authhero 9.12.0 → 9.13.0

package/dist/authhero.d.ts

@@ -32,6 +32,40 @@ interface PreferState {
     appliedTokens(): PreferToken[];
 }
 
+/**
+ * Embedded login: the hosted /u2 pages rendered inside an <iframe> on the
+ * application's own site (typically in a modal) instead of a full redirect.
+ *
+ * A login session is "embedded" when it was started with
+ * `response_mode=web_message`: the authorization response is then delivered
+ * with `postMessage` to the window that owns the iframe, which only makes
+ * sense when the pages are framed. Nothing else is needed to opt in — the
+ * application lists its origin in the client's `web_origins` (Auth0's
+ * "Allowed Web Origins", already the allowlist for the web_message mode)
+ * and the pages become frameable from exactly those origins.
+ *
+ * Credentials never leave the auth origin: the widget runs inside the frame,
+ * so scripts on the embedding page cannot read what the user types. The
+ * frame and its parent only exchange the messages documented on
+ * `buildEmbedPageScript`.
+ */
+
+type EmbedLoginContext = {
+    /**
+     * Origin of the application page that owns the iframe: the origin of the
+     * login session's `redirect_uri`. The same target the web_message response
+     * itself is posted to, so a page that can receive the tokens can receive
+     * the resize messages and nothing else can.
+     */
+    targetOrigin: string;
+    /**
+     * Origins allowed to frame the pages, from the client's `web_origins`.
+     * Empty means nobody may: the pages render with `frame-ancestors 'none'`
+     * until the application's origin is added to the client.
+     */
+    frameAncestors: string[];
+};
+
 type Variables = {
     tenant_id: string;
     ip: string;
@@ -54,6 +88,7 @@ type Variables = {
     organization_id?: string;
     org_name?: string;
     loginSession?: LoginSession;
+    embedLogin?: EmbedLoginContext;
     auth0_client?: Auth0Client;
     useragent?: string;
     countryCode?: CountryCode;
@@ -1425,6 +1460,24 @@ declare function createAuthMiddleware(app: OpenAPIHono<{
     Variables: any;
 }>, next: Next) => Promise<void>;
 
+/**
+ * Configuration for the Management API MCP endpoint. See `AuthHeroConfig.mcp`.
+ */
+interface McpConfig {
+    /**
+     * Confidential client on the control-plane tenant used for the in-process
+     * token exchange. It needs a `client_secret`, `organization_usage` set to
+     * `allow` or `require`, and the token-exchange grant in `grant_types` (or
+     * no `grant_types` restriction).
+     */
+    exchangeClientId: string;
+    /**
+     * Issuer of the control-plane tenant that MCP clients authenticate against,
+     * byte-exact including the trailing slash (e.g.
+     * `https://control.token.example.com/`). Defaults to `env.ISSUER`.
+     */
+    controlPlaneIssuer?: string;
+}
 /**
  * Parameters passed to a custom webhook invoker function.
  */
@@ -1738,6 +1791,23 @@ interface AuthHeroConfig {
      * ```
      */
     managementApiExtensions?: ManagementApiExtension[];
+    /**
+     * Remote MCP server for the Management API (`POST /mcp` plus RFC 9728
+     * protected-resource metadata). Only meaningful on a deployment that serves
+     * the control plane (`multiTenancyConfig.controlPlaneTenantId`).
+     *
+     * MCP clients authenticate against the control-plane tenant (typically via
+     * CIMD). On the control-plane host every tool takes a `tenant_id`; on a
+     * tenant's own host (subdomain or custom domain) the tools are pinned to
+     * that tenant. Either way, access is decided by control-plane organization
+     * membership: each tool call exchanges the caller's token (RFC 8693) for an
+     * org-scoped management token and dispatches in-process to `/api/v2`.
+     *
+     * When `controlPlaneIssuer` differs from `env.ISSUER`, the exchanged token
+     * carries that issuer, so `additionalIssuers` must accept it for the
+     * management API — the same requirement the admin UI already has.
+     */
+    mcp?: McpConfig;
     /**
      * Optional privileged control-plane endpoint for the `@authhero/proxy`
      * data plane. When set, mounts `GET /api/v2/proxy/control-plane/hosts/:host`
@@ -2211,6 +2281,7 @@ type Bindings = {
     userLinkingMode?: UserLinkingModeOption;
     usernamePasswordProvider?: UsernamePasswordProviderResolver;
     signingKeyMode?: SigningKeyModeOption;
+    mcp?: McpConfig;
     /**
      * Allow outbound fetches (jwks_uri, request_uri) to localhost / private IP
      * ranges and over plain http. Intended for tests and local development;
@@ -4772,7 +4843,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        type: "email" | "totp" | "phone" | "push" | "passkey" | "webauthn-roaming" | "webauthn-platform";
+                        type: "push" | "email" | "passkey" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
                         phone_number?: string | undefined;
                         totp_secret?: string | undefined;
                         credential_id?: string | undefined;
@@ -4912,7 +4983,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 }[];
@@ -5067,7 +5138,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        factor_name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                        factor_name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -5075,7 +5146,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -5088,7 +5159,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        factor_name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                        factor_name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -5100,7 +5171,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "sms" | "otp" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "sms" | "otp" | "email" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -5872,19 +5943,19 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     json: {
                         client_id: string;
-                        invitee: {
-                            email?: string | undefined;
-                        };
                         inviter: {
                             name?: string | undefined;
                         };
+                        invitee: {
+                            email?: string | undefined;
+                        };
                         id?: string | undefined;
                         app_metadata?: Record<string, any> | undefined;
                         user_metadata?: Record<string, any> | undefined;
                         connection_id?: string | undefined;
                         roles?: string[] | undefined;
-                        send_invitation_email?: boolean | undefined;
                         ttl_sec?: number | undefined;
+                        send_invitation_email?: boolean | undefined;
                     };
                 };
                 output: {
@@ -6197,6 +6268,41 @@ declare function init(config: AuthHeroConfig): {
                     }[];
                     total?: number | undefined;
                     next?: string | undefined;
+                } | {
+                    resource_servers: {
+                        name: string;
+                        identifier: string;
+                        token_lifetime: number;
+                        token_lifetime_for_web: number;
+                        id?: string | undefined;
+                        scopes?: {
+                            value: string;
+                            description?: string | undefined;
+                        }[] | undefined;
+                        signing_alg?: string | undefined;
+                        signing_secret?: string | undefined;
+                        skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
+                        allow_offline_access?: boolean | undefined;
+                        verificationKey?: string | undefined;
+                        options?: {
+                            token_dialect?: "access_token" | "access_token_authz" | undefined;
+                            enforce_policies?: boolean | undefined;
+                            allow_skipping_userinfo?: boolean | undefined;
+                            skip_userinfo?: boolean | undefined;
+                            persist_client_authorization?: boolean | undefined;
+                            enable_introspection_endpoint?: boolean | undefined;
+                            mtls?: {
+                                bound_access_tokens?: boolean | undefined;
+                            } | undefined;
+                        } | undefined;
+                        is_system?: boolean | undefined;
+                        metadata?: {
+                            [x: string]: any;
+                        } | undefined;
+                        created_at?: string | undefined;
+                        updated_at?: string | undefined;
+                    }[];
+                    next?: string | undefined;
                 };
                 outputFormat: "json";
                 status: 200;
@@ -6639,9 +6745,9 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     query: {
+                        from?: string | undefined;
                         page?: string | undefined;
                         include_totals?: string | undefined;
-                        from?: string | undefined;
                         per_page?: string | undefined;
                         take?: string | undefined;
                     };
@@ -11711,7 +11817,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                    prompt: "mfa" | "organizations" | "signup" | "status" | "common" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                     language: string;
                 }[];
                 outputFormat: "json";
@@ -11749,7 +11855,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "mfa" | "organizations" | "signup" | "status" | "common" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -11771,7 +11877,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "mfa" | "organizations" | "signup" | "status" | "common" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -11795,7 +11901,7 @@ declare function init(config: AuthHeroConfig): {
             $delete: {
                 input: {
                     param: {
-                        prompt: "status" | "mfa" | "organizations" | "signup" | "common" | "consent" | "device-flow" | "email-otp-challenge" | "email-verification" | "invitation" | "login" | "login-id" | "login-password" | "login-passwordless" | "mfa-email" | "mfa-otp" | "mfa-phone" | "mfa-login-options" | "mfa-push" | "mfa-recovery-code" | "mfa-voice" | "mfa-webauthn" | "passkeys" | "reset-password" | "signup-id" | "signup-password" | "captcha" | "custom-form";
+                        prompt: "mfa" | "organizations" | "signup" | "status" | "common" | "login" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -12103,6 +12209,143 @@ declare function init(config: AuthHeroConfig): {
                     }[];
                     total?: number | undefined;
                     next?: string | undefined;
+                } | {
+                    connections: {
+                        created_at: string;
+                        updated_at: string;
+                        name: string;
+                        strategy: string;
+                        options: {
+                            kid?: string | undefined;
+                            team_id?: string | undefined;
+                            realms?: string | undefined;
+                            authentication_method?: string | undefined;
+                            client_id?: string | undefined;
+                            client_secret?: string | undefined;
+                            app_secret?: string | undefined;
+                            scope?: string | undefined;
+                            client_secret_hint?: string | undefined;
+                            app_secret_hint?: string | undefined;
+                            twilio_token_hint?: string | undefined;
+                            authorization_endpoint?: string | undefined;
+                            token_endpoint?: string | undefined;
+                            userinfo_endpoint?: string | undefined;
+                            jwks_uri?: string | undefined;
+                            discovery_url?: string | undefined;
+                            issuer?: string | undefined;
+                            token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | undefined;
+                            provider?: string | undefined;
+                            from?: string | undefined;
+                            twilio_sid?: string | undefined;
+                            twilio_token?: string | undefined;
+                            icon_url?: string | undefined;
+                            domain_aliases?: string[] | undefined;
+                            callback_url?: string | undefined;
+                            passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
+                            password_complexity_options?: {
+                                min_length?: number | undefined;
+                            } | undefined;
+                            password_history?: {
+                                enable?: boolean | undefined;
+                                size?: number | undefined;
+                            } | undefined;
+                            password_no_personal_info?: {
+                                enable?: boolean | undefined;
+                            } | undefined;
+                            password_dictionary?: {
+                                enable?: boolean | undefined;
+                                dictionary?: string[] | undefined;
+                            } | undefined;
+                            disable_signup?: boolean | undefined;
+                            brute_force_protection?: boolean | undefined;
+                            import_mode?: boolean | undefined;
+                            configuration?: {
+                                token_endpoint?: string | undefined;
+                                userinfo_endpoint?: string | undefined;
+                                client_id?: string | undefined;
+                                client_secret?: string | undefined;
+                                client_secret_hint?: string | undefined;
+                                realm?: string | undefined;
+                            } | undefined;
+                            attributes?: {
+                                email?: {
+                                    identifier?: {
+                                        active?: boolean | undefined;
+                                    } | undefined;
+                                    signup?: {
+                                        status?: "optional" | "required" | "disabled" | undefined;
+                                        verification?: {
+                                            active?: boolean | undefined;
+                                        } | undefined;
+                                    } | undefined;
+                                    validation?: {
+                                        allowed?: boolean | undefined;
+                                    } | undefined;
+                                    unique?: boolean | undefined;
+                                    profile_required?: boolean | undefined;
+                                    verification_method?: "code" | "link" | undefined;
+                                } | undefined;
+                                username?: {
+                                    identifier?: {
+                                        active?: boolean | undefined;
+                                    } | undefined;
+                                    signup?: {
+                                        status?: "optional" | "required" | "disabled" | undefined;
+                                    } | undefined;
+                                    validation?: {
+                                        max_length?: number | undefined;
+                                        min_length?: number | undefined;
+                                        allowed_types?: {
+                                            email?: boolean | undefined;
+                                            phone_number?: boolean | undefined;
+                                        } | undefined;
+                                    } | undefined;
+                                    profile_required?: boolean | undefined;
+                                } | undefined;
+                                phone_number?: {
+                                    identifier?: {
+                                        active?: boolean | undefined;
+                                    } | undefined;
+                                    signup?: {
+                                        status?: "optional" | "required" | "disabled" | undefined;
+                                    } | undefined;
+                                } | undefined;
+                            } | undefined;
+                            authentication_methods?: {
+                                password?: {
+                                    enabled?: boolean | undefined;
+                                } | undefined;
+                                passkey?: {
+                                    enabled?: boolean | undefined;
+                                } | undefined;
+                            } | undefined;
+                            passkey_options?: {
+                                challenge_ui?: "both" | "autofill" | "button" | undefined;
+                                local_enrollment_enabled?: boolean | undefined;
+                                progressive_enrollment_enabled?: boolean | undefined;
+                            } | undefined;
+                            requires_username?: boolean | undefined;
+                            validation?: {
+                                username?: {
+                                    min?: number | undefined;
+                                    max?: number | undefined;
+                                } | undefined;
+                            } | undefined;
+                            set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
+                        };
+                        id?: string | undefined;
+                        display_name?: string | undefined;
+                        enabled_clients?: string[] | undefined;
+                        response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
+                        response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
+                        is_domain_connection?: boolean | undefined;
+                        show_as_button?: boolean | undefined;
+                        metadata?: {
+                            [x: string]: any;
+                        } | undefined;
+                        is_system?: boolean | undefined;
+                    }[];
+                    next?: string | undefined;
                 };
                 outputFormat: "json";
                 status: 200;
@@ -14078,7 +14321,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fn" | "sapi" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "sapi" | "fn" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -14117,7 +14360,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "fn" | "sapi" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "sapi" | "fn" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -14156,7 +14399,7 @@ declare function init(config: AuthHeroConfig): {
                     next?: string | undefined;
                 } | {
                     logs: {
-                        type: "fn" | "sapi" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "sapi" | "fn" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -14210,7 +14453,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fn" | "sapi" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "sapi" | "fn" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -14621,7 +14864,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -14723,7 +14966,7 @@ declare function init(config: AuthHeroConfig): {
                         addons?: {
                             [x: string]: any;
                         } | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         client_metadata?: {
                             [x: string]: string;
                         } | undefined;
@@ -14825,7 +15068,7 @@ declare function init(config: AuthHeroConfig): {
                         addons?: {
                             [x: string]: any;
                         } | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         client_metadata?: {
                             [x: string]: string;
                         } | undefined;
@@ -14942,7 +15185,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -15060,7 +15303,7 @@ declare function init(config: AuthHeroConfig): {
                         custom_login_page_preview?: string | undefined;
                         form_template?: string | undefined;
                         addons?: Record<string, any> | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         client_metadata?: Record<string, string> | undefined;
                         hide_sign_up_disabled_error?: boolean | undefined;
                         mobile?: Record<string, any> | undefined;
@@ -15146,7 +15389,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -15243,7 +15486,7 @@ declare function init(config: AuthHeroConfig): {
                         custom_login_page_preview?: string | undefined;
                         form_template?: string | undefined;
                         addons?: Record<string, any> | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         client_metadata?: Record<string, string> | undefined;
                         hide_sign_up_disabled_error?: boolean | undefined;
                         mobile?: Record<string, any> | undefined;
@@ -15329,7 +15572,7 @@ declare function init(config: AuthHeroConfig): {
                     addons?: {
                         [x: string]: any;
                     } | undefined;
-                    token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                    token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                     client_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -15789,13 +16032,13 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "jwt_signing" | "saml_encryption";
                     kid: string;
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
-                    connection?: string | undefined;
+                    type: "jwt_signing" | "saml_encryption";
                     tenant_id?: string | undefined;
+                    connection?: string | undefined;
                     current?: boolean | undefined;
                     next?: boolean | undefined;
                     previous?: boolean | undefined;
@@ -15828,13 +16071,13 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "jwt_signing" | "saml_encryption";
                     kid: string;
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
-                    connection?: string | undefined;
+                    type: "jwt_signing" | "saml_encryption";
                     tenant_id?: string | undefined;
+                    connection?: string | undefined;
                     current?: boolean | undefined;
                     next?: boolean | undefined;
                     previous?: boolean | undefined;
@@ -15866,13 +16109,13 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "jwt_signing" | "saml_encryption";
                     kid: string;
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
-                    connection?: string | undefined;
+                    type: "jwt_signing" | "saml_encryption";
                     tenant_id?: string | undefined;
+                    connection?: string | undefined;
                     current?: boolean | undefined;
                     next?: boolean | undefined;
                     previous?: boolean | undefined;
@@ -15906,13 +16149,13 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "jwt_signing" | "saml_encryption";
                     kid: string;
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
-                    connection?: string | undefined;
+                    type: "jwt_signing" | "saml_encryption";
                     tenant_id?: string | undefined;
+                    connection?: string | undefined;
                     current?: boolean | undefined;
                     next?: boolean | undefined;
                     previous?: boolean | undefined;
@@ -16764,10 +17007,10 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    id: string;
+                    client_id: string;
                     user_id: string;
+                    id: string;
                     created_at: string;
-                    client_id: string;
                     rotating: boolean;
                     device: {
                         initial_user_agent: string;
@@ -16798,10 +17041,10 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     tokens: {
-                        id: string;
+                        client_id: string;
                         user_id: string;
+                        id: string;
                         created_at: string;
-                        client_id: string;
                         rotating: boolean;
                         device: {
                             initial_user_agent: string;
@@ -16832,10 +17075,10 @@ declare function init(config: AuthHeroConfig): {
                     next?: string | undefined;
                 } | {
                     tokens: {
-                        id: string;
+                        client_id: string;
                         user_id: string;
+                        id: string;
                         created_at: string;
-                        client_id: string;
                         rotating: boolean;
                         device: {
                             initial_user_agent: string;
@@ -16910,7 +17153,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fn" | "sapi" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "sapi" | "fn" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -16949,7 +17192,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "fn" | "sapi" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "sapi" | "fn" | "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -17268,7 +17511,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         from: string;
                         subject: string;
@@ -17289,7 +17532,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         from: string;
                         subject: string;
@@ -17301,7 +17544,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -17324,7 +17567,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    name: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     subject: string;
                 }[];
@@ -17337,7 +17580,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -17350,7 +17593,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -17358,7 +17601,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -17377,7 +17620,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -17385,7 +17628,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         subject: string;
                         syntax?: "liquid" | undefined;
@@ -17397,7 +17640,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -17416,7 +17659,7 @@ declare function init(config: AuthHeroConfig): {
             $patch: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -17424,7 +17667,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template?: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
+                        template?: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
                         body?: string | undefined;
                         from?: string | undefined;
                         subject?: string | undefined;
@@ -17441,7 +17684,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -17449,7 +17692,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template?: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
+                        template?: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
                         body?: string | undefined;
                         from?: string | undefined;
                         subject?: string | undefined;
@@ -17461,7 +17704,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -17480,7 +17723,7 @@ declare function init(config: AuthHeroConfig): {
             $delete: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -17493,7 +17736,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -17510,7 +17753,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "change_password" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -18462,7 +18705,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     json: {
                         body?: string | undefined;
-                        screen?: "password" | "identifier" | "signup" | "login" | undefined;
+                        screen?: "identifier" | "signup" | "password" | "login" | undefined;
                         branding?: {
                             colors?: {
                                 primary: string;
@@ -18751,7 +18994,7 @@ declare function init(config: AuthHeroConfig): {
                     logs: {
                         action_name: string;
                         lines: {
-                            level: "error" | "log" | "info" | "warn" | "debug";
+                            level: "log" | "error" | "info" | "warn" | "debug";
                             message: string;
                         }[];
                     }[];
@@ -19413,7 +19656,7 @@ declare function init(config: AuthHeroConfig): {
                         args: hono_utils_types.JSONValue[];
                     }[];
                     logs: {
-                        level: "error" | "log" | "info" | "warn" | "debug";
+                        level: "log" | "error" | "info" | "warn" | "debug";
                         message: string;
                     }[];
                     error?: string | undefined;
@@ -19724,7 +19967,7 @@ declare function init(config: AuthHeroConfig): {
                         scope?: string | undefined;
                         grant_types?: string[] | undefined;
                         response_types?: string[] | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         jwks_uri?: string | undefined;
                         jwks?: Record<string, unknown> | undefined;
                         software_id?: string | undefined;
@@ -19813,7 +20056,7 @@ declare function init(config: AuthHeroConfig): {
                         scope?: string | undefined;
                         grant_types?: string[] | undefined;
                         response_types?: string[] | undefined;
-                        token_endpoint_auth_method?: "none" | "private_key_jwt" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | undefined;
+                        token_endpoint_auth_method?: "none" | "client_secret_post" | "client_secret_basic" | "client_secret_jwt" | "private_key_jwt" | undefined;
                         jwks_uri?: string | undefined;
                         jwks?: Record<string, unknown> | undefined;
                         software_id?: string | undefined;
@@ -19907,6 +20150,7 @@ declare function init(config: AuthHeroConfig): {
                         response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                         response_type?: unknown;
                         audience?: string | undefined;
+                        resource?: string | undefined;
                         connection?: string | undefined;
                         nonce?: string | undefined;
                         max_age?: string | undefined;
@@ -19941,6 +20185,7 @@ declare function init(config: AuthHeroConfig): {
                         response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                         response_type?: unknown;
                         audience?: string | undefined;
+                        resource?: string | undefined;
                         connection?: string | undefined;
                         nonce?: string | undefined;
                         max_age?: string | undefined;
@@ -19975,6 +20220,7 @@ declare function init(config: AuthHeroConfig): {
                         response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                         response_type?: unknown;
                         audience?: string | undefined;
+                        resource?: string | undefined;
                         connection?: string | undefined;
                         nonce?: string | undefined;
                         max_age?: string | undefined;
@@ -20017,6 +20263,7 @@ declare function init(config: AuthHeroConfig): {
                         response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                         response_type?: unknown;
                         audience?: string | undefined;
+                        resource?: string | undefined;
                         connection?: string | undefined;
                         nonce?: string | undefined;
                         max_age?: string | undefined;
@@ -20053,6 +20300,7 @@ declare function init(config: AuthHeroConfig): {
                         response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                         response_type?: unknown;
                         audience?: string | undefined;
+                        resource?: string | undefined;
                         connection?: string | undefined;
                         nonce?: string | undefined;
                         max_age?: string | undefined;
@@ -20161,17 +20409,17 @@ declare function init(config: AuthHeroConfig): {
                         authParams: {
                             username?: string | undefined;
                             state?: string | undefined;
-                            audience?: string | undefined;
+                            act_as?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
-                            scope?: string | undefined;
-                            organization?: string | undefined;
                             redirect_uri?: string | undefined;
-                            code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
-                            code_challenge?: string | undefined;
+                            audience?: string | undefined;
+                            organization?: string | undefined;
                             nonce?: string | undefined;
-                            act_as?: string | undefined;
+                            scope?: string | undefined;
                             prompt?: string | undefined;
+                            code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
+                            code_challenge?: string | undefined;
                             ui_locales?: string | undefined;
                             max_age?: number | undefined;
                             acr_values?: string | undefined;
@@ -20197,17 +20445,17 @@ declare function init(config: AuthHeroConfig): {
                         authParams: {
                             username?: string | undefined;
                             state?: string | undefined;
-                            audience?: string | undefined;
+                            act_as?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
-                            scope?: string | undefined;
-                            organization?: string | undefined;
                             redirect_uri?: string | undefined;
-                            code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
-                            code_challenge?: string | undefined;
+                            audience?: string | undefined;
+                            organization?: string | undefined;
                             nonce?: string | undefined;
-                            act_as?: string | undefined;
+                            scope?: string | undefined;
                             prompt?: string | undefined;
+                            code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
+                            code_challenge?: string | undefined;
                             ui_locales?: string | undefined;
                             max_age?: number | undefined;
                             acr_values?: string | undefined;
@@ -20339,14 +20587,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -20358,14 +20606,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -20380,14 +20628,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -20437,7 +20685,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -20486,7 +20734,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -20540,7 +20788,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -20589,7 +20837,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -20651,7 +20899,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -20700,7 +20948,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -20757,7 +21005,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -20806,7 +21054,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -20863,7 +21111,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -20912,7 +21160,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -21759,7 +22007,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     form: {
                         username: string;
-                        login_selection?: "password" | "code" | undefined;
+                        login_selection?: "code" | "password" | undefined;
                     };
                 };
                 output: {};
@@ -21773,7 +22021,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     form: {
                         username: string;
-                        login_selection?: "password" | "code" | undefined;
+                        login_selection?: "code" | "password" | undefined;
                     };
                 };
                 output: {};
@@ -22138,7 +22386,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "impersonate" | "login" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -22154,7 +22402,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "impersonate" | "login" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -22170,7 +22418,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "impersonate" | "login" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -22190,7 +22438,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     param: {
-                        screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "impersonate" | "login" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -22208,7 +22456,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "signup" | "impersonate" | "consent" | "login" | "reset-password" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "signup" | "impersonate" | "login" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -22311,4 +22559,4 @@ declare function init(config: AuthHeroConfig): {
 };
 
 export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_CUSTOM_DOMAINS_PATH, CONTROL_PLANE_CUSTOM_DOMAINS_SCOPE, CONTROL_PLANE_SYNC_EVENT_PREFIX, CONTROL_PLANE_SYNC_SCOPE, CONTROL_PLANE_TENANT_MEMBERS_PATH, CONTROL_PLANE_TENANT_MEMBERS_SCOPE, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, CodeHookDestination, ControlPlaneSyncDestination, DEFAULT_WFP_DISPATCH_BINDING, DEFAULT_WFP_SCRIPT_NAME_TEMPLATE, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PipelineDestination, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, RetentionSweepError, SignupPage as SignUpPage, SocialButton, Spinner, TenantInvitationNotFoundError, TenantMembersNotFoundError, TenantOrganizationNotFoundError, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, advanceUsersImport, backfillProxyHostsToKv, cleanupActionExecutions, cleanupCodes, cleanupOutbox, cleanupSessions, cleanupUserSessions, cleanupUsersImports, clientInfoMiddleware, composeHostResolvers, createApplySyncEvents, createAuthMiddleware, createControlPlaneClient, createControlPlaneCustomDomainsAdapter, createControlPlaneTenantMembersAdapter, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createInMemoryCache, createLocalTenantMembersBackend, createServiceTokenCore, createTenantMembersControlPlaneApp, createTenantMembersRoutes, createWfpTenantHostResolver, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, ensureSigningKey, fetchAll, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, isInteractiveClient, isWfpSubdomainSafeTenantId, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, provisionDefaultClients, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, resumeUsersImports, runOutboxRelay, runRetention, seed, tailwindCss, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wfpTenantHost, wrapProxyAdaptersWithKvPublish, wrapTenantsAdapterWithWfpKvPublish };
-export type { ActionExecutionsCleanupParams, AdvanceOptions, AdvanceResult, AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, CodesCleanupParams, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, ControlPlaneTenantMembersOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureSigningKeyOptions, EnsureSigningKeyResult, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetControlPlaneToken, GetServiceToken, GetTenantMembersBackend, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, LocalTenantMembersBackendOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, OutboxMetric, OutboxMetricName, OutboxMetricsSink, OutboxPipelineConfig, PipelineDestinationOptions, PipelineRecord, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, ResumeUsersImportsOptions, ResumeUsersImportsResult, RetentionSweep, RetentionSweepFailed, RetentionSweepSkipped, RetentionSweepStatus, RetentionSweepSwept, RolePermissionHooks, RunOutboxRelayConfig, RunRetentionConfig, RunRetentionResult, SeedOptions, SeedResult, ServiceTokenResponse, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantInvitation, TenantInvitationInput, TenantMember, TenantMembersBackend, TenantMembersControlPlaneOptions, TenantMembersListResult, TenantMembersPageParams, TenantOperationExecutorBinding, TenantRole, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, UsersImportCleanupParams, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };
+export type { ActionExecutionsCleanupParams, AdvanceOptions, AdvanceResult, AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, CodesCleanupParams, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, ControlPlaneTenantMembersOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureSigningKeyOptions, EnsureSigningKeyResult, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetControlPlaneToken, GetServiceToken, GetTenantMembersBackend, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, LocalTenantMembersBackendOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, McpConfig, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, OutboxMetric, OutboxMetricName, OutboxMetricsSink, OutboxPipelineConfig, PipelineDestinationOptions, PipelineRecord, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, ResumeUsersImportsOptions, ResumeUsersImportsResult, RetentionSweep, RetentionSweepFailed, RetentionSweepSkipped, RetentionSweepStatus, RetentionSweepSwept, RolePermissionHooks, RunOutboxRelayConfig, RunRetentionConfig, RunRetentionResult, SeedOptions, SeedResult, ServiceTokenResponse, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantInvitation, TenantInvitationInput, TenantMember, TenantMembersBackend, TenantMembersControlPlaneOptions, TenantMembersListResult, TenantMembersPageParams, TenantOperationExecutorBinding, TenantRole, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, UsersImportCleanupParams, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };