authhero 9.9.1 → 9.10.0

package/dist/authhero.d.ts

@@ -1,6 +1,6 @@
 import * as hono_utils_types from 'hono/utils/types';
 import * as _authhero_adapter_interfaces from '@authhero/adapter-interfaces';
-import { LoginSession, DataAdapters, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, LinkCandidate, roleSchema, inviteSchema, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Hook, TenantOperationKind, TenantOperation, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, OutboxAdapter, AuditEvent, CodesAdapter, ActionExecutionsAdapter, HooksAdapter, Client, LogsDataAdapter, LogInsert, UserDataAdapter, ProxyRoutesAdapter, CustomDomainsAdapter, TenantsDataAdapter, KeysAdapter, ListParams, CodeExecutionResult } from '@authhero/adapter-interfaces';
+import { LoginSession, DataAdapters, RolePermissionInsert, AuthorizationResponseMode, AuthorizationResponseType, User, LinkCandidate, roleSchema, inviteSchema, ProxyRoute, ResourceServer, ResourceServerInsert, Role, RoleInsert, Connection, ConnectionInsert, Tenant, CreateTenantParams, Hook, TenantOperationKind, TenantOperation, CodeExecutor, SigningKey, Theme, Branding, AuthParams, CacheAdapter, EmailServiceAdapter, EmailServiceSendParams, OutboxAdapter, AuditEvent, CodesAdapter, ActionExecutionsAdapter, HooksAdapter, Client, LogsDataAdapter, LogInsert, UserDataAdapter, AuditCategory, ProxyRoutesAdapter, CustomDomainsAdapter, TenantsDataAdapter, KeysAdapter, ListParams, CodeExecutionResult } from '@authhero/adapter-interfaces';
 export * from '@authhero/adapter-interfaces';
 import * as hono_types from 'hono/types';
 import * as hono_utils_http_status from 'hono/utils/http-status';
@@ -1319,6 +1319,54 @@ type SyncEvent = {
     occurred_at: string;
 };
 
+/**
+ * Metric names emitted by the outbox relay.
+ *
+ * - `outbox_events_processed_total` — counter, one per event that every
+ *   accepting destination delivered successfully.
+ * - `outbox_events_dead_lettered_total` — counter, one per event successfully
+ *   moved to the dead-letter state (retries exhausted, or no destination
+ *   accepted it). Not emitted when the dead-letter write itself fails, since
+ *   the event has not transitioned.
+ * - `outbox_retry_delay_seconds` — observation, emitted once per delivery
+ *   failure with the backoff delay before the next attempt. Its count doubles
+ *   as a retry counter.
+ */
+type OutboxMetricName = "outbox_events_processed_total" | "outbox_events_dead_lettered_total" | "outbox_retry_delay_seconds";
+/** A single metric emission from the outbox relay. */
+interface OutboxMetric {
+    name: OutboxMetricName;
+    /** Counter increment, or the observed value for `outbox_retry_delay_seconds`. */
+    value: number;
+    /** Tenant the event belongs to. */
+    tenantId: string;
+    /** Audit event type, e.g. `hook.post-user-registration`. */
+    eventType: string;
+    /** Which relay path emitted this: inline per-request, or the cron drain. */
+    source: "request" | "cron";
+    /** Destination that failed, when the metric was caused by a delivery failure. */
+    destination?: string;
+    /** Failure reason, for retry and dead-letter metrics. */
+    error?: string;
+    /** Retry count of the event at the time of emission. */
+    retryCount?: number;
+}
+/**
+ * Optional sink for outbox relay metrics.
+ *
+ * Kept deliberately sink-agnostic: `packages/authhero` never knows where the
+ * numbers end up. Consumers pass a callback that forwards to whatever they
+ * use (Cloudflare Analytics Engine, StatsD, OpenTelemetry, a log line).
+ * `@authhero/cloudflare-adapter` ships an Analytics Engine implementation via
+ * `createAnalyticsEngineOutboxMetricsSink`.
+ *
+ * Implementations should be synchronous and must not throw. The relay calls
+ * the sink without awaiting it and swallows both synchronous throws and
+ * rejections from a promise-returning sink, so a broken sink can never fail
+ * event delivery.
+ */
+type OutboxMetricsSink = (metric: OutboxMetric) => void;
+
 /**
  * Management API audience for cross-tenant operations.
  * Used when managing tenants from the main tenant with org-scoped tokens.
@@ -1499,6 +1547,32 @@ interface OutboxConfig {
     retentionDays?: number;
     /** Max delivery retries before giving up on an event (default: 5) */
     maxRetries?: number;
+    /**
+     * Optional sink for relay metrics (`outbox_events_processed_total`,
+     * `outbox_events_dead_lettered_total`, `outbox_retry_delay_seconds`).
+     * Left unset, the relay emits nothing beyond its existing console logging.
+     */
+    metrics?: OutboxMetricsSink;
+    /**
+     * When set, audit events are additionally archived to a Cloudflare Pipelines
+     * stream, which lands them in R2 as an Iceberg table. Left unset, no archive
+     * destination is registered and delivery is unchanged.
+     *
+     * See `apps/docs/architecture/audit-archive.md`.
+     */
+    pipeline?: OutboxPipelineConfig;
+}
+interface OutboxPipelineConfig {
+    /**
+     * Stream HTTP ingest endpoint, e.g. `https://<stream-id>.ingest.cloudflare.com`.
+     * Must be https — the destination rejects any other scheme at startup, since
+     * every request carries the ingest token and a full audit event.
+     */
+    endpoint: string;
+    /** Stream ingest token, sent as `Authorization: Bearer`. */
+    token: string;
+    /** Per-request timeout in ms (default: 10_000). */
+    timeoutMs?: number;
 }
 /**
  * Mode for the built-in email-based user linking path.
@@ -2106,6 +2180,18 @@ type Bindings = {
      * leave unset (or false) in production so SSRF protection stays on.
      */
     ALLOW_PRIVATE_OUTBOUND_FETCH?: boolean;
+    /**
+     * Clock-skew leeway in seconds applied to a client assertion's `exp`/`nbf`
+     * at `POST /oauth/token`. Defaults to 30 when unset.
+     */
+    CLIENT_ASSERTION_LEEWAY_SECONDS?: number;
+    /**
+     * Upper bound, in seconds, on a client assertion's lifetime (`exp - iat`,
+     * and the absolute `exp` measured from now). RFC 7523 sets no limit, so
+     * without one a client can mint an assertion valid for a year. Defaults to
+     * 300 when unset.
+     */
+    CLIENT_ASSERTION_MAX_LIFETIME_SECONDS?: number;
     /**
      * Controls where Server-Timing instrumentation goes. The data/cache adapters
      * and the webhook hook always measure per-operation latency; this decides the
@@ -2719,6 +2805,7 @@ declare function drainOutbox(outbox: OutboxAdapter, destinations: EventDestinati
     batchSize?: number;
     maxRetries?: number;
     retentionDays?: number;
+    metrics?: OutboxMetricsSink;
 }): Promise<void>;
 
 interface OutboxCleanupParams {
@@ -2892,6 +2979,12 @@ interface CreateDefaultDestinationsConfig {
      * failed per-request delivery would be silently skipped on retry.
      */
     codeExecutor?: CodeExecutor;
+    /**
+     * Same shape as `init({ outbox: { pipeline } })`. When set, cron-drained
+     * events are also archived to the Cloudflare Pipelines stream, matching the
+     * per-request destination list. Omit to leave the archive out entirely.
+     */
+    pipeline?: OutboxPipelineConfig;
 }
 /**
  * Build the same array of outbox destinations that authhero's per-request
@@ -3016,6 +3109,13 @@ interface RunOutboxRelayConfig {
      * silently skipped.
      */
     codeExecutor?: CodeExecutor;
+    /**
+     * Optional metrics sink — same shape as `init({ outbox: { metrics } })`.
+     * Receives `outbox_events_processed_total`,
+     * `outbox_events_dead_lettered_total` and `outbox_retry_delay_seconds` for
+     * the events this cron drain handles, tagged `source: "cron"`.
+     */
+    metrics?: OutboxMetricsSink;
 }
 /**
  * One-call outbox relay for cron / scheduled handlers.
@@ -3278,6 +3378,68 @@ declare class ControlPlaneSyncDestination implements EventDestination {
     deliver(events: SyncEvent[]): Promise<void>;
 }
 
+/**
+ * One row of the archive table. The promoted columns are the query and
+ * erasure keys (`actor_id` / `target_id`); `event` carries the untouched
+ * `AuditEvent` so nothing is lost and the promoted set can grow later
+ * without a backfill.
+ *
+ * `actor_id` is emitted as `null` rather than omitted when the actor is
+ * anonymous, so every record has the same key set — Pipelines stream
+ * schemas are fixed once created.
+ */
+interface PipelineRecord {
+    id: string;
+    timestamp: string;
+    tenant_id: string;
+    event_type: string;
+    log_type: string;
+    category: AuditCategory;
+    actor_id: string | null;
+    target_type: string;
+    target_id: string;
+    event: AuditEvent;
+}
+interface PipelineDestinationOptions {
+    /** Stream HTTP ingest endpoint, e.g. `https://<stream-id>.ingest.cloudflare.com`. */
+    endpoint: string;
+    /** Stream ingest token, sent as `Authorization: Bearer`. */
+    token: string;
+    /** Per-request timeout (default: 10s). */
+    timeoutMs?: number;
+    /** Override for tests. */
+    fetchImpl?: typeof fetch;
+}
+/**
+ * Archives audit events to a Cloudflare Pipelines stream, which lands them in
+ * R2 as an Iceberg table. See `apps/docs/architecture/audit-archive.md`.
+ *
+ * HTTP ingest is used rather than the Worker binding so the destination works
+ * in every deployment (Node included) and stays symmetric with the
+ * log-streams destination.
+ *
+ * Duplicates are expected and by design: the relay retries per event, not per
+ * destination, so a failure in a later destination re-delivers this one, and
+ * the Iceberg sink is append-only. Consumers dedup on `id` at query time.
+ */
+declare class PipelineDestination implements EventDestination {
+    name: string;
+    private endpoint;
+    private token;
+    private timeoutMs;
+    private fetchImpl;
+    constructor(options: PipelineDestinationOptions);
+    /**
+     * Archives the audit trail, not the delivery plumbing: `hook.*` and
+     * `controlplane.sync.*` are instructions to other destinations rather than
+     * records of something a tenant did. Same filter as the log-streams
+     * destination.
+     */
+    accepts(event: AuditEvent): boolean;
+    transform(event: AuditEvent): PipelineRecord;
+    deliver(records: PipelineRecord[]): Promise<void>;
+}
+
 interface CreateApplySyncEventsOptions {
     proxyRoutes: ProxyRoutesAdapter;
 }
@@ -4275,8 +4437,8 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     query: {
-                        include_password_hashes?: "false" | "true" | undefined;
-                        gzip?: "false" | "true" | undefined;
+                        include_password_hashes?: "true" | "false" | undefined;
+                        gzip?: "true" | "false" | undefined;
                     };
                 } & {
                     header: {
@@ -4289,8 +4451,8 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     query: {
-                        include_password_hashes?: "false" | "true" | undefined;
-                        gzip?: "false" | "true" | undefined;
+                        include_password_hashes?: "true" | "false" | undefined;
+                        gzip?: "true" | "false" | undefined;
                     };
                 } & {
                     header: {
@@ -4309,7 +4471,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     query: {
-                        include_password_hashes?: "false" | "true" | undefined;
+                        include_password_hashes?: "true" | "false" | undefined;
                     };
                 } & {
                     header: {
@@ -4363,7 +4525,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        type: "email" | "push" | "phone" | "passkey" | "webauthn-roaming" | "webauthn-platform" | "totp";
+                        type: "push" | "email" | "passkey" | "webauthn-roaming" | "webauthn-platform" | "phone" | "totp";
                         phone_number?: string | undefined;
                         totp_secret?: string | undefined;
                         credential_id?: string | undefined;
@@ -5470,9 +5632,9 @@ declare function init(config: AuthHeroConfig): {
                             email?: string | undefined;
                         };
                         id?: string | undefined;
+                        connection_id?: string | undefined;
                         app_metadata?: Record<string, any> | undefined;
                         user_metadata?: Record<string, any> | undefined;
-                        connection_id?: string | undefined;
                         roles?: string[] | undefined;
                         ttl_sec?: number | undefined;
                         send_invitation_email?: boolean | undefined;
@@ -5658,8 +5820,8 @@ declare function init(config: AuthHeroConfig): {
                     };
                 } & {
                     json: {
-                        show_as_button?: boolean | undefined;
                         assign_membership_on_login?: boolean | undefined;
+                        show_as_button?: boolean | undefined;
                         is_signup_enabled?: boolean | undefined;
                     };
                 };
@@ -6378,7 +6540,7 @@ declare function init(config: AuthHeroConfig): {
                         type: "REDIRECT";
                         action: "REDIRECT_USER";
                         params: {
-                            target: "custom" | "account" | "change-email";
+                            target: "custom" | "change-email" | "account";
                             custom_url?: string | undefined;
                         };
                         alias?: string | undefined;
@@ -6431,7 +6593,7 @@ declare function init(config: AuthHeroConfig): {
                             type: "REDIRECT";
                             action: "REDIRECT_USER";
                             params: {
-                                target: "custom" | "account" | "change-email";
+                                target: "custom" | "change-email" | "account";
                                 custom_url?: string | undefined;
                             };
                             alias?: string | undefined;
@@ -6500,7 +6662,7 @@ declare function init(config: AuthHeroConfig): {
                         type: "REDIRECT";
                         action: "REDIRECT_USER";
                         params: {
-                            target: "custom" | "account" | "change-email";
+                            target: "custom" | "change-email" | "account";
                             custom_url?: string | undefined;
                         };
                         alias?: string | undefined;
@@ -6581,7 +6743,7 @@ declare function init(config: AuthHeroConfig): {
                             type: "REDIRECT";
                             action: "REDIRECT_USER";
                             params: {
-                                target: "custom" | "account" | "change-email";
+                                target: "custom" | "change-email" | "account";
                                 custom_url?: string | undefined;
                             };
                             alias?: string | undefined;
@@ -6629,7 +6791,7 @@ declare function init(config: AuthHeroConfig): {
                         type: "REDIRECT";
                         action: "REDIRECT_USER";
                         params: {
-                            target: "custom" | "account" | "change-email";
+                            target: "custom" | "change-email" | "account";
                             custom_url?: string | undefined;
                         };
                         alias?: string | undefined;
@@ -6689,7 +6851,7 @@ declare function init(config: AuthHeroConfig): {
                             type: "REDIRECT";
                             action: "REDIRECT_USER";
                             params: {
-                                target: "custom" | "account" | "change-email";
+                                target: "custom" | "change-email" | "account";
                                 custom_url?: string | undefined;
                             };
                             alias?: string | undefined;
@@ -6737,7 +6899,7 @@ declare function init(config: AuthHeroConfig): {
                         type: "REDIRECT";
                         action: "REDIRECT_USER";
                         params: {
-                            target: "custom" | "account" | "change-email";
+                            target: "custom" | "change-email" | "account";
                             custom_url?: string | undefined;
                         };
                         alias?: string | undefined;
@@ -11302,7 +11464,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    prompt: "mfa" | "organizations" | "status" | "invitation" | "login" | "email-otp-challenge" | "signup" | "reset-password" | "mfa-login-options" | "consent" | "email-verification" | "login-id" | "login-password" | "signup-id" | "signup-password" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless";
+                    prompt: "login" | "signup" | "mfa" | "organizations" | "status" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                     language: string;
                 }[];
                 outputFormat: "json";
@@ -11340,7 +11502,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        prompt: "mfa" | "organizations" | "status" | "invitation" | "login" | "email-otp-challenge" | "signup" | "reset-password" | "mfa-login-options" | "consent" | "email-verification" | "login-id" | "login-password" | "signup-id" | "signup-password" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless";
+                        prompt: "login" | "signup" | "mfa" | "organizations" | "status" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -11362,7 +11524,7 @@ declare function init(config: AuthHeroConfig): {
             $put: {
                 input: {
                     param: {
-                        prompt: "mfa" | "organizations" | "status" | "invitation" | "login" | "email-otp-challenge" | "signup" | "reset-password" | "mfa-login-options" | "consent" | "email-verification" | "login-id" | "login-password" | "signup-id" | "signup-password" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless";
+                        prompt: "login" | "signup" | "mfa" | "organizations" | "status" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -11386,7 +11548,7 @@ declare function init(config: AuthHeroConfig): {
             $delete: {
                 input: {
                     param: {
-                        prompt: "mfa" | "organizations" | "status" | "invitation" | "login" | "email-otp-challenge" | "signup" | "reset-password" | "mfa-login-options" | "consent" | "email-verification" | "login-id" | "login-password" | "signup-id" | "signup-password" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless";
+                        prompt: "login" | "signup" | "mfa" | "organizations" | "status" | "login-id" | "login-password" | "signup-id" | "signup-password" | "reset-password" | "consent" | "mfa-push" | "mfa-otp" | "mfa-voice" | "mfa-phone" | "mfa-webauthn" | "mfa-email" | "mfa-recovery-code" | "device-flow" | "email-verification" | "email-otp-challenge" | "invitation" | "common" | "passkeys" | "captcha" | "custom-form" | "login-passwordless" | "mfa-login-options";
                         language: string;
                     };
                 } & {
@@ -11529,7 +11691,7 @@ declare function init(config: AuthHeroConfig): {
                             } | undefined;
                         } | undefined;
                         passkey_options?: {
-                            challenge_ui?: "button" | "both" | "autofill" | undefined;
+                            challenge_ui?: "both" | "autofill" | "button" | undefined;
                             local_enrollment_enabled?: boolean | undefined;
                             progressive_enrollment_enabled?: boolean | undefined;
                         } | undefined;
@@ -11667,7 +11829,7 @@ declare function init(config: AuthHeroConfig): {
                                 } | undefined;
                             } | undefined;
                             passkey_options?: {
-                                challenge_ui?: "button" | "both" | "autofill" | undefined;
+                                challenge_ui?: "both" | "autofill" | "button" | undefined;
                                 local_enrollment_enabled?: boolean | undefined;
                                 progressive_enrollment_enabled?: boolean | undefined;
                             } | undefined;
@@ -11821,7 +11983,7 @@ declare function init(config: AuthHeroConfig): {
                             } | undefined;
                         } | undefined;
                         passkey_options?: {
-                            challenge_ui?: "button" | "both" | "autofill" | undefined;
+                            challenge_ui?: "both" | "autofill" | "button" | undefined;
                             local_enrollment_enabled?: boolean | undefined;
                             progressive_enrollment_enabled?: boolean | undefined;
                         } | undefined;
@@ -12004,7 +12166,7 @@ declare function init(config: AuthHeroConfig): {
                             } | undefined;
                         } | undefined;
                         passkey_options?: {
-                            challenge_ui?: "button" | "both" | "autofill" | undefined;
+                            challenge_ui?: "both" | "autofill" | "button" | undefined;
                             local_enrollment_enabled?: boolean | undefined;
                             progressive_enrollment_enabled?: boolean | undefined;
                         } | undefined;
@@ -12166,7 +12328,7 @@ declare function init(config: AuthHeroConfig): {
                             } | undefined;
                         } | undefined;
                         passkey_options?: {
-                            challenge_ui?: "button" | "both" | "autofill" | undefined;
+                            challenge_ui?: "both" | "autofill" | "button" | undefined;
                             local_enrollment_enabled?: boolean | undefined;
                             progressive_enrollment_enabled?: boolean | undefined;
                         } | undefined;
@@ -13081,6 +13243,26 @@ declare function init(config: AuthHeroConfig): {
                 status: 200;
             };
         };
+    } & {
+        "/bulk-retry": {
+            $post: {
+                input: {
+                    header: {
+                        "tenant-id"?: string | undefined;
+                    };
+                } & {
+                    json: {
+                        ids: string[];
+                    };
+                };
+                output: {
+                    replayed: string[];
+                    not_found: string[];
+                };
+                outputFormat: "json";
+                status: 200;
+            };
+        };
     } & {
         "/:id/retry": {
             $post: {
@@ -13309,7 +13491,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "oidc" | "okta" | "cognito";
+                    provider: "auth0" | "cognito" | "okta" | "oidc";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -13341,7 +13523,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "oidc" | "okta" | "cognito";
+                    provider: "auth0" | "cognito" | "okta" | "oidc";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -13367,7 +13549,7 @@ declare function init(config: AuthHeroConfig): {
                 } & {
                     json: {
                         name: string;
-                        provider: "auth0" | "oidc" | "okta" | "cognito";
+                        provider: "auth0" | "cognito" | "okta" | "oidc";
                         connection: string;
                         credentials: {
                             domain: string;
@@ -13384,7 +13566,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "oidc" | "okta" | "cognito";
+                    provider: "auth0" | "cognito" | "okta" | "oidc";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -13415,7 +13597,7 @@ declare function init(config: AuthHeroConfig): {
                     json: {
                         id?: string | undefined;
                         name?: string | undefined;
-                        provider?: "auth0" | "oidc" | "okta" | "cognito" | undefined;
+                        provider?: "auth0" | "cognito" | "okta" | "oidc" | undefined;
                         connection?: string | undefined;
                         enabled?: boolean | undefined;
                         credentials?: {
@@ -13431,7 +13613,7 @@ declare function init(config: AuthHeroConfig): {
                     created_at: string;
                     updated_at: string;
                     name: string;
-                    provider: "auth0" | "oidc" | "okta" | "cognito";
+                    provider: "auth0" | "cognito" | "okta" | "oidc";
                     connection: string;
                     enabled: boolean;
                     credentials: {
@@ -13479,7 +13661,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     };
                     id: string;
-                    status: "active" | "suspended" | "paused";
+                    status: "suspended" | "active" | "paused";
                     filters?: {
                         type: string;
                         name: string;
@@ -13511,7 +13693,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     };
                     id: string;
-                    status: "active" | "suspended" | "paused";
+                    status: "suspended" | "active" | "paused";
                     filters?: {
                         type: string;
                         name: string;
@@ -13536,7 +13718,7 @@ declare function init(config: AuthHeroConfig): {
                         name: string;
                         type: "http" | "eventbridge" | "eventgrid" | "splunk" | "datadog" | "sumo";
                         sink: Record<string, unknown>;
-                        status?: "active" | "suspended" | "paused" | undefined;
+                        status?: "suspended" | "active" | "paused" | undefined;
                         filters?: {
                             type: string;
                             name: string;
@@ -13551,7 +13733,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     };
                     id: string;
-                    status: "active" | "suspended" | "paused";
+                    status: "suspended" | "active" | "paused";
                     filters?: {
                         type: string;
                         name: string;
@@ -13586,7 +13768,7 @@ declare function init(config: AuthHeroConfig): {
                         }[] | undefined;
                         isPriority?: boolean | undefined;
                         id?: string | undefined;
-                        status?: "active" | "suspended" | "paused" | undefined;
+                        status?: "suspended" | "active" | "paused" | undefined;
                         created_at?: string | undefined;
                         updated_at?: string | undefined;
                     };
@@ -13598,7 +13780,7 @@ declare function init(config: AuthHeroConfig): {
                         [x: string]: hono_utils_types.JSONValue;
                     };
                     id: string;
-                    status: "active" | "suspended" | "paused";
+                    status: "suspended" | "active" | "paused";
                     filters?: {
                         type: string;
                         name: string;
@@ -13649,7 +13831,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "cs" | "fi" | "sv" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -13688,7 +13870,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fn" | "cs" | "fi" | "sv" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -13727,7 +13909,7 @@ declare function init(config: AuthHeroConfig): {
                     next?: string | undefined;
                 } | {
                     logs: {
-                        type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fn" | "cs" | "fi" | "sv" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -13781,7 +13963,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "cs" | "fi" | "sv" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -15073,7 +15255,7 @@ declare function init(config: AuthHeroConfig): {
                                     } | undefined;
                                 } | undefined;
                                 passkey_options?: {
-                                    challenge_ui?: "button" | "both" | "autofill" | undefined;
+                                    challenge_ui?: "both" | "autofill" | "button" | undefined;
                                     local_enrollment_enabled?: boolean | undefined;
                                     progressive_enrollment_enabled?: boolean | undefined;
                                 } | undefined;
@@ -15231,7 +15413,7 @@ declare function init(config: AuthHeroConfig): {
                                     } | undefined;
                                 } | undefined;
                                 passkey_options?: {
-                                    challenge_ui?: "button" | "both" | "autofill" | undefined;
+                                    challenge_ui?: "both" | "autofill" | "button" | undefined;
                                     local_enrollment_enabled?: boolean | undefined;
                                     progressive_enrollment_enabled?: boolean | undefined;
                                 } | undefined;
@@ -15365,15 +15547,15 @@ declare function init(config: AuthHeroConfig): {
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
-                    connection?: string | undefined;
                     tenant_id?: string | undefined;
-                    current?: boolean | undefined;
+                    connection?: string | undefined;
                     next?: boolean | undefined;
+                    revoked_at?: string | undefined;
+                    current?: boolean | undefined;
                     previous?: boolean | undefined;
                     current_since?: string | undefined;
                     current_until?: string | undefined;
                     revoked?: boolean | undefined;
-                    revoked_at?: string | undefined;
                     expires_at?: string | undefined;
                     expired?: boolean | undefined;
                     inherited?: boolean | undefined;
@@ -15404,15 +15586,15 @@ declare function init(config: AuthHeroConfig): {
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
-                    connection?: string | undefined;
                     tenant_id?: string | undefined;
-                    current?: boolean | undefined;
+                    connection?: string | undefined;
                     next?: boolean | undefined;
+                    revoked_at?: string | undefined;
+                    current?: boolean | undefined;
                     previous?: boolean | undefined;
                     current_since?: string | undefined;
                     current_until?: string | undefined;
                     revoked?: boolean | undefined;
-                    revoked_at?: string | undefined;
                     expires_at?: string | undefined;
                     expired?: boolean | undefined;
                     inherited?: boolean | undefined;
@@ -15442,15 +15624,15 @@ declare function init(config: AuthHeroConfig): {
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
-                    connection?: string | undefined;
                     tenant_id?: string | undefined;
-                    current?: boolean | undefined;
+                    connection?: string | undefined;
                     next?: boolean | undefined;
+                    revoked_at?: string | undefined;
+                    current?: boolean | undefined;
                     previous?: boolean | undefined;
                     current_since?: string | undefined;
                     current_until?: string | undefined;
                     revoked?: boolean | undefined;
-                    revoked_at?: string | undefined;
                     expires_at?: string | undefined;
                     expired?: boolean | undefined;
                     inherited?: boolean | undefined;
@@ -15482,15 +15664,15 @@ declare function init(config: AuthHeroConfig): {
                     cert: string;
                     fingerprint: string;
                     thumbprint: string;
-                    connection?: string | undefined;
                     tenant_id?: string | undefined;
-                    current?: boolean | undefined;
+                    connection?: string | undefined;
                     next?: boolean | undefined;
+                    revoked_at?: string | undefined;
+                    current?: boolean | undefined;
                     previous?: boolean | undefined;
                     current_since?: string | undefined;
                     current_until?: string | undefined;
                     revoked?: boolean | undefined;
-                    revoked_at?: string | undefined;
                     expires_at?: string | undefined;
                     expired?: boolean | undefined;
                     inherited?: boolean | undefined;
@@ -16335,12 +16517,11 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    client_id: string;
-                    created_at: string;
-                    rotating: boolean;
                     id: string;
+                    created_at: string;
+                    client_id: string;
                     user_id: string;
-                    login_id: string;
+                    rotating: boolean;
                     device: {
                         initial_user_agent: string;
                         initial_ip: string;
@@ -16349,29 +16530,29 @@ declare function init(config: AuthHeroConfig): {
                         last_ip: string;
                         last_asn: string;
                     };
+                    login_id: string;
                     resource_servers: {
                         audience: string;
                         scopes: string;
                     }[];
-                    organization?: string | undefined;
+                    revoked_at?: string | undefined;
                     expires_at?: string | undefined;
+                    idle_expires_at?: string | undefined;
                     session_id?: string | undefined;
+                    organization?: string | undefined;
                     auth_connection?: string | undefined;
                     auth_strategy?: {
                         strategy: string;
                         strategy_type: string;
                     } | undefined;
-                    revoked_at?: string | undefined;
-                    idle_expires_at?: string | undefined;
                     last_exchanged_at?: string | undefined;
                 }[] | {
                     tokens: {
-                        client_id: string;
-                        created_at: string;
-                        rotating: boolean;
                         id: string;
+                        created_at: string;
+                        client_id: string;
                         user_id: string;
-                        login_id: string;
+                        rotating: boolean;
                         device: {
                             initial_user_agent: string;
                             initial_ip: string;
@@ -16380,20 +16561,21 @@ declare function init(config: AuthHeroConfig): {
                             last_ip: string;
                             last_asn: string;
                         };
+                        login_id: string;
                         resource_servers: {
                             audience: string;
                             scopes: string;
                         }[];
-                        organization?: string | undefined;
+                        revoked_at?: string | undefined;
                         expires_at?: string | undefined;
+                        idle_expires_at?: string | undefined;
                         session_id?: string | undefined;
+                        organization?: string | undefined;
                         auth_connection?: string | undefined;
                         auth_strategy?: {
                             strategy: string;
                             strategy_type: string;
                         } | undefined;
-                        revoked_at?: string | undefined;
-                        idle_expires_at?: string | undefined;
                         last_exchanged_at?: string | undefined;
                     }[];
                     next?: string | undefined;
@@ -16402,12 +16584,11 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     tokens: {
-                        client_id: string;
-                        created_at: string;
-                        rotating: boolean;
                         id: string;
+                        created_at: string;
+                        client_id: string;
                         user_id: string;
-                        login_id: string;
+                        rotating: boolean;
                         device: {
                             initial_user_agent: string;
                             initial_ip: string;
@@ -16416,20 +16597,21 @@ declare function init(config: AuthHeroConfig): {
                             last_ip: string;
                             last_asn: string;
                         };
+                        login_id: string;
                         resource_servers: {
                             audience: string;
                             scopes: string;
                         }[];
-                        organization?: string | undefined;
+                        revoked_at?: string | undefined;
                         expires_at?: string | undefined;
+                        idle_expires_at?: string | undefined;
                         session_id?: string | undefined;
+                        organization?: string | undefined;
                         auth_connection?: string | undefined;
                         auth_strategy?: {
                             strategy: string;
                             strategy_type: string;
                         } | undefined;
-                        revoked_at?: string | undefined;
-                        idle_expires_at?: string | undefined;
                         last_exchanged_at?: string | undefined;
                     }[];
                     total?: number | undefined;
@@ -16481,7 +16663,7 @@ declare function init(config: AuthHeroConfig): {
                     };
                 };
                 output: {
-                    type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                    type: "fn" | "cs" | "fi" | "sv" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                     date: string;
                     isMobile: boolean;
                     log_id: string;
@@ -16520,7 +16702,7 @@ declare function init(config: AuthHeroConfig): {
                     limit: number;
                     length: number;
                     logs: {
-                        type: "fn" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "cs" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "fi" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "i" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "sapi" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "sv" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
+                        type: "fn" | "cs" | "fi" | "sv" | "i" | "sapi" | "acls_summary" | "actions_execution_failed" | "api_limit" | "api_limit_warning" | "appi" | "ciba_exchange_failed" | "ciba_exchange_succeeded" | "ciba_start_failed" | "ciba_start_succeeded" | "cls" | "depnote" | "f" | "fc" | "fce" | "fco" | "fcoa" | "fcp" | "fcph" | "fcpn" | "fcpr" | "fcpro" | "fcu" | "fd" | "fdeac" | "fdeaz" | "fdecc" | "fdu" | "feacft" | "feccft" | "fecte" | "fede" | "federated_logout_failed" | "fens" | "feoobft" | "feotpft" | "fepft" | "fepotpft" | "fercft" | "ferrt" | "fertft" | "festft" | "fh" | "fimp" | "flo" | "flows_execution_completed" | "flows_execution_failed" | "forms_submission_failed" | "forms_submission_succeeded" | "fp" | "fpar" | "fpurh" | "fs" | "fsa" | "fu" | "fui" | "fv" | "fvr" | "gd_auth_email_verification" | "gd_auth_fail_email_verification" | "gd_auth_failed" | "gd_auth_rejected" | "gd_auth_succeed" | "gd_enrollment_complete" | "gd_otp_rate_limit_exceed" | "gd_recovery_failed" | "gd_recovery_rate_limit_exceed" | "gd_recovery_succeed" | "gd_send_email" | "gd_send_email_verification" | "gd_send_email_verification_failure" | "gd_send_pn" | "gd_send_pn_failure" | "gd_send_sms" | "gd_send_sms_failure" | "gd_send_voice" | "gd_send_voice_failure" | "gd_start_auth" | "gd_start_enroll" | "gd_start_enroll_failed" | "gd_tenant_update" | "gd_unenroll" | "gd_update_device_account" | "gd_webauthn_challenge_failed" | "gd_webauthn_enrollment_failed" | "kms_key_management_failure" | "kms_key_management_success" | "kms_key_state_changed" | "limit_delegation" | "limit_mu" | "limit_sul" | "limit_wc" | "mfar" | "mgmt_api_read" | "my_account_authentication_method_failed" | "my_account_authentication_method_succeeded" | "oidc_backchannel_logout_failed" | "oidc_backchannel_logout_succeeded" | "organization_member_added" | "passkey_challenge_failed" | "passkey_challenge_started" | "pla" | "pwd_leak" | "reset_pwd_leak" | "resource_cleanup" | "rich_consents_access_error" | "s" | "fapi" | "sce" | "scoa" | "scp" | "scpn" | "scpr" | "scu" | "scv" | "sd" | "sdu" | "seacft" | "seccft" | "secte" | "sede" | "sens" | "seoobft" | "seotpft" | "sepotpft" | "sepft" | "sepkoobft" | "sepkotpft" | "sepkrcft" | "sercft" | "sertft" | "sestft" | "simp" | "si" | "signup_pwd_leak" | "slo" | "sh" | "spm" | "srrt" | "ss" | "ss_sso_failure" | "ss_sso_info" | "ss_sso_success" | "ssa" | "sscim" | "sui" | "svr" | "too_many_records" | "ublkdu" | "universal_logout_failed" | "universal_logout_succeeded" | "w" | "wn" | "wum";
                         date: string;
                         isMobile: boolean;
                         log_id: string;
@@ -17651,7 +17833,7 @@ declare function init(config: AuthHeroConfig): {
                         base_focus_color: string;
                         base_hover_color: string;
                         body_text: string;
-                        captcha_widget_theme: "auto" | "light" | "dark";
+                        captcha_widget_theme: "dark" | "light" | "auto";
                         error: string;
                         header: string;
                         icons: string;
@@ -17702,12 +17884,12 @@ declare function init(config: AuthHeroConfig): {
                         background_color: string;
                         background_image_url: string;
                         page_layout: "center" | "left" | "right";
-                        logo_placement?: "none" | "widget" | "chip" | undefined;
+                        logo_placement?: "widget" | "none" | "chip" | undefined;
                     };
                     widget: {
                         header_text_alignment: "center" | "left" | "right";
                         logo_height: number;
-                        logo_position: "none" | "center" | "left" | "right";
+                        logo_position: "center" | "left" | "right" | "none";
                         logo_url: string;
                         social_buttons_layout: "bottom" | "top";
                     };
@@ -17741,7 +17923,7 @@ declare function init(config: AuthHeroConfig): {
                             base_focus_color: string;
                             base_hover_color: string;
                             body_text: string;
-                            captcha_widget_theme: "auto" | "light" | "dark";
+                            captcha_widget_theme: "dark" | "light" | "auto";
                             error: string;
                             header: string;
                             icons: string;
@@ -17792,12 +17974,12 @@ declare function init(config: AuthHeroConfig): {
                             background_color: string;
                             background_image_url: string;
                             page_layout: "center" | "left" | "right";
-                            logo_placement?: "none" | "widget" | "chip" | undefined;
+                            logo_placement?: "widget" | "none" | "chip" | undefined;
                         };
                         widget: {
                             header_text_alignment: "center" | "left" | "right";
                             logo_height: number;
-                            logo_position: "none" | "center" | "left" | "right";
+                            logo_position: "center" | "left" | "right" | "none";
                             logo_url: string;
                             social_buttons_layout: "bottom" | "top";
                         };
@@ -17820,7 +18002,7 @@ declare function init(config: AuthHeroConfig): {
                         base_focus_color: string;
                         base_hover_color: string;
                         body_text: string;
-                        captcha_widget_theme: "auto" | "light" | "dark";
+                        captcha_widget_theme: "dark" | "light" | "auto";
                         error: string;
                         header: string;
                         icons: string;
@@ -17871,12 +18053,12 @@ declare function init(config: AuthHeroConfig): {
                         background_color: string;
                         background_image_url: string;
                         page_layout: "center" | "left" | "right";
-                        logo_placement?: "none" | "widget" | "chip" | undefined;
+                        logo_placement?: "widget" | "none" | "chip" | undefined;
                     };
                     widget: {
                         header_text_alignment: "center" | "left" | "right";
                         logo_height: number;
-                        logo_position: "none" | "center" | "left" | "right";
+                        logo_position: "center" | "left" | "right" | "none";
                         logo_url: string;
                         social_buttons_layout: "bottom" | "top";
                     };
@@ -17910,7 +18092,7 @@ declare function init(config: AuthHeroConfig): {
                     font?: {
                         url: string;
                     } | undefined;
-                    dark_mode?: "auto" | "light" | "dark" | undefined;
+                    dark_mode?: "dark" | "light" | "auto" | undefined;
                 };
                 outputFormat: "json";
                 status: 200;
@@ -17940,7 +18122,7 @@ declare function init(config: AuthHeroConfig): {
                         font?: {
                             url: string;
                         } | undefined;
-                        dark_mode?: "auto" | "light" | "dark" | undefined;
+                        dark_mode?: "dark" | "light" | "auto" | undefined;
                     };
                 };
                 output: {
@@ -17959,7 +18141,7 @@ declare function init(config: AuthHeroConfig): {
                     font?: {
                         url: string;
                     } | undefined;
-                    dark_mode?: "auto" | "light" | "dark" | undefined;
+                    dark_mode?: "dark" | "light" | "auto" | undefined;
                 };
                 outputFormat: "json";
                 status: 200;
@@ -18050,7 +18232,7 @@ declare function init(config: AuthHeroConfig): {
                             font?: {
                                 url: string;
                             } | undefined;
-                            dark_mode?: "auto" | "light" | "dark" | undefined;
+                            dark_mode?: "dark" | "light" | "auto" | undefined;
                         } | undefined;
                         theme?: {
                             borders?: {
@@ -18068,7 +18250,7 @@ declare function init(config: AuthHeroConfig): {
                                 base_focus_color: string;
                                 base_hover_color: string;
                                 body_text: string;
-                                captcha_widget_theme: "auto" | "light" | "dark";
+                                captcha_widget_theme: "dark" | "light" | "auto";
                                 error: string;
                                 header: string;
                                 icons: string;
@@ -18119,12 +18301,12 @@ declare function init(config: AuthHeroConfig): {
                                 background_color: string;
                                 background_image_url: string;
                                 page_layout: "center" | "left" | "right";
-                                logo_placement?: "none" | "widget" | "chip" | undefined;
+                                logo_placement?: "widget" | "none" | "chip" | undefined;
                             } | undefined;
                             widget?: {
                                 header_text_alignment: "center" | "left" | "right";
                                 logo_height: number;
-                                logo_position: "none" | "center" | "left" | "right";
+                                logo_position: "center" | "left" | "right" | "none";
                                 logo_url: string;
                                 social_buttons_layout: "bottom" | "top";
                             } | undefined;
@@ -18176,7 +18358,6 @@ declare function init(config: AuthHeroConfig): {
                             deployed_at?: string | undefined;
                             secrets?: {
                                 name: string;
-                                value?: string | undefined;
                             }[] | undefined;
                         };
                         created_at: string;
@@ -18238,7 +18419,6 @@ declare function init(config: AuthHeroConfig): {
                             deployed_at?: string | undefined;
                             secrets?: {
                                 name: string;
-                                value?: string | undefined;
                             }[] | undefined;
                         };
                         created_at: string;
@@ -18375,7 +18555,6 @@ declare function init(config: AuthHeroConfig): {
                     deployed_at?: string | undefined;
                     secrets?: {
                         name: string;
-                        value?: string | undefined;
                     }[] | undefined;
                 }[] | {
                     start: number;
@@ -18403,7 +18582,6 @@ declare function init(config: AuthHeroConfig): {
                         deployed_at?: string | undefined;
                         secrets?: {
                             name: string;
-                            value?: string | undefined;
                         }[] | undefined;
                     }[];
                     total?: number | undefined;
@@ -18463,7 +18641,6 @@ declare function init(config: AuthHeroConfig): {
                     deployed_at?: string | undefined;
                     secrets?: {
                         name: string;
-                        value?: string | undefined;
                     }[] | undefined;
                 };
                 outputFormat: "json";
@@ -18517,7 +18694,6 @@ declare function init(config: AuthHeroConfig): {
                     deployed_at?: string | undefined;
                     secrets?: {
                         name: string;
-                        value?: string | undefined;
                     }[] | undefined;
                 };
                 outputFormat: "json";
@@ -18611,7 +18787,6 @@ declare function init(config: AuthHeroConfig): {
                     deployed_at?: string | undefined;
                     secrets?: {
                         name: string;
-                        value?: string | undefined;
                     }[] | undefined;
                 };
                 outputFormat: "json";
@@ -18708,7 +18883,6 @@ declare function init(config: AuthHeroConfig): {
                     deployed_at?: string | undefined;
                     secrets?: {
                         name: string;
-                        value?: string | undefined;
                     }[] | undefined;
                 };
                 outputFormat: "json";
@@ -18925,7 +19099,6 @@ declare function init(config: AuthHeroConfig): {
                     deployed_at?: string | undefined;
                     secrets?: {
                         name: string;
-                        value?: string | undefined;
                     }[] | undefined;
                 };
                 outputFormat: "json";
@@ -19450,7 +19623,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         redirect_url?: string | undefined;
                         login_hint?: string | undefined;
-                        screen_hint?: "account" | "change-email" | "change-phone" | "change-password" | undefined;
+                        screen_hint?: "change-email" | "account" | "change-phone" | "change-password" | undefined;
                     };
                 };
                 output: {};
@@ -19462,7 +19635,7 @@ declare function init(config: AuthHeroConfig): {
                         client_id: string;
                         redirect_url?: string | undefined;
                         login_hint?: string | undefined;
-                        screen_hint?: "account" | "change-email" | "change-phone" | "change-password" | undefined;
+                        screen_hint?: "change-email" | "account" | "change-phone" | "change-password" | undefined;
                     };
                 };
                 output: {
@@ -19739,19 +19912,19 @@ declare function init(config: AuthHeroConfig): {
                         email: string;
                         send: "code" | "link";
                         authParams: {
+                            audience?: string | undefined;
+                            username?: string | undefined;
+                            prompt?: string | undefined;
                             scope?: string | undefined;
-                            state?: string | undefined;
-                            act_as?: string | undefined;
+                            organization?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
+                            state?: string | undefined;
                             redirect_uri?: string | undefined;
-                            audience?: string | undefined;
-                            organization?: string | undefined;
+                            act_as?: string | undefined;
                             nonce?: string | undefined;
-                            prompt?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
                             code_challenge?: string | undefined;
-                            username?: string | undefined;
                             ui_locales?: string | undefined;
                             max_age?: number | undefined;
                             acr_values?: string | undefined;
@@ -19775,19 +19948,19 @@ declare function init(config: AuthHeroConfig): {
                         phone_number: string;
                         send: "code" | "link";
                         authParams: {
+                            audience?: string | undefined;
+                            username?: string | undefined;
+                            prompt?: string | undefined;
                             scope?: string | undefined;
-                            state?: string | undefined;
-                            act_as?: string | undefined;
+                            organization?: string | undefined;
                             response_type?: _authhero_adapter_interfaces.AuthorizationResponseType | undefined;
                             response_mode?: _authhero_adapter_interfaces.AuthorizationResponseMode | undefined;
+                            state?: string | undefined;
                             redirect_uri?: string | undefined;
-                            audience?: string | undefined;
-                            organization?: string | undefined;
+                            act_as?: string | undefined;
                             nonce?: string | undefined;
-                            prompt?: string | undefined;
                             code_challenge_method?: _authhero_adapter_interfaces.CodeChallengeMethod | undefined;
                             code_challenge?: string | undefined;
-                            username?: string | undefined;
                             ui_locales?: string | undefined;
                             max_age?: number | undefined;
                             acr_values?: string | undefined;
@@ -20082,17 +20255,9 @@ declare function init(config: AuthHeroConfig): {
                         client_assertion_type?: string | undefined;
                     };
                 };
-                output: {
-                    access_token: string;
-                    token_type: string;
-                    expires_in: number;
-                    id_token?: string | undefined;
-                    scope?: string | undefined;
-                    state?: string | undefined;
-                    refresh_token?: string | undefined;
-                };
-                outputFormat: "json";
-                status: 200;
+                output: {};
+                outputFormat: string;
+                status: 302;
             } | {
                 input: {
                     form: {
@@ -20193,9 +20358,17 @@ declare function init(config: AuthHeroConfig): {
                         client_assertion_type?: string | undefined;
                     };
                 };
-                output: {};
-                outputFormat: string;
-                status: 302;
+                output: {
+                    access_token: string;
+                    token_type: string;
+                    expires_in: number;
+                    id_token?: string | undefined;
+                    scope?: string | undefined;
+                    state?: string | undefined;
+                    refresh_token?: string | undefined;
+                };
+                outputFormat: "json";
+                status: 200;
             } | {
                 input: {
                     form: {
@@ -20716,7 +20889,7 @@ declare function init(config: AuthHeroConfig): {
                 };
                 output: {};
                 outputFormat: string;
-                status: 302;
+                status: 200;
             } | {
                 input: {
                     query: {
@@ -20730,7 +20903,7 @@ declare function init(config: AuthHeroConfig): {
                 };
                 output: {};
                 outputFormat: string;
-                status: 200;
+                status: 302;
             } | {
                 input: {
                     query: {
@@ -21718,7 +21891,7 @@ declare function init(config: AuthHeroConfig): {
             $get: {
                 input: {
                     param: {
-                        screen: "login" | "signup" | "enter-password" | "reset-password" | "impersonate" | "account" | "consent" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "reset-password" | "consent" | "impersonate" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21734,7 +21907,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "login" | "signup" | "enter-password" | "reset-password" | "impersonate" | "account" | "consent" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "reset-password" | "consent" | "impersonate" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21750,7 +21923,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "login" | "signup" | "enter-password" | "reset-password" | "impersonate" | "account" | "consent" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "reset-password" | "consent" | "impersonate" | "account" | "enter-password" | "try-connection-result" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21770,7 +21943,7 @@ declare function init(config: AuthHeroConfig): {
             $post: {
                 input: {
                     param: {
-                        screen: "login" | "signup" | "enter-password" | "reset-password" | "impersonate" | "consent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "reset-password" | "consent" | "impersonate" | "enter-password" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21788,7 +21961,7 @@ declare function init(config: AuthHeroConfig): {
             } | {
                 input: {
                     param: {
-                        screen: "login" | "signup" | "enter-password" | "reset-password" | "impersonate" | "consent" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
+                        screen: "login" | "signup" | "reset-password" | "consent" | "impersonate" | "enter-password" | "login/identifier" | "login/email-otp-challenge" | "login/sms-otp-challenge" | "login/login-passwordless-identifier" | "reset-password/code" | "reset-password/request" | "mfa/login-options" | "mfa/totp-challenge" | "mfa/totp-enrollment" | "mfa/phone-challenge" | "mfa/phone-enrollment" | "passkey/challenge" | "passkey/enrollment" | "passkey/enrollment-nudge" | "account/profile" | "account/security" | "account/security/totp-enrollment" | "account/security/phone-enrollment" | "account/linked" | "account/delete" | "account/passkeys" | "connect/start" | "connect/select-tenant";
                     };
                 } & {
                     query: {
@@ -21890,5 +22063,5 @@ declare function init(config: AuthHeroConfig): {
     createX509Certificate: typeof createX509Certificate;
 };
 
-export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_CUSTOM_DOMAINS_PATH, CONTROL_PLANE_CUSTOM_DOMAINS_SCOPE, CONTROL_PLANE_SYNC_EVENT_PREFIX, CONTROL_PLANE_SYNC_SCOPE, CONTROL_PLANE_TENANT_MEMBERS_PATH, CONTROL_PLANE_TENANT_MEMBERS_SCOPE, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, CodeHookDestination, ControlPlaneSyncDestination, DEFAULT_WFP_DISPATCH_BINDING, DEFAULT_WFP_SCRIPT_NAME_TEMPLATE, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, RetentionSweepError, SignupPage as SignUpPage, SocialButton, Spinner, TenantInvitationNotFoundError, TenantMembersNotFoundError, TenantOrganizationNotFoundError, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, backfillProxyHostsToKv, cleanupActionExecutions, cleanupCodes, cleanupOutbox, cleanupSessions, cleanupUserSessions, clientInfoMiddleware, composeHostResolvers, createApplySyncEvents, createAuthMiddleware, createControlPlaneClient, createControlPlaneCustomDomainsAdapter, createControlPlaneTenantMembersAdapter, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createInMemoryCache, createLocalTenantMembersBackend, createServiceTokenCore, createTenantMembersControlPlaneApp, createTenantMembersRoutes, createWfpTenantHostResolver, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, ensureSigningKey, fetchAll, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, isInteractiveClient, isWfpSubdomainSafeTenantId, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, provisionDefaultClients, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, runOutboxRelay, runRetention, seed, tailwindCss, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wfpTenantHost, wrapProxyAdaptersWithKvPublish, wrapTenantsAdapterWithWfpKvPublish };
-export type { ActionExecutionsCleanupParams, AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, CodesCleanupParams, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, ControlPlaneTenantMembersOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureSigningKeyOptions, EnsureSigningKeyResult, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetControlPlaneToken, GetServiceToken, GetTenantMembersBackend, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, LocalTenantMembersBackendOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, RetentionSweep, RetentionSweepFailed, RetentionSweepSkipped, RetentionSweepStatus, RetentionSweepSwept, RolePermissionHooks, RunOutboxRelayConfig, RunRetentionConfig, RunRetentionResult, SeedOptions, SeedResult, ServiceTokenResponse, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantInvitation, TenantInvitationInput, TenantMember, TenantMembersBackend, TenantMembersControlPlaneOptions, TenantMembersListResult, TenantMembersPageParams, TenantOperationExecutorBinding, TenantRole, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };
+export { AppLogo, AuthLayout, Button$1 as Button, Button as ButtonUI, CONTROL_PLANE_CUSTOM_DOMAINS_PATH, CONTROL_PLANE_CUSTOM_DOMAINS_SCOPE, CONTROL_PLANE_SYNC_EVENT_PREFIX, CONTROL_PLANE_SYNC_SCOPE, CONTROL_PLANE_TENANT_MEMBERS_PATH, CONTROL_PLANE_TENANT_MEMBERS_SCOPE, CardContent, CardDescription, CardFooter, CardHeader, CardTitle, Card as CardUI, CodeHookDestination, ControlPlaneSyncDestination, DEFAULT_WFP_DISPATCH_BINDING, DEFAULT_WFP_SCRIPT_NAME_TEMPLATE, EmailValidatedPage, EnterCodePage, EnterPasswordPage, ErrorMessage, Footer, ForgotPasswordPage, ForgotPasswordSentPage, FormComponent, GoBack, Google as GoogleLogo, Icon, IdentifierForm, IdentifierPage, Input as InputUI, InvalidSessionPage as InvalidSession, Label as LabelUI, Layout, LocalCodeExecutor, LogsDestination, MANAGEMENT_API_AUDIENCE, MANAGEMENT_API_SCOPES, MailgunEmailService, MessagePage as Message, PipelineDestination, PostmarkEmailService, PreSignUpConfirmationPage, PreSignupPage as PreSignUpPage, RegistrationFinalizerDestination, ResendEmailService, ResetPasswordPage, RetentionSweepError, SignupPage as SignUpPage, SocialButton, Spinner, TenantInvitationNotFoundError, TenantMembersNotFoundError, TenantOrganizationNotFoundError, Trans, USERNAME_PASSWORD_PROVIDER, UnverifiedEmailPage, UserNotFound as UserNotFoundPage, VippsLogo, WebhookDestination, addEntityHooks, backfillProxyHostsToKv, cleanupActionExecutions, cleanupCodes, cleanupOutbox, cleanupSessions, cleanupUserSessions, clientInfoMiddleware, composeHostResolvers, createApplySyncEvents, createAuthMiddleware, createControlPlaneClient, createControlPlaneCustomDomainsAdapter, createControlPlaneTenantMembersAdapter, createDefaultDestinations, createEncryptedDataAdapter, createEncryptedDataAdapterWithKeyRing, createInMemoryCache, createLocalTenantMembersBackend, createServiceTokenCore, createTenantMembersControlPlaneApp, createTenantMembersRoutes, createWfpTenantHostResolver, decryptField, decryptFieldWithRing, deepMergePatch, drainOutbox, encryptField, encryptFieldWithRing, ensureMutableResponse, ensureSigningKey, fetchAll, init, injectTailwindCSS, isAllowedIssuer, isEncrypted, isInteractiveClient, isWfpSubdomainSafeTenantId, listControlPlaneKeys, loadEncryptionKey, mailgunCredentialsSchema, parseKeyId, postmarkCredentialsSchema, index_d as preDefinedHooks, provisionDefaultClients, resendCredentialsSchema, resolveSigningKeyMode, resolveSigningKeys, runOutboxRelay, runRetention, seed, tailwindCss, tenantMiddleware, toMutableResponse, verifyControlPlaneToken, waitUntil, wfpTenantHost, wrapProxyAdaptersWithKvPublish, wrapTenantsAdapterWithWfpKvPublish };
+export type { ActionExecutionsCleanupParams, AuthHeroConfig, BackfillProxyHostsOptions, BackfillResult, CodesCleanupParams, ControlPlaneClient, ControlPlaneClientOptions, ControlPlaneCustomDomainsOptions, ControlPlaneRequest, ControlPlaneResponse, ControlPlaneSyncDestinationOptions, ControlPlaneTenantMembersOptions, CreateApplySyncEventsOptions, CreateDefaultDestinationsConfig, CreateServiceTokenCoreParams, EncryptKeyIdResolver, EnsureSigningKeyOptions, EnsureSigningKeyResult, EnsureUsernameOptions, EntityHookContext, EntityHooks, EntityHooksConfig, EventDestination, FetchAllOptions, GetControlPlaneToken, GetServiceToken, GetTenantMembersBackend, HookEvent, HookRequest, Hooks, InMemoryCacheConfig, IssuerResolver, KeyRing, KvPublishOptions, LocalTenantMembersBackendOptions, MailgunCredentials, MailgunEmailServiceOptions, ManagementApiExtension, ManagementApiScope, ManagementAudienceResolver, OnExecuteCredentialsExchange, OnExecuteCredentialsExchangeAPI, OnExecutePostLogin, OnExecutePostLoginAPI, OnExecutePostUserDeletion, OnExecutePostUserDeletionAPI, OnExecutePostUserRegistration, OnExecutePostUserRegistrationAPI, OnExecutePostUserUpdate, OnExecutePostUserUpdateAPI, OnExecutePreUserDeletion, OnExecutePreUserDeletionAPI, OnExecutePreUserRegistration, OnExecutePreUserRegistrationAPI, OnExecutePreUserUpdate, OnExecutePreUserUpdateAPI, OnExecuteValidateRegistrationUsername, OnExecuteValidateRegistrationUsernameAPI, OnFetchUserInfo, OnFetchUserInfoAPI, OutboxCleanupParams, OutboxConfig, OutboxMetric, OutboxMetricName, OutboxMetricsSink, OutboxPipelineConfig, PipelineDestinationOptions, PipelineRecord, PostmarkCredentials, PostmarkEmailServiceOptions, ProvisionDefaultClientsOptions, ProvisionDefaultClientsResult, ResendCredentials, ResendEmailServiceOptions, ResolveSigningKeysOptions, RetentionSweep, RetentionSweepFailed, RetentionSweepSkipped, RetentionSweepStatus, RetentionSweepSwept, RolePermissionHooks, RunOutboxRelayConfig, RunRetentionConfig, RunRetentionResult, SeedOptions, SeedResult, ServiceTokenResponse, SigningKeyMode, SigningKeyModeOption, SigningKeyModeResolver, SyncEntity, SyncEvent, SyncOp, TenantInvitation, TenantInvitationInput, TenantMember, TenantMembersBackend, TenantMembersControlPlaneOptions, TenantMembersListResult, TenantMembersPageParams, TenantOperationExecutorBinding, TenantRole, TokenAPI, Transaction, UserInfoEvent, UserLinkingMode, UserLinkingModeOption, UserLinkingModeResolver, UserSessionCleanupParams, UsernamePasswordProviderResolver, VerifyControlPlaneTokenOptions, VerifyControlPlaneTokenResult, WebhookDestinationOptions, WebhookInvoker, WebhookInvokerParams, WfpTenantHostResolverOptions, WfpTenantsKvPublishOptions, WrappedProxyAdapters };