authhero 9.24.1 → 9.26.0

package/dist/authhero.d.ts

@@ -1,5 +1,5 @@
 import * as _authhero_adapter_interfaces from '@authhero/adapter-interfaces';
-import { DataAdapters, LoginSession, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, LinkCandidate, roleSchema, inviteSchema, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Hook, TenantOperationKind, TenantOperation, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, OutboxAdapter, AuditEvent, CodesAdapter, ActionExecutionsAdapter, HooksAdapter, Client, LogsDataAdapter, LogInsert, UserDataAdapter, AuditCategory, ProxyRoutesAdapter, CustomDomainsAdapter, TenantsDataAdapter, KeysAdapter, ListParams, CodeExecutionResult } from '@authhero/adapter-interfaces';
+import { DataAdapters, LoginSession, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, LinkCandidate, roleSchema, inviteSchema, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Action, ActionInsert, ActionUpdate, Hook, HookInsert, HookCode, HookCodeInsert, TenantOperationKind, TenantOperation, Rollout, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, OutboxAdapter, AuditEvent, CodesAdapter, ActionExecutionsAdapter, HooksAdapter, Client, LogsDataAdapter, LogInsert, UserDataAdapter, AuditCategory, ProxyRoutesAdapter, CustomDomainsAdapter, TenantsDataAdapter, KeysAdapter, ListParams, CodeExecutionResult } from '@authhero/adapter-interfaces';
 export * from '@authhero/adapter-interfaces';
 import * as hono_utils_http_status from 'hono/utils/http-status';
 import * as hono_types from 'hono/types';
@@ -92,6 +92,11 @@ type Variables = {
      * twice. Read it through `getBaseData`.
      */
     baseData?: DataAdapters;
+    /**
+     * Management API only: the request stack before platform-scoped rows are
+     * hidden from it. Code-hook execution reads this; see `getExecutorData`.
+     */
+    executorData?: DataAdapters;
     tenant_id: string;
     ip: string;
     client_id?: string;
@@ -115,6 +120,9 @@ type Variables = {
         org_id?: string;
         scope?: string;
         aud?: string | string[];
+        azp?: string;
+        gty?: string;
+        jti?: string;
     };
     organization_id?: string;
     org_name?: string;
@@ -353,6 +361,13 @@ declare const enrichedClientSchema: z.ZodObject<{
     tenant: z.ZodObject<{
         created_at: z.ZodPipe<z.ZodNullable<z.ZodString>, z.ZodTransform<string, string | null>>;
         updated_at: z.ZodPipe<z.ZodNullable<z.ZodString>, z.ZodTransform<string, string | null>>;
+        parent_tenant_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        config_sync: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+            "inherit-on-read": "inherit-on-read";
+            synced: "synced";
+        }>>>;
+        config_sync_hash: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        config_synced_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         audience: z.ZodOptional<z.ZodString>;
         friendly_name: z.ZodString;
         picture_url: z.ZodOptional<z.ZodString>;
@@ -560,6 +575,17 @@ declare const enrichedClientSchema: z.ZodObject<{
     connections: z.ZodArray<z.ZodObject<{
         created_at: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         updated_at: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        scope: z.ZodOptional<z.ZodEnum<{
+            local: "local";
+            shared: "shared";
+            platform: "platform";
+        }>>;
+        override: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            secrets: "secrets";
+            fields: "fields";
+        }>>;
+        enforce: z.ZodOptional<z.ZodBoolean>;
         id: z.ZodOptional<z.ZodString>;
         name: z.ZodString;
         display_name: z.ZodOptional<z.ZodString>;
@@ -1674,6 +1700,9 @@ interface EntityHooksConfig {
     rolePermissions?: (RolePermissionHooks | undefined)[];
     connections?: (EntityHooks<Connection, ConnectionInsert> | undefined)[];
     tenants?: (EntityHooks<Tenant, CreateTenantParams> | undefined)[];
+    actions?: (EntityHooks<Action, ActionInsert, ActionUpdate> | undefined)[];
+    hooks?: (EntityHooks<Hook, HookInsert> | undefined)[];
+    hookCode?: (EntityHooks<HookCode, HookCodeInsert> | undefined)[];
 }
 /**
  * Route extension for the management API.
@@ -1698,12 +1727,39 @@ interface ManagementApiExtension {
  * resolve as soon as the run is enqueued — clients poll
  * `GET /api/v2/operations/{id}`.
  */
+/**
+ * Creates and controls fleet rollouts of synced config (issue #1499). Kept
+ * structural, like {@link TenantOperationExecutorBinding}: the multi-tenancy
+ * package's `createRolloutController` satisfies it.
+ */
+interface RolloutControllerBinding {
+    create(params: {
+        rootTenantId?: string;
+        tenantIds?: string[];
+        canary?: number;
+        waves?: number[];
+        failureThreshold?: number;
+        maxConcurrent?: number;
+        dryRun?: boolean;
+        force?: boolean;
+        initiatedBy?: string;
+    }): Promise<Rollout>;
+    pause(id: string, reason?: string): Promise<Rollout | null>;
+    resume(id: string): Promise<Rollout | null>;
+}
 interface TenantOperationExecutorBinding {
     engine: string;
+    /**
+     * The kinds this executor can run. Absent means any. A request for another
+     * kind is answered `501` without creating an operation.
+     */
+    kinds?: readonly TenantOperationKind[];
     enqueue(params: {
         kind: TenantOperationKind;
         tenant_id: string | null;
         initiated_by?: string;
+        /** Kind-specific parameters, fixed at creation. Never contains secrets. */
+        input?: Record<string, unknown>;
     }): Promise<TenantOperation>;
 }
 /**
@@ -2109,6 +2165,12 @@ interface AuthHeroConfig {
      * satisfy this shape.
      */
     tenantOperationExecutor?: TenantOperationExecutorBinding;
+    /**
+     * Creates and controls fleet rollouts of synced config. Drives
+     * `POST /api/v2/rollouts` and the pause and resume routes; reading rollouts
+     * only needs the `rollouts` adapter.
+     */
+    rolloutController?: RolloutControllerBinding;
     /**
      * Maximum accepted size of a bulk user-import file, in bytes
      * (`POST /api/v2/jobs/users-imports`). Defaults to Auth0's documented
@@ -2473,6 +2535,7 @@ type Bindings = {
     webhookInvoker?: WebhookInvoker;
     tenantUpgrade?: (tenantId: string) => Promise<void>;
     tenantOperationExecutor?: TenantOperationExecutorBinding;
+    rolloutController?: RolloutControllerBinding;
     usersImportMaxBytes?: number;
     usersImportMaxConcurrentJobs?: number;
     unsafeAllowAzpCustomClaim?: boolean;
@@ -2945,6 +3008,13 @@ declare function decryptField(value: string, key: CryptoKey): Promise<string>;
  * ring's default key and is byte-compatible with `encryptField` (legacy form).
  */
 declare function encryptFieldWithRing(plaintext: string, ring: KeyRing, keyId?: string): Promise<EncryptedField>;
+/**
+ * Whether `ring` can decrypt `value`. Plaintext values are trivially readable.
+ * For ciphertext this checks that the key id embedded in it is in the ring and
+ * that decryption succeeds (a key can be present but wrong). Never throws and
+ * never returns the plaintext.
+ */
+declare function canDecrypt(value: string, ring: KeyRing): Promise<boolean>;
 /**
  * Decrypts a value using a key ring, selecting the key from the id embedded in
  * the ciphertext (or the default key for legacy unkeyed values). Plaintext
@@ -2974,7 +3044,8 @@ interface EncryptionOptions {
  * Encrypted columns: clients.client_secret, connections.options
  * (client_secret/app_secret/twilio_token/configuration.client_secret),
  * email_providers.credentials, authentication_methods.totp_secret,
- * migration_sources.credentials.client_secret.
+ * migration_sources.credentials.client_secret, actions.secrets[].value,
+ * action_versions.secrets[].value, hook_code.secrets values.
  *
  * clientConnections.listByClient is also wrapped so its returned Connection
  * objects are decrypted — getEnrichedClient uses this path to load connections
@@ -3436,6 +3507,48 @@ interface CreateDefaultDestinationsConfig {
  */
 declare function createDefaultDestinations(config: CreateDefaultDestinationsConfig): EventDestination[];
 
+declare function isSyncedRowId(id: string | undefined | null): boolean;
+
+/**
+ * Hides `scope: "platform"` rows that a config sync delivered into a tenant
+ * from that tenant's own management API. Such rows must run (the code-hook
+ * executor reads them through other adapters) but their code and secrets are
+ * never shown, listed, edited or referenced by the tenant's admins.
+ *
+ * A row is hidden when it is platform-scoped **and** has a synced id. The
+ * control plane's own origin rows are platform-scoped too, but they are
+ * owned by the tenant that publishes them and stay visible there. Operators
+ * (control-plane credentials) see everything.
+ *
+ * A hidden row behaves as if it did not exist: `get` returns `null`, lists omit
+ * it, and writes against it are refused as not found. List totals and
+ * checkpoint cursors are not adjusted for hidden rows.
+ *
+ * Limit: this protects against the tenant's management API. The code and
+ * (encrypted) secrets are still stored in the tenant's database, so anyone
+ * with access to the database or the worker environment can read them.
+ */
+interface PlatformRowsOptions {
+    /** The tenant whose management API is being served. */
+    tenantId: string;
+    /** Control-plane credentials see platform rows. */
+    isOperator: boolean;
+}
+declare function withPlatformRowsHidden(data: DataAdapters, options: PlatformRowsOptions): DataAdapters;
+
+/**
+ * The adapter stack code-hook and webhook execution reads.
+ *
+ * The management API hides platform-scoped rows that a config sync delivered
+ * from `ctx.var.data`, but hooks that run inline inside a management request
+ * (pre-registration, pre-deletion, ...) must still see and run them. Where no
+ * separate stack was installed this is the request's own stack.
+ */
+declare function getExecutorData(ctx: Context<{
+    Bindings: Bindings;
+    Variables: Variables;
+}>): DataAdapters;
+
 /**
  * Whether a client can anchor interactive, user-facing flows (universal login,
  * the DCR `/connect/start` consent bounce, etc.).
@@ -5015,7 +5128,7 @@ declare function init(config: AuthHeroConfig): {
                 output: {
                     id: string;
                     type: string;
-                    status: "completed" | "pending" | "failed";
+                    status: "pending" | "failed" | "completed";
                     created_at?: string | undefined;
                     connection_id?: string | undefined;
                     external_id?: string | undefined;
@@ -5048,7 +5161,7 @@ declare function init(config: AuthHeroConfig): {
                 output: {
                     id: string;
                     type: string;
-                    status: "completed" | "pending" | "failed";
+                    status: "pending" | "failed" | "completed";
                     created_at?: string | undefined;
                     connection_id?: string | undefined;
                     external_id?: string | undefined;
@@ -5208,7 +5321,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        type: "push" | "email" | "passkey" | "phone" | "totp" | "webauthn-roaming" | "webauthn-platform";
+                        type: "push" | "email" | "passkey" | "webauthn-roaming" | "webauthn-platform" | "phone" | "totp";
                         phone_number?: string | undefined;
                         totp_secret?: string | undefined;
                         credential_id?: string | undefined;
@@ -5348,7 +5461,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "otp" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 }[];
@@ -5503,7 +5616,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        factor_name: "email" | "otp" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                        factor_name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -5511,7 +5624,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "otp" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -5524,7 +5637,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        factor_name: "email" | "otp" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                        factor_name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -5536,7 +5649,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "otp" | "sms" | "duo" | "webauthn-roaming" | "webauthn-platform" | "push-notification" | "recovery-code";
+                    name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -6357,11 +6470,11 @@ declare function init(config: AuthHeroConfig): {
                             email?: string | undefined;
                         };
                         id?: string | undefined;
-                        roles?: string[] | undefined;
+                        connection_id?: string | undefined;
                         app_metadata?: Record<string, any> | undefined;
                         user_metadata?: Record<string, any> | undefined;
-                        connection_id?: string | undefined;
                         ttl_sec?: number | undefined;
+                        roles?: string[] | undefined;
                         send_invitation_email?: boolean | undefined;
                     };
                 };
@@ -6561,8 +6674,8 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        show_as_button?: boolean | undefined;
                         assign_membership_on_login?: boolean | undefined;
+                        show_as_button?: boolean | undefined;
                         is_signup_enabled?: boolean | undefined;
                     };
                 };
@@ -6625,6 +6738,12 @@ declare function init(config: AuthHeroConfig): {
                     identifier: string;
                     token_lifetime: number;
                     token_lifetime_for_web: number;
+                    metadata?: {
+                        [x: string]: any;
+                    } | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     id?: string | undefined;
                     scopes?: {
                         value: string;
@@ -6647,9 +6766,6 @@ declare function init(config: AuthHeroConfig): {
                         } | undefined;
                     } | undefined;
                     is_system?: boolean | undefined;
-                    metadata?: {
-                        [x: string]: any;
-                    } | undefined;
                     created_at?: string | undefined;
                     updated_at?: string | undefined;
                 }[] | {
@@ -6661,6 +6777,12 @@ declare function init(config: AuthHeroConfig): {
                         identifier: string;
                         token_lifetime: number;
                         token_lifetime_for_web: number;
+                        metadata?: {
+                            [x: string]: any;
+                        } | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         id?: string | undefined;
                         scopes?: {
                             value: string;
@@ -6683,9 +6805,6 @@ declare function init(config: AuthHeroConfig): {
                             } | undefined;
                         } | undefined;
                         is_system?: boolean | undefined;
-                        metadata?: {
-                            [x: string]: any;
-                        } | undefined;
                         created_at?: string | undefined;
                         updated_at?: string | undefined;
                     }[];
@@ -6697,6 +6816,12 @@ declare function init(config: AuthHeroConfig): {
                         identifier: string;
                         token_lifetime: number;
                         token_lifetime_for_web: number;
+                        metadata?: {
+                            [x: string]: any;
+                        } | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         id?: string | undefined;
                         scopes?: {
                             value: string;
@@ -6719,9 +6844,6 @@ declare function init(config: AuthHeroConfig): {
                             } | undefined;
                         } | undefined;
                         is_system?: boolean | undefined;
-                        metadata?: {
-                            [x: string]: any;
-                        } | undefined;
                         created_at?: string | undefined;
                         updated_at?: string | undefined;
                     }[];
@@ -6748,6 +6870,12 @@ declare function init(config: AuthHeroConfig): {
                     identifier: string;
                     token_lifetime: number;
                     token_lifetime_for_web: number;
+                    metadata?: {
+                        [x: string]: any;
+                    } | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     id?: string | undefined;
                     scopes?: {
                         value: string;
@@ -6770,9 +6898,6 @@ declare function init(config: AuthHeroConfig): {
                         } | undefined;
                     } | undefined;
                     is_system?: boolean | undefined;
-                    metadata?: {
-                        [x: string]: any;
-                    } | undefined;
                     created_at?: string | undefined;
                     updated_at?: string | undefined;
                 };
@@ -6795,6 +6920,19 @@ declare function init(config: AuthHeroConfig): {
                 output: {};
                 outputFormat: string;
                 status: 200;
+            } | {
+                input: {
+                    param: {
+                        id: string;
+                    };
+                } & {
+                    header: {
+                        "tenant-id"?: string | undefined;
+                    };
+                };
+                output: {};
+                outputFormat: string;
+                status: 204;
             };
         };
     } & {
@@ -6810,6 +6948,10 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
+                        metadata?: Record<string, any> | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         id?: string | undefined;
                         name?: string | undefined;
                         identifier?: string | undefined;
@@ -6836,7 +6978,6 @@ declare function init(config: AuthHeroConfig): {
                             } | undefined;
                         } | undefined;
                         is_system?: boolean | undefined;
-                        metadata?: Record<string, any> | undefined;
                     };
                 };
                 output: {
@@ -6844,6 +6985,12 @@ declare function init(config: AuthHeroConfig): {
                     identifier: string;
                     token_lifetime: number;
                     token_lifetime_for_web: number;
+                    metadata?: {
+                        [x: string]: any;
+                    } | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     id?: string | undefined;
                     scopes?: {
                         value: string;
@@ -6866,9 +7013,6 @@ declare function init(config: AuthHeroConfig): {
                         } | undefined;
                     } | undefined;
                     is_system?: boolean | undefined;
-                    metadata?: {
-                        [x: string]: any;
-                    } | undefined;
                     created_at?: string | undefined;
                     updated_at?: string | undefined;
                 };
@@ -6887,6 +7031,10 @@ declare function init(config: AuthHeroConfig): {
                     json: {
                         name: string;
                         identifier: string;
+                        metadata?: Record<string, any> | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         id?: string | undefined;
                         scopes?: {
                             value: string;
@@ -6911,7 +7059,6 @@ declare function init(config: AuthHeroConfig): {
                             } | undefined;
                         } | undefined;
                         is_system?: boolean | undefined;
-                        metadata?: Record<string, any> | undefined;
                     };
                 };
                 output: {
@@ -6919,6 +7066,12 @@ declare function init(config: AuthHeroConfig): {
                     identifier: string;
                     token_lifetime: number;
                     token_lifetime_for_web: number;
+                    metadata?: {
+                        [x: string]: any;
+                    } | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     id?: string | undefined;
                     scopes?: {
                         value: string;
@@ -6941,9 +7094,6 @@ declare function init(config: AuthHeroConfig): {
                         } | undefined;
                     } | undefined;
                     is_system?: boolean | undefined;
-                    metadata?: {
-                        [x: string]: any;
-                    } | undefined;
                     created_at?: string | undefined;
                     updated_at?: string | undefined;
                 };
@@ -7189,9 +7339,9 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     query: {
-                        from?: string | undefined;
                         page?: string | undefined;
                         include_totals?: string | undefined;
+                        from?: string | undefined;
                         per_page?: string | undefined;
                         take?: string | undefined;
                     };
@@ -7337,7 +7487,7 @@ declare function init(config: AuthHeroConfig): {
                         type: "REDIRECT";
                         action: "REDIRECT_USER";
                         params: {
-                            target: "change-email" | "account" | "custom";
+                            target: "custom" | "change-email" | "account";
                             custom_url?: string | undefined;
                         };
                         alias?: string | undefined;
@@ -7390,7 +7540,7 @@ declare function init(config: AuthHeroConfig): {
                             type: "REDIRECT";
                             action: "REDIRECT_USER";
                             params: {
-                                target: "change-email" | "account" | "custom";
+                                target: "custom" | "change-email" | "account";
                                 custom_url?: string | undefined;
                             };
                             alias?: string | undefined;
@@ -7443,7 +7593,7 @@ declare function init(config: AuthHeroConfig): {
                             type: "REDIRECT";
                             action: "REDIRECT_USER";
                             params: {
-                                target: "change-email" | "account" | "custom";
+                                target: "custom" | "change-email" | "account";
                                 custom_url?: string | undefined;
                             };
                             alias?: string | undefined;
@@ -7511,7 +7661,7 @@ declare function init(config: AuthHeroConfig): {
                         type: "REDIRECT";
                         action: "REDIRECT_USER";
                         params: {
-                            target: "change-email" | "account" | "custom";
+                            target: "custom" | "change-email" | "account";
                             custom_url?: string | undefined;
                         };
                         alias?: string | undefined;
@@ -7592,7 +7742,7 @@ declare function init(config: AuthHeroConfig): {
                             type: "REDIRECT";
                             action: "REDIRECT_USER";
                             params: {
-                                target: "change-email" | "account" | "custom";
+                                target: "custom" | "change-email" | "account";
                                 custom_url?: string | undefined;
                             };
                             alias?: string | undefined;
@@ -7640,7 +7790,7 @@ declare function init(config: AuthHeroConfig): {
                         type: "REDIRECT";
                         action: "REDIRECT_USER";
                         params: {
-                            target: "change-email" | "account" | "custom";
+                            target: "custom" | "change-email" | "account";
                             custom_url?: string | undefined;
                         };
                         alias?: string | undefined;
@@ -7700,7 +7850,7 @@ declare function init(config: AuthHeroConfig): {
                             type: "REDIRECT";
                             action: "REDIRECT_USER";
                             params: {
-                                target: "change-email" | "account" | "custom";
+                                target: "custom" | "change-email" | "account";
                                 custom_url?: string | undefined;
                             };
                             alias?: string | undefined;
@@ -7748,7 +7898,7 @@ declare function init(config: AuthHeroConfig): {
                         type: "REDIRECT";
                         action: "REDIRECT_USER";
                         params: {
-                            target: "change-email" | "account" | "custom";
+                            target: "custom" | "change-email" | "account";
                             custom_url?: string | undefined;
                         };
                         alias?: string | undefined;
@@ -12908,6 +13058,9 @@ declare function init(config: AuthHeroConfig): {
                     password_first: boolean;
                     show_last_used_connection: boolean;
                     webauthn_platform_first_factor: boolean;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                 };
                 outputFormat: "json";
                 status: 200;
@@ -12927,6 +13080,9 @@ declare function init(config: AuthHeroConfig): {
                         password_first?: boolean | undefined;
                         show_last_used_connection?: boolean | undefined;
                         webauthn_platform_first_factor?: boolean | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                     };
                 };
                 output: {};
@@ -12943,7 +13099,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    prompt: "status" | "login" | "mfa" | "organizations" | "signup" | "email-otp-challenge" | "login-id" | "passkeys" | "signup-password" | "reset-password" | "login-passwordless" | "common" | "mfa-phone" | "mfa-otp" | "mfa-login-options" | "consent" | "invitation" | "login-password" | "signup-id" | "mfa-push" | "mfa-voice" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "captcha" | "custom-form";
+                    prompt: "status" | "login" | "signup" | "mfa" | "organizations" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                     language: string;
                 }[];
                 outputFormat: "json";
@@ -12981,7 +13137,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        prompt: "status" | "login" | "mfa" | "organizations" | "signup" | "email-otp-challenge" | "login-id" | "passkeys" | "signup-password" | "reset-password" | "login-passwordless" | "common" | "mfa-phone" | "mfa-otp" | "mfa-login-options" | "consent" | "invitation" | "login-password" | "signup-id" | "mfa-push" | "mfa-voice" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "captcha" | "custom-form";
+                        prompt: "status" | "login" | "signup" | "mfa" | "organizations" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -13003,7 +13159,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        prompt: "status" | "login" | "mfa" | "organizations" | "signup" | "email-otp-challenge" | "login-id" | "passkeys" | "signup-password" | "reset-password" | "login-passwordless" | "common" | "mfa-phone" | "mfa-otp" | "mfa-login-options" | "consent" | "invitation" | "login-password" | "signup-id" | "mfa-push" | "mfa-voice" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "captcha" | "custom-form";
+                        prompt: "status" | "login" | "signup" | "mfa" | "organizations" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -13027,7 +13183,7 @@ declare function init(config: AuthHeroConfig): {
             $delete: {
                 input: {
                     param: {
-                        prompt: "status" | "login" | "mfa" | "organizations" | "signup" | "email-otp-challenge" | "login-id" | "passkeys" | "signup-password" | "reset-password" | "login-passwordless" | "common" | "mfa-phone" | "mfa-otp" | "mfa-login-options" | "consent" | "invitation" | "login-password" | "signup-id" | "mfa-push" | "mfa-voice" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "captcha" | "custom-form";
+                        prompt: "status" | "login" | "signup" | "mfa" | "organizations" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -13045,7 +13201,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        prompt: "login" | "signup" | "login-id" | "signup-password" | "login-passwordless" | "login-password" | "signup-id" | "login-passwordless-sms-otp" | "login-passwordless-email-code";
+                        prompt: "login" | "signup" | "login-id" | "login-password" | "signup-id" | "signup-password" | "login-passwordless" | "login-passwordless-sms-otp" | "login-passwordless-email-code";
                     };
                 } & {
                     header: {
@@ -13071,7 +13227,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        prompt: "login" | "signup" | "login-id" | "signup-password" | "login-passwordless" | "login-password" | "signup-id" | "login-passwordless-sms-otp" | "login-passwordless-email-code";
+                        prompt: "login" | "signup" | "login-id" | "login-password" | "signup-id" | "signup-password" | "login-passwordless" | "login-passwordless-sms-otp" | "login-passwordless-email-code";
                     };
                 } & {
                     header: {
@@ -13187,7 +13343,7 @@ declare function init(config: AuthHeroConfig): {
                                 } | undefined;
                                 unique?: boolean | undefined;
                                 profile_required?: boolean | undefined;
-                                verification_method?: "link" | "code" | undefined;
+                                verification_method?: "code" | "link" | undefined;
                             } | undefined;
                             username?: {
                                 identifier?: {
@@ -13237,6 +13393,9 @@ declare function init(config: AuthHeroConfig): {
                         } | undefined;
                         set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
                     };
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     id?: string | undefined;
                     display_name?: string | undefined;
                     enabled_clients?: string[] | undefined;
@@ -13325,7 +13484,7 @@ declare function init(config: AuthHeroConfig): {
                                     } | undefined;
                                     unique?: boolean | undefined;
                                     profile_required?: boolean | undefined;
-                                    verification_method?: "link" | "code" | undefined;
+                                    verification_method?: "code" | "link" | undefined;
                                 } | undefined;
                                 username?: {
                                     identifier?: {
@@ -13375,6 +13534,9 @@ declare function init(config: AuthHeroConfig): {
                             } | undefined;
                             set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
                         };
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         id?: string | undefined;
                         display_name?: string | undefined;
                         enabled_clients?: string[] | undefined;
@@ -13463,7 +13625,7 @@ declare function init(config: AuthHeroConfig): {
                                     } | undefined;
                                     unique?: boolean | undefined;
                                     profile_required?: boolean | undefined;
-                                    verification_method?: "link" | "code" | undefined;
+                                    verification_method?: "code" | "link" | undefined;
                                 } | undefined;
                                 username?: {
                                     identifier?: {
@@ -13513,6 +13675,9 @@ declare function init(config: AuthHeroConfig): {
                             } | undefined;
                             set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
                         };
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         id?: string | undefined;
                         display_name?: string | undefined;
                         enabled_clients?: string[] | undefined;
@@ -13616,7 +13781,7 @@ declare function init(config: AuthHeroConfig): {
                                 } | undefined;
                                 unique?: boolean | undefined;
                                 profile_required?: boolean | undefined;
-                                verification_method?: "link" | "code" | undefined;
+                                verification_method?: "code" | "link" | undefined;
                             } | undefined;
                             username?: {
                                 identifier?: {
@@ -13666,6 +13831,9 @@ declare function init(config: AuthHeroConfig): {
                         } | undefined;
                         set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
                     };
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     id?: string | undefined;
                     display_name?: string | undefined;
                     enabled_clients?: string[] | undefined;
@@ -13697,6 +13865,19 @@ declare function init(config: AuthHeroConfig): {
                 output: {};
                 outputFormat: string;
                 status: 200;
+            } | {
+                input: {
+                    param: {
+                        id: string;
+                    };
+                } & {
+                    header: {
+                        "tenant-id"?: string | undefined;
+                    };
+                };
+                output: {};
+                outputFormat: string;
+                status: 204;
             };
         };
     } & {
@@ -13712,6 +13893,9 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         id?: string | undefined;
                         name?: string | undefined;
                         display_name?: string | undefined;
@@ -13799,7 +13983,7 @@ declare function init(config: AuthHeroConfig): {
                                 } | undefined;
                                 unique?: boolean | undefined;
                                 profile_required?: boolean | undefined;
-                                verification_method?: "link" | "code" | undefined;
+                                verification_method?: "code" | "link" | undefined;
                             } | undefined;
                             username?: {
                                 identifier?: {
@@ -13849,6 +14033,9 @@ declare function init(config: AuthHeroConfig): {
                         } | undefined;
                         set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
                     };
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     id?: string | undefined;
                     display_name?: string | undefined;
                     enabled_clients?: string[] | undefined;
@@ -13876,6 +14063,9 @@ declare function init(config: AuthHeroConfig): {
                     json: {
                         name: string;
                         strategy: string;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         id?: string | undefined;
                         display_name?: string | undefined;
                         options?: unknown;
@@ -13961,7 +14151,7 @@ declare function init(config: AuthHeroConfig): {
                                 } | undefined;
                                 unique?: boolean | undefined;
                                 profile_required?: boolean | undefined;
-                                verification_method?: "link" | "code" | undefined;
+                                verification_method?: "code" | "link" | undefined;
                             } | undefined;
                             username?: {
                                 identifier?: {
@@ -14011,6 +14201,9 @@ declare function init(config: AuthHeroConfig): {
                         } | undefined;
                         set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
                     };
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     id?: string | undefined;
                     display_name?: string | undefined;
                     enabled_clients?: string[] | undefined;
@@ -14137,7 +14330,7 @@ declare function init(config: AuthHeroConfig): {
                     tenant_id: string;
                     created_at: string;
                     updated_at: string;
-                    deploymentStatus: "failed" | "deployed" | "not_required";
+                    deploymentStatus: "deployed" | "failed" | "not_required";
                     secrets?: {
                         [x: string]: string;
                     } | undefined;
@@ -14227,7 +14420,7 @@ declare function init(config: AuthHeroConfig): {
                     tenant_id: string;
                     created_at: string;
                     updated_at: string;
-                    deploymentStatus: "failed" | "deployed" | "not_required";
+                    deploymentStatus: "deployed" | "failed" | "not_required";
                     secrets?: {
                         [x: string]: string;
                     } | undefined;
@@ -14275,13 +14468,16 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: ({
-                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
                     updated_at: string;
                     hook_id: string;
                     url: string;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
@@ -14294,30 +14490,39 @@ declare function init(config: AuthHeroConfig): {
                     updated_at: string;
                     hook_id: string;
                     form_id: string;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
+                    trigger_id: "post-user-login" | "post-user-registration" | "post-user-update" | "credentials-exchange";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
                     updated_at: string;
                     hook_id: string;
                     template_id: "ensure-username" | "set-preferred-username" | "account-linking";
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "credentials-exchange";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
                     updated_at: string;
                     hook_id: string;
                     code_id: string;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
@@ -14330,6 +14535,9 @@ declare function init(config: AuthHeroConfig): {
                     updated_at: string;
                     hook_id: string;
                     page_id: "impersonate";
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
@@ -14340,13 +14548,16 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     hooks: ({
-                        trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+                        trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
                         enabled: boolean;
                         synchronous: boolean;
                         created_at: string;
                         updated_at: string;
                         hook_id: string;
                         url: string;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         priority?: number | undefined;
                         metadata?: {
                             [x: string]: hono_utils_types.JSONValue;
@@ -14359,30 +14570,39 @@ declare function init(config: AuthHeroConfig): {
                         updated_at: string;
                         hook_id: string;
                         form_id: string;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         priority?: number | undefined;
                         metadata?: {
                             [x: string]: hono_utils_types.JSONValue;
                         } | undefined;
                     } | {
-                        trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
+                        trigger_id: "post-user-login" | "post-user-registration" | "post-user-update" | "credentials-exchange";
                         enabled: boolean;
                         synchronous: boolean;
                         created_at: string;
                         updated_at: string;
                         hook_id: string;
                         template_id: "ensure-username" | "set-preferred-username" | "account-linking";
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         priority?: number | undefined;
                         metadata?: {
                             [x: string]: hono_utils_types.JSONValue;
                         } | undefined;
                     } | {
-                        trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+                        trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "credentials-exchange";
                         enabled: boolean;
                         synchronous: boolean;
                         created_at: string;
                         updated_at: string;
                         hook_id: string;
                         code_id: string;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         priority?: number | undefined;
                         metadata?: {
                             [x: string]: hono_utils_types.JSONValue;
@@ -14395,6 +14615,9 @@ declare function init(config: AuthHeroConfig): {
                         updated_at: string;
                         hook_id: string;
                         page_id: "impersonate";
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         priority?: number | undefined;
                         metadata?: {
                             [x: string]: hono_utils_types.JSONValue;
@@ -14405,13 +14628,16 @@ declare function init(config: AuthHeroConfig): {
                     next?: string | undefined;
                 } | {
                     hooks: ({
-                        trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+                        trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
                         enabled: boolean;
                         synchronous: boolean;
                         created_at: string;
                         updated_at: string;
                         hook_id: string;
                         url: string;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         priority?: number | undefined;
                         metadata?: {
                             [x: string]: hono_utils_types.JSONValue;
@@ -14424,30 +14650,39 @@ declare function init(config: AuthHeroConfig): {
                         updated_at: string;
                         hook_id: string;
                         form_id: string;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         priority?: number | undefined;
                         metadata?: {
                             [x: string]: hono_utils_types.JSONValue;
                         } | undefined;
                     } | {
-                        trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
+                        trigger_id: "post-user-login" | "post-user-registration" | "post-user-update" | "credentials-exchange";
                         enabled: boolean;
                         synchronous: boolean;
                         created_at: string;
                         updated_at: string;
                         hook_id: string;
                         template_id: "ensure-username" | "set-preferred-username" | "account-linking";
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         priority?: number | undefined;
                         metadata?: {
                             [x: string]: hono_utils_types.JSONValue;
                         } | undefined;
                     } | {
-                        trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+                        trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "credentials-exchange";
                         enabled: boolean;
                         synchronous: boolean;
                         created_at: string;
                         updated_at: string;
                         hook_id: string;
                         code_id: string;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         priority?: number | undefined;
                         metadata?: {
                             [x: string]: hono_utils_types.JSONValue;
@@ -14460,6 +14695,9 @@ declare function init(config: AuthHeroConfig): {
                         updated_at: string;
                         hook_id: string;
                         page_id: "impersonate";
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         priority?: number | undefined;
                         metadata?: {
                             [x: string]: hono_utils_types.JSONValue;
@@ -14481,8 +14719,11 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+                        trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
                         url: string;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         enabled?: boolean | undefined;
                         synchronous?: boolean | undefined;
                         priority?: number | undefined;
@@ -14491,22 +14732,31 @@ declare function init(config: AuthHeroConfig): {
                     } | {
                         trigger_id: "post-user-login";
                         form_id: string;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         enabled?: boolean | undefined;
                         synchronous?: boolean | undefined;
                         priority?: number | undefined;
                         hook_id?: string | undefined;
                         metadata?: Record<string, unknown> | undefined;
                     } | {
-                        trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
+                        trigger_id: "post-user-login" | "post-user-registration" | "post-user-update" | "credentials-exchange";
                         template_id: "ensure-username" | "set-preferred-username" | "account-linking";
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         enabled?: boolean | undefined;
                         synchronous?: boolean | undefined;
                         priority?: number | undefined;
                         hook_id?: string | undefined;
                         metadata?: Record<string, unknown> | undefined;
                     } | {
-                        trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+                        trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "credentials-exchange";
                         code_id: string;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         enabled?: boolean | undefined;
                         synchronous?: boolean | undefined;
                         priority?: number | undefined;
@@ -14516,6 +14766,9 @@ declare function init(config: AuthHeroConfig): {
                         trigger_id: "post-user-login";
                         page_id: "impersonate";
                         permission_required?: string | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         enabled?: boolean | undefined;
                         synchronous?: boolean | undefined;
                         priority?: number | undefined;
@@ -14524,13 +14777,16 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
                     updated_at: string;
                     hook_id: string;
                     url: string;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
@@ -14543,30 +14799,39 @@ declare function init(config: AuthHeroConfig): {
                     updated_at: string;
                     hook_id: string;
                     form_id: string;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
+                    trigger_id: "post-user-login" | "post-user-registration" | "post-user-update" | "credentials-exchange";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
                     updated_at: string;
                     hook_id: string;
                     template_id: "ensure-username" | "set-preferred-username" | "account-linking";
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "credentials-exchange";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
                     updated_at: string;
                     hook_id: string;
                     code_id: string;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
@@ -14579,6 +14844,9 @@ declare function init(config: AuthHeroConfig): {
                     updated_at: string;
                     hook_id: string;
                     page_id: "impersonate";
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
@@ -14634,13 +14902,16 @@ declare function init(config: AuthHeroConfig): {
                     json: unknown;
                 };
                 output: {
-                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
                     updated_at: string;
                     hook_id: string;
                     url: string;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
@@ -14653,30 +14924,39 @@ declare function init(config: AuthHeroConfig): {
                     updated_at: string;
                     hook_id: string;
                     form_id: string;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
+                    trigger_id: "post-user-login" | "post-user-registration" | "post-user-update" | "credentials-exchange";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
                     updated_at: string;
                     hook_id: string;
                     template_id: "ensure-username" | "set-preferred-username" | "account-linking";
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "credentials-exchange";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
                     updated_at: string;
                     hook_id: string;
                     code_id: string;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
@@ -14689,6 +14969,9 @@ declare function init(config: AuthHeroConfig): {
                     updated_at: string;
                     hook_id: string;
                     page_id: "impersonate";
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
@@ -14725,13 +15008,16 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
                     updated_at: string;
                     hook_id: string;
                     url: string;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
@@ -14744,30 +15030,39 @@ declare function init(config: AuthHeroConfig): {
                     updated_at: string;
                     hook_id: string;
                     form_id: string;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
+                    trigger_id: "post-user-login" | "post-user-registration" | "post-user-update" | "credentials-exchange";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
                     updated_at: string;
                     hook_id: string;
                     template_id: "ensure-username" | "set-preferred-username" | "account-linking";
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "credentials-exchange";
+                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "credentials-exchange";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
                     updated_at: string;
                     hook_id: string;
                     code_id: string;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
@@ -14780,6 +15075,9 @@ declare function init(config: AuthHeroConfig): {
                     updated_at: string;
                     hook_id: string;
                     page_id: "impersonate";
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     priority?: number | undefined;
                     metadata?: {
                         [x: string]: hono_utils_types.JSONValue;
@@ -14894,7 +15192,7 @@ declare function init(config: AuthHeroConfig): {
                         log_type: string;
                         category: "user_action" | "admin_action" | "system" | "api";
                         actor: {
-                            type: "user" | "api_key" | "client_credentials" | "system" | "admin";
+                            type: "user" | "client_credentials" | "system" | "admin" | "api_key";
                             id?: string | undefined;
                             email?: string | undefined;
                             org_id?: string | undefined;
@@ -14930,6 +15228,18 @@ declare function init(config: AuthHeroConfig): {
                             correlation_id?: string | undefined;
                             redirect_uri?: string | undefined;
                             authorization_url?: string | undefined;
+                            auth?: {
+                                strategy: string;
+                                user?: {
+                                    user_id: string;
+                                    name?: string | undefined;
+                                    email?: string | undefined;
+                                } | undefined;
+                                credentials?: {
+                                    jti?: string | undefined;
+                                    scopes?: string[] | undefined;
+                                } | undefined;
+                            } | undefined;
                         };
                         hostname: string;
                         timestamp: string;
@@ -14986,7 +15296,7 @@ declare function init(config: AuthHeroConfig): {
                         log_type: string;
                         category: "user_action" | "admin_action" | "system" | "api";
                         actor: {
-                            type: "user" | "api_key" | "client_credentials" | "system" | "admin";
+                            type: "user" | "client_credentials" | "system" | "admin" | "api_key";
                             id?: string | undefined;
                             email?: string | undefined;
                             org_id?: string | undefined;
@@ -15022,6 +15332,18 @@ declare function init(config: AuthHeroConfig): {
                             correlation_id?: string | undefined;
                             redirect_uri?: string | undefined;
                             authorization_url?: string | undefined;
+                            auth?: {
+                                strategy: string;
+                                user?: {
+                                    user_id: string;
+                                    name?: string | undefined;
+                                    email?: string | undefined;
+                                } | undefined;
+                                credentials?: {
+                                    jti?: string | undefined;
+                                    scopes?: string[] | undefined;
+                                } | undefined;
+                            } | undefined;
                         };
                         hostname: string;
                         timestamp: string;
@@ -15541,7 +15863,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     };
                     id: string;
-                    status: "active" | "suspended" | "paused";
+                    status: "suspended" | "active" | "paused";
                     filters?: {
                         type: string;
                         name: string;
@@ -15573,7 +15895,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     };
                     id: string;
-                    status: "active" | "suspended" | "paused";
+                    status: "suspended" | "active" | "paused";
                     filters?: {
                         type: string;
                         name: string;
@@ -15598,7 +15920,7 @@ declare function init(config: AuthHeroConfig): {
                         name: string;
                         type: "http" | "eventbridge" | "eventgrid" | "splunk" | "datadog" | "sumo";
                         sink: Record<string, unknown>;
-                        status?: "active" | "suspended" | "paused" | undefined;
+                        status?: "suspended" | "active" | "paused" | undefined;
                         filters?: {
                             type: string;
                             name: string;
@@ -15613,7 +15935,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     };
                     id: string;
-                    status: "active" | "suspended" | "paused";
+                    status: "suspended" | "active" | "paused";
                     filters?: {
                         type: string;
                         name: string;
@@ -15648,7 +15970,7 @@ declare function init(config: AuthHeroConfig): {
                         }[] | undefined;
                         isPriority?: boolean | undefined;
                         id?: string | undefined;
-                        status?: "active" | "suspended" | "paused" | undefined;
+                        status?: "suspended" | "active" | "paused" | undefined;
                         created_at?: string | undefined;
                         updated_at?: string | undefined;
                     };
@@ -15660,7 +15982,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     };
                     id: string;
-                    status: "active" | "suspended" | "paused";
+                    status: "suspended" | "active" | "paused";
                     filters?: {
                         type: string;
                         name: string;
@@ -15711,7 +16033,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -15750,7 +16072,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -15789,7 +16111,7 @@ declare function init(config: AuthHeroConfig): {
                     next?: string | undefined;
                 } | {
                     logs: {
-                        type: "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -15843,7 +16165,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -16112,6 +16434,19 @@ declare function init(config: AuthHeroConfig): {
                 output: {};
                 outputFormat: string;
                 status: 200;
+            } | {
+                input: {
+                    param: {
+                        id: string;
+                    };
+                } & {
+                    header: {
+                        "tenant-id"?: string | undefined;
+                    };
+                };
+                output: {};
+                outputFormat: string;
+                status: 204;
             };
         };
     } & {
@@ -16661,6 +16996,19 @@ declare function init(config: AuthHeroConfig): {
                 output: {};
                 outputFormat: string;
                 status: 200;
+            } | {
+                input: {
+                    param: {
+                        id: string;
+                    };
+                } & {
+                    header: {
+                        "tenant-id"?: string | undefined;
+                    };
+                };
+                output: {};
+                outputFormat: string;
+                status: 204;
             };
         };
     } & {
@@ -17133,7 +17481,7 @@ declare function init(config: AuthHeroConfig): {
                                         } | undefined;
                                         unique?: boolean | undefined;
                                         profile_required?: boolean | undefined;
-                                        verification_method?: "link" | "code" | undefined;
+                                        verification_method?: "code" | "link" | undefined;
                                     } | undefined;
                                     username?: {
                                         identifier?: {
@@ -17183,6 +17531,9 @@ declare function init(config: AuthHeroConfig): {
                                 } | undefined;
                                 set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
                             };
+                            scope?: "local" | "shared" | "platform" | undefined;
+                            override?: "secrets" | "none" | "fields" | undefined;
+                            enforce?: boolean | undefined;
                             id?: string | undefined;
                             display_name?: string | undefined;
                             enabled_clients?: string[] | undefined;
@@ -17291,7 +17642,7 @@ declare function init(config: AuthHeroConfig): {
                                         } | undefined;
                                         unique?: boolean | undefined;
                                         profile_required?: boolean | undefined;
-                                        verification_method?: "link" | "code" | undefined;
+                                        verification_method?: "code" | "link" | undefined;
                                     } | undefined;
                                     username?: {
                                         identifier?: {
@@ -17341,6 +17692,9 @@ declare function init(config: AuthHeroConfig): {
                                 } | undefined;
                                 set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
                             };
+                            scope?: "local" | "shared" | "platform" | undefined;
+                            override?: "secrets" | "none" | "fields" | undefined;
+                            enforce?: boolean | undefined;
                             id?: string | undefined;
                             display_name?: string | undefined;
                             enabled_clients?: string[] | undefined;
@@ -17462,9 +17816,9 @@ declare function init(config: AuthHeroConfig): {
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
-                    next?: boolean | undefined;
-                    connection?: string | undefined;
                     tenant_id?: string | undefined;
+                    connection?: string | undefined;
+                    next?: boolean | undefined;
                     revoked_at?: string | undefined;
                     current?: boolean | undefined;
                     previous?: boolean | undefined;
@@ -17501,9 +17855,9 @@ declare function init(config: AuthHeroConfig): {
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
-                    next?: boolean | undefined;
-                    connection?: string | undefined;
                     tenant_id?: string | undefined;
+                    connection?: string | undefined;
+                    next?: boolean | undefined;
                     revoked_at?: string | undefined;
                     current?: boolean | undefined;
                     previous?: boolean | undefined;
@@ -17539,9 +17893,9 @@ declare function init(config: AuthHeroConfig): {
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
-                    next?: boolean | undefined;
-                    connection?: string | undefined;
                     tenant_id?: string | undefined;
+                    connection?: string | undefined;
+                    next?: boolean | undefined;
                     revoked_at?: string | undefined;
                     current?: boolean | undefined;
                     previous?: boolean | undefined;
@@ -17579,9 +17933,9 @@ declare function init(config: AuthHeroConfig): {
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
-                    next?: boolean | undefined;
-                    connection?: string | undefined;
                     tenant_id?: string | undefined;
+                    connection?: string | undefined;
+                    next?: boolean | undefined;
                     revoked_at?: string | undefined;
                     current?: boolean | undefined;
                     previous?: boolean | undefined;
@@ -17641,8 +17995,8 @@ declare function init(config: AuthHeroConfig): {
                 output: {
                     created_at: string;
                     updated_at: string;
-                    connection: string;
                     user_id: string;
+                    connection: string;
                     email_verified: boolean;
                     provider: string;
                     is_social: boolean;
@@ -17712,8 +18066,8 @@ declare function init(config: AuthHeroConfig): {
                     users: {
                         created_at: string;
                         updated_at: string;
-                        connection: string;
                         user_id: string;
+                        connection: string;
                         email_verified: boolean;
                         provider: string;
                         is_social: boolean;
@@ -17783,8 +18137,8 @@ declare function init(config: AuthHeroConfig): {
                     users: {
                         created_at: string;
                         updated_at: string;
-                        connection: string;
                         user_id: string;
+                        connection: string;
                         email_verified: boolean;
                         provider: string;
                         is_social: boolean;
@@ -17869,8 +18223,8 @@ declare function init(config: AuthHeroConfig): {
                 output: {
                     created_at: string;
                     updated_at: string;
-                    connection: string;
                     user_id: string;
+                    connection: string;
                     email_verified: boolean;
                     provider: string;
                     is_social: boolean;
@@ -18009,8 +18363,8 @@ declare function init(config: AuthHeroConfig): {
                 output: {
                     created_at: string;
                     updated_at: string;
-                    connection: string;
                     user_id: string;
+                    connection: string;
                     email_verified: boolean;
                     provider: string;
                     is_social: boolean;
@@ -18204,8 +18558,8 @@ declare function init(config: AuthHeroConfig): {
                 output: {
                     created_at: string;
                     updated_at: string;
-                    connection: string;
                     user_id: string;
+                    connection: string;
                     email_verified: boolean;
                     provider: string;
                     is_social: boolean;
@@ -18469,12 +18823,11 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    id: string;
                     user_id: string;
-                    created_at: string;
                     client_id: string;
+                    id: string;
+                    created_at: string;
                     rotating: boolean;
-                    login_id: string;
                     device: {
                         initial_user_agent: string;
                         initial_ip: string;
@@ -18483,6 +18836,7 @@ declare function init(config: AuthHeroConfig): {
                         last_ip: string;
                         last_asn: string;
                     };
+                    login_id: string;
                     resource_servers: {
                         audience: string;
                         scopes: string;
@@ -18494,18 +18848,17 @@ declare function init(config: AuthHeroConfig): {
                         strategy: string;
                         strategy_type: string;
                     } | undefined;
-                    organization?: string | undefined;
                     revoked_at?: string | undefined;
                     idle_expires_at?: string | undefined;
+                    organization?: string | undefined;
                     last_exchanged_at?: string | undefined;
                 }[] | {
                     tokens: {
-                        id: string;
                         user_id: string;
-                        created_at: string;
                         client_id: string;
+                        id: string;
+                        created_at: string;
                         rotating: boolean;
-                        login_id: string;
                         device: {
                             initial_user_agent: string;
                             initial_ip: string;
@@ -18514,6 +18867,7 @@ declare function init(config: AuthHeroConfig): {
                             last_ip: string;
                             last_asn: string;
                         };
+                        login_id: string;
                         resource_servers: {
                             audience: string;
                             scopes: string;
@@ -18525,9 +18879,9 @@ declare function init(config: AuthHeroConfig): {
                             strategy: string;
                             strategy_type: string;
                         } | undefined;
-                        organization?: string | undefined;
                         revoked_at?: string | undefined;
                         idle_expires_at?: string | undefined;
+                        organization?: string | undefined;
                         last_exchanged_at?: string | undefined;
                     }[];
                     next?: string | undefined;
@@ -18536,12 +18890,11 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     tokens: {
-                        id: string;
                         user_id: string;
-                        created_at: string;
                         client_id: string;
+                        id: string;
+                        created_at: string;
                         rotating: boolean;
-                        login_id: string;
                         device: {
                             initial_user_agent: string;
                             initial_ip: string;
@@ -18550,6 +18903,7 @@ declare function init(config: AuthHeroConfig): {
                             last_ip: string;
                             last_asn: string;
                         };
+                        login_id: string;
                         resource_servers: {
                             audience: string;
                             scopes: string;
@@ -18561,9 +18915,9 @@ declare function init(config: AuthHeroConfig): {
                             strategy: string;
                             strategy_type: string;
                         } | undefined;
-                        organization?: string | undefined;
                         revoked_at?: string | undefined;
                         idle_expires_at?: string | undefined;
+                        organization?: string | undefined;
                         last_exchanged_at?: string | undefined;
                     }[];
                     total?: number | undefined;
@@ -18615,7 +18969,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -18654,7 +19008,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -18693,7 +19047,7 @@ declare function init(config: AuthHeroConfig): {
                     next?: string | undefined;
                 } | {
                     logs: {
-                        type: "i" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "fn" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -19079,7 +19433,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         from: string;
                         subject: string;
@@ -19100,7 +19454,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         from: string;
                         subject: string;
@@ -19112,7 +19466,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -19135,7 +19489,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    name: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     subject: string;
                 }[];
@@ -19148,7 +19502,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -19161,7 +19515,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -19169,7 +19523,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -19188,7 +19542,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -19196,7 +19550,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                         body: string;
                         subject: string;
                         syntax?: "liquid" | undefined;
@@ -19208,7 +19562,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -19227,7 +19581,7 @@ declare function init(config: AuthHeroConfig): {
             $patch: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -19235,7 +19589,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template?: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
+                        template?: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
                         body?: string | undefined;
                         from?: string | undefined;
                         subject?: string | undefined;
@@ -19252,7 +19606,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -19260,7 +19614,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        template?: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
+                        template?: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation" | undefined;
                         body?: string | undefined;
                         from?: string | undefined;
                         subject?: string | undefined;
@@ -19272,7 +19626,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    template: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                    template: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     body: string;
                     from: string;
                     subject: string;
@@ -19291,7 +19645,7 @@ declare function init(config: AuthHeroConfig): {
             $delete: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -19304,7 +19658,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        templateName: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -19321,7 +19675,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     param: {
-                        templateName: "verify_email" | "password_reset" | "change_password" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
+                        templateName: "change_password" | "verify_email" | "password_reset" | "verify_email_by_code" | "reset_email" | "reset_email_by_code" | "welcome_email" | "blocked_account" | "stolen_credentials" | "enrollment_email" | "mfa_oob_code" | "user_invitation";
                     };
                 } & {
                     header: {
@@ -19359,6 +19713,9 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                     settings?: {} | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                 };
                 outputFormat: "json";
                 status: 200;
@@ -19378,6 +19735,9 @@ declare function init(config: AuthHeroConfig): {
                         enabled?: boolean | undefined;
                         default_from_address?: string | undefined;
                         settings?: Record<string, never> | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                     };
                 };
                 output: {};
@@ -19395,6 +19755,9 @@ declare function init(config: AuthHeroConfig): {
                         enabled?: boolean | undefined;
                         default_from_address?: string | undefined;
                         settings?: Record<string, never> | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                     };
                 };
                 output: {
@@ -19405,6 +19768,9 @@ declare function init(config: AuthHeroConfig): {
                     };
                     default_from_address?: string | undefined;
                     settings?: {} | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                 };
                 outputFormat: "json";
                 status: 201;
@@ -19424,6 +19790,9 @@ declare function init(config: AuthHeroConfig): {
                         default_from_address?: string | undefined;
                         credentials?: Record<string, unknown> | undefined;
                         settings?: Record<string, never> | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                     };
                 };
                 output: {
@@ -19434,6 +19803,9 @@ declare function init(config: AuthHeroConfig): {
                     };
                     default_from_address?: string | undefined;
                     settings?: {} | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                 };
                 outputFormat: "json";
                 status: 200;
@@ -19477,6 +19849,9 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                     settings?: {} | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                 };
                 outputFormat: "json";
                 status: 200;
@@ -19496,6 +19871,9 @@ declare function init(config: AuthHeroConfig): {
                         enabled?: boolean | undefined;
                         default_from_address?: string | undefined;
                         settings?: Record<string, never> | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                     };
                 };
                 output: {};
@@ -19513,6 +19891,9 @@ declare function init(config: AuthHeroConfig): {
                         enabled?: boolean | undefined;
                         default_from_address?: string | undefined;
                         settings?: Record<string, never> | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                     };
                 };
                 output: {
@@ -19523,6 +19904,9 @@ declare function init(config: AuthHeroConfig): {
                     };
                     default_from_address?: string | undefined;
                     settings?: {} | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                 };
                 outputFormat: "json";
                 status: 201;
@@ -19542,6 +19926,9 @@ declare function init(config: AuthHeroConfig): {
                         default_from_address?: string | undefined;
                         credentials?: Record<string, unknown> | undefined;
                         settings?: Record<string, never> | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                     };
                 };
                 output: {
@@ -19552,6 +19939,9 @@ declare function init(config: AuthHeroConfig): {
                     };
                     default_from_address?: string | undefined;
                     settings?: {} | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                 };
                 outputFormat: "json";
                 status: 200;
@@ -20151,6 +20541,9 @@ declare function init(config: AuthHeroConfig): {
                         url: string;
                     } | undefined;
                     dark_mode?: "dark" | "light" | "auto" | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                 };
                 outputFormat: "json";
                 status: 200;
@@ -20181,6 +20574,9 @@ declare function init(config: AuthHeroConfig): {
                             url: string;
                         } | undefined;
                         dark_mode?: "dark" | "light" | "auto" | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                     };
                 };
                 output: {
@@ -20200,6 +20596,9 @@ declare function init(config: AuthHeroConfig): {
                         url: string;
                     } | undefined;
                     dark_mode?: "dark" | "light" | "auto" | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                 };
                 outputFormat: "json";
                 status: 200;
@@ -20273,7 +20672,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     json: {
                         body?: string | undefined;
-                        screen?: "login" | "identifier" | "signup" | "password" | undefined;
+                        screen?: "password" | "login" | "identifier" | "signup" | undefined;
                         branding?: {
                             colors?: {
                                 primary: string;
@@ -20291,6 +20690,9 @@ declare function init(config: AuthHeroConfig): {
                                 url: string;
                             } | undefined;
                             dark_mode?: "dark" | "light" | "auto" | undefined;
+                            scope?: "local" | "shared" | "platform" | undefined;
+                            override?: "secrets" | "none" | "fields" | undefined;
+                            enforce?: boolean | undefined;
                         } | undefined;
                         theme?: {
                             borders?: {
@@ -20402,6 +20804,10 @@ declare function init(config: AuthHeroConfig): {
                             status: "draft" | "built";
                             created_at: string;
                             updated_at: string;
+                            inherit?: boolean | undefined;
+                            scope?: "local" | "shared" | "platform" | undefined;
+                            override?: "secrets" | "none" | "fields" | undefined;
+                            enforce?: boolean | undefined;
                             supported_triggers?: {
                                 id: string;
                                 version?: string | undefined;
@@ -20412,7 +20818,6 @@ declare function init(config: AuthHeroConfig): {
                                 version: string;
                             }[] | undefined;
                             is_system?: boolean | undefined;
-                            inherit?: boolean | undefined;
                             deployed_at?: string | undefined;
                             secrets?: {
                                 name: string;
@@ -20441,7 +20846,7 @@ declare function init(config: AuthHeroConfig): {
                     json: {
                         bindings: {
                             ref: {
-                                type?: "action_name" | "action_id" | undefined;
+                                type?: "action_id" | "action_name" | undefined;
                                 value?: string | undefined;
                                 id?: string | undefined;
                                 name?: string | undefined;
@@ -20463,6 +20868,10 @@ declare function init(config: AuthHeroConfig): {
                             status: "draft" | "built";
                             created_at: string;
                             updated_at: string;
+                            inherit?: boolean | undefined;
+                            scope?: "local" | "shared" | "platform" | undefined;
+                            override?: "secrets" | "none" | "fields" | undefined;
+                            enforce?: boolean | undefined;
                             supported_triggers?: {
                                 id: string;
                                 version?: string | undefined;
@@ -20473,7 +20882,6 @@ declare function init(config: AuthHeroConfig): {
                                 version: string;
                             }[] | undefined;
                             is_system?: boolean | undefined;
-                            inherit?: boolean | undefined;
                             deployed_at?: string | undefined;
                             secrets?: {
                                 name: string;
@@ -20515,7 +20923,7 @@ declare function init(config: AuthHeroConfig): {
                 output: {
                     id: string;
                     trigger_id: string;
-                    status: "final" | "pending" | "unspecified" | "partial" | "canceled" | "suspended";
+                    status: "unspecified" | "pending" | "final" | "partial" | "canceled" | "suspended";
                     results: {
                         action_name: string;
                         error: {
@@ -20599,6 +21007,10 @@ declare function init(config: AuthHeroConfig): {
                     status: "draft" | "built";
                     created_at: string;
                     updated_at: string;
+                    inherit?: boolean | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     supported_triggers?: {
                         id: string;
                         version?: string | undefined;
@@ -20609,7 +21021,6 @@ declare function init(config: AuthHeroConfig): {
                         version: string;
                     }[] | undefined;
                     is_system?: boolean | undefined;
-                    inherit?: boolean | undefined;
                     deployed_at?: string | undefined;
                     secrets?: {
                         name: string;
@@ -20626,6 +21037,10 @@ declare function init(config: AuthHeroConfig): {
                         status: "draft" | "built";
                         created_at: string;
                         updated_at: string;
+                        inherit?: boolean | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         supported_triggers?: {
                             id: string;
                             version?: string | undefined;
@@ -20636,7 +21051,6 @@ declare function init(config: AuthHeroConfig): {
                             version: string;
                         }[] | undefined;
                         is_system?: boolean | undefined;
-                        inherit?: boolean | undefined;
                         deployed_at?: string | undefined;
                         secrets?: {
                             name: string;
@@ -20653,6 +21067,10 @@ declare function init(config: AuthHeroConfig): {
                         status: "draft" | "built";
                         created_at: string;
                         updated_at: string;
+                        inherit?: boolean | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         supported_triggers?: {
                             id: string;
                             version?: string | undefined;
@@ -20663,7 +21081,6 @@ declare function init(config: AuthHeroConfig): {
                             version: string;
                         }[] | undefined;
                         is_system?: boolean | undefined;
-                        inherit?: boolean | undefined;
                         deployed_at?: string | undefined;
                         secrets?: {
                             name: string;
@@ -20686,6 +21103,10 @@ declare function init(config: AuthHeroConfig): {
                     json: {
                         name: string;
                         code: string;
+                        inherit?: boolean | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         supported_triggers?: {
                             id: string;
                             version?: string | undefined;
@@ -20700,7 +21121,6 @@ declare function init(config: AuthHeroConfig): {
                             value?: string | undefined;
                         }[] | undefined;
                         is_system?: boolean | undefined;
-                        inherit?: boolean | undefined;
                     };
                 };
                 output: {
@@ -20711,6 +21131,10 @@ declare function init(config: AuthHeroConfig): {
                     status: "draft" | "built";
                     created_at: string;
                     updated_at: string;
+                    inherit?: boolean | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     supported_triggers?: {
                         id: string;
                         version?: string | undefined;
@@ -20721,7 +21145,6 @@ declare function init(config: AuthHeroConfig): {
                         version: string;
                     }[] | undefined;
                     is_system?: boolean | undefined;
-                    inherit?: boolean | undefined;
                     deployed_at?: string | undefined;
                     secrets?: {
                         name: string;
@@ -20764,6 +21187,10 @@ declare function init(config: AuthHeroConfig): {
                     status: "draft" | "built";
                     created_at: string;
                     updated_at: string;
+                    inherit?: boolean | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     supported_triggers?: {
                         id: string;
                         version?: string | undefined;
@@ -20774,7 +21201,6 @@ declare function init(config: AuthHeroConfig): {
                         version: string;
                     }[] | undefined;
                     is_system?: boolean | undefined;
-                    inherit?: boolean | undefined;
                     deployed_at?: string | undefined;
                     secrets?: {
                         name: string;
@@ -20797,6 +21223,10 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
+                        inherit?: boolean | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         name?: string | undefined;
                         code?: string | undefined;
                         supported_triggers?: {
@@ -20813,7 +21243,6 @@ declare function init(config: AuthHeroConfig): {
                             value?: string | undefined;
                         }[] | undefined;
                         is_system?: boolean | undefined;
-                        inherit?: boolean | undefined;
                     };
                 };
                 output: {};
@@ -20830,6 +21259,10 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
+                        inherit?: boolean | undefined;
+                        scope?: "local" | "shared" | "platform" | undefined;
+                        override?: "secrets" | "none" | "fields" | undefined;
+                        enforce?: boolean | undefined;
                         name?: string | undefined;
                         code?: string | undefined;
                         supported_triggers?: {
@@ -20846,7 +21279,6 @@ declare function init(config: AuthHeroConfig): {
                             value?: string | undefined;
                         }[] | undefined;
                         is_system?: boolean | undefined;
-                        inherit?: boolean | undefined;
                     };
                 };
                 output: {
@@ -20857,6 +21289,10 @@ declare function init(config: AuthHeroConfig): {
                     status: "draft" | "built";
                     created_at: string;
                     updated_at: string;
+                    inherit?: boolean | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     supported_triggers?: {
                         id: string;
                         version?: string | undefined;
@@ -20867,7 +21303,6 @@ declare function init(config: AuthHeroConfig): {
                         version: string;
                     }[] | undefined;
                     is_system?: boolean | undefined;
-                    inherit?: boolean | undefined;
                     deployed_at?: string | undefined;
                     secrets?: {
                         name: string;
@@ -20953,6 +21388,10 @@ declare function init(config: AuthHeroConfig): {
                     status: "draft" | "built";
                     created_at: string;
                     updated_at: string;
+                    inherit?: boolean | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     supported_triggers?: {
                         id: string;
                         version?: string | undefined;
@@ -20963,7 +21402,6 @@ declare function init(config: AuthHeroConfig): {
                         version: string;
                     }[] | undefined;
                     is_system?: boolean | undefined;
-                    inherit?: boolean | undefined;
                     deployed_at?: string | undefined;
                     secrets?: {
                         name: string;
@@ -21169,6 +21607,10 @@ declare function init(config: AuthHeroConfig): {
                     status: "draft" | "built";
                     created_at: string;
                     updated_at: string;
+                    inherit?: boolean | undefined;
+                    scope?: "local" | "shared" | "platform" | undefined;
+                    override?: "secrets" | "none" | "fields" | undefined;
+                    enforce?: boolean | undefined;
                     supported_triggers?: {
                         id: string;
                         version?: string | undefined;
@@ -21179,7 +21621,6 @@ declare function init(config: AuthHeroConfig): {
                         version: string;
                     }[] | undefined;
                     is_system?: boolean | undefined;
-                    inherit?: boolean | undefined;
                     deployed_at?: string | undefined;
                     secrets?: {
                         name: string;
@@ -21999,17 +22440,17 @@ declare function init(config: AuthHeroConfig): {
                         connection: "email";
                         client_id: string;
                         email: string;
-                        send: "link" | "code";
+                        send: "code" | "link";
                         authParams: {
                             username?: string | undefined;
-                            state?: string | undefined;
                             scope?: string | undefined;
-                            act_as?: string | undefined;
+                            state?: string | undefined;
+                            audience?: string | undefined;
+                            organization?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                             redirect_uri?: string | undefined;
-                            audience?: string | undefined;
-                            organization?: string | undefined;
+                            act_as?: string | undefined;
                             nonce?: string | undefined;
                             prompt?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
@@ -22035,17 +22476,17 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         connection: "sms";
                         phone_number: string;
-                        send: "link" | "code";
+                        send: "code" | "link";
                         authParams: {
                             username?: string | undefined;
-                            state?: string | undefined;
                             scope?: string | undefined;
-                            act_as?: string | undefined;
+                            state?: string | undefined;
+                            audience?: string | undefined;
+                            organization?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
                             redirect_uri?: string | undefined;
-                            audience?: string | undefined;
-                            organization?: string | undefined;
+                            act_as?: string | undefined;
                             nonce?: string | undefined;
                             prompt?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
@@ -24199,7 +24640,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        screen: "account" | "login" | "impersonate" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -24215,7 +24656,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "account" | "login" | "impersonate" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -24231,7 +24672,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "account" | "login" | "impersonate" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -24251,7 +24692,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     param: {
-                        screen: "login" | "impersonate" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -24269,7 +24710,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "login" | "impersonate" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -24371,5 +24812,5 @@ declare function init(config: AuthHeroConfig): {
     createX509Certificate: typeof createX509Certificate;
 };
 
-export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_CUSTOM_DOMAINS_PATH, CONTROL_PLANE_CUSTOM_DOMAINS_SCOPE, CONTROL_PLANE_SYNC_EVENT_PREFIX, CONTROL_PLANE_SYNC_SCOPE, CONTROL_PLANE_TENANT_MEMBERS_PATH, CONTROL_PLANE_TENANT_MEMBERS_SCOPE, CONTROL_PLANE_URI, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, CodeHookDestination, ControlPlaneSyncDestination, DEFAULT_CA_CERT_VALIDITY_DAYS, DEFAULT_WFP_DISPATCH_BINDING, DEFAULT_WFP_SCRIPT_NAME_TEMPLATE, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PipelineDestination, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, RetentionSweepError, SignupPage as SignUpPage, SigningCertificateRenewalError, SocialButton, Spinner, TENANT_URI_PREFIX, TenantInvitationNotFoundError, TenantMembersNotFoundError, TenantOrganizationNotFoundError, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, advanceUsersImport, backfillProxyHostsToKv, cleanupActionExecutions, cleanupCodes, cleanupOutbox, cleanupSessions, cleanupUserSessions, cleanupUsersImports, clientInfoMiddleware, composeHostResolvers, createApplySyncEvents, createAuthMiddleware, createCertificateIssuerApp, createControlPlaneClient, createControlPlaneCustomDomainsAdapter, createControlPlaneTenantMembersAdapter, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createHttpCertificateIssuer, createInMemoryCache, createLocalCertificateIssuer, createLocalTenantMembersBackend, createServiceTokenCore, createTenantMembersControlPlaneApp, createTenantMembersRoutes, createWfpTenantHostResolver, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, ensureSigningKey, fetchAll, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, isInteractiveClient, isWfpSubdomainSafeTenantId, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, provisionDefaultClients, renewSigningCertificates, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, resumeUsersImports, runOutboxRelay, runRetention, seed, tailwindCss, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wfpTenantHost, wrapProxyAdaptersWithKvPublish, wrapTenantsAdapterWithWfpKvPublish };
-export type { ActionExecutionLogCapture, ActionExecutionsCleanupParams, AdvanceOptions, AdvanceResult, AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, CertificateIssuer, CertificateIssuerAppOptions, CodesCleanupParams, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, ControlPlaneTenantMembersOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureSigningKeyOptions, EnsureSigningKeyResult, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetControlPlaneToken, GetServiceToken, GetTenantMembersBackend, HookEvent, HookRequest, Hooks, HttpCertificateIssuerOptions, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, LocalCertificateIssuerOptions, LocalTenantMembersBackendOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, McpConfig, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, OutboxMetric, OutboxMetricName, OutboxMetricsSink, OutboxPipelineConfig, PipelineDestinationOptions, PipelineRecord, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, RenewSigningCertificatesConfig, RenewSigningCertificatesResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, ResumeUsersImportsOptions, ResumeUsersImportsResult, RetentionSweep, RetentionSweepFailed, RetentionSweepSkipped, RetentionSweepStatus, RetentionSweepSwept, RolePermissionHooks, RunOutboxRelayConfig, RunRetentionConfig, RunRetentionResult, SeedOptions, SeedResult, ServiceTokenResponse, SigningCertificateAuthority, SigningCertificateRequest, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantInvitation, TenantInvitationInput, TenantMember, TenantMembersBackend, TenantMembersControlPlaneOptions, TenantMembersListResult, TenantMembersPageParams, TenantOperationExecutorBinding, TenantRole, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, UsersImportCleanupParams, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };
+export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_CUSTOM_DOMAINS_PATH, CONTROL_PLANE_CUSTOM_DOMAINS_SCOPE, CONTROL_PLANE_SYNC_EVENT_PREFIX, CONTROL_PLANE_SYNC_SCOPE, CONTROL_PLANE_TENANT_MEMBERS_PATH, CONTROL_PLANE_TENANT_MEMBERS_SCOPE, CONTROL_PLANE_URI, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, CodeHookDestination, ControlPlaneSyncDestination, DEFAULT_CA_CERT_VALIDITY_DAYS, DEFAULT_WFP_DISPATCH_BINDING, DEFAULT_WFP_SCRIPT_NAME_TEMPLATE, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PipelineDestination, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, RetentionSweepError, SignupPage as SignUpPage, SigningCertificateRenewalError, SocialButton, Spinner, TENANT_URI_PREFIX, TenantInvitationNotFoundError, TenantMembersNotFoundError, TenantOrganizationNotFoundError, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, advanceUsersImport, backfillProxyHostsToKv, canDecrypt, cleanupActionExecutions, cleanupCodes, cleanupOutbox, cleanupSessions, cleanupUserSessions, cleanupUsersImports, clientInfoMiddleware, composeHostResolvers, createApplySyncEvents, createAuthMiddleware, createCertificateIssuerApp, createControlPlaneClient, createControlPlaneCustomDomainsAdapter, createControlPlaneTenantMembersAdapter, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createHttpCertificateIssuer, createInMemoryCache, createLocalCertificateIssuer, createLocalTenantMembersBackend, createServiceTokenCore, createTenantMembersControlPlaneApp, createTenantMembersRoutes, createWfpTenantHostResolver, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, ensureSigningKey, fetchAll, getExecutorData, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, isInteractiveClient, isSyncedRowId, isWfpSubdomainSafeTenantId, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, provisionDefaultClients, renewSigningCertificates, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, resumeUsersImports, runOutboxRelay, runRetention, seed, tailwindCss, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wfpTenantHost, withPlatformRowsHidden, wrapProxyAdaptersWithKvPublish, wrapTenantsAdapterWithWfpKvPublish };
+export type { ActionExecutionLogCapture, ActionExecutionsCleanupParams, AdvanceOptions, AdvanceResult, AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, CertificateIssuer, CertificateIssuerAppOptions, CodesCleanupParams, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, ControlPlaneTenantMembersOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureSigningKeyOptions, EnsureSigningKeyResult, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetControlPlaneToken, GetServiceToken, GetTenantMembersBackend, HookEvent, HookRequest, Hooks, HttpCertificateIssuerOptions, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, LocalCertificateIssuerOptions, LocalTenantMembersBackendOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, McpConfig, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, OutboxMetric, OutboxMetricName, OutboxMetricsSink, OutboxPipelineConfig, PipelineDestinationOptions, PipelineRecord, PlatformRowsOptions, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, RenewSigningCertificatesConfig, RenewSigningCertificatesResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, ResumeUsersImportsOptions, ResumeUsersImportsResult, RetentionSweep, RetentionSweepFailed, RetentionSweepSkipped, RetentionSweepStatus, RetentionSweepSwept, RolePermissionHooks, RolloutControllerBinding, RunOutboxRelayConfig, RunRetentionConfig, RunRetentionResult, SeedOptions, SeedResult, ServiceTokenResponse, SigningCertificateAuthority, SigningCertificateRequest, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantInvitation, TenantInvitationInput, TenantMember, TenantMembersBackend, TenantMembersControlPlaneOptions, TenantMembersListResult, TenantMembersPageParams, TenantOperationExecutorBinding, TenantRole, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, UsersImportCleanupParams, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };