authhero 9.26.0 → 9.27.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (70) hide show
  1. package/dist/assets/u/widget/authhero-widget.esm.js +1 -1
  2. package/dist/assets/u/widget/index.esm.js +1 -1
  3. package/dist/assets/u/widget/{p-210f06bf.entry.js → p-ce8560f6.entry.js} +1 -1
  4. package/dist/authhero.cjs +116 -116
  5. package/dist/authhero.d.ts +838 -338
  6. package/dist/authhero.mjs +23941 -22665
  7. package/dist/tsconfig.types.tsbuildinfo +1 -1
  8. package/dist/types/authentication-flows/device-code.d.ts +11 -0
  9. package/dist/types/authentication-flows/passwordless.d.ts +4 -3
  10. package/dist/types/generated/locale-types.d.ts +16 -0
  11. package/dist/types/helpers/client.d.ts +2 -0
  12. package/dist/types/helpers/codes-cleanup.d.ts +1 -1
  13. package/dist/types/helpers/device-flow.d.ts +25 -0
  14. package/dist/types/helpers/hook-events.d.ts +8 -4
  15. package/dist/types/helpers/hook-user-payload.d.ts +2 -0
  16. package/dist/types/helpers/logging.d.ts +2 -1
  17. package/dist/types/helpers/outbox-destinations/code-hooks.d.ts +8 -3
  18. package/dist/types/helpers/outbox-destinations/webhooks.d.ts +3 -0
  19. package/dist/types/helpers/reserved-claims.d.ts +2 -2
  20. package/dist/types/helpers/scopes-permissions.d.ts +1 -1
  21. package/dist/types/hooks/lifecycle-codehooks.d.ts +16 -0
  22. package/dist/types/hooks/user-deletion.d.ts +9 -0
  23. package/dist/types/index.d.ts +559 -331
  24. package/dist/types/routes/auth-api/device.d.ts +139 -0
  25. package/dist/types/routes/auth-api/index.d.ts +225 -24
  26. package/dist/types/routes/auth-api/passwordless.d.ts +10 -10
  27. package/dist/types/routes/auth-api/revoke.d.ts +2 -2
  28. package/dist/types/routes/auth-api/token.d.ts +82 -12
  29. package/dist/types/routes/auth-api/well-known.d.ts +2 -0
  30. package/dist/types/routes/management-api/action-executions.d.ts +1 -1
  31. package/dist/types/routes/management-api/action-triggers.d.ts +27 -2
  32. package/dist/types/routes/management-api/actions.d.ts +11 -11
  33. package/dist/types/routes/management-api/authentication-methods.d.ts +1 -1
  34. package/dist/types/routes/management-api/branding.d.ts +5 -5
  35. package/dist/types/routes/management-api/clients.d.ts +2 -2
  36. package/dist/types/routes/management-api/connections.d.ts +9 -9
  37. package/dist/types/routes/management-api/custom-domains.d.ts +6 -6
  38. package/dist/types/routes/management-api/emails.d.ts +6 -6
  39. package/dist/types/routes/management-api/forms.d.ts +144 -144
  40. package/dist/types/routes/management-api/helpers.d.ts +1 -1
  41. package/dist/types/routes/management-api/hook-code.d.ts +2 -2
  42. package/dist/types/routes/management-api/hooks.d.ts +56 -56
  43. package/dist/types/routes/management-api/index.d.ts +326 -301
  44. package/dist/types/routes/management-api/log-streams.d.ts +6 -6
  45. package/dist/types/routes/management-api/logs.d.ts +4 -4
  46. package/dist/types/routes/management-api/organizations.d.ts +8 -8
  47. package/dist/types/routes/management-api/prompts.d.ts +8 -8
  48. package/dist/types/routes/management-api/resource-servers.d.ts +8 -8
  49. package/dist/types/routes/management-api/roles.d.ts +1 -1
  50. package/dist/types/routes/management-api/tenant-members-requests.test.d.ts +1 -0
  51. package/dist/types/routes/management-api/tenant-members.d.ts +155 -1
  52. package/dist/types/routes/management-api/tenant-operations.d.ts +12 -10
  53. package/dist/types/routes/management-api/tenants.d.ts +26 -12
  54. package/dist/types/routes/management-api/users.d.ts +15 -15
  55. package/dist/types/routes/proxy-control-plane/tenant-members.d.ts +11 -0
  56. package/dist/types/routes/scim/index.d.ts +1 -0
  57. package/dist/types/routes/universal-login/common.d.ts +16 -12
  58. package/dist/types/routes/universal-login/flow-api.d.ts +8 -8
  59. package/dist/types/routes/universal-login/screens/device-flow.d.ts +4 -0
  60. package/dist/types/routes/universal-login/u2-index.d.ts +5 -5
  61. package/dist/types/routes/universal-login/u2-routes.d.ts +5 -5
  62. package/dist/types/state-machines/login-session.d.ts +5 -0
  63. package/dist/types/tenant-members/request-notifier.d.ts +9 -0
  64. package/dist/types/tenant-members/request-notify.test.d.ts +1 -0
  65. package/dist/types/tenant-members/requests.d.ts +79 -0
  66. package/dist/types/tenant-members/requests.test.d.ts +1 -0
  67. package/dist/types/tenant-members/wire.d.ts +10 -0
  68. package/dist/types/types/AuthHeroConfig.d.ts +10 -0
  69. package/dist/types/types/Variables.d.ts +3 -1
  70. package/package.json +6 -6
package/dist/types/routes/management-api/tenants.d.ts CHANGED
@@ -1,5 +1,6 @@
1
1
  import { OpenAPIHono } from "@hono/zod-openapi";
2
2
  import { Bindings, Variables } from "../../types";
3
+ import { TenantsDataAdapter } from "@authhero/adapter-interfaces";
3
4
  export declare const tenantRoutes: OpenAPIHono<{
4
5
  Bindings: Bindings;
5
6
  Variables: Variables;
@@ -17,7 +18,7 @@ export declare const tenantRoutes: OpenAPIHono<{
17
18
  friendly_name: string;
18
19
  id: string;
19
20
  parent_tenant_id?: string | null | undefined;
20
- config_sync?: "inherit-on-read" | "synced" | null | undefined;
21
+ config_sync?: "inherit-on-read" | "synced" | "detached" | null | undefined;
21
22
  config_sync_hash?: string | null | undefined;
22
23
  config_synced_at?: string | null | undefined;
23
24
  audience?: string | undefined;
@@ -127,7 +128,7 @@ export declare const tenantRoutes: OpenAPIHono<{
127
128
  pushed_authorization_requests_supported?: boolean | undefined;
128
129
  authorization_response_iss_parameter_supported?: boolean | undefined;
129
130
  deployment_type?: "shared" | "wfp" | undefined;
130
- provisioning_state?: "pending" | "ready" | "failed" | undefined;
131
+ provisioning_state?: "pending" | "failed" | "ready" | undefined;
131
132
  provisioning_error?: string | undefined;
132
133
  provisioning_state_changed_at?: string | undefined;
133
134
  bundle_configuration?: string | undefined;
@@ -200,6 +201,7 @@ export declare const tenantRoutes: OpenAPIHono<{
200
201
  } | undefined;
201
202
  } | undefined;
202
203
  is_control_plane?: boolean | undefined;
204
+ has_children?: boolean | undefined;
203
205
  };
204
206
  outputFormat: "json";
205
207
  status: 200;
@@ -215,11 +217,14 @@ export declare const tenantRoutes: OpenAPIHono<{
215
217
  } & {
216
218
  json: {
217
219
  id?: string | undefined;
218
- audience?: string | undefined;
220
+ mtls?: {
221
+ enable_endpoint_aliases?: boolean | undefined;
222
+ } | null | undefined;
219
223
  parent_tenant_id?: string | null | undefined;
220
- config_sync?: "inherit-on-read" | "synced" | null | undefined;
224
+ config_sync?: "inherit-on-read" | "synced" | "detached" | null | undefined;
221
225
  config_sync_hash?: string | null | undefined;
222
226
  config_synced_at?: string | null | undefined;
227
+ audience?: string | undefined;
223
228
  friendly_name?: string | undefined;
224
229
  picture_url?: string | undefined;
225
230
  support_email?: string | undefined;
@@ -317,13 +322,10 @@ export declare const tenantRoutes: OpenAPIHono<{
317
322
  allow_organization_name_in_authentication_api?: boolean | undefined;
318
323
  customize_mfa_in_postlogin_action?: boolean | undefined;
319
324
  acr_values_supported?: string[] | undefined;
320
- mtls?: {
321
- enable_endpoint_aliases?: boolean | undefined;
322
- } | null | undefined;
323
325
  pushed_authorization_requests_supported?: boolean | undefined;
324
326
  authorization_response_iss_parameter_supported?: boolean | undefined;
325
327
  deployment_type?: "shared" | "wfp" | undefined;
326
- provisioning_state?: "pending" | "ready" | "failed" | undefined;
328
+ provisioning_state?: "pending" | "failed" | "ready" | undefined;
327
329
  provisioning_error?: string | undefined;
328
330
  provisioning_state_changed_at?: string | undefined;
329
331
  bundle_configuration?: string | undefined;
@@ -402,7 +404,7 @@ export declare const tenantRoutes: OpenAPIHono<{
402
404
  friendly_name: string;
403
405
  id: string;
404
406
  parent_tenant_id?: string | null | undefined;
405
- config_sync?: "inherit-on-read" | "synced" | null | undefined;
407
+ config_sync?: "inherit-on-read" | "synced" | "detached" | null | undefined;
406
408
  config_sync_hash?: string | null | undefined;
407
409
  config_synced_at?: string | null | undefined;
408
410
  audience?: string | undefined;
@@ -512,7 +514,7 @@ export declare const tenantRoutes: OpenAPIHono<{
512
514
  pushed_authorization_requests_supported?: boolean | undefined;
513
515
  authorization_response_iss_parameter_supported?: boolean | undefined;
514
516
  deployment_type?: "shared" | "wfp" | undefined;
515
- provisioning_state?: "pending" | "ready" | "failed" | undefined;
517
+ provisioning_state?: "pending" | "failed" | "ready" | undefined;
516
518
  provisioning_error?: string | undefined;
517
519
  provisioning_state_changed_at?: string | undefined;
518
520
  bundle_configuration?: string | undefined;
@@ -585,6 +587,7 @@ export declare const tenantRoutes: OpenAPIHono<{
585
587
  } | undefined;
586
588
  } | undefined;
587
589
  is_control_plane?: boolean | undefined;
590
+ has_children?: boolean | undefined;
588
591
  };
589
592
  outputFormat: "json";
590
593
  status: 200;
@@ -608,7 +611,7 @@ export declare const tenantRoutes: OpenAPIHono<{
608
611
  friendly_name: string;
609
612
  id: string;
610
613
  parent_tenant_id?: string | null | undefined;
611
- config_sync?: "inherit-on-read" | "synced" | null | undefined;
614
+ config_sync?: "inherit-on-read" | "synced" | "detached" | null | undefined;
612
615
  config_sync_hash?: string | null | undefined;
613
616
  config_synced_at?: string | null | undefined;
614
617
  audience?: string | undefined;
@@ -718,7 +721,7 @@ export declare const tenantRoutes: OpenAPIHono<{
718
721
  pushed_authorization_requests_supported?: boolean | undefined;
719
722
  authorization_response_iss_parameter_supported?: boolean | undefined;
720
723
  deployment_type?: "shared" | "wfp" | undefined;
721
- provisioning_state?: "pending" | "ready" | "failed" | undefined;
724
+ provisioning_state?: "pending" | "failed" | "ready" | undefined;
722
725
  provisioning_error?: string | undefined;
723
726
  provisioning_state_changed_at?: string | undefined;
724
727
  bundle_configuration?: string | undefined;
@@ -791,12 +794,23 @@ export declare const tenantRoutes: OpenAPIHono<{
791
794
  } | undefined;
792
795
  } | undefined;
793
796
  is_control_plane?: boolean | undefined;
797
+ has_children?: boolean | undefined;
794
798
  };
795
799
  outputFormat: "json";
796
800
  status: 200;
797
801
  };
798
802
  };
799
803
  }, "/">;
804
+ export declare function hasChildTenants(ctx: {
805
+ env: {
806
+ data: {
807
+ multiTenancyConfig?: {
808
+ controlPlaneTenantId?: string;
809
+ };
810
+ tenants: TenantsDataAdapter;
811
+ };
812
+ };
813
+ }, tenantId: string): Promise<boolean>;
800
814
  export declare function isControlPlaneTenant(ctx: {
801
815
  env: {
802
816
  data: {
package/dist/types/routes/management-api/users.d.ts CHANGED
@@ -855,9 +855,9 @@ export declare const userRoutes: OpenAPIHono<{
855
855
  };
856
856
  output: {
857
857
  user_id: string;
858
- client_id: string;
859
858
  id: string;
860
859
  created_at: string;
860
+ client_id: string;
861
861
  rotating: boolean;
862
862
  device: {
863
863
  initial_user_agent: string;
@@ -873,22 +873,22 @@ export declare const userRoutes: OpenAPIHono<{
873
873
  scopes: string;
874
874
  }[];
875
875
  expires_at?: string | undefined;
876
+ revoked_at?: string | undefined;
877
+ idle_expires_at?: string | undefined;
876
878
  session_id?: string | undefined;
879
+ organization?: string | undefined;
877
880
  auth_connection?: string | undefined;
878
881
  auth_strategy?: {
879
882
  strategy: string;
880
883
  strategy_type: string;
881
884
  } | undefined;
882
- revoked_at?: string | undefined;
883
- idle_expires_at?: string | undefined;
884
- organization?: string | undefined;
885
885
  last_exchanged_at?: string | undefined;
886
886
  }[] | {
887
887
  tokens: {
888
888
  user_id: string;
889
- client_id: string;
890
889
  id: string;
891
890
  created_at: string;
891
+ client_id: string;
892
892
  rotating: boolean;
893
893
  device: {
894
894
  initial_user_agent: string;
@@ -904,15 +904,15 @@ export declare const userRoutes: OpenAPIHono<{
904
904
  scopes: string;
905
905
  }[];
906
906
  expires_at?: string | undefined;
907
+ revoked_at?: string | undefined;
908
+ idle_expires_at?: string | undefined;
907
909
  session_id?: string | undefined;
910
+ organization?: string | undefined;
908
911
  auth_connection?: string | undefined;
909
912
  auth_strategy?: {
910
913
  strategy: string;
911
914
  strategy_type: string;
912
915
  } | undefined;
913
- revoked_at?: string | undefined;
914
- idle_expires_at?: string | undefined;
915
- organization?: string | undefined;
916
916
  last_exchanged_at?: string | undefined;
917
917
  }[];
918
918
  next?: string | undefined;
@@ -922,9 +922,9 @@ export declare const userRoutes: OpenAPIHono<{
922
922
  length: number;
923
923
  tokens: {
924
924
  user_id: string;
925
- client_id: string;
926
925
  id: string;
927
926
  created_at: string;
927
+ client_id: string;
928
928
  rotating: boolean;
929
929
  device: {
930
930
  initial_user_agent: string;
@@ -940,15 +940,15 @@ export declare const userRoutes: OpenAPIHono<{
940
940
  scopes: string;
941
941
  }[];
942
942
  expires_at?: string | undefined;
943
+ revoked_at?: string | undefined;
944
+ idle_expires_at?: string | undefined;
943
945
  session_id?: string | undefined;
946
+ organization?: string | undefined;
944
947
  auth_connection?: string | undefined;
945
948
  auth_strategy?: {
946
949
  strategy: string;
947
950
  strategy_type: string;
948
951
  } | undefined;
949
- revoked_at?: string | undefined;
950
- idle_expires_at?: string | undefined;
951
- organization?: string | undefined;
952
952
  last_exchanged_at?: string | undefined;
953
953
  }[];
954
954
  total?: number | undefined;
@@ -1000,7 +1000,7 @@ export declare const userRoutes: OpenAPIHono<{
1000
1000
  };
1001
1001
  };
1002
1002
  output: {
1003
- type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
1003
+ type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
1004
1004
  date: string;
1005
1005
  isMobile: boolean;
1006
1006
  log_id: string;
@@ -1039,7 +1039,7 @@ export declare const userRoutes: OpenAPIHono<{
1039
1039
  limit: number;
1040
1040
  length: number;
1041
1041
  logs: {
1042
- type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
1042
+ type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
1043
1043
  date: string;
1044
1044
  isMobile: boolean;
1045
1045
  log_id: string;
@@ -1078,7 +1078,7 @@ export declare const userRoutes: OpenAPIHono<{
1078
1078
  next?: string | undefined;
1079
1079
  } | {
1080
1080
  logs: {
1081
- type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
1081
+ type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
1082
1082
  date: string;
1083
1083
  isMobile: boolean;
1084
1084
  log_id: string;
package/dist/types/routes/proxy-control-plane/tenant-members.d.ts CHANGED
@@ -19,6 +19,17 @@ export interface TenantMembersControlPlaneOptions {
19
19
  * control-plane tenant.
20
20
  */
21
21
  getBackend: (c: CpCtx) => TenantMembersBackend | Promise<TenantMembersBackend>;
22
+ /**
23
+ * Team-change requests (issue #1550). A shard registers a request in its own
24
+ * database and calls `POST /requests/notify` with its id; `onNotify` takes
25
+ * it from there, typically by enqueueing a tenant operation that reads the
26
+ * request from the shard and carries it out. `tenantId` is the verified
27
+ * token's, never the body's. Unset, the endpoint answers 501 and the shard
28
+ * keeps the request until a control plane that has it is in place.
29
+ */
30
+ requests?: {
31
+ onNotify: (c: CpCtx, tenantId: string, requestId: string) => Promise<void>;
32
+ };
22
33
  /**
23
34
  * Defaults to verifying a `controlplane:tenant_members` bearer token issued
24
35
  * by `env.ISSUER` or the inbound host. Ignored under
package/dist/types/routes/scim/index.d.ts CHANGED
@@ -1,5 +1,6 @@
1
1
  import { OpenAPIHono } from "@hono/zod-openapi";
2
2
  import { AuthHeroConfig, Bindings, Variables } from "../../types";
3
+ /** Mount connection-scoped SCIM provisioning with user lifecycle hooks and outbox delivery. */
3
4
  export declare function createScimApi(config: AuthHeroConfig): OpenAPIHono<{
4
5
  Bindings: Bindings;
5
6
  Variables: Variables;
package/dist/types/routes/universal-login/common.d.ts CHANGED
@@ -101,7 +101,7 @@ export declare function initJSXRoute(ctx: Context<{
101
101
  } | undefined;
102
102
  dark_mode?: "dark" | "light" | "auto" | undefined;
103
103
  scope?: "local" | "shared" | "platform" | undefined;
104
- override?: "secrets" | "none" | "fields" | undefined;
104
+ override?: "none" | "secrets" | "fields" | undefined;
105
105
  enforce?: boolean | undefined;
106
106
  } | null;
107
107
  client: {
@@ -125,7 +125,7 @@ export declare function initJSXRoute(ctx: Context<{
125
125
  friendly_name: string;
126
126
  id: string;
127
127
  parent_tenant_id?: string | null | undefined;
128
- config_sync?: "inherit-on-read" | "synced" | null | undefined;
128
+ config_sync?: "inherit-on-read" | "synced" | "detached" | null | undefined;
129
129
  config_sync_hash?: string | null | undefined;
130
130
  config_synced_at?: string | null | undefined;
131
131
  audience?: string | undefined;
@@ -231,7 +231,7 @@ export declare function initJSXRoute(ctx: Context<{
231
231
  pushed_authorization_requests_supported?: boolean | undefined;
232
232
  authorization_response_iss_parameter_supported?: boolean | undefined;
233
233
  deployment_type?: "shared" | "wfp" | undefined;
234
- provisioning_state?: "pending" | "ready" | "failed" | undefined;
234
+ provisioning_state?: "pending" | "failed" | "ready" | undefined;
235
235
  provisioning_error?: string | undefined;
236
236
  provisioning_state_changed_at?: string | undefined;
237
237
  bundle_configuration?: string | undefined;
@@ -304,6 +304,7 @@ export declare function initJSXRoute(ctx: Context<{
304
304
  } | undefined;
305
305
  } | undefined;
306
306
  is_control_plane?: boolean | undefined;
307
+ has_children?: boolean | undefined;
307
308
  };
308
309
  connections: {
309
310
  created_at: string;
@@ -429,7 +430,7 @@ export declare function initJSXRoute(ctx: Context<{
429
430
  set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
430
431
  };
431
432
  scope?: "local" | "shared" | "platform" | undefined;
432
- override?: "secrets" | "none" | "fields" | undefined;
433
+ override?: "none" | "secrets" | "fields" | undefined;
433
434
  enforce?: boolean | undefined;
434
435
  id?: string | undefined;
435
436
  display_name?: string | undefined;
@@ -507,7 +508,7 @@ export declare function initJSXRoute(ctx: Context<{
507
508
  friendly_name: string;
508
509
  id: string;
509
510
  parent_tenant_id?: string | null | undefined;
510
- config_sync?: "inherit-on-read" | "synced" | null | undefined;
511
+ config_sync?: "inherit-on-read" | "synced" | "detached" | null | undefined;
511
512
  config_sync_hash?: string | null | undefined;
512
513
  config_synced_at?: string | null | undefined;
513
514
  audience?: string | undefined;
@@ -613,7 +614,7 @@ export declare function initJSXRoute(ctx: Context<{
613
614
  pushed_authorization_requests_supported?: boolean | undefined;
614
615
  authorization_response_iss_parameter_supported?: boolean | undefined;
615
616
  deployment_type?: "shared" | "wfp" | undefined;
616
- provisioning_state?: "pending" | "ready" | "failed" | undefined;
617
+ provisioning_state?: "pending" | "failed" | "ready" | undefined;
617
618
  provisioning_error?: string | undefined;
618
619
  provisioning_state_changed_at?: string | undefined;
619
620
  bundle_configuration?: string | undefined;
@@ -686,6 +687,7 @@ export declare function initJSXRoute(ctx: Context<{
686
687
  } | undefined;
687
688
  } | undefined;
688
689
  is_control_plane?: boolean | undefined;
690
+ has_children?: boolean | undefined;
689
691
  };
690
692
  loginSession: {
691
693
  csrf_token: string;
@@ -851,7 +853,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
851
853
  } | undefined;
852
854
  dark_mode?: "dark" | "light" | "auto" | undefined;
853
855
  scope?: "local" | "shared" | "platform" | undefined;
854
- override?: "secrets" | "none" | "fields" | undefined;
856
+ override?: "none" | "secrets" | "fields" | undefined;
855
857
  enforce?: boolean | undefined;
856
858
  } | null;
857
859
  client: {
@@ -875,7 +877,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
875
877
  friendly_name: string;
876
878
  id: string;
877
879
  parent_tenant_id?: string | null | undefined;
878
- config_sync?: "inherit-on-read" | "synced" | null | undefined;
880
+ config_sync?: "inherit-on-read" | "synced" | "detached" | null | undefined;
879
881
  config_sync_hash?: string | null | undefined;
880
882
  config_synced_at?: string | null | undefined;
881
883
  audience?: string | undefined;
@@ -981,7 +983,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
981
983
  pushed_authorization_requests_supported?: boolean | undefined;
982
984
  authorization_response_iss_parameter_supported?: boolean | undefined;
983
985
  deployment_type?: "shared" | "wfp" | undefined;
984
- provisioning_state?: "pending" | "ready" | "failed" | undefined;
986
+ provisioning_state?: "pending" | "failed" | "ready" | undefined;
985
987
  provisioning_error?: string | undefined;
986
988
  provisioning_state_changed_at?: string | undefined;
987
989
  bundle_configuration?: string | undefined;
@@ -1054,6 +1056,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
1054
1056
  } | undefined;
1055
1057
  } | undefined;
1056
1058
  is_control_plane?: boolean | undefined;
1059
+ has_children?: boolean | undefined;
1057
1060
  };
1058
1061
  connections: {
1059
1062
  created_at: string;
@@ -1179,7 +1182,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
1179
1182
  set_user_root_attributes?: "on_each_login" | "on_first_login" | "never_on_login" | undefined;
1180
1183
  };
1181
1184
  scope?: "local" | "shared" | "platform" | undefined;
1182
- override?: "secrets" | "none" | "fields" | undefined;
1185
+ override?: "none" | "secrets" | "fields" | undefined;
1183
1186
  enforce?: boolean | undefined;
1184
1187
  id?: string | undefined;
1185
1188
  display_name?: string | undefined;
@@ -1326,7 +1329,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
1326
1329
  friendly_name: string;
1327
1330
  id: string;
1328
1331
  parent_tenant_id?: string | null | undefined;
1329
- config_sync?: "inherit-on-read" | "synced" | null | undefined;
1332
+ config_sync?: "inherit-on-read" | "synced" | "detached" | null | undefined;
1330
1333
  config_sync_hash?: string | null | undefined;
1331
1334
  config_synced_at?: string | null | undefined;
1332
1335
  audience?: string | undefined;
@@ -1432,7 +1435,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
1432
1435
  pushed_authorization_requests_supported?: boolean | undefined;
1433
1436
  authorization_response_iss_parameter_supported?: boolean | undefined;
1434
1437
  deployment_type?: "shared" | "wfp" | undefined;
1435
- provisioning_state?: "pending" | "ready" | "failed" | undefined;
1438
+ provisioning_state?: "pending" | "failed" | "ready" | undefined;
1436
1439
  provisioning_error?: string | undefined;
1437
1440
  provisioning_state_changed_at?: string | undefined;
1438
1441
  bundle_configuration?: string | undefined;
@@ -1505,6 +1508,7 @@ export declare function initJSXRouteWithSession(ctx: Context<{
1505
1508
  } | undefined;
1506
1509
  } | undefined;
1507
1510
  is_control_plane?: boolean | undefined;
1511
+ has_children?: boolean | undefined;
1508
1512
  };
1509
1513
  loginSession: {
1510
1514
  csrf_token: string;
package/dist/types/routes/universal-login/flow-api.d.ts CHANGED
@@ -43,7 +43,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
43
43
  hint?: string | undefined;
44
44
  messages?: {
45
45
  text: string;
46
- type: "error" | "success" | "info" | "warning";
46
+ type: "success" | "error" | "info" | "warning";
47
47
  id?: number | undefined;
48
48
  }[] | undefined;
49
49
  }[];
@@ -51,7 +51,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
51
51
  description?: string | undefined;
52
52
  messages?: {
53
53
  text: string;
54
- type: "error" | "success" | "info" | "warning";
54
+ type: "success" | "error" | "info" | "warning";
55
55
  id?: number | undefined;
56
56
  }[] | undefined;
57
57
  links?: {
@@ -123,7 +123,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
123
123
  hint?: string | undefined;
124
124
  messages?: {
125
125
  text: string;
126
- type: "error" | "success" | "info" | "warning";
126
+ type: "success" | "error" | "info" | "warning";
127
127
  id?: number | undefined;
128
128
  }[] | undefined;
129
129
  }[];
@@ -131,7 +131,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
131
131
  description?: string | undefined;
132
132
  messages?: {
133
133
  text: string;
134
- type: "error" | "success" | "info" | "warning";
134
+ type: "success" | "error" | "info" | "warning";
135
135
  id?: number | undefined;
136
136
  }[] | undefined;
137
137
  links?: {
@@ -220,7 +220,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
220
220
  hint?: string | undefined;
221
221
  messages?: {
222
222
  text: string;
223
- type: "error" | "success" | "info" | "warning";
223
+ type: "success" | "error" | "info" | "warning";
224
224
  id?: number | undefined;
225
225
  }[] | undefined;
226
226
  }[];
@@ -228,7 +228,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
228
228
  description?: string | undefined;
229
229
  messages?: {
230
230
  text: string;
231
- type: "error" | "success" | "info" | "warning";
231
+ type: "success" | "error" | "info" | "warning";
232
232
  id?: number | undefined;
233
233
  }[] | undefined;
234
234
  links?: {
@@ -335,7 +335,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
335
335
  hint?: string | undefined;
336
336
  messages?: {
337
337
  text: string;
338
- type: "error" | "success" | "info" | "warning";
338
+ type: "success" | "error" | "info" | "warning";
339
339
  id?: number | undefined;
340
340
  }[] | undefined;
341
341
  }[];
@@ -343,7 +343,7 @@ export declare const flowApiRoutes: OpenAPIHono<{
343
343
  description?: string | undefined;
344
344
  messages?: {
345
345
  text: string;
346
- type: "error" | "success" | "info" | "warning";
346
+ type: "success" | "error" | "info" | "warning";
347
347
  id?: number | undefined;
348
348
  }[] | undefined;
349
349
  links?: {
package/dist/types/routes/universal-login/screens/device-flow.d.ts ADDED
@@ -0,0 +1,4 @@
1
+ import { type ScreenDefinition } from "./types";
2
+ export declare const deviceCodeScreenDefinition: ScreenDefinition;
3
+ export declare const deviceConfirmationScreenDefinition: ScreenDefinition;
4
+ export declare const deviceCompleteScreenDefinition: ScreenDefinition;
package/dist/types/routes/universal-login/u2-index.d.ts CHANGED
@@ -165,7 +165,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
165
165
  $get: {
166
166
  input: {
167
167
  param: {
168
- screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
168
+ screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "login/email-verification" | "login/email-verification-sent" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant" | "device/code" | "device/confirmation" | "device/complete";
169
169
  };
170
170
  } & {
171
171
  query: {
@@ -181,7 +181,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
181
181
  } | {
182
182
  input: {
183
183
  param: {
184
- screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
184
+ screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "login/email-verification" | "login/email-verification-sent" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant" | "device/code" | "device/confirmation" | "device/complete";
185
185
  };
186
186
  } & {
187
187
  query: {
@@ -197,7 +197,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
197
197
  } | {
198
198
  input: {
199
199
  param: {
200
- screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
200
+ screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "login/email-verification" | "login/email-verification-sent" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant" | "device/code" | "device/confirmation" | "device/complete";
201
201
  };
202
202
  } & {
203
203
  query: {
@@ -217,7 +217,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
217
217
  $post: {
218
218
  input: {
219
219
  param: {
220
- screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
220
+ screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "enter-password" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "login/email-verification" | "login/email-verification-sent" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant" | "device/code" | "device/confirmation";
221
221
  };
222
222
  } & {
223
223
  query: {
@@ -235,7 +235,7 @@ export default function createU2App(config: AuthHeroConfig): OpenAPIHono<{
235
235
  } | {
236
236
  input: {
237
237
  param: {
238
- screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
238
+ screen: "impersonate" | "signup" | "login" | "reset-password" | "consent" | "enter-password" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "login/email-verification" | "login/email-verification-sent" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant" | "device/code" | "device/confirmation";
239
239
  };
240
240
  } & {
241
241
  query: {