authhero 8.21.0 → 8.22.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (37) hide show
  1. package/dist/assets/u/widget/index.esm.js +1 -1
  2. package/dist/authhero.cjs +112 -112
  3. package/dist/authhero.d.ts +385 -132
  4. package/dist/authhero.mjs +11626 -11473
  5. package/dist/tsconfig.types.tsbuildinfo +1 -1
  6. package/dist/types/authentication-flows/passwordless.d.ts +3 -3
  7. package/dist/types/errors/is-http-exception-like.d.ts +11 -0
  8. package/dist/types/helpers/dcr/metadata-mapping.d.ts +2 -2
  9. package/dist/types/index.d.ts +263 -129
  10. package/dist/types/routes/auth-api/index.d.ts +16 -16
  11. package/dist/types/routes/auth-api/passwordless.d.ts +4 -4
  12. package/dist/types/routes/auth-api/register/index.d.ts +2 -2
  13. package/dist/types/routes/auth-api/token.d.ts +10 -10
  14. package/dist/types/routes/management-api/action-executions.d.ts +1 -1
  15. package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
  16. package/dist/types/routes/management-api/branding.d.ts +9 -9
  17. package/dist/types/routes/management-api/client-grants.d.ts +9 -9
  18. package/dist/types/routes/management-api/clients.d.ts +102 -7
  19. package/dist/types/routes/management-api/custom-domains.d.ts +6 -6
  20. package/dist/types/routes/management-api/email-templates.d.ts +18 -18
  21. package/dist/types/routes/management-api/guardian.d.ts +5 -5
  22. package/dist/types/routes/management-api/hook-code.d.ts +2 -2
  23. package/dist/types/routes/management-api/index.d.ts +213 -80
  24. package/dist/types/routes/management-api/log-streams.d.ts +6 -6
  25. package/dist/types/routes/management-api/logs.d.ts +41 -3
  26. package/dist/types/routes/management-api/migration-sources.d.ts +6 -6
  27. package/dist/types/routes/management-api/organizations.d.ts +1 -1
  28. package/dist/types/routes/management-api/prompts.d.ts +4 -4
  29. package/dist/types/routes/management-api/tenants.d.ts +6 -6
  30. package/dist/types/routes/management-api/themes.d.ts +6 -6
  31. package/dist/types/routes/management-api/users.d.ts +2 -2
  32. package/dist/types/routes/proxy-control-plane/wfp-tenant-hosts.d.ts +122 -0
  33. package/dist/types/routes/proxy-control-plane/wfp-tenant-hosts.test.d.ts +1 -0
  34. package/dist/types/routes/universal-login/common.d.ts +6 -6
  35. package/dist/types/routes/universal-login/u2-index.d.ts +5 -5
  36. package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
  37. package/package.json +5 -5
@@ -18,7 +18,7 @@ export declare const logStreamsRoutes: OpenAPIHono<{
18
18
  [x: string]: import("hono/utils/types").JSONValue;
19
19
  };
20
20
  id: string;
21
- status: "active" | "suspended" | "paused";
21
+ status: "suspended" | "active" | "paused";
22
22
  filters?: {
23
23
  type: string;
24
24
  name: string;
@@ -50,7 +50,7 @@ export declare const logStreamsRoutes: OpenAPIHono<{
50
50
  [x: string]: import("hono/utils/types").JSONValue;
51
51
  };
52
52
  id: string;
53
- status: "active" | "suspended" | "paused";
53
+ status: "suspended" | "active" | "paused";
54
54
  filters?: {
55
55
  type: string;
56
56
  name: string;
@@ -75,7 +75,7 @@ export declare const logStreamsRoutes: OpenAPIHono<{
75
75
  name: string;
76
76
  type: "http" | "eventbridge" | "eventgrid" | "splunk" | "datadog" | "sumo";
77
77
  sink: Record<string, unknown>;
78
- status?: "active" | "suspended" | "paused" | undefined;
78
+ status?: "suspended" | "active" | "paused" | undefined;
79
79
  filters?: {
80
80
  type: string;
81
81
  name: string;
@@ -90,7 +90,7 @@ export declare const logStreamsRoutes: OpenAPIHono<{
90
90
  [x: string]: import("hono/utils/types").JSONValue;
91
91
  };
92
92
  id: string;
93
- status: "active" | "suspended" | "paused";
93
+ status: "suspended" | "active" | "paused";
94
94
  filters?: {
95
95
  type: string;
96
96
  name: string;
@@ -125,7 +125,7 @@ export declare const logStreamsRoutes: OpenAPIHono<{
125
125
  }[] | undefined;
126
126
  isPriority?: boolean | undefined;
127
127
  id?: string | undefined;
128
- status?: "active" | "suspended" | "paused" | undefined;
128
+ status?: "suspended" | "active" | "paused" | undefined;
129
129
  created_at?: string | undefined;
130
130
  updated_at?: string | undefined;
131
131
  };
@@ -137,7 +137,7 @@ export declare const logStreamsRoutes: OpenAPIHono<{
137
137
  [x: string]: import("hono/utils/types").JSONValue;
138
138
  };
139
139
  id: string;
140
- status: "active" | "suspended" | "paused";
140
+ status: "suspended" | "active" | "paused";
141
141
  filters?: {
142
142
  type: string;
143
143
  name: string;
@@ -24,7 +24,7 @@ export declare const logRoutes: OpenAPIHono<{
24
24
  };
25
25
  };
26
26
  output: {
27
- type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
27
+ type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
28
28
  date: string;
29
29
  isMobile: boolean;
30
30
  log_id: string;
@@ -63,7 +63,7 @@ export declare const logRoutes: OpenAPIHono<{
63
63
  limit: number;
64
64
  length: number;
65
65
  logs: {
66
- type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
66
+ type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
67
67
  date: string;
68
68
  isMobile: boolean;
69
69
  log_id: string;
@@ -100,6 +100,44 @@ export declare const logRoutes: OpenAPIHono<{
100
100
  }[];
101
101
  total?: number | undefined;
102
102
  next?: string | undefined;
103
+ } | {
104
+ logs: {
105
+ type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
106
+ date: string;
107
+ isMobile: boolean;
108
+ log_id: string;
109
+ description?: string | undefined;
110
+ ip?: string | undefined;
111
+ user_agent?: string | undefined;
112
+ details?: any;
113
+ user_id?: string | undefined;
114
+ user_name?: string | undefined;
115
+ connection?: string | undefined;
116
+ connection_id?: string | undefined;
117
+ client_id?: string | undefined;
118
+ client_name?: string | undefined;
119
+ audience?: string | undefined;
120
+ scope?: string | undefined;
121
+ strategy?: string | undefined;
122
+ strategy_type?: string | undefined;
123
+ hostname?: string | undefined;
124
+ auth0_client?: {
125
+ name: string;
126
+ version: string;
127
+ env?: {
128
+ node?: string | undefined;
129
+ } | undefined;
130
+ } | undefined;
131
+ location_info?: {
132
+ country_code: string;
133
+ city_name: string;
134
+ latitude: string;
135
+ longitude: string;
136
+ time_zone: string;
137
+ continent_code: string;
138
+ } | undefined;
139
+ }[];
140
+ next?: string | undefined;
103
141
  };
104
142
  outputFormat: "json";
105
143
  status: 200;
@@ -118,7 +156,7 @@ export declare const logRoutes: OpenAPIHono<{
118
156
  };
119
157
  };
120
158
  output: {
121
- type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
159
+ type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
122
160
  date: string;
123
161
  isMobile: boolean;
124
162
  log_id: string;
@@ -15,7 +15,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
15
15
  created_at: string;
16
16
  updated_at: string;
17
17
  name: string;
18
- provider: "auth0" | "oidc" | "okta" | "cognito";
18
+ provider: "auth0" | "cognito" | "okta" | "oidc";
19
19
  connection: string;
20
20
  enabled: boolean;
21
21
  credentials: {
@@ -47,7 +47,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
47
47
  created_at: string;
48
48
  updated_at: string;
49
49
  name: string;
50
- provider: "auth0" | "oidc" | "okta" | "cognito";
50
+ provider: "auth0" | "cognito" | "okta" | "oidc";
51
51
  connection: string;
52
52
  enabled: boolean;
53
53
  credentials: {
@@ -73,7 +73,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
73
73
  } & {
74
74
  json: {
75
75
  name: string;
76
- provider: "auth0" | "oidc" | "okta" | "cognito";
76
+ provider: "auth0" | "cognito" | "okta" | "oidc";
77
77
  connection: string;
78
78
  credentials: {
79
79
  domain: string;
@@ -90,7 +90,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
90
90
  created_at: string;
91
91
  updated_at: string;
92
92
  name: string;
93
- provider: "auth0" | "oidc" | "okta" | "cognito";
93
+ provider: "auth0" | "cognito" | "okta" | "oidc";
94
94
  connection: string;
95
95
  enabled: boolean;
96
96
  credentials: {
@@ -121,7 +121,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
121
121
  json: {
122
122
  id?: string | undefined;
123
123
  name?: string | undefined;
124
- provider?: "auth0" | "oidc" | "okta" | "cognito" | undefined;
124
+ provider?: "auth0" | "cognito" | "okta" | "oidc" | undefined;
125
125
  connection?: string | undefined;
126
126
  enabled?: boolean | undefined;
127
127
  credentials?: {
@@ -137,7 +137,7 @@ export declare const migrationSourcesRoutes: OpenAPIHono<{
137
137
  created_at: string;
138
138
  updated_at: string;
139
139
  name: string;
140
- provider: "auth0" | "oidc" | "okta" | "cognito";
140
+ provider: "auth0" | "cognito" | "okta" | "oidc";
141
141
  connection: string;
142
142
  enabled: boolean;
143
143
  credentials: {
@@ -737,9 +737,9 @@ export declare const organizationRoutes: OpenAPIHono<{
737
737
  };
738
738
  id?: string | undefined;
739
739
  connection_id?: string | undefined;
740
- roles?: string[] | undefined;
741
740
  app_metadata?: Record<string, any> | undefined;
742
741
  user_metadata?: Record<string, any> | undefined;
742
+ roles?: string[] | undefined;
743
743
  ttl_sec?: number | undefined;
744
744
  send_invitation_email?: boolean | undefined;
745
745
  };
@@ -50,7 +50,7 @@ export declare const promptsRoutes: OpenAPIHono<{
50
50
  };
51
51
  };
52
52
  output: {
53
- prompt: "status" | "organizations" | "invitation" | "signup" | "mfa" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
53
+ prompt: "status" | "login" | "signup" | "mfa" | "organizations" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
54
54
  language: string;
55
55
  }[];
56
56
  outputFormat: "json";
@@ -88,7 +88,7 @@ export declare const promptsRoutes: OpenAPIHono<{
88
88
  $get: {
89
89
  input: {
90
90
  param: {
91
- prompt: "status" | "organizations" | "invitation" | "signup" | "mfa" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
91
+ prompt: "status" | "login" | "signup" | "mfa" | "organizations" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
92
92
  language: string;
93
93
  };
94
94
  } & {
@@ -110,7 +110,7 @@ export declare const promptsRoutes: OpenAPIHono<{
110
110
  $put: {
111
111
  input: {
112
112
  param: {
113
- prompt: "status" | "organizations" | "invitation" | "signup" | "mfa" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
113
+ prompt: "status" | "login" | "signup" | "mfa" | "organizations" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
114
114
  language: string;
115
115
  };
116
116
  } & {
@@ -134,7 +134,7 @@ export declare const promptsRoutes: OpenAPIHono<{
134
134
  $delete: {
135
135
  input: {
136
136
  param: {
137
- prompt: "status" | "organizations" | "invitation" | "signup" | "mfa" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
137
+ prompt: "status" | "login" | "signup" | "mfa" | "organizations" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
138
138
  language: string;
139
139
  };
140
140
  } & {
@@ -210,13 +210,8 @@ export declare const tenantRoutes: OpenAPIHono<{
210
210
  };
211
211
  } & {
212
212
  json: {
213
- audience?: string | undefined;
214
213
  id?: string | undefined;
215
- allowed_logout_urls?: string[] | undefined;
216
- oidc_logout?: {
217
- rp_logout_end_session_endpoint_discovery?: boolean | undefined;
218
- } | undefined;
219
- default_organization?: string | undefined;
214
+ audience?: string | undefined;
220
215
  friendly_name?: string | undefined;
221
216
  picture_url?: string | undefined;
222
217
  support_email?: string | undefined;
@@ -230,6 +225,7 @@ export declare const tenantRoutes: OpenAPIHono<{
230
225
  session_cookie?: {
231
226
  mode?: "persistent" | "non-persistent" | undefined;
232
227
  } | undefined;
228
+ allowed_logout_urls?: string[] | undefined;
233
229
  default_redirection_uri?: string | undefined;
234
230
  default_client_id?: string | undefined;
235
231
  enabled_locales?: string[] | undefined;
@@ -303,9 +299,13 @@ export declare const tenantRoutes: OpenAPIHono<{
303
299
  } | undefined;
304
300
  } | null | undefined;
305
301
  default_audience?: string | undefined;
302
+ default_organization?: string | undefined;
306
303
  sessions?: {
307
304
  oidc_logout_prompt_enabled?: boolean | undefined;
308
305
  } | undefined;
306
+ oidc_logout?: {
307
+ rp_logout_end_session_endpoint_discovery?: boolean | undefined;
308
+ } | undefined;
309
309
  allow_organization_name_in_authentication_api?: boolean | undefined;
310
310
  customize_mfa_in_postlogin_action?: boolean | undefined;
311
311
  acr_values_supported?: string[] | undefined;
@@ -78,12 +78,12 @@ export declare const themesRoutes: OpenAPIHono<{
78
78
  background_color: string;
79
79
  background_image_url: string;
80
80
  page_layout: "center" | "left" | "right";
81
- logo_placement?: "none" | "widget" | "chip" | undefined;
81
+ logo_placement?: "widget" | "none" | "chip" | undefined;
82
82
  };
83
83
  widget: {
84
84
  header_text_alignment: "center" | "left" | "right";
85
85
  logo_height: number;
86
- logo_position: "none" | "center" | "left" | "right";
86
+ logo_position: "center" | "left" | "right" | "none";
87
87
  logo_url: string;
88
88
  social_buttons_layout: "bottom" | "top";
89
89
  };
@@ -168,12 +168,12 @@ export declare const themesRoutes: OpenAPIHono<{
168
168
  background_color: string;
169
169
  background_image_url: string;
170
170
  page_layout: "center" | "left" | "right";
171
- logo_placement?: "none" | "widget" | "chip" | undefined;
171
+ logo_placement?: "widget" | "none" | "chip" | undefined;
172
172
  };
173
173
  widget: {
174
174
  header_text_alignment: "center" | "left" | "right";
175
175
  logo_height: number;
176
- logo_position: "none" | "center" | "left" | "right";
176
+ logo_position: "center" | "left" | "right" | "none";
177
177
  logo_url: string;
178
178
  social_buttons_layout: "bottom" | "top";
179
179
  };
@@ -247,12 +247,12 @@ export declare const themesRoutes: OpenAPIHono<{
247
247
  background_color: string;
248
248
  background_image_url: string;
249
249
  page_layout: "center" | "left" | "right";
250
- logo_placement?: "none" | "widget" | "chip" | undefined;
250
+ logo_placement?: "widget" | "none" | "chip" | undefined;
251
251
  };
252
252
  widget: {
253
253
  header_text_alignment: "center" | "left" | "right";
254
254
  logo_height: number;
255
- logo_position: "none" | "center" | "left" | "right";
255
+ logo_position: "center" | "left" | "right" | "none";
256
256
  logo_url: string;
257
257
  social_buttons_layout: "bottom" | "top";
258
258
  };
@@ -740,7 +740,7 @@ export declare const userRoutes: OpenAPIHono<{
740
740
  };
741
741
  };
742
742
  output: {
743
- type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
743
+ type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
744
744
  date: string;
745
745
  isMobile: boolean;
746
746
  log_id: string;
@@ -779,7 +779,7 @@ export declare const userRoutes: OpenAPIHono<{
779
779
  limit: number;
780
780
  length: number;
781
781
  logs: {
782
- type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
782
+ type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
783
783
  date: string;
784
784
  isMobile: boolean;
785
785
  log_id: string;
@@ -0,0 +1,122 @@
1
+ import type { TenantsDataAdapter } from "@authhero/adapter-interfaces";
2
+ import type { ResolvedHost } from "@authhero/proxy";
3
+ import { type KvNamespaceWriter } from "@authhero/proxy";
4
+ /**
5
+ * Default dispatch-namespace binding name the synthesized route targets.
6
+ * Must match the `[[dispatch_namespaces]] binding = "..."` declared in the
7
+ * proxy Worker's wrangler config.
8
+ */
9
+ export declare const DEFAULT_WFP_DISPATCH_BINDING = "DISPATCHER";
10
+ /**
11
+ * Default script-name template, matching the WFP provisioner's default
12
+ * (`scriptNameTemplate` in `@authhero/cloudflare-adapter`). Only used when the
13
+ * tenant row carries no `worker_script_name` — the provisioner writes that
14
+ * back on provision, and it is always preferred.
15
+ */
16
+ export declare const DEFAULT_WFP_SCRIPT_NAME_TEMPLATE = "{tenant_id}";
17
+ /**
18
+ * The platform subdomain a WFP tenant is served on: `{tenant_id}.{issuerHost}`.
19
+ * Central so the publisher, the resolver, and any reconcile host-list
20
+ * derivation all agree on the exact host (and therefore the KV key).
21
+ */
22
+ export declare function wfpTenantHost(tenantId: string, issuerHost: string): string;
23
+ /**
24
+ * Whether a tenant id can be served on a platform subdomain at all. Ids that
25
+ * fail this (mixed case, dots, other URL-unsafe characters) are skipped by
26
+ * `wrapTenantsAdapterWithWfpKvPublish` — publishing them would create KV keys
27
+ * the resolver can never match. Give WFP tenants lowercase DNS-label ids.
28
+ */
29
+ export declare function isWfpSubdomainSafeTenantId(tenantId: string): boolean;
30
+ export interface WfpTenantHostResolverOptions {
31
+ /** Tenant lookup — typically the control plane's tenants adapter. */
32
+ tenants: Pick<TenantsDataAdapter, "get">;
33
+ /**
34
+ * The issuer host tenant subdomains hang off (e.g. `token.example.com`,
35
+ * from `new URL(env.ISSUER).host`). A host resolves only when it is exactly
36
+ * one label under this — `wpf.token.example.com`, not `a.b.token.example.com`.
37
+ */
38
+ issuerHost: string;
39
+ /** Dispatch-namespace binding name on the proxy Worker. */
40
+ dispatchBinding?: string;
41
+ /**
42
+ * Fallback script-name template (`{tenant_id}` placeholder) for tenants
43
+ * provisioned before `worker_script_name` was written back. Must match the
44
+ * provisioner's template.
45
+ */
46
+ scriptNameTemplate?: string;
47
+ /** Optional per-request timeout (ms) forwarded to the dispatch handler. */
48
+ dispatchTimeoutMs?: number;
49
+ }
50
+ /**
51
+ * Build a `resolveHost` that maps a WFP tenant's platform subdomain
52
+ * (`{tenant_id}.{issuerHost}`) to a synthetic `ResolvedHost` whose single
53
+ * route dispatches into the tenant's own Worker via the proxy's
54
+ * `dispatch_namespace` handler.
55
+ *
56
+ * Resolves only tenants with `deployment_type: "wfp"` AND
57
+ * `provisioning_state: "ready"` — anything else returns `null` so the host
58
+ * falls through to the proxy's fallback chain (typically the shared control
59
+ * plane), which keeps a tenant serviceable while it is still provisioning.
60
+ * No `custom_domains` row is involved; the mapping is derived entirely from
61
+ * the tenant row, which stays the durable source of truth.
62
+ *
63
+ * Compose it behind the custom-domains resolver with `composeHostResolvers`
64
+ * so an explicit `custom_domains` row for the same host always wins.
65
+ */
66
+ export declare function createWfpTenantHostResolver(options: WfpTenantHostResolverOptions): (host: string) => Promise<ResolvedHost | null>;
67
+ /**
68
+ * Chain host resolvers: first non-null wins, in argument order. Put the
69
+ * custom-domains resolver first so an explicit `custom_domains` row overrides
70
+ * a derived WFP tenant-subdomain route for the same host. Errors propagate —
71
+ * a failing layer should surface (and let the caller's own fallback take
72
+ * over), not be silently treated as a miss that could delete a live KV key.
73
+ */
74
+ export declare function composeHostResolvers(...resolvers: Array<(host: string) => Promise<ResolvedHost | null>>): (host: string) => Promise<ResolvedHost | null>;
75
+ export interface WfpTenantsKvPublishOptions {
76
+ /** Tenants adapter whose writes should be mirrored to KV. */
77
+ tenants: TenantsDataAdapter;
78
+ /** KV namespace the resolved host blobs are published to. */
79
+ kv: KvNamespaceWriter;
80
+ /**
81
+ * Cross-tenant host resolver used to recompute the blob after a write —
82
+ * pass the SAME composed resolver (custom domains first, then
83
+ * `createWfpTenantHostResolver`) that the control plane serves over HTTP,
84
+ * so every publisher computes identical blobs for a host.
85
+ */
86
+ resolveHost: (host: string) => Promise<ResolvedHost | null>;
87
+ /** The issuer host tenant subdomains hang off — see `wfpTenantHost`. */
88
+ issuerHost: string;
89
+ /** Key prefix; must match the proxy reader. Defaults to the shared default. */
90
+ keyPrefix?: string;
91
+ /**
92
+ * Optional `ctx.waitUntil` so the fire-and-forget KV publish runs to
93
+ * completion without blocking (or failing) the originating write. When
94
+ * omitted, the publish is detached with its rejection swallowed.
95
+ */
96
+ waitUntil?: (promise: Promise<unknown>) => void;
97
+ /** Optional hook invoked when a publish fails. */
98
+ onError?: (err: unknown, ctx: {
99
+ host: string;
100
+ op: string;
101
+ }) => void;
102
+ }
103
+ /**
104
+ * Wrap a control plane's `tenants` adapter so every WFP-tenant mutation
105
+ * republishes (or deletes) the tenant's platform-subdomain routing blob in KV
106
+ * — the tenants-table counterpart of `wrapProxyAdaptersWithKvPublish`.
107
+ *
108
+ * This is the single choke-point for WFP subdomain routing: the provisioner
109
+ * flips `provisioning_state` to `"ready"` through `tenants.update`, which
110
+ * publishes the dispatch route the moment the tenant Worker is servable —
111
+ * inline hook and durable-workflow paths alike, with no per-path wiring. A
112
+ * remove deletes the key, so a deprovisioned tenant's host falls back to the
113
+ * proxy's default chain instead of dispatching to a dead script.
114
+ *
115
+ * Shared (non-WFP) tenants never touch KV, and neither do wfp tenants whose
116
+ * id is not a lowercase DNS label (`isWfpSubdomainSafeTenantId`) — such ids
117
+ * cannot round-trip through a hostname, so publishing them would only create
118
+ * dead keys. Publishing is fire-and-forget; silent drift is corrected by the
119
+ * periodic reconcile (`backfillProxyHostsToKv` over `wfpTenantHost`-derived
120
+ * hosts).
121
+ */
122
+ export declare function wrapTenantsAdapterWithWfpKvPublish(options: WfpTenantsKvPublishOptions): TenantsDataAdapter;
@@ -72,12 +72,12 @@ export declare function initJSXRoute(ctx: Context<{
72
72
  background_color: string;
73
73
  background_image_url: string;
74
74
  page_layout: "center" | "left" | "right";
75
- logo_placement?: "none" | "widget" | "chip" | undefined;
75
+ logo_placement?: "widget" | "none" | "chip" | undefined;
76
76
  };
77
77
  widget: {
78
78
  header_text_alignment: "center" | "left" | "right";
79
79
  logo_height: number;
80
- logo_position: "none" | "center" | "left" | "right";
80
+ logo_position: "center" | "left" | "right" | "none";
81
81
  logo_url: string;
82
82
  social_buttons_layout: "bottom" | "top";
83
83
  };
@@ -448,7 +448,7 @@ export declare function initJSXRoute(ctx: Context<{
448
448
  custom_login_page_preview?: string | undefined;
449
449
  form_template?: string | undefined;
450
450
  addons?: Record<string, any> | undefined;
451
- token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "private_key_jwt" | "client_secret_jwt" | undefined;
451
+ token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
452
452
  client_metadata?: Record<string, string> | undefined;
453
453
  hide_sign_up_disabled_error?: boolean | undefined;
454
454
  mobile?: Record<string, any> | undefined;
@@ -793,12 +793,12 @@ export declare function initJSXRouteWithSession(ctx: Context<{
793
793
  background_color: string;
794
794
  background_image_url: string;
795
795
  page_layout: "center" | "left" | "right";
796
- logo_placement?: "none" | "widget" | "chip" | undefined;
796
+ logo_placement?: "widget" | "none" | "chip" | undefined;
797
797
  };
798
798
  widget: {
799
799
  header_text_alignment: "center" | "left" | "right";
800
800
  logo_height: number;
801
- logo_position: "none" | "center" | "left" | "right";
801
+ logo_position: "center" | "left" | "right" | "none";
802
802
  logo_url: string;
803
803
  social_buttons_layout: "bottom" | "top";
804
804
  };
@@ -1169,7 +1169,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
1169
1169
  custom_login_page_preview?: string | undefined;
1170
1170
  form_template?: string | undefined;
1171
1171
  addons?: Record<string, any> | undefined;
1172
- token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | "none" | "private_key_jwt" | "client_secret_jwt" | undefined;
1172
+ token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
1173
1173
  client_metadata?: Record<string, string> | undefined;
1174
1174
  hide_sign_up_disabled_error?: boolean | undefined;
1175
1175
  mobile?: Record<string, any> | undefined;