authhero 8.23.0 → 8.24.0

package/dist/authhero.d.ts

@@ -1,6 +1,6 @@
 import * as hono_utils_types from 'hono/utils/types';
 import * as _authhero_adapter_interfaces from '@authhero/adapter-interfaces';
-import { LoginSession, DataAdapters, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, CustomDomain, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Hook, TenantOperationKind, TenantOperation, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, AuditEvent, OutboxAdapter, HooksAdapter, Client, LogsDataAdapter, LogInsert, UserDataAdapter, CustomDomainsAdapter, ProxyRoutesAdapter, TenantsDataAdapter, ListParams, KeysAdapter, CodeExecutionResult } from '@authhero/adapter-interfaces';
+import { LoginSession, DataAdapters, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Hook, TenantOperationKind, TenantOperation, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, AuditEvent, OutboxAdapter, HooksAdapter, Client, LogsDataAdapter, LogInsert, UserDataAdapter, ProxyRoutesAdapter, CustomDomainsAdapter, TenantsDataAdapter, KeysAdapter, ListParams, CodeExecutionResult } from '@authhero/adapter-interfaces';
 export * from '@authhero/adapter-interfaces';
 import * as hono_types from 'hono/types';
 import * as hono_utils_http_status from 'hono/utils/http-status';
@@ -11,7 +11,7 @@ export { HttpSamlSigner, SamlSigner } from '@authhero/saml/core';
 import { Context, Next, Handler, MiddlewareHandler } from 'hono';
 import * as _authhero_proxy from '@authhero/proxy';
 import { ResolvedHost, KvNamespaceWriter } from '@authhero/proxy';
-export { PROXY_RESOLVE_HOST_SCOPE } from '@authhero/proxy';
+export { PROXY_RESOLVE_HOST_SCOPE, ServiceBindingFetcher, createServiceBindingFetch } from '@authhero/proxy';
 import { FC, PropsWithChildren, JSXNode } from 'hono/jsx';
 import * as hono_jsx_jsx_dev_runtime from 'hono/jsx/jsx-dev-runtime';
 
@@ -823,7 +823,15 @@ type Hooks = {
 };
 
 declare const CONTROL_PLANE_SYNC_EVENT_PREFIX = "controlplane.sync.";
-type SyncEntity = "custom_domain" | "proxy_route";
+/**
+ * Only `proxy_route` replicates upward. Custom domains used to sync the same
+ * way, which is exactly what left them half-provisioned: the row reached the
+ * control plane but nothing ever registered the hostname in Cloudflare. They
+ * are now written through the control plane synchronously
+ * (`createControlPlaneCustomDomainsAdapter`), which owns the row and performs
+ * the account-level side effect.
+ */
+type SyncEntity = "proxy_route";
 type SyncOp = "created" | "updated" | "deleted";
 /**
  * Wire shape posted from the tenant shard to the control plane. The destination
@@ -832,34 +840,10 @@ type SyncOp = "created" | "updated" | "deleted";
  * batched-delivery destination.
  */
 type SyncEvent = {
-    event_id: string;
-    tenant_id: string;
-    entity: "custom_domain";
-    op: "created" | "updated";
-    aggregate_id: string;
-    payload: CustomDomain;
-    occurred_at: string;
-} | {
-    event_id: string;
-    tenant_id: string;
-    entity: "custom_domain";
-    op: "deleted";
-    aggregate_id: string;
-    payload: CustomDomain;
-    occurred_at: string;
-} | {
-    event_id: string;
-    tenant_id: string;
-    entity: "proxy_route";
-    op: "created" | "updated";
-    aggregate_id: string;
-    payload: ProxyRoute;
-    occurred_at: string;
-} | {
     event_id: string;
     tenant_id: string;
     entity: "proxy_route";
-    op: "deleted";
+    op: SyncOp;
     aggregate_id: string;
     payload: ProxyRoute;
     occurred_at: string;
@@ -1237,20 +1221,35 @@ interface AuthHeroConfig {
          * Optional receiver for `POST /sync` events emitted by tenant shards via
          * the `ControlPlaneSyncDestination`. Mount on the control-plane authhero
          * instance only. Implementations MUST be idempotent — the outbox retries
-         * on transient failures. Use `createApplySyncEvents({ customDomains,
-         * proxyRoutes })` (exported from `authhero`) for the default
-         * adapter-backed implementation.
+         * on transient failures. Use `createApplySyncEvents({ proxyRoutes })`
+         * (exported from `authhero`) for the default adapter-backed
+         * implementation.
          */
         applySyncEvents?: (events: SyncEvent[]) => Promise<void>;
+        /**
+         * The authoritative custom-domains adapter. When set, mounts
+         * `/api/v2/proxy/control-plane/custom-domains` — the resource tenant
+         * shards write through (`createControlPlaneCustomDomainsAdapter`).
+         *
+         * Pass the Cloudflare adapter wrapping the control-plane database: a
+         * CF-for-SaaS hostname is an account-global resource, so registering it
+         * needs credentials that only exist here, and claiming it exactly once
+         * needs a view across every tenant that only exists here.
+         */
+        customDomains?: _authhero_adapter_interfaces.CustomDomainsAdapter;
     };
     /**
-     * Optional outbox-driven replication of `custom_domains` and `proxy_routes`
-     * mutations to a global proxy control plane. When set, every successful
-     * write on this tenant shard enqueues a `controlplane.sync.*` outbox event;
-     * the `ControlPlaneSyncDestination` POSTs each event to
+     * Optional outbox-driven replication of `proxy_routes` mutations to a global
+     * proxy control plane. When set, every successful write on this tenant shard
+     * enqueues a `controlplane.sync.*` outbox event; the
+     * `ControlPlaneSyncDestination` POSTs each event to
      * `${baseUrl}/api/v2/proxy/control-plane/sync`. Requires the outbox to be
      * enabled (`outbox: { enabled: true }`).
      *
+     * Custom domains are NOT replicated this way — the control plane is
+     * authoritative for them; wire `createControlPlaneCustomDomainsAdapter` into
+     * the shard's `dataAdapter` instead.
+     *
      * Leave unset for single-DB deployments — the proxy reads the same database
      * the management API writes to, so replication is unnecessary.
      */
@@ -2612,22 +2611,147 @@ declare class ControlPlaneSyncDestination implements EventDestination {
 }
 
 interface CreateApplySyncEventsOptions {
-    customDomains: CustomDomainsAdapter;
-    proxyRoutes?: ProxyRoutesAdapter;
+    proxyRoutes: ProxyRoutesAdapter;
 }
 /**
  * Build an idempotent `applySyncEvents` implementation backed by a local
- * `CustomDomainsAdapter` / `ProxyRoutesAdapter`. Handles the three retry
- * shapes the outbox can produce:
+ * `ProxyRoutesAdapter`. Handles the three retry shapes the outbox can produce:
  *
  *  - duplicate `created` (retry after the previous succeeded but
  *    `markProcessed` failed) — falls back to `update`.
  *  - `updated` for a row that doesn't exist locally yet (a `created`
  *    delivery is still in flight or lost) — falls back to `create`.
  *  - `deleted` for a row that's already gone — no-op success.
+ *
+ * Custom domains are not replicated: the control plane is authoritative for
+ * them and tenant shards write through it (see
+ * `createControlPlaneCustomDomainsAdapter`), so there is no upward sync to
+ * apply.
  */
 declare function createApplySyncEvents(options: CreateApplySyncEventsOptions): (events: SyncEvent[]) => Promise<void>;
 
+/**
+ * Scope carried by the tokens `ControlPlaneSyncDestination` mints for
+ * `POST /api/v2/proxy/control-plane/sync`.
+ */
+declare const CONTROL_PLANE_SYNC_SCOPE = "controlplane:sync";
+/**
+ * Scope required by the authoritative `/custom-domains` resource on the
+ * control plane. Tenant shards mint a token with this scope through
+ * `createControlPlaneCustomDomainsAdapter`.
+ */
+declare const CONTROL_PLANE_CUSTOM_DOMAINS_SCOPE = "controlplane:custom_domains";
+
+/**
+ * Mints a bearer token for a tenant against the control plane. On a tenant
+ * shard this is `createServiceTokenCore` bound to the shard's own tenants/keys
+ * adapters — the control plane verifies it against the shard's published JWKS,
+ * so no shared client secret is involved.
+ */
+type GetControlPlaneToken = (tenantId: string, scope: string) => Promise<string>;
+interface ControlPlaneClientOptions {
+    /** Base URL of the control-plane authhero instance, no trailing slash required. */
+    baseUrl: string;
+    getServiceToken: GetControlPlaneToken;
+    /** Per-request timeout (default: 5s). */
+    timeoutMs?: number;
+    /** Refresh a cached token this many seconds before it expires (default: 60). */
+    tokenRefreshSkewSeconds?: number;
+    /** Override for tests, or to route over a Cloudflare service binding. */
+    fetchImpl?: typeof fetch;
+}
+interface ControlPlaneRequest {
+    tenantId: string;
+    scope: string;
+    method: "GET" | "POST" | "PATCH" | "PUT" | "DELETE";
+    /** Path below the base URL, e.g. `/api/v2/proxy/control-plane/custom-domains`. */
+    path: string;
+    body?: unknown;
+}
+interface ControlPlaneResponse {
+    status: number;
+    /** Parsed JSON body, or null for empty/non-JSON responses. */
+    data: unknown;
+}
+interface ControlPlaneClient {
+    /**
+     * Perform an authed request. Returns the status and parsed body for ANY HTTP
+     * response — including 4xx/5xx — so callers can map status to domain
+     * semantics (409 → conflict, 404 → null). Throws only when the request never
+     * produced a response (network error, timeout, token minting failure).
+     */
+    request(req: ControlPlaneRequest): Promise<ControlPlaneResponse>;
+}
+/**
+ * Authed transport to the control plane with an in-memory, per-(tenant, scope)
+ * token cache and single-flight minting. Shared by every control-plane-backed
+ * adapter so the token handling exists once.
+ */
+declare function createControlPlaneClient(options: ControlPlaneClientOptions): ControlPlaneClient;
+
+declare const CONTROL_PLANE_CUSTOM_DOMAINS_PATH = "/api/v2/proxy/control-plane/custom-domains";
+interface ControlPlaneCustomDomainsOptions {
+    /** Authed transport to the control plane. */
+    client: ControlPlaneClient;
+    /**
+     * Local read-cache for custom domains — normally the shard's own database
+     * adapter (`database.customDomains`). The control plane owns the row; this
+     * mirror exists so `getByDomain` (tenant resolution, a hot path) and `list`
+     * don't need a network hop.
+     */
+    mirror: CustomDomainsAdapter;
+    /** Override the control-plane resource path (tests, custom mounts). */
+    basePath?: string;
+}
+/**
+ * A `CustomDomainsAdapter` for a tenant shard that cannot register hostnames
+ * itself: a CF-for-SaaS custom hostname is an account-global resource in one
+ * shared zone, and only the control plane holds the account credentials — and
+ * only something above all shards can see that `login.acme.com` is already
+ * claimed by another tenant.
+ *
+ * So the control plane is authoritative: writes go there synchronously and the
+ * result is mirrored into the shard's own database as a read cache. On a
+ * conflict nothing is written locally, which is what prevents the
+ * half-provisioned, unroutable row this replaces.
+ *
+ * Reads trust the mirror once a domain is `ready`. A `pending` domain flips to
+ * `ready` on Cloudflare's timeline (after the customer adds the DV record) and
+ * that transition happens at the control plane, so a non-ready row is
+ * refreshed from upstream on read. `getByDomain` always reads the mirror — it
+ * is on the tenant-resolution path and must not take a network hop.
+ */
+declare function createControlPlaneCustomDomainsAdapter(options: ControlPlaneCustomDomainsOptions): CustomDomainsAdapter;
+
+interface ServiceTokenResponse {
+    access_token: string;
+    token_type: "Bearer";
+    expires_in: number;
+}
+interface CreateServiceTokenCoreParams {
+    tenants: TenantsDataAdapter;
+    keys: KeysAdapter;
+    tenantId: string;
+    scope: string;
+    issuer: string;
+    expiresInSeconds?: number;
+    customClaims?: Record<string, unknown>;
+    /**
+     * Optional per-tenant signing-key bucket selector. When unset the
+     * tenant uses the shared control-plane keys (legacy behavior) which
+     * keeps existing outbox/cron callers working without any change.
+     */
+    signingKeyMode?: SigningKeyModeOption;
+}
+/**
+ * Ctx-free service token minter. Produces a signed JWT for the `auth-service`
+ * client using the tenant's current JWT signing key. Intended to be shared
+ * between the request-time outbox dispatcher and the cron `runOutboxRelay`
+ * helper so both paths emit tokens with identical issuer, subject, tenant
+ * binding, and signing key.
+ */
+declare function createServiceTokenCore(params: CreateServiceTokenCoreParams): Promise<ServiceTokenResponse>;
+
 interface KvPublishOptions {
     /** Custom-domains adapter whose writes should be mirrored to KV. */
     customDomains: CustomDomainsAdapter;
@@ -2831,6 +2955,13 @@ declare function wrapTenantsAdapterWithWfpKvPublish(options: WfpTenantsKvPublish
 declare function isAllowedIssuer(iss: string, expected: string): boolean;
 type VerifyControlPlaneTokenResult = {
     ok: true;
+    /**
+     * The verified `tenant_id` claim, when the token carries one. Service
+     * tokens minted by `createServiceTokenCore` always do; a client-credentials
+     * token minted for a proxy may not. Callers that act on a tenant's data
+     * MUST bind to this rather than to a tenant id taken from the request.
+     */
+    tenantId?: string;
 } | {
     ok: false;
     reason: string;
@@ -2847,8 +2978,12 @@ interface VerifyControlPlaneTokenOptions {
      * so any host you list here must publish its own JWKS at that path.
      */
     expectedIssuers: string[];
-    /** Required `scope` (space-separated). Defaults to `proxy:resolve_host`. */
-    requiredScope?: string;
+    /**
+     * Required `scope` (the token's `scope` claim is space-separated). Pass an
+     * array to accept any one of several scopes. Defaults to
+     * `proxy:resolve_host`.
+     */
+    requiredScope?: string | string[];
 }
 /**
  * Verify a bearer token for the proxy control plane. Returns `{ ok: true }`
@@ -2856,8 +2991,8 @@ interface VerifyControlPlaneTokenOptions {
  * logs only and must not be surfaced to the caller.
  *
  * Accepted algs: RS256/384/512, ES256/384/512. The JWK's `alg` must match
- * the token header's `alg`. The token must carry the configured required
- * scope (`proxy:resolve_host` by default) and an `iss` that strictly equals
+ * the token header's `alg`. The token must carry one of the configured
+ * required scopes (`proxy:resolve_host` by default) and an `iss` that strictly equals
  * one of `expectedIssuers` after URL normalization. The JWKS document is
  * fetched from `<iss>/.well-known/jwks.json` AFTER the `iss` is allow-listed,
  * so an attacker cannot redirect the verifier to a JWKS they control.
@@ -3314,8 +3449,8 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     query: {
-                        include_password_hashes?: "false" | "true" | undefined;
-                        gzip?: "false" | "true" | undefined;
+                        include_password_hashes?: "true" | "false" | undefined;
+                        gzip?: "true" | "false" | undefined;
                     };
                 } & {
                     header: {
@@ -3328,8 +3463,8 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     query: {
-                        include_password_hashes?: "false" | "true" | undefined;
-                        gzip?: "false" | "true" | undefined;
+                        include_password_hashes?: "true" | "false" | undefined;
+                        gzip?: "true" | "false" | undefined;
                     };
                 } & {
                     header: {
@@ -3348,7 +3483,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     query: {
-                        include_password_hashes?: "false" | "true" | undefined;
+                        include_password_hashes?: "true" | "false" | undefined;
                     };
                 } & {
                     header: {
@@ -3402,7 +3537,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        type: "push" | "email" | "passkey" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
+                        type: "push" | "email" | "passkey" | "webauthn-roaming" | "webauthn-platform" | "phone" | "totp";
                         phone_number?: string | undefined;
                         totp_secret?: string | undefined;
                         credential_id?: string | undefined;
@@ -3542,7 +3677,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 }[];
@@ -3697,7 +3832,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        factor_name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                        factor_name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -3705,7 +3840,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -3718,7 +3853,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        factor_name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                        factor_name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -3730,7 +3865,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -4508,11 +4643,11 @@ declare function init(config: AuthHeroConfig): {
                         invitee: {
                             email?: string | undefined;
                         };
-                        roles?: string[] | undefined;
                         id?: string | undefined;
+                        connection_id?: string | undefined;
                         app_metadata?: Record<string, any> | undefined;
                         user_metadata?: Record<string, any> | undefined;
-                        connection_id?: string | undefined;
+                        roles?: string[] | undefined;
                         ttl_sec?: number | undefined;
                         send_invitation_email?: boolean | undefined;
                     };
@@ -5269,9 +5404,9 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     query: {
+                        from?: string | undefined;
                         page?: string | undefined;
                         include_totals?: string | undefined;
-                        from?: string | undefined;
                         per_page?: string | undefined;
                         take?: string | undefined;
                     };
@@ -10223,7 +10358,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                    prompt: "mfa" | "organizations" | "signup" | "status" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                     language: string;
                 }[];
                 outputFormat: "json";
@@ -10261,7 +10396,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "mfa" | "organizations" | "signup" | "status" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                         language: string;
                     };
                 } & {
@@ -10283,7 +10418,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "mfa" | "organizations" | "signup" | "status" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                         language: string;
                     };
                 } & {
@@ -10307,7 +10442,7 @@ declare function init(config: AuthHeroConfig): {
             $delete: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "mfa" | "organizations" | "signup" | "status" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                         language: string;
                     };
                 } & {
@@ -10399,7 +10534,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                     verification?: {
                                         active?: boolean | undefined;
                                     } | undefined;
@@ -10416,7 +10551,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                                 validation?: {
                                     max_length?: number | undefined;
@@ -10433,7 +10568,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                             } | undefined;
                         } | undefined;
@@ -10533,7 +10668,7 @@ declare function init(config: AuthHeroConfig): {
                                         active?: boolean | undefined;
                                     } | undefined;
                                     signup?: {
-                                        status?: "required" | "optional" | "disabled" | undefined;
+                                        status?: "optional" | "required" | "disabled" | undefined;
                                         verification?: {
                                             active?: boolean | undefined;
                                         } | undefined;
@@ -10550,7 +10685,7 @@ declare function init(config: AuthHeroConfig): {
                                         active?: boolean | undefined;
                                     } | undefined;
                                     signup?: {
-                                        status?: "required" | "optional" | "disabled" | undefined;
+                                        status?: "optional" | "required" | "disabled" | undefined;
                                     } | undefined;
                                     validation?: {
                                         max_length?: number | undefined;
@@ -10567,7 +10702,7 @@ declare function init(config: AuthHeroConfig): {
                                         active?: boolean | undefined;
                                     } | undefined;
                                     signup?: {
-                                        status?: "required" | "optional" | "disabled" | undefined;
+                                        status?: "optional" | "required" | "disabled" | undefined;
                                     } | undefined;
                                 } | undefined;
                             } | undefined;
@@ -10683,7 +10818,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                     verification?: {
                                         active?: boolean | undefined;
                                     } | undefined;
@@ -10700,7 +10835,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                                 validation?: {
                                     max_length?: number | undefined;
@@ -10717,7 +10852,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                             } | undefined;
                         } | undefined;
@@ -10862,7 +10997,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                     verification?: {
                                         active?: boolean | undefined;
                                     } | undefined;
@@ -10879,7 +11014,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                                 validation?: {
                                     max_length?: number | undefined;
@@ -10896,7 +11031,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                             } | undefined;
                         } | undefined;
@@ -11020,7 +11155,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                     verification?: {
                                         active?: boolean | undefined;
                                     } | undefined;
@@ -11037,7 +11172,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                                 validation?: {
                                     max_length?: number | undefined;
@@ -11054,7 +11189,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                             } | undefined;
                         } | undefined;
@@ -11810,7 +11945,7 @@ declare function init(config: AuthHeroConfig): {
                         log_type: string;
                         category: "user_action" | "admin_action" | "system" | "api";
                         actor: {
-                            type: "user" | "client_credentials" | "system" | "admin" | "api_key";
+                            type: "client_credentials" | "user" | "system" | "admin" | "api_key";
                             id?: string | undefined;
                             email?: string | undefined;
                             org_id?: string | undefined;
@@ -12120,7 +12255,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "oidc" | "okta" | "cognito";
+                    provider: "auth0" | "cognito" | "okta" | "oidc";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -12152,7 +12287,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "oidc" | "okta" | "cognito";
+                    provider: "auth0" | "cognito" | "okta" | "oidc";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -12178,7 +12313,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     json: {
                         name: string;
-                        provider: "auth0" | "oidc" | "okta" | "cognito";
+                        provider: "auth0" | "cognito" | "okta" | "oidc";
                         connection: string;
                         credentials: {
                             domain: string;
@@ -12195,7 +12330,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "oidc" | "okta" | "cognito";
+                    provider: "auth0" | "cognito" | "okta" | "oidc";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -12226,7 +12361,7 @@ declare function init(config: AuthHeroConfig): {
                     json: {
                         id?: string | undefined;
                         name?: string | undefined;
-                        provider?: "auth0" | "oidc" | "okta" | "cognito" | undefined;
+                        provider?: "auth0" | "cognito" | "okta" | "oidc" | undefined;
                         connection?: string | undefined;
                         enabled?: boolean | undefined;
                         credentials?: {
@@ -12242,7 +12377,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "oidc" | "okta" | "cognito";
+                    provider: "auth0" | "cognito" | "okta" | "oidc";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -12460,7 +12595,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "i" | "sapi" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -12499,7 +12634,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fn" | "i" | "sapi" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -12538,7 +12673,7 @@ declare function init(config: AuthHeroConfig): {
                     next?: string | undefined;
                 } | {
                     logs: {
-                        type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fn" | "i" | "sapi" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -12592,7 +12727,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "i" | "sapi" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -13833,7 +13968,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "required" | "optional" | "disabled" | undefined;
+                                            status?: "optional" | "required" | "disabled" | undefined;
                                             verification?: {
                                                 active?: boolean | undefined;
                                             } | undefined;
@@ -13850,7 +13985,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "required" | "optional" | "disabled" | undefined;
+                                            status?: "optional" | "required" | "disabled" | undefined;
                                         } | undefined;
                                         validation?: {
                                             max_length?: number | undefined;
@@ -13867,7 +14002,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "required" | "optional" | "disabled" | undefined;
+                                            status?: "optional" | "required" | "disabled" | undefined;
                                         } | undefined;
                                     } | undefined;
                                 } | undefined;
@@ -13987,7 +14122,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "required" | "optional" | "disabled" | undefined;
+                                            status?: "optional" | "required" | "disabled" | undefined;
                                             verification?: {
                                                 active?: boolean | undefined;
                                             } | undefined;
@@ -14004,7 +14139,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "required" | "optional" | "disabled" | undefined;
+                                            status?: "optional" | "required" | "disabled" | undefined;
                                         } | undefined;
                                         validation?: {
                                             max_length?: number | undefined;
@@ -14021,7 +14156,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "required" | "optional" | "disabled" | undefined;
+                                            status?: "optional" | "required" | "disabled" | undefined;
                                         } | undefined;
                                     } | undefined;
                                 } | undefined;
@@ -14400,6 +14535,75 @@ declare function init(config: AuthHeroConfig): {
                     }[];
                     total?: number | undefined;
                     next?: string | undefined;
+                } | {
+                    users: {
+                        created_at: string;
+                        updated_at: string;
+                        connection: string;
+                        user_id: string;
+                        email_verified: boolean;
+                        provider: string;
+                        is_social: boolean;
+                        login_count: number;
+                        name?: string | undefined;
+                        email?: string | undefined;
+                        username?: string | undefined;
+                        given_name?: string | undefined;
+                        phone_number?: string | undefined;
+                        phone_verified?: boolean | undefined;
+                        family_name?: string | undefined;
+                        profileData?: string | undefined;
+                        address?: {
+                            formatted?: string | undefined;
+                            street_address?: string | undefined;
+                            locality?: string | undefined;
+                            region?: string | undefined;
+                            postal_code?: string | undefined;
+                            country?: string | undefined;
+                        } | undefined;
+                        nickname?: string | undefined;
+                        picture?: string | undefined;
+                        locale?: string | undefined;
+                        linked_to?: string | undefined;
+                        app_metadata?: any;
+                        user_metadata?: any;
+                        middle_name?: string | undefined;
+                        preferred_username?: string | undefined;
+                        profile?: string | undefined;
+                        website?: string | undefined;
+                        gender?: string | undefined;
+                        birthdate?: string | undefined;
+                        zoneinfo?: string | undefined;
+                        verify_email?: boolean | undefined;
+                        last_ip?: string | undefined;
+                        last_login?: string | undefined;
+                        identities?: {
+                            connection: string;
+                            user_id: string;
+                            provider: string;
+                            isSocial: boolean;
+                            email?: string | undefined;
+                            email_verified?: boolean | undefined;
+                            phone_number?: string | undefined;
+                            phone_verified?: boolean | undefined;
+                            username?: string | undefined;
+                            access_token?: string | undefined;
+                            access_token_secret?: string | undefined;
+                            refresh_token?: string | undefined;
+                            profileData?: {
+                                [x: string]: any;
+                                email?: string | undefined;
+                                email_verified?: boolean | undefined;
+                                name?: string | undefined;
+                                username?: string | undefined;
+                                given_name?: string | undefined;
+                                phone_number?: string | undefined;
+                                phone_verified?: boolean | undefined;
+                                family_name?: string | undefined;
+                            } | undefined;
+                        }[] | undefined;
+                    }[];
+                    next?: string | undefined;
                 };
                 outputFormat: "json";
                 status: 200;
@@ -14978,7 +15182,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "i" | "sapi" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -15017,7 +15221,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fn" | "i" | "sapi" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -15336,7 +15540,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         from: string;
                         subject: string;
@@ -15357,7 +15561,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         from: string;
                         subject: string;
@@ -15369,7 +15573,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -15392,7 +15596,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    name: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     subject: string;
                 }[];
@@ -15405,7 +15609,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -15418,7 +15622,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -15426,7 +15630,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -15445,7 +15649,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -15453,7 +15657,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         subject: string;
                         syntax?: "liquid" | undefined;
@@ -15465,7 +15669,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -15484,7 +15688,7 @@ declare function init(config: AuthHeroConfig): {
             $patch: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -15492,7 +15696,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template?: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
+                        template?: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
                         body?: string | undefined;
                         from?: string | undefined;
                         subject?: string | undefined;
@@ -15509,7 +15713,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -15517,7 +15721,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template?: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
+                        template?: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
                         body?: string | undefined;
                         from?: string | undefined;
                         subject?: string | undefined;
@@ -15529,7 +15733,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -15548,7 +15752,7 @@ declare function init(config: AuthHeroConfig): {
             $delete: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -15561,7 +15765,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -15578,7 +15782,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16530,7 +16734,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     json: {
                         body?: string | undefined;
-                        screen?: "password" | "identifier" | "signup" | "login" | undefined;
+                        screen?: "identifier" | "signup" | "password" | "login" | undefined;
                         branding?: {
                             colors?: {
                                 primary: string;
@@ -18236,17 +18440,17 @@ declare function init(config: AuthHeroConfig): {
                         email: string;
                         send: "code" | "link";
                         authParams: {
-                            username?: string | undefined;
-                            state?: string | undefined;
                             audience?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                             scope?: string | undefined;
-                            organization?: string | undefined;
+                            username?: string | undefined;
+                            state?: string | undefined;
                             nonce?: string | undefined;
+                            prompt?: string | undefined;
                             act_as?: string | undefined;
                             redirect_uri?: string | undefined;
-                            prompt?: string | undefined;
+                            organization?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
                             code_challenge?: string | undefined;
                             ui_locales?: string | undefined;
@@ -18272,17 +18476,17 @@ declare function init(config: AuthHeroConfig): {
                         phone_number: string;
                         send: "code" | "link";
                         authParams: {
-                            username?: string | undefined;
-                            state?: string | undefined;
                             audience?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                             scope?: string | undefined;
-                            organization?: string | undefined;
+                            username?: string | undefined;
+                            state?: string | undefined;
                             nonce?: string | undefined;
+                            prompt?: string | undefined;
                             act_as?: string | undefined;
                             redirect_uri?: string | undefined;
-                            prompt?: string | undefined;
+                            organization?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
                             code_challenge?: string | undefined;
                             ui_locales?: string | undefined;
@@ -18416,14 +18620,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -18435,14 +18639,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -18457,14 +18661,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -18514,7 +18718,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -18561,7 +18765,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -18613,7 +18817,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -18660,7 +18864,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -18720,7 +18924,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -18767,7 +18971,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -18822,7 +19026,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -18869,7 +19073,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -18924,7 +19128,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -18971,7 +19175,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -19816,7 +20020,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     form: {
                         username: string;
-                        login_selection?: "password" | "code" | undefined;
+                        login_selection?: "code" | "password" | undefined;
                     };
                 };
                 output: {};
@@ -19830,7 +20034,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     form: {
                         username: string;
-                        login_selection?: "password" | "code" | undefined;
+                        login_selection?: "code" | "password" | undefined;
                     };
                 };
                 output: {};
@@ -20195,7 +20399,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "reset-password/request" | "reset-password/code" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -20211,7 +20415,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "reset-password/request" | "reset-password/code" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -20227,7 +20431,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "reset-password/request" | "reset-password/code" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -20363,5 +20567,5 @@ declare function init(config: AuthHeroConfig): {
     createX509Certificate: typeof createX509Certificate;
 };
 
-export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_SYNC_EVENT_PREFIX, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, CodeHookDestination, ControlPlaneSyncDestination, DEFAULT_WFP_DISPATCH_BINDING, DEFAULT_WFP_SCRIPT_NAME_TEMPLATE, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, SignupPage as SignUpPage, SocialButton, Spinner, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, backfillProxyHostsToKv, cleanupOutbox, cleanupSessions, cleanupUserSessions, clientInfoMiddleware, composeHostResolvers, createApplySyncEvents, createAuthMiddleware, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createInMemoryCache, createWfpTenantHostResolver, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, fetchAll, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, isInteractiveClient, isWfpSubdomainSafeTenantId, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, provisionDefaultClients, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, runOutboxRelay, seed, tailwindCss, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wfpTenantHost, wrapProxyAdaptersWithKvPublish, wrapTenantsAdapterWithWfpKvPublish };
-export type { AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, ControlPlaneSyncDestinationOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, EncryptKeyIdResolver, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetServiceToken, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, RolePermissionHooks, RunOutboxRelayConfig, SeedOptions, SeedResult, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantOperationExecutorBinding, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };
+export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_CUSTOM_DOMAINS_PATH, CONTROL_PLANE_CUSTOM_DOMAINS_SCOPE, CONTROL_PLANE_SYNC_EVENT_PREFIX, CONTROL_PLANE_SYNC_SCOPE, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, CodeHookDestination, ControlPlaneSyncDestination, DEFAULT_WFP_DISPATCH_BINDING, DEFAULT_WFP_SCRIPT_NAME_TEMPLATE, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, SignupPage as SignUpPage, SocialButton, Spinner, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, backfillProxyHostsToKv, cleanupOutbox, cleanupSessions, cleanupUserSessions, clientInfoMiddleware, composeHostResolvers, createApplySyncEvents, createAuthMiddleware, createControlPlaneClient, createControlPlaneCustomDomainsAdapter, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createInMemoryCache, createServiceTokenCore, createWfpTenantHostResolver, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, fetchAll, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, isInteractiveClient, isWfpSubdomainSafeTenantId, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, provisionDefaultClients, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, runOutboxRelay, seed, tailwindCss, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wfpTenantHost, wrapProxyAdaptersWithKvPublish, wrapTenantsAdapterWithWfpKvPublish };
+export type { AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetControlPlaneToken, GetServiceToken, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, RolePermissionHooks, RunOutboxRelayConfig, SeedOptions, SeedResult, ServiceTokenResponse, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantOperationExecutorBinding, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };