authhero 9.26.0 → 9.27.1

package/dist/authhero.d.ts

@@ -1,5 +1,5 @@
 import * as _authhero_adapter_interfaces from '@authhero/adapter-interfaces';
-import { DataAdapters, LoginSession, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, LinkCandidate, roleSchema, inviteSchema, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Action, ActionInsert, ActionUpdate, Hook, HookInsert, HookCode, HookCodeInsert, TenantOperationKind, TenantOperation, Rollout, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, OutboxAdapter, AuditEvent, CodesAdapter, ActionExecutionsAdapter, HooksAdapter, Client, LogsDataAdapter, LogInsert, UserDataAdapter, AuditCategory, ProxyRoutesAdapter, CustomDomainsAdapter, TenantsDataAdapter, KeysAdapter, ListParams, CodeExecutionResult } from '@authhero/adapter-interfaces';
+import { DataAdapters, RequestAuth, LoginSession, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, LinkCandidate, roleSchema, inviteSchema, TenantMemberRequest, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Action, ActionInsert, ActionUpdate, Hook, HookInsert, HookCode, HookCodeInsert, TenantOperationKind, TenantOperation, Rollout, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, OutboxAdapter, AuditEvent, CodesAdapter, ActionExecutionsAdapter, HooksAdapter, Client, LogsDataAdapter, LogInsert, UserDataAdapter, AuditCategory, ProxyRoutesAdapter, CustomDomainsAdapter, TenantsDataAdapter, KeysAdapter, ListParams, CodeExecutionResult } from '@authhero/adapter-interfaces';
 export * from '@authhero/adapter-interfaces';
 import * as hono_utils_http_status from 'hono/utils/http-status';
 import * as hono_types from 'hono/types';
@@ -102,6 +102,8 @@ type Variables = {
     client_id?: string;
     user_id?: string;
     username?: string;
+    /** Verified account-session caller, captured before account mutations. */
+    sessionAuth?: RequestAuth;
     connection?: string;
     body?: any;
     /**
@@ -365,6 +367,7 @@ declare const enrichedClientSchema: z.ZodObject<{
         config_sync: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
             "inherit-on-read": "inherit-on-read";
             synced: "synced";
+            detached: "detached";
         }>>>;
         config_sync_hash: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         config_synced_at: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -571,6 +574,7 @@ declare const enrichedClientSchema: z.ZodObject<{
         }, z.core.$strip>>;
         id: z.ZodString;
         is_control_plane: z.ZodOptional<z.ZodBoolean>;
+        has_children: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>;
     connections: z.ZodArray<z.ZodObject<{
         created_at: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
@@ -1117,6 +1121,80 @@ declare class TenantInvitationNotFoundError extends TenantMembersNotFoundError {
     constructor(invitationId: string);
 }
 
+/** What each kind of request carries in `payload`. */
+declare const tenantMemberRequestPayloadSchemas: {
+    invite: z.ZodObject<{
+        invitee: z.ZodObject<{
+            email: z.ZodString;
+        }, z.core.$strip>;
+        inviter: z.ZodDefault<z.ZodObject<{
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        roles: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        send_invitation_email: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
+        ttl_sec: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>;
+    add_members: z.ZodObject<{
+        user_ids: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    remove_members: z.ZodObject<{
+        user_ids: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    assign_roles: z.ZodObject<{
+        user_id: z.ZodString;
+        roles: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    remove_roles: z.ZodObject<{
+        user_id: z.ZodString;
+        roles: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    revoke_invitation: z.ZodObject<{
+        invitation_id: z.ZodString;
+    }, z.core.$strip>;
+};
+type Ctx$1 = Context<{
+    Bindings: Bindings;
+    Variables: Variables;
+}>;
+/**
+ * What a deployment does once a request is stored, given the stored row. A
+ * shard tells the control plane (`createControlPlaneRequestNotifier`), a
+ * single-instance deployment runs it right away. A failure here never fails
+ * the registration: the request stays `pending` and is picked up later.
+ */
+type AfterTenantMemberRequestRegistered = (ctx: Ctx$1, request: TenantMemberRequest) => Promise<void>;
+interface TenantMemberRequestsConfig {
+    afterRegister?: AfterTenantMemberRequestRegistered;
+}
+/**
+ * The request cannot be carried out, for a reason an admin may read: it is not
+ * a failure of the system, so it is not retried.
+ */
+declare class TenantMemberRequestRejected extends Error {
+    constructor(reason: string);
+}
+interface ExecuteTenantMemberRequestOptions {
+    /**
+     * Whether the requester may still change this tenant's team. Defaults to
+     * holding at least one role in the tenant's organization.
+     */
+    isRequesterAllowed?: (backend: TenantMembersBackend, tenantId: string, userId: string) => Promise<boolean>;
+}
+/**
+ * Carries out one request against the control-plane team of its tenant.
+ *
+ * `tenantId` is the tenant the caller proved it speaks for (the verified
+ * service token's `tenant_id`); a request that names another tenant is
+ * refused. The requester is checked again here because the request may have
+ * waited a while. Running it twice is safe: membership and role changes are
+ * idempotent, and an invitation that was already created for the same address
+ * is reused instead of created again.
+ *
+ * Returns what the request produced, to store on the row. Throws
+ * {@link TenantMemberRequestRejected} when it must not or cannot run.
+ */
+declare function executeTenantMemberRequest(backend: TenantMembersBackend, tenantId: string, request: Pick<TenantMemberRequest, "tenant_id" | "kind" | "requested_by" | "payload" | "result">, options?: ExecuteTenantMemberRequestOptions): Promise<Record<string, unknown> | null>;
+
 type Ctx = Context<{
     Bindings: Bindings;
     Variables: Variables;
@@ -1131,10 +1209,51 @@ type GetTenantMembersBackend = (ctx: Ctx) => TenantMembersBackend | Promise<Tena
  * {@link TenantMembersBackend}; this layer only pins the tenant to the token's
  * org claim and shapes responses.
  */
-declare function createTenantMembersRoutes(getBackend: GetTenantMembersBackend): OpenAPIHono<{
+declare function createTenantMembersRoutes(getBackend: GetTenantMembersBackend, requests?: TenantMemberRequestsConfig): OpenAPIHono<{
     Bindings: Bindings;
     Variables: Variables;
 }, {
+    "/requests": {
+        $get: {
+            input: {
+                query: {
+                    status?: "pending" | "failed" | "succeeded" | undefined;
+                    page?: unknown;
+                    per_page?: unknown;
+                };
+            } & {
+                header: {
+                    "tenant-id"?: string | undefined;
+                };
+            };
+            output: {
+                requests: {
+                    kind: "invite" | "add_members" | "remove_members" | "assign_roles" | "remove_roles" | "revoke_invitation";
+                    requested_by: string;
+                    payload: {
+                        [x: string]: hono_utils_types.JSONValue;
+                    };
+                    id: string;
+                    tenant_id: string;
+                    status: "pending" | "failed" | "succeeded";
+                    created_at: string;
+                    updated_at: string;
+                    result?: {
+                        [x: string]: hono_utils_types.JSONValue;
+                    } | null | undefined;
+                    error?: string | null | undefined;
+                    notified_at?: string | null | undefined;
+                    finished_at?: string | null | undefined;
+                }[];
+                start: number;
+                limit: number;
+                length: number;
+            };
+            outputFormat: "json";
+            status: 200;
+        };
+    };
+} & {
     "/roles": {
         $get: {
             input: {
@@ -1253,6 +1372,30 @@ declare function createTenantMembersRoutes(getBackend: GetTenantMembersBackend):
             };
             outputFormat: "json";
             status: 201;
+        } | {
+            input: {
+                header: {
+                    "tenant-id"?: string | undefined;
+                };
+            } & {
+                json: {
+                    invitee: {
+                        email: string;
+                    };
+                    inviter?: {
+                        name?: string | undefined;
+                    } | undefined;
+                    roles?: string[] | undefined;
+                    send_invitation_email?: boolean | undefined;
+                    ttl_sec?: number | undefined;
+                };
+            };
+            output: {
+                id: string;
+                status: "pending" | "failed" | "succeeded";
+            };
+            outputFormat: "json";
+            status: 202;
         };
     };
 } & {
@@ -1270,6 +1413,22 @@ declare function createTenantMembersRoutes(getBackend: GetTenantMembersBackend):
             output: {};
             outputFormat: string;
             status: 204;
+        } | {
+            input: {
+                param: {
+                    invitation_id: string;
+                };
+            } & {
+                header: {
+                    "tenant-id"?: string | undefined;
+                };
+            };
+            output: {
+                id: string;
+                status: "pending" | "failed" | "succeeded";
+            };
+            outputFormat: "json";
+            status: 202;
         };
     };
 } & {
@@ -1327,6 +1486,22 @@ declare function createTenantMembersRoutes(getBackend: GetTenantMembersBackend):
             output: {};
             outputFormat: string;
             status: 204;
+        } | {
+            input: {
+                header: {
+                    "tenant-id"?: string | undefined;
+                };
+            } & {
+                json: {
+                    user_ids: string[];
+                };
+            };
+            output: {
+                id: string;
+                status: "pending" | "failed" | "succeeded";
+            };
+            outputFormat: "json";
+            status: 202;
         };
     };
 } & {
@@ -1344,6 +1519,22 @@ declare function createTenantMembersRoutes(getBackend: GetTenantMembersBackend):
             output: {};
             outputFormat: string;
             status: 204;
+        } | {
+            input: {
+                header: {
+                    "tenant-id"?: string | undefined;
+                };
+            } & {
+                json: {
+                    user_ids: string[];
+                };
+            };
+            output: {
+                id: string;
+                status: "pending" | "failed" | "succeeded";
+            };
+            outputFormat: "json";
+            status: 202;
         };
     };
 } & {
@@ -1392,6 +1583,26 @@ declare function createTenantMembersRoutes(getBackend: GetTenantMembersBackend):
             output: {};
             outputFormat: string;
             status: 204;
+        } | {
+            input: {
+                param: {
+                    user_id: string;
+                };
+            } & {
+                header: {
+                    "tenant-id"?: string | undefined;
+                };
+            } & {
+                json: {
+                    roles: string[];
+                };
+            };
+            output: {
+                id: string;
+                status: "pending" | "failed" | "succeeded";
+            };
+            outputFormat: "json";
+            status: 202;
         };
     };
 } & {
@@ -1413,6 +1624,26 @@ declare function createTenantMembersRoutes(getBackend: GetTenantMembersBackend):
             output: {};
             outputFormat: string;
             status: 204;
+        } | {
+            input: {
+                param: {
+                    user_id: string;
+                };
+            } & {
+                header: {
+                    "tenant-id"?: string | undefined;
+                };
+            } & {
+                json: {
+                    roles: string[];
+                };
+            };
+            output: {
+                id: string;
+                status: "pending" | "failed" | "succeeded";
+            };
+            outputFormat: "json";
+            status: 202;
         };
     };
 }, "/">;
@@ -1449,6 +1680,17 @@ interface TenantMembersControlPlaneOptions {
      * control-plane tenant.
      */
     getBackend: (c: CpCtx) => TenantMembersBackend | Promise<TenantMembersBackend>;
+    /**
+     * Team-change requests (issue #1550). A shard registers a request in its own
+     * database and calls `POST /requests/notify` with its id; `onNotify` takes
+     * it from there, typically by enqueueing a tenant operation that reads the
+     * request from the shard and carries it out. `tenantId` is the verified
+     * token's, never the body's. Unset, the endpoint answers 501 and the shard
+     * keeps the request until a control plane that has it is in place.
+     */
+    requests?: {
+        onNotify: (c: CpCtx, tenantId: string, requestId: string) => Promise<void>;
+    };
     /**
      * Defaults to verifying a `controlplane:tenant_members` bearer token issued
      * by `env.ISSUER` or the inbound host. Ignored under
@@ -2080,6 +2322,16 @@ interface AuthHeroConfig {
      */
     tenantMembers?: {
         getBackend: GetTenantMembersBackend;
+        /**
+         * Register team changes as requests instead of making them in the request
+         * (issue #1550). Needs `tenantMemberRequests` on the data adapter. A write
+         * then answers `202` with the request id, `GET /tenant-members/requests`
+         * lists them, and `afterRegister` decides what happens next: a shard tells
+         * the control plane (`createControlPlaneRequestNotifier`), a
+         * single-instance deployment runs the request right away. Unset keeps the
+         * synchronous writes.
+         */
+        requests?: TenantMemberRequestsConfig;
     };
     /**
      * Optional outbox-driven replication of `proxy_routes` mutations to a global
@@ -3246,7 +3498,7 @@ interface CodesCleanupParams {
  * }
  * ```
  */
-declare function cleanupCodes(codes: CodesAdapter, params?: CodesCleanupParams): Promise<number>;
+declare function cleanupCodes(codes: Pick<CodesAdapter, "cleanup">, params?: CodesCleanupParams): Promise<number>;
 
 interface ActionExecutionsCleanupParams {
     /**
@@ -3382,6 +3634,8 @@ interface WebhookInvocation {
         trigger_id: string;
         user?: unknown;
         request?: unknown;
+        previous_user?: unknown;
+        updates?: unknown;
     };
 }
 interface WebhookDestinationOptions {
@@ -3416,6 +3670,7 @@ declare class WebhookDestination implements EventDestination {
     private webhookInvoker?;
     constructor(hooks: HooksAdapter, getServiceToken: GetServiceToken, options?: WebhookDestinationOptions);
     accepts(event: AuditEvent): boolean;
+    /** Build the webhook payload from the event's committed user and update snapshots. */
     transform(event: AuditEvent): WebhookInvocation;
     deliver(events: WebhookInvocation[]): Promise<void>;
     private invokeCustom;
@@ -3819,6 +4074,9 @@ interface CodeHookInvocation {
     triggerId: string;
     /** Serialized user snapshot from the audit event (`target.after`). */
     user?: unknown;
+    userId?: string;
+    previousUser?: unknown;
+    updates?: unknown;
     /** Serialized request context from the audit event. */
     request?: unknown;
 }
@@ -3846,9 +4104,9 @@ interface CodeHookInvocation {
  * Constructed per-request (via `getDestinations(ctx)`) so it can close over
  * `ctx.env.codeExecutor`. The same class is used by the cron `drainOutbox`
  * safety net when a `codeExecutor` is supplied to `createDefaultDestinations`.
- * When no executor is configured, code hooks cannot run (nor be deployed), so
- * `deliver` is a no-op success — matching the inline `handleCodeHook` which
- * returns `null` without an executor.
+ * Missing executors fail delivery for post-update/deletion so the event can be
+ * retried when the configuration is repaired. Registration retains its legacy
+ * no-op behavior without an executor.
  */
 declare class CodeHookDestination implements EventDestination {
     name: string;
@@ -3859,7 +4117,9 @@ declare class CodeHookDestination implements EventDestination {
         logCapture?: ActionExecutionLogCapture;
     });
     accepts(event: AuditEvent): boolean;
+    /** Recover the user write and stable delivery ID from a persisted hook event. */
     transform(event: AuditEvent): CodeHookInvocation;
+    /** Run matching Actions, record outcomes, and fail delivery when the relay must retry. */
     deliver(invocations: CodeHookInvocation[]): Promise<void>;
     /**
      * Fetch every hook for the tenant, paging past the adapter's default page
@@ -4059,6 +4319,8 @@ interface ControlPlaneResponse {
     status: number;
     /** Parsed JSON body, or null for empty/non-JSON responses. */
     data: unknown;
+    /** The raw response body, for callers that tell plain-text answers apart. */
+    text?: string;
 }
 interface ControlPlaneClient {
     /**
@@ -4181,6 +4443,20 @@ declare function createControlPlaneTenantMembersAdapter(options: ControlPlaneTen
  * in one place is what keeps the two ends from drifting.
  */
 declare const CONTROL_PLANE_TENANT_MEMBERS_PATH = "/api/v2/proxy/control-plane/tenant-members";
+/**
+ * A shard tells the control plane that a team-change request is waiting
+ * (issue #1550). Only the id travels: the control plane reads the request from
+ * the shard, so what was asked never rests on what the notification claims.
+ */
+declare const CONTROL_PLANE_TENANT_MEMBER_REQUESTS_NOTIFY_PATH = "/api/v2/proxy/control-plane/tenant-members/requests/notify";
+
+/**
+ * Tells the control plane, over the shared control-plane client, that a
+ * request is waiting, and records that it was told. If the control plane is
+ * down the request simply stays unnotified and a control-plane sweep finds it
+ * later, so this never throws.
+ */
+declare function createControlPlaneRequestNotifier(client: ControlPlaneClient): AfterTenantMemberRequestRegistered;
 
 interface ServiceTokenResponse {
     access_token: string;
@@ -5461,7 +5737,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
+                    name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 }[];
@@ -5616,7 +5892,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        factor_name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
+                        factor_name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -5624,7 +5900,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
+                    name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -5637,7 +5913,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        factor_name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
+                        factor_name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     };
                 } & {
                     header: {
@@ -5649,7 +5925,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    name: "email" | "sms" | "otp" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
+                    name: "sms" | "otp" | "email" | "duo" | "push-notification" | "webauthn-roaming" | "webauthn-platform" | "recovery-code";
                     enabled: boolean;
                     trial_expired?: boolean | undefined;
                 };
@@ -6470,11 +6746,11 @@ declare function init(config: AuthHeroConfig): {
                             email?: string | undefined;
                         };
                         id?: string | undefined;
-                        connection_id?: string | undefined;
                         app_metadata?: Record<string, any> | undefined;
                         user_metadata?: Record<string, any> | undefined;
-                        ttl_sec?: number | undefined;
+                        connection_id?: string | undefined;
                         roles?: string[] | undefined;
+                        ttl_sec?: number | undefined;
                         send_invitation_email?: boolean | undefined;
                     };
                 };
@@ -13333,7 +13609,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "optional" | "required" | "disabled" | undefined;
+                                    status?: "required" | "optional" | "disabled" | undefined;
                                     verification?: {
                                         active?: boolean | undefined;
                                     } | undefined;
@@ -13350,7 +13626,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "optional" | "required" | "disabled" | undefined;
+                                    status?: "required" | "optional" | "disabled" | undefined;
                                 } | undefined;
                                 validation?: {
                                     max_length?: number | undefined;
@@ -13367,7 +13643,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "optional" | "required" | "disabled" | undefined;
+                                    status?: "required" | "optional" | "disabled" | undefined;
                                 } | undefined;
                             } | undefined;
                         } | undefined;
@@ -13474,7 +13750,7 @@ declare function init(config: AuthHeroConfig): {
                                         active?: boolean | undefined;
                                     } | undefined;
                                     signup?: {
-                                        status?: "optional" | "required" | "disabled" | undefined;
+                                        status?: "required" | "optional" | "disabled" | undefined;
                                         verification?: {
                                             active?: boolean | undefined;
                                         } | undefined;
@@ -13491,7 +13767,7 @@ declare function init(config: AuthHeroConfig): {
                                         active?: boolean | undefined;
                                     } | undefined;
                                     signup?: {
-                                        status?: "optional" | "required" | "disabled" | undefined;
+                                        status?: "required" | "optional" | "disabled" | undefined;
                                     } | undefined;
                                     validation?: {
                                         max_length?: number | undefined;
@@ -13508,7 +13784,7 @@ declare function init(config: AuthHeroConfig): {
                                         active?: boolean | undefined;
                                     } | undefined;
                                     signup?: {
-                                        status?: "optional" | "required" | "disabled" | undefined;
+                                        status?: "required" | "optional" | "disabled" | undefined;
                                     } | undefined;
                                 } | undefined;
                             } | undefined;
@@ -13615,7 +13891,7 @@ declare function init(config: AuthHeroConfig): {
                                         active?: boolean | undefined;
                                     } | undefined;
                                     signup?: {
-                                        status?: "optional" | "required" | "disabled" | undefined;
+                                        status?: "required" | "optional" | "disabled" | undefined;
                                         verification?: {
                                             active?: boolean | undefined;
                                         } | undefined;
@@ -13632,7 +13908,7 @@ declare function init(config: AuthHeroConfig): {
                                         active?: boolean | undefined;
                                     } | undefined;
                                     signup?: {
-                                        status?: "optional" | "required" | "disabled" | undefined;
+                                        status?: "required" | "optional" | "disabled" | undefined;
                                     } | undefined;
                                     validation?: {
                                         max_length?: number | undefined;
@@ -13649,7 +13925,7 @@ declare function init(config: AuthHeroConfig): {
                                         active?: boolean | undefined;
                                     } | undefined;
                                     signup?: {
-                                        status?: "optional" | "required" | "disabled" | undefined;
+                                        status?: "required" | "optional" | "disabled" | undefined;
                                     } | undefined;
                                 } | undefined;
                             } | undefined;
@@ -13771,7 +14047,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "optional" | "required" | "disabled" | undefined;
+                                    status?: "required" | "optional" | "disabled" | undefined;
                                     verification?: {
                                         active?: boolean | undefined;
                                     } | undefined;
@@ -13788,7 +14064,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "optional" | "required" | "disabled" | undefined;
+                                    status?: "required" | "optional" | "disabled" | undefined;
                                 } | undefined;
                                 validation?: {
                                     max_length?: number | undefined;
@@ -13805,7 +14081,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "optional" | "required" | "disabled" | undefined;
+                                    status?: "required" | "optional" | "disabled" | undefined;
                                 } | undefined;
                             } | undefined;
                         } | undefined;
@@ -13973,7 +14249,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "optional" | "required" | "disabled" | undefined;
+                                    status?: "required" | "optional" | "disabled" | undefined;
                                     verification?: {
                                         active?: boolean | undefined;
                                     } | undefined;
@@ -13990,7 +14266,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "optional" | "required" | "disabled" | undefined;
+                                    status?: "required" | "optional" | "disabled" | undefined;
                                 } | undefined;
                                 validation?: {
                                     max_length?: number | undefined;
@@ -14007,7 +14283,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "optional" | "required" | "disabled" | undefined;
+                                    status?: "required" | "optional" | "disabled" | undefined;
                                 } | undefined;
                             } | undefined;
                         } | undefined;
@@ -14141,7 +14417,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "optional" | "required" | "disabled" | undefined;
+                                    status?: "required" | "optional" | "disabled" | undefined;
                                     verification?: {
                                         active?: boolean | undefined;
                                     } | undefined;
@@ -14158,7 +14434,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "optional" | "required" | "disabled" | undefined;
+                                    status?: "required" | "optional" | "disabled" | undefined;
                                 } | undefined;
                                 validation?: {
                                     max_length?: number | undefined;
@@ -14175,7 +14451,7 @@ declare function init(config: AuthHeroConfig): {
                                     active?: boolean | undefined;
                                 } | undefined;
                                 signup?: {
-                                    status?: "optional" | "required" | "disabled" | undefined;
+                                    status?: "required" | "optional" | "disabled" | undefined;
                                 } | undefined;
                             } | undefined;
                         } | undefined;
@@ -14468,7 +14744,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: ({
-                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
@@ -14498,7 +14774,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "post-user-login" | "post-user-registration" | "post-user-update" | "credentials-exchange";
+                    trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
@@ -14513,7 +14789,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "credentials-exchange";
+                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion" | "credentials-exchange" | "pre-user-update";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
@@ -14548,7 +14824,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     hooks: ({
-                        trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+                        trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
                         enabled: boolean;
                         synchronous: boolean;
                         created_at: string;
@@ -14578,7 +14854,7 @@ declare function init(config: AuthHeroConfig): {
                             [x: string]: hono_utils_types.JSONValue;
                         } | undefined;
                     } | {
-                        trigger_id: "post-user-login" | "post-user-registration" | "post-user-update" | "credentials-exchange";
+                        trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
                         enabled: boolean;
                         synchronous: boolean;
                         created_at: string;
@@ -14593,7 +14869,7 @@ declare function init(config: AuthHeroConfig): {
                             [x: string]: hono_utils_types.JSONValue;
                         } | undefined;
                     } | {
-                        trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "credentials-exchange";
+                        trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion" | "credentials-exchange" | "pre-user-update";
                         enabled: boolean;
                         synchronous: boolean;
                         created_at: string;
@@ -14628,7 +14904,7 @@ declare function init(config: AuthHeroConfig): {
                     next?: string | undefined;
                 } | {
                     hooks: ({
-                        trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+                        trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
                         enabled: boolean;
                         synchronous: boolean;
                         created_at: string;
@@ -14658,7 +14934,7 @@ declare function init(config: AuthHeroConfig): {
                             [x: string]: hono_utils_types.JSONValue;
                         } | undefined;
                     } | {
-                        trigger_id: "post-user-login" | "post-user-registration" | "post-user-update" | "credentials-exchange";
+                        trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
                         enabled: boolean;
                         synchronous: boolean;
                         created_at: string;
@@ -14673,7 +14949,7 @@ declare function init(config: AuthHeroConfig): {
                             [x: string]: hono_utils_types.JSONValue;
                         } | undefined;
                     } | {
-                        trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "credentials-exchange";
+                        trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion" | "credentials-exchange" | "pre-user-update";
                         enabled: boolean;
                         synchronous: boolean;
                         created_at: string;
@@ -14719,7 +14995,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+                        trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
                         url: string;
                         scope?: "local" | "shared" | "platform" | undefined;
                         override?: "secrets" | "none" | "fields" | undefined;
@@ -14741,7 +15017,7 @@ declare function init(config: AuthHeroConfig): {
                         hook_id?: string | undefined;
                         metadata?: Record<string, unknown> | undefined;
                     } | {
-                        trigger_id: "post-user-login" | "post-user-registration" | "post-user-update" | "credentials-exchange";
+                        trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
                         template_id: "ensure-username" | "set-preferred-username" | "account-linking";
                         scope?: "local" | "shared" | "platform" | undefined;
                         override?: "secrets" | "none" | "fields" | undefined;
@@ -14752,7 +15028,7 @@ declare function init(config: AuthHeroConfig): {
                         hook_id?: string | undefined;
                         metadata?: Record<string, unknown> | undefined;
                     } | {
-                        trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "credentials-exchange";
+                        trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion" | "credentials-exchange" | "pre-user-update";
                         code_id: string;
                         scope?: "local" | "shared" | "platform" | undefined;
                         override?: "secrets" | "none" | "fields" | undefined;
@@ -14777,7 +15053,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
@@ -14807,7 +15083,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "post-user-login" | "post-user-registration" | "post-user-update" | "credentials-exchange";
+                    trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
@@ -14822,7 +15098,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "credentials-exchange";
+                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion" | "credentials-exchange" | "pre-user-update";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
@@ -14902,7 +15178,7 @@ declare function init(config: AuthHeroConfig): {
                     json: unknown;
                 };
                 output: {
-                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
@@ -14932,7 +15208,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "post-user-login" | "post-user-registration" | "post-user-update" | "credentials-exchange";
+                    trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
@@ -14947,7 +15223,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "credentials-exchange";
+                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion" | "credentials-exchange" | "pre-user-update";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
@@ -15008,7 +15284,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
@@ -15038,7 +15314,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "post-user-login" | "post-user-registration" | "post-user-update" | "credentials-exchange";
+                    trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
@@ -15053,7 +15329,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     } | undefined;
                 } | {
-                    trigger_id: "post-user-login" | "pre-user-registration" | "post-user-registration" | "credentials-exchange";
+                    trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion" | "credentials-exchange" | "pre-user-update";
                     enabled: boolean;
                     synchronous: boolean;
                     created_at: string;
@@ -15192,7 +15468,7 @@ declare function init(config: AuthHeroConfig): {
                         log_type: string;
                         category: "user_action" | "admin_action" | "system" | "api";
                         actor: {
-                            type: "user" | "client_credentials" | "system" | "admin" | "api_key";
+                            type: "client_credentials" | "user" | "system" | "admin" | "api_key";
                             id?: string | undefined;
                             email?: string | undefined;
                             org_id?: string | undefined;
@@ -15296,7 +15572,7 @@ declare function init(config: AuthHeroConfig): {
                         log_type: string;
                         category: "user_action" | "admin_action" | "system" | "api";
                         actor: {
-                            type: "user" | "client_credentials" | "system" | "admin" | "api_key";
+                            type: "client_credentials" | "user" | "system" | "admin" | "api_key";
                             id?: string | undefined;
                             email?: string | undefined;
                             org_id?: string | undefined;
@@ -16033,7 +16309,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -16072,7 +16348,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -16111,7 +16387,7 @@ declare function init(config: AuthHeroConfig): {
                     next?: string | undefined;
                 } | {
                     logs: {
-                        type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -16165,7 +16441,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -17471,7 +17747,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "optional" | "required" | "disabled" | undefined;
+                                            status?: "required" | "optional" | "disabled" | undefined;
                                             verification?: {
                                                 active?: boolean | undefined;
                                             } | undefined;
@@ -17488,7 +17764,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "optional" | "required" | "disabled" | undefined;
+                                            status?: "required" | "optional" | "disabled" | undefined;
                                         } | undefined;
                                         validation?: {
                                             max_length?: number | undefined;
@@ -17505,7 +17781,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "optional" | "required" | "disabled" | undefined;
+                                            status?: "required" | "optional" | "disabled" | undefined;
                                         } | undefined;
                                     } | undefined;
                                 } | undefined;
@@ -17632,7 +17908,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "optional" | "required" | "disabled" | undefined;
+                                            status?: "required" | "optional" | "disabled" | undefined;
                                             verification?: {
                                                 active?: boolean | undefined;
                                             } | undefined;
@@ -17649,7 +17925,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "optional" | "required" | "disabled" | undefined;
+                                            status?: "required" | "optional" | "disabled" | undefined;
                                         } | undefined;
                                         validation?: {
                                             max_length?: number | undefined;
@@ -17666,7 +17942,7 @@ declare function init(config: AuthHeroConfig): {
                                             active?: boolean | undefined;
                                         } | undefined;
                                         signup?: {
-                                            status?: "optional" | "required" | "disabled" | undefined;
+                                            status?: "required" | "optional" | "disabled" | undefined;
                                         } | undefined;
                                     } | undefined;
                                 } | undefined;
@@ -17816,9 +18092,9 @@ declare function init(config: AuthHeroConfig): {
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
+                    next?: boolean | undefined;
                     tenant_id?: string | undefined;
                     connection?: string | undefined;
-                    next?: boolean | undefined;
                     revoked_at?: string | undefined;
                     current?: boolean | undefined;
                     previous?: boolean | undefined;
@@ -17855,9 +18131,9 @@ declare function init(config: AuthHeroConfig): {
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
+                    next?: boolean | undefined;
                     tenant_id?: string | undefined;
                     connection?: string | undefined;
-                    next?: boolean | undefined;
                     revoked_at?: string | undefined;
                     current?: boolean | undefined;
                     previous?: boolean | undefined;
@@ -17893,9 +18169,9 @@ declare function init(config: AuthHeroConfig): {
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
+                    next?: boolean | undefined;
                     tenant_id?: string | undefined;
                     connection?: string | undefined;
-                    next?: boolean | undefined;
                     revoked_at?: string | undefined;
                     current?: boolean | undefined;
                     previous?: boolean | undefined;
@@ -17933,9 +18209,9 @@ declare function init(config: AuthHeroConfig): {
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
+                    next?: boolean | undefined;
                     tenant_id?: string | undefined;
                     connection?: string | undefined;
-                    next?: boolean | undefined;
                     revoked_at?: string | undefined;
                     current?: boolean | undefined;
                     previous?: boolean | undefined;
@@ -18823,10 +19099,10 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    user_id: string;
-                    client_id: string;
                     id: string;
                     created_at: string;
+                    user_id: string;
+                    client_id: string;
                     rotating: boolean;
                     device: {
                         initial_user_agent: string;
@@ -18841,23 +19117,23 @@ declare function init(config: AuthHeroConfig): {
                         audience: string;
                         scopes: string;
                     }[];
+                    revoked_at?: string | undefined;
                     expires_at?: string | undefined;
+                    idle_expires_at?: string | undefined;
                     session_id?: string | undefined;
+                    organization?: string | undefined;
                     auth_connection?: string | undefined;
                     auth_strategy?: {
                         strategy: string;
                         strategy_type: string;
                     } | undefined;
-                    revoked_at?: string | undefined;
-                    idle_expires_at?: string | undefined;
-                    organization?: string | undefined;
                     last_exchanged_at?: string | undefined;
                 }[] | {
                     tokens: {
-                        user_id: string;
-                        client_id: string;
                         id: string;
                         created_at: string;
+                        user_id: string;
+                        client_id: string;
                         rotating: boolean;
                         device: {
                             initial_user_agent: string;
@@ -18872,16 +19148,16 @@ declare function init(config: AuthHeroConfig): {
                             audience: string;
                             scopes: string;
                         }[];
+                        revoked_at?: string | undefined;
                         expires_at?: string | undefined;
+                        idle_expires_at?: string | undefined;
                         session_id?: string | undefined;
+                        organization?: string | undefined;
                         auth_connection?: string | undefined;
                         auth_strategy?: {
                             strategy: string;
                             strategy_type: string;
                         } | undefined;
-                        revoked_at?: string | undefined;
-                        idle_expires_at?: string | undefined;
-                        organization?: string | undefined;
                         last_exchanged_at?: string | undefined;
                     }[];
                     next?: string | undefined;
@@ -18890,10 +19166,10 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     tokens: {
-                        user_id: string;
-                        client_id: string;
                         id: string;
                         created_at: string;
+                        user_id: string;
+                        client_id: string;
                         rotating: boolean;
                         device: {
                             initial_user_agent: string;
@@ -18908,16 +19184,16 @@ declare function init(config: AuthHeroConfig): {
                             audience: string;
                             scopes: string;
                         }[];
+                        revoked_at?: string | undefined;
                         expires_at?: string | undefined;
+                        idle_expires_at?: string | undefined;
                         session_id?: string | undefined;
+                        organization?: string | undefined;
                         auth_connection?: string | undefined;
                         auth_strategy?: {
                             strategy: string;
                             strategy_type: string;
                         } | undefined;
-                        revoked_at?: string | undefined;
-                        idle_expires_at?: string | undefined;
-                        organization?: string | undefined;
                         last_exchanged_at?: string | undefined;
                     }[];
                     total?: number | undefined;
@@ -18969,7 +19245,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -19008,7 +19284,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -19047,7 +19323,7 @@ declare function init(config: AuthHeroConfig): {
                     next?: string | undefined;
                 } | {
                     logs: {
-                        type: "i" | "fn" | "fh" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fn" | "i" | "cs" | "fi" | "sv" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "cfgdiff" | "cfgdrift" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -20834,6 +21110,31 @@ declare function init(config: AuthHeroConfig): {
     } & {
         "/:triggerId/bindings": {
             $patch: {
+                input: {
+                    param: {
+                        triggerId: string;
+                    };
+                } & {
+                    header: {
+                        "tenant-id"?: string | undefined;
+                    };
+                } & {
+                    json: {
+                        bindings: {
+                            ref: {
+                                type?: "action_id" | "action_name" | undefined;
+                                value?: string | undefined;
+                                id?: string | undefined;
+                                name?: string | undefined;
+                            };
+                            display_name?: string | undefined;
+                        }[];
+                    };
+                };
+                output: {};
+                outputFormat: string;
+                status: 403;
+            } | {
                 input: {
                     param: {
                         triggerId: string;
@@ -22442,17 +22743,17 @@ declare function init(config: AuthHeroConfig): {
                         email: string;
                         send: "code" | "link";
                         authParams: {
-                            username?: string | undefined;
                             scope?: string | undefined;
-                            state?: string | undefined;
                             audience?: string | undefined;
+                            username?: string | undefined;
                             organization?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
+                            state?: string | undefined;
                             redirect_uri?: string | undefined;
+                            prompt?: string | undefined;
                             act_as?: string | undefined;
                             nonce?: string | undefined;
-                            prompt?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
                             code_challenge?: string | undefined;
                             ui_locales?: string | undefined;
@@ -22478,17 +22779,17 @@ declare function init(config: AuthHeroConfig): {
                         phone_number: string;
                         send: "code" | "link";
                         authParams: {
-                            username?: string | undefined;
                             scope?: string | undefined;
-                            state?: string | undefined;
                             audience?: string | undefined;
+                            username?: string | undefined;
                             organization?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
+                            state?: string | undefined;
                             redirect_uri?: string | undefined;
+                            prompt?: string | undefined;
                             act_as?: string | undefined;
                             nonce?: string | undefined;
-                            prompt?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
                             code_challenge?: string | undefined;
                             ui_locales?: string | undefined;
@@ -22684,10 +22985,146 @@ declare function init(config: AuthHeroConfig): {
             };
         };
     }, "/oauth/revoke"> & hono_types.MergeSchemaPath<{
+        "/": {
+            $get: {
+                input: {
+                    query: {
+                        user_code?: string | undefined;
+                        tenant_id?: string | undefined;
+                    };
+                };
+                output: {};
+                outputFormat: string;
+                status: 302;
+            } | {
+                input: {
+                    query: {
+                        user_code?: string | undefined;
+                        tenant_id?: string | undefined;
+                    };
+                };
+                output: {};
+                outputFormat: string;
+                status: 400;
+            };
+        };
+    }, "/activate"> & hono_types.MergeSchemaPath<{
+        "/": {
+            $post: {
+                input: {
+                    form: {
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        scope?: string | undefined;
+                        audience?: string | undefined;
+                        include_qr_code?: boolean | "false" | "true" | undefined;
+                    };
+                } & {
+                    json: {
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        scope?: string | undefined;
+                        audience?: string | undefined;
+                        include_qr_code?: boolean | "false" | "true" | undefined;
+                    };
+                };
+                output: {
+                    device_code: string;
+                    user_code: string;
+                    verification_uri: string;
+                    verification_uri_complete: string;
+                    expires_in: number;
+                    interval: number;
+                    qr_code?: string | undefined;
+                };
+                outputFormat: "json";
+                status: 200;
+            } | {
+                input: {
+                    form: {
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        scope?: string | undefined;
+                        audience?: string | undefined;
+                        include_qr_code?: boolean | "false" | "true" | undefined;
+                    };
+                } & {
+                    json: {
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        scope?: string | undefined;
+                        audience?: string | undefined;
+                        include_qr_code?: boolean | "false" | "true" | undefined;
+                    };
+                };
+                output: {
+                    error: string;
+                    error_description?: string | undefined;
+                };
+                outputFormat: "json";
+                status: 400;
+            } | {
+                input: {
+                    form: {
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        scope?: string | undefined;
+                        audience?: string | undefined;
+                        include_qr_code?: boolean | "false" | "true" | undefined;
+                    };
+                } & {
+                    json: {
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        scope?: string | undefined;
+                        audience?: string | undefined;
+                        include_qr_code?: boolean | "false" | "true" | undefined;
+                    };
+                };
+                output: {
+                    error: string;
+                    error_description?: string | undefined;
+                };
+                outputFormat: "json";
+                status: 401;
+            } | {
+                input: {
+                    form: {
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        scope?: string | undefined;
+                        audience?: string | undefined;
+                        include_qr_code?: boolean | "false" | "true" | undefined;
+                    };
+                } & {
+                    json: {
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        scope?: string | undefined;
+                        audience?: string | undefined;
+                        include_qr_code?: boolean | "false" | "true" | undefined;
+                    };
+                };
+                output: {
+                    error: string;
+                    error_description?: string | undefined;
+                };
+                outputFormat: "json";
+                status: 429;
+            };
+        };
+    }, "/oauth/device/code"> & hono_types.MergeSchemaPath<{
         "/": {
             $post: {
                 input: {
                     form: {
+                        grant_type: "urn:ietf:params:oauth:grant-type:device_code";
+                        device_code: string;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
+                    } | {
                         grant_type: "client_credentials";
                         scope?: string | undefined;
                         audience?: string | undefined;
@@ -22720,7 +23157,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -22748,6 +23185,13 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
+                        grant_type: "urn:ietf:params:oauth:grant-type:device_code";
+                        device_code: string;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
+                    } | {
                         grant_type: "client_credentials";
                         scope?: string | undefined;
                         audience?: string | undefined;
@@ -22780,7 +23224,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -22813,6 +23257,13 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     form: {
+                        grant_type: "urn:ietf:params:oauth:grant-type:device_code";
+                        device_code: string;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
+                    } | {
                         grant_type: "client_credentials";
                         scope?: string | undefined;
                         audience?: string | undefined;
@@ -22845,7 +23296,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -22873,6 +23324,13 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
+                        grant_type: "urn:ietf:params:oauth:grant-type:device_code";
+                        device_code: string;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
+                    } | {
                         grant_type: "client_credentials";
                         scope?: string | undefined;
                         audience?: string | undefined;
@@ -22905,7 +23363,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -22946,6 +23404,13 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     form: {
+                        grant_type: "urn:ietf:params:oauth:grant-type:device_code";
+                        device_code: string;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
+                    } | {
                         grant_type: "client_credentials";
                         scope?: string | undefined;
                         audience?: string | undefined;
@@ -22978,7 +23443,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -23006,6 +23471,13 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
+                        grant_type: "urn:ietf:params:oauth:grant-type:device_code";
+                        device_code: string;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
+                    } | {
                         grant_type: "client_credentials";
                         scope?: string | undefined;
                         audience?: string | undefined;
@@ -23038,7 +23510,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -23074,6 +23546,13 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     form: {
+                        grant_type: "urn:ietf:params:oauth:grant-type:device_code";
+                        device_code: string;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
+                    } | {
                         grant_type: "client_credentials";
                         scope?: string | undefined;
                         audience?: string | undefined;
@@ -23106,7 +23585,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -23134,6 +23613,13 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
+                        grant_type: "urn:ietf:params:oauth:grant-type:device_code";
+                        device_code: string;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
+                    } | {
                         grant_type: "client_credentials";
                         scope?: string | undefined;
                         audience?: string | undefined;
@@ -23166,7 +23652,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -23202,6 +23688,13 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     form: {
+                        grant_type: "urn:ietf:params:oauth:grant-type:device_code";
+                        device_code: string;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
+                    } | {
                         grant_type: "client_credentials";
                         scope?: string | undefined;
                         audience?: string | undefined;
@@ -23234,7 +23727,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -23262,6 +23755,13 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
+                        grant_type: "urn:ietf:params:oauth:grant-type:device_code";
+                        device_code: string;
+                        client_id?: string | undefined;
+                        client_secret?: string | undefined;
+                        client_assertion?: string | undefined;
+                        client_assertion_type?: string | undefined;
+                    } | {
                         grant_type: "client_credentials";
                         scope?: string | undefined;
                         audience?: string | undefined;
@@ -23294,7 +23794,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         username: string;
                         otp: string;
-                        realm: "email" | "sms";
+                        realm: "sms" | "email";
                         scope?: string | undefined;
                         audience?: string | undefined;
                     } | {
@@ -23375,6 +23875,7 @@ declare function init(config: AuthHeroConfig): {
                     request_uri_parameter_supported: boolean;
                     request_parameter_supported: boolean;
                     token_endpoint_auth_signing_alg_values_supported: string[];
+                    device_authorization_endpoint?: string | undefined;
                     registration_endpoint?: string | undefined;
                     end_session_endpoint?: string | undefined;
                     grant_types_supported?: string[] | undefined;
@@ -23410,6 +23911,7 @@ declare function init(config: AuthHeroConfig): {
                     request_uri_parameter_supported: boolean;
                     request_parameter_supported: boolean;
                     token_endpoint_auth_signing_alg_values_supported: string[];
+                    device_authorization_endpoint?: string | undefined;
                     registration_endpoint?: string | undefined;
                     end_session_endpoint?: string | undefined;
                     grant_types_supported?: string[] | undefined;
@@ -24261,7 +24763,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     form: {
                         username: string;
-                        login_selection?: "code" | "password" | undefined;
+                        login_selection?: "password" | "code" | undefined;
                     };
                 };
                 output: {};
@@ -24275,7 +24777,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     form: {
                         username: string;
-                        login_selection?: "code" | "password" | undefined;
+                        login_selection?: "password" | "code" | undefined;
                     };
                 };
                 output: {};
@@ -24640,7 +25142,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "login/email-verification" | "login/email-verification-sent" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant" | "device/code" | "device/confirmation" | "device/complete";
                     };
                 } & {
                     query: {
@@ -24656,7 +25158,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "login/email-verification" | "login/email-verification-sent" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant" | "device/code" | "device/confirmation" | "device/complete";
                     };
                 } & {
                     query: {
@@ -24672,7 +25174,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "login/email-verification" | "login/email-verification-sent" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant" | "device/code" | "device/confirmation" | "device/complete";
                     };
                 } & {
                     query: {
@@ -24692,7 +25194,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     param: {
-                        screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "enter-password" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "login/email-verification" | "login/email-verification-sent" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant" | "device/code" | "device/confirmation";
                     };
                 } & {
                     query: {
@@ -24710,7 +25212,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "impersonate" | "login" | "signup" | "reset-password" | "consent" | "enter-password" | "reset-password/request" | "reset-password/code" | "login/email-verification" | "login/email-verification-sent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "impersonate" | "reset-password" | "consent" | "enter-password" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "login/email-verification" | "login/email-verification-sent" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant" | "device/code" | "device/confirmation";
                     };
                 } & {
                     query: {
@@ -24812,5 +25314,5 @@ declare function init(config: AuthHeroConfig): {
     createX509Certificate: typeof createX509Certificate;
 };
 
-export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_CUSTOM_DOMAINS_PATH, CONTROL_PLANE_CUSTOM_DOMAINS_SCOPE, CONTROL_PLANE_SYNC_EVENT_PREFIX, CONTROL_PLANE_SYNC_SCOPE, CONTROL_PLANE_TENANT_MEMBERS_PATH, CONTROL_PLANE_TENANT_MEMBERS_SCOPE, CONTROL_PLANE_URI, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, CodeHookDestination, ControlPlaneSyncDestination, DEFAULT_CA_CERT_VALIDITY_DAYS, DEFAULT_WFP_DISPATCH_BINDING, DEFAULT_WFP_SCRIPT_NAME_TEMPLATE, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PipelineDestination, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, RetentionSweepError, SignupPage as SignUpPage, SigningCertificateRenewalError, SocialButton, Spinner, TENANT_URI_PREFIX, TenantInvitationNotFoundError, TenantMembersNotFoundError, TenantOrganizationNotFoundError, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, advanceUsersImport, backfillProxyHostsToKv, canDecrypt, cleanupActionExecutions, cleanupCodes, cleanupOutbox, cleanupSessions, cleanupUserSessions, cleanupUsersImports, clientInfoMiddleware, composeHostResolvers, createApplySyncEvents, createAuthMiddleware, createCertificateIssuerApp, createControlPlaneClient, createControlPlaneCustomDomainsAdapter, createControlPlaneTenantMembersAdapter, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createHttpCertificateIssuer, createInMemoryCache, createLocalCertificateIssuer, createLocalTenantMembersBackend, createServiceTokenCore, createTenantMembersControlPlaneApp, createTenantMembersRoutes, createWfpTenantHostResolver, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, ensureSigningKey, fetchAll, getExecutorData, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, isInteractiveClient, isSyncedRowId, isWfpSubdomainSafeTenantId, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, provisionDefaultClients, renewSigningCertificates, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, resumeUsersImports, runOutboxRelay, runRetention, seed, tailwindCss, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wfpTenantHost, withPlatformRowsHidden, wrapProxyAdaptersWithKvPublish, wrapTenantsAdapterWithWfpKvPublish };
-export type { ActionExecutionLogCapture, ActionExecutionsCleanupParams, AdvanceOptions, AdvanceResult, AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, CertificateIssuer, CertificateIssuerAppOptions, CodesCleanupParams, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, ControlPlaneTenantMembersOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureSigningKeyOptions, EnsureSigningKeyResult, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetControlPlaneToken, GetServiceToken, GetTenantMembersBackend, HookEvent, HookRequest, Hooks, HttpCertificateIssuerOptions, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, LocalCertificateIssuerOptions, LocalTenantMembersBackendOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, McpConfig, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, OutboxMetric, OutboxMetricName, OutboxMetricsSink, OutboxPipelineConfig, PipelineDestinationOptions, PipelineRecord, PlatformRowsOptions, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, RenewSigningCertificatesConfig, RenewSigningCertificatesResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, ResumeUsersImportsOptions, ResumeUsersImportsResult, RetentionSweep, RetentionSweepFailed, RetentionSweepSkipped, RetentionSweepStatus, RetentionSweepSwept, RolePermissionHooks, RolloutControllerBinding, RunOutboxRelayConfig, RunRetentionConfig, RunRetentionResult, SeedOptions, SeedResult, ServiceTokenResponse, SigningCertificateAuthority, SigningCertificateRequest, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantInvitation, TenantInvitationInput, TenantMember, TenantMembersBackend, TenantMembersControlPlaneOptions, TenantMembersListResult, TenantMembersPageParams, TenantOperationExecutorBinding, TenantRole, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, UsersImportCleanupParams, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };
+export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_CUSTOM_DOMAINS_PATH, CONTROL_PLANE_CUSTOM_DOMAINS_SCOPE, CONTROL_PLANE_SYNC_EVENT_PREFIX, CONTROL_PLANE_SYNC_SCOPE, CONTROL_PLANE_TENANT_MEMBERS_PATH, CONTROL_PLANE_TENANT_MEMBERS_SCOPE, CONTROL_PLANE_TENANT_MEMBER_REQUESTS_NOTIFY_PATH, CONTROL_PLANE_URI, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, CodeHookDestination, ControlPlaneSyncDestination, DEFAULT_CA_CERT_VALIDITY_DAYS, DEFAULT_WFP_DISPATCH_BINDING, DEFAULT_WFP_SCRIPT_NAME_TEMPLATE, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PipelineDestination, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, RetentionSweepError, SignupPage as SignUpPage, SigningCertificateRenewalError, SocialButton, Spinner, TENANT_URI_PREFIX, TenantInvitationNotFoundError, TenantMemberRequestRejected, TenantMembersNotFoundError, TenantOrganizationNotFoundError, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, advanceUsersImport, backfillProxyHostsToKv, canDecrypt, cleanupActionExecutions, cleanupCodes, cleanupOutbox, cleanupSessions, cleanupUserSessions, cleanupUsersImports, clientInfoMiddleware, composeHostResolvers, createApplySyncEvents, createAuthMiddleware, createCertificateIssuerApp, createControlPlaneClient, createControlPlaneCustomDomainsAdapter, createControlPlaneRequestNotifier, createControlPlaneTenantMembersAdapter, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createHttpCertificateIssuer, createInMemoryCache, createLocalCertificateIssuer, createLocalTenantMembersBackend, createServiceTokenCore, createTenantMembersControlPlaneApp, createTenantMembersRoutes, createWfpTenantHostResolver, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, ensureSigningKey, executeTenantMemberRequest, fetchAll, getExecutorData, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, isInteractiveClient, isSyncedRowId, isWfpSubdomainSafeTenantId, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, provisionDefaultClients, renewSigningCertificates, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, resumeUsersImports, runOutboxRelay, runRetention, seed, tailwindCss, tenantMemberRequestPayloadSchemas, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wfpTenantHost, withPlatformRowsHidden, wrapProxyAdaptersWithKvPublish, wrapTenantsAdapterWithWfpKvPublish };
+export type { ActionExecutionLogCapture, ActionExecutionsCleanupParams, AdvanceOptions, AdvanceResult, AfterTenantMemberRequestRegistered, AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, CertificateIssuer, CertificateIssuerAppOptions, CodesCleanupParams, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, ControlPlaneTenantMembersOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureSigningKeyOptions, EnsureSigningKeyResult, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, ExecuteTenantMemberRequestOptions, FetchAllOptions, GetControlPlaneToken, GetServiceToken, GetTenantMembersBackend, HookEvent, HookRequest, Hooks, HttpCertificateIssuerOptions, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, LocalCertificateIssuerOptions, LocalTenantMembersBackendOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, McpConfig, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, OutboxMetric, OutboxMetricName, OutboxMetricsSink, OutboxPipelineConfig, PipelineDestinationOptions, PipelineRecord, PlatformRowsOptions, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, RenewSigningCertificatesConfig, RenewSigningCertificatesResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, ResumeUsersImportsOptions, ResumeUsersImportsResult, RetentionSweep, RetentionSweepFailed, RetentionSweepSkipped, RetentionSweepStatus, RetentionSweepSwept, RolePermissionHooks, RolloutControllerBinding, RunOutboxRelayConfig, RunRetentionConfig, RunRetentionResult, SeedOptions, SeedResult, ServiceTokenResponse, SigningCertificateAuthority, SigningCertificateRequest, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantInvitation, TenantInvitationInput, TenantMember, TenantMemberRequestsConfig, TenantMembersBackend, TenantMembersControlPlaneOptions, TenantMembersListResult, TenantMembersPageParams, TenantOperationExecutorBinding, TenantRole, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, UsersImportCleanupParams, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };