authhero 8.27.0 → 9.1.0

package/dist/authhero.d.ts

@@ -1,6 +1,6 @@
 import * as hono_utils_types from 'hono/utils/types';
 import * as _authhero_adapter_interfaces from '@authhero/adapter-interfaces';
-import { LoginSession, DataAdapters, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, roleSchema, inviteSchema, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Hook, TenantOperationKind, TenantOperation, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, AuditEvent, OutboxAdapter, CodesAdapter, HooksAdapter, Client, LogsDataAdapter, LogInsert, UserDataAdapter, ProxyRoutesAdapter, CustomDomainsAdapter, TenantsDataAdapter, KeysAdapter, ListParams, CodeExecutionResult } from '@authhero/adapter-interfaces';
+import { LoginSession, DataAdapters, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, LinkCandidate, roleSchema, inviteSchema, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Hook, TenantOperationKind, TenantOperation, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, OutboxAdapter, AuditEvent, CodesAdapter, HooksAdapter, Client, LogsDataAdapter, LogInsert, UserDataAdapter, ProxyRoutesAdapter, CustomDomainsAdapter, TenantsDataAdapter, KeysAdapter, ListParams, CodeExecutionResult } from '@authhero/adapter-interfaces';
 export * from '@authhero/adapter-interfaces';
 import * as hono_types from 'hono/types';
 import * as hono_utils_http_status from 'hono/utils/http-status';
@@ -10,7 +10,7 @@ import { SamlSigner } from '@authhero/saml/core';
 export { HttpSamlSigner, SamlSigner } from '@authhero/saml/core';
 import { Context, Hono, Next, Handler, MiddlewareHandler } from 'hono';
 import * as _authhero_proxy from '@authhero/proxy';
-import { ResolvedHost, KvNamespaceWriter } from '@authhero/proxy';
+import { KvNamespaceWriter, ResolvedHost } from '@authhero/proxy';
 export { PROXY_RESOLVE_HOST_SCOPE, ServiceBindingFetcher, createServiceBindingFetch } from '@authhero/proxy';
 import { FC, PropsWithChildren, JSXNode } from 'hono/jsx';
 import * as hono_jsx_jsx_dev_runtime from 'hono/jsx/jsx-dev-runtime';
@@ -568,8 +568,8 @@ declare const enrichedClientSchema: z.ZodObject<{
             }>>;
         }, z.core.$strip>>>;
         enabled_clients: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
-        response_type: z.ZodOptional<z.ZodCustom<_authhero_adapter_interfaces.AuthorizationResponseType, _authhero_adapter_interfaces.AuthorizationResponseType>>;
-        response_mode: z.ZodOptional<z.ZodCustom<_authhero_adapter_interfaces.AuthorizationResponseMode, _authhero_adapter_interfaces.AuthorizationResponseMode>>;
+        response_type: z.ZodOptional<z.ZodEnum<typeof _authhero_adapter_interfaces.AuthorizationResponseType>>;
+        response_mode: z.ZodOptional<z.ZodEnum<typeof _authhero_adapter_interfaces.AuthorizationResponseMode>>;
         is_domain_connection: z.ZodOptional<z.ZodBoolean>;
         show_as_button: z.ZodOptional<z.ZodBoolean>;
         metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
@@ -691,6 +691,13 @@ type HookEvent = {
         ja3?: string;
         ja4?: string;
     };
+    /**
+     * Candidate primary accounts the built-in email-linking policy would consider,
+     * exposed only to `post-user-login` code hooks that opt in via
+     * `metadata.resolve_link_candidates`. Absent on the event for every other hook
+     * (and trigger).
+     */
+    link_candidates?: LinkCandidate[];
 };
 type TokenAPI = {
     createServiceToken: (params: {
@@ -3941,6 +3948,40 @@ interface ResolveSigningKeysOptions {
     type?: string;
 }
 declare function resolveSigningKeys(keys: KeysAdapter, tenantId: string, modeOption: SigningKeyModeOption | undefined, opts: ResolveSigningKeysOptions): Promise<SigningKey[]>;
+interface EnsureSigningKeyOptions {
+    /**
+     * When set, the key is created tenant-scoped (`tenant_id` stamped) and the
+     * existence check is scoped to that tenant. Omit for a control-plane key
+     * (no `tenant_id`), which `resolveSigningKeys` resolves in both modes — as
+     * the primary key in `"control-plane"` mode and as the fallback in
+     * `"tenant"` mode. Control-plane scope is the right default for a freshly
+     * provisioned WFP tenant.
+     */
+    tenantId?: string;
+    /** Cert CN. Falls back to the tenant id, then to `"authhero"`. */
+    name?: string;
+    /** Defaults to `"jwt_signing"`. */
+    type?: SigningKey["type"];
+}
+interface EnsureSigningKeyResult {
+    /** True when a new key was minted; false when a signable key already existed. */
+    created: boolean;
+    key: SigningKey;
+}
+/**
+ * Guarantees the target scope holds at least one *signable* key — one carrying
+ * private material (`pkcs7` + `cert`), not merely a projected public verify key.
+ *
+ * A freshly provisioned WFP tenant inherits only the control plane's public
+ * keys (private material stripped at the boundary), so it can serve JWKS and
+ * `/authorize` but 500s at `/oauth/token` with nothing to sign — issue #1181.
+ * Calling this at provision time closes that gap by minting the tenant's own
+ * RS256 key locally (private material never crosses the control-plane boundary).
+ *
+ * Create-if-missing and idempotent: a scope that already has a signable key is
+ * left untouched, so it is safe to call on every provision and re-sync.
+ */
+declare function ensureSigningKey(keys: KeysAdapter, opts?: EnsureSigningKeyOptions): Promise<EnsureSigningKeyResult>;
 
 declare const USERNAME_PASSWORD_PROVIDER = "auth0";
 
@@ -4050,6 +4091,26 @@ interface AccountLinkingOptions {
      * @default false
      */
     copyUserMetadata?: boolean;
+    /**
+     * When the link is performed, fill in *absent* root profile fields on the
+     * primary from the secondary — e.g. a secondary that has a `birthdate` the
+     * primary lacks, or a phone number an email primary doesn't carry.
+     *
+     * Fill-if-absent only: a field already set on the primary is never
+     * overwritten (primary stays authoritative), matching `copyUserMetadata`.
+     * Identifier and verification fields are never touched — `email`,
+     * `email_verified`, `phone_verified`, `username`, `provider`, `connection`
+     * are excluded — so this can't rewrite a login identifier. In particular an
+     * sms primary already carries a `phone_number`, so its identifier is never
+     * filled over; the promotion only reaches a primary that has no phone yet.
+     *
+     * Off by default to match Auth0, which keeps a linked identity's own
+     * attributes under `identities[].profileData` rather than promoting them to
+     * the merged user's root profile.
+     *
+     * @default false
+     */
+    copyProfileFields?: boolean;
 }
 /**
  * Trigger-agnostic event handler used by all `account-linking` template
@@ -4245,7 +4306,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        type: "push" | "email" | "passkey" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
+                        type: "email" | "push" | "passkey" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
                         phone_number?: string | undefined;
                         totp_secret?: string | undefined;
                         credential_id?: string | undefined;
@@ -4385,7 +4446,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "otp" | "email" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 }[];
@@ -4540,7 +4601,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        factor_name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                        factor_name: "otp" | "email" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -4548,7 +4609,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "otp" | "email" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -4561,7 +4622,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        factor_name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                        factor_name: "otp" | "email" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -4573,7 +4634,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "otp" | "email" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -5351,10 +5412,10 @@ declare function init(config: AuthHeroConfig): {
                         inviter: {
                             name?: string | undefined;
                         };
+                        connection_id?: string | undefined;
                         id?: string | undefined;
                         app_metadata?: Record<string, any> | undefined;
                         user_metadata?: Record<string, any> | undefined;
-                        connection_id?: string | undefined;
                         roles?: string[] | undefined;
                         send_invitation_email?: boolean | undefined;
                         ttl_sec?: number | undefined;
@@ -7151,6 +7212,8 @@ declare function init(config: AuthHeroConfig): {
                                         display_name?: string | undefined;
                                         icon_url?: string | undefined;
                                         href?: string | undefined;
+                                        last_used?: boolean | undefined;
+                                        last_used_label?: string | undefined;
                                     }[] | undefined;
                                 } | undefined;
                             } | {
@@ -7752,6 +7815,8 @@ declare function init(config: AuthHeroConfig): {
                                             display_name?: string | undefined;
                                             icon_url?: string | undefined;
                                             href?: string | undefined;
+                                            last_used?: boolean | undefined;
+                                            last_used_label?: string | undefined;
                                         }[] | undefined;
                                     } | undefined;
                                 } | {
@@ -8369,6 +8434,8 @@ declare function init(config: AuthHeroConfig): {
                                         display_name?: string | undefined;
                                         icon_url?: string | undefined;
                                         href?: string | undefined;
+                                        last_used?: boolean | undefined;
+                                        last_used_label?: string | undefined;
                                     }[] | undefined;
                                 } | undefined;
                             } | {
@@ -8987,6 +9054,8 @@ declare function init(config: AuthHeroConfig): {
                                             display_name?: string | undefined;
                                             icon_url?: string | undefined;
                                             href?: string | undefined;
+                                            last_used?: boolean | undefined;
+                                            last_used_label?: string | undefined;
                                         }[] | undefined;
                                     } | undefined;
                                 } | {
@@ -9586,6 +9655,8 @@ declare function init(config: AuthHeroConfig): {
                                         display_name?: string | undefined;
                                         icon_url?: string | undefined;
                                         href?: string | undefined;
+                                        last_used?: boolean | undefined;
+                                        last_used_label?: string | undefined;
                                     }[] | undefined;
                                 } | undefined;
                             } | {
@@ -10183,6 +10254,8 @@ declare function init(config: AuthHeroConfig): {
                                             display_name?: string | undefined;
                                             icon_url?: string | undefined;
                                             href?: string | undefined;
+                                            last_used?: boolean | undefined;
+                                            last_used_label?: string | undefined;
                                         }[] | undefined;
                                     } | undefined;
                                 } | {
@@ -10782,6 +10855,8 @@ declare function init(config: AuthHeroConfig): {
                                         display_name?: string | undefined;
                                         icon_url?: string | undefined;
                                         href?: string | undefined;
+                                        last_used?: boolean | undefined;
+                                        last_used_label?: string | undefined;
                                     }[] | undefined;
                                 } | undefined;
                             } | {
@@ -11031,6 +11106,7 @@ declare function init(config: AuthHeroConfig): {
                     universal_login_experience: "new" | "classic";
                     identifier_first: boolean;
                     password_first: boolean;
+                    show_last_used_connection: boolean;
                     webauthn_platform_first_factor: boolean;
                 };
                 outputFormat: "json";
@@ -11049,6 +11125,7 @@ declare function init(config: AuthHeroConfig): {
                         universal_login_experience?: "new" | "classic" | undefined;
                         identifier_first?: boolean | undefined;
                         password_first?: boolean | undefined;
+                        show_last_used_connection?: boolean | undefined;
                         webauthn_platform_first_factor?: boolean | undefined;
                     };
                 };
@@ -11066,7 +11143,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                    prompt: "login" | "mfa" | "organizations" | "status" | "signup" | "login-id" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                     language: string;
                 }[];
                 outputFormat: "json";
@@ -11104,7 +11181,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "login" | "mfa" | "organizations" | "status" | "signup" | "login-id" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                         language: string;
                     };
                 } & {
@@ -11126,7 +11203,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "login" | "mfa" | "organizations" | "status" | "signup" | "login-id" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                         language: string;
                     };
                 } & {
@@ -11150,7 +11227,7 @@ declare function init(config: AuthHeroConfig): {
             $delete: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "login" | "mfa" | "organizations" | "status" | "signup" | "login-id" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
                         language: string;
                     };
                 } & {
@@ -12653,7 +12730,7 @@ declare function init(config: AuthHeroConfig): {
                         log_type: string;
                         category: "user_action" | "admin_action" | "system" | "api";
                         actor: {
-                            type: "user" | "client_credentials" | "system" | "admin" | "api_key";
+                            type: "user" | "client_credentials" | "api_key" | "system" | "admin";
                             id?: string | undefined;
                             email?: string | undefined;
                             org_id?: string | undefined;
@@ -12687,6 +12764,7 @@ declare function init(config: AuthHeroConfig): {
                             body?: hono_utils_types.JSONValue | undefined;
                             user_agent?: string | undefined;
                             correlation_id?: string | undefined;
+                            redirect_uri?: string | undefined;
                         };
                         hostname: string;
                         timestamp: string;
@@ -13303,7 +13381,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -13342,7 +13420,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -13381,7 +13459,7 @@ declare function init(config: AuthHeroConfig): {
                     next?: string | undefined;
                 } | {
                     logs: {
-                        type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -13435,7 +13513,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -13846,7 +13924,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -13948,7 +14026,7 @@ declare function init(config: AuthHeroConfig): {
                         addons?: {
                             [x: string]: any;
                         } | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         client_metadata?: {
                             [x: string]: string;
                         } | undefined;
@@ -14050,7 +14128,7 @@ declare function init(config: AuthHeroConfig): {
                         addons?: {
                             [x: string]: any;
                         } | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         client_metadata?: {
                             [x: string]: string;
                         } | undefined;
@@ -14167,7 +14245,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -14285,7 +14363,7 @@ declare function init(config: AuthHeroConfig): {
                         custom_login_page_preview?: string | undefined;
                         form_template?: string | undefined;
                         addons?: Record<string, any> | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         client_metadata?: Record<string, string> | undefined;
                         hide_sign_up_disabled_error?: boolean | undefined;
                         mobile?: Record<string, any> | undefined;
@@ -14371,7 +14449,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -14468,7 +14546,7 @@ declare function init(config: AuthHeroConfig): {
                         custom_login_page_preview?: string | undefined;
                         form_template?: string | undefined;
                         addons?: Record<string, any> | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         client_metadata?: Record<string, string> | undefined;
                         hide_sign_up_disabled_error?: boolean | undefined;
                         mobile?: Record<string, any> | undefined;
@@ -14554,7 +14632,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -14960,6 +15038,7 @@ declare function init(config: AuthHeroConfig): {
                     verify_email?: boolean | undefined;
                     last_ip?: string | undefined;
                     last_login?: string | undefined;
+                    blocked?: boolean | undefined;
                     registration_completed_at?: string | undefined;
                     email?: string | undefined;
                     identities?: {
@@ -15145,6 +15224,7 @@ declare function init(config: AuthHeroConfig): {
                     verify_email?: boolean | undefined;
                     last_ip?: string | undefined;
                     last_login?: string | undefined;
+                    blocked?: boolean | undefined;
                     identities?: {
                         connection: string;
                         user_id: string;
@@ -15215,6 +15295,7 @@ declare function init(config: AuthHeroConfig): {
                         verify_email?: boolean | undefined;
                         last_ip?: string | undefined;
                         last_login?: string | undefined;
+                        blocked?: boolean | undefined;
                         identities?: {
                             connection: string;
                             user_id: string;
@@ -15285,6 +15366,7 @@ declare function init(config: AuthHeroConfig): {
                         verify_email?: boolean | undefined;
                         last_ip?: string | undefined;
                         last_login?: string | undefined;
+                        blocked?: boolean | undefined;
                         identities?: {
                             connection: string;
                             user_id: string;
@@ -15370,6 +15452,7 @@ declare function init(config: AuthHeroConfig): {
                     verify_email?: boolean | undefined;
                     last_ip?: string | undefined;
                     last_login?: string | undefined;
+                    blocked?: boolean | undefined;
                     identities?: {
                         connection: string;
                         user_id: string;
@@ -15463,6 +15546,7 @@ declare function init(config: AuthHeroConfig): {
                         user_id?: string | undefined;
                         provider?: string | undefined;
                         is_social?: boolean | undefined;
+                        blocked?: boolean | undefined;
                         registration_completed_at?: string | undefined;
                         password?: string | undefined;
                     };
@@ -15508,6 +15592,7 @@ declare function init(config: AuthHeroConfig): {
                     verify_email?: boolean | undefined;
                     last_ip?: string | undefined;
                     last_login?: string | undefined;
+                    blocked?: boolean | undefined;
                     identities?: {
                         connection: string;
                         user_id: string;
@@ -15563,8 +15648,6 @@ declare function init(config: AuthHeroConfig): {
                         locale?: string | undefined;
                         linked_to?: string | undefined;
                         profileData?: string | undefined;
-                        app_metadata?: any;
-                        user_metadata?: any;
                         middle_name?: string | undefined;
                         preferred_username?: string | undefined;
                         profile?: string | undefined;
@@ -15580,16 +15663,19 @@ declare function init(config: AuthHeroConfig): {
                             postal_code?: string | undefined;
                             country?: string | undefined;
                         } | undefined;
-                        email_verified?: boolean | undefined;
                         last_ip?: string | undefined;
                         last_login?: string | undefined;
                         user_id?: string | undefined;
                         provider?: string | undefined;
                         connection?: string | undefined;
                         is_social?: boolean | undefined;
+                        blocked?: boolean | undefined;
                         registration_completed_at?: string | undefined;
                         verify_email?: boolean | undefined;
                         password?: string | undefined;
+                        email_verified?: boolean | undefined;
+                        app_metadata?: any;
+                        user_metadata?: any;
                     };
                 };
                 output: {};
@@ -15701,6 +15787,7 @@ declare function init(config: AuthHeroConfig): {
                     verify_email?: boolean | undefined;
                     last_ip?: string | undefined;
                     last_login?: string | undefined;
+                    blocked?: boolean | undefined;
                     identities?: {
                         connection: string;
                         user_id: string;
@@ -15890,7 +15977,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -15929,7 +16016,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "fc" | "fd" | "fn" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -16248,7 +16335,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         from: string;
                         subject: string;
@@ -16269,7 +16356,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         from: string;
                         subject: string;
@@ -16281,7 +16368,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -16304,7 +16391,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    name: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     subject: string;
                 }[];
@@ -16317,7 +16404,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16330,7 +16417,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16338,7 +16425,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -16357,7 +16444,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16365,7 +16452,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         subject: string;
                         syntax?: "liquid" | undefined;
@@ -16377,7 +16464,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -16396,7 +16483,7 @@ declare function init(config: AuthHeroConfig): {
             $patch: {
                 input: {
                     param: {
-                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16404,7 +16491,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template?: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
+                        template?: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
                         body?: string | undefined;
                         from?: string | undefined;
                         subject?: string | undefined;
@@ -16421,7 +16508,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16429,7 +16516,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template?: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
+                        template?: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
                         body?: string | undefined;
                         from?: string | undefined;
                         subject?: string | undefined;
@@ -16441,7 +16528,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -16460,7 +16547,7 @@ declare function init(config: AuthHeroConfig): {
             $delete: {
                 input: {
                     param: {
-                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16473,7 +16560,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -16490,7 +16577,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     param: {
-                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "password_reset" | "verify_email" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -17442,7 +17529,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     json: {
                         body?: string | undefined;
-                        screen?: "identifier" | "signup" | "password" | "login" | undefined;
+                        screen?: "login" | "identifier" | "signup" | "password" | undefined;
                         branding?: {
                             colors?: {
                                 primary: string;
@@ -17733,7 +17820,7 @@ declare function init(config: AuthHeroConfig): {
                     logs: {
                         action_name: string;
                         lines: {
-                            level: "log" | "error" | "info" | "warn" | "debug";
+                            level: "error" | "log" | "info" | "warn" | "debug";
                             message: string;
                         }[];
                     }[];
@@ -18402,7 +18489,7 @@ declare function init(config: AuthHeroConfig): {
                         args: hono_utils_types.JSONValue[];
                     }[];
                     logs: {
-                        level: "log" | "error" | "info" | "warn" | "debug";
+                        level: "error" | "log" | "info" | "warn" | "debug";
                         message: string;
                     }[];
                     error?: string | undefined;
@@ -18713,7 +18800,7 @@ declare function init(config: AuthHeroConfig): {
                         scope?: string | undefined;
                         grant_types?: string[] | undefined;
                         response_types?: string[] | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         jwks_uri?: string | undefined;
                         jwks?: Record<string, unknown> | undefined;
                         software_id?: string | undefined;
@@ -18802,7 +18889,7 @@ declare function init(config: AuthHeroConfig): {
                         scope?: string | undefined;
                         grant_types?: string[] | undefined;
                         response_types?: string[] | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         jwks_uri?: string | undefined;
                         jwks?: Record<string, unknown> | undefined;
                         software_id?: string | undefined;
@@ -19148,19 +19235,19 @@ declare function init(config: AuthHeroConfig): {
                         email: string;
                         send: "code" | "link";
                         authParams: {
-                            username?: string | undefined;
+                            code_challenge?: string | undefined;
+                            code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
+                            redirect_uri?: string | undefined;
+                            nonce?: string | undefined;
                             state?: string | undefined;
-                            audience?: string | undefined;
+                            act_as?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
-                            scope?: string | undefined;
+                            audience?: string | undefined;
                             organization?: string | undefined;
-                            nonce?: string | undefined;
-                            redirect_uri?: string | undefined;
-                            act_as?: string | undefined;
+                            scope?: string | undefined;
                             prompt?: string | undefined;
-                            code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
-                            code_challenge?: string | undefined;
+                            username?: string | undefined;
                             ui_locales?: string | undefined;
                             max_age?: number | undefined;
                             acr_values?: string | undefined;
@@ -19184,19 +19271,19 @@ declare function init(config: AuthHeroConfig): {
                         phone_number: string;
                         send: "code" | "link";
                         authParams: {
-                            username?: string | undefined;
+                            code_challenge?: string | undefined;
+                            code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
+                            redirect_uri?: string | undefined;
+                            nonce?: string | undefined;
                             state?: string | undefined;
-                            audience?: string | undefined;
+                            act_as?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
-                            scope?: string | undefined;
+                            audience?: string | undefined;
                             organization?: string | undefined;
-                            nonce?: string | undefined;
-                            redirect_uri?: string | undefined;
-                            act_as?: string | undefined;
+                            scope?: string | undefined;
                             prompt?: string | undefined;
-                            code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
-                            code_challenge?: string | undefined;
+                            username?: string | undefined;
                             ui_locales?: string | undefined;
                             max_age?: number | undefined;
                             acr_values?: string | undefined;
@@ -19328,14 +19415,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -19347,14 +19434,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -19369,14 +19456,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "refresh_token" | "access_token" | undefined;
+                        token_type_hint?: "access_token" | "refresh_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -19426,7 +19513,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -19473,7 +19560,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -19525,7 +19612,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -19572,7 +19659,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -19632,7 +19719,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -19679,7 +19766,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -19734,7 +19821,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -19781,7 +19868,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -19836,7 +19923,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -19883,7 +19970,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "sms" | "email";
+                        realm: "email" | "sms";
                     } | {
                         grant_type: "urn:ietf:params:oauth:grant-type:token-exchange";
                         subject_token: string;
@@ -21107,7 +21194,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "consent" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21123,7 +21210,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "consent" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21139,7 +21226,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "consent" | "reset-password" | "account" | "enter-password" | "impersonate" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21159,7 +21246,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     param: {
-                        screen: "signup" | "consent" | "login" | "reset-password" | "enter-password" | "impersonate" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "consent" | "reset-password" | "enter-password" | "impersonate" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21177,7 +21264,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "consent" | "login" | "reset-password" | "enter-password" | "impersonate" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "consent" | "reset-password" | "enter-password" | "impersonate" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21272,8 +21359,12 @@ declare function init(config: AuthHeroConfig): {
             };
         };
     }, "/forms"> & hono_types.MergeSchemaPath<{}, "/screen">, "/">;
+    scimApp: OpenAPIHono<{
+        Bindings: Bindings;
+        Variables: Variables;
+    }, {}, "/"> | undefined;
     createX509Certificate: typeof createX509Certificate;
 };
 
-export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_CUSTOM_DOMAINS_PATH, CONTROL_PLANE_CUSTOM_DOMAINS_SCOPE, CONTROL_PLANE_SYNC_EVENT_PREFIX, CONTROL_PLANE_SYNC_SCOPE, CONTROL_PLANE_TENANT_MEMBERS_PATH, CONTROL_PLANE_TENANT_MEMBERS_SCOPE, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, CodeHookDestination, ControlPlaneSyncDestination, DEFAULT_WFP_DISPATCH_BINDING, DEFAULT_WFP_SCRIPT_NAME_TEMPLATE, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, RetentionSweepError, SignupPage as SignUpPage, SocialButton, Spinner, TenantInvitationNotFoundError, TenantMembersNotFoundError, TenantOrganizationNotFoundError, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, backfillProxyHostsToKv, cleanupCodes, cleanupOutbox, cleanupSessions, cleanupUserSessions, clientInfoMiddleware, composeHostResolvers, createApplySyncEvents, createAuthMiddleware, createControlPlaneClient, createControlPlaneCustomDomainsAdapter, createControlPlaneTenantMembersAdapter, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createInMemoryCache, createLocalTenantMembersBackend, createServiceTokenCore, createTenantMembersControlPlaneApp, createTenantMembersRoutes, createWfpTenantHostResolver, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, fetchAll, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, isInteractiveClient, isWfpSubdomainSafeTenantId, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, provisionDefaultClients, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, runOutboxRelay, runRetention, seed, tailwindCss, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wfpTenantHost, wrapProxyAdaptersWithKvPublish, wrapTenantsAdapterWithWfpKvPublish };
-export type { AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, CodesCleanupParams, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, ControlPlaneTenantMembersOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetControlPlaneToken, GetServiceToken, GetTenantMembersBackend, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, LocalTenantMembersBackendOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, RetentionSweep, RetentionSweepFailed, RetentionSweepSkipped, RetentionSweepStatus, RetentionSweepSwept, RolePermissionHooks, RunOutboxRelayConfig, RunRetentionConfig, RunRetentionResult, SeedOptions, SeedResult, ServiceTokenResponse, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantInvitation, TenantInvitationInput, TenantMember, TenantMembersBackend, TenantMembersControlPlaneOptions, TenantMembersListResult, TenantMembersPageParams, TenantOperationExecutorBinding, TenantRole, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };
+export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_CUSTOM_DOMAINS_PATH, CONTROL_PLANE_CUSTOM_DOMAINS_SCOPE, CONTROL_PLANE_SYNC_EVENT_PREFIX, CONTROL_PLANE_SYNC_SCOPE, CONTROL_PLANE_TENANT_MEMBERS_PATH, CONTROL_PLANE_TENANT_MEMBERS_SCOPE, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, CodeHookDestination, ControlPlaneSyncDestination, DEFAULT_WFP_DISPATCH_BINDING, DEFAULT_WFP_SCRIPT_NAME_TEMPLATE, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, RetentionSweepError, SignupPage as SignUpPage, SocialButton, Spinner, TenantInvitationNotFoundError, TenantMembersNotFoundError, TenantOrganizationNotFoundError, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, backfillProxyHostsToKv, cleanupCodes, cleanupOutbox, cleanupSessions, cleanupUserSessions, clientInfoMiddleware, composeHostResolvers, createApplySyncEvents, createAuthMiddleware, createControlPlaneClient, createControlPlaneCustomDomainsAdapter, createControlPlaneTenantMembersAdapter, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createInMemoryCache, createLocalTenantMembersBackend, createServiceTokenCore, createTenantMembersControlPlaneApp, createTenantMembersRoutes, createWfpTenantHostResolver, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, ensureSigningKey, fetchAll, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, isInteractiveClient, isWfpSubdomainSafeTenantId, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, provisionDefaultClients, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, runOutboxRelay, runRetention, seed, tailwindCss, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wfpTenantHost, wrapProxyAdaptersWithKvPublish, wrapTenantsAdapterWithWfpKvPublish };
+export type { AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, CodesCleanupParams, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, ControlPlaneTenantMembersOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureSigningKeyOptions, EnsureSigningKeyResult, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetControlPlaneToken, GetServiceToken, GetTenantMembersBackend, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, LocalTenantMembersBackendOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, RetentionSweep, RetentionSweepFailed, RetentionSweepSkipped, RetentionSweepStatus, RetentionSweepSwept, RolePermissionHooks, RunOutboxRelayConfig, RunRetentionConfig, RunRetentionResult, SeedOptions, SeedResult, ServiceTokenResponse, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantInvitation, TenantInvitationInput, TenantMember, TenantMembersBackend, TenantMembersControlPlaneOptions, TenantMembersListResult, TenantMembersPageParams, TenantOperationExecutorBinding, TenantRole, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };