@authhero/proxy 0.10.11 → 0.10.13

package/dist/proxy.mjs

@@ -1151,7 +1151,7 @@ var y = e.object({
 	xt,
 	St,
 	wt
-]), C = e.union([
+]), Ot = e.union([
 	Tt,
 	Et,
 	Dt
@@ -1181,22 +1181,22 @@ new Set([
 	visible: e.boolean().optional().default(!0),
 	customizations: e.record(e.string(), e.any()).optional()
 });
-var w = e.object({
+var C = e.object({
 	x: e.number(),
 	y: e.number()
-}), Ot = e.object({
+}), kt = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: w,
+	coordinates: C,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
 		flow_id: e.string().max(30),
 		next_node: e.string().optional()
 	})
-}), kt = e.object({
+}), At = e.object({
 	id: e.string(),
 	type: e.literal("ROUTER"),
-	coordinates: w,
+	coordinates: C,
 	alias: e.string().min(1).max(150),
 	config: e.object({
 		rules: e.array(e.object({
@@ -1207,20 +1207,20 @@ var w = e.object({
 		})),
 		fallback: e.string()
 	})
-}), At = e.object({
+}), jt = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: w,
+	coordinates: C,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
-		components: e.array(C),
+		components: e.array(Ot),
 		next_node: e.string().optional()
 	})
-}), jt = e.discriminatedUnion("type", [
-	Ot,
+}), Mt = e.discriminatedUnion("type", [
 	kt,
-	At
-]), Mt = e.object({
+	At,
+	jt
+]), Nt = e.object({
 	name: e.string().openapi({ description: "The name of the form" }),
 	messages: e.object({
 		errors: e.record(e.string(), e.any()).optional(),
@@ -1231,14 +1231,14 @@ var w = e.object({
 		default: e.string().optional()
 	}).optional(),
 	translations: e.record(e.string(), e.any()).optional(),
-	nodes: e.array(jt).optional(),
+	nodes: e.array(Mt).optional(),
 	start: e.object({
 		hidden_fields: e.array(e.object({
 			key: e.string(),
 			value: e.string()
 		})).optional(),
 		next_node: e.string().optional(),
-		coordinates: w.optional()
+		coordinates: C.optional()
 	}).optional(),
 	ending: e.object({
 		redirection: e.object({
@@ -1246,7 +1246,7 @@ var w = e.object({
 			target: e.string().optional()
 		}).optional(),
 		after_submit: e.object({ flow_id: e.string().optional() }).optional(),
-		coordinates: w.optional(),
+		coordinates: C.optional(),
 		resume_flow: e.boolean().optional()
 	}).optional(),
 	style: e.object({ css: e.string().optional() }).optional(),
@@ -1255,8 +1255,8 @@ var w = e.object({
 		sdk_src: e.string().optional()
 	}).optional()
 }).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" });
-n.extend(Mt.shape).extend({ id: e.string() });
-var Nt = e.object({
+n.extend(Nt.shape).extend({ id: e.string() });
+var Pt = e.object({
 	id: e.number().optional(),
 	text: e.string(),
 	type: e.enum([
@@ -1265,7 +1265,7 @@ var Nt = e.object({
 		"success",
 		"warning"
 	])
-}), Pt = e.object({
+}), Ft = e.object({
 	id: e.string().optional(),
 	text: e.string(),
 	href: e.string(),
@@ -1277,12 +1277,12 @@ e.object({
 	method: e.enum(["POST", "GET"]),
 	title: e.string().optional(),
 	description: e.string().optional(),
-	components: e.array(C),
-	messages: e.array(Nt).optional(),
-	links: e.array(Pt).optional(),
+	components: e.array(Ot),
+	messages: e.array(Pt).optional(),
+	links: e.array(Ft).optional(),
 	footer: e.string().optional()
 });
-var T = e.enum([
+var w = e.enum([
 	"pre-user-registration",
 	"post-user-registration",
 	"post-user-login",
@@ -1290,19 +1290,19 @@ var T = e.enum([
 	"validate-registration-username",
 	"pre-user-deletion",
 	"post-user-deletion"
-]), E = e.enum(["post-user-login"]), D = e.enum([
+]), T = e.enum(["post-user-login"]), E = e.enum([
 	"post-user-login",
 	"post-user-registration",
 	"post-user-update",
 	"credentials-exchange"
-]), O = e.enum([
+]), D = e.enum([
 	"post-user-login",
 	"credentials-exchange",
 	"pre-user-registration",
 	"post-user-registration"
-]), k = e.enum(["post-user-login"]);
-T.options, E.options, D.options, O.options, k.options;
-var A = e.enum(["impersonate"]), Ft = e.enum([
+]), O = e.enum(["post-user-login"]);
+w.options, T.options, E.options, D.options, O.options;
+var k = e.enum(["impersonate"]), A = e.enum([
 	"ensure-username",
 	"set-preferred-username",
 	"account-linking"
@@ -1314,24 +1314,24 @@ var A = e.enum(["impersonate"]), Ft = e.enum([
 	metadata: e.record(e.string(), e.unknown()).optional()
 }, It = e.object({
 	...j,
-	trigger_id: T,
+	trigger_id: w,
 	url: e.string()
 }), Lt = e.object({
 	...j,
-	trigger_id: E,
+	trigger_id: T,
 	form_id: e.string()
 }), Rt = e.object({
 	...j,
-	trigger_id: D,
-	template_id: Ft
+	trigger_id: E,
+	template_id: A
 }), zt = e.object({
 	...j,
-	trigger_id: O,
+	trigger_id: D,
 	code_id: e.string()
 }), Bt = e.object({
 	...j,
-	trigger_id: k,
-	page_id: A,
+	trigger_id: O,
+	page_id: k,
 	permission_required: e.string().optional()
 });
 e.union([
@@ -1343,34 +1343,34 @@ e.union([
 ]);
 var Vt = e.object({
 	...j,
-	trigger_id: T
+	trigger_id: w
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	url: e.string()
 }), Ht = e.object({
 	...j,
-	trigger_id: E
+	trigger_id: T
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	form_id: e.string()
 }), Ut = e.object({
 	...j,
-	trigger_id: D
+	trigger_id: E
 }).extend(n.shape).extend({
 	hook_id: e.string(),
-	template_id: Ft
+	template_id: A
 }), Wt = e.object({
 	...j,
-	trigger_id: O
+	trigger_id: D
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	code_id: e.string()
 }), Gt = e.object({
 	...j,
-	trigger_id: k
+	trigger_id: O
 }).extend(n.shape).extend({
 	hook_id: e.string(),
-	page_id: A,
+	page_id: k,
 	permission_required: e.string().optional()
 });
 e.union([
@@ -2000,14 +2000,15 @@ var gn = e.enum([
 	"seed",
 	"upgrade",
 	"backup",
-	"deprovision"
+	"deprovision",
+	"users_import"
 ]), _n = e.enum([
 	"pending",
 	"running",
 	"succeeded",
 	"failed",
 	"cancelled"
-]), vn = e.enum(["inline", "cloudflare-workflows"]);
+]), vn = e.string().max(64);
 e.object({
 	tenant_id: e.string().max(255).nullable().default(null),
 	rollout_id: e.string().max(255).nullable().optional(),
@@ -2016,12 +2017,16 @@ e.object({
 	engine_instance_id: e.string().max(100).nullable().optional(),
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
-	initiated_by: e.string().max(255).nullable().optional()
+	initiated_by: e.string().max(255).nullable().optional(),
+	input: e.record(e.string(), e.unknown()).nullable().optional()
 }).extend({
 	id: e.string(),
 	status: _n,
 	current_step: e.string().max(255).nullable().optional(),
 	error: e.string().nullable().optional(),
+	result: e.record(e.string(), e.unknown()).nullable().optional(),
+	claimed_by: e.string().max(255).nullable().optional(),
+	claim_expires_at: e.string().nullable().optional(),
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
@@ -2032,6 +2037,9 @@ e.object({
 	target_worker_version: !0,
 	target_database_version: !0,
 	error: !0,
+	result: !0,
+	claimed_by: !0,
+	claim_expires_at: !0,
 	finished_at: !0
 }).partial();
 var yn = e.enum([
@@ -2052,6 +2060,34 @@ e.object({
 	id: e.string(),
 	created_at: e.string()
 });
+var N = e.enum([
+	"pending",
+	"inserted",
+	"updated",
+	"failed",
+	"skipped"
+]);
+e.object({
+	operation_id: e.string().max(255),
+	seq: e.number().int().min(0),
+	payload: e.record(e.string(), e.unknown()),
+	status: N.default("pending"),
+	error_code: e.string().max(64).nullable().optional(),
+	error_message: e.string().nullable().optional(),
+	error_path: e.string().max(255).nullable().optional(),
+	entity_id: e.string().max(255).nullable().optional()
+}).extend({
+	status: N,
+	created_at: e.string(),
+	updated_at: e.string()
+}), e.object({
+	seq: e.number().int().min(0),
+	status: N,
+	error_code: e.string().max(64).nullable().optional(),
+	error_message: e.string().nullable().optional(),
+	error_path: e.string().max(255).nullable().optional(),
+	entity_id: e.string().max(255).nullable().optional()
+});
 var bn = e.enum([
 	"upgrade",
 	"reseed",
@@ -2138,19 +2174,19 @@ var Sn = e.object({
 	success: e.string(),
 	widget_background: e.string(),
 	widget_border: e.string()
-}), N = e.object({
+}), P = e.object({
 	bold: e.boolean(),
 	size: e.number()
 }), wn = e.object({
-	body_text: N,
-	buttons_text: N,
+	body_text: P,
+	buttons_text: P,
 	font_url: e.string(),
-	input_labels: N,
-	links: N,
+	input_labels: P,
+	links: P,
 	links_style: e.enum(["normal", "underlined"]),
 	reference_text_size: e.number(),
-	subtitle: N,
-	title: N
+	subtitle: P,
+	title: P
 }), Tn = e.object({
 	background_color: e.string(),
 	background_image_url: e.string(),
@@ -2203,18 +2239,18 @@ var Dn = e.object({
 }), On = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
-}), P = e.object({
+}), F = e.object({
 	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
 	match: Dn,
 	handlers: e.array(On).min(1)
-}), kn = P.extend({
+}), kn = F.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), An = P.partial().omit({
+}), An = F.partial().omit({
 	id: !0,
 	custom_domain_id: !0
 }), jn = e.object({
@@ -2649,7 +2685,7 @@ var er = e.enum([
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function F(t, n) {
+function I(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -2672,17 +2708,17 @@ function F(t, n) {
 		path: ["public_key"]
 	}));
 }
-tr.superRefine(F), tr.extend({
+tr.superRefine(I), tr.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(F), e.object({
+}).superRefine(I), e.object({
 	id: e.string().optional(),
 	created_at: e.string().datetime({ offset: !0 }).optional(),
 	updated_at: e.string().datetime({ offset: !0 }).optional()
 });
 var nr = "x-authhero-preserve-location", rr = 1e4;
-function I(e, t, n) {
+function L(e, t, n) {
 	let r = typeof t == "number" ? {
 		freshTtlMs: t,
 		maxEntries: n
@@ -2743,7 +2779,7 @@ function I(e, t, n) {
 }
 //#endregion
 //#region src/data-plane/registry.ts
-var L = class {
+var R = class {
 	definitions = /* @__PURE__ */ new Map();
 	bindings;
 	constructor(e = {}) {
@@ -2763,23 +2799,20 @@ var L = class {
 		return n.build(r.data, { bindings: this.bindings });
 	}
 };
-function R(e) {
+function z(e) {
 	return e;
 }
 //#endregion
 //#region src/data-plane/handlers/util.ts
-var z = "__authhero_proxy_request__", B = "__authhero_proxy_tenant_id__", V = "__authhero_proxy_custom_domain_id__", H = "__authhero_proxy_domain__", ir = "x-authhero-proxy-mutability-probe";
-function ar(e, t) {
-	e.set(z, t);
+var B = "__authhero_proxy_request__", V = "__authhero_proxy_tenant_id__", H = "__authhero_proxy_custom_domain_id__", ir = "__authhero_proxy_domain__", ar = "x-authhero-proxy-mutability-probe";
+function or(e, t) {
+	e.set(B, t);
 }
 function U(e) {
-	return e.get(z) ?? e.req.raw;
-}
-function or(e, t) {
-	e.set(B, t.tenant_id), e.set(V, t.custom_domain_id), e.set(H, t.domain);
+	return e.get(B) ?? e.req.raw;
 }
-function sr(e) {
-	return e.get(B);
+function sr(e, t) {
+	e.set(V, t.tenant_id), e.set(H, t.custom_domain_id), e.set(ir, t.domain);
 }
 function cr(e) {
 	return e.get(V);
@@ -2787,14 +2820,17 @@ function cr(e) {
 function lr(e) {
 	return e.get(H);
 }
-function ur(e, t) {
+function ur(e) {
+	return e.get(ir);
+}
+function dr(e, t) {
 	let n = U(e), r = new Headers(n.headers);
-	t(r), ar(e, new Request(n, { headers: r }));
+	t(r), or(e, new Request(n, { headers: r }));
 }
 function W(e) {
 	let t = e.res;
 	try {
-		t.headers.append(ir, "1"), t.headers.delete(ir);
+		t.headers.append(ar, "1"), t.headers.delete(ar);
 		return;
 	} catch {
 		e.res = new Response(t.body, {
@@ -2806,7 +2842,7 @@ function W(e) {
 }
 //#endregion
 //#region src/data-plane/handlers/cors.ts
-var dr = e.object({
+var fr = e.object({
 	origins: e.array(e.string()).optional(),
 	allow_credentials: e.boolean().optional(),
 	allow_headers: e.array(e.string()).optional(),
@@ -2814,44 +2850,44 @@ var dr = e.object({
 	expose_headers: e.array(e.string()).optional(),
 	max_age: e.number().int().optional()
 }).refine((e) => !(e.allow_credentials && e.origins?.includes("*")), { message: "Cannot use wildcard origin (*) with allow_credentials" });
-function fr(e, t) {
+function pr(e, t) {
 	let n = new Headers(), r = e.origins ?? ["*"], i = r.includes("*");
 	return i && !e.allow_credentials ? n.set("Access-Control-Allow-Origin", "*") : t && (i || r.includes(t)) && (n.set("Access-Control-Allow-Origin", t), n.append("Vary", "Origin")), e.allow_credentials && n.set("Access-Control-Allow-Credentials", "true"), e.allow_methods?.length && n.set("Access-Control-Allow-Methods", e.allow_methods.join(", ")), e.allow_headers?.length && n.set("Access-Control-Allow-Headers", e.allow_headers.join(", ")), e.expose_headers?.length && n.set("Access-Control-Expose-Headers", e.expose_headers.join(", ")), e.max_age !== void 0 && n.set("Access-Control-Max-Age", String(e.max_age)), n;
 }
-var pr = R({
+var mr = z({
 	type: "cors",
-	optionsSchema: dr,
+	optionsSchema: fr,
 	build(e) {
 		return async (t, n) => {
 			let r = t.req.header("origin") ?? null;
 			if (t.req.method === "OPTIONS" && r !== null && t.req.header("access-control-request-method") !== void 0) {
-				let t = fr(e, r);
+				let t = pr(e, r);
 				return new Response(null, {
 					status: 204,
 					headers: t
 				});
 			}
 			await n();
-			let i = fr(e, r);
+			let i = pr(e, r);
 			W(t), i.forEach((e, n) => {
 				n.toLowerCase() === "vary" ? t.res.headers.append(n, e) : t.res.headers.set(n, e);
 			});
 		};
 	}
-}), mr = e.object({
+}), hr = e.object({
 	username: e.string(),
 	password: e.string(),
 	realm: e.string().optional()
 });
-function hr(e, t) {
+function gr(e, t) {
 	let n = `${e}:${t}`;
 	return typeof btoa == "function" ? btoa(n) : Buffer.from(n, "utf-8").toString("base64");
 }
-var gr = R({
+var _r = z({
 	type: "basic_auth",
-	optionsSchema: mr,
+	optionsSchema: hr,
 	build(e) {
-		let t = hr(e.username, e.password), n = (e.realm ?? "Restricted").replace(/["\\\r\n]/g, "");
+		let t = gr(e.username, e.password), n = (e.realm ?? "Restricted").replace(/["\\\r\n]/g, "");
 		return async (e, r) => {
 			let i = e.req.header("authorization");
 			if (i) {
@@ -2867,7 +2903,7 @@ var gr = R({
 			});
 		};
 	}
-}), _r = R({
+}), vr = z({
 	type: "headers",
 	optionsSchema: e.object({
 		request: e.record(e.string(), e.string()).optional(),
@@ -2877,12 +2913,12 @@ var gr = R({
 	}),
 	build(e) {
 		return async (t, n) => {
-			if ((e.request || e.remove_request) && ur(t, (t) => {
+			if ((e.request || e.remove_request) && dr(t, (t) => {
 				if (e.remove_request?.forEach((e) => t.delete(e)), e.request) for (let [n, r] of Object.entries(e.request)) t.set(n, r);
 			}), await n(), (e.response || e.remove_response) && (W(t), e.remove_response?.forEach((e) => t.res.headers.delete(e)), e.response)) for (let [n, r] of Object.entries(e.response)) t.res.headers.set(n, r);
 		};
 	}
-}), vr = R({
+}), yr = z({
 	type: "cache",
 	optionsSchema: e.object({ ttl_seconds: e.number().int().positive() }),
 	build(e) {
@@ -2893,7 +2929,7 @@ var gr = R({
 			}
 		};
 	}
-}), yr = [
+}), br = [
 	"173.245.48.0/20",
 	"103.21.244.0/22",
 	"103.22.200.0/22",
@@ -2917,7 +2953,7 @@ var gr = R({
 	"2a06:98c0::/29",
 	"2c0f:f248::/32"
 ];
-function br(e) {
+function xr(e) {
 	let t = e.split(".");
 	if (t.length !== 4) return null;
 	let n = [];
@@ -2929,14 +2965,14 @@ function br(e) {
 	}
 	return n;
 }
-function xr(e) {
+function Sr(e) {
 	if (e === "") return [];
 	let t = e.split(":"), n = [];
 	for (let e = 0; e < t.length; e++) {
 		let r = t[e];
 		if (r.includes(".")) {
 			if (e !== t.length - 1) return null;
-			let i = br(r);
+			let i = xr(r);
 			if (!i) return null;
 			n.push(i[0] << 8 | i[1], i[2] << 8 | i[3]);
 			continue;
@@ -2946,14 +2982,14 @@ function xr(e) {
 	}
 	return n;
 }
-function Sr(e) {
+function Cr(e) {
 	let t = e.split("::");
 	if (t.length > 2) return null;
-	let n = xr(t[0] ?? "");
+	let n = Sr(t[0] ?? "");
 	if (!n) return null;
 	let r;
 	if (t.length === 2) {
-		let e = xr(t[1] ?? "");
+		let e = Sr(t[1] ?? "");
 		if (!e) return null;
 		let i = 8 - n.length - e.length;
 		if (i < 1) return null;
@@ -2968,25 +3004,25 @@ function Sr(e) {
 	for (let e of r) i.push(e >> 8 & 255, e & 255);
 	return i;
 }
-function Cr(e) {
+function wr(e) {
 	let t = e.trim();
 	t.startsWith("[") && t.endsWith("]") && (t = t.slice(1, -1));
 	let n = t.indexOf("%");
 	if (n !== -1 && (t = t.slice(0, n)), t === "") return null;
-	if (!t.includes(":")) return br(t);
-	let r = Sr(t);
+	if (!t.includes(":")) return xr(t);
+	let r = Cr(t);
 	return r ? r.slice(0, 10).every((e) => e === 0) && r[10] === 255 && r[11] === 255 ? r.slice(12) : r : null;
 }
-function wr(e) {
-	let [t, n] = e.split("/"), r = Cr(t ?? ""), i = Number(n);
+function Tr(e) {
+	let [t, n] = e.split("/"), r = wr(t ?? ""), i = Number(n);
 	if (!r || !Number.isInteger(i)) throw Error(`Invalid Cloudflare CIDR: ${e}`);
 	return {
 		bytes: r,
 		prefixBits: i
 	};
 }
-var Tr = yr.map(wr);
-function Er(e, t) {
+var Er = br.map(Tr);
+function Dr(e, t) {
 	if (e.length !== t.bytes.length) return !1;
 	let n = t.prefixBits >> 3;
 	for (let r = 0; r < n; r++) if (e[r] !== t.bytes[r]) return !1;
@@ -2995,11 +3031,11 @@ function Er(e, t) {
 	let i = 255 << 8 - r & 255;
 	return (e[n] & i) === (t.bytes[n] & i);
 }
-function Dr(e) {
-	let t = Cr(e);
-	return t ? Tr.some((e) => Er(t, e)) : !1;
+function Or(e) {
+	let t = wr(e);
+	return t ? Er.some((e) => Dr(t, e)) : !1;
 }
-var Or = R({
+var kr = z({
 	type: "forwarded_headers",
 	optionsSchema: e.object({
 		client_ip_header: e.string().default("cf-connecting-ip"),
@@ -3010,40 +3046,40 @@ var Or = R({
 	build(e) {
 		return async (t, n) => {
 			let r = new URL(t.req.url);
-			ur(t, (n) => {
+			dr(t, (n) => {
 				n.set("x-forwarded-host", r.host), n.set("x-forwarded-proto", r.protocol.replace(":", "")), e.set_x_original_url && n.set("x-original-url", t.req.url);
-				let i = n.get(e.client_ip_header), a = i && e.skip_cloudflare_client_ip && Dr(i) ? null : i, o = (n.get("x-forwarded-for") ?? "").split(",").map((e) => e.trim()).filter(Boolean), s = a ?? o[o.length - 1] ?? "127.0.0.1", c = o.length === 0 || o[o.length - 1] !== s, l = o.length ? c ? `${o.join(", ")}, ${s}` : o.join(", ") : s;
+				let i = n.get(e.client_ip_header), a = i && e.skip_cloudflare_client_ip && Or(i) ? null : i, o = (n.get("x-forwarded-for") ?? "").split(",").map((e) => e.trim()).filter(Boolean), s = a ?? o[o.length - 1] ?? "127.0.0.1", c = o.length === 0 || o[o.length - 1] !== s, l = o.length ? c ? `${o.join(", ")}, ${s}` : o.join(", ") : s;
 				n.set("x-forwarded-for", l), e.set_x_real_ip && n.set("x-real-ip", s);
 			}), await n();
 		};
 	}
-}), kr = e.object({ upstream_host: e.string().optional() });
-function Ar(e) {
+}), Ar = e.object({ upstream_host: e.string().optional() });
+function jr(e) {
 	return e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function jr(e) {
+function Mr(e) {
 	if (typeof e.getSetCookie == "function") return e.getSetCookie();
 	let t = [];
 	return e.forEach((e, n) => {
 		n.toLowerCase() === "set-cookie" && t.push(e);
 	}), t;
 }
-var Mr = R({
+var Nr = z({
 	type: "rewrite_cookies",
-	optionsSchema: kr,
+	optionsSchema: Ar,
 	build(e) {
 		return async (t, n) => {
 			await n();
 			let r = new URL(t.req.url).hostname, i = e.upstream_host ?? t.get("__proxy_upstream_host__");
 			if (!i) return;
-			let a = jr(t.res.headers);
+			let a = Mr(t.res.headers);
 			if (a.length === 0) return;
-			let o = Ar(i), s = RegExp(`(?:^|;\\s*)Domain=\\.?${o}(?=;|$)`, "i");
+			let o = jr(i), s = RegExp(`(?:^|;\\s*)Domain=\\.?${o}(?=;|$)`, "i");
 			W(t), t.res.headers.delete("set-cookie");
 			for (let e of a) t.res.headers.append("set-cookie", e.replace(s, `Domain=${r}`));
 		};
 	}
-}), Nr = R({
+}), Pr = z({
 	type: "rewrite_location",
 	optionsSchema: e.object({ upstream_origin: e.string().optional() }),
 	build(e) {
@@ -3069,14 +3105,14 @@ var Mr = R({
 			W(t), t.res.headers.set("location", c);
 		};
 	}
-}), Pr = class extends Error {
+}), Fr = class extends Error {
 	ms;
 	constructor(e, t) {
 		super(`${t ?? "Operation"} timed out after ${e}ms`), this.name = "TimeoutError", this.ms = e;
 	}
 };
 function G(e) {
-	return e instanceof Pr ? !0 : e instanceof Error ? e.name === "AbortError" || e.name === "TimeoutError" : !1;
+	return e instanceof Fr ? !0 : e instanceof Error ? e.name === "AbortError" || e.name === "TimeoutError" : !1;
 }
 function K(e, t) {
 	let n = new AbortController(), r = setTimeout(() => n.abort(), e);
@@ -3084,7 +3120,7 @@ function K(e, t) {
 }
 function q(e, t, n) {
 	let r, i = new Promise((e, i) => {
-		r = setTimeout(() => i(new Pr(t, n)), t);
+		r = setTimeout(() => i(new Fr(t, n)), t);
 	});
 	return Promise.race([e, i]).finally(() => {
 		r && clearTimeout(r);
@@ -3092,7 +3128,7 @@ function q(e, t, n) {
 }
 //#endregion
 //#region src/data-plane/handlers/http.ts
-var Fr = new Set([
+var Ir = new Set([
 	"connection",
 	"keep-alive",
 	"proxy-authenticate",
@@ -3101,24 +3137,24 @@ var Fr = new Set([
 	"trailers",
 	"transfer-encoding",
 	"upgrade"
-]), Ir = 3e4, Lr = e.object({
+]), Lr = 3e4, Rr = e.object({
 	upstream_url: e.string(),
 	preserve_host: e.boolean().default(!1),
 	timeout_ms: e.number().int().positive().optional()
 });
-function Rr(e, t) {
+function zr(e, t) {
 	return e === "" || e === "/" ? t : `${e.endsWith("/") ? e.slice(0, -1) : e}${t.startsWith("/") ? t : `/${t}`}`;
 }
-function zr(e) {
+function Br(e) {
 	return e !== "GET" && e !== "HEAD";
 }
-function Br(e, t) {
+function Vr(e, t) {
 	let n = new URL(t.url), r = new URL(e.upstream_url);
-	r.pathname = Rr(r.pathname, n.pathname), r.search = n.search;
+	r.pathname = zr(r.pathname, n.pathname), r.search = n.search;
 	let i = new Headers(t.headers);
-	for (let e of Fr) i.delete(e);
+	for (let e of Ir) i.delete(e);
 	e.preserve_host || i.set("host", r.host), i.has("x-forwarded-host") || i.set("x-forwarded-host", n.host), i.has("x-forwarded-proto") || i.set("x-forwarded-proto", n.protocol.replace(":", ""));
-	let a = zr(t.method) ? t.body : void 0, o = {
+	let a = Br(t.method) ? t.body : void 0, o = {
 		method: t.method,
 		headers: i,
 		body: a,
@@ -3129,13 +3165,13 @@ function Br(e, t) {
 		init: o
 	};
 }
-var Vr = R({
+var Hr = z({
 	type: "http",
-	optionsSchema: Lr,
+	optionsSchema: Rr,
 	build(e) {
-		let t = e.timeout_ms ?? Ir;
+		let t = e.timeout_ms ?? Lr;
 		return async (n) => {
-			let { target: r, init: i } = Br(e, U(n));
+			let { target: r, init: i } = Vr(e, U(n));
 			n.set("__proxy_upstream_host__", r.hostname), n.set("__proxy_upstream_origin__", `${r.protocol}//${r.host}`);
 			try {
 				return await K(t, (e) => fetch(r.toString(), {
@@ -3147,24 +3183,24 @@ var Vr = R({
 			}
 		};
 	}
-}), Hr = 3e4, Ur = e.object({
+}), Ur = 3e4, Wr = e.object({
 	binding: e.string(),
 	upstream_url: e.string().optional(),
 	preserve_host: e.boolean().default(!0),
 	timeout_ms: e.number().int().positive().optional()
 });
-function Wr(e) {
+function Gr(e) {
 	return typeof e == "object" && !!e && typeof e.fetch == "function";
 }
-var Gr = R({
+var Kr = z({
 	type: "service_binding",
-	optionsSchema: Ur,
+	optionsSchema: Wr,
 	build(e, t) {
 		let n = t.bindings[e.binding];
-		if (!Wr(n)) throw Error(`Service binding "${e.binding}" is not configured or is not a Fetcher`);
-		let r = e.upstream_url ?? `https://${e.binding}.binding.invalid/`, i = e.timeout_ms ?? Hr;
+		if (!Gr(n)) throw Error(`Service binding "${e.binding}" is not configured or is not a Fetcher`);
+		let r = e.upstream_url ?? `https://${e.binding}.binding.invalid/`, i = e.timeout_ms ?? Ur;
 		return async (t) => {
-			let a = U(t), { target: o, init: s } = Br({
+			let a = U(t), { target: o, init: s } = Vr({
 				upstream_url: r,
 				preserve_host: e.preserve_host
 			}, a);
@@ -3179,34 +3215,34 @@ var Gr = R({
 			}
 		};
 	}
-}), Kr = 3e4, qr = e.object({
+}), qr = 3e4, Jr = e.object({
 	binding: e.string(),
 	script_name: e.string(),
 	cpu_ms: e.number().int().positive().optional(),
 	subrequests: e.number().int().positive().optional(),
 	timeout_ms: e.number().int().positive().optional()
 });
-function Jr(e) {
+function Yr(e) {
 	return typeof e == "object" && !!e && typeof e.get == "function";
 }
 var J = /\{(tenant_id|custom_domain_id|domain|host)\}/g;
-function Yr(e) {
+function Xr(e) {
 	return J.lastIndex = 0, J.test(e);
 }
-var Xr = R({
+var Zr = z({
 	type: "dispatch_namespace",
-	optionsSchema: qr,
+	optionsSchema: Jr,
 	build(e, t) {
 		let n = t.bindings[e.binding];
-		if (!Jr(n)) throw Error(`Dispatch namespace binding "${e.binding}" is not configured or does not expose .get()`);
-		let r = Yr(e.script_name), i = e.timeout_ms ?? Kr, a = e.cpu_ms || e.subrequests ? { limits: {
+		if (!Yr(n)) throw Error(`Dispatch namespace binding "${e.binding}" is not configured or does not expose .get()`);
+		let r = Xr(e.script_name), i = e.timeout_ms ?? qr, a = e.cpu_ms || e.subrequests ? { limits: {
 			...e.cpu_ms ? { cpuMs: e.cpu_ms } : {},
 			...e.subrequests ? { subrequests: e.subrequests } : {}
 		} } : void 0;
 		return async (t) => {
 			let o = e.script_name;
 			if (r) {
-				let n = sr(t), r = cr(t), i = lr(t), a = t.req.header("host") ?? t.req.header("x-forwarded-host") ?? "";
+				let n = cr(t), r = lr(t), i = ur(t), a = t.req.header("host") ?? t.req.header("x-forwarded-host") ?? "";
 				if (o = o.replace(J, (e, t) => {
 					switch (t) {
 						case "tenant_id": return n ?? "";
@@ -3229,7 +3265,7 @@ var Xr = R({
 			}
 		};
 	}
-}), Zr = R({
+}), Qr = z({
 	type: "redirect",
 	optionsSchema: e.object({
 		upstream_url: e.string().refine((e) => {
@@ -3258,7 +3294,7 @@ var Xr = R({
 			});
 		};
 	}
-}), Qr = R({
+}), $r = z({
 	type: "static",
 	optionsSchema: e.object({
 		status: e.number().int().default(200),
@@ -3278,15 +3314,15 @@ var Xr = R({
 });
 //#endregion
 //#region src/data-plane/handlers/index.ts
-function $r(e) {
-	e.add(pr).add(gr).add(_r).add(vr).add(Or).add(Mr).add(Nr).add(Vr).add(Gr).add(Xr).add(Zr).add(Qr);
+function ei(e) {
+	e.add(mr).add(_r).add(vr).add(yr).add(kr).add(Nr).add(Pr).add(Hr).add(Kr).add(Zr).add(Qr).add($r);
 }
 //#endregion
 //#region src/data-plane/matcher.ts
-function ei(e) {
+function ti(e) {
 	return [...e].sort((e, t) => e.priority === t.priority ? e.created_at.localeCompare(t.created_at) : e.priority - t.priority);
 }
-function ti(e, t) {
+function ni(e, t) {
 	let n = e.toLowerCase(), r = t.toLowerCase();
 	if (n === r) return !0;
 	if (n.startsWith("*.")) {
@@ -3295,13 +3331,13 @@ function ti(e, t) {
 	}
 	return !1;
 }
-function ni(e, t) {
-	return !e || e.length === 0 ? !0 : e.some((e) => ti(e, t));
+function ri(e, t) {
+	return !e || e.length === 0 ? !0 : e.some((e) => ni(e, t));
 }
-function ri(e) {
+function ii(e) {
 	let t = (e.headers ? Object.entries(e.headers) : []).map(([e, t]) => [e.toLowerCase(), new RegExp(t)]), n = (e.query ? Object.entries(e.query) : []).map(([e, t]) => [e, new RegExp(t)]), r = e.hosts;
 	return async (e, i) => {
-		if (r && !ni(r, e.req.header("host") ?? "")) return new Response("No matching route", { status: 404 });
+		if (r && !ri(r, e.req.header("host") ?? "")) return new Response("No matching route", { status: 404 });
 		for (let [n, r] of t) {
 			let t = e.req.header(n);
 			if (t === void 0 || !r.test(t)) return new Response("No matching route", { status: 404 });
@@ -3318,17 +3354,17 @@ function ri(e) {
 }
 //#endregion
 //#region src/data-plane/compile.ts
-var ii = "forwarded_headers";
-function Y(e) {
+var Y = "forwarded_headers";
+function ai(e) {
 	return e.some((e) => e.type === "forwarded_headers") ? [...e] : [{
-		type: ii,
+		type: Y,
 		options: {}
 	}, ...e];
 }
 function X(e, t) {
-	return e.has("forwarded_headers") ? Y(t) : [...t];
+	return e.has("forwarded_headers") ? ai(t) : [...t];
 }
-var ai = [
+var oi = [
 	"GET",
 	"POST",
 	"PUT",
@@ -3340,34 +3376,34 @@ var ai = [
 function Z(e, n, r, i) {
 	let a = new t();
 	r && a.use("*", async (e, t) => {
-		or(e, r), await t();
+		sr(e, r), await t();
 	});
-	let o = ei(e);
+	let o = ti(e);
 	for (let e of o) {
 		let t = [];
-		t.push(ri(e.match));
+		t.push(ii(e.match));
 		for (let r of X(n, e.handlers)) t.push(n.build(r.type, r.options));
-		let r = e.match.methods?.length ? e.match.methods.map((e) => e.toUpperCase()) : ai, i = e.match.path || "/*";
+		let r = e.match.methods?.length ? e.match.methods.map((e) => e.toUpperCase()) : oi, i = e.match.path || "/*";
 		a.on(r, [i], ...t);
 	}
-	return i && i.length > 0 ? a.on(ai, ["*"], ...i) : a.all("*", (e) => e.text("No matching route", 404)), a.onError((e, t) => {
+	return i && i.length > 0 ? a.on(oi, ["*"], ...i) : a.all("*", (e) => e.text("No matching route", 404)), a.onError((e, t) => {
 		let n = G(e);
 		return t.text(n ? "Upstream timeout" : "Bad gateway", n ? 504 : 502, { "x-authhero-proxy-error": n ? "handler_timeout" : "handler_failed" });
 	}), a;
 }
 //#endregion
 //#region src/data-plane/router.ts
-var oi = 1e4;
-function si(e) {
-	return e.resolver ? e.resolver : e.cache ? I(e.data, e.cache) : I(e.data, e.cacheTtlMs ?? 3e4);
-}
+var si = 1e4;
 function ci(e) {
+	return e.resolver ? e.resolver : e.cache ? L(e.data, e.cache) : L(e.data, e.cacheTtlMs ?? 3e4);
+}
+function li(e) {
 	if (e.registry) return e.registry;
-	let t = new L(e.bindings ?? {});
-	return $r(t), t;
+	let t = new R(e.bindings ?? {});
+	return ei(t), t;
 }
 function Q(e) {
-	let t = si(e), n = ci(e), r = /* @__PURE__ */ new WeakMap(), i = e.resolveHostTimeoutMs ?? oi, a = e.defaultHandlers && e.defaultHandlers.length > 0 ? X(n, e.defaultHandlers).map((e) => n.build(e.type, e.options)) : void 0, o = a ? Z([], n, void 0, a) : void 0;
+	let t = ci(e), n = li(e), r = /* @__PURE__ */ new WeakMap(), i = e.resolveHostTimeoutMs ?? si, a = e.defaultHandlers && e.defaultHandlers.length > 0 ? X(n, e.defaultHandlers).map((e) => n.build(e.type, e.options)) : void 0, o = a ? Z([], n, void 0, a) : void 0;
 	return async (e) => {
 		let s = e.req.header("host") ?? e.req.header("x-forwarded-host");
 		if (!s) return e.text("Missing host", 400);
@@ -3385,13 +3421,13 @@ function Q(e) {
 		}
 	};
 }
-function li(e) {
+function ui(e) {
 	let n = new t();
 	return n.all("*", Q(e)), n;
 }
 //#endregion
 //#region src/app.ts
-function ui(e) {
+function di(e) {
 	let n = new t();
 	return n.all("*", Q({
 		data: e.data,
@@ -3409,17 +3445,17 @@ function ui(e) {
 }
 //#endregion
 //#region src/data-plane/cache-api-cache.ts
-var di = 1e3, fi = 1e3;
-function pi(e, t) {
+var fi = 1e3, pi = 1e3;
+function mi(e, t) {
 	return new Request(`https://proxy-cache.internal/${encodeURIComponent(e)}/hosts/${encodeURIComponent(t.toLowerCase())}`, { method: "GET" });
 }
-function mi() {
+function hi() {
 	return globalThis.caches?.default;
 }
-function hi(e) {
-	let t = e.cache ?? mi();
+function gi(e) {
+	let t = e.cache ?? hi();
 	if (!t) return e.upstream;
-	let n = t, r = e.namespace ?? "authhero-proxy", i = e.cacheTtlSeconds ?? 60, a = e.negativeCacheTtlSeconds ?? 10, o = e.waitUntil, s = e.cacheReadTimeoutMs ?? di, c = e.cacheWriteTimeoutMs ?? fi;
+	let n = t, r = e.namespace ?? "authhero-proxy", i = e.cacheTtlSeconds ?? 60, a = e.negativeCacheTtlSeconds ?? 10, o = e.waitUntil, s = e.cacheReadTimeoutMs ?? fi, c = e.cacheWriteTimeoutMs ?? pi;
 	async function l(e) {
 		try {
 			return await q(Promise.resolve(n.match(e)), s, "cache.match");
@@ -3428,7 +3464,7 @@ function hi(e) {
 		}
 	}
 	return { async resolveHost(t) {
-		let s = pi(r, t), u = await l(s);
+		let s = mi(r, t), u = await l(s);
 		if (u) try {
 			return (await u.json()).value;
 		} catch {}
@@ -3439,14 +3475,14 @@ function hi(e) {
 		return o ? o(m) : await m, d;
 	} };
 }
-function gi(e, t) {
-	return pi(e, t);
+function _i(e, t) {
+	return mi(e, t);
 }
 //#endregion
 //#region src/data-plane/cache-adapter-cache.ts
-var _i = 1e3, vi = 1e3;
-function yi(e) {
-	let { upstream: t, cache: n, freshTtlMs: r, staleTtlMs: i = 0, staleIfErrorTtlMs: a = 0, negativeTtlMs: o = r, keyPrefix: s = "authhero-proxy-host", waitUntil: c, cacheReadTimeoutMs: l = _i, cacheWriteTimeoutMs: u = vi } = e, d = /* @__PURE__ */ new Map();
+var vi = 1e3, yi = 1e3;
+function bi(e) {
+	let { upstream: t, cache: n, freshTtlMs: r, staleTtlMs: i = 0, staleIfErrorTtlMs: a = 0, negativeTtlMs: o = r, keyPrefix: s = "authhero-proxy-host", waitUntil: c, cacheReadTimeoutMs: l = vi, cacheWriteTimeoutMs: u = yi } = e, d = /* @__PURE__ */ new Map();
 	function f(e) {
 		return `${s}:${e.toLowerCase()}`;
 	}
@@ -3499,7 +3535,7 @@ function yi(e) {
 		}
 	} };
 }
-function bi(e, t) {
+function xi(e, t) {
 	return `${e}:${t.toLowerCase()}`;
 }
 //#endregion
@@ -3507,7 +3543,7 @@ function bi(e, t) {
 function $() {
 	throw Error("Static proxy adapter is read-only; configure routes at init time");
 }
-function xi(e, t, n, r, i, a) {
+function Si(e, t, n, r, i, a) {
 	return {
 		id: e.id ?? `${n}:${t}`,
 		tenant_id: r,
@@ -3522,10 +3558,10 @@ function xi(e, t, n, r, i, a) {
 		updated_at: e.updated_at ?? a
 	};
 }
-function Si(e) {
+function Ci(e) {
 	let t = (/* @__PURE__ */ new Date()).toISOString(), n = e.defaultTenantId ?? "static", r = /* @__PURE__ */ new Map();
 	for (let [i, a] of Object.entries(e.hosts)) {
-		let e = i.toLowerCase(), o = Array.isArray(a) ? { routes: a } : a, s = o.tenant_id ?? n, c = o.custom_domain_id ?? e, l = o.routes.map((n, r) => xi(n, r, e, s, c, t)).sort((e, t) => e.priority - t.priority);
+		let e = i.toLowerCase(), o = Array.isArray(a) ? { routes: a } : a, s = o.tenant_id ?? n, c = o.custom_domain_id ?? e, l = o.routes.map((n, r) => Si(n, r, e, s, c, t)).sort((e, t) => e.priority - t.priority);
 		r.set(e, {
 			tenant_id: s,
 			custom_domain_id: c,
@@ -3569,7 +3605,7 @@ function Si(e) {
 		}
 	};
 }
-function Ci(e, t = {}) {
+function wi(e, t = {}) {
 	return {
 		priority: t.priority,
 		match: { path: t.path ?? "/*" },
@@ -3584,10 +3620,10 @@ function Ci(e, t = {}) {
 }
 //#endregion
 //#region src/constants.ts
-var wi = "proxy:resolve_host";
+var Ti = "proxy:resolve_host";
 //#endregion
 //#region src/http-adapter/index.ts
-function Ti() {
+function Ei() {
 	let e = () => {
 		throw Error("HTTP proxy adapter does not expose write access to proxy_routes; mutate via the control-plane management API");
 	};
@@ -3609,7 +3645,7 @@ function Ti() {
 		}
 	};
 }
-function Ei(e) {
+function Di(e) {
 	let t = e.fetch ?? fetch, n = e.baseUrl.replace(/\/+$/, ""), r = e.resolveHostPath ?? "/api/v2/proxy/control-plane/hosts/", i = e.audience ?? `${n}/api/v2/`, a = e.scope ?? "proxy:resolve_host", o = e.tokenRefreshSkewSeconds ?? 60, s = e.timeoutMs ?? 2500;
 	function c(e) {
 		let t = new AbortController(), n = setTimeout(() => t.abort(), s);
@@ -3642,7 +3678,7 @@ function Ei(e) {
 		}), u);
 	}
 	return {
-		proxyRoutes: Ti(),
+		proxyRoutes: Ei(),
 		async resolveHost(e) {
 			let i = await f(), a = `${n}${r}${encodeURIComponent(e.toLowerCase())}`, o = await c((e) => t(a, {
 				headers: { authorization: `Bearer ${i}` },
@@ -3656,7 +3692,7 @@ function Ei(e) {
 }
 //#endregion
 //#region src/http-adapter/service-binding-fetch.ts
-function Di(e) {
+function Oi(e) {
 	return (t, n) => {
 		let r = t instanceof Request && n === void 0 ? t : new Request(t, n);
 		return e.fetch(r);
@@ -3664,11 +3700,11 @@ function Di(e) {
 }
 //#endregion
 //#region src/kv-adapter/index.ts
-var Oi = "authhero-proxy-host:";
-function ki(e, t) {
+var ki = "authhero-proxy-host:";
+function Ai(e, t) {
 	return `${e}${t.toLowerCase()}`;
 }
-function Ai() {
+function ji() {
 	let e = () => {
 		throw Error("KV proxy adapter does not expose write access to proxy_routes; mutate via the control-plane management API");
 	};
@@ -3690,15 +3726,15 @@ function Ai() {
 		}
 	};
 }
-function ji(e) {
-	let { kv: t, keyPrefix: n = Oi, timeoutMs: r } = e;
+function Mi(e) {
+	let { kv: t, keyPrefix: n = ki, timeoutMs: r } = e;
 	return {
-		proxyRoutes: Ai(),
+		proxyRoutes: ji(),
 		async resolveHost(e) {
-			let i = ki(n, e), a = t.get(i, "json");
+			let i = Ai(n, e), a = t.get(i, "json");
 			return (r && r > 0 ? await q(a, r, "kv.get") : await a) ?? null;
 		}
 	};
 }
 //#endregion
-export { Oi as DEFAULT_KV_HOST_KEY_PREFIX, ii as FORWARDED_HEADERS_HANDLER_TYPE, L as HandlerRegistry, wi as PROXY_RESOLVE_HOST_SCOPE, gr as basicAuthHandler, bi as buildCacheAdapterKey, gi as buildCacheApiKey, ki as buildKvHostKey, ri as buildMatchFilter, vr as cacheHandler, Z as compileHostApp, pr as corsHandler, yi as createCacheAdapterHostCache, hi as createCacheApiHostCache, Ei as createHttpProxyAdapter, I as createInMemoryHostCache, ji as createKvProxyAdapter, ui as createProxyApp, Q as createProxyDataPlaneHandler, li as createProxyDataPlaneRouter, Di as createServiceBindingFetch, Si as createStaticProxyAdapter, R as defineHandler, Xr as dispatchNamespaceHandler, Or as forwardedHeadersHandler, On as handlerConfigSchema, _r as headersHandler, Vr as httpHandler, Ci as httpRoute, Dr as isCloudflareIp, Dn as matchSchema, ni as matchesAnyHost, ti as matchesHost, P as proxyRouteInsertSchema, kn as proxyRouteSchema, An as proxyRouteUpdateSchema, Zr as redirectHandler, $r as registerBuiltinHandlers, Mr as rewriteCookiesHandler, Nr as rewriteLocationHandler, Gr as serviceBindingHandler, ei as sortRoutes, Qr as staticHandler, Y as withForwardedHeaders, X as withForwardedHeadersFor };
+export { ki as DEFAULT_KV_HOST_KEY_PREFIX, Y as FORWARDED_HEADERS_HANDLER_TYPE, R as HandlerRegistry, Ti as PROXY_RESOLVE_HOST_SCOPE, _r as basicAuthHandler, xi as buildCacheAdapterKey, _i as buildCacheApiKey, Ai as buildKvHostKey, ii as buildMatchFilter, yr as cacheHandler, Z as compileHostApp, mr as corsHandler, bi as createCacheAdapterHostCache, gi as createCacheApiHostCache, Di as createHttpProxyAdapter, L as createInMemoryHostCache, Mi as createKvProxyAdapter, di as createProxyApp, Q as createProxyDataPlaneHandler, ui as createProxyDataPlaneRouter, Oi as createServiceBindingFetch, Ci as createStaticProxyAdapter, z as defineHandler, Zr as dispatchNamespaceHandler, kr as forwardedHeadersHandler, On as handlerConfigSchema, vr as headersHandler, Hr as httpHandler, wi as httpRoute, Or as isCloudflareIp, Dn as matchSchema, ri as matchesAnyHost, ni as matchesHost, F as proxyRouteInsertSchema, kn as proxyRouteSchema, An as proxyRouteUpdateSchema, Qr as redirectHandler, ei as registerBuiltinHandlers, Nr as rewriteCookiesHandler, Pr as rewriteLocationHandler, Kr as serviceBindingHandler, ti as sortRoutes, $r as staticHandler, ai as withForwardedHeaders, X as withForwardedHeadersFor };