@authhero/proxy 0.10.3 → 0.10.5

package/dist/proxy.mjs

@@ -275,7 +275,7 @@ var ue = e.object({
 	region: e.string().optional(),
 	postal_code: e.string().optional(),
 	country: e.string().optional()
-}).optional(), g = e.object({
+}).optional(), pe = e.object({
 	email: e.string().transform((e) => e.toLowerCase()).optional(),
 	username: e.string().refine((e) => !e.includes("@"), { message: "Usernames must not contain \"@\". Use the email field for email addresses." }).optional(),
 	phone_number: e.string().optional(),
@@ -300,7 +300,7 @@ var ue = e.object({
 	zoneinfo: e.string().optional(),
 	address: fe
 });
-g.extend({
+pe.extend({
 	email_verified: e.boolean().default(!1),
 	verify_email: e.boolean().optional(),
 	last_ip: e.string().optional(),
@@ -322,23 +322,23 @@ g.extend({
 	email: e.string().optional(),
 	login_count: e.number().default(0),
 	identities: e.array(de).optional()
-}).omit({ registration_completed_at: !0 }), g.extend({
+}).omit({ registration_completed_at: !0 }), pe.extend({
 	login_count: e.number(),
 	multifactor: e.array(e.string()).optional(),
 	last_ip: e.string().optional(),
 	last_login: e.string().optional(),
 	user_id: e.string()
 }).catchall(e.any());
-var pe = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", me = (e = 21) => {
+var me = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", he = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += pe[n[e] & 63];
+	for (; e--;) t += me[n[e] & 63];
 	return t;
-}, he = e.object({
+}, ge = e.object({
 	client_id: e.string().optional().openapi({ description: "ID of this client. Generated server-side if omitted (Auth0 behavior)." }),
 	name: e.string().min(1).openapi({ description: "Name of this client (min length: 1 character, does not allow < or >)." }),
 	description: e.string().max(140).optional().openapi({ description: "Free text description of this client (max length: 140 characters)." }),
 	global: e.boolean().default(!1).openapi({ description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)." }),
-	client_secret: e.string().default(() => me()).optional().openapi({ description: "Client secret (which you must not make public)." }),
+	client_secret: e.string().default(() => he()).optional().openapi({ description: "Client secret (which you must not make public)." }),
 	app_type: e.enum([
 		"native",
 		"spa",
@@ -455,8 +455,8 @@ var pe = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", me
 e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(he.shape).extend({ client_id: e.string() });
-var ge = e.object({
+}).extend(ge.shape).extend({ client_id: e.string() });
+var _e = e.object({
 	client_id: e.string().min(1).openapi({ description: "ID of the client." }),
 	audience: e.string().min(1).openapi({ description: "The audience (API identifier) of this client grant." }),
 	scope: e.array(e.string()).optional().openapi({ description: "Scopes allowed for this client grant." }),
@@ -469,15 +469,15 @@ var ge = e.object({
 	is_system: e.boolean().optional().openapi({ description: "If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly." }),
 	subject_type: e.enum(["client", "user"]).optional().openapi({ description: "The type of application access the client grant allows. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." }),
 	authorization_details_types: e.array(e.string()).optional().openapi({ description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." })
-}), _e = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(ge.shape).extend({
+}), ve = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(_e.shape).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(_e);
-var ve = e.enum(["iat", "rat"]), ye = e.object({
+e.array(ve);
+var ye = e.enum(["iat", "rat"]), be = e.object({
 	id: e.string(),
 	token_hash: e.string(),
-	type: ve,
+	type: ye,
 	client_id: e.string().optional(),
 	sub: e.string().optional(),
 	constraints: e.record(e.string(), e.unknown()).optional(),
@@ -488,23 +488,23 @@ e.object({
 	created_at: e.string(),
 	used_at: e.string().optional(),
 	revoked_at: e.string().optional()
-}).extend(ye.shape);
-var _ = e.object({
+}).extend(be.shape);
+var g = e.object({
 	x: e.number(),
 	y: e.number()
-}), be = /* @__PURE__ */ function(e) {
+}), xe = /* @__PURE__ */ function(e) {
 	return e.RICH_TEXT = "RICH_TEXT", e.NEXT_BUTTON = "NEXT_BUTTON", e.BACK_BUTTON = "BACK_BUTTON", e.SUBMIT_BUTTON = "SUBMIT_BUTTON", e.DIVIDER = "DIVIDER", e.TEXT = "TEXT", e.EMAIL = "EMAIL", e.PASSWORD = "PASSWORD", e.NUMBER = "NUMBER", e.PHONE = "PHONE", e.DATE = "DATE", e.CHECKBOX = "CHECKBOX", e.RADIO = "RADIO", e.SELECT = "SELECT", e.HIDDEN = "HIDDEN", e.LEGAL = "LEGAL", e;
-}({}), xe = /* @__PURE__ */ function(e) {
+}({}), Se = /* @__PURE__ */ function(e) {
 	return e.BLOCK = "BLOCK", e.FIELD = "FIELD", e;
-}({}), v = e.object({
+}({}), _ = e.object({
 	id: e.string(),
-	category: e.nativeEnum(xe),
-	type: e.nativeEnum(be)
-}), Se = v.extend({
+	category: e.nativeEnum(Se),
+	type: e.nativeEnum(xe)
+}), Ce = _.extend({
 	category: e.literal("BLOCK"),
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string() }).passthrough()
-}), Ce = v.extend({
+}), we = _.extend({
 	category: e.literal("BLOCK"),
 	type: e.union([
 		e.literal("NEXT_BUTTON"),
@@ -512,13 +512,13 @@ var _ = e.object({
 		e.literal("SUBMIT_BUTTON")
 	]),
 	config: e.object({ text: e.string() }).passthrough()
-}), we = v.extend({
+}), Te = _.extend({
 	category: e.literal("FIELD"),
 	type: e.literal("LEGAL"),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional(),
 	config: e.object({ text: e.string() }).passthrough()
-}), Te = v.extend({
+}), Ee = _.extend({
 	category: e.literal("FIELD"),
 	type: e.union([
 		e.literal("TEXT"),
@@ -538,38 +538,38 @@ var _ = e.object({
 		label: e.string().optional(),
 		placeholder: e.string().optional()
 	}).passthrough()
-}), Ee = e.object({
+}), De = e.object({
 	id: e.string(),
 	category: e.string(),
 	type: e.string()
-}).passthrough(), De = e.union([
-	Se,
+}).passthrough(), Oe = e.union([
 	Ce,
 	we,
 	Te,
-	Ee
-]), Oe = e.object({
+	Ee,
+	De
+]), ke = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: _,
+	coordinates: g,
 	alias: e.string().optional(),
 	config: e.object({
-		components: e.array(De),
+		components: e.array(Oe),
 		next_node: e.string()
 	}).passthrough()
-}), ke = e.object({
+}), Ae = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: _,
+	coordinates: g,
 	alias: e.string().optional(),
 	config: e.object({
 		flow_id: e.string(),
 		next_node: e.string()
 	})
-}), Ae = e.object({
+}), je = e.object({
 	id: e.string(),
 	type: e.literal("ACTION"),
-	coordinates: _,
+	coordinates: g,
 	alias: e.string().optional(),
 	config: e.object({
 		action_type: e.enum(["REDIRECT"]).openapi({ description: "The type of action to perform" }),
@@ -581,29 +581,29 @@ var _ = e.object({
 		custom_url: e.string().optional().openapi({ description: "Custom URL when target is 'custom'" }),
 		next_node: e.string().openapi({ description: "The next node to navigate to after action (for non-redirect actions)" })
 	}).passthrough()
-}), je = e.object({
+}), Me = e.object({
 	id: e.string(),
 	type: e.string(),
-	coordinates: _
-}).passthrough(), Me = e.union([
-	Oe,
+	coordinates: g
+}).passthrough(), Ne = e.union([
 	ke,
 	Ae,
-	je
-]), Ne = e.object({
+	je,
+	Me
+]), Pe = e.object({
 	next_node: e.string(),
-	coordinates: _
-}).passthrough(), Pe = e.object({
+	coordinates: g
+}).passthrough(), Fe = e.object({
 	resume_flow: e.boolean().optional(),
-	coordinates: _
+	coordinates: g
 }).passthrough();
 e.object({
 	id: e.string(),
 	name: e.string(),
 	languages: e.object({ primary: e.string() }).passthrough(),
-	nodes: e.array(Me),
-	start: Ne,
-	ending: Pe,
+	nodes: e.array(Ne),
+	start: Pe,
+	ending: Fe,
 	created_at: e.string(),
 	updated_at: e.string(),
 	links: e.object({
@@ -615,24 +615,24 @@ e.object({
 	created_at: !0,
 	updated_at: !0
 });
-var Fe = /* @__PURE__ */ function(e) {
+var Ie = /* @__PURE__ */ function(e) {
 	return e.TOKEN = "token", e.ID_TOKEN = "id_token", e.TOKEN_ID_TOKEN = "id_token token", e.CODE = "code", e.CODE_ID_TOKEN = "code id_token", e.CODE_TOKEN = "code token", e.CODE_ID_TOKEN_TOKEN = "code id_token token", e;
-}({}), Ie = /* @__PURE__ */ function(e) {
-	return e.QUERY = "query", e.FRAGMENT = "fragment", e.FORM_POST = "form_post", e.WEB_MESSAGE = "web_message", e.SAML_POST = "saml_post", e;
 }({}), Le = /* @__PURE__ */ function(e) {
+	return e.QUERY = "query", e.FRAGMENT = "fragment", e.FORM_POST = "form_post", e.WEB_MESSAGE = "web_message", e.SAML_POST = "saml_post", e;
+}({}), Re = /* @__PURE__ */ function(e) {
 	return e.S256 = "S256", e.Plain = "plain", e;
-}({}), Re = e.union([e.null(), e.object({
+}({}), ze = e.union([e.null(), e.object({
 	essential: e.boolean().optional(),
 	value: e.unknown().optional(),
 	values: e.array(e.unknown()).optional()
-})]).nullable(), ze = e.object({
-	userinfo: e.record(e.string(), Re).optional(),
-	id_token: e.record(e.string(), Re).optional()
-}), Be = e.object({
+})]).nullable(), Be = e.object({
+	userinfo: e.record(e.string(), ze).optional(),
+	id_token: e.record(e.string(), ze).optional()
+}), Ve = e.object({
 	client_id: e.string(),
 	act_as: e.string().optional(),
-	response_type: e.nativeEnum(Fe).optional(),
-	response_mode: e.nativeEnum(Ie).optional(),
+	response_type: e.nativeEnum(Ie).optional(),
+	response_mode: e.nativeEnum(Le).optional(),
 	redirect_uri: e.string().optional(),
 	audience: e.string().optional(),
 	organization: e.string().optional(),
@@ -640,13 +640,13 @@ var Fe = /* @__PURE__ */ function(e) {
 	nonce: e.string().optional(),
 	scope: e.string().optional(),
 	prompt: e.string().optional(),
-	code_challenge_method: e.nativeEnum(Le).optional(),
+	code_challenge_method: e.nativeEnum(Re).optional(),
 	code_challenge: e.string().optional(),
 	username: e.string().optional(),
 	ui_locales: e.string().optional(),
 	max_age: e.number().optional(),
 	acr_values: e.string().optional(),
-	claims: ze.optional(),
+	claims: Be.optional(),
 	vendor_id: e.string().optional()
 });
 e.object({
@@ -669,7 +669,7 @@ e.object({
 		"auto"
 	]).optional()
 });
-var Ve = e.enum([
+var He = e.enum([
 	"password_reset",
 	"email_verification",
 	"otp",
@@ -682,7 +682,7 @@ e.object({
 	code_id: e.string().openapi({ description: "The code that will be used in for instance an email verification flow" }),
 	login_id: e.string().openapi({ description: "The id of the login session that the code is connected to" }),
 	connection_id: e.string().optional().openapi({ description: "The connection that the code is connected to" }),
-	code_type: Ve,
+	code_type: He,
 	code_verifier: e.string().optional().openapi({ description: "The code verifier used in PKCE in outbound flows" }),
 	code_challenge: e.string().optional().openapi({ description: "The code challenge used in PKCE in outbound flows" }),
 	code_challenge_method: e.enum(["plain", "S256"]).optional().openapi({ description: "The code challenge method used in PKCE in outbound flows" }),
@@ -694,7 +694,7 @@ e.object({
 	used_at: e.string().optional(),
 	user_id: e.string().optional()
 }).extend({ created_at: e.string() });
-var He = e.object({
+var Ue = e.object({
 	kid: e.string().optional(),
 	team_id: e.string().optional(),
 	realms: e.string().optional(),
@@ -703,6 +703,9 @@ var He = e.object({
 	client_secret: e.string().optional(),
 	app_secret: e.string().optional(),
 	scope: e.string().optional(),
+	client_secret_hint: e.string().optional(),
+	app_secret_hint: e.string().optional(),
+	twilio_token_hint: e.string().optional(),
 	authorization_endpoint: e.string().optional(),
 	token_endpoint: e.string().optional(),
 	userinfo_endpoint: e.string().optional(),
@@ -742,6 +745,7 @@ var He = e.object({
 		userinfo_endpoint: e.string().optional(),
 		client_id: e.string().optional(),
 		client_secret: e.string().optional(),
+		client_secret_hint: e.string().optional(),
 		realm: e.string().optional()
 	}).optional(),
 	attributes: e.object({
@@ -810,26 +814,26 @@ var He = e.object({
 		"never_on_login"
 	]).optional()
 });
-function y(e) {
+function v(e) {
 	if (e !== null) {
-		if (Array.isArray(e)) return e.filter((e) => e !== null).map(y);
+		if (Array.isArray(e)) return e.filter((e) => e !== null).map(v);
 		if (e && typeof e == "object") {
 			let t = {};
-			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = y(r));
+			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = v(r));
 			return t;
 		}
 		return e;
 	}
 }
-var Ue = e.object({
+var We = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	display_name: e.string().optional(),
 	strategy: e.string(),
-	options: e.preprocess((e) => e === null ? {} : y(e), He).default({}),
+	options: e.preprocess((e) => e === null ? {} : v(e), Ue).default({}),
 	enabled_clients: e.array(e.string()).default([]).optional(),
-	response_type: e.nativeEnum(Fe).optional(),
-	response_mode: e.nativeEnum(Ie).optional(),
+	response_type: e.nativeEnum(Ie).optional(),
+	response_mode: e.nativeEnum(Le).optional(),
 	is_domain_connection: e.boolean().optional(),
 	show_as_button: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional(),
@@ -839,8 +843,8 @@ e.object({
 	id: e.string(),
 	created_at: e.string().transform((e) => e === null ? "" : e),
 	updated_at: e.string().transform((e) => e === null ? "" : e)
-}).extend(Ue.shape);
-var b = e.object({
+}).extend(We.shape);
+var Ge = e.object({
 	domain: e.string(),
 	custom_domain_id: e.string().optional(),
 	type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -854,7 +858,7 @@ var b = e.object({
 		"null"
 	]).optional(),
 	domain_metadata: e.record(e.string(), e.string().max(255)).optional()
-}), We = e.discriminatedUnion("name", [e.object({
+}), Ke = e.discriminatedUnion("name", [e.object({
 	name: e.literal("txt"),
 	record: e.string(),
 	domain: e.string()
@@ -862,7 +866,7 @@ var b = e.object({
 	name: e.literal("http"),
 	http_body: e.string(),
 	http_url: e.string()
-})]), Ge = b.extend({
+})]), qe = Ge.extend({
 	custom_domain_id: e.string(),
 	primary: e.boolean(),
 	status: e.enum([
@@ -872,28 +876,28 @@ var b = e.object({
 		"ready"
 	]),
 	origin_domain_name: e.string().optional(),
-	verification: e.object({ methods: e.array(We) }).optional(),
+	verification: e.object({ methods: e.array(Ke) }).optional(),
 	tls_policy: e.string().optional()
 });
-b.pick({
+Ge.pick({
 	tls_policy: !0,
 	custom_client_ip_header: !0,
 	domain_metadata: !0
-}).strict(), Ge.extend({ tenant_id: e.string() }), e.object({
+}).strict(), qe.extend({ tenant_id: e.string() }), e.object({
 	certificate: e.string().regex(/^-----BEGIN CERTIFICATE-----[\s\S]+-----END CERTIFICATE-----\s*$/, "must be PEM-encoded; include the full certificate chain in leaf-first order"),
 	private_key: e.string().regex(/-----BEGIN (RSA |EC |ENCRYPTED )?PRIVATE KEY-----[\s\S]+-----END \1PRIVATE KEY-----\s*$/, "must be a PEM-encoded private key")
 });
-var x = e.object({
+var y = e.object({
 	id: e.string(),
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0)
-}), S = x.extend({ category: e.literal("BLOCK").optional() }), Ke = S.extend({
+}), b = y.extend({ category: e.literal("BLOCK").optional() }), Je = b.extend({
 	type: e.literal("DIVIDER"),
 	config: e.object({ text: e.string().optional() }).optional()
-}), qe = S.extend({
+}), Ye = b.extend({
 	type: e.literal("HTML"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), Je = S.extend({
+}), Xe = b.extend({
 	type: e.literal("IMAGE"),
 	config: e.object({
 		src: e.string().optional(),
@@ -901,43 +905,43 @@ var x = e.object({
 		width: e.number().optional(),
 		height: e.number().optional()
 	}).optional()
-}), Ye = S.extend({
+}), Ze = b.extend({
 	type: e.literal("JUMP_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		target_step: e.string().optional()
 	})
-}), Xe = S.extend({
+}), Qe = b.extend({
 	type: e.literal("RESEND_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		resend_action: e.string().optional()
 	})
-}), Ze = S.extend({
+}), $e = b.extend({
 	type: e.literal("NEXT_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), Qe = S.extend({
+}), et = b.extend({
 	type: e.literal("PREVIOUS_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), $e = S.extend({
+}), tt = b.extend({
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), C = x.extend({
+}), x = y.extend({
 	category: e.literal("WIDGET").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), et = C.extend({
+}), nt = x.extend({
 	type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
 	config: e.object({ credential_type: e.string().optional() })
-}), tt = C.extend({
+}), rt = x.extend({
 	type: e.literal("GMAPS_ADDRESS"),
 	config: e.object({ api_key: e.string().optional() })
-}), nt = C.extend({
+}), it = x.extend({
 	type: e.literal("RECAPTCHA"),
 	config: e.object({ site_key: e.string().optional() })
-}), w = x.extend({
+}), S = y.extend({
 	category: e.literal("FIELD").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
@@ -953,10 +957,10 @@ var x = e.object({
 	})).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), rt = w.extend({
+}), at = S.extend({
 	type: e.literal("BOOLEAN"),
 	config: e.object({ default_value: e.boolean().optional() }).optional()
-}), it = w.extend({
+}), ot = S.extend({
 	type: e.literal("CARDS"),
 	config: e.object({
 		options: e.array(e.object({
@@ -967,7 +971,7 @@ var x = e.object({
 		})).optional(),
 		multi_select: e.boolean().optional()
 	}).optional()
-}), at = w.extend({
+}), st = S.extend({
 	type: e.literal("CHOICE"),
 	config: e.object({
 		options: e.array(e.object({
@@ -978,7 +982,7 @@ var x = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), ot = w.extend({
+}), ct = S.extend({
 	type: e.literal("CODE"),
 	config: e.object({
 		length: e.number().int().positive().max(100).optional(),
@@ -995,7 +999,7 @@ var x = e.object({
 		message: "default_value is longer than the configured length",
 		path: ["default_value"]
 	}).optional()
-}), st = w.extend({
+}), lt = S.extend({
 	type: e.literal("CUSTOM"),
 	config: e.object({
 		component: e.string().optional(),
@@ -1003,7 +1007,7 @@ var x = e.object({
 		schema: e.record(e.string(), e.any()).optional(),
 		code: e.string().optional()
 	})
-}), ct = w.extend({
+}), ut = S.extend({
 	type: e.literal("DATE"),
 	config: e.object({
 		format: e.string().optional(),
@@ -1011,7 +1015,7 @@ var x = e.object({
 		max: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), lt = w.extend({
+}), dt = S.extend({
 	type: e.literal("DROPDOWN"),
 	config: e.object({
 		options: e.array(e.object({
@@ -1023,7 +1027,7 @@ var x = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), ut = w.extend({
+}), ft = S.extend({
 	type: e.literal("EMAIL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1031,20 +1035,20 @@ var x = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), dt = w.extend({
+}), pt = S.extend({
 	type: e.literal("FILE"),
 	config: e.object({
 		accept: e.string().optional(),
 		max_size: e.number().optional(),
 		multiple: e.boolean().optional()
 	}).optional()
-}), ft = w.extend({
+}), mt = S.extend({
 	type: e.literal("LEGAL"),
 	config: e.object({
 		text: e.string(),
 		html: e.boolean().optional()
 	}).optional()
-}), pt = w.extend({
+}), ht = S.extend({
 	type: e.literal("NUMBER"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1053,7 +1057,7 @@ var x = e.object({
 		step: e.number().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), mt = w.extend({
+}), gt = S.extend({
 	type: e.literal("PASSWORD"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1062,13 +1066,13 @@ var x = e.object({
 		forgot_password_link: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), ht = w.extend({
+}), _t = S.extend({
 	type: e.literal("PAYMENT"),
 	config: e.object({
 		provider: e.string().optional(),
 		currency: e.string().optional()
 	}).optional()
-}), gt = w.extend({
+}), vt = S.extend({
 	type: e.literal("SOCIAL"),
 	config: e.object({
 		providers: e.array(e.string()).optional(),
@@ -1082,7 +1086,7 @@ var x = e.object({
 			last_used_label: e.string().optional()
 		})).optional()
 	}).optional()
-}), _t = w.extend({
+}), yt = S.extend({
 	type: e.literal("TEL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1090,7 +1094,7 @@ var x = e.object({
 		default_value: e.string().optional(),
 		allow_email: e.boolean().optional()
 	}).optional()
-}), vt = w.extend({
+}), bt = S.extend({
 	type: e.literal("TEXT"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1100,39 +1104,37 @@ var x = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), yt = w.extend({
+}), xt = S.extend({
 	type: e.literal("COUNTRY"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), bt = w.extend({
+}), St = S.extend({
 	type: e.literal("URL"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), xt = e.discriminatedUnion("type", [
-	Ke,
-	qe,
+}), Ct = e.discriminatedUnion("type", [
 	Je,
 	Ye,
 	Xe,
 	Ze,
 	Qe,
-	$e
-]), St = e.discriminatedUnion("type", [
+	$e,
 	et,
-	tt,
-	nt
-]), Ct = e.discriminatedUnion("type", [
+	tt
+]), wt = e.discriminatedUnion("type", [
+	nt,
 	rt,
-	it,
+	it
+]), Tt = e.discriminatedUnion("type", [
 	at,
 	ot,
-	yt,
 	st,
 	ct,
+	xt,
 	lt,
 	ut,
 	dt,
@@ -1143,11 +1145,13 @@ var x = e.object({
 	gt,
 	_t,
 	vt,
-	bt
-]), T = e.union([
-	xt,
-	St,
-	Ct
+	yt,
+	bt,
+	St
+]), C = e.union([
+	Ct,
+	wt,
+	Tt
 ]);
 new Set([
 	"BOOLEAN",
@@ -1174,22 +1178,22 @@ new Set([
 	visible: e.boolean().optional().default(!0),
 	customizations: e.record(e.string(), e.any()).optional()
 });
-var E = e.object({
+var w = e.object({
 	x: e.number(),
 	y: e.number()
-}), wt = e.object({
+}), Et = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: E,
+	coordinates: w,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
 		flow_id: e.string().max(30),
 		next_node: e.string().optional()
 	})
-}), Tt = e.object({
+}), Dt = e.object({
 	id: e.string(),
 	type: e.literal("ROUTER"),
-	coordinates: E,
+	coordinates: w,
 	alias: e.string().min(1).max(150),
 	config: e.object({
 		rules: e.array(e.object({
@@ -1200,20 +1204,20 @@ var E = e.object({
 		})),
 		fallback: e.string()
 	})
-}), Et = e.object({
+}), Ot = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: E,
+	coordinates: w,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
-		components: e.array(T),
+		components: e.array(C),
 		next_node: e.string().optional()
 	})
-}), Dt = e.discriminatedUnion("type", [
-	wt,
-	Tt,
-	Et
-]), Ot = e.object({
+}), kt = e.discriminatedUnion("type", [
+	Et,
+	Dt,
+	Ot
+]), At = e.object({
 	name: e.string().openapi({ description: "The name of the form" }),
 	messages: e.object({
 		errors: e.record(e.string(), e.any()).optional(),
@@ -1224,14 +1228,14 @@ var E = e.object({
 		default: e.string().optional()
 	}).optional(),
 	translations: e.record(e.string(), e.any()).optional(),
-	nodes: e.array(Dt).optional(),
+	nodes: e.array(kt).optional(),
 	start: e.object({
 		hidden_fields: e.array(e.object({
 			key: e.string(),
 			value: e.string()
 		})).optional(),
 		next_node: e.string().optional(),
-		coordinates: E.optional()
+		coordinates: w.optional()
 	}).optional(),
 	ending: e.object({
 		redirection: e.object({
@@ -1239,7 +1243,7 @@ var E = e.object({
 			target: e.string().optional()
 		}).optional(),
 		after_submit: e.object({ flow_id: e.string().optional() }).optional(),
-		coordinates: E.optional(),
+		coordinates: w.optional(),
 		resume_flow: e.boolean().optional()
 	}).optional(),
 	style: e.object({ css: e.string().optional() }).optional(),
@@ -1248,8 +1252,8 @@ var E = e.object({
 		sdk_src: e.string().optional()
 	}).optional()
 }).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" });
-n.extend(Ot.shape).extend({ id: e.string() });
-var kt = e.object({
+n.extend(At.shape).extend({ id: e.string() });
+var jt = e.object({
 	id: e.number().optional(),
 	text: e.string(),
 	type: e.enum([
@@ -1258,7 +1262,7 @@ var kt = e.object({
 		"success",
 		"warning"
 	])
-}), At = e.object({
+}), Mt = e.object({
 	id: e.string().optional(),
 	text: e.string(),
 	href: e.string(),
@@ -1270,12 +1274,12 @@ e.object({
 	method: e.enum(["POST", "GET"]),
 	title: e.string().optional(),
 	description: e.string().optional(),
-	components: e.array(T),
-	messages: e.array(kt).optional(),
-	links: e.array(At).optional(),
+	components: e.array(C),
+	messages: e.array(jt).optional(),
+	links: e.array(Mt).optional(),
 	footer: e.string().optional()
 });
-var D = e.enum([
+var T = e.enum([
 	"pre-user-registration",
 	"post-user-registration",
 	"post-user-login",
@@ -1283,100 +1287,95 @@ var D = e.enum([
 	"validate-registration-username",
 	"pre-user-deletion",
 	"post-user-deletion"
-]), jt = e.enum([
-	"pre-user-registration",
-	"post-user-registration",
-	"post-user-login",
-	"validate-registration-username",
-	"pre-user-deletion",
-	"post-user-deletion"
-]), Mt = e.enum([
+]), E = e.enum(["post-user-login"]), D = e.enum([
 	"post-user-login",
 	"post-user-registration",
 	"post-user-update",
 	"credentials-exchange"
-]), Nt = e.enum([
+]), O = e.enum([
 	"post-user-login",
 	"credentials-exchange",
 	"pre-user-registration",
 	"post-user-registration"
-]), Pt = e.enum(["post-user-login"]), Ft = e.enum(["impersonate"]), It = e.enum([
+]), k = e.enum(["post-user-login"]);
+T.options, E.options, D.options, O.options, k.options;
+var A = e.enum(["impersonate"]), Nt = e.enum([
 	"ensure-username",
 	"set-preferred-username",
 	"account-linking"
-]), O = {
+]), j = {
 	enabled: e.boolean().default(!1),
 	synchronous: e.boolean().default(!1),
 	priority: e.number().optional(),
 	hook_id: e.string().optional(),
 	metadata: e.record(e.string(), e.unknown()).optional()
-}, Lt = e.object({
-	...O,
-	trigger_id: D,
+}, Pt = e.object({
+	...j,
+	trigger_id: T,
 	url: e.string()
-}), Rt = e.object({
-	...O,
-	trigger_id: jt,
+}), Ft = e.object({
+	...j,
+	trigger_id: E,
 	form_id: e.string()
-}), zt = e.object({
-	...O,
-	trigger_id: Mt,
-	template_id: It
-}), Bt = e.object({
-	...O,
-	trigger_id: Nt,
+}), It = e.object({
+	...j,
+	trigger_id: D,
+	template_id: Nt
+}), Lt = e.object({
+	...j,
+	trigger_id: O,
 	code_id: e.string()
-}), Vt = e.object({
-	...O,
-	trigger_id: Pt,
-	page_id: Ft,
+}), Rt = e.object({
+	...j,
+	trigger_id: k,
+	page_id: A,
 	permission_required: e.string().optional()
 });
 e.union([
+	Pt,
+	Ft,
+	It,
 	Lt,
-	Rt,
-	zt,
-	Bt,
-	Vt
+	Rt
 ]);
-var Ht = e.object({
-	...O,
-	trigger_id: D
+var zt = e.object({
+	...j,
+	trigger_id: T
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	url: e.string()
-}), Ut = e.object({
-	...O,
-	trigger_id: jt
+}), Bt = e.object({
+	...j,
+	trigger_id: E
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	form_id: e.string()
-}), Wt = e.object({
-	...O,
-	trigger_id: Mt
+}), Vt = e.object({
+	...j,
+	trigger_id: D
 }).extend(n.shape).extend({
 	hook_id: e.string(),
-	template_id: It
-}), Gt = e.object({
-	...O,
-	trigger_id: Nt
+	template_id: Nt
+}), Ht = e.object({
+	...j,
+	trigger_id: O
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	code_id: e.string()
-}), Kt = e.object({
-	...O,
-	trigger_id: Pt
+}), Ut = e.object({
+	...j,
+	trigger_id: k
 }).extend(n.shape).extend({
 	hook_id: e.string(),
-	page_id: Ft,
+	page_id: A,
 	permission_required: e.string().optional()
 });
 e.union([
+	zt,
+	Bt,
+	Vt,
 	Ht,
-	Ut,
-	Wt,
-	Gt,
-	Kt
+	Ut
 ]), e.object({
 	code: e.string().max(1e5),
 	secrets: e.record(e.string(), e.string()).optional()
@@ -1384,11 +1383,11 @@ e.union([
 	id: e.string(),
 	tenant_id: e.string()
 }).extend(n.shape);
-var qt = e.object({ name: e.string().optional() }), Jt = e.object({ email: e.string().optional() }), Yt = e.object({
+var Wt = e.object({ name: e.string().optional() }), Gt = e.object({ email: e.string().optional() }), Kt = e.object({
 	id: e.string().optional(),
 	organization_id: e.string().max(50),
-	inviter: qt,
-	invitee: Jt,
+	inviter: Wt,
+	invitee: Gt,
 	invitation_url: e.string().url(),
 	client_id: e.string(),
 	connection_id: e.string().optional(),
@@ -1404,8 +1403,8 @@ e.object({
 	created_at: e.string().datetime(),
 	expires_at: e.string().datetime(),
 	ticket_id: e.string().optional()
-}).extend(Yt.omit({ id: !0 }).shape);
-var Xt = e.object({
+}).extend(Kt.omit({ id: !0 }).shape);
+var qt = e.object({
 	alg: e.enum([
 		"RS256",
 		"RS384",
@@ -1447,7 +1446,7 @@ var Xt = e.object({
 		message: `EC JWK is missing required member '${r}'`
 	});
 });
-e.object({ keys: e.array(Xt) }), e.object({
+e.object({ keys: e.array(qt) }), e.object({
 	issuer: e.string(),
 	authorization_endpoint: e.string(),
 	token_endpoint: e.string(),
@@ -1474,35 +1473,35 @@ e.object({ keys: e.array(Xt) }), e.object({
 	backchannel_logout_supported: e.boolean().optional(),
 	backchannel_logout_session_supported: e.boolean().optional()
 });
-var Zt = /* @__PURE__ */ function(e) {
+var Jt = /* @__PURE__ */ function(e) {
 	return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.AWAITING_CONSENT = "awaiting_consent", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
-}({}), Qt = e.nativeEnum(Zt), $t = e.object({
+}({}), Yt = e.nativeEnum(Jt), Xt = e.object({
 	strategy: e.string(),
 	strategy_type: e.string()
 });
 e.object({
 	csrf_token: e.string(),
 	auth0Client: e.string().optional(),
-	authParams: Be,
+	authParams: Ve,
 	expires_at: e.string(),
 	deleted_at: e.string().optional(),
 	ip: e.string().optional(),
 	useragent: e.string().optional(),
 	session_id: e.string().optional(),
 	authorization_url: e.string().optional(),
-	state: Qt.optional().default("pending"),
+	state: Yt.optional().default("pending"),
 	state_data: e.string().optional(),
 	failure_reason: e.string().optional(),
 	user_id: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: $t.optional(),
+	auth_strategy: Xt.optional(),
 	authenticated_at: e.string().optional()
 }).openapi({ description: "This represents a login sesion" }).extend({
 	id: e.string().openapi({ description: "This is is used as the state in the universal login" }),
 	created_at: e.string(),
 	updated_at: e.string()
 });
-var k = {
+var M = {
 	ACLS_SUMMARY: "acls_summary",
 	ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
 	API_LIMIT: "api_limit",
@@ -1662,17 +1661,17 @@ var k = {
 	WARNING_DURING_LOGIN: "w",
 	WARNING_SENDING_NOTIFICATION: "wn",
 	WARNING_USER_MANAGEMENT: "wum"
-}, en = e.string().refine((e) => Object.values(k).includes(e), { message: "Invalid log type" });
-k.ACLS_SUMMARY, k.ACTIONS_EXECUTION_FAILED, k.API_LIMIT, k.API_LIMIT_WARNING, k.APPI, k.CIBA_EXCHANGE_FAILED, k.CIBA_EXCHANGE_SUCCEEDED, k.CIBA_START_FAILED, k.CIBA_START_SUCCEEDED, k.CODE_LINK_SENT, k.CODE_SENT, k.DEPRECATION_NOTICE, k.FAILED_LOGIN, k.FAILED_BY_CONNECTOR, k.FAILED_CHANGE_EMAIL, k.FAILED_BY_CORS, k.FAILED_CROSS_ORIGIN_AUTHENTICATION, k.FAILED_CHANGE_PASSWORD, k.FAILED_POST_CHANGE_PASSWORD_HOOK, k.FAILED_CHANGE_PHONE_NUMBER, k.FAILED_CHANGE_PASSWORD_REQUEST, k.FAILED_CONNECTOR_PROVISIONING, k.FAILED_CHANGE_USERNAME, k.FAILED_DELEGATION, k.FAILED_DEVICE_ACTIVATION, k.FAILED_DEVICE_AUTHORIZATION_REQUEST, k.USER_CANCELED_DEVICE_CONFIRMATION, k.FAILED_USER_DELETION, k.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, k.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, k.FAILED_EXCHANGE_CUSTOM_TOKEN, k.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, k.FAILED_FEDERATED_LOGOUT, k.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN, k.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, k.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, k.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, k.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, k.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, k.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN, k.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, k.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, k.FAILED_HOOK, k.FAILED_IMPERSONATION, k.FAILED_INVITE_ACCEPT, k.FAILED_LOGOUT, k.FLOWS_EXECUTION_COMPLETED, k.FLOWS_EXECUTION_FAILED, k.FAILED_SENDING_NOTIFICATION, k.FORMS_SUBMISSION_FAILED, k.FORMS_SUBMISSION_SUCCEEDED, k.FAILED_LOGIN_INCORRECT_PASSWORD, k.FAILED_PUSHED_AUTHORIZATION_REQUEST, k.FAILED_POST_USER_REGISTRATION_HOOK, k.FAILED_SIGNUP, k.FAILED_SILENT_AUTH, k.FAILED_LOGIN_INVALID_EMAIL_USERNAME, k.FAILED_USERS_IMPORT, k.FAILED_VERIFICATION_EMAIL, k.FAILED_VERIFICATION_EMAIL_REQUEST, k.EMAIL_VERIFICATION_CONFIRMED, k.EMAIL_VERIFICATION_FAILED, k.MFA_AUTH_FAILED, k.MFA_AUTH_REJECTED, k.MFA_AUTH_SUCCESS, k.MFA_ENROLLMENT_COMPLETE, k.TOO_MANY_MFA_FAILURES, k.MFA_RECOVERY_FAILED, k.MFA_RECOVERY_RATE_LIMIT_EXCEED, k.MFA_RECOVERY_SUCCESS, k.MFA_EMAIL_SENT, k.EMAIL_VERIFICATION_SENT, k.EMAIL_VERIFICATION_SEND_FAILURE, k.PUSH_NOTIFICATION_SENT, k.ERROR_SENDING_MFA_PUSH_NOTIFICATION, k.MFA_SMS_SENT, k.ERROR_SENDING_MFA_SMS, k.MFA_VOICE_CALL_SUCCESS, k.MFA_VOICE_CALL_FAILED, k.SECOND_FACTOR_STARTED, k.MFA_ENROLL_STARTED, k.MFA_ENROLLMENT_FAILED, k.GUARDIAN_TENANT_UPDATE, k.UNENROLL_DEVICE_ACCOUNT, k.UPDATE_DEVICE_ACCOUNT, k.WEBAUTHN_CHALLENGE_FAILED, k.WEBAUTHN_ENROLLMENT_FAILED, k.FAILED_KMS_API_OPERATION, k.SUCCESS_KMS_API_OPERATION, k.KMS_KEY_STATE_CHANGED, k.TOO_MANY_CALLS_TO_DELEGATION, k.BLOCKED_IP_ADDRESS, k.BLOCKED_ACCOUNT_IP, k.BLOCKED_ACCOUNT_EMAIL, k.INFORMATION, k.MFA_REQUIRED, k.MANAGEMENT_API_READ_OPERATION, k.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, k.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, k.FAILED_OIDC_BACKCHANNEL_LOGOUT, k.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT, k.ORGANIZATION_MEMBER_ADDED, k.PASSKEY_CHALLENGE_FAILED, k.PASSKEY_CHALLENGE_STARTED, k.PRE_LOGIN_ASSESSMENT, k.BREACHED_PASSWORD, k.BREACHED_PASSWORD_ON_RESET, k.SUCCESS_RESOURCE_CLEANUP, k.RICH_CONSENTS_ACCESS_ERROR, k.SUCCESS_LOGIN, k.SUCCESS_API_OPERATION, k.FAILED_API_OPERATION, k.SUCCESS_CHANGE_EMAIL, k.SUCCESS_CROSS_ORIGIN_AUTHENTICATION, k.SUCCESS_CHANGE_PASSWORD, k.SUCCESS_CHANGE_PHONE_NUMBER, k.SUCCESS_CHANGE_PASSWORD_REQUEST, k.SUCCESS_CHANGE_USERNAME, k.SUCCESS_CREDENTIAL_VALIDATION, k.SUCCESS_DELEGATION, k.SUCCESS_USER_DELETION, k.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, k.SUCCESS_EXCHANGE_CUSTOM_TOKEN, k.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN, k.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, k.SUCCESS_IMPERSONATION, k.SUCCESSFULLY_ACCEPTED_USER_INVITE, k.BREACHED_PASSWORD_ON_SIGNUP, k.SUCCESS_LOGOUT, k.SUCCESS_HOOK, k.SUCCESS_PASSWORD_MIGRATION, k.SUCCESS_REVOCATION, k.SUCCESS_SIGNUP, k.FAILED_SS_SSO_OPERATION, k.INFORMATION_FROM_SS_SSO_OPERATION, k.SUCCESS_SS_SSO_OPERATION, k.SUCCESS_SILENT_AUTH, k.SUCCESSFUL_SCIM_OPERATION, k.SUCCESSFULLY_IMPORTED_USERS, k.SUCCESS_VERIFICATION_EMAIL, k.SUCCESS_VERIFICATION_EMAIL_REQUEST, k.MAX_AMOUNT_OF_AUTHENTICATORS, k.USER_LOGIN_BLOCK_RELEASED, k.FAILED_UNIVERSAL_LOGOUT, k.SUCCESSFUL_UNIVERSAL_LOGOUT, k.WARNING_DURING_LOGIN, k.WARNING_SENDING_NOTIFICATION, k.WARNING_USER_MANAGEMENT, (() => {
+}, Zt = e.string().refine((e) => Object.values(M).includes(e), { message: "Invalid log type" });
+M.ACLS_SUMMARY, M.ACTIONS_EXECUTION_FAILED, M.API_LIMIT, M.API_LIMIT_WARNING, M.APPI, M.CIBA_EXCHANGE_FAILED, M.CIBA_EXCHANGE_SUCCEEDED, M.CIBA_START_FAILED, M.CIBA_START_SUCCEEDED, M.CODE_LINK_SENT, M.CODE_SENT, M.DEPRECATION_NOTICE, M.FAILED_LOGIN, M.FAILED_BY_CONNECTOR, M.FAILED_CHANGE_EMAIL, M.FAILED_BY_CORS, M.FAILED_CROSS_ORIGIN_AUTHENTICATION, M.FAILED_CHANGE_PASSWORD, M.FAILED_POST_CHANGE_PASSWORD_HOOK, M.FAILED_CHANGE_PHONE_NUMBER, M.FAILED_CHANGE_PASSWORD_REQUEST, M.FAILED_CONNECTOR_PROVISIONING, M.FAILED_CHANGE_USERNAME, M.FAILED_DELEGATION, M.FAILED_DEVICE_ACTIVATION, M.FAILED_DEVICE_AUTHORIZATION_REQUEST, M.USER_CANCELED_DEVICE_CONFIRMATION, M.FAILED_USER_DELETION, M.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, M.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, M.FAILED_EXCHANGE_CUSTOM_TOKEN, M.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, M.FAILED_FEDERATED_LOGOUT, M.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN, M.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, M.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, M.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, M.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, M.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, M.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN, M.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, M.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, M.FAILED_HOOK, M.FAILED_IMPERSONATION, M.FAILED_INVITE_ACCEPT, M.FAILED_LOGOUT, M.FLOWS_EXECUTION_COMPLETED, M.FLOWS_EXECUTION_FAILED, M.FAILED_SENDING_NOTIFICATION, M.FORMS_SUBMISSION_FAILED, M.FORMS_SUBMISSION_SUCCEEDED, M.FAILED_LOGIN_INCORRECT_PASSWORD, M.FAILED_PUSHED_AUTHORIZATION_REQUEST, M.FAILED_POST_USER_REGISTRATION_HOOK, M.FAILED_SIGNUP, M.FAILED_SILENT_AUTH, M.FAILED_LOGIN_INVALID_EMAIL_USERNAME, M.FAILED_USERS_IMPORT, M.FAILED_VERIFICATION_EMAIL, M.FAILED_VERIFICATION_EMAIL_REQUEST, M.EMAIL_VERIFICATION_CONFIRMED, M.EMAIL_VERIFICATION_FAILED, M.MFA_AUTH_FAILED, M.MFA_AUTH_REJECTED, M.MFA_AUTH_SUCCESS, M.MFA_ENROLLMENT_COMPLETE, M.TOO_MANY_MFA_FAILURES, M.MFA_RECOVERY_FAILED, M.MFA_RECOVERY_RATE_LIMIT_EXCEED, M.MFA_RECOVERY_SUCCESS, M.MFA_EMAIL_SENT, M.EMAIL_VERIFICATION_SENT, M.EMAIL_VERIFICATION_SEND_FAILURE, M.PUSH_NOTIFICATION_SENT, M.ERROR_SENDING_MFA_PUSH_NOTIFICATION, M.MFA_SMS_SENT, M.ERROR_SENDING_MFA_SMS, M.MFA_VOICE_CALL_SUCCESS, M.MFA_VOICE_CALL_FAILED, M.SECOND_FACTOR_STARTED, M.MFA_ENROLL_STARTED, M.MFA_ENROLLMENT_FAILED, M.GUARDIAN_TENANT_UPDATE, M.UNENROLL_DEVICE_ACCOUNT, M.UPDATE_DEVICE_ACCOUNT, M.WEBAUTHN_CHALLENGE_FAILED, M.WEBAUTHN_ENROLLMENT_FAILED, M.FAILED_KMS_API_OPERATION, M.SUCCESS_KMS_API_OPERATION, M.KMS_KEY_STATE_CHANGED, M.TOO_MANY_CALLS_TO_DELEGATION, M.BLOCKED_IP_ADDRESS, M.BLOCKED_ACCOUNT_IP, M.BLOCKED_ACCOUNT_EMAIL, M.INFORMATION, M.MFA_REQUIRED, M.MANAGEMENT_API_READ_OPERATION, M.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, M.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, M.FAILED_OIDC_BACKCHANNEL_LOGOUT, M.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT, M.ORGANIZATION_MEMBER_ADDED, M.PASSKEY_CHALLENGE_FAILED, M.PASSKEY_CHALLENGE_STARTED, M.PRE_LOGIN_ASSESSMENT, M.BREACHED_PASSWORD, M.BREACHED_PASSWORD_ON_RESET, M.SUCCESS_RESOURCE_CLEANUP, M.RICH_CONSENTS_ACCESS_ERROR, M.SUCCESS_LOGIN, M.SUCCESS_API_OPERATION, M.FAILED_API_OPERATION, M.SUCCESS_CHANGE_EMAIL, M.SUCCESS_CROSS_ORIGIN_AUTHENTICATION, M.SUCCESS_CHANGE_PASSWORD, M.SUCCESS_CHANGE_PHONE_NUMBER, M.SUCCESS_CHANGE_PASSWORD_REQUEST, M.SUCCESS_CHANGE_USERNAME, M.SUCCESS_CREDENTIAL_VALIDATION, M.SUCCESS_DELEGATION, M.SUCCESS_USER_DELETION, M.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, M.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, M.SUCCESS_EXCHANGE_CUSTOM_TOKEN, M.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, M.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN, M.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, M.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, M.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, M.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, M.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN, M.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN, M.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN, M.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, M.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, M.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, M.SUCCESS_IMPERSONATION, M.SUCCESSFULLY_ACCEPTED_USER_INVITE, M.BREACHED_PASSWORD_ON_SIGNUP, M.SUCCESS_LOGOUT, M.SUCCESS_HOOK, M.SUCCESS_PASSWORD_MIGRATION, M.SUCCESS_REVOCATION, M.SUCCESS_SIGNUP, M.FAILED_SS_SSO_OPERATION, M.INFORMATION_FROM_SS_SSO_OPERATION, M.SUCCESS_SS_SSO_OPERATION, M.SUCCESS_SILENT_AUTH, M.SUCCESSFUL_SCIM_OPERATION, M.SUCCESSFULLY_IMPORTED_USERS, M.SUCCESS_VERIFICATION_EMAIL, M.SUCCESS_VERIFICATION_EMAIL_REQUEST, M.MAX_AMOUNT_OF_AUTHENTICATORS, M.USER_LOGIN_BLOCK_RELEASED, M.FAILED_UNIVERSAL_LOGOUT, M.SUCCESSFUL_UNIVERSAL_LOGOUT, M.WARNING_DURING_LOGIN, M.WARNING_SENDING_NOTIFICATION, M.WARNING_USER_MANAGEMENT, (() => {
 	let e = {};
-	for (let [t, n] of Object.entries(k)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
+	for (let [t, n] of Object.entries(M)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
 	return e;
 })();
-var tn = e.object({
+var Qt = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.object({ node: e.string().optional() }).optional()
-}), nn = e.object({
+}), $t = e.object({
 	country_code: e.string().length(2),
 	city_name: e.string(),
 	latitude: e.string(),
@@ -1681,7 +1680,7 @@ var tn = e.object({
 	continent_code: e.string()
 });
 e.object({
-	type: en,
+	type: Zt,
 	date: e.string(),
 	description: e.string().optional(),
 	ip: e.string().optional(),
@@ -1699,63 +1698,63 @@ e.object({
 	strategy: e.string().optional(),
 	strategy_type: e.string().optional(),
 	hostname: e.string().optional(),
-	auth0_client: tn.optional(),
+	auth0_client: Qt.optional(),
 	log_id: e.string().optional(),
-	location_info: nn.optional()
+	location_info: $t.optional()
 }).extend({ log_id: e.string() });
-var rn = e.enum([
+var en = e.enum([
 	"http",
 	"eventbridge",
 	"eventgrid",
 	"splunk",
 	"datadog",
 	"sumo"
-]), an = e.enum([
+]), tn = e.enum([
 	"active",
 	"paused",
 	"suspended"
-]), on = e.object({
+]), nn = e.object({
 	type: e.string(),
 	name: e.string()
 });
 e.object({
 	name: e.string(),
-	type: rn,
-	status: an.optional(),
+	type: en,
+	status: tn.optional(),
 	sink: e.record(e.string(), e.unknown()),
-	filters: e.array(on).optional(),
+	filters: e.array(nn).optional(),
 	isPriority: e.boolean().optional()
 }).extend({
 	id: e.string(),
-	status: an,
+	status: tn,
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-var sn = e.enum([
+var rn = e.enum([
 	"auth0",
 	"cognito",
 	"okta",
 	"oidc"
-]), cn = e.object({
+]), an = e.object({
 	domain: e.string(),
 	client_id: e.string(),
 	client_secret: e.string(),
 	audience: e.string().optional(),
 	scope: e.string().optional()
-}), ln = e.object({
+}), on = e.object({
 	id: e.string().optional(),
 	name: e.string(),
-	provider: sn,
+	provider: rn,
 	connection: e.string(),
 	enabled: e.boolean().default(!0),
-	credentials: cn
+	credentials: an
 });
 e.object({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(ln.shape);
-var un = e.object({
+}).extend(on.shape);
+var sn = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	admin_notification_frequency: e.array(e.string()).optional(),
@@ -1764,13 +1763,13 @@ var un = e.object({
 		"pre-user-registration": e.object({ shields: e.array(e.string()).optional() }).optional(),
 		"pre-change-password": e.object({ shields: e.array(e.string()).optional() }).optional()
 	}).optional()
-}), dn = e.object({
+}), cn = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
 	mode: e.string().optional(),
 	max_attempts: e.number().optional()
-}), fn = e.object({
+}), ln = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
@@ -1784,10 +1783,10 @@ var un = e.object({
 			rate: e.number().optional()
 		}).optional()
 	}).optional()
-}), pn = e.object({
-	breached_password_detection: un.optional(),
-	brute_force_protection: dn.optional(),
-	suspicious_ip_throttling: fn.optional()
+}), un = e.object({
+	breached_password_detection: sn.optional(),
+	brute_force_protection: cn.optional(),
+	suspicious_ip_throttling: ln.optional()
 });
 e.object({
 	id: e.string().optional(),
@@ -1800,14 +1799,14 @@ e.object({
 	created_at: e.string(),
 	updated_at: e.string()
 });
-var mn = e.object({
+var dn = e.object({
 	initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
 	initial_ip: e.string().describe("First IP address associated with this session"),
 	initial_asn: e.string().describe("First autonomous system number associated with this session"),
 	last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
 	last_ip: e.string().describe("Last IP address from which this user logged in"),
 	last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), hn = e.object({
+}), fn = e.object({
 	id: e.string(),
 	revoked_at: e.string().optional(),
 	used_at: e.string().optional(),
@@ -1815,7 +1814,7 @@ var mn = e.object({
 	expires_at: e.string().optional(),
 	login_session_id: e.string(),
 	idle_expires_at: e.string().optional(),
-	device: mn.describe("Metadata related to the device used in the session"),
+	device: dn.describe("Metadata related to the device used in the session"),
 	clients: e.array(e.string()).describe("List of client details for the session")
 });
 e.object({
@@ -1823,7 +1822,7 @@ e.object({
 	updated_at: e.string(),
 	authenticated_at: e.string(),
 	last_interaction_at: e.string()
-}).extend(hn.shape), e.object({
+}).extend(fn.shape), e.object({
 	kid: e.string().openapi({ description: "The key id of the signing key" }),
 	tenant_id: e.string().optional().openapi({ description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped." }),
 	cert: e.string().openapi({ description: "The public certificate of the signing key" }),
@@ -1840,7 +1839,7 @@ e.object({
 	connection: e.string().optional().openapi({ description: "The connection identifier associated with the key" }),
 	type: e.enum(["jwt_signing", "saml_encryption"]).openapi({ description: "The type of the signing key" })
 });
-var gn = e.object({
+var pn = e.object({
 	id: e.string().optional(),
 	audience: e.string().optional(),
 	friendly_name: e.string(),
@@ -1958,7 +1957,7 @@ var gn = e.object({
 		"shared_planetscale"
 	]).optional(),
 	d1_database_id: e.string().max(64).optional(),
-	attack_protection: pn.optional(),
+	attack_protection: un.optional(),
 	mfa: e.object({
 		policy: e.enum(["never", "always"]).default("never").optional(),
 		factors: e.object({
@@ -1989,35 +1988,35 @@ var gn = e.object({
 e.object({
 	created_at: e.string().nullable().transform((e) => e ?? ""),
 	updated_at: e.string().nullable().transform((e) => e ?? "")
-}).extend(gn.shape).extend({
+}).extend(pn.shape).extend({
 	id: e.string(),
 	is_control_plane: e.boolean().optional()
 });
-var _n = e.enum([
+var mn = e.enum([
 	"provision",
 	"seed",
 	"upgrade",
 	"backup",
 	"deprovision"
-]), vn = e.enum([
+]), hn = e.enum([
 	"pending",
 	"running",
 	"succeeded",
 	"failed",
 	"cancelled"
-]), yn = e.enum(["inline", "cloudflare-workflows"]);
+]), gn = e.enum(["inline", "cloudflare-workflows"]);
 e.object({
 	tenant_id: e.string().max(255).nullable().default(null),
 	rollout_id: e.string().max(255).nullable().optional(),
-	kind: _n,
-	engine: yn,
+	kind: mn,
+	engine: gn,
 	engine_instance_id: e.string().max(100).nullable().optional(),
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	initiated_by: e.string().max(255).nullable().optional()
 }).extend({
 	id: e.string(),
-	status: vn,
+	status: hn,
 	current_step: e.string().max(255).nullable().optional(),
 	error: e.string().nullable().optional(),
 	created_at: e.string(),
@@ -2032,7 +2031,7 @@ e.object({
 	error: !0,
 	finished_at: !0
 }).partial();
-var bn = e.enum([
+var _n = e.enum([
 	"started",
 	"succeeded",
 	"failed",
@@ -2043,18 +2042,18 @@ var bn = e.enum([
 e.object({
 	operation_id: e.string().max(255),
 	step: e.string().max(255),
-	outcome: bn,
+	outcome: _n,
 	detail: e.record(e.string(), e.unknown()).nullable().optional(),
 	attempt: e.number().int().min(1).default(1)
 }).extend({
 	id: e.string(),
 	created_at: e.string()
 });
-var xn = e.enum([
+var vn = e.enum([
 	"upgrade",
 	"reseed",
 	"backup"
-]), Sn = e.enum([
+]), yn = e.enum([
 	"pending",
 	"canary",
 	"rolling",
@@ -2063,7 +2062,7 @@ var xn = e.enum([
 	"failed"
 ]);
 e.object({
-	kind: xn,
+	kind: vn,
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	wave_size: e.number().int().min(1).default(10),
@@ -2072,7 +2071,7 @@ e.object({
 	initiated_by: e.string().max(255).nullable().optional()
 }).extend({
 	id: e.string(),
-	status: Sn,
+	status: yn,
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
@@ -2094,7 +2093,7 @@ e.object({
 	code: e.string(),
 	state: e.string().optional()
 });
-var Cn = e.object({
+var bn = e.object({
 	button_border_radius: e.number(),
 	button_border_weight: e.number(),
 	buttons_style: e.enum([
@@ -2112,7 +2111,7 @@ var Cn = e.object({
 	show_widget_shadow: e.boolean(),
 	widget_border_weight: e.number(),
 	widget_corner_radius: e.number()
-}), wn = e.object({
+}), xn = e.object({
 	base_focus_color: e.string(),
 	base_hover_color: e.string(),
 	body_text: e.string(),
@@ -2136,20 +2135,20 @@ var Cn = e.object({
 	success: e.string(),
 	widget_background: e.string(),
 	widget_border: e.string()
-}), A = e.object({
+}), N = e.object({
 	bold: e.boolean(),
 	size: e.number()
-}), Tn = e.object({
-	body_text: A,
-	buttons_text: A,
+}), Sn = e.object({
+	body_text: N,
+	buttons_text: N,
 	font_url: e.string(),
-	input_labels: A,
-	links: A,
+	input_labels: N,
+	links: N,
 	links_style: e.enum(["normal", "underlined"]),
 	reference_text_size: e.number(),
-	subtitle: A,
-	title: A
-}), En = e.object({
+	subtitle: N,
+	title: N
+}), Cn = e.object({
 	background_color: e.string(),
 	background_image_url: e.string(),
 	page_layout: e.enum([
@@ -2162,7 +2161,7 @@ var Cn = e.object({
 		"chip",
 		"none"
 	]).optional()
-}), Dn = e.object({
+}), wn = e.object({
 	header_text_alignment: e.enum([
 		"center",
 		"left",
@@ -2179,12 +2178,12 @@ var Cn = e.object({
 	social_buttons_layout: e.enum(["bottom", "top"])
 });
 e.object({
-	borders: Cn,
-	colors: wn,
+	borders: bn,
+	colors: xn,
 	displayName: e.string(),
-	fonts: Tn,
-	page_background: En,
-	widget: Dn
+	fonts: Sn,
+	page_background: Cn,
+	widget: wn
 }).extend({ themeId: e.string() }), e.object({
 	universal_login_experience: e.enum(["new", "classic"]).default("new"),
 	identifier_first: e.boolean().default(!0),
@@ -2192,42 +2191,42 @@ e.object({
 	show_last_used_connection: e.boolean().default(!1),
 	webauthn_platform_first_factor: e.boolean()
 });
-var j = e.object({
+var Tn = e.object({
 	hosts: e.array(e.string()).optional(),
 	methods: e.array(e.string()).optional(),
 	path: e.string().default("/*"),
 	headers: e.record(e.string(), e.string()).optional(),
 	query: e.record(e.string(), e.string()).optional()
-}), M = e.object({
+}), En = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
-}), N = e.object({
+}), P = e.object({
 	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
-	match: j,
-	handlers: e.array(M).min(1)
-}), On = N.extend({
+	match: Tn,
+	handlers: e.array(En).min(1)
+}), Dn = P.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), kn = N.partial().omit({
+}), On = P.partial().omit({
 	id: !0,
 	custom_domain_id: !0
-}), An = e.object({
+}), kn = e.object({
 	scim: e.string(),
 	auth0: e.string()
-}), jn = e.object({
+}), An = e.object({
 	connection_id: e.string(),
 	user_id_attribute: e.string().default("externalId"),
-	mapping: e.array(An).default([])
+	mapping: e.array(kn).default([])
 });
 e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(jn.shape);
-var Mn = e.object({
+}).extend(An.shape);
+var jn = e.object({
 	token_id: e.string(),
 	connection_id: e.string(),
 	token_hash: e.string(),
@@ -2237,20 +2236,20 @@ var Mn = e.object({
 e.object({
 	created_at: e.string(),
 	last_used_at: e.string().optional()
-}).extend(Mn.shape);
-var Nn = e.object({
+}).extend(jn.shape);
+var Mn = e.object({
 	connection_id: e.string(),
 	external_id: e.string(),
 	user_id: e.string()
 });
-e.object({ created_at: e.string() }).extend(Nn.shape), e.object({
+e.object({ created_at: e.string() }).extend(Mn.shape), e.object({
 	name: e.string(),
 	enabled: e.boolean().optional().default(!0),
 	default_from_address: e.string().optional(),
 	credentials: e.record(e.string(), e.unknown()),
 	settings: e.object({}).optional()
 });
-var Pn = e.enum([
+var Nn = e.enum([
 	"verify_email",
 	"verify_email_by_code",
 	"reset_email",
@@ -2265,7 +2264,7 @@ var Pn = e.enum([
 	"user_invitation"
 ]);
 e.object({
-	template: Pn,
+	template: Nn,
 	body: e.string(),
 	from: e.string(),
 	subject: e.string(),
@@ -2282,7 +2281,7 @@ e.object({
 	expires_at: e.string().optional(),
 	idle_expires_at: e.string().optional(),
 	last_exchanged_at: e.string().optional(),
-	device: mn,
+	device: dn,
 	resource_servers: e.array(e.object({
 		audience: e.string(),
 		scopes: e.string()
@@ -2303,10 +2302,10 @@ e.object({
 	name: e.string(),
 	options: e.object({})
 });
-var Fn = e.object({
+var Pn = e.object({
 	value: e.string(),
 	description: e.string().optional()
-}), In = e.object({
+}), Fn = e.object({
 	token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
 	enforce_policies: e.boolean().optional(),
 	allow_skipping_userinfo: e.boolean().optional(),
@@ -2314,11 +2313,11 @@ var Fn = e.object({
 	persist_client_authorization: e.boolean().optional(),
 	enable_introspection_endpoint: e.boolean().optional(),
 	mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
-}), Ln = e.object({
+}), In = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	identifier: e.string(),
-	scopes: e.array(Fn).optional(),
+	scopes: e.array(Pn).optional(),
 	signing_alg: e.string().optional(),
 	signing_secret: e.string().optional(),
 	token_lifetime: e.number().default(86400),
@@ -2326,20 +2325,20 @@ var Fn = e.object({
 	skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
 	allow_offline_access: e.boolean().optional(),
 	verificationKey: e.string().optional(),
-	options: In.optional(),
+	options: Fn.optional(),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional()
 }).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Ln);
-var Rn = e.object({
+e.array(In);
+var Ln = e.object({
 	role_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
 }).extend({ created_at: e.string() });
-e.array(Rn), e.object({
+e.array(Ln), e.object({
 	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
 	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
 	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
@@ -2352,7 +2351,7 @@ e.array(Rn), e.object({
 	failed_logins: e.array(e.string()).optional(),
 	last_password_reset: e.string().optional()
 });
-var zn = e.object({
+var Rn = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
@@ -2361,8 +2360,8 @@ var zn = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(zn);
-var Bn = e.object({
+e.array(Rn);
+var zn = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -2371,8 +2370,8 @@ var Bn = e.object({
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
 });
-e.array(Bn);
-var Vn = e.object({
+e.array(zn);
+var Bn = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
@@ -2380,8 +2379,8 @@ var Vn = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(Vn);
-var Hn = e.object({
+e.array(Bn);
+var Vn = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
@@ -2392,19 +2391,19 @@ var Hn = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Hn);
-var Un = e.object({
+e.array(Vn);
+var Hn = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), Wn = e.object({
+}).optional(), Un = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), Gn = e.object({ client_credentials: e.object({
+}), Wn = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
@@ -2413,15 +2412,15 @@ e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: Un,
+	branding: Hn,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(Wn).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: Gn
+	enabled_connections: e.array(Un).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: Wn
 }).extend(n.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
 });
-var Kn = e.object({
+var Gn = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
@@ -2434,7 +2433,7 @@ var Kn = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Kn), e.object({
+e.array(Gn), e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
 }).extend(n.shape).extend({ id: e.string() }), e.object({
@@ -2573,11 +2572,22 @@ e.array(Kn), e.object({
 	"passwordless",
 	"enterprise"
 ]);
-var qn = e.object({
+var Kn = e.object({
 	cohort: e.string(),
 	sessions: e.number(),
 	active: e.array(e.number())
 });
+e.object({
+	interval: e.literal("week"),
+	from: e.string(),
+	to: e.string(),
+	cohorts: e.array(Kn)
+});
+var qn = e.object({
+	cohort: e.string(),
+	tokens: e.number(),
+	active: e.array(e.number())
+});
 e.object({
 	interval: e.literal("week"),
 	from: e.string(),
@@ -2619,7 +2629,7 @@ var Qn = e.enum([
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), P = e.object({
+]), $n = e.object({
 	user_id: e.string(),
 	type: Qn,
 	phone_number: e.string().optional(),
@@ -2655,7 +2665,7 @@ function F(t, n) {
 		path: ["public_key"]
 	}));
 }
-P.superRefine(F), P.extend({
+$n.superRefine(F), $n.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
@@ -2666,12 +2676,12 @@ P.superRefine(F), P.extend({
 });
 //#endregion
 //#region src/data-plane/cache.ts
-var $n = 1e4;
+var er = 1e4;
 function I(e, t, n) {
 	let r = typeof t == "number" ? {
 		freshTtlMs: t,
 		maxEntries: n
-	} : t, i = r.freshTtlMs, a = r.staleTtlMs ?? 0, o = r.staleIfErrorTtlMs ?? 0, s = r.negativeTtlMs ?? i, c = r.maxEntries ?? $n, l = r.waitUntil, u = /* @__PURE__ */ new Map();
+	} : t, i = r.freshTtlMs, a = r.staleTtlMs ?? 0, o = r.staleIfErrorTtlMs ?? 0, s = r.negativeTtlMs ?? i, c = r.maxEntries ?? er, l = r.waitUntil, u = /* @__PURE__ */ new Map();
 	function d(e) {
 		for (let [t, n] of u) n.stale_if_error_until <= e && n.stale_until <= e && !n.refreshing && u.delete(t);
 		for (; u.size >= c;) {
@@ -2754,27 +2764,27 @@ function R(e) {
 //#endregion
 //#region src/data-plane/handlers/util.ts
 var z = "__authhero_proxy_request__", B = "__authhero_proxy_tenant_id__", V = "__authhero_proxy_custom_domain_id__", H = "__authhero_proxy_domain__", U = "x-authhero-proxy-mutability-probe";
-function er(e, t) {
+function tr(e, t) {
 	e.set(z, t);
 }
 function W(e) {
 	return e.get(z) ?? e.req.raw;
 }
-function tr(e, t) {
+function nr(e, t) {
 	e.set(B, t.tenant_id), e.set(V, t.custom_domain_id), e.set(H, t.domain);
 }
-function nr(e) {
+function rr(e) {
 	return e.get(B);
 }
-function rr(e) {
+function ir(e) {
 	return e.get(V);
 }
-function ir(e) {
+function ar(e) {
 	return e.get(H);
 }
-function ar(e, t) {
+function or(e, t) {
 	let n = W(e), r = new Headers(n.headers);
-	t(r), er(e, new Request(n, { headers: r }));
+	t(r), tr(e, new Request(n, { headers: r }));
 }
 function G(e) {
 	let t = e.res;
@@ -2791,7 +2801,7 @@ function G(e) {
 }
 //#endregion
 //#region src/data-plane/handlers/cors.ts
-var or = e.object({
+var sr = e.object({
 	origins: e.array(e.string()).optional(),
 	allow_credentials: e.boolean().optional(),
 	allow_headers: e.array(e.string()).optional(),
@@ -2799,44 +2809,44 @@ var or = e.object({
 	expose_headers: e.array(e.string()).optional(),
 	max_age: e.number().int().optional()
 }).refine((e) => !(e.allow_credentials && e.origins?.includes("*")), { message: "Cannot use wildcard origin (*) with allow_credentials" });
-function sr(e, t) {
+function cr(e, t) {
 	let n = new Headers(), r = e.origins ?? ["*"], i = r.includes("*");
 	return i && !e.allow_credentials ? n.set("Access-Control-Allow-Origin", "*") : t && (i || r.includes(t)) && (n.set("Access-Control-Allow-Origin", t), n.append("Vary", "Origin")), e.allow_credentials && n.set("Access-Control-Allow-Credentials", "true"), e.allow_methods?.length && n.set("Access-Control-Allow-Methods", e.allow_methods.join(", ")), e.allow_headers?.length && n.set("Access-Control-Allow-Headers", e.allow_headers.join(", ")), e.expose_headers?.length && n.set("Access-Control-Expose-Headers", e.expose_headers.join(", ")), e.max_age !== void 0 && n.set("Access-Control-Max-Age", String(e.max_age)), n;
 }
-var cr = R({
+var lr = R({
 	type: "cors",
-	optionsSchema: or,
+	optionsSchema: sr,
 	build(e) {
 		return async (t, n) => {
 			let r = t.req.header("origin") ?? null;
 			if (t.req.method === "OPTIONS" && r !== null && t.req.header("access-control-request-method") !== void 0) {
-				let t = sr(e, r);
+				let t = cr(e, r);
 				return new Response(null, {
 					status: 204,
 					headers: t
 				});
 			}
 			await n();
-			let i = sr(e, r);
+			let i = cr(e, r);
 			G(t), i.forEach((e, n) => {
 				n.toLowerCase() === "vary" ? t.res.headers.append(n, e) : t.res.headers.set(n, e);
 			});
 		};
 	}
-}), lr = e.object({
+}), ur = e.object({
 	username: e.string(),
 	password: e.string(),
 	realm: e.string().optional()
 });
-function ur(e, t) {
+function dr(e, t) {
 	let n = `${e}:${t}`;
 	return typeof btoa == "function" ? btoa(n) : Buffer.from(n, "utf-8").toString("base64");
 }
-var dr = R({
+var fr = R({
 	type: "basic_auth",
-	optionsSchema: lr,
+	optionsSchema: ur,
 	build(e) {
-		let t = ur(e.username, e.password), n = (e.realm ?? "Restricted").replace(/["\\\r\n]/g, "");
+		let t = dr(e.username, e.password), n = (e.realm ?? "Restricted").replace(/["\\\r\n]/g, "");
 		return async (e, r) => {
 			let i = e.req.header("authorization");
 			if (i) {
@@ -2852,7 +2862,7 @@ var dr = R({
 			});
 		};
 	}
-}), fr = R({
+}), pr = R({
 	type: "headers",
 	optionsSchema: e.object({
 		request: e.record(e.string(), e.string()).optional(),
@@ -2862,12 +2872,12 @@ var dr = R({
 	}),
 	build(e) {
 		return async (t, n) => {
-			if ((e.request || e.remove_request) && ar(t, (t) => {
+			if ((e.request || e.remove_request) && or(t, (t) => {
 				if (e.remove_request?.forEach((e) => t.delete(e)), e.request) for (let [n, r] of Object.entries(e.request)) t.set(n, r);
 			}), await n(), (e.response || e.remove_response) && (G(t), e.remove_response?.forEach((e) => t.res.headers.delete(e)), e.response)) for (let [n, r] of Object.entries(e.response)) t.res.headers.set(n, r);
 		};
 	}
-}), pr = R({
+}), mr = R({
 	type: "cache",
 	optionsSchema: e.object({ ttl_seconds: e.number().int().positive() }),
 	build(e) {
@@ -2878,7 +2888,7 @@ var dr = R({
 			}
 		};
 	}
-}), mr = R({
+}), hr = R({
 	type: "forwarded_headers",
 	optionsSchema: e.object({
 		client_ip_header: e.string().default("cf-connecting-ip"),
@@ -2888,40 +2898,40 @@ var dr = R({
 	build(e) {
 		return async (t, n) => {
 			let r = new URL(t.req.url);
-			ar(t, (n) => {
+			or(t, (n) => {
 				n.set("x-forwarded-host", r.host), n.set("x-forwarded-proto", r.protocol.replace(":", "")), e.set_x_original_url && n.set("x-original-url", t.req.url);
 				let i = n.get(e.client_ip_header), a = (n.get("x-forwarded-for") ?? "").split(",").map((e) => e.trim()).filter(Boolean), o = i ?? a[a.length - 1] ?? "127.0.0.1", s = a.length === 0 || a[a.length - 1] !== o, c = a.length ? s ? `${a.join(", ")}, ${o}` : a.join(", ") : o;
 				n.set("x-forwarded-for", c), e.set_x_real_ip && n.set("x-real-ip", o);
 			}), await n();
 		};
 	}
-}), hr = e.object({ upstream_host: e.string().optional() });
-function gr(e) {
+}), gr = e.object({ upstream_host: e.string().optional() });
+function _r(e) {
 	return e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function _r(e) {
+function vr(e) {
 	if (typeof e.getSetCookie == "function") return e.getSetCookie();
 	let t = [];
 	return e.forEach((e, n) => {
 		n.toLowerCase() === "set-cookie" && t.push(e);
 	}), t;
 }
-var vr = R({
+var yr = R({
 	type: "rewrite_cookies",
-	optionsSchema: hr,
+	optionsSchema: gr,
 	build(e) {
 		return async (t, n) => {
 			await n();
 			let r = new URL(t.req.url).hostname, i = e.upstream_host ?? t.get("__proxy_upstream_host__");
 			if (!i) return;
-			let a = _r(t.res.headers);
+			let a = vr(t.res.headers);
 			if (a.length === 0) return;
-			let o = gr(i), s = RegExp(`(?:^|;\\s*)Domain=\\.?${o}(?=;|$)`, "i");
+			let o = _r(i), s = RegExp(`(?:^|;\\s*)Domain=\\.?${o}(?=;|$)`, "i");
 			G(t), t.res.headers.delete("set-cookie");
 			for (let e of a) t.res.headers.append("set-cookie", e.replace(s, `Domain=${r}`));
 		};
 	}
-}), yr = R({
+}), br = R({
 	type: "rewrite_location",
 	optionsSchema: e.object({ upstream_origin: e.string().optional() }),
 	build(e) {
@@ -2944,14 +2954,14 @@ var vr = R({
 			G(t), t.res.headers.set("location", c);
 		};
 	}
-}), br = class extends Error {
+}), xr = class extends Error {
 	ms;
 	constructor(e, t) {
 		super(`${t ?? "Operation"} timed out after ${e}ms`), this.name = "TimeoutError", this.ms = e;
 	}
 };
 function K(e) {
-	return e instanceof br ? !0 : e instanceof Error ? e.name === "AbortError" || e.name === "TimeoutError" : !1;
+	return e instanceof xr ? !0 : e instanceof Error ? e.name === "AbortError" || e.name === "TimeoutError" : !1;
 }
 function q(e, t) {
 	let n = new AbortController(), r = setTimeout(() => n.abort(), e);
@@ -2959,7 +2969,7 @@ function q(e, t) {
 }
 function J(e, t, n) {
 	let r, i = new Promise((e, i) => {
-		r = setTimeout(() => i(new br(t, n)), t);
+		r = setTimeout(() => i(new xr(t, n)), t);
 	});
 	return Promise.race([e, i]).finally(() => {
 		r && clearTimeout(r);
@@ -2967,7 +2977,7 @@ function J(e, t, n) {
 }
 //#endregion
 //#region src/data-plane/handlers/http.ts
-var xr = new Set([
+var Sr = new Set([
 	"connection",
 	"keep-alive",
 	"proxy-authenticate",
@@ -2976,24 +2986,24 @@ var xr = new Set([
 	"trailers",
 	"transfer-encoding",
 	"upgrade"
-]), Sr = 3e4, Cr = e.object({
+]), Cr = 3e4, wr = e.object({
 	upstream_url: e.string(),
 	preserve_host: e.boolean().default(!1),
 	timeout_ms: e.number().int().positive().optional()
 });
-function wr(e, t) {
+function Tr(e, t) {
 	return e === "" || e === "/" ? t : `${e.endsWith("/") ? e.slice(0, -1) : e}${t.startsWith("/") ? t : `/${t}`}`;
 }
-function Tr(e) {
+function Er(e) {
 	return e !== "GET" && e !== "HEAD";
 }
-function Er(e, t) {
+function Dr(e, t) {
 	let n = new URL(t.url), r = new URL(e.upstream_url);
-	r.pathname = wr(r.pathname, n.pathname), r.search = n.search;
+	r.pathname = Tr(r.pathname, n.pathname), r.search = n.search;
 	let i = new Headers(t.headers);
-	for (let e of xr) i.delete(e);
+	for (let e of Sr) i.delete(e);
 	e.preserve_host || i.set("host", r.host), i.has("x-forwarded-host") || i.set("x-forwarded-host", n.host), i.has("x-forwarded-proto") || i.set("x-forwarded-proto", n.protocol.replace(":", ""));
-	let a = Tr(t.method) ? t.body : void 0, o = {
+	let a = Er(t.method) ? t.body : void 0, o = {
 		method: t.method,
 		headers: i,
 		body: a,
@@ -3004,13 +3014,13 @@ function Er(e, t) {
 		init: o
 	};
 }
-var Dr = R({
+var Or = R({
 	type: "http",
-	optionsSchema: Cr,
+	optionsSchema: wr,
 	build(e) {
-		let t = e.timeout_ms ?? Sr;
+		let t = e.timeout_ms ?? Cr;
 		return async (n) => {
-			let { target: r, init: i } = Er(e, W(n));
+			let { target: r, init: i } = Dr(e, W(n));
 			n.set("__proxy_upstream_host__", r.hostname), n.set("__proxy_upstream_origin__", `${r.protocol}//${r.host}`);
 			try {
 				return await q(t, (e) => fetch(r.toString(), {
@@ -3022,24 +3032,24 @@ var Dr = R({
 			}
 		};
 	}
-}), Or = 3e4, kr = e.object({
+}), kr = 3e4, Ar = e.object({
 	binding: e.string(),
 	upstream_url: e.string().optional(),
 	preserve_host: e.boolean().default(!0),
 	timeout_ms: e.number().int().positive().optional()
 });
-function Ar(e) {
+function jr(e) {
 	return typeof e == "object" && !!e && typeof e.fetch == "function";
 }
-var jr = R({
+var Mr = R({
 	type: "service_binding",
-	optionsSchema: kr,
+	optionsSchema: Ar,
 	build(e, t) {
 		let n = t.bindings[e.binding];
-		if (!Ar(n)) throw Error(`Service binding "${e.binding}" is not configured or is not a Fetcher`);
-		let r = e.upstream_url ?? `https://${e.binding}.binding.invalid/`, i = e.timeout_ms ?? Or;
+		if (!jr(n)) throw Error(`Service binding "${e.binding}" is not configured or is not a Fetcher`);
+		let r = e.upstream_url ?? `https://${e.binding}.binding.invalid/`, i = e.timeout_ms ?? kr;
 		return async (t) => {
-			let a = W(t), { target: o, init: s } = Er({
+			let a = W(t), { target: o, init: s } = Dr({
 				upstream_url: r,
 				preserve_host: e.preserve_host
 			}, a);
@@ -3054,34 +3064,34 @@ var jr = R({
 			}
 		};
 	}
-}), Mr = 3e4, Nr = e.object({
+}), Nr = 3e4, Pr = e.object({
 	binding: e.string(),
 	script_name: e.string(),
 	cpu_ms: e.number().int().positive().optional(),
 	subrequests: e.number().int().positive().optional(),
 	timeout_ms: e.number().int().positive().optional()
 });
-function Pr(e) {
+function Fr(e) {
 	return typeof e == "object" && !!e && typeof e.get == "function";
 }
 var Y = /\{(tenant_id|custom_domain_id|domain|host)\}/g;
-function Fr(e) {
+function Ir(e) {
 	return Y.lastIndex = 0, Y.test(e);
 }
-var Ir = R({
+var Lr = R({
 	type: "dispatch_namespace",
-	optionsSchema: Nr,
+	optionsSchema: Pr,
 	build(e, t) {
 		let n = t.bindings[e.binding];
-		if (!Pr(n)) throw Error(`Dispatch namespace binding "${e.binding}" is not configured or does not expose .get()`);
-		let r = Fr(e.script_name), i = e.timeout_ms ?? Mr, a = e.cpu_ms || e.subrequests ? { limits: {
+		if (!Fr(n)) throw Error(`Dispatch namespace binding "${e.binding}" is not configured or does not expose .get()`);
+		let r = Ir(e.script_name), i = e.timeout_ms ?? Nr, a = e.cpu_ms || e.subrequests ? { limits: {
 			...e.cpu_ms ? { cpuMs: e.cpu_ms } : {},
 			...e.subrequests ? { subrequests: e.subrequests } : {}
 		} } : void 0;
 		return async (t) => {
 			let o = e.script_name;
 			if (r) {
-				let n = nr(t), r = rr(t), i = ir(t), a = t.req.header("host") ?? t.req.header("x-forwarded-host") ?? "";
+				let n = rr(t), r = ir(t), i = ar(t), a = t.req.header("host") ?? t.req.header("x-forwarded-host") ?? "";
 				if (o = o.replace(Y, (e, t) => {
 					switch (t) {
 						case "tenant_id": return n ?? "";
@@ -3104,7 +3114,7 @@ var Ir = R({
 			}
 		};
 	}
-}), Lr = R({
+}), Rr = R({
 	type: "redirect",
 	optionsSchema: e.object({
 		upstream_url: e.string().refine((e) => {
@@ -3133,7 +3143,7 @@ var Ir = R({
 			});
 		};
 	}
-}), Rr = R({
+}), zr = R({
 	type: "static",
 	optionsSchema: e.object({
 		status: e.number().int().default(200),
@@ -3153,15 +3163,15 @@ var Ir = R({
 });
 //#endregion
 //#region src/data-plane/handlers/index.ts
-function zr(e) {
-	e.add(cr).add(dr).add(fr).add(pr).add(mr).add(vr).add(yr).add(Dr).add(jr).add(Ir).add(Lr).add(Rr);
+function Br(e) {
+	e.add(lr).add(fr).add(pr).add(mr).add(hr).add(yr).add(br).add(Or).add(Mr).add(Lr).add(Rr).add(zr);
 }
 //#endregion
 //#region src/data-plane/matcher.ts
-function Br(e) {
+function Vr(e) {
 	return [...e].sort((e, t) => e.priority === t.priority ? e.created_at.localeCompare(t.created_at) : e.priority - t.priority);
 }
-function Vr(e, t) {
+function Hr(e, t) {
 	let n = e.toLowerCase(), r = t.toLowerCase();
 	if (n === r) return !0;
 	if (n.startsWith("*.")) {
@@ -3170,13 +3180,13 @@ function Vr(e, t) {
 	}
 	return !1;
 }
-function Hr(e, t) {
-	return !e || e.length === 0 ? !0 : e.some((e) => Vr(e, t));
+function Ur(e, t) {
+	return !e || e.length === 0 ? !0 : e.some((e) => Hr(e, t));
 }
 function X(e) {
 	let t = (e.headers ? Object.entries(e.headers) : []).map(([e, t]) => [e.toLowerCase(), new RegExp(t)]), n = (e.query ? Object.entries(e.query) : []).map(([e, t]) => [e, new RegExp(t)]), r = e.hosts;
 	return async (e, i) => {
-		if (r && !Hr(r, e.req.header("host") ?? "")) return new Response("No matching route", { status: 404 });
+		if (r && !Ur(r, e.req.header("host") ?? "")) return new Response("No matching route", { status: 404 });
 		for (let [n, r] of t) {
 			let t = e.req.header(n);
 			if (t === void 0 || !r.test(t)) return new Response("No matching route", { status: 404 });
@@ -3193,7 +3203,7 @@ function X(e) {
 }
 //#endregion
 //#region src/data-plane/compile.ts
-var Ur = [
+var Wr = [
 	"GET",
 	"POST",
 	"PUT",
@@ -3205,34 +3215,34 @@ var Ur = [
 function Z(e, n, r, i) {
 	let a = new t();
 	r && a.use("*", async (e, t) => {
-		tr(e, r), await t();
+		nr(e, r), await t();
 	});
-	let o = Br(e);
+	let o = Vr(e);
 	for (let e of o) {
 		let t = [];
 		t.push(X(e.match));
 		for (let r of e.handlers) t.push(n.build(r.type, r.options));
-		let r = e.match.methods?.length ? e.match.methods.map((e) => e.toUpperCase()) : Ur, i = e.match.path || "/*";
+		let r = e.match.methods?.length ? e.match.methods.map((e) => e.toUpperCase()) : Wr, i = e.match.path || "/*";
 		a.on(r, [i], ...t);
 	}
-	return i && i.length > 0 ? a.on(Ur, ["*"], ...i) : a.all("*", (e) => e.text("No matching route", 404)), a.onError((e, t) => {
+	return i && i.length > 0 ? a.on(Wr, ["*"], ...i) : a.all("*", (e) => e.text("No matching route", 404)), a.onError((e, t) => {
 		let n = K(e);
 		return t.text(n ? "Upstream timeout" : "Bad gateway", n ? 504 : 502, { "x-authhero-proxy-error": n ? "handler_timeout" : "handler_failed" });
 	}), a;
 }
 //#endregion
 //#region src/data-plane/router.ts
-var Wr = 1e4;
-function Gr(e) {
+var Gr = 1e4;
+function Kr(e) {
 	return e.resolver ? e.resolver : e.cache ? I(e.data, e.cache) : I(e.data, e.cacheTtlMs ?? 3e4);
 }
-function Kr(e) {
+function qr(e) {
 	if (e.registry) return e.registry;
 	let t = new L(e.bindings ?? {});
-	return zr(t), t;
+	return Br(t), t;
 }
 function Q(e) {
-	let t = Gr(e), n = Kr(e), r = /* @__PURE__ */ new WeakMap(), i = e.resolveHostTimeoutMs ?? Wr, a = e.defaultHandlers && e.defaultHandlers.length > 0 ? e.defaultHandlers.map((e) => n.build(e.type, e.options)) : void 0, o = a ? Z([], n, void 0, a) : void 0;
+	let t = Kr(e), n = qr(e), r = /* @__PURE__ */ new WeakMap(), i = e.resolveHostTimeoutMs ?? Gr, a = e.defaultHandlers && e.defaultHandlers.length > 0 ? e.defaultHandlers.map((e) => n.build(e.type, e.options)) : void 0, o = a ? Z([], n, void 0, a) : void 0;
 	return async (e) => {
 		let s = e.req.header("host") ?? e.req.header("x-forwarded-host");
 		if (!s) return e.text("Missing host", 400);
@@ -3250,13 +3260,13 @@ function Q(e) {
 		}
 	};
 }
-function qr(e) {
+function Jr(e) {
 	let n = new t();
 	return n.all("*", Q(e)), n;
 }
 //#endregion
 //#region src/app.ts
-function Jr(e) {
+function Yr(e) {
 	let n = new t();
 	return n.all("*", Q({
 		data: e.data,
@@ -3274,17 +3284,17 @@ function Jr(e) {
 }
 //#endregion
 //#region src/data-plane/cache-api-cache.ts
-var Yr = 1e3, Xr = 1e3;
-function Zr(e, t) {
+var Xr = 1e3, Zr = 1e3;
+function Qr(e, t) {
 	return new Request(`https://proxy-cache.internal/${encodeURIComponent(e)}/hosts/${encodeURIComponent(t.toLowerCase())}`, { method: "GET" });
 }
-function Qr() {
+function $r() {
 	return globalThis.caches?.default;
 }
-function $r(e) {
-	let t = e.cache ?? Qr();
+function ei(e) {
+	let t = e.cache ?? $r();
 	if (!t) return e.upstream;
-	let n = t, r = e.namespace ?? "authhero-proxy", i = e.cacheTtlSeconds ?? 60, a = e.negativeCacheTtlSeconds ?? 10, o = e.waitUntil, s = e.cacheReadTimeoutMs ?? Yr, c = e.cacheWriteTimeoutMs ?? Xr;
+	let n = t, r = e.namespace ?? "authhero-proxy", i = e.cacheTtlSeconds ?? 60, a = e.negativeCacheTtlSeconds ?? 10, o = e.waitUntil, s = e.cacheReadTimeoutMs ?? Xr, c = e.cacheWriteTimeoutMs ?? Zr;
 	async function l(e) {
 		try {
 			return await J(Promise.resolve(n.match(e)), s, "cache.match");
@@ -3293,7 +3303,7 @@ function $r(e) {
 		}
 	}
 	return { async resolveHost(t) {
-		let s = Zr(r, t), u = await l(s);
+		let s = Qr(r, t), u = await l(s);
 		if (u) try {
 			return (await u.json()).value;
 		} catch {}
@@ -3304,14 +3314,14 @@ function $r(e) {
 		return o ? o(m) : await m, d;
 	} };
 }
-function ei(e, t) {
-	return Zr(e, t);
+function ti(e, t) {
+	return Qr(e, t);
 }
 //#endregion
 //#region src/data-plane/cache-adapter-cache.ts
-var ti = 1e3, ni = 1e3;
-function ri(e) {
-	let { upstream: t, cache: n, freshTtlMs: r, staleTtlMs: i = 0, staleIfErrorTtlMs: a = 0, negativeTtlMs: o = r, keyPrefix: s = "authhero-proxy-host", waitUntil: c, cacheReadTimeoutMs: l = ti, cacheWriteTimeoutMs: u = ni } = e, d = /* @__PURE__ */ new Map();
+var ni = 1e3, ri = 1e3;
+function ii(e) {
+	let { upstream: t, cache: n, freshTtlMs: r, staleTtlMs: i = 0, staleIfErrorTtlMs: a = 0, negativeTtlMs: o = r, keyPrefix: s = "authhero-proxy-host", waitUntil: c, cacheReadTimeoutMs: l = ni, cacheWriteTimeoutMs: u = ri } = e, d = /* @__PURE__ */ new Map();
 	function f(e) {
 		return `${s}:${e.toLowerCase()}`;
 	}
@@ -3364,7 +3374,7 @@ function ri(e) {
 		}
 	} };
 }
-function ii(e, t) {
+function ai(e, t) {
 	return `${e}:${t.toLowerCase()}`;
 }
 //#endregion
@@ -3372,7 +3382,7 @@ function ii(e, t) {
 function $() {
 	throw Error("Static proxy adapter is read-only; configure routes at init time");
 }
-function ai(e, t, n, r, i, a) {
+function oi(e, t, n, r, i, a) {
 	return {
 		id: e.id ?? `${n}:${t}`,
 		tenant_id: r,
@@ -3387,10 +3397,10 @@ function ai(e, t, n, r, i, a) {
 		updated_at: e.updated_at ?? a
 	};
 }
-function oi(e) {
+function si(e) {
 	let t = (/* @__PURE__ */ new Date()).toISOString(), n = e.defaultTenantId ?? "static", r = /* @__PURE__ */ new Map();
 	for (let [i, a] of Object.entries(e.hosts)) {
-		let e = i.toLowerCase(), o = Array.isArray(a) ? { routes: a } : a, s = o.tenant_id ?? n, c = o.custom_domain_id ?? e, l = o.routes.map((n, r) => ai(n, r, e, s, c, t)).sort((e, t) => e.priority - t.priority);
+		let e = i.toLowerCase(), o = Array.isArray(a) ? { routes: a } : a, s = o.tenant_id ?? n, c = o.custom_domain_id ?? e, l = o.routes.map((n, r) => oi(n, r, e, s, c, t)).sort((e, t) => e.priority - t.priority);
 		r.set(e, {
 			tenant_id: s,
 			custom_domain_id: c,
@@ -3434,7 +3444,7 @@ function oi(e) {
 		}
 	};
 }
-function si(e, t = {}) {
+function ci(e, t = {}) {
 	return {
 		priority: t.priority,
 		match: { path: t.path ?? "/*" },
@@ -3449,10 +3459,10 @@ function si(e, t = {}) {
 }
 //#endregion
 //#region src/constants.ts
-var ci = "proxy:resolve_host";
+var li = "proxy:resolve_host";
 //#endregion
 //#region src/http-adapter/index.ts
-function li() {
+function ui() {
 	let e = () => {
 		throw Error("HTTP proxy adapter does not expose write access to proxy_routes; mutate via the control-plane management API");
 	};
@@ -3474,7 +3484,7 @@ function li() {
 		}
 	};
 }
-function ui(e) {
+function di(e) {
 	let t = e.fetch ?? fetch, n = e.baseUrl.replace(/\/+$/, ""), r = e.resolveHostPath ?? "/api/v2/proxy/control-plane/hosts/", i = e.audience ?? `${n}/api/v2/`, a = e.scope ?? "proxy:resolve_host", o = e.tokenRefreshSkewSeconds ?? 60, s = e.timeoutMs ?? 2500;
 	function c(e) {
 		let t = new AbortController(), n = setTimeout(() => t.abort(), s);
@@ -3507,7 +3517,7 @@ function ui(e) {
 		}), u);
 	}
 	return {
-		proxyRoutes: li(),
+		proxyRoutes: ui(),
 		async resolveHost(e) {
 			let i = await f(), a = `${n}${r}${encodeURIComponent(e.toLowerCase())}`, o = await c((e) => t(a, {
 				headers: { authorization: `Bearer ${i}` },
@@ -3521,7 +3531,7 @@ function ui(e) {
 }
 //#endregion
 //#region src/http-adapter/service-binding-fetch.ts
-function di(e) {
+function fi(e) {
 	return (t, n) => {
 		let r = t instanceof Request && n === void 0 ? t : new Request(t, n);
 		return e.fetch(r);
@@ -3529,11 +3539,11 @@ function di(e) {
 }
 //#endregion
 //#region src/kv-adapter/index.ts
-var fi = "authhero-proxy-host:";
-function pi(e, t) {
+var pi = "authhero-proxy-host:";
+function mi(e, t) {
 	return `${e}${t.toLowerCase()}`;
 }
-function mi() {
+function hi() {
 	let e = () => {
 		throw Error("KV proxy adapter does not expose write access to proxy_routes; mutate via the control-plane management API");
 	};
@@ -3555,15 +3565,15 @@ function mi() {
 		}
 	};
 }
-function hi(e) {
-	let { kv: t, keyPrefix: n = fi, timeoutMs: r } = e;
+function gi(e) {
+	let { kv: t, keyPrefix: n = pi, timeoutMs: r } = e;
 	return {
-		proxyRoutes: mi(),
+		proxyRoutes: hi(),
 		async resolveHost(e) {
-			let i = pi(n, e), a = t.get(i, "json");
+			let i = mi(n, e), a = t.get(i, "json");
 			return (r && r > 0 ? await J(a, r, "kv.get") : await a) ?? null;
 		}
 	};
 }
 //#endregion
-export { fi as DEFAULT_KV_HOST_KEY_PREFIX, L as HandlerRegistry, ci as PROXY_RESOLVE_HOST_SCOPE, dr as basicAuthHandler, ii as buildCacheAdapterKey, ei as buildCacheApiKey, pi as buildKvHostKey, X as buildMatchFilter, pr as cacheHandler, Z as compileHostApp, cr as corsHandler, ri as createCacheAdapterHostCache, $r as createCacheApiHostCache, ui as createHttpProxyAdapter, I as createInMemoryHostCache, hi as createKvProxyAdapter, Jr as createProxyApp, Q as createProxyDataPlaneHandler, qr as createProxyDataPlaneRouter, di as createServiceBindingFetch, oi as createStaticProxyAdapter, R as defineHandler, Ir as dispatchNamespaceHandler, mr as forwardedHeadersHandler, M as handlerConfigSchema, fr as headersHandler, Dr as httpHandler, si as httpRoute, j as matchSchema, Hr as matchesAnyHost, Vr as matchesHost, N as proxyRouteInsertSchema, On as proxyRouteSchema, kn as proxyRouteUpdateSchema, Lr as redirectHandler, zr as registerBuiltinHandlers, vr as rewriteCookiesHandler, yr as rewriteLocationHandler, jr as serviceBindingHandler, Br as sortRoutes, Rr as staticHandler };
+export { pi as DEFAULT_KV_HOST_KEY_PREFIX, L as HandlerRegistry, li as PROXY_RESOLVE_HOST_SCOPE, fr as basicAuthHandler, ai as buildCacheAdapterKey, ti as buildCacheApiKey, mi as buildKvHostKey, X as buildMatchFilter, mr as cacheHandler, Z as compileHostApp, lr as corsHandler, ii as createCacheAdapterHostCache, ei as createCacheApiHostCache, di as createHttpProxyAdapter, I as createInMemoryHostCache, gi as createKvProxyAdapter, Yr as createProxyApp, Q as createProxyDataPlaneHandler, Jr as createProxyDataPlaneRouter, fi as createServiceBindingFetch, si as createStaticProxyAdapter, R as defineHandler, Lr as dispatchNamespaceHandler, hr as forwardedHeadersHandler, En as handlerConfigSchema, pr as headersHandler, Or as httpHandler, ci as httpRoute, Tn as matchSchema, Ur as matchesAnyHost, Hr as matchesHost, P as proxyRouteInsertSchema, Dn as proxyRouteSchema, On as proxyRouteUpdateSchema, Rr as redirectHandler, Br as registerBuiltinHandlers, yr as rewriteCookiesHandler, br as rewriteLocationHandler, Mr as serviceBindingHandler, Vr as sortRoutes, zr as staticHandler };