authhero 8.26.1 → 9.0.0

package/dist/authhero.d.ts

@@ -1,6 +1,6 @@
 import * as hono_utils_types from 'hono/utils/types';
 import * as _authhero_adapter_interfaces from '@authhero/adapter-interfaces';
-import { LoginSession, DataAdapters, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, roleSchema, inviteSchema, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Hook, TenantOperationKind, TenantOperation, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, AuditEvent, OutboxAdapter, CodesAdapter, HooksAdapter, Client, LogsDataAdapter, LogInsert, UserDataAdapter, ProxyRoutesAdapter, CustomDomainsAdapter, TenantsDataAdapter, KeysAdapter, ListParams, CodeExecutionResult } from '@authhero/adapter-interfaces';
+import { LoginSession, DataAdapters, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, LinkCandidate, roleSchema, inviteSchema, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Hook, TenantOperationKind, TenantOperation, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, OutboxAdapter, AuditEvent, CodesAdapter, HooksAdapter, Client, LogsDataAdapter, LogInsert, UserDataAdapter, ProxyRoutesAdapter, CustomDomainsAdapter, TenantsDataAdapter, KeysAdapter, ListParams, CodeExecutionResult } from '@authhero/adapter-interfaces';
 export * from '@authhero/adapter-interfaces';
 import * as hono_types from 'hono/types';
 import * as hono_utils_http_status from 'hono/utils/http-status';
@@ -10,7 +10,7 @@ import { SamlSigner } from '@authhero/saml/core';
 export { HttpSamlSigner, SamlSigner } from '@authhero/saml/core';
 import { Context, Hono, Next, Handler, MiddlewareHandler } from 'hono';
 import * as _authhero_proxy from '@authhero/proxy';
-import { ResolvedHost, KvNamespaceWriter } from '@authhero/proxy';
+import { KvNamespaceWriter, ResolvedHost } from '@authhero/proxy';
 export { PROXY_RESOLVE_HOST_SCOPE, ServiceBindingFetcher, createServiceBindingFetch } from '@authhero/proxy';
 import { FC, PropsWithChildren, JSXNode } from 'hono/jsx';
 import * as hono_jsx_jsx_dev_runtime from 'hono/jsx/jsx-dev-runtime';
@@ -691,6 +691,13 @@ type HookEvent = {
         ja3?: string;
         ja4?: string;
     };
+    /**
+     * Candidate primary accounts the built-in email-linking policy would consider,
+     * exposed only to `post-user-login` code hooks that opt in via
+     * `metadata.resolve_link_candidates`. Absent on the event for every other hook
+     * (and trigger).
+     */
+    link_candidates?: LinkCandidate[];
 };
 type TokenAPI = {
     createServiceToken: (params: {
@@ -2722,11 +2729,11 @@ interface CodesCleanupParams {
 }
 /**
  * Delete codes that expired more than the retention window ago.
- * Intended for use in a scheduled handler / cron job.
  *
- * Codes are short-lived by design but nothing else prunes them, so without a
- * scheduled call to this the table grows without bound. See the Data Retention
- * deployment guide for the full set of tables that need sweeping.
+ * Prefer `runRetention`, which calls this along with every other prunable
+ * table — scheduling one call means a future prunable table is covered without
+ * editing your handler. Use this directly only when you want to sweep `codes`
+ * on its own schedule.
  *
  * @example
  * ```ts
@@ -2994,6 +3001,91 @@ interface RunOutboxRelayConfig {
  */
 declare function runOutboxRelay(config: RunOutboxRelayConfig): Promise<void>;
 
+interface RunRetentionConfig {
+    /** Same `DataAdapters` passed to `init()`. */
+    dataAdapter: DataAdapters;
+    /** Grace period past expiry for `codes`. Default 1. */
+    codesRetentionDays?: number;
+    /** Days to keep processed/dead-lettered outbox events. Default 7. */
+    outboxRetentionDays?: number;
+    /**
+     * Scope the session sweep to a single tenant. Codes and outbox events are
+     * always swept globally — an expired row is dead regardless of who owns it.
+     */
+    tenantId?: string;
+}
+type RetentionSweepStatus = "swept" | "skipped" | "failed";
+interface RetentionSweepBase {
+    /** Table(s) this sweep covers, for logging. */
+    table: string;
+}
+interface RetentionSweepSwept extends RetentionSweepBase {
+    status: "swept";
+    /**
+     * Rows deleted. Absent when the underlying adapter reports no count —
+     * `sessionCleanup` returns void, so a session sweep succeeds without one.
+     */
+    deleted?: number;
+}
+interface RetentionSweepSkipped extends RetentionSweepBase {
+    status: "skipped";
+    /** Why the sweep was skipped — an adapter that does not support it. */
+    reason: string;
+}
+interface RetentionSweepFailed extends RetentionSweepBase {
+    status: "failed";
+    error: unknown;
+}
+/**
+ * Discriminated on `status`, so a sweep cannot carry fields that contradict
+ * it — no `error` on a successful sweep, no `deleted` on a failed one.
+ */
+type RetentionSweep = RetentionSweepSwept | RetentionSweepSkipped | RetentionSweepFailed;
+interface RunRetentionResult {
+    sweeps: RetentionSweep[];
+}
+/**
+ * Thrown when one or more sweeps failed. The other sweeps still ran — check
+ * `result` for what succeeded.
+ */
+declare class RetentionSweepError extends Error {
+    readonly result: RunRetentionResult;
+    readonly errors: unknown[];
+    constructor(result: RunRetentionResult, errors: unknown[]);
+}
+/**
+ * Sweep every prunable AuthHero table in one call.
+ *
+ * This is the entry point for retention — a deployment that schedules this
+ * daily needs nothing else, and gains coverage of future prunable tables
+ * without editing its handler.
+ *
+ * Covers `codes`, `outbox_events`, and (where the adapter supports it)
+ * `sessions` / `refresh_tokens` / `login_sessions`. It does **not** drain the
+ * outbox: delivery is `runOutboxRelay`'s job, and the two are scheduled
+ * independently. Running both is safe — the relay's own cleanup pass and this
+ * one are idempotent.
+ *
+ * `logs` is deliberately excluded. Audit-retention obligations differ per
+ * deployment, so AuthHero will not silently delete audit rows on your behalf;
+ * prune `logs` on `date` yourself.
+ *
+ * Every sweep runs even if an earlier one throws, so one broken adapter method
+ * cannot stop the rest of the tables being pruned. If any sweep failed, a
+ * `RetentionSweepError` carrying the partial result is thrown once at the end.
+ *
+ * @example
+ * ```ts
+ * export default {
+ *   async scheduled(_event, env) {
+ *     const { sweeps } = await runRetention({ dataAdapter });
+ *     console.log(sweeps);
+ *   },
+ * };
+ * ```
+ */
+declare function runRetention(config: RunRetentionConfig): Promise<RunRetentionResult>;
+
 declare class LogsDestination implements EventDestination {
     name: string;
     private logs;
@@ -3856,6 +3948,40 @@ interface ResolveSigningKeysOptions {
     type?: string;
 }
 declare function resolveSigningKeys(keys: KeysAdapter, tenantId: string, modeOption: SigningKeyModeOption | undefined, opts: ResolveSigningKeysOptions): Promise<SigningKey[]>;
+interface EnsureSigningKeyOptions {
+    /**
+     * When set, the key is created tenant-scoped (`tenant_id` stamped) and the
+     * existence check is scoped to that tenant. Omit for a control-plane key
+     * (no `tenant_id`), which `resolveSigningKeys` resolves in both modes — as
+     * the primary key in `"control-plane"` mode and as the fallback in
+     * `"tenant"` mode. Control-plane scope is the right default for a freshly
+     * provisioned WFP tenant.
+     */
+    tenantId?: string;
+    /** Cert CN. Falls back to the tenant id, then to `"authhero"`. */
+    name?: string;
+    /** Defaults to `"jwt_signing"`. */
+    type?: SigningKey["type"];
+}
+interface EnsureSigningKeyResult {
+    /** True when a new key was minted; false when a signable key already existed. */
+    created: boolean;
+    key: SigningKey;
+}
+/**
+ * Guarantees the target scope holds at least one *signable* key — one carrying
+ * private material (`pkcs7` + `cert`), not merely a projected public verify key.
+ *
+ * A freshly provisioned WFP tenant inherits only the control plane's public
+ * keys (private material stripped at the boundary), so it can serve JWKS and
+ * `/authorize` but 500s at `/oauth/token` with nothing to sign — issue #1181.
+ * Calling this at provision time closes that gap by minting the tenant's own
+ * RS256 key locally (private material never crosses the control-plane boundary).
+ *
+ * Create-if-missing and idempotent: a scope that already has a signable key is
+ * left untouched, so it is safe to call on every provision and re-sync.
+ */
+declare function ensureSigningKey(keys: KeysAdapter, opts?: EnsureSigningKeyOptions): Promise<EnsureSigningKeyResult>;
 
 declare const USERNAME_PASSWORD_PROVIDER = "auth0";
 
@@ -3965,6 +4091,26 @@ interface AccountLinkingOptions {
      * @default false
      */
     copyUserMetadata?: boolean;
+    /**
+     * When the link is performed, fill in *absent* root profile fields on the
+     * primary from the secondary — e.g. a secondary that has a `birthdate` the
+     * primary lacks, or a phone number an email primary doesn't carry.
+     *
+     * Fill-if-absent only: a field already set on the primary is never
+     * overwritten (primary stays authoritative), matching `copyUserMetadata`.
+     * Identifier and verification fields are never touched — `email`,
+     * `email_verified`, `phone_verified`, `username`, `provider`, `connection`
+     * are excluded — so this can't rewrite a login identifier. In particular an
+     * sms primary already carries a `phone_number`, so its identifier is never
+     * filled over; the promotion only reaches a primary that has no phone yet.
+     *
+     * Off by default to match Auth0, which keeps a linked identity's own
+     * attributes under `identities[].profileData` rather than promoting them to
+     * the merged user's root profile.
+     *
+     * @default false
+     */
+    copyProfileFields?: boolean;
 }
 /**
  * Trigger-agnostic event handler used by all `account-linking` template
@@ -4072,8 +4218,8 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     query: {
-                        include_password_hashes?: "false" | "true" | undefined;
-                        gzip?: "false" | "true" | undefined;
+                        include_password_hashes?: "true" | "false" | undefined;
+                        gzip?: "true" | "false" | undefined;
                     };
                 } & {
                     header: {
@@ -4086,8 +4232,8 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     query: {
-                        include_password_hashes?: "false" | "true" | undefined;
-                        gzip?: "false" | "true" | undefined;
+                        include_password_hashes?: "true" | "false" | undefined;
+                        gzip?: "true" | "false" | undefined;
                     };
                 } & {
                     header: {
@@ -4106,7 +4252,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     query: {
-                        include_password_hashes?: "false" | "true" | undefined;
+                        include_password_hashes?: "true" | "false" | undefined;
                     };
                 } & {
                     header: {
@@ -4160,7 +4306,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        type: "push" | "email" | "passkey" | "webauthn-roaming" | "webauthn-platform" | "phone" | "totp";
+                        type: "email" | "phone" | "push" | "passkey" | "totp" | "webauthn-roaming" | "webauthn-platform";
                         phone_number?: string | undefined;
                         totp_secret?: string | undefined;
                         credential_id?: string | undefined;
@@ -4300,7 +4446,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
+                    name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 }[];
@@ -4455,7 +4601,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        factor_name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
+                        factor_name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -4463,7 +4609,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
+                    name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -4476,7 +4622,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        factor_name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
+                        factor_name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -4488,7 +4634,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
+                    name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -5260,19 +5406,19 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     json: {
                         client_id: string;
-                        inviter: {
-                            name?: string | undefined;
-                        };
                         invitee: {
                             email?: string | undefined;
                         };
+                        inviter: {
+                            name?: string | undefined;
+                        };
                         id?: string | undefined;
                         app_metadata?: Record<string, any> | undefined;
                         user_metadata?: Record<string, any> | undefined;
                         connection_id?: string | undefined;
                         roles?: string[] | undefined;
-                        ttl_sec?: number | undefined;
                         send_invitation_email?: boolean | undefined;
+                        ttl_sec?: number | undefined;
                     };
                 };
                 output: {
@@ -6027,9 +6173,9 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     query: {
+                        from?: string | undefined;
                         page?: string | undefined;
                         include_totals?: string | undefined;
-                        from?: string | undefined;
                         per_page?: string | undefined;
                         take?: string | undefined;
                     };
@@ -10981,7 +11127,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    prompt: "status" | "organizations" | "signup" | "login" | "mfa" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
+                    prompt: "mfa" | "organizations" | "signup" | "status" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                     language: string;
                 }[];
                 outputFormat: "json";
@@ -11019,7 +11165,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        prompt: "status" | "organizations" | "signup" | "login" | "mfa" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
+                        prompt: "mfa" | "organizations" | "signup" | "status" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                         language: string;
                     };
                 } & {
@@ -11041,7 +11187,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        prompt: "status" | "organizations" | "signup" | "login" | "mfa" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
+                        prompt: "mfa" | "organizations" | "signup" | "status" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                         language: string;
                     };
                 } & {
@@ -11065,7 +11211,7 @@ declare function init(config: AuthHeroConfig): {
             $delete: {
                 input: {
                     param: {
-                        prompt: "status" | "organizations" | "signup" | "login" | "mfa" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
+                        prompt: "mfa" | "organizations" | "signup" | "status" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                         language: string;
                     };
                 } & {
@@ -11157,7 +11303,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                     verification?: {
                                         active?: boolean | undefined;
                                     } | undefined;
@@ -11174,7 +11320,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                                 validation?: {
                                     max_length?: number | undefined;
@@ -11191,7 +11337,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                             } | undefined;
                         } | undefined;
@@ -11291,7 +11437,7 @@ declare function init(config: AuthHeroConfig): {
                                         active?: boolean | undefined;
                                     } | undefined;
                                     signup?: {
-                                        status?: "required" | "optional" | "disabled" | undefined;
+                                        status?: "optional" | "required" | "disabled" | undefined;
                                         verification?: {
                                             active?: boolean | undefined;
                                         } | undefined;
@@ -11308,7 +11454,7 @@ declare function init(config: AuthHeroConfig): {
                                         active?: boolean | undefined;
                                     } | undefined;
                                     signup?: {
-                                        status?: "required" | "optional" | "disabled" | undefined;
+                                        status?: "optional" | "required" | "disabled" | undefined;
                                     } | undefined;
                                     validation?: {
                                         max_length?: number | undefined;
@@ -11325,7 +11471,7 @@ declare function init(config: AuthHeroConfig): {
                                         active?: boolean | undefined;
                                     } | undefined;
                                     signup?: {
-                                        status?: "required" | "optional" | "disabled" | undefined;
+                                        status?: "optional" | "required" | "disabled" | undefined;
                                     } | undefined;
                                 } | undefined;
                             } | undefined;
@@ -11441,7 +11587,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                     verification?: {
                                         active?: boolean | undefined;
                                     } | undefined;
@@ -11458,7 +11604,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                                 validation?: {
                                     max_length?: number | undefined;
@@ -11475,7 +11621,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                             } | undefined;
                         } | undefined;
@@ -11620,7 +11766,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                     verification?: {
                                         active?: boolean | undefined;
                                     } | undefined;
@@ -11637,7 +11783,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                                 validation?: {
                                     max_length?: number | undefined;
@@ -11654,7 +11800,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                             } | undefined;
                         } | undefined;
@@ -11778,7 +11924,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                     verification?: {
                                         active?: boolean | undefined;
                                     } | undefined;
@@ -11795,7 +11941,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                                 validation?: {
                                     max_length?: number | undefined;
@@ -11812,7 +11958,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "required" | "optional" | "disabled" | undefined;
+                                    status?: "optional" | "required" | "disabled" | undefined;
                                 } | undefined;
                             } | undefined;
                         } | undefined;
@@ -11964,7 +12110,7 @@ declare function init(config: AuthHeroConfig): {
                     tenant_id: string;
                     created_at: string;
                     updated_at: string;
-                    deploymentStatus: "deployed" | "failed" | "not_required";
+                    deploymentStatus: "failed" | "deployed" | "not_required";
                     secrets?: {
                         [x: string]: string;
                     } | undefined;
@@ -12054,7 +12200,7 @@ declare function init(config: AuthHeroConfig): {
                     tenant_id: string;
                     created_at: string;
                     updated_at: string;
-                    deploymentStatus: "deployed" | "failed" | "not_required";
+                    deploymentStatus: "failed" | "deployed" | "not_required";
                     secrets?: {
                         [x: string]: string;
                     } | undefined;
@@ -12568,7 +12714,7 @@ declare function init(config: AuthHeroConfig): {
                         log_type: string;
                         category: "user_action" | "admin_action" | "system" | "api";
                         actor: {
-                            type: "user" | "client_credentials" | "system" | "admin" | "api_key";
+                            type: "client_credentials" | "user" | "system" | "admin" | "api_key";
                             id?: string | undefined;
                             email?: string | undefined;
                             org_id?: string | undefined;
@@ -12602,6 +12748,7 @@ declare function init(config: AuthHeroConfig): {
                             body?: hono_utils_types.JSONValue | undefined;
                             user_agent?: string | undefined;
                             correlation_id?: string | undefined;
+                            redirect_uri?: string | undefined;
                         };
                         hostname: string;
                         timestamp: string;
@@ -12878,7 +13025,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "cognito" | "okta" | "oidc";
+                    provider: "auth0" | "oidc" | "okta" | "cognito";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -12910,7 +13057,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "cognito" | "okta" | "oidc";
+                    provider: "auth0" | "oidc" | "okta" | "cognito";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -12936,7 +13083,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     json: {
                         name: string;
-                        provider: "auth0" | "cognito" | "okta" | "oidc";
+                        provider: "auth0" | "oidc" | "okta" | "cognito";
                         connection: string;
                         credentials: {
                             domain: string;
@@ -12953,7 +13100,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "cognito" | "okta" | "oidc";
+                    provider: "auth0" | "oidc" | "okta" | "cognito";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -12984,7 +13131,7 @@ declare function init(config: AuthHeroConfig): {
                     json: {
                         id?: string | undefined;
                         name?: string | undefined;
-                        provider?: "auth0" | "cognito" | "okta" | "oidc" | undefined;
+                        provider?: "auth0" | "oidc" | "okta" | "cognito" | undefined;
                         connection?: string | undefined;
                         enabled?: boolean | undefined;
                         credentials?: {
@@ -13000,7 +13147,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "cognito" | "okta" | "oidc";
+                    provider: "auth0" | "oidc" | "okta" | "cognito";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -13218,7 +13365,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fertft" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -13257,7 +13404,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fertft" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -13296,7 +13443,7 @@ declare function init(config: AuthHeroConfig): {
                     next?: string | undefined;
                 } | {
                     logs: {
-                        type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fertft" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -13350,7 +13497,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fertft" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -14591,7 +14738,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "required" | "optional" | "disabled" | undefined;
+                                            status?: "optional" | "required" | "disabled" | undefined;
                                             verification?: {
                                                 active?: boolean | undefined;
                                             } | undefined;
@@ -14608,7 +14755,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "required" | "optional" | "disabled" | undefined;
+                                            status?: "optional" | "required" | "disabled" | undefined;
                                         } | undefined;
                                         validation?: {
                                             max_length?: number | undefined;
@@ -14625,7 +14772,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "required" | "optional" | "disabled" | undefined;
+                                            status?: "optional" | "required" | "disabled" | undefined;
                                         } | undefined;
                                     } | undefined;
                                 } | undefined;
@@ -14745,7 +14892,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "required" | "optional" | "disabled" | undefined;
+                                            status?: "optional" | "required" | "disabled" | undefined;
                                             verification?: {
                                                 active?: boolean | undefined;
                                             } | undefined;
@@ -14762,7 +14909,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "required" | "optional" | "disabled" | undefined;
+                                            status?: "optional" | "required" | "disabled" | undefined;
                                         } | undefined;
                                         validation?: {
                                             max_length?: number | undefined;
@@ -14779,7 +14926,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "required" | "optional" | "disabled" | undefined;
+                                            status?: "optional" | "required" | "disabled" | undefined;
                                         } | undefined;
                                     } | undefined;
                                 } | undefined;
@@ -15478,8 +15625,6 @@ declare function init(config: AuthHeroConfig): {
                         locale?: string | undefined;
                         linked_to?: string | undefined;
                         profileData?: string | undefined;
-                        app_metadata?: any;
-                        user_metadata?: any;
                         middle_name?: string | undefined;
                         preferred_username?: string | undefined;
                         profile?: string | undefined;
@@ -15495,7 +15640,6 @@ declare function init(config: AuthHeroConfig): {
                             postal_code?: string | undefined;
                             country?: string | undefined;
                         } | undefined;
-                        email_verified?: boolean | undefined;
                         last_ip?: string | undefined;
                         last_login?: string | undefined;
                         user_id?: string | undefined;
@@ -15505,6 +15649,9 @@ declare function init(config: AuthHeroConfig): {
                         registration_completed_at?: string | undefined;
                         verify_email?: boolean | undefined;
                         password?: string | undefined;
+                        email_verified?: boolean | undefined;
+                        app_metadata?: any;
+                        user_metadata?: any;
                     };
                 };
                 output: {};
@@ -15805,7 +15952,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fertft" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -15844,7 +15991,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fertft" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -16163,7 +16310,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         from: string;
                         subject: string;
@@ -16184,7 +16331,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         from: string;
                         subject: string;
@@ -16196,7 +16343,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -16219,7 +16366,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    name: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     subject: string;
                 }[];
@@ -16232,7 +16379,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16245,7 +16392,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16253,7 +16400,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -16272,7 +16419,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16280,7 +16427,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         subject: string;
                         syntax?: "liquid" | undefined;
@@ -16292,7 +16439,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -16311,7 +16458,7 @@ declare function init(config: AuthHeroConfig): {
             $patch: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16319,7 +16466,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template?: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
+                        template?: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
                         body?: string | undefined;
                         from?: string | undefined;
                         subject?: string | undefined;
@@ -16336,7 +16483,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16344,7 +16491,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template?: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
+                        template?: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
                         body?: string | undefined;
                         from?: string | undefined;
                         subject?: string | undefined;
@@ -16356,7 +16503,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -16375,7 +16522,7 @@ declare function init(config: AuthHeroConfig): {
             $delete: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16388,7 +16535,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16405,7 +16552,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16688,7 +16835,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "disabled" | "pending" | "ready" | "pending_verification";
+                    status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -16729,7 +16876,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "disabled" | "pending" | "ready" | "pending_verification";
+                    status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -16793,7 +16940,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "disabled" | "pending" | "ready" | "pending_verification";
+                    status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -16840,7 +16987,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "disabled" | "pending" | "ready" | "pending_verification";
+                    status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -16886,7 +17033,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "disabled" | "pending" | "ready" | "pending_verification";
+                    status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -16927,7 +17074,7 @@ declare function init(config: AuthHeroConfig): {
                     type: "auth0_managed_certs" | "self_managed_certs";
                     custom_domain_id: string;
                     primary: boolean;
-                    status: "disabled" | "pending" | "ready" | "pending_verification";
+                    status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
                     custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
@@ -17357,7 +17504,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     json: {
                         body?: string | undefined;
-                        screen?: "password" | "identifier" | "signup" | "login" | undefined;
+                        screen?: "identifier" | "signup" | "password" | "login" | undefined;
                         branding?: {
                             colors?: {
                                 primary: string;
@@ -17601,7 +17748,7 @@ declare function init(config: AuthHeroConfig): {
                 output: {
                     id: string;
                     trigger_id: string;
-                    status: "unspecified" | "pending" | "final" | "partial" | "canceled" | "suspended";
+                    status: "pending" | "unspecified" | "final" | "partial" | "canceled" | "suspended";
                     results: {
                         action_name: string;
                         error: {
@@ -19063,17 +19210,17 @@ declare function init(config: AuthHeroConfig): {
                         email: string;
                         send: "code" | "link";
                         authParams: {
-                            username?: string | undefined;
                             audience?: string | undefined;
                             scope?: string | undefined;
+                            redirect_uri?: string | undefined;
+                            organization?: string | undefined;
+                            username?: string | undefined;
                             state?: string | undefined;
+                            act_as?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
-                            prompt?: string | undefined;
-                            act_as?: string | undefined;
-                            redirect_uri?: string | undefined;
-                            organization?: string | undefined;
                             nonce?: string | undefined;
+                            prompt?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
                             code_challenge?: string | undefined;
                             ui_locales?: string | undefined;
@@ -19099,17 +19246,17 @@ declare function init(config: AuthHeroConfig): {
                         phone_number: string;
                         send: "code" | "link";
                         authParams: {
-                            username?: string | undefined;
                             audience?: string | undefined;
                             scope?: string | undefined;
+                            redirect_uri?: string | undefined;
+                            organization?: string | undefined;
+                            username?: string | undefined;
                             state?: string | undefined;
+                            act_as?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
-                            prompt?: string | undefined;
-                            act_as?: string | undefined;
-                            redirect_uri?: string | undefined;
-                            organization?: string | undefined;
                             nonce?: string | undefined;
+                            prompt?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
                             code_challenge?: string | undefined;
                             ui_locales?: string | undefined;
@@ -20643,7 +20790,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     form: {
                         username: string;
-                        login_selection?: "password" | "code" | undefined;
+                        login_selection?: "code" | "password" | undefined;
                     };
                 };
                 output: {};
@@ -20657,7 +20804,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     form: {
                         username: string;
-                        login_selection?: "password" | "code" | undefined;
+                        login_selection?: "code" | "password" | undefined;
                     };
                 };
                 output: {};
@@ -21022,7 +21169,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        screen: "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21038,7 +21185,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21054,7 +21201,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21074,7 +21221,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     param: {
-                        screen: "signup" | "login" | "reset-password" | "consent" | "enter-password" | "impersonate" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "consent" | "login" | "reset-password" | "enter-password" | "impersonate" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21092,7 +21239,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "login" | "reset-password" | "consent" | "enter-password" | "impersonate" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "consent" | "login" | "reset-password" | "enter-password" | "impersonate" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21190,5 +21337,5 @@ declare function init(config: AuthHeroConfig): {
     createX509Certificate: typeof createX509Certificate;
 };
 
-export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_CUSTOM_DOMAINS_PATH, CONTROL_PLANE_CUSTOM_DOMAINS_SCOPE, CONTROL_PLANE_SYNC_EVENT_PREFIX, CONTROL_PLANE_SYNC_SCOPE, CONTROL_PLANE_TENANT_MEMBERS_PATH, CONTROL_PLANE_TENANT_MEMBERS_SCOPE, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, CodeHookDestination, ControlPlaneSyncDestination, DEFAULT_WFP_DISPATCH_BINDING, DEFAULT_WFP_SCRIPT_NAME_TEMPLATE, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, SignupPage as SignUpPage, SocialButton, Spinner, TenantInvitationNotFoundError, TenantMembersNotFoundError, TenantOrganizationNotFoundError, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, backfillProxyHostsToKv, cleanupCodes, cleanupOutbox, cleanupSessions, cleanupUserSessions, clientInfoMiddleware, composeHostResolvers, createApplySyncEvents, createAuthMiddleware, createControlPlaneClient, createControlPlaneCustomDomainsAdapter, createControlPlaneTenantMembersAdapter, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createInMemoryCache, createLocalTenantMembersBackend, createServiceTokenCore, createTenantMembersControlPlaneApp, createTenantMembersRoutes, createWfpTenantHostResolver, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, fetchAll, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, isInteractiveClient, isWfpSubdomainSafeTenantId, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, provisionDefaultClients, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, runOutboxRelay, seed, tailwindCss, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wfpTenantHost, wrapProxyAdaptersWithKvPublish, wrapTenantsAdapterWithWfpKvPublish };
-export type { AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, CodesCleanupParams, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, ControlPlaneTenantMembersOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetControlPlaneToken, GetServiceToken, GetTenantMembersBackend, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, LocalTenantMembersBackendOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, RolePermissionHooks, RunOutboxRelayConfig, SeedOptions, SeedResult, ServiceTokenResponse, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantInvitation, TenantInvitationInput, TenantMember, TenantMembersBackend, TenantMembersControlPlaneOptions, TenantMembersListResult, TenantMembersPageParams, TenantOperationExecutorBinding, TenantRole, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };
+export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_CUSTOM_DOMAINS_PATH, CONTROL_PLANE_CUSTOM_DOMAINS_SCOPE, CONTROL_PLANE_SYNC_EVENT_PREFIX, CONTROL_PLANE_SYNC_SCOPE, CONTROL_PLANE_TENANT_MEMBERS_PATH, CONTROL_PLANE_TENANT_MEMBERS_SCOPE, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, CodeHookDestination, ControlPlaneSyncDestination, DEFAULT_WFP_DISPATCH_BINDING, DEFAULT_WFP_SCRIPT_NAME_TEMPLATE, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, RetentionSweepError, SignupPage as SignUpPage, SocialButton, Spinner, TenantInvitationNotFoundError, TenantMembersNotFoundError, TenantOrganizationNotFoundError, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, backfillProxyHostsToKv, cleanupCodes, cleanupOutbox, cleanupSessions, cleanupUserSessions, clientInfoMiddleware, composeHostResolvers, createApplySyncEvents, createAuthMiddleware, createControlPlaneClient, createControlPlaneCustomDomainsAdapter, createControlPlaneTenantMembersAdapter, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createInMemoryCache, createLocalTenantMembersBackend, createServiceTokenCore, createTenantMembersControlPlaneApp, createTenantMembersRoutes, createWfpTenantHostResolver, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, ensureSigningKey, fetchAll, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, isInteractiveClient, isWfpSubdomainSafeTenantId, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, provisionDefaultClients, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, runOutboxRelay, runRetention, seed, tailwindCss, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wfpTenantHost, wrapProxyAdaptersWithKvPublish, wrapTenantsAdapterWithWfpKvPublish };
+export type { AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, CodesCleanupParams, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, ControlPlaneTenantMembersOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureSigningKeyOptions, EnsureSigningKeyResult, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetControlPlaneToken, GetServiceToken, GetTenantMembersBackend, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, LocalTenantMembersBackendOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, RetentionSweep, RetentionSweepFailed, RetentionSweepSkipped, RetentionSweepStatus, RetentionSweepSwept, RolePermissionHooks, RunOutboxRelayConfig, RunRetentionConfig, RunRetentionResult, SeedOptions, SeedResult, ServiceTokenResponse, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantInvitation, TenantInvitationInput, TenantMember, TenantMembersBackend, TenantMembersControlPlaneOptions, TenantMembersListResult, TenantMembersPageParams, TenantOperationExecutorBinding, TenantRole, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };