authhero 9.12.1 → 9.13.1

package/dist/authhero.d.ts

@@ -32,6 +32,40 @@ interface PreferState {
     appliedTokens(): PreferToken[];
 }
 
+/**
+ * Embedded login: the hosted /u2 pages rendered inside an <iframe> on the
+ * application's own site (typically in a modal) instead of a full redirect.
+ *
+ * A login session is "embedded" when it was started with
+ * `response_mode=web_message`: the authorization response is then delivered
+ * with `postMessage` to the window that owns the iframe, which only makes
+ * sense when the pages are framed. Nothing else is needed to opt in — the
+ * application lists its origin in the client's `web_origins` (Auth0's
+ * "Allowed Web Origins", already the allowlist for the web_message mode)
+ * and the pages become frameable from exactly those origins.
+ *
+ * Credentials never leave the auth origin: the widget runs inside the frame,
+ * so scripts on the embedding page cannot read what the user types. The
+ * frame and its parent only exchange the messages documented on
+ * `buildEmbedPageScript`.
+ */
+
+type EmbedLoginContext = {
+    /**
+     * Origin of the application page that owns the iframe: the origin of the
+     * login session's `redirect_uri`. The same target the web_message response
+     * itself is posted to, so a page that can receive the tokens can receive
+     * the resize messages and nothing else can.
+     */
+    targetOrigin: string;
+    /**
+     * Origins allowed to frame the pages, from the client's `web_origins`.
+     * Empty means nobody may: the pages render with `frame-ancestors 'none'`
+     * until the application's origin is added to the client.
+     */
+    frameAncestors: string[];
+};
+
 type Variables = {
     tenant_id: string;
     ip: string;
@@ -54,6 +88,7 @@ type Variables = {
     organization_id?: string;
     org_name?: string;
     loginSession?: LoginSession;
+    embedLogin?: EmbedLoginContext;
     auth0_client?: Auth0Client;
     useragent?: string;
     countryCode?: CountryCode;
@@ -1425,6 +1460,24 @@ declare function createAuthMiddleware(app: OpenAPIHono<{
     Variables: any;
 }>, next: Next) => Promise<void>;
 
+/**
+ * Configuration for the Management API MCP endpoint. See `AuthHeroConfig.mcp`.
+ */
+interface McpConfig {
+    /**
+     * Confidential client on the control-plane tenant used for the in-process
+     * token exchange. It needs a `client_secret`, `organization_usage` set to
+     * `allow` or `require`, and the token-exchange grant in `grant_types` (or
+     * no `grant_types` restriction).
+     */
+    exchangeClientId: string;
+    /**
+     * Issuer of the control-plane tenant that MCP clients authenticate against,
+     * byte-exact including the trailing slash (e.g.
+     * `https://control.token.example.com/`). Defaults to `env.ISSUER`.
+     */
+    controlPlaneIssuer?: string;
+}
 /**
  * Parameters passed to a custom webhook invoker function.
  */
@@ -1738,6 +1791,23 @@ interface AuthHeroConfig {
      * ```
      */
     managementApiExtensions?: ManagementApiExtension[];
+    /**
+     * Remote MCP server for the Management API (`POST /mcp` plus RFC 9728
+     * protected-resource metadata). Only meaningful on a deployment that serves
+     * the control plane (`multiTenancyConfig.controlPlaneTenantId`).
+     *
+     * MCP clients authenticate against the control-plane tenant (typically via
+     * CIMD). On the control-plane host every tool takes a `tenant_id`; on a
+     * tenant's own host (subdomain or custom domain) the tools are pinned to
+     * that tenant. Either way, access is decided by control-plane organization
+     * membership: each tool call exchanges the caller's token (RFC 8693) for an
+     * org-scoped management token and dispatches in-process to `/api/v2`.
+     *
+     * When `controlPlaneIssuer` differs from `env.ISSUER`, the exchanged token
+     * carries that issuer, so `additionalIssuers` must accept it for the
+     * management API — the same requirement the admin UI already has.
+     */
+    mcp?: McpConfig;
     /**
      * Optional privileged control-plane endpoint for the `@authhero/proxy`
      * data plane. When set, mounts `GET /api/v2/proxy/control-plane/hosts/:host`
@@ -2211,6 +2281,7 @@ type Bindings = {
     userLinkingMode?: UserLinkingModeOption;
     usernamePasswordProvider?: UsernamePasswordProviderResolver;
     signingKeyMode?: SigningKeyModeOption;
+    mcp?: McpConfig;
     /**
      * Allow outbound fetches (jwks_uri, request_uri) to localhost / private IP
      * ranges and over plain http. Intended for tests and local development;
@@ -4772,7 +4843,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        type: "push" | "email" | "passkey" | "webauthn-roaming" | "webauthn-platform" | "phone" | "totp";
+                        type: "email" | "push" | "passkey" | "webauthn-roaming" | "webauthn-platform" | "phone" | "totp";
                         phone_number?: string | undefined;
                         totp_secret?: string | undefined;
                         credential_id?: string | undefined;
@@ -5879,9 +5950,9 @@ declare function init(config: AuthHeroConfig): {
                             email?: string | undefined;
                         };
                         id?: string | undefined;
-                        connection_id?: string | undefined;
                         app_metadata?: Record<string, any> | undefined;
                         user_metadata?: Record<string, any> | undefined;
+                        connection_id?: string | undefined;
                         roles?: string[] | undefined;
                         ttl_sec?: number | undefined;
                         send_invitation_email?: boolean | undefined;
@@ -6197,6 +6268,41 @@ declare function init(config: AuthHeroConfig): {
                     }[];
                     total?: number | undefined;
                     next?: string | undefined;
+                } | {
+                    resource_servers: {
+                        name: string;
+                        identifier: string;
+                        token_lifetime: number;
+                        token_lifetime_for_web: number;
+                        id?: string | undefined;
+                        scopes?: {
+                            value: string;
+                            description?: string | undefined;
+                        }[] | undefined;
+                        signing_alg?: string | undefined;
+                        signing_secret?: string | undefined;
+                        skip_consent_for_verifiable_first_party_clients?: boolean | undefined;
+                        allow_offline_access?: boolean | undefined;
+                        verificationKey?: string | undefined;
+                        options?: {
+                            token_dialect?: "access_token" | "access_token_authz" | undefined;
+                            enforce_policies?: boolean | undefined;
+                            allow_skipping_userinfo?: boolean | undefined;
+                            skip_userinfo?: boolean | undefined;
+                            persist_client_authorization?: boolean | undefined;
+                            enable_introspection_endpoint?: boolean | undefined;
+                            mtls?: {
+                                bound_access_tokens?: boolean | undefined;
+                            } | undefined;
+                        } | undefined;
+                        is_system?: boolean | undefined;
+                        metadata?: {
+                            [x: string]: any;
+                        } | undefined;
+                        created_at?: string | undefined;
+                        updated_at?: string | undefined;
+                    }[];
+                    next?: string | undefined;
                 };
                 outputFormat: "json";
                 status: 200;
@@ -11711,7 +11817,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    prompt: "common" | "login" | "signup" | "mfa" | "organizations" | "status" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
+                    prompt: "mfa" | "organizations" | "status" | "login" | "signup" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                     language: string;
                 }[];
                 outputFormat: "json";
@@ -11749,7 +11855,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        prompt: "common" | "login" | "signup" | "mfa" | "organizations" | "status" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
+                        prompt: "mfa" | "organizations" | "status" | "login" | "signup" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -11771,7 +11877,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        prompt: "common" | "login" | "signup" | "mfa" | "organizations" | "status" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
+                        prompt: "mfa" | "organizations" | "status" | "login" | "signup" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -11795,7 +11901,7 @@ declare function init(config: AuthHeroConfig): {
             $delete: {
                 input: {
                     param: {
-                        prompt: "common" | "login" | "signup" | "mfa" | "organizations" | "status" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
+                        prompt: "mfa" | "organizations" | "status" | "login" | "signup" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -11901,7 +12007,7 @@ declare function init(config: AuthHeroConfig): {
                                 } | undefined;
                                 unique?: boolean | undefined;
                                 profile_required?: boolean | undefined;
-                                verification_method?: "code" | "link" | undefined;
+                                verification_method?: "link" | "code" | undefined;
                             } | undefined;
                             username?: {
                                 identifier?: {
@@ -12039,7 +12145,7 @@ declare function init(config: AuthHeroConfig): {
                                     } | undefined;
                                     unique?: boolean | undefined;
                                     profile_required?: boolean | undefined;
-                                    verification_method?: "code" | "link" | undefined;
+                                    verification_method?: "link" | "code" | undefined;
                                 } | undefined;
                                 username?: {
                                     identifier?: {
@@ -12103,6 +12209,143 @@ declare function init(config: AuthHeroConfig): {
                     }[];
                     total?: number | undefined;
                     next?: string | undefined;
+                } | {
+                    connections: {
+                        created_at: string;
+                        updated_at: string;
+                        name: string;
+                        strategy: string;
+                        options: {
+                            kid?: string | undefined;
+                            team_id?: string | undefined;
+                            realms?: string | undefined;
+                            authentication_method?: string | undefined;
+                            client_id?: string | undefined;
+                            client_secret?: string | undefined;
+                            app_secret?: string | undefined;
+                            scope?: string | undefined;
+                            client_secret_hint?: string | undefined;
+                            app_secret_hint?: string | undefined;
+                            twilio_token_hint?: string | undefined;
+                            authorization_endpoint?: string | undefined;
+                            token_endpoint?: string | undefined;
+                            userinfo_endpoint?: string | undefined;
+                            jwks_uri?: string | undefined;
+                            discovery_url?: string | undefined;
+                            issuer?: string | undefined;
+                            token_endpoint_auth_method?: "client_secret_post" | "client_secret_basic" | undefined;
+                            provider?: string | undefined;
+                            from?: string | undefined;
+                            twilio_sid?: string | undefined;
+                            twilio_token?: string | undefined;
+                            icon_url?: string | undefined;
+                            domain_aliases?: string[] | undefined;
+                            callback_url?: string | undefined;
+                            passwordPolicy?: "none" | "low" | "fair" | "good" | "excellent" | undefined;
+                            password_complexity_options?: {
+                                min_length?: number | undefined;
+                            } | undefined;
+                            password_history?: {
+                                enable?: boolean | undefined;
+                                size?: number | undefined;
+                            } | undefined;
+                            password_no_personal_info?: {
+                                enable?: boolean | undefined;
+                            } | undefined;
+                            password_dictionary?: {
+                                enable?: boolean | undefined;
+                                dictionary?: string[] | undefined;
+                            } | undefined;
+                            disable_signup?: boolean | undefined;
+                            brute_force_protection?: boolean | undefined;
+                            import_mode?: boolean | undefined;
+                            configuration?: {
+                                token_endpoint?: string | undefined;
+                                userinfo_endpoint?: string | undefined;
+                                client_id?: string | undefined;
+                                client_secret?: string | undefined;
+                                client_secret_hint?: string | undefined;
+                                realm?: string | undefined;
+                            } | undefined;
+                            attributes?: {
+                                email?: {
+                                    identifier?: {
+                                        active?: boolean | undefined;
+                                    } | undefined;
+                                    signup?: {
+                                        status?: "optional" | "required" | "disabled" | undefined;
+                                        verification?: {
+                                            active?: boolean | undefined;
+                                        } | undefined;
+                                    } | undefined;
+                                    validation?: {
+                                        allowed?: boolean | undefined;
+                                    } | undefined;
+                                    unique?: boolean | undefined;
+                                    profile_required?: boolean | undefined;
+                                    verification_method?: "link" | "code" | undefined;
+                                } | undefined;
+                                username?: {
+                                    identifier?: {
+                                        active?: boolean | undefined;
+                                    } | undefined;
+                                    signup?: {
+                                        status?: "optional" | "required" | "disabled" | undefined;
+                                    } | undefined;
+                                    validation?: {
+                                        max_length?: number | undefined;
+                                        min_length?: number | undefined;
+                                        allowed_types?: {
+                                            email?: boolean | undefined;
+                                            phone_number?: boolean | undefined;
+                                        } | undefined;
+                                    } | undefined;
+                                    profile_required?: boolean | undefined;
+                                } | undefined;
+                                phone_number?: {
+                                    identifier?: {
+                                        active?: boolean | undefined;
+                                    } | undefined;
+                                    signup?: {
+                                        status?: "optional" | "required" | "disabled" | undefined;
+                                    } | undefined;
+                                } | undefined;
+                            } | undefined;
+                            authentication_methods?: {
+                                password?: {
+                                    enabled?: boolean | undefined;
+                                } | undefined;
+                                passkey?: {
+                                    enabled?: boolean | undefined;
+                                } | undefined;
+                            } | undefined;
+                            passkey_options?: {
+                                challenge_ui?: "both" | "autofill" | "button" | undefined;
+                                local_enrollment_enabled?: boolean | undefined;
+                                progressive_enrollment_enabled?: boolean | undefined;
+                            } | undefined;
+                            requires_username?: boolean | undefined;
+                            validation?: {
+                                username?: {
+                                    min?: number | undefined;
+                                    max?: number | undefined;
+                                } | undefined;
+                            } | undefined;
+                            set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
+                        };
+                        id?: string | undefined;
+                        display_name?: string | undefined;
+                        enabled_clients?: string[] | undefined;
+                        response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
+                        response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
+                        is_domain_connection?: boolean | undefined;
+                        show_as_button?: boolean | undefined;
+                        metadata?: {
+                            [x: string]: any;
+                        } | undefined;
+                        is_system?: boolean | undefined;
+                    }[];
+                    next?: string | undefined;
                 };
                 outputFormat: "json";
                 status: 200;
@@ -12193,7 +12436,7 @@ declare function init(config: AuthHeroConfig): {
                                 } | undefined;
                                 unique?: boolean | undefined;
                                 profile_required?: boolean | undefined;
-                                verification_method?: "code" | "link" | undefined;
+                                verification_method?: "link" | "code" | undefined;
                             } | undefined;
                             username?: {
                                 identifier?: {
@@ -12376,7 +12619,7 @@ declare function init(config: AuthHeroConfig): {
                                 } | undefined;
                                 unique?: boolean | undefined;
                                 profile_required?: boolean | undefined;
-                                verification_method?: "code" | "link" | undefined;
+                                verification_method?: "link" | "code" | undefined;
                             } | undefined;
                             username?: {
                                 identifier?: {
@@ -12538,7 +12781,7 @@ declare function init(config: AuthHeroConfig): {
                                 } | undefined;
                                 unique?: boolean | undefined;
                                 profile_required?: boolean | undefined;
-                                verification_method?: "code" | "link" | undefined;
+                                verification_method?: "link" | "code" | undefined;
                             } | undefined;
                             username?: {
                                 identifier?: {
@@ -13407,7 +13650,7 @@ declare function init(config: AuthHeroConfig): {
                         log_type: string;
                         category: "user_action" | "admin_action" | "system" | "api";
                         actor: {
-                            type: "client_credentials" | "user" | "system" | "admin" | "api_key";
+                            type: "user" | "client_credentials" | "system" | "admin" | "api_key";
                             id?: string | undefined;
                             email?: string | undefined;
                             org_id?: string | undefined;
@@ -14078,7 +14321,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "i" | "fn" | "cs" | "fi" | "sv" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fertft" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -14117,7 +14360,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "i" | "fn" | "cs" | "fi" | "sv" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fertft" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -14156,7 +14399,7 @@ declare function init(config: AuthHeroConfig): {
                     next?: string | undefined;
                 } | {
                     logs: {
-                        type: "i" | "fn" | "cs" | "fi" | "sv" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fertft" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -14210,7 +14453,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "i" | "fn" | "cs" | "fi" | "sv" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fertft" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -15465,7 +15708,7 @@ declare function init(config: AuthHeroConfig): {
                                         } | undefined;
                                         unique?: boolean | undefined;
                                         profile_required?: boolean | undefined;
-                                        verification_method?: "code" | "link" | undefined;
+                                        verification_method?: "link" | "code" | undefined;
                                     } | undefined;
                                     username?: {
                                         identifier?: {
@@ -15623,7 +15866,7 @@ declare function init(config: AuthHeroConfig): {
                                         } | undefined;
                                         unique?: boolean | undefined;
                                         profile_required?: boolean | undefined;
-                                        verification_method?: "code" | "link" | undefined;
+                                        verification_method?: "link" | "code" | undefined;
                                     } | undefined;
                                     username?: {
                                         identifier?: {
@@ -15796,8 +16039,8 @@ declare function init(config: AuthHeroConfig): {
                     thumbprint: string;
                     tenant_id?: string | undefined;
                     connection?: string | undefined;
-                    next?: boolean | undefined;
                     revoked_at?: string | undefined;
+                    next?: boolean | undefined;
                     current?: boolean | undefined;
                     previous?: boolean | undefined;
                     current_since?: string | undefined;
@@ -15835,8 +16078,8 @@ declare function init(config: AuthHeroConfig): {
                     thumbprint: string;
                     tenant_id?: string | undefined;
                     connection?: string | undefined;
-                    next?: boolean | undefined;
                     revoked_at?: string | undefined;
+                    next?: boolean | undefined;
                     current?: boolean | undefined;
                     previous?: boolean | undefined;
                     current_since?: string | undefined;
@@ -15873,8 +16116,8 @@ declare function init(config: AuthHeroConfig): {
                     thumbprint: string;
                     tenant_id?: string | undefined;
                     connection?: string | undefined;
-                    next?: boolean | undefined;
                     revoked_at?: string | undefined;
+                    next?: boolean | undefined;
                     current?: boolean | undefined;
                     previous?: boolean | undefined;
                     current_since?: string | undefined;
@@ -15913,8 +16156,8 @@ declare function init(config: AuthHeroConfig): {
                     thumbprint: string;
                     tenant_id?: string | undefined;
                     connection?: string | undefined;
-                    next?: boolean | undefined;
                     revoked_at?: string | undefined;
+                    next?: boolean | undefined;
                     current?: boolean | undefined;
                     previous?: boolean | undefined;
                     current_since?: string | undefined;
@@ -16764,11 +17007,12 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    id: string;
-                    created_at: string;
                     client_id: string;
                     user_id: string;
+                    id: string;
+                    created_at: string;
                     rotating: boolean;
+                    login_id: string;
                     device: {
                         initial_user_agent: string;
                         initial_ip: string;
@@ -16777,29 +17021,29 @@ declare function init(config: AuthHeroConfig): {
                         last_ip: string;
                         last_asn: string;
                     };
-                    login_id: string;
                     resource_servers: {
                         audience: string;
                         scopes: string;
                     }[];
-                    revoked_at?: string | undefined;
                     expires_at?: string | undefined;
-                    idle_expires_at?: string | undefined;
                     session_id?: string | undefined;
-                    organization?: string | undefined;
                     auth_connection?: string | undefined;
                     auth_strategy?: {
                         strategy: string;
                         strategy_type: string;
                     } | undefined;
+                    organization?: string | undefined;
+                    idle_expires_at?: string | undefined;
                     last_exchanged_at?: string | undefined;
+                    revoked_at?: string | undefined;
                 }[] | {
                     tokens: {
-                        id: string;
-                        created_at: string;
                         client_id: string;
                         user_id: string;
+                        id: string;
+                        created_at: string;
                         rotating: boolean;
+                        login_id: string;
                         device: {
                             initial_user_agent: string;
                             initial_ip: string;
@@ -16808,22 +17052,21 @@ declare function init(config: AuthHeroConfig): {
                             last_ip: string;
                             last_asn: string;
                         };
-                        login_id: string;
                         resource_servers: {
                             audience: string;
                             scopes: string;
                         }[];
-                        revoked_at?: string | undefined;
                         expires_at?: string | undefined;
-                        idle_expires_at?: string | undefined;
                         session_id?: string | undefined;
-                        organization?: string | undefined;
                         auth_connection?: string | undefined;
                         auth_strategy?: {
                             strategy: string;
                             strategy_type: string;
                         } | undefined;
+                        organization?: string | undefined;
+                        idle_expires_at?: string | undefined;
                         last_exchanged_at?: string | undefined;
+                        revoked_at?: string | undefined;
                     }[];
                     next?: string | undefined;
                 } | {
@@ -16831,11 +17074,12 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     tokens: {
-                        id: string;
-                        created_at: string;
                         client_id: string;
                         user_id: string;
+                        id: string;
+                        created_at: string;
                         rotating: boolean;
+                        login_id: string;
                         device: {
                             initial_user_agent: string;
                             initial_ip: string;
@@ -16844,22 +17088,21 @@ declare function init(config: AuthHeroConfig): {
                             last_ip: string;
                             last_asn: string;
                         };
-                        login_id: string;
                         resource_servers: {
                             audience: string;
                             scopes: string;
                         }[];
-                        revoked_at?: string | undefined;
                         expires_at?: string | undefined;
-                        idle_expires_at?: string | undefined;
                         session_id?: string | undefined;
-                        organization?: string | undefined;
                         auth_connection?: string | undefined;
                         auth_strategy?: {
                             strategy: string;
                             strategy_type: string;
                         } | undefined;
+                        organization?: string | undefined;
+                        idle_expires_at?: string | undefined;
                         last_exchanged_at?: string | undefined;
+                        revoked_at?: string | undefined;
                     }[];
                     total?: number | undefined;
                     next?: string | undefined;
@@ -16910,7 +17153,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "i" | "fn" | "cs" | "fi" | "sv" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fertft" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -16949,7 +17192,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "i" | "fn" | "cs" | "fi" | "sv" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fertft" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -17795,7 +18038,7 @@ declare function init(config: AuthHeroConfig): {
                     primary: boolean;
                     status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
-                    custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
+                    custom_client_ip_header?: "cf-connecting-ip" | "x-forwarded-for" | "null" | "true-client-ip" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -17836,7 +18079,7 @@ declare function init(config: AuthHeroConfig): {
                     primary: boolean;
                     status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
-                    custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
+                    custom_client_ip_header?: "cf-connecting-ip" | "x-forwarded-for" | "null" | "true-client-ip" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -17889,7 +18132,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     json: {
                         tls_policy?: "recommended" | undefined;
-                        custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
+                        custom_client_ip_header?: "cf-connecting-ip" | "x-forwarded-for" | "null" | "true-client-ip" | "x-azure-clientip" | undefined;
                         domain_metadata?: Record<string, string> | undefined;
                     };
                 };
@@ -17900,7 +18143,7 @@ declare function init(config: AuthHeroConfig): {
                     primary: boolean;
                     status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
-                    custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
+                    custom_client_ip_header?: "cf-connecting-ip" | "x-forwarded-for" | "null" | "true-client-ip" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -17936,7 +18179,7 @@ declare function init(config: AuthHeroConfig): {
                         custom_domain_id?: string | undefined;
                         verification_method?: "txt" | undefined;
                         tls_policy?: "recommended" | undefined;
-                        custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
+                        custom_client_ip_header?: "cf-connecting-ip" | "x-forwarded-for" | "null" | "true-client-ip" | "x-azure-clientip" | undefined;
                         domain_metadata?: Record<string, string> | undefined;
                     };
                 };
@@ -17947,7 +18190,7 @@ declare function init(config: AuthHeroConfig): {
                     primary: boolean;
                     status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
-                    custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
+                    custom_client_ip_header?: "cf-connecting-ip" | "x-forwarded-for" | "null" | "true-client-ip" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -17993,7 +18236,7 @@ declare function init(config: AuthHeroConfig): {
                     primary: boolean;
                     status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
-                    custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
+                    custom_client_ip_header?: "cf-connecting-ip" | "x-forwarded-for" | "null" | "true-client-ip" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -18034,7 +18277,7 @@ declare function init(config: AuthHeroConfig): {
                     primary: boolean;
                     status: "pending" | "ready" | "disabled" | "pending_verification";
                     verification_method?: "txt" | undefined;
-                    custom_client_ip_header?: "null" | "true-client-ip" | "cf-connecting-ip" | "x-forwarded-for" | "x-azure-clientip" | undefined;
+                    custom_client_ip_header?: "cf-connecting-ip" | "x-forwarded-for" | "null" | "true-client-ip" | "x-azure-clientip" | undefined;
                     domain_metadata?: {
                         [x: string]: string;
                     } | undefined;
@@ -18131,7 +18374,7 @@ declare function init(config: AuthHeroConfig): {
                         background_color: string;
                         background_image_url: string;
                         page_layout: "center" | "left" | "right";
-                        logo_placement?: "widget" | "chip" | "none" | undefined;
+                        logo_placement?: "none" | "widget" | "chip" | undefined;
                     };
                     widget: {
                         header_text_alignment: "center" | "left" | "right";
@@ -18221,7 +18464,7 @@ declare function init(config: AuthHeroConfig): {
                             background_color: string;
                             background_image_url: string;
                             page_layout: "center" | "left" | "right";
-                            logo_placement?: "widget" | "chip" | "none" | undefined;
+                            logo_placement?: "none" | "widget" | "chip" | undefined;
                         };
                         widget: {
                             header_text_alignment: "center" | "left" | "right";
@@ -18300,7 +18543,7 @@ declare function init(config: AuthHeroConfig): {
                         background_color: string;
                         background_image_url: string;
                         page_layout: "center" | "left" | "right";
-                        logo_placement?: "widget" | "chip" | "none" | undefined;
+                        logo_placement?: "none" | "widget" | "chip" | undefined;
                     };
                     widget: {
                         header_text_alignment: "center" | "left" | "right";
@@ -18548,7 +18791,7 @@ declare function init(config: AuthHeroConfig): {
                                 background_color: string;
                                 background_image_url: string;
                                 page_layout: "center" | "left" | "right";
-                                logo_placement?: "widget" | "chip" | "none" | undefined;
+                                logo_placement?: "none" | "widget" | "chip" | undefined;
                             } | undefined;
                             widget?: {
                                 header_text_alignment: "center" | "left" | "right";
@@ -18751,7 +18994,7 @@ declare function init(config: AuthHeroConfig): {
                     logs: {
                         action_name: string;
                         lines: {
-                            level: "error" | "log" | "info" | "warn" | "debug";
+                            level: "log" | "error" | "info" | "warn" | "debug";
                             message: string;
                         }[];
                     }[];
@@ -19413,7 +19656,7 @@ declare function init(config: AuthHeroConfig): {
                         args: hono_utils_types.JSONValue[];
                     }[];
                     logs: {
-                        level: "error" | "log" | "info" | "warn" | "debug";
+                        level: "log" | "error" | "info" | "warn" | "debug";
                         message: string;
                     }[];
                     error?: string | undefined;
@@ -19907,6 +20150,7 @@ declare function init(config: AuthHeroConfig): {
                         response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                         response_type?: unknown;
                         audience?: string | undefined;
+                        resource?: string | undefined;
                         connection?: string | undefined;
                         nonce?: string | undefined;
                         max_age?: string | undefined;
@@ -19941,6 +20185,7 @@ declare function init(config: AuthHeroConfig): {
                         response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                         response_type?: unknown;
                         audience?: string | undefined;
+                        resource?: string | undefined;
                         connection?: string | undefined;
                         nonce?: string | undefined;
                         max_age?: string | undefined;
@@ -19975,6 +20220,7 @@ declare function init(config: AuthHeroConfig): {
                         response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                         response_type?: unknown;
                         audience?: string | undefined;
+                        resource?: string | undefined;
                         connection?: string | undefined;
                         nonce?: string | undefined;
                         max_age?: string | undefined;
@@ -20017,6 +20263,7 @@ declare function init(config: AuthHeroConfig): {
                         response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                         response_type?: unknown;
                         audience?: string | undefined;
+                        resource?: string | undefined;
                         connection?: string | undefined;
                         nonce?: string | undefined;
                         max_age?: string | undefined;
@@ -20053,6 +20300,7 @@ declare function init(config: AuthHeroConfig): {
                         response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                         response_type?: unknown;
                         audience?: string | undefined;
+                        resource?: string | undefined;
                         connection?: string | undefined;
                         nonce?: string | undefined;
                         max_age?: string | undefined;
@@ -20157,19 +20405,19 @@ declare function init(config: AuthHeroConfig): {
                         connection: "email";
                         client_id: string;
                         email: string;
-                        send: "code" | "link";
+                        send: "link" | "code";
                         authParams: {
-                            state?: string | undefined;
-                            audience?: string | undefined;
                             username?: string | undefined;
-                            scope?: string | undefined;
+                            state?: string | undefined;
+                            redirect_uri?: string | undefined;
                             organization?: string | undefined;
+                            audience?: string | undefined;
+                            act_as?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
-                            redirect_uri?: string | undefined;
-                            prompt?: string | undefined;
-                            act_as?: string | undefined;
                             nonce?: string | undefined;
+                            scope?: string | undefined;
+                            prompt?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
                             code_challenge?: string | undefined;
                             ui_locales?: string | undefined;
@@ -20193,19 +20441,19 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         connection: "sms";
                         phone_number: string;
-                        send: "code" | "link";
+                        send: "link" | "code";
                         authParams: {
-                            state?: string | undefined;
-                            audience?: string | undefined;
                             username?: string | undefined;
-                            scope?: string | undefined;
+                            state?: string | undefined;
+                            redirect_uri?: string | undefined;
                             organization?: string | undefined;
+                            audience?: string | undefined;
+                            act_as?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
-                            redirect_uri?: string | undefined;
-                            prompt?: string | undefined;
-                            act_as?: string | undefined;
                             nonce?: string | undefined;
+                            scope?: string | undefined;
+                            prompt?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
                             code_challenge?: string | undefined;
                             ui_locales?: string | undefined;
@@ -20339,14 +20587,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -20358,14 +20606,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -20380,14 +20628,14 @@ declare function init(config: AuthHeroConfig): {
                 input: {
                     form: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
                 } & {
                     json: {
                         token: string;
-                        token_type_hint?: "access_token" | "refresh_token" | undefined;
+                        token_type_hint?: "refresh_token" | "access_token" | undefined;
                         client_id?: string | undefined;
                         client_secret?: string | undefined;
                     };
@@ -21759,7 +22007,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     form: {
                         username: string;
-                        login_selection?: "code" | "password" | undefined;
+                        login_selection?: "password" | "code" | undefined;
                     };
                 };
                 output: {};
@@ -21773,7 +22021,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     form: {
                         username: string;
-                        login_selection?: "code" | "password" | undefined;
+                        login_selection?: "password" | "code" | undefined;
                     };
                 };
                 output: {};
@@ -22138,7 +22386,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "reset-password/request" | "reset-password/code" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -22154,7 +22402,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "reset-password/request" | "reset-password/code" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -22170,7 +22418,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "reset-password/request" | "reset-password/code" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -22190,7 +22438,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     param: {
-                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "enter-password" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -22208,7 +22456,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "enter-password" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -22311,4 +22559,4 @@ declare function init(config: AuthHeroConfig): {
 };
 
 export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_CUSTOM_DOMAINS_PATH, CONTROL_PLANE_CUSTOM_DOMAINS_SCOPE, CONTROL_PLANE_SYNC_EVENT_PREFIX, CONTROL_PLANE_SYNC_SCOPE, CONTROL_PLANE_TENANT_MEMBERS_PATH, CONTROL_PLANE_TENANT_MEMBERS_SCOPE, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, CodeHookDestination, ControlPlaneSyncDestination, DEFAULT_WFP_DISPATCH_BINDING, DEFAULT_WFP_SCRIPT_NAME_TEMPLATE, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PipelineDestination, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, RetentionSweepError, SignupPage as SignUpPage, SocialButton, Spinner, TenantInvitationNotFoundError, TenantMembersNotFoundError, TenantOrganizationNotFoundError, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, advanceUsersImport, backfillProxyHostsToKv, cleanupActionExecutions, cleanupCodes, cleanupOutbox, cleanupSessions, cleanupUserSessions, cleanupUsersImports, clientInfoMiddleware, composeHostResolvers, createApplySyncEvents, createAuthMiddleware, createControlPlaneClient, createControlPlaneCustomDomainsAdapter, createControlPlaneTenantMembersAdapter, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createInMemoryCache, createLocalTenantMembersBackend, createServiceTokenCore, createTenantMembersControlPlaneApp, createTenantMembersRoutes, createWfpTenantHostResolver, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, ensureSigningKey, fetchAll, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, isInteractiveClient, isWfpSubdomainSafeTenantId, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, provisionDefaultClients, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, resumeUsersImports, runOutboxRelay, runRetention, seed, tailwindCss, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wfpTenantHost, wrapProxyAdaptersWithKvPublish, wrapTenantsAdapterWithWfpKvPublish };
-export type { ActionExecutionsCleanupParams, AdvanceOptions, AdvanceResult, AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, CodesCleanupParams, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, ControlPlaneTenantMembersOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureSigningKeyOptions, EnsureSigningKeyResult, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetControlPlaneToken, GetServiceToken, GetTenantMembersBackend, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, LocalTenantMembersBackendOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, OutboxMetric, OutboxMetricName, OutboxMetricsSink, OutboxPipelineConfig, PipelineDestinationOptions, PipelineRecord, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, ResumeUsersImportsOptions, ResumeUsersImportsResult, RetentionSweep, RetentionSweepFailed, RetentionSweepSkipped, RetentionSweepStatus, RetentionSweepSwept, RolePermissionHooks, RunOutboxRelayConfig, RunRetentionConfig, RunRetentionResult, SeedOptions, SeedResult, ServiceTokenResponse, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantInvitation, TenantInvitationInput, TenantMember, TenantMembersBackend, TenantMembersControlPlaneOptions, TenantMembersListResult, TenantMembersPageParams, TenantOperationExecutorBinding, TenantRole, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, UsersImportCleanupParams, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };
+export type { ActionExecutionsCleanupParams, AdvanceOptions, AdvanceResult, AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, CodesCleanupParams, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, ControlPlaneTenantMembersOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureSigningKeyOptions, EnsureSigningKeyResult, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetControlPlaneToken, GetServiceToken, GetTenantMembersBackend, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, LocalTenantMembersBackendOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, McpConfig, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, OutboxMetric, OutboxMetricName, OutboxMetricsSink, OutboxPipelineConfig, PipelineDestinationOptions, PipelineRecord, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, ResumeUsersImportsOptions, ResumeUsersImportsResult, RetentionSweep, RetentionSweepFailed, RetentionSweepSkipped, RetentionSweepStatus, RetentionSweepSwept, RolePermissionHooks, RunOutboxRelayConfig, RunRetentionConfig, RunRetentionResult, SeedOptions, SeedResult, ServiceTokenResponse, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantInvitation, TenantInvitationInput, TenantMember, TenantMembersBackend, TenantMembersControlPlaneOptions, TenantMembersListResult, TenantMembersPageParams, TenantOperationExecutorBinding, TenantRole, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, UsersImportCleanupParams, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };