolvedHost` for the given hostname.
      *
-     * This endpoint is read by remote proxy deployments via
-     * `createHttpProxyAdapter`. It is **cross-tenant** — gate it with a
-     * dedicated credential (shared secret, mTLS, or a JWT scoped to
-     * `proxy:resolve_host`), never with a tenant token.
+     * Authentication is opinionated and built in: incoming requests must
+     * carry a `Bearer` JWT whose `iss` is either the runtime `env.ISSUER`
+     * or the host the request landed on (tenant subdomain or registered
+     * custom domain). The verifier fetches `<iss>/.well-known/jwks.json` to
+     * validate the signature, so each accepted host must publish its own
+     * JWKS at that path. Tokens must also carry the `proxy:resolve_host`
+     * scope. The matching client-side helper is `createHttpProxyAdapter`
+     * in `@authhero/proxy`.
      */
     proxyControlPlane?: {
         resolveHost: (host: string) => Promise<_authhero_proxy.ResolvedHost | null>;
-        authenticate: (request: Request) => Promise<boolean> | boolean;
+        /**
+         * Optional fetch override for the per-issuer JWKS document. Called
+         * with the derived URL (`<iss>/.well-known/jwks.json`); defaults to
+         * global `fetch`. Hosts on Cloudflare Workers can route specific
+         * hosts through a service binding by inspecting the URL.
+         */
+        jwksFetch?: (url: string) => Promise<Response>;
         /**
          * Optional receiver for `POST /sync` events emitted by tenant shards via
          * the `ControlPlaneSyncDestination`. Mount on the control-plane authhero
@@ -2265,6 +2276,49 @@ interface CreateApplySyncEventsOptions {
  */
 declare function createApplySyncEvents(options: CreateApplySyncEventsOptions): (events: SyncEvent[]) => Promise<void>;
 
+/**
+ * Strict issuer equality: parse both `iss` and `expected` as URLs and compare
+ * the resulting hrefs after stripping any single trailing slash. No host-only
+ * match, no subdomain match — a token issued by `https://a.example.com/` and
+ * an expected `https://b.example.com/` (or `https://example.com/x/`) must NOT
+ * be treated as equivalent.
+ */
+declare function isAllowedIssuer(iss: string, expected: string): boolean;
+type VerifyControlPlaneTokenResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+interface VerifyControlPlaneTokenOptions {
+    /** Compact JWS to verify. */
+    token: string;
+    /** Optional fetch override — defaults to global `fetch`. */
+    jwksFetch?: (url: string) => Promise<Response>;
+    /**
+     * Set of acceptable `iss` claim values. Comparison is strict URL equality
+     * (after trailing-slash normalization) via {@link isAllowedIssuer}. The
+     * verifier fetches the per-issuer JWKS from `<iss>/.well-known/jwks.json`,
+     * so any host you list here must publish its own JWKS at that path.
+     */
+    expectedIssuers: string[];
+    /** Required `scope` (space-separated). Defaults to `proxy:resolve_host`. */
+    requiredScope?: string;
+}
+/**
+ * Verify a bearer token for the proxy control plane. Returns `{ ok: true }`
+ * on success, `{ ok: false, reason }` on any failure — the reason is for
+ * logs only and must not be surfaced to the caller.
+ *
+ * Accepted algs: RS256/384/512, ES256/384/512. The JWK's `alg` must match
+ * the token header's `alg`. The token must carry the configured required
+ * scope (`proxy:resolve_host` by default) and an `iss` that strictly equals
+ * one of `expectedIssuers` after URL normalization. The JWKS document is
+ * fetched from `<iss>/.well-known/jwks.json` AFTER the `iss` is allow-listed,
+ * so an attacker cannot redirect the verifier to a JWKS they control.
+ */
+declare function verifyControlPlaneToken(options: VerifyControlPlaneTokenOptions): Promise<VerifyControlPlaneTokenResult>;
+
 /**
  * Options for the entity hooks wrapper
  */
@@ -2721,7 +2775,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        type: "push" | "email" | "passkey" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
+                        type: "email" | "passkey" | "push" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
                         phone_number?: string | undefined;
                         totp_secret?: string | undefined;
                         credential_id?: string | undefined;
@@ -2861,7 +2915,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 }[];
@@ -3016,7 +3070,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        factor_name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                        factor_name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -3024,7 +3078,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -3037,7 +3091,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        factor_name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                        factor_name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -3049,7 +3103,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -9285,7 +9339,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                    prompt: "signup" | "status" | "mfa" | "organizations" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                     language: string;
                 }[];
                 outputFormat: "json";
@@ -9323,7 +9377,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "signup" | "status" | "mfa" | "organizations" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                         language: string;
                     };
                 } & {
@@ -9345,7 +9399,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "signup" | "status" | "mfa" | "organizations" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                         language: string;
                     };
                 } & {
@@ -9369,7 +9423,7 @@ declare function init(config: AuthHeroConfig): {
             $delete: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "signup" | "status" | "mfa" | "organizations" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                         language: string;
                     };
                 } & {
@@ -10810,7 +10864,7 @@ declare function init(config: AuthHeroConfig): {
                         log_type: string;
                         category: "user_action" | "admin_action" | "system" | "api";
                         actor: {
-                            type: "user" | "client_credentials" | "system" | "admin" | "api_key";
+                            type: "client_credentials" | "user" | "system" | "admin" | "api_key";
                             id?: string | undefined;
                             email?: string | undefined;
                             org_id?: string | undefined;
@@ -11458,7 +11512,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -11497,7 +11551,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -11551,7 +11605,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -11939,7 +11993,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "private_key_jwt" | "client_secret_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -12035,7 +12089,7 @@ declare function init(config: AuthHeroConfig): {
                         addons?: {
                             [x: string]: any;
                         } | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "private_key_jwt" | "client_secret_jwt" | undefined;
                         client_metadata?: {
                             [x: string]: string;
                         } | undefined;
@@ -12146,7 +12200,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "private_key_jwt" | "client_secret_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -12256,7 +12310,7 @@ declare function init(config: AuthHeroConfig): {
                         custom_login_page_preview?: string | undefined;
                         form_template?: string | undefined;
                         addons?: Record<string, any> | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "private_key_jwt" | "client_secret_jwt" | undefined;
                         client_metadata?: Record<string, string> | undefined;
                         hide_sign_up_disabled_error?: boolean | undefined;
                         mobile?: Record<string, any> | undefined;
@@ -12336,7 +12390,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "private_key_jwt" | "client_secret_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -12425,7 +12479,7 @@ declare function init(config: AuthHeroConfig): {
                         custom_login_page_preview?: string | undefined;
                         form_template?: string | undefined;
                         addons?: Record<string, any> | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "private_key_jwt" | "client_secret_jwt" | undefined;
                         client_metadata?: Record<string, string> | undefined;
                         hide_sign_up_disabled_error?: boolean | undefined;
                         mobile?: Record<string, any> | undefined;
@@ -12505,7 +12559,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "private_key_jwt" | "client_secret_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -13769,7 +13823,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -13808,7 +13862,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -14648,7 +14702,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "pending" | "ready" | "disabled" | "pending_verification";
+                    status: "disabled" | "pending" | "ready" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -14689,7 +14743,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "pending" | "ready" | "disabled" | "pending_verification";
+                    status: "disabled" | "pending" | "ready" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -14743,27 +14797,9 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        domain?: string | undefined;
-                        type?: "auth0_managed_certs" | "self_managed_certs" | undefined;
-                        verification_method?: "txt" | undefined;
+                        tls_policy?: "recommended" | undefined;
                         custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                         domain_metadata?: Record<string, string> | undefined;
-                        custom_domain_id?: string | undefined;
-                        primary?: boolean | undefined;
-                        status?: "pending" | "ready" | "disabled" | "pending_verification" | undefined;
-                        origin_domain_name?: string | undefined;
-                        verification?: {
-                            methods: ({
-                                name: "txt";
-                                record: string;
-                                domain: string;
-                            } | {
-                                name: "http";
-                                http_body: string;
-                                http_url: string;
-                            })[];
-                        } | undefined;
-                        tls_policy?: string | undefined;
                     };
                 };
                 output: {
@@ -14771,7 +14807,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "pending" | "ready" | "disabled" | "pending_verification";
+                    status: "disabled" | "pending" | "ready" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -14818,7 +14854,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "pending" | "ready" | "disabled" | "pending_verification";
+                    status: "disabled" | "pending" | "ready" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -14864,7 +14900,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "pending" | "ready" | "disabled" | "pending_verification";
+                    status: "disabled" | "pending" | "ready" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -14905,7 +14941,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "pending" | "ready" | "disabled" | "pending_verification";
+                    status: "disabled" | "pending" | "ready" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -15512,7 +15548,7 @@ declare function init(config: AuthHeroConfig): {
                     logs: {
                         action_name: string;
                         lines: {
-                            level: "log" | "error" | "info" | "warn" | "debug";
+                            level: "error" | "log" | "info" | "warn" | "debug";
                             message: string;
                         }[];
                     }[];
@@ -16179,7 +16215,7 @@ declare function init(config: AuthHeroConfig): {
                         args: hono_utils_types.JSONValue[];
                     }[];
                     logs: {
-                        level: "log" | "error" | "info" | "warn" | "debug";
+                        level: "error" | "log" | "info" | "warn" | "debug";
                         message: string;
                     }[];
                     error?: string | undefined;
@@ -16477,7 +16513,7 @@ declare function init(config: AuthHeroConfig): {
                         scope?: string | undefined;
                         grant_types?: string[] | undefined;
                         response_types?: string[] | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "private_key_jwt" | "client_secret_jwt" | undefined;
                         jwks_uri?: string | undefined;
                         jwks?: Record<string, unknown> | undefined;
                         software_id?: string | undefined;
@@ -16566,7 +16602,7 @@ declare function init(config: AuthHeroConfig): {
                         scope?: string | undefined;
                         grant_types?: string[] | undefined;
                         response_types?: string[] | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "private_key_jwt" | "client_secret_jwt" | undefined;
                         jwks_uri?: string | undefined;
                         jwks?: Record<string, unknown> | undefined;
                         software_id?: string | undefined;
@@ -16912,16 +16948,16 @@ declare function init(config: AuthHeroConfig): {
                         email: string;
                         send: "code" | "link";
                         authParams: {
-                            username?: string | undefined;
-                            state?: string | undefined;
-                            audience?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                             scope?: string | undefined;
+                            username?: string | undefined;
+                            audience?: string | undefined;
+                            state?: string | undefined;
                             organization?: string | undefined;
                             nonce?: string | undefined;
-                            redirect_uri?: string | undefined;
                             act_as?: string | undefined;
+                            redirect_uri?: string | undefined;
                             prompt?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
                             code_challenge?: string | undefined;
@@ -16948,16 +16984,16 @@ declare function init(config: AuthHeroConfig): {
                         phone_number: string;
                         send: "code" | "link";
                         authParams: {
-                            username?: string | undefined;
-                            state?: string | undefined;
-                            audience?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                             scope?: string | undefined;
+                            username?: string | undefined;
+                            audience?: string | undefined;
+                            state?: string | undefined;
                             organization?: string | undefined;
                             nonce?: string | undefined;
-                            redirect_uri?: string | undefined;
                             act_as?: string | undefined;
+                            redirect_uri?: string | undefined;
                             prompt?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
                             code_challenge?: string | undefined;
@@ -17092,14 +17128,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -17111,14 +17147,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -17133,14 +17169,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -17190,7 +17226,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -17237,7 +17273,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -17289,7 +17325,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -17336,7 +17372,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -17396,7 +17432,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -17443,7 +17479,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -17498,7 +17534,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -17545,7 +17581,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -17600,7 +17636,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -17647,7 +17683,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -17676,7 +17712,7 @@ declare function init(config: AuthHeroConfig): {
                 output: {
                     keys: {
                         alg: "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "HS256" | "HS384" | "HS512";
-                        kty: "EC" | "RSA" | "oct";
+                        kty: "RSA" | "EC" | "oct";
                         kid?: string | undefined;
                         use?: "sig" | "enc" | undefined;
                         n?: string | undefined;
@@ -19053,5 +19089,5 @@ declare function init(config: AuthHeroConfig): {
     createX509Certificate: typeof createX509Certificate;
 };
 
-export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_SYNC_EVENT_PREFIX, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, ControlPlaneSyncDestination, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, NoopTenantProvisioner, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, SignupPage as SignUpPage, SocialButton, Spinner, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, cleanupOutbox, cleanupSessions, cleanupUserSessions, clientInfoMiddleware, createApplySyncEvents, createAuthMiddleware, createDefaultDestinations, createEncryptedDataAdapter, createInMemoryCache, decryptField, deepMergePatch, drainOutbox, encryptField, fetchAll, init, injectTailwindCSS, isEncrypted, loadEncryptionKey, mailgunCredentialsSchema, postmarkCredentialsSchema, index_d as preDefinedHooks, resendCredentialsSchema, runOutboxRelay, seed, tailwindCss, tenantMiddleware, waitUntil };
-export type { AuthHeroConfig, ControlPlaneSyncDestinationOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetServiceToken, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, PostmarkCredentials, PostmarkEmailServiceOptions, ResendCredentials, ResendEmailServiceOptions, RolePermissionHooks, RunOutboxRelayConfig, SeedOptions, SeedResult, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantProvisioner, TenantProvisionerContext, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams };
+export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_SYNC_EVENT_PREFIX, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, ControlPlaneSyncDestination, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, NoopTenantProvisioner, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, SignupPage as SignUpPage, SocialButton, Spinner, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, cleanupOutbox, cleanupSessions, cleanupUserSessions, clientInfoMiddleware, createApplySyncEvents, createAuthMiddleware, createDefaultDestinations, createEncryptedDataAdapter, createInMemoryCache, decryptField, deepMergePatch, drainOutbox, encryptField, fetchAll, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, loadEncryptionKey, mailgunCredentialsSchema, postmarkCredentialsSchema, index_d as preDefinedHooks, resendCredentialsSchema, runOutboxRelay, seed, tailwindCss, tenantMiddleware, verifyControlPlaneToken, waitUntil };
+export type { AuthHeroConfig, ControlPlaneSyncDestinationOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetServiceToken, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, PostmarkCredentials, PostmarkEmailServiceOptions, ResendCredentials, ResendEmailServiceOptions, RolePermissionHooks, RunOutboxRelayConfig, SeedOptions, SeedResult, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantProvisioner, TenantProvisionerContext, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams };