authhero 9.24.0 → 9.24.1

package/dist/types/routes/universal-login/common.d.ts

@@ -224,7 +224,7 @@ export declare function initJSXRoute(ctx: Context<{
             pushed_authorization_requests_supported?: boolean | undefined;
             authorization_response_iss_parameter_supported?: boolean | undefined;
             deployment_type?: "shared" | "wfp" | undefined;
-            provisioning_state?: "pending" | "ready" | "failed" | undefined;
+            provisioning_state?: "pending" | "failed" | "ready" | undefined;
             provisioning_error?: string | undefined;
             provisioning_state_changed_at?: string | undefined;
             bundle_configuration?: string | undefined;
@@ -272,7 +272,7 @@ export declare function initJSXRoute(ctx: Context<{
                 } | undefined;
             } | undefined;
             mfa?: {
-                policy?: "never" | "always" | undefined;
+                policy?: "always" | "never" | undefined;
                 factors?: {
                     sms: boolean;
                     otp: boolean;
@@ -371,7 +371,7 @@ export declare function initJSXRoute(ctx: Context<{
                         } | undefined;
                         unique?: boolean | undefined;
                         profile_required?: boolean | undefined;
-                        verification_method?: "code" | "link" | undefined;
+                        verification_method?: "link" | "code" | undefined;
                     } | undefined;
                     username?: {
                         identifier?: {
@@ -599,7 +599,7 @@ export declare function initJSXRoute(ctx: Context<{
         pushed_authorization_requests_supported?: boolean | undefined;
         authorization_response_iss_parameter_supported?: boolean | undefined;
         deployment_type?: "shared" | "wfp" | undefined;
-        provisioning_state?: "pending" | "ready" | "failed" | undefined;
+        provisioning_state?: "pending" | "failed" | "ready" | undefined;
         provisioning_error?: string | undefined;
         provisioning_state_changed_at?: string | undefined;
         bundle_configuration?: string | undefined;
@@ -647,7 +647,7 @@ export declare function initJSXRoute(ctx: Context<{
             } | undefined;
         } | undefined;
         mfa?: {
-            policy?: "never" | "always" | undefined;
+            policy?: "always" | "never" | undefined;
             factors?: {
                 sms: boolean;
                 otp: boolean;
@@ -960,7 +960,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
             pushed_authorization_requests_supported?: boolean | undefined;
             authorization_response_iss_parameter_supported?: boolean | undefined;
             deployment_type?: "shared" | "wfp" | undefined;
-            provisioning_state?: "pending" | "ready" | "failed" | undefined;
+            provisioning_state?: "pending" | "failed" | "ready" | undefined;
             provisioning_error?: string | undefined;
             provisioning_state_changed_at?: string | undefined;
             bundle_configuration?: string | undefined;
@@ -1008,7 +1008,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
                 } | undefined;
             } | undefined;
             mfa?: {
-                policy?: "never" | "always" | undefined;
+                policy?: "always" | "never" | undefined;
                 factors?: {
                     sms: boolean;
                     otp: boolean;
@@ -1107,7 +1107,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
                         } | undefined;
                         unique?: boolean | undefined;
                         profile_required?: boolean | undefined;
-                        verification_method?: "code" | "link" | undefined;
+                        verification_method?: "link" | "code" | undefined;
                     } | undefined;
                     username?: {
                         identifier?: {
@@ -1404,7 +1404,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
         pushed_authorization_requests_supported?: boolean | undefined;
         authorization_response_iss_parameter_supported?: boolean | undefined;
         deployment_type?: "shared" | "wfp" | undefined;
-        provisioning_state?: "pending" | "ready" | "failed" | undefined;
+        provisioning_state?: "pending" | "failed" | "ready" | undefined;
         provisioning_error?: string | undefined;
         provisioning_state_changed_at?: string | undefined;
         bundle_configuration?: string | undefined;
@@ -1452,7 +1452,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
             } | undefined;
         } | undefined;
         mfa?: {
-            policy?: "never" | "always" | undefined;
+            policy?: "always" | "never" | undefined;
             factors?: {
                 sms: boolean;
                 otp: boolean;

package/dist/types/routes/universal-login/continue.d.ts

@@ -13,7 +13,7 @@ export declare const continueRoutes: OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 400;
+            status: 302;
         } | {
             input: {
                 query: {
@@ -22,7 +22,7 @@ export declare const continueRoutes: OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 302;
+            status: 400;
         } | {
             input: {
                 query: {

package/dist/types/routes/universal-login/flow-api.d.ts

@@ -43,7 +43,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                         hint?: string | undefined;
                         messages?: {
                             text: string;
-                            type: "success" | "error" | "info" | "warning";
+                            type: "error" | "success" | "info" | "warning";
                             id?: number | undefined;
                         }[] | undefined;
                     }[];
@@ -51,7 +51,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                     description?: string | undefined;
                     messages?: {
                         text: string;
-                        type: "success" | "error" | "info" | "warning";
+                        type: "error" | "success" | "info" | "warning";
                         id?: number | undefined;
                     }[] | undefined;
                     links?: {
@@ -123,7 +123,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                         hint?: string | undefined;
                         messages?: {
                             text: string;
-                            type: "success" | "error" | "info" | "warning";
+                            type: "error" | "success" | "info" | "warning";
                             id?: number | undefined;
                         }[] | undefined;
                     }[];
@@ -131,7 +131,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                     description?: string | undefined;
                     messages?: {
                         text: string;
-                        type: "success" | "error" | "info" | "warning";
+                        type: "error" | "success" | "info" | "warning";
                         id?: number | undefined;
                     }[] | undefined;
                     links?: {
@@ -220,7 +220,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                         hint?: string | undefined;
                         messages?: {
                             text: string;
-                            type: "success" | "error" | "info" | "warning";
+                            type: "error" | "success" | "info" | "warning";
                             id?: number | undefined;
                         }[] | undefined;
                     }[];
@@ -228,7 +228,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                     description?: string | undefined;
                     messages?: {
                         text: string;
-                        type: "success" | "error" | "info" | "warning";
+                        type: "error" | "success" | "info" | "warning";
                         id?: number | undefined;
                     }[] | undefined;
                     links?: {
@@ -335,7 +335,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                         hint?: string | undefined;
                         messages?: {
                             text: string;
-                            type: "success" | "error" | "info" | "warning";
+                            type: "error" | "success" | "info" | "warning";
                             id?: number | undefined;
                         }[] | undefined;
                     }[];
@@ -343,7 +343,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
                     description?: string | undefined;
                     messages?: {
                         text: string;
-                        type: "success" | "error" | "info" | "warning";
+                        type: "error" | "success" | "info" | "warning";
                         id?: number | undefined;
                     }[] | undefined;
                     links?: {

package/dist/types/routes/universal-login/identifier.d.ts

@@ -35,7 +35,7 @@ export declare const identifierRoutes: OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 400;
+            status: 302;
         } | {
             input: {
                 query: {
@@ -49,7 +49,7 @@ export declare const identifierRoutes: OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 302;
+            status: 400;
         };
     };
 }, "/">;

package/dist/types/routes/universal-login/impersonate.d.ts

@@ -13,7 +13,7 @@ export declare const impersonateRoutes: OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 400;
+            status: 200;
         } | {
             input: {
                 query: {
@@ -22,7 +22,7 @@ export declare const impersonateRoutes: OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 200;
+            status: 400;
         };
     };
 } & {
@@ -52,7 +52,7 @@ export declare const impersonateRoutes: OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 400;
+            status: 302;
         } | {
             input: {
                 query: {
@@ -65,7 +65,7 @@ export declare const impersonateRoutes: OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 302;
+            status: 400;
         };
     };
 }, "/">;

package/dist/types/routes/universal-login/index.d.ts

@@ -27,7 +27,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 400;
+            status: 302;
         } | {
             input: {
                 query: {
@@ -36,7 +36,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 302;
+            status: 400;
         } | {
             input: {
                 query: {
@@ -126,7 +126,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 400;
+            status: 200;
         } | {
             input: {
                 query: {
@@ -135,7 +135,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 200;
+            status: 400;
         };
     };
 } & {
@@ -165,7 +165,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 400;
+            status: 302;
         } | {
             input: {
                 query: {
@@ -178,7 +178,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 302;
+            status: 400;
         };
     };
 }, "/impersonate"> & import("hono/types").MergeSchemaPath<{
@@ -520,7 +520,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 400;
+            status: 302;
         } | {
             input: {
                 query: {
@@ -534,7 +534,7 @@ export default function create(config: AuthHeroConfig): OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 302;
+            status: 400;
         };
     };
 }, "/login/identifier"> & import("hono/types").MergeSchemaPath<{

package/dist/types/routes/universal-login/screens/account-mfa-phone-enrollment.d.ts

@@ -1,8 +1,3 @@
-/**
- * Account MFA Phone Enrollment screen - enroll SMS MFA from account settings
- *
- * Corresponds to: /u2/account/security/phone-enrollment
- */
 import type { ScreenDefinition } from "./types";
 /**
  * Screen definition for account MFA phone enrollment

package/dist/types/routes/universal-login/screens/account-mfa-totp-enrollment.d.ts

@@ -1,8 +1,3 @@
-/**
- * Account MFA TOTP Enrollment screen - enroll authenticator app from account settings
- *
- * Corresponds to: /u2/account/security/totp-enrollment
- */
 import type { ScreenDefinition } from "./types";
 /**
  * Screen definition for account MFA TOTP enrollment

package/dist/types/routes/universal-login/screens/account-passkeys.d.ts

@@ -1,8 +1,3 @@
-/**
- * Account Passkeys screen - manage passkey credentials
- *
- * Corresponds to: /u2/account/passkeys
- */
 import type { ScreenDefinition } from "./types";
 /**
  * Screen definition for the account-passkeys screen

package/dist/types/routes/universal-login/screens/connect-tenant-select.d.ts

@@ -1,13 +1,3 @@
-/**
- * Connect Tenant Select screen — control-plane-only step in the consent flow.
- *
- * When `/connect/start` is hit on the multi-tenancy control plane, the user
- * picks which child tenant the IAT should be minted on. Each child tenant is
- * represented by an organization on the control plane whose `name` matches
- * the child tenant id (see @authhero/multi-tenancy provisioning hooks).
- *
- * Corresponds to: /u2/connect/select-tenant
- */
 import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
 export declare function connectTenantSelectScreen(context: ScreenContext): Promise<ScreenResult>;
 export declare const connectTenantSelectScreenDefinition: ScreenDefinition;

package/dist/types/routes/universal-login/screens/identifier.d.ts

@@ -1,8 +1,3 @@
-/**
- * Identifier screen - the first screen in the login flow
- *
- * Corresponds to: /u/login/identifier
- */
 import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
 /**
  * Create the identifier screen

package/dist/types/routes/universal-login/screens/login.d.ts

@@ -1,11 +1,3 @@
-/**
- * Login screen - combined identifier + password screen (Identifier + Password flow)
- *
- * This screen shows email/username input, password input, and social login buttons
- * all on a single page. Used when identifier_first is set to false.
- *
- * Corresponds to: /u2/login
- */
 import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
 /**
  * Create the login screen (combined identifier + password)

package/dist/types/routes/universal-login/screens/mfa-login-options.d.ts

@@ -1,8 +1,3 @@
-/**
- * MFA Login Options screen - factor selection when multiple MFA methods are available
- *
- * Corresponds to: /u2/mfa/login-options
- */
 import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
 interface MfaOption {
     id: string;

package/dist/types/routes/universal-login/screens/mfa-phone-challenge.d.ts

@@ -1,8 +1,3 @@
-/**
- * MFA Phone Challenge screen - for verifying SMS MFA code
- *
- * Corresponds to: /u2/mfa/phone-challenge
- */
 import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
 /**
  * Create the mfa-phone-challenge screen

package/dist/types/routes/universal-login/screens/mfa-phone-enrollment.d.ts

@@ -1,8 +1,3 @@
-/**
- * MFA Phone Enrollment screen - for setting up SMS MFA
- *
- * Corresponds to: /u2/mfa/phone-enrollment
- */
 import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
 /**
  * Create the mfa-phone-enrollment screen

package/dist/types/routes/universal-login/screens/mfa-totp-challenge.d.ts

@@ -1,8 +1,3 @@
-/**
- * MFA TOTP Challenge screen - for verifying authenticator app MFA code
- *
- * Corresponds to: /u2/mfa/totp-challenge
- */
 import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
 /**
  * Create the mfa-totp-challenge screen

package/dist/types/routes/universal-login/screens/mfa-totp-enrollment.d.ts

@@ -1,8 +1,3 @@
-/**
- * MFA TOTP Enrollment screen - for setting up authenticator app MFA
- *
- * Corresponds to: /u2/mfa/totp-enrollment
- */
 import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
 /**
  * Create the mfa-totp-enrollment screen

package/dist/types/routes/universal-login/screens/passkey-challenge.d.ts

@@ -1,16 +1,2 @@
-/**
- * Passkey Challenge screen — WebAuthn authentication ceremony
- *
- * Allows users to sign in using a registered passkey (discoverable credential).
- * This triggers navigator.credentials.get() and verifies the assertion response.
- *
- * GET:  Generates WebAuthn authentication options and renders the challenge screen.
- * POST: Verifies the assertion response, resolves the user, and completes login.
- *
- * Passkey authentication bypasses MFA since it already provides strong
- * multi-factor assurance (possession + biometric/PIN).
- *
- * Corresponds to: /u2/passkey/challenge
- */
 import type { ScreenDefinition } from "./types";
 export declare const passkeyChallengeScreenDefinition: ScreenDefinition;

package/dist/types/routes/universal-login/screens/passkey-enrollment-nudge.d.ts

@@ -1,17 +1,2 @@
-/**
- * Passkey Enrollment Nudge screen
- *
- * Shown after login when progressive enrollment is enabled and the user
- * has no passkeys registered. Offers three choices:
- *   - "Set up passkey" → proceeds to the enrollment ceremony
- *   - "Maybe later"    → snoozes the prompt for 30 days
- *   - "Don't show again" → permanently opts out
- *
- * Client-side: if the browser doesn't support WebAuthn
- * (window.PublicKeyCredential is undefined), the screen auto-submits
- * with action_no_webauthn so the login flow is never blocked.
- *
- * Corresponds to: /u2/passkey/enrollment-nudge
- */
 import type { ScreenDefinition } from "./types";
 export declare const passkeyEnrollmentNudgeScreenDefinition: ScreenDefinition;

package/dist/types/routes/universal-login/screens/passkey-enrollment.d.ts

@@ -1,11 +1,2 @@
-/**
- * Passkey Enrollment screen — WebAuthn registration ceremony
- *
- * GET:  Generates WebAuthn registration options and renders a screen that
- *       triggers `navigator.credentials.create()` via an inline script.
- * POST: Verifies the attestation response and stores the credential.
- *
- * Corresponds to: /u2/passkey/enrollment
- */
 import type { ScreenDefinition } from "./types";
 export declare const passkeyEnrollmentScreenDefinition: ScreenDefinition;

package/dist/types/routes/universal-login/screens/reset-password-code.d.ts

@@ -1,12 +1,3 @@
-/**
- * Reset Password Code screen - enter code + new password
- *
- * Used when the connection's verification_method is "code".
- * The user receives a 6-digit code via email and enters it
- * along with their new password on the same page.
- *
- * Corresponds to: /u2/reset-password/code
- */
 import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
 /**
  * Create the reset-password-code screen

package/dist/types/routes/universal-login/screens/reset-password.d.ts

@@ -1,8 +1,3 @@
-/**
- * Reset Password screen - set new password after reset
- *
- * Corresponds to: /u/reset-password
- */
 import type { ScreenContext, ScreenResult, ScreenDefinition } from "./types";
 import type { Context } from "hono";
 import type { Bindings, Variables } from "../../../types";
@@ -19,7 +14,8 @@ export declare function executePasswordReset(params: {
     client: EnrichedClient;
     code: string;
     password: string;
-    username: string;
+    loginSessionId: string;
+    method: "code" | "link";
 }): Promise<{
     success: true;
 } | {

package/dist/types/routes/universal-login/u2-index.d.ts

@@ -165,7 +165,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
         $get: {
             input: {
                 param: {
-                    screen: "signup" | "impersonate" | "login" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                    screen: "account" | "login" | "impersonate" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                 };
             } & {
                 query: {
@@ -181,7 +181,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
         } | {
             input: {
                 param: {
-                    screen: "signup" | "impersonate" | "login" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                    screen: "account" | "login" | "impersonate" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                 };
             } & {
                 query: {
@@ -193,11 +193,11 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 400;
+            status: 302;
         } | {
             input: {
                 param: {
-                    screen: "signup" | "impersonate" | "login" | "account" | "reset-password" | "consent" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                    screen: "account" | "login" | "impersonate" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                 };
             } & {
                 query: {
@@ -209,7 +209,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
             };
             output: {};
             outputFormat: string;
-            status: 302;
+            status: 400;
         };
     };
 } & {
@@ -217,7 +217,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
         $post: {
             input: {
                 param: {
-                    screen: "signup" | "impersonate" | "login" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                    screen: "login" | "impersonate" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                 };
             } & {
                 query: {
@@ -235,7 +235,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
         } | {
             input: {
                 param: {
-                    screen: "signup" | "impersonate" | "login" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                    screen: "login" | "impersonate" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                 };
             } & {
                 query: {