@authhero/proxy 0.11.11 → 0.11.13

package/dist/proxy.mjs

@@ -306,7 +306,7 @@ var pe = e.object({
 	region: e.string().optional(),
 	postal_code: e.string().optional(),
 	country: e.string().optional()
-}).optional(), ge = e.object({
+}).optional(), y = e.object({
 	email: e.string().transform((e) => e.toLowerCase()).optional(),
 	username: e.string().refine((e) => !e.includes("@"), { message: "Usernames must not contain \"@\". Use the email field for email addresses." }).optional(),
 	phone_number: e.string().optional(),
@@ -331,7 +331,7 @@ var pe = e.object({
 	zoneinfo: e.string().optional(),
 	address: he
 });
-ge.extend({
+y.extend({
 	email_verified: e.boolean().default(!1),
 	verify_email: e.boolean().optional(),
 	last_ip: e.string().optional(),
@@ -353,23 +353,23 @@ ge.extend({
 	email: e.string().optional(),
 	login_count: e.number().default(0),
 	identities: e.array(me).optional()
-}).omit({ registration_completed_at: !0 }), ge.extend({
+}).omit({ registration_completed_at: !0 }), y.extend({
 	login_count: e.number(),
 	multifactor: e.array(e.string()).optional(),
 	last_ip: e.string().optional(),
 	last_login: e.string().optional(),
 	user_id: e.string()
 }).catchall(e.any());
-var _e = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", ve = (e = 21) => {
+var ge = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", _e = (e = 21) => {
 	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
-	for (; e--;) t += _e[n[e] & 63];
+	for (; e--;) t += ge[n[e] & 63];
 	return t;
-}, ye = e.object({
+}, ve = e.object({
 	client_id: e.string().optional().openapi({ description: "ID of this client. Generated server-side if omitted (Auth0 behavior)." }),
 	name: e.string().min(1).openapi({ description: "Name of this client (min length: 1 character, does not allow < or >)." }),
 	description: e.string().max(140).optional().openapi({ description: "Free text description of this client (max length: 140 characters)." }),
 	global: e.boolean().default(!1).openapi({ description: "Whether this is your global 'All Applications' client representing legacy tenant settings (true) or a regular client (false)." }),
-	client_secret: e.string().default(() => ve()).optional().openapi({ description: "Client secret (which you must not make public)." }),
+	client_secret: e.string().default(() => _e()).optional().openapi({ description: "Client secret (which you must not make public)." }),
 	app_type: e.enum([
 		"native",
 		"spa",
@@ -487,8 +487,8 @@ var _e = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", ve
 e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(ye.shape).extend({ client_id: e.string() });
-var be = e.object({
+}).extend(ve.shape).extend({ client_id: e.string() });
+var ye = e.object({
 	client_id: e.string().min(1).openapi({ description: "ID of the client." }),
 	audience: e.string().min(1).openapi({ description: "The audience (API identifier) of this client grant." }),
 	scope: e.array(e.string()).optional().openapi({ description: "Scopes allowed for this client grant." }),
@@ -501,15 +501,15 @@ var be = e.object({
 	is_system: e.boolean().optional().openapi({ description: "If enabled, this grant is a special grant created by Auth0. It cannot be modified or deleted directly." }),
 	subject_type: e.enum(["client", "user"]).optional().openapi({ description: "The type of application access the client grant allows. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." }),
 	authorization_details_types: e.array(e.string()).optional().openapi({ description: "Types of authorization_details allowed for this client grant. Use of this field is subject to the applicable Free Trial terms in Okta's Master Subscription Agreement." })
-}), xe = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(be.shape).extend({
+}), be = e.object({ id: e.string().openapi({ description: "ID of the client grant." }) }).extend(ye.shape).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(xe);
-var Se = e.enum(["iat", "rat"]), Ce = e.object({
+e.array(be);
+var xe = e.enum(["iat", "rat"]), Se = e.object({
 	id: e.string(),
 	token_hash: e.string(),
-	type: Se,
+	type: xe,
 	client_id: e.string().optional(),
 	sub: e.string().optional(),
 	constraints: e.record(e.string(), e.unknown()).optional(),
@@ -520,23 +520,23 @@ e.object({
 	created_at: e.string(),
 	used_at: e.string().optional(),
 	revoked_at: e.string().optional()
-}).extend(Ce.shape);
-var y = e.object({
+}).extend(Se.shape);
+var b = e.object({
 	x: e.number(),
 	y: e.number()
-}), we = /* @__PURE__ */ function(e) {
+}), Ce = /* @__PURE__ */ function(e) {
 	return e.RICH_TEXT = "RICH_TEXT", e.NEXT_BUTTON = "NEXT_BUTTON", e.BACK_BUTTON = "BACK_BUTTON", e.SUBMIT_BUTTON = "SUBMIT_BUTTON", e.DIVIDER = "DIVIDER", e.TEXT = "TEXT", e.EMAIL = "EMAIL", e.PASSWORD = "PASSWORD", e.NUMBER = "NUMBER", e.PHONE = "PHONE", e.DATE = "DATE", e.CHECKBOX = "CHECKBOX", e.RADIO = "RADIO", e.SELECT = "SELECT", e.HIDDEN = "HIDDEN", e.LEGAL = "LEGAL", e;
-}({}), Te = /* @__PURE__ */ function(e) {
+}({}), we = /* @__PURE__ */ function(e) {
 	return e.BLOCK = "BLOCK", e.FIELD = "FIELD", e;
-}({}), b = e.object({
+}({}), x = e.object({
 	id: e.string(),
-	category: e.nativeEnum(Te),
-	type: e.nativeEnum(we)
-}), Ee = b.extend({
+	category: e.nativeEnum(we),
+	type: e.nativeEnum(Ce)
+}), Te = x.extend({
 	category: e.literal("BLOCK"),
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string() }).passthrough()
-}), De = b.extend({
+}), Ee = x.extend({
 	category: e.literal("BLOCK"),
 	type: e.union([
 		e.literal("NEXT_BUTTON"),
@@ -544,13 +544,13 @@ var y = e.object({
 		e.literal("SUBMIT_BUTTON")
 	]),
 	config: e.object({ text: e.string() }).passthrough()
-}), Oe = b.extend({
+}), De = x.extend({
 	category: e.literal("FIELD"),
 	type: e.literal("LEGAL"),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional(),
 	config: e.object({ text: e.string() }).passthrough()
-}), ke = b.extend({
+}), Oe = x.extend({
 	category: e.literal("FIELD"),
 	type: e.union([
 		e.literal("TEXT"),
@@ -570,38 +570,38 @@ var y = e.object({
 		label: e.string().optional(),
 		placeholder: e.string().optional()
 	}).passthrough()
-}), Ae = e.object({
+}), ke = e.object({
 	id: e.string(),
 	category: e.string(),
 	type: e.string()
-}).passthrough(), je = e.union([
+}).passthrough(), Ae = e.union([
+	Te,
 	Ee,
 	De,
 	Oe,
-	ke,
-	Ae
-]), Me = e.object({
+	ke
+]), je = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: y,
+	coordinates: b,
 	alias: e.string().optional(),
 	config: e.object({
-		components: e.array(je),
+		components: e.array(Ae),
 		next_node: e.string()
 	}).passthrough()
-}), Ne = e.object({
+}), Me = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: y,
+	coordinates: b,
 	alias: e.string().optional(),
 	config: e.object({
 		flow_id: e.string(),
 		next_node: e.string()
 	})
-}), Pe = e.object({
+}), Ne = e.object({
 	id: e.string(),
 	type: e.literal("ACTION"),
-	coordinates: y,
+	coordinates: b,
 	alias: e.string().optional(),
 	config: e.object({
 		action_type: e.enum(["REDIRECT"]).openapi({ description: "The type of action to perform" }),
@@ -613,29 +613,29 @@ var y = e.object({
 		custom_url: e.string().optional().openapi({ description: "Custom URL when target is 'custom'" }),
 		next_node: e.string().openapi({ description: "The next node to navigate to after action (for non-redirect actions)" })
 	}).passthrough()
-}), Fe = e.object({
+}), Pe = e.object({
 	id: e.string(),
 	type: e.string(),
-	coordinates: y
-}).passthrough(), Ie = e.union([
+	coordinates: b
+}).passthrough(), Fe = e.union([
+	je,
 	Me,
 	Ne,
-	Pe,
-	Fe
-]), Le = e.object({
+	Pe
+]), Ie = e.object({
 	next_node: e.string(),
-	coordinates: y
-}).passthrough(), Re = e.object({
+	coordinates: b
+}).passthrough(), Le = e.object({
 	resume_flow: e.boolean().optional(),
-	coordinates: y
+	coordinates: b
 }).passthrough();
 e.object({
 	id: e.string(),
 	name: e.string(),
 	languages: e.object({ primary: e.string() }).passthrough(),
-	nodes: e.array(Ie),
-	start: Le,
-	ending: Re,
+	nodes: e.array(Fe),
+	start: Ie,
+	ending: Le,
 	created_at: e.string(),
 	updated_at: e.string(),
 	links: e.object({
@@ -647,24 +647,24 @@ e.object({
 	created_at: !0,
 	updated_at: !0
 });
-var ze = /* @__PURE__ */ function(e) {
+var Re = /* @__PURE__ */ function(e) {
 	return e.TOKEN = "token", e.ID_TOKEN = "id_token", e.TOKEN_ID_TOKEN = "id_token token", e.CODE = "code", e.CODE_ID_TOKEN = "code id_token", e.CODE_TOKEN = "code token", e.CODE_ID_TOKEN_TOKEN = "code id_token token", e;
-}({}), Be = /* @__PURE__ */ function(e) {
+}({}), ze = /* @__PURE__ */ function(e) {
 	return e.QUERY = "query", e.FRAGMENT = "fragment", e.FORM_POST = "form_post", e.WEB_MESSAGE = "web_message", e.SAML_POST = "saml_post", e;
-}({}), Ve = /* @__PURE__ */ function(e) {
+}({}), Be = /* @__PURE__ */ function(e) {
 	return e.S256 = "S256", e.Plain = "plain", e;
-}({}), He = e.union([e.null(), e.object({
+}({}), Ve = e.union([e.null(), e.object({
 	essential: e.boolean().optional(),
 	value: e.unknown().optional(),
 	values: e.array(e.unknown()).optional()
-})]).nullable(), Ue = e.object({
-	userinfo: e.record(e.string(), He).optional(),
-	id_token: e.record(e.string(), He).optional()
-}), We = e.object({
+})]).nullable(), He = e.object({
+	userinfo: e.record(e.string(), Ve).optional(),
+	id_token: e.record(e.string(), Ve).optional()
+}), Ue = e.object({
 	client_id: e.string(),
 	act_as: e.string().optional(),
-	response_type: e.nativeEnum(ze).optional(),
-	response_mode: e.nativeEnum(Be).optional(),
+	response_type: e.nativeEnum(Re).optional(),
+	response_mode: e.nativeEnum(ze).optional(),
 	redirect_uri: e.string().optional(),
 	audience: e.string().optional(),
 	organization: e.string().optional(),
@@ -672,13 +672,13 @@ var ze = /* @__PURE__ */ function(e) {
 	nonce: e.string().optional(),
 	scope: e.string().optional(),
 	prompt: e.string().optional(),
-	code_challenge_method: e.nativeEnum(Ve).optional(),
+	code_challenge_method: e.nativeEnum(Be).optional(),
 	code_challenge: e.string().optional(),
 	username: e.string().optional(),
 	ui_locales: e.string().optional(),
 	max_age: e.number().optional(),
 	acr_values: e.string().optional(),
-	claims: Ue.optional(),
+	claims: He.optional(),
 	vendor_id: e.string().optional()
 });
 e.object({
@@ -702,7 +702,7 @@ e.object({
 		"auto"
 	]).optional()
 });
-var Ge = e.enum([
+var We = e.enum([
 	"password_reset",
 	"email_verification",
 	"otp",
@@ -717,7 +717,7 @@ e.object({
 	code_id: e.string().openapi({ description: "The code that will be used in for instance an email verification flow" }),
 	login_id: e.string().optional().openapi({ description: "The id of the login session that the code is connected to" }),
 	connection_id: e.string().optional().openapi({ description: "The connection that the code is connected to" }),
-	code_type: Ge,
+	code_type: We,
 	code_verifier: e.string().optional().openapi({ description: "The code verifier used in PKCE in outbound flows" }),
 	code_challenge: e.string().optional().openapi({ description: "The code challenge used in PKCE in outbound flows" }),
 	code_challenge_method: e.enum(["plain", "S256"]).optional().openapi({ description: "The code challenge method used in PKCE in outbound flows" }),
@@ -747,7 +747,7 @@ e.object({
 	interval: e.number().int().positive(),
 	version: e.number().int().nonnegative()
 });
-var Ke = e.object({
+var Ge = e.object({
 	kid: e.string().optional(),
 	team_id: e.string().optional(),
 	realms: e.string().optional(),
@@ -867,26 +867,26 @@ var Ke = e.object({
 		"never_on_login"
 	]).optional()
 });
-function x(e) {
+function S(e) {
 	if (e !== null) {
-		if (Array.isArray(e)) return e.filter((e) => e !== null).map(x);
+		if (Array.isArray(e)) return e.filter((e) => e !== null).map(S);
 		if (e && typeof e == "object") {
 			let t = {};
-			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = x(r));
+			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = S(r));
 			return t;
 		}
 		return e;
 	}
 }
-var qe = e.object({
+var Ke = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	display_name: e.string().optional(),
 	strategy: e.string(),
-	options: e.preprocess((e) => e === null ? {} : x(e), Ke).default({}),
+	options: e.preprocess((e) => e === null ? {} : S(e), Ge).default({}),
 	enabled_clients: e.array(e.string()).default([]).optional(),
-	response_type: e.nativeEnum(ze).optional(),
-	response_mode: e.nativeEnum(Be).optional(),
+	response_type: e.nativeEnum(Re).optional(),
+	response_mode: e.nativeEnum(ze).optional(),
 	is_domain_connection: e.boolean().optional(),
 	show_as_button: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional(),
@@ -897,8 +897,8 @@ e.object({
 	id: e.string(),
 	created_at: e.string().transform((e) => e === null ? "" : e),
 	updated_at: e.string().transform((e) => e === null ? "" : e)
-}).extend(qe.shape);
-var Je = e.object({
+}).extend(Ke.shape);
+var qe = e.object({
 	domain: e.string(),
 	custom_domain_id: e.string().optional(),
 	type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -912,7 +912,7 @@ var Je = e.object({
 		"null"
 	]).optional(),
 	domain_metadata: e.record(e.string(), e.string().max(255)).optional()
-}), Ye = e.discriminatedUnion("name", [e.object({
+}), Je = e.discriminatedUnion("name", [e.object({
 	name: e.literal("txt"),
 	record: e.string(),
 	domain: e.string()
@@ -920,7 +920,7 @@ var Je = e.object({
 	name: e.literal("http"),
 	http_body: e.string(),
 	http_url: e.string()
-})]), Xe = Je.extend({
+})]), Ye = qe.extend({
 	custom_domain_id: e.string(),
 	primary: e.boolean(),
 	status: e.enum([
@@ -930,28 +930,28 @@ var Je = e.object({
 		"ready"
 	]),
 	origin_domain_name: e.string().optional(),
-	verification: e.object({ methods: e.array(Ye) }).optional(),
+	verification: e.object({ methods: e.array(Je) }).optional(),
 	tls_policy: e.string().optional()
 });
-Je.pick({
+qe.pick({
 	tls_policy: !0,
 	custom_client_ip_header: !0,
 	domain_metadata: !0
-}).strict(), Xe.extend({ tenant_id: e.string() }), e.object({
+}).strict(), Ye.extend({ tenant_id: e.string() }), e.object({
 	certificate: e.string().regex(/^-----BEGIN CERTIFICATE-----[\s\S]+-----END CERTIFICATE-----\s*$/, "must be PEM-encoded; include the full certificate chain in leaf-first order"),
 	private_key: e.string().regex(/-----BEGIN (RSA |EC |ENCRYPTED )?PRIVATE KEY-----[\s\S]+-----END \1PRIVATE KEY-----\s*$/, "must be a PEM-encoded private key")
 });
-var S = e.object({
+var C = e.object({
 	id: e.string(),
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0)
-}), C = S.extend({ category: e.literal("BLOCK").optional() }), Ze = C.extend({
+}), w = C.extend({ category: e.literal("BLOCK").optional() }), Xe = w.extend({
 	type: e.literal("DIVIDER"),
 	config: e.object({ text: e.string().optional() }).optional()
-}), Qe = C.extend({
+}), Ze = w.extend({
 	type: e.literal("HTML"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), $e = C.extend({
+}), Qe = w.extend({
 	type: e.literal("IMAGE"),
 	config: e.object({
 		src: e.string().optional(),
@@ -959,47 +959,47 @@ var S = e.object({
 		width: e.number().optional(),
 		height: e.number().optional()
 	}).optional()
-}), et = C.extend({
+}), $e = w.extend({
 	type: e.literal("JUMP_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		target_step: e.string().optional()
 	})
-}), tt = C.extend({
+}), et = w.extend({
 	type: e.literal("RESEND_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		resend_action: e.string().optional()
 	})
-}), nt = C.extend({
+}), tt = w.extend({
 	type: e.literal("NEXT_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		variant: e.enum(["primary", "secondary"]).optional(),
 		skip_validation: e.boolean().optional()
 	})
-}), rt = C.extend({
+}), nt = w.extend({
 	type: e.literal("PREVIOUS_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), it = C.extend({
+}), rt = w.extend({
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), w = S.extend({
+}), T = C.extend({
 	category: e.literal("WIDGET").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), at = w.extend({
+}), it = T.extend({
 	type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
 	config: e.object({ credential_type: e.string().optional() })
-}), ot = w.extend({
+}), at = T.extend({
 	type: e.literal("GMAPS_ADDRESS"),
 	config: e.object({ api_key: e.string().optional() })
-}), st = w.extend({
+}), ot = T.extend({
 	type: e.literal("RECAPTCHA"),
 	config: e.object({ site_key: e.string().optional() })
-}), T = S.extend({
+}), E = C.extend({
 	category: e.literal("FIELD").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
@@ -1015,10 +1015,10 @@ var S = e.object({
 	})).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), ct = T.extend({
+}), st = E.extend({
 	type: e.literal("BOOLEAN"),
 	config: e.object({ default_value: e.boolean().optional() }).optional()
-}), lt = T.extend({
+}), ct = E.extend({
 	type: e.literal("CARDS"),
 	config: e.object({
 		options: e.array(e.object({
@@ -1029,7 +1029,7 @@ var S = e.object({
 		})).optional(),
 		multi_select: e.boolean().optional()
 	}).optional()
-}), ut = T.extend({
+}), lt = E.extend({
 	type: e.literal("CHOICE"),
 	config: e.object({
 		options: e.array(e.object({
@@ -1040,7 +1040,7 @@ var S = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), dt = T.extend({
+}), ut = E.extend({
 	type: e.literal("CODE"),
 	config: e.object({
 		length: e.number().int().positive().max(100).optional(),
@@ -1057,7 +1057,7 @@ var S = e.object({
 		message: "default_value is longer than the configured length",
 		path: ["default_value"]
 	}).optional()
-}), ft = T.extend({
+}), dt = E.extend({
 	type: e.literal("CUSTOM"),
 	config: e.object({
 		component: e.string().optional(),
@@ -1065,7 +1065,7 @@ var S = e.object({
 		schema: e.record(e.string(), e.any()).optional(),
 		code: e.string().optional()
 	})
-}), pt = T.extend({
+}), ft = E.extend({
 	type: e.literal("DATE"),
 	config: e.object({
 		format: e.string().optional(),
@@ -1073,7 +1073,7 @@ var S = e.object({
 		max: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), mt = T.extend({
+}), pt = E.extend({
 	type: e.literal("DROPDOWN"),
 	config: e.object({
 		options: e.array(e.object({
@@ -1085,7 +1085,7 @@ var S = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), ht = T.extend({
+}), mt = E.extend({
 	type: e.literal("EMAIL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1093,20 +1093,20 @@ var S = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), gt = T.extend({
+}), ht = E.extend({
 	type: e.literal("FILE"),
 	config: e.object({
 		accept: e.string().optional(),
 		max_size: e.number().optional(),
 		multiple: e.boolean().optional()
 	}).optional()
-}), _t = T.extend({
+}), gt = E.extend({
 	type: e.literal("LEGAL"),
 	config: e.object({
 		text: e.string(),
 		html: e.boolean().optional()
 	}).optional()
-}), vt = T.extend({
+}), _t = E.extend({
 	type: e.literal("NUMBER"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1115,7 +1115,7 @@ var S = e.object({
 		step: e.number().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), yt = T.extend({
+}), vt = E.extend({
 	type: e.literal("PASSWORD"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1124,13 +1124,13 @@ var S = e.object({
 		forgot_password_link: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), bt = T.extend({
+}), yt = E.extend({
 	type: e.literal("PAYMENT"),
 	config: e.object({
 		provider: e.string().optional(),
 		currency: e.string().optional()
 	}).optional()
-}), xt = T.extend({
+}), bt = E.extend({
 	type: e.literal("SOCIAL"),
 	config: e.object({
 		providers: e.array(e.string()).optional(),
@@ -1145,7 +1145,7 @@ var S = e.object({
 			last_used_label: e.string().optional()
 		})).optional()
 	}).optional()
-}), St = T.extend({
+}), xt = E.extend({
 	type: e.literal("TEL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1153,7 +1153,7 @@ var S = e.object({
 		default_value: e.string().optional(),
 		allow_email: e.boolean().optional()
 	}).optional()
-}), Ct = T.extend({
+}), St = E.extend({
 	type: e.literal("TEXT"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1163,37 +1163,38 @@ var S = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), wt = T.extend({
+}), Ct = E.extend({
 	type: e.literal("COUNTRY"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Tt = T.extend({
+}), wt = E.extend({
 	type: e.literal("URL"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Et = e.discriminatedUnion("type", [
+}), Tt = e.discriminatedUnion("type", [
+	Xe,
 	Ze,
 	Qe,
 	$e,
 	et,
 	tt,
 	nt,
-	rt,
-	it
-]), Dt = e.discriminatedUnion("type", [
+	rt
+]), Et = e.discriminatedUnion("type", [
+	it,
 	at,
-	ot,
-	st
-]), Ot = e.discriminatedUnion("type", [
+	ot
+]), Dt = e.discriminatedUnion("type", [
+	st,
 	ct,
 	lt,
 	ut,
+	Ct,
 	dt,
-	wt,
 	ft,
 	pt,
 	mt,
@@ -1205,12 +1206,11 @@ var S = e.object({
 	bt,
 	xt,
 	St,
-	Ct,
-	Tt
-]), E = e.union([
+	wt
+]), Ot = e.union([
+	Tt,
 	Et,
-	Dt,
-	Ot
+	Dt
 ]);
 new Set([
 	"BOOLEAN",
@@ -1269,7 +1269,7 @@ var D = e.object({
 	coordinates: D,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
-		components: e.array(E),
+		components: e.array(Ot),
 		next_node: e.string().optional()
 	})
 }), Mt = e.discriminatedUnion("type", [
@@ -1340,7 +1340,7 @@ e.object({
 	method: e.enum(["POST", "GET"]),
 	title: e.string().optional(),
 	description: e.string().optional(),
-	components: e.array(E),
+	components: e.array(Ot),
 	messages: e.array(Pt).optional(),
 	links: e.array(Ft).optional(),
 	partials: It.optional(),
@@ -1557,7 +1557,7 @@ var en = /* @__PURE__ */ function(e) {
 e.object({
 	csrf_token: e.string(),
 	auth0Client: e.string().optional(),
-	authParams: We,
+	authParams: Ue,
 	expires_at: e.string(),
 	deleted_at: e.string().optional(),
 	ip: e.string().optional(),
@@ -1884,6 +1884,10 @@ var _n = e.object({
 	last_ip: e.string().describe("Last IP address from which this user logged in"),
 	last_asn: e.string().describe("Last autonomous system number from which this user logged in")
 }), vn = e.object({
+	name: e.string().describe("Authentication method name, e.g. \"mfa\" for a completed second factor"),
+	timestamp: e.string().describe("When the method was completed (ISO 8601)"),
+	type: e.string().optional().describe("For \"mfa\": the authentication method type used, e.g. \"totp\", \"phone\", \"passkey\"")
+}), yn = e.object({ methods: e.array(vn) }), bn = e.object({
 	id: e.string(),
 	revoked_at: e.string().optional(),
 	used_at: e.string().optional(),
@@ -1892,14 +1896,15 @@ var _n = e.object({
 	login_session_id: e.string(),
 	idle_expires_at: e.string().optional(),
 	device: _n.describe("Metadata related to the device used in the session"),
-	clients: e.array(e.string()).describe("List of client details for the session")
+	clients: e.array(e.string()).describe("List of client details for the session"),
+	authentication: yn.optional().describe("Authentication methods completed in this session (currently MFA only)")
 });
 e.object({
 	created_at: e.string(),
 	updated_at: e.string(),
 	authenticated_at: e.string(),
 	last_interaction_at: e.string()
-}).extend(vn.shape), e.object({
+}).extend(bn.shape), e.object({
 	kid: e.string().openapi({ description: "The key id of the signing key" }),
 	tenant_id: e.string().optional().openapi({ description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped." }),
 	cert: e.string().openapi({ description: "The public certificate of the signing key" }),
@@ -1916,7 +1921,93 @@ e.object({
 	connection: e.string().optional().openapi({ description: "The connection identifier associated with the key" }),
 	type: e.enum(["jwt_signing", "saml_encryption"]).openapi({ description: "The type of the signing key" })
 });
-var yn = e.object({
+var F = e.enum([
+	"never",
+	"always",
+	"all-applications",
+	"confidence-score"
+]);
+e.object({
+	idle_session_lifetime: e.number().default(72),
+	session_lifetime: e.number().default(168),
+	session_cookie: e.object({ mode: e.enum(["persistent", "non-persistent"]).optional() }).optional(),
+	enable_client_connections: e.boolean().optional(),
+	default_redirection_uri: e.string().optional(),
+	enabled_locales: e.array(e.string()).optional(),
+	default_directory: e.string().optional(),
+	error_page: e.object({
+		html: e.string().optional(),
+		show_log_link: e.boolean().optional(),
+		url: e.string().optional()
+	}).optional(),
+	flags: e.object({
+		allow_legacy_delegation_grant_types: e.boolean().optional(),
+		allow_legacy_ro_grant_types: e.boolean().optional(),
+		allow_legacy_tokeninfo_endpoint: e.boolean().optional(),
+		disable_clickjack_protection_headers: e.boolean().optional(),
+		enable_apis_section: e.boolean().optional(),
+		enable_client_connections: e.boolean().optional(),
+		enable_custom_domain_in_emails: e.boolean().optional(),
+		enable_dynamic_client_registration: e.boolean().optional(),
+		enable_idtoken_api2: e.boolean().optional(),
+		enable_legacy_logs_search_v2: e.boolean().optional(),
+		enable_legacy_profile: e.boolean().optional(),
+		enable_pipeline2: e.boolean().optional(),
+		enable_public_signup_user_exists_error: e.boolean().optional(),
+		use_scope_descriptions_for_consent: e.boolean().optional(),
+		disable_management_api_sms_obfuscation: e.boolean().optional(),
+		enable_adfs_waad_email_verification: e.boolean().optional(),
+		revoke_refresh_token_grant: e.boolean().optional(),
+		dashboard_log_streams_next: e.boolean().optional(),
+		dashboard_insights_view: e.boolean().optional(),
+		disable_fields_map_fix: e.boolean().optional(),
+		mfa_show_factor_list_on_enrollment: e.boolean().optional()
+	}).optional(),
+	friendly_name: e.string().optional(),
+	picture_url: e.string().optional(),
+	support_email: e.string().optional(),
+	support_url: e.string().optional(),
+	sandbox_version: e.string().optional(),
+	sandbox_versions_available: e.array(e.string()).optional(),
+	change_password: e.object({
+		enabled: e.boolean(),
+		html: e.string()
+	}).optional(),
+	guardian_mfa_page: e.object({
+		enabled: e.boolean(),
+		html: e.string()
+	}).optional(),
+	default_audience: e.string().optional(),
+	default_organization: e.string().optional(),
+	sessions: e.object({ oidc_logout_prompt_enabled: e.boolean().optional() }).optional(),
+	mfa: e.object({
+		policy: F.default("never").optional(),
+		factors: e.object({
+			sms: e.boolean().default(!1),
+			otp: e.boolean().default(!1),
+			email: e.boolean().default(!1),
+			push_notification: e.boolean().default(!1),
+			webauthn_roaming: e.boolean().default(!1),
+			webauthn_platform: e.boolean().default(!1),
+			recovery_code: e.boolean().default(!1),
+			duo: e.boolean().default(!1)
+		}).optional(),
+		sms_provider: e.object({ provider: e.enum([
+			"twilio",
+			"vonage",
+			"aws_sns",
+			"phone_message_hook"
+		]).optional() }).optional(),
+		twilio: e.object({
+			sid: e.string().optional(),
+			auth_token: e.string().optional(),
+			from: e.string().optional(),
+			messaging_service_sid: e.string().optional()
+		}).optional(),
+		phone_message: e.object({ message: e.string().optional() }).optional()
+	}).optional()
+});
+var I = e.object({
 	id: e.string().optional(),
 	parent_tenant_id: e.string().nullish(),
 	config_sync: e.enum([
@@ -2044,7 +2135,7 @@ var yn = e.object({
 	d1_database_id: e.string().max(64).optional(),
 	attack_protection: gn.optional(),
 	mfa: e.object({
-		policy: e.enum(["never", "always"]).default("never").optional(),
+		policy: F.default("never").optional(),
 		factors: e.object({
 			sms: e.boolean().default(!1),
 			otp: e.boolean().default(!1),
@@ -2073,12 +2164,35 @@ var yn = e.object({
 e.object({
 	created_at: e.string().nullable().transform((e) => e ?? ""),
 	updated_at: e.string().nullable().transform((e) => e ?? "")
-}).extend(yn.shape).extend({
+}).extend(I.shape).extend({
 	id: e.string(),
 	is_control_plane: e.boolean().optional(),
 	has_children: e.boolean().optional()
 });
-var bn = e.enum([
+var xn = I.shape.mfa.unwrap().shape, Sn = e.object({
+	...xn,
+	policy: F.optional(),
+	factors: e.object({
+		sms: e.boolean().optional(),
+		otp: e.boolean().optional(),
+		email: e.boolean().optional(),
+		push_notification: e.boolean().optional(),
+		webauthn_roaming: e.boolean().optional(),
+		webauthn_platform: e.boolean().optional(),
+		recovery_code: e.boolean().optional(),
+		duo: e.boolean().optional()
+	}).optional()
+});
+e.object(I.shape).extend({
+	deployment_type: e.enum(["shared", "wfp"]),
+	provisioning_state: e.enum([
+		"pending",
+		"ready",
+		"failed"
+	]),
+	mfa: Sn
+}).partial();
+var Cn = e.enum([
 	"provision",
 	"seed",
 	"upgrade",
@@ -2088,18 +2202,18 @@ var bn = e.enum([
 	"sync-defaults",
 	"detach",
 	"tenant-members-request"
-]), xn = e.enum([
+]), wn = e.enum([
 	"pending",
 	"running",
 	"succeeded",
 	"failed",
 	"cancelled"
-]), Sn = e.string().max(64);
+]), Tn = e.string().max(64);
 e.object({
 	tenant_id: e.string().max(255).nullable().default(null),
 	rollout_id: e.string().max(255).nullable().optional(),
-	kind: bn,
-	engine: Sn,
+	kind: Cn,
+	engine: Tn,
 	engine_instance_id: e.string().max(100).nullable().optional(),
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
@@ -2107,7 +2221,7 @@ e.object({
 	input: e.record(e.string(), e.unknown()).nullable().optional()
 }).extend({
 	id: e.string(),
-	status: xn,
+	status: wn,
 	current_step: e.string().max(255).nullable().optional(),
 	error: e.string().nullable().optional(),
 	result: e.record(e.string(), e.unknown()).nullable().optional(),
@@ -2128,7 +2242,7 @@ e.object({
 	claim_expires_at: !0,
 	finished_at: !0
 }).partial();
-var Cn = e.enum([
+var En = e.enum([
 	"started",
 	"succeeded",
 	"failed",
@@ -2139,14 +2253,14 @@ var Cn = e.enum([
 e.object({
 	operation_id: e.string().max(255),
 	step: e.string().max(255),
-	outcome: Cn,
+	outcome: En,
 	detail: e.record(e.string(), e.unknown()).nullable().optional(),
 	attempt: e.number().int().min(1).default(1)
 }).extend({
 	id: e.string(),
 	created_at: e.string()
 });
-var F = e.enum([
+var L = e.enum([
 	"pending",
 	"inserted",
 	"updated",
@@ -2157,29 +2271,29 @@ e.object({
 	operation_id: e.string().max(255),
 	seq: e.number().int().min(0),
 	payload: e.record(e.string(), e.unknown()),
-	status: F.default("pending"),
+	status: L.default("pending"),
 	error_code: e.string().max(64).nullable().optional(),
 	error_message: e.string().nullable().optional(),
 	error_path: e.string().max(255).nullable().optional(),
 	entity_id: e.string().max(255).nullable().optional()
 }).extend({
-	status: F,
+	status: L,
 	created_at: e.string(),
 	updated_at: e.string()
 }), e.object({
 	seq: e.number().int().min(0),
-	status: F,
+	status: L,
 	error_code: e.string().max(64).nullable().optional(),
 	error_message: e.string().nullable().optional(),
 	error_path: e.string().max(255).nullable().optional(),
 	entity_id: e.string().max(255).nullable().optional()
 });
-var wn = e.enum([
+var Dn = e.enum([
 	"upgrade",
 	"reseed",
 	"backup",
 	"config-sync"
-]), Tn = e.enum([
+]), On = e.enum([
 	"pending",
 	"canary",
 	"rolling",
@@ -2188,7 +2302,7 @@ var wn = e.enum([
 	"failed"
 ]);
 e.object({
-	kind: wn,
+	kind: Dn,
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	wave_size: e.number().int().min(1).default(10),
@@ -2198,7 +2312,7 @@ e.object({
 	config: e.record(e.string(), e.unknown()).nullable().optional()
 }).extend({
 	id: e.string(),
-	status: Tn,
+	status: On,
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional(),
@@ -2212,26 +2326,26 @@ e.object({
 	paused_reason: !0,
 	finished_at: !0
 }).partial();
-var En = e.enum([
+var kn = e.enum([
 	"invite",
 	"add_members",
 	"remove_members",
 	"assign_roles",
 	"remove_roles",
 	"revoke_invitation"
-]), Dn = e.enum([
+]), An = e.enum([
 	"pending",
 	"succeeded",
 	"failed"
 ]);
 e.object({
-	kind: En,
+	kind: kn,
 	requested_by: e.string().min(1).max(255),
 	payload: e.record(e.string(), e.unknown())
 }).extend({
 	id: e.string(),
 	tenant_id: e.string(),
-	status: Dn,
+	status: An,
 	result: e.record(e.string(), e.unknown()).nullable().optional(),
 	error: e.string().nullable().optional(),
 	notified_at: e.string().nullable().optional(),
@@ -2239,7 +2353,7 @@ e.object({
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
 }), e.object({
-	status: Dn.optional(),
+	status: An.optional(),
 	result: e.record(e.string(), e.unknown()).nullable().optional(),
 	error: e.string().nullable().optional(),
 	notified_at: e.string().nullable().optional(),
@@ -2256,7 +2370,7 @@ e.object({
 	code: e.string(),
 	state: e.string().optional()
 });
-var On = e.object({
+var jn = e.object({
 	button_border_radius: e.number(),
 	button_border_weight: e.number(),
 	buttons_style: e.enum([
@@ -2274,7 +2388,7 @@ var On = e.object({
 	show_widget_shadow: e.boolean(),
 	widget_border_weight: e.number(),
 	widget_corner_radius: e.number()
-}), kn = e.object({
+}), Mn = e.object({
 	base_focus_color: e.string(),
 	base_hover_color: e.string(),
 	body_text: e.string(),
@@ -2298,20 +2412,20 @@ var On = e.object({
 	success: e.string(),
 	widget_background: e.string(),
 	widget_border: e.string()
-}), I = e.object({
+}), R = e.object({
 	bold: e.boolean(),
 	size: e.number()
-}), An = e.object({
-	body_text: I,
-	buttons_text: I,
+}), Nn = e.object({
+	body_text: R,
+	buttons_text: R,
 	font_url: e.string(),
-	input_labels: I,
-	links: I,
+	input_labels: R,
+	links: R,
 	links_style: e.enum(["normal", "underlined"]),
 	reference_text_size: e.number(),
-	subtitle: I,
-	title: I
-}), jn = e.object({
+	subtitle: R,
+	title: R
+}), Pn = e.object({
 	background_color: e.string(),
 	background_image_url: e.string(),
 	page_layout: e.enum([
@@ -2324,7 +2438,7 @@ var On = e.object({
 		"chip",
 		"none"
 	]).optional()
-}), Mn = e.object({
+}), Fn = e.object({
 	header_text_alignment: e.enum([
 		"center",
 		"left",
@@ -2341,12 +2455,12 @@ var On = e.object({
 	social_buttons_layout: e.enum(["bottom", "top"])
 });
 e.object({
-	borders: On,
-	colors: kn,
+	borders: jn,
+	colors: Mn,
 	displayName: e.string(),
-	fonts: An,
-	page_background: jn,
-	widget: Mn
+	fonts: Nn,
+	page_background: Pn,
+	widget: Fn
 }).extend({ themeId: e.string() }), e.object({
 	...a,
 	universal_login_experience: e.enum(["new", "classic"]).default("new"),
@@ -2355,30 +2469,30 @@ e.object({
 	show_last_used_connection: e.boolean().default(!1),
 	webauthn_platform_first_factor: e.boolean()
 });
-var Nn = e.object({
+var In = e.object({
 	hosts: e.array(e.string()).optional(),
 	methods: e.array(e.string()).optional(),
 	path: e.string().default("/*"),
 	headers: e.record(e.string(), e.string()).optional(),
 	query: e.record(e.string(), e.string()).optional()
-}), Pn = e.object({
+}), Ln = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
-}), L = e.object({
+}), z = e.object({
 	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
-	match: Nn,
-	handlers: e.array(Pn).min(1)
-}), Fn = L.extend({
+	match: In,
+	handlers: e.array(Ln).min(1)
+}), Rn = z.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), In = L.partial().omit({
+}), zn = z.partial().omit({
 	id: !0,
 	custom_domain_id: !0
-}), Ln = "custom_authentication", Rn = [
+}), Bn = "custom_authentication", Vn = [
 	"urn:ietf:params:oauth:",
 	"urn:auth0",
 	"urn:okta",
@@ -2386,56 +2500,56 @@ var Nn = e.object({
 	"https://auth0.com",
 	"http://okta.com",
 	"https://okta.com"
-], zn = e.string().min(1).max(200).refine((e) => e.startsWith("https://") || e.startsWith("urn:"), { message: "subject_token_type must be a URI starting with https:// or urn:" }).refine((e) => !Rn.some((t) => e.toLowerCase().startsWith(t)), { message: "subject_token_type uses a reserved namespace" }), Bn = e.enum([
+], Hn = e.string().min(1).max(200).refine((e) => e.startsWith("https://") || e.startsWith("urn:"), { message: "subject_token_type must be a URI starting with https:// or urn:" }).refine((e) => !Vn.some((t) => e.toLowerCase().startsWith(t)), { message: "subject_token_type uses a reserved namespace" }), Un = e.enum([
 	"RS256",
 	"RS384",
 	"RS512",
 	"ES256",
 	"ES384",
 	"ES512"
-]), Vn = e.discriminatedUnion("type", [e.object({
+]), Wn = e.discriminatedUnion("type", [e.object({
 	type: e.literal("connection"),
 	connection: e.string().min(1),
 	create_if_not_exists: e.boolean().default(!0),
 	trust_email_verified: e.boolean().default(!1)
-}), e.object({ type: e.literal("user_id") })]), Hn = e.object({
+}), e.object({ type: e.literal("user_id") })]), Gn = e.object({
 	issuer: e.string().min(1).max(2048),
 	jwks: $t.optional(),
 	jwks_uri: e.string().url().optional(),
 	audience: e.array(e.string().min(1)).min(1).optional(),
-	algorithms: e.array(Bn).min(1).optional(),
+	algorithms: e.array(Un).min(1).optional(),
 	max_lifetime_seconds: e.number().int().min(1).max(3600).default(300),
 	require_jti: e.boolean().default(!0),
-	user_mapping: Vn
+	user_mapping: Wn
 });
 e.object({
 	name: e.string().min(1).max(255),
-	subject_token_type: zn,
+	subject_token_type: Hn,
 	action_id: e.string().min(1).optional(),
-	type: e.literal(Ln),
-	jwt_verification: Hn.optional()
+	type: e.literal(Bn),
+	jwt_verification: Gn.optional()
 }).extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
 }), e.object({
 	name: e.string().min(1).max(255).optional(),
-	subject_token_type: zn.optional(),
-	jwt_verification: Hn.optional()
+	subject_token_type: Hn.optional(),
+	jwt_verification: Gn.optional()
 });
-var Un = e.object({
+var Kn = e.object({
 	scim: e.string(),
 	auth0: e.string()
-}), Wn = e.object({
+}), qn = e.object({
 	connection_id: e.string(),
 	user_id_attribute: e.string().default("externalId"),
-	mapping: e.array(Un).default([])
+	mapping: e.array(Kn).default([])
 });
 e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(Wn.shape);
-var Gn = e.object({
+}).extend(qn.shape);
+var Jn = e.object({
 	token_id: e.string(),
 	connection_id: e.string(),
 	token_hash: e.string(),
@@ -2445,13 +2559,13 @@ var Gn = e.object({
 e.object({
 	created_at: e.string(),
 	last_used_at: e.string().optional()
-}).extend(Gn.shape);
-var Kn = e.object({
+}).extend(Jn.shape);
+var Yn = e.object({
 	connection_id: e.string(),
 	external_id: e.string(),
 	user_id: e.string()
 });
-e.object({ created_at: e.string() }).extend(Kn.shape), e.object({
+e.object({ created_at: e.string() }).extend(Yn.shape), e.object({
 	...a,
 	name: e.string(),
 	enabled: e.boolean().optional().default(!0),
@@ -2459,7 +2573,7 @@ e.object({ created_at: e.string() }).extend(Kn.shape), e.object({
 	credentials: e.record(e.string(), e.unknown()),
 	settings: e.object({}).optional()
 });
-var qn = e.enum([
+var Xn = e.enum([
 	"verify_email",
 	"verify_email_by_code",
 	"reset_email",
@@ -2474,7 +2588,7 @@ var qn = e.enum([
 	"user_invitation"
 ]);
 e.object({
-	template: qn,
+	template: Xn,
 	body: e.string(),
 	from: e.string(),
 	subject: e.string(),
@@ -2516,10 +2630,10 @@ e.object({
 	name: e.string(),
 	options: e.object({})
 });
-var Jn = e.object({
+var Zn = e.object({
 	value: e.string(),
 	description: e.string().optional()
-}), Yn = e.object({
+}), Qn = e.object({
 	token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
 	enforce_policies: e.boolean().optional(),
 	allow_skipping_userinfo: e.boolean().optional(),
@@ -2527,11 +2641,11 @@ var Jn = e.object({
 	persist_client_authorization: e.boolean().optional(),
 	enable_introspection_endpoint: e.boolean().optional(),
 	mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
-}), Xn = e.object({
+}), $n = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	identifier: e.string(),
-	scopes: e.array(Jn).optional(),
+	scopes: e.array(Zn).optional(),
 	signing_alg: e.string().optional(),
 	signing_secret: e.string().optional(),
 	token_lifetime: e.number().default(86400),
@@ -2539,7 +2653,7 @@ var Jn = e.object({
 	skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
 	allow_offline_access: e.boolean().optional(),
 	verificationKey: e.string().optional(),
-	options: Yn.optional(),
+	options: Qn.optional(),
 	is_system: e.boolean().optional(),
 	...a,
 	metadata: e.record(e.string(), e.any()).optional()
@@ -2547,13 +2661,13 @@ var Jn = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Xn);
-var Zn = e.object({
+e.array($n);
+var er = e.object({
 	role_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
 }).extend({ created_at: e.string() });
-e.array(Zn), e.object({
+e.array(er), e.object({
 	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
 	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
 	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
@@ -2566,7 +2680,7 @@ e.array(Zn), e.object({
 	failed_logins: e.array(e.string()).optional(),
 	last_password_reset: e.string().optional()
 });
-var Qn = e.object({
+var tr = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
@@ -2575,8 +2689,8 @@ var Qn = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(Qn);
-var $n = e.object({
+e.array(tr);
+var nr = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -2585,8 +2699,8 @@ var $n = e.object({
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
 });
-e.array($n);
-var er = e.object({
+e.array(nr);
+var rr = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
@@ -2594,8 +2708,8 @@ var er = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(er);
-var tr = e.object({
+e.array(rr);
+var ir = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
@@ -2606,19 +2720,19 @@ var tr = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(tr);
-var nr = e.object({
+e.array(ir);
+var ar = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), rr = e.object({
+}).optional(), or = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), ir = e.object({ client_credentials: e.object({
+}), sr = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
@@ -2627,15 +2741,15 @@ e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: nr,
+	branding: ar,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(rr).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: ir
+	enabled_connections: e.array(or).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: sr
 }).extend(n.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
 });
-var ar = e.object({
+var cr = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
@@ -2648,89 +2762,10 @@ var ar = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(ar), e.object({
+e.array(cr), e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
 }).extend(n.shape).extend({ id: e.string() }), e.object({
-	idle_session_lifetime: e.number().default(72),
-	session_lifetime: e.number().default(168),
-	session_cookie: e.object({ mode: e.enum(["persistent", "non-persistent"]).optional() }).optional(),
-	enable_client_connections: e.boolean().optional(),
-	default_redirection_uri: e.string().optional(),
-	enabled_locales: e.array(e.string()).optional(),
-	default_directory: e.string().optional(),
-	error_page: e.object({
-		html: e.string().optional(),
-		show_log_link: e.boolean().optional(),
-		url: e.string().optional()
-	}).optional(),
-	flags: e.object({
-		allow_legacy_delegation_grant_types: e.boolean().optional(),
-		allow_legacy_ro_grant_types: e.boolean().optional(),
-		allow_legacy_tokeninfo_endpoint: e.boolean().optional(),
-		disable_clickjack_protection_headers: e.boolean().optional(),
-		enable_apis_section: e.boolean().optional(),
-		enable_client_connections: e.boolean().optional(),
-		enable_custom_domain_in_emails: e.boolean().optional(),
-		enable_dynamic_client_registration: e.boolean().optional(),
-		enable_idtoken_api2: e.boolean().optional(),
-		enable_legacy_logs_search_v2: e.boolean().optional(),
-		enable_legacy_profile: e.boolean().optional(),
-		enable_pipeline2: e.boolean().optional(),
-		enable_public_signup_user_exists_error: e.boolean().optional(),
-		use_scope_descriptions_for_consent: e.boolean().optional(),
-		disable_management_api_sms_obfuscation: e.boolean().optional(),
-		enable_adfs_waad_email_verification: e.boolean().optional(),
-		revoke_refresh_token_grant: e.boolean().optional(),
-		dashboard_log_streams_next: e.boolean().optional(),
-		dashboard_insights_view: e.boolean().optional(),
-		disable_fields_map_fix: e.boolean().optional(),
-		mfa_show_factor_list_on_enrollment: e.boolean().optional()
-	}).optional(),
-	friendly_name: e.string().optional(),
-	picture_url: e.string().optional(),
-	support_email: e.string().optional(),
-	support_url: e.string().optional(),
-	sandbox_version: e.string().optional(),
-	sandbox_versions_available: e.array(e.string()).optional(),
-	change_password: e.object({
-		enabled: e.boolean(),
-		html: e.string()
-	}).optional(),
-	guardian_mfa_page: e.object({
-		enabled: e.boolean(),
-		html: e.string()
-	}).optional(),
-	default_audience: e.string().optional(),
-	default_organization: e.string().optional(),
-	sessions: e.object({ oidc_logout_prompt_enabled: e.boolean().optional() }).optional(),
-	mfa: e.object({
-		policy: e.enum(["never", "always"]).default("never").optional(),
-		factors: e.object({
-			sms: e.boolean().default(!1),
-			otp: e.boolean().default(!1),
-			email: e.boolean().default(!1),
-			push_notification: e.boolean().default(!1),
-			webauthn_roaming: e.boolean().default(!1),
-			webauthn_platform: e.boolean().default(!1),
-			recovery_code: e.boolean().default(!1),
-			duo: e.boolean().default(!1)
-		}).optional(),
-		sms_provider: e.object({ provider: e.enum([
-			"twilio",
-			"vonage",
-			"aws_sns",
-			"phone_message_hook"
-		]).optional() }).optional(),
-		twilio: e.object({
-			sid: e.string().optional(),
-			auth_token: e.string().optional(),
-			from: e.string().optional(),
-			messaging_service_sid: e.string().optional()
-		}).optional(),
-		phone_message: e.object({ message: e.string().optional() }).optional()
-	}).optional()
-}), e.object({
 	date: e.string().openapi({
 		description: "Date these events occurred in ISO 8601 format",
 		example: "2025-12-19"
@@ -2787,7 +2822,7 @@ e.array(ar), e.object({
 	"passwordless",
 	"enterprise"
 ]);
-var or = e.object({
+var lr = e.object({
 	cohort: e.string(),
 	sessions: e.number(),
 	active: e.array(e.number())
@@ -2796,9 +2831,9 @@ e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(or)
+	cohorts: e.array(lr)
 });
-var sr = e.object({
+var ur = e.object({
 	cohort: e.string(),
 	tokens: e.number(),
 	active: e.array(e.number())
@@ -2807,24 +2842,24 @@ e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(sr)
+	cohorts: e.array(ur)
 });
-var cr = e.object({
+var dr = e.object({
 	name: e.string(),
 	type: e.string()
-}), lr = e.object({
+}), fr = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
 });
 e.object({
-	meta: e.array(cr),
+	meta: e.array(dr),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: lr.optional()
+	statistics: fr.optional()
 });
-var ur = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), dr = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+var pr = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), mr = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
@@ -2832,23 +2867,23 @@ var ur = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.
 	}
 });
 e.object({
-	prompt: ur,
+	prompt: pr,
 	language: e.string(),
-	custom_text: dr
+	custom_text: mr
 });
-var fr = e.object({
+var hr = e.object({
 	"form-content-start": e.string().optional(),
 	"form-content-end": e.string().optional(),
 	"form-footer-start": e.string().optional(),
 	"form-footer-end": e.string().optional(),
 	"secondary-actions-start": e.string().optional(),
 	"secondary-actions-end": e.string().optional()
-}).strict(), pr = e.record(e.string(), fr);
+}).strict(), gr = e.record(e.string(), hr);
 e.object({
 	prompt: e.string(),
-	partials: pr
+	partials: gr
 });
-var mr = e.enum([
+var _r = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -2856,11 +2891,12 @@ var mr = e.enum([
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), R = e.object({
+]), vr = e.object({
 	user_id: e.string(),
-	type: mr,
+	type: _r,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
+	totp_last_step: e.number().int().nonnegative().optional(),
 	credential_id: e.string().optional(),
 	public_key: e.string().optional(),
 	sign_count: e.number().int().nonnegative().optional(),
@@ -2869,7 +2905,7 @@ var mr = e.enum([
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function z(t, n) {
+function yr(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -2892,16 +2928,16 @@ function z(t, n) {
 		path: ["public_key"]
 	}));
 }
-R.superRefine(z), R.extend({
+vr.superRefine(yr), vr.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(z), e.object({
+}).superRefine(yr), e.object({
 	id: e.string().optional(),
 	created_at: e.string().datetime({ offset: !0 }).optional(),
 	updated_at: e.string().datetime({ offset: !0 }).optional()
 });
-var hr = "x-authhero-preserve-location", B = class extends Error {
+var br = "x-authhero-preserve-location", B = class extends Error {
 	ms;
 	constructor(e, t) {
 		super(`${t ?? "Operation"} timed out after ${e}ms`), this.name = "TimeoutError", this.ms = e;
@@ -2914,7 +2950,7 @@ function H(e, t) {
 	let n = new AbortController(), r = setTimeout(() => n.abort(), e);
 	return t(n.signal).finally(() => clearTimeout(r));
 }
-function gr(e) {
+function xr(e) {
 	let t = e.filter((e) => e !== void 0);
 	if (t.length <= 1) return t[0];
 	if (typeof AbortSignal.any == "function") return AbortSignal.any(t);
@@ -2928,7 +2964,7 @@ function gr(e) {
 	return n.signal;
 }
 function U(e, t, n, r) {
-	let i = new AbortController(), a = gr([n, i.signal]) ?? i.signal, o, s = new Promise((n, r) => {
+	let i = new AbortController(), a = xr([n, i.signal]) ?? i.signal, o, s = new Promise((n, r) => {
 		o = setTimeout(() => {
 			let n = new B(e, t);
 			i.abort(n), r(n);
@@ -2946,12 +2982,12 @@ function W(e, t, n) {
 }
 //#endregion
 //#region src/data-plane/cache.ts
-var _r = 1e4, vr = 8e3;
+var Sr = 1e4, Cr = 8e3;
 function G(e, t, n) {
 	let r = typeof t == "number" ? {
 		freshTtlMs: t,
 		maxEntries: n
-	} : t, i = r.freshTtlMs, a = r.staleTtlMs ?? 0, o = r.staleIfErrorTtlMs ?? 0, s = r.negativeTtlMs ?? i, c = r.maxEntries ?? _r, l = r.waitUntil, u = r.upstreamTimeoutMs ?? vr, d = u > 0 ? u : 1e4, f = /* @__PURE__ */ new Map();
+	} : t, i = r.freshTtlMs, a = r.staleTtlMs ?? 0, o = r.staleIfErrorTtlMs ?? 0, s = r.negativeTtlMs ?? i, c = r.maxEntries ?? Sr, l = r.waitUntil, u = r.upstreamTimeoutMs ?? Cr, d = u > 0 ? u : 1e4, f = /* @__PURE__ */ new Map();
 	function p(e) {
 		for (let [t, n] of f) n.stale_if_error_until <= e && n.stale_until <= e && f.delete(t);
 		for (; f.size >= c;) {
@@ -3006,7 +3042,7 @@ function G(e, t, n) {
 }
 //#endregion
 //#region src/data-plane/registry.ts
-var yr = class {
+var wr = class {
 	definitions = /* @__PURE__ */ new Map();
 	bindings;
 	constructor(e = {}) {
@@ -3031,33 +3067,33 @@ function K(e) {
 }
 //#endregion
 //#region src/data-plane/handlers/util.ts
-var br = "__authhero_proxy_request__", xr = "__authhero_proxy_tenant_id__", Sr = "__authhero_proxy_custom_domain_id__", Cr = "__authhero_proxy_domain__", wr = "x-authhero-proxy-mutability-probe";
-function Tr(e, t) {
-	e.set(br, t);
+var Tr = "__authhero_proxy_request__", Er = "__authhero_proxy_tenant_id__", Dr = "__authhero_proxy_custom_domain_id__", Or = "__authhero_proxy_domain__", kr = "x-authhero-proxy-mutability-probe";
+function Ar(e, t) {
+	e.set(Tr, t);
 }
 function q(e) {
-	return e.get(br) ?? e.req.raw;
+	return e.get(Tr) ?? e.req.raw;
 }
-function Er(e, t) {
-	e.set(xr, t.tenant_id), e.set(Sr, t.custom_domain_id), e.set(Cr, t.domain);
+function jr(e, t) {
+	e.set(Er, t.tenant_id), e.set(Dr, t.custom_domain_id), e.set(Or, t.domain);
 }
-function Dr(e) {
-	return e.get(xr);
+function Mr(e) {
+	return e.get(Er);
 }
-function Or(e) {
-	return e.get(Sr);
+function Nr(e) {
+	return e.get(Dr);
 }
-function kr(e) {
-	return e.get(Cr);
+function Pr(e) {
+	return e.get(Or);
 }
-function Ar(e, t) {
+function Fr(e, t) {
 	let n = q(e), r = new Headers(n.headers);
-	t(r), Tr(e, new Request(n, { headers: r }));
+	t(r), Ar(e, new Request(n, { headers: r }));
 }
 function J(e) {
 	let t = e.res;
 	try {
-		t.headers.append(wr, "1"), t.headers.delete(wr);
+		t.headers.append(kr, "1"), t.headers.delete(kr);
 		return;
 	} catch {
 		e.res = new Response(t.body, {
@@ -3069,7 +3105,7 @@ function J(e) {
 }
 //#endregion
 //#region src/data-plane/handlers/cors.ts
-var jr = e.object({
+var Ir = e.object({
 	origins: e.array(e.string()).optional(),
 	allow_credentials: e.boolean().optional(),
 	allow_headers: e.array(e.string()).optional(),
@@ -3077,44 +3113,44 @@ var jr = e.object({
 	expose_headers: e.array(e.string()).optional(),
 	max_age: e.number().int().optional()
 }).refine((e) => !(e.allow_credentials && e.origins?.includes("*")), { message: "Cannot use wildcard origin (*) with allow_credentials" });
-function Mr(e, t) {
+function Lr(e, t) {
 	let n = new Headers(), r = e.origins ?? ["*"], i = r.includes("*");
 	return i && !e.allow_credentials ? n.set("Access-Control-Allow-Origin", "*") : t && (i || r.includes(t)) && (n.set("Access-Control-Allow-Origin", t), n.append("Vary", "Origin")), e.allow_credentials && n.set("Access-Control-Allow-Credentials", "true"), e.allow_methods?.length && n.set("Access-Control-Allow-Methods", e.allow_methods.join(", ")), e.allow_headers?.length && n.set("Access-Control-Allow-Headers", e.allow_headers.join(", ")), e.expose_headers?.length && n.set("Access-Control-Expose-Headers", e.expose_headers.join(", ")), e.max_age !== void 0 && n.set("Access-Control-Max-Age", String(e.max_age)), n;
 }
-var Nr = K({
+var Rr = K({
 	type: "cors",
-	optionsSchema: jr,
+	optionsSchema: Ir,
 	build(e) {
 		return async (t, n) => {
 			let r = t.req.header("origin") ?? null;
 			if (t.req.method === "OPTIONS" && r !== null && t.req.header("access-control-request-method") !== void 0) {
-				let t = Mr(e, r);
+				let t = Lr(e, r);
 				return new Response(null, {
 					status: 204,
 					headers: t
 				});
 			}
 			await n();
-			let i = Mr(e, r);
+			let i = Lr(e, r);
 			J(t), i.forEach((e, n) => {
 				n.toLowerCase() === "vary" ? t.res.headers.append(n, e) : t.res.headers.set(n, e);
 			});
 		};
 	}
-}), Pr = e.object({
+}), zr = e.object({
 	username: e.string(),
 	password: e.string(),
 	realm: e.string().optional()
 });
-function Fr(e, t) {
+function Br(e, t) {
 	let n = `${e}:${t}`;
 	return typeof btoa == "function" ? btoa(n) : Buffer.from(n, "utf-8").toString("base64");
 }
-var Ir = K({
+var Vr = K({
 	type: "basic_auth",
-	optionsSchema: Pr,
+	optionsSchema: zr,
 	build(e) {
-		let t = Fr(e.username, e.password), n = (e.realm ?? "Restricted").replace(/["\\\r\n]/g, "");
+		let t = Br(e.username, e.password), n = (e.realm ?? "Restricted").replace(/["\\\r\n]/g, "");
 		return async (e, r) => {
 			let i = e.req.header("authorization");
 			if (i) {
@@ -3130,7 +3166,7 @@ var Ir = K({
 			});
 		};
 	}
-}), Lr = K({
+}), Hr = K({
 	type: "headers",
 	optionsSchema: e.object({
 		request: e.record(e.string(), e.string()).optional(),
@@ -3140,12 +3176,12 @@ var Ir = K({
 	}),
 	build(e) {
 		return async (t, n) => {
-			if ((e.request || e.remove_request) && Ar(t, (t) => {
+			if ((e.request || e.remove_request) && Fr(t, (t) => {
 				if (e.remove_request?.forEach((e) => t.delete(e)), e.request) for (let [n, r] of Object.entries(e.request)) t.set(n, r);
 			}), await n(), (e.response || e.remove_response) && (J(t), e.remove_response?.forEach((e) => t.res.headers.delete(e)), e.response)) for (let [n, r] of Object.entries(e.response)) t.res.headers.set(n, r);
 		};
 	}
-}), Rr = K({
+}), Ur = K({
 	type: "cache",
 	optionsSchema: e.object({ ttl_seconds: e.number().int().positive() }),
 	build(e) {
@@ -3156,7 +3192,7 @@ var Ir = K({
 			}
 		};
 	}
-}), zr = [
+}), Wr = [
 	"173.245.48.0/20",
 	"103.21.244.0/22",
 	"103.22.200.0/22",
@@ -3180,7 +3216,7 @@ var Ir = K({
 	"2a06:98c0::/29",
 	"2c0f:f248::/32"
 ];
-function Br(e) {
+function Gr(e) {
 	let t = e.split(".");
 	if (t.length !== 4) return null;
 	let n = [];
@@ -3192,14 +3228,14 @@ function Br(e) {
 	}
 	return n;
 }
-function Vr(e) {
+function Kr(e) {
 	if (e === "") return [];
 	let t = e.split(":"), n = [];
 	for (let e = 0; e < t.length; e++) {
 		let r = t[e];
 		if (r.includes(".")) {
 			if (e !== t.length - 1) return null;
-			let i = Br(r);
+			let i = Gr(r);
 			if (!i) return null;
 			n.push(i[0] << 8 | i[1], i[2] << 8 | i[3]);
 			continue;
@@ -3209,14 +3245,14 @@ function Vr(e) {
 	}
 	return n;
 }
-function Hr(e) {
+function qr(e) {
 	let t = e.split("::");
 	if (t.length > 2) return null;
-	let n = Vr(t[0] ?? "");
+	let n = Kr(t[0] ?? "");
 	if (!n) return null;
 	let r;
 	if (t.length === 2) {
-		let e = Vr(t[1] ?? "");
+		let e = Kr(t[1] ?? "");
 		if (!e) return null;
 		let i = 8 - n.length - e.length;
 		if (i < 1) return null;
@@ -3231,25 +3267,25 @@ function Hr(e) {
 	for (let e of r) i.push(e >> 8 & 255, e & 255);
 	return i;
 }
-function Ur(e) {
+function Jr(e) {
 	let t = e.trim();
 	t.startsWith("[") && t.endsWith("]") && (t = t.slice(1, -1));
 	let n = t.indexOf("%");
 	if (n !== -1 && (t = t.slice(0, n)), t === "") return null;
-	if (!t.includes(":")) return Br(t);
-	let r = Hr(t);
+	if (!t.includes(":")) return Gr(t);
+	let r = qr(t);
 	return r ? r.slice(0, 10).every((e) => e === 0) && r[10] === 255 && r[11] === 255 ? r.slice(12) : r : null;
 }
-function Wr(e) {
-	let [t, n] = e.split("/"), r = Ur(t ?? ""), i = Number(n);
+function Yr(e) {
+	let [t, n] = e.split("/"), r = Jr(t ?? ""), i = Number(n);
 	if (!r || !Number.isInteger(i)) throw Error(`Invalid Cloudflare CIDR: ${e}`);
 	return {
 		bytes: r,
 		prefixBits: i
 	};
 }
-var Gr = zr.map(Wr);
-function Kr(e, t) {
+var Xr = Wr.map(Yr);
+function Zr(e, t) {
 	if (e.length !== t.bytes.length) return !1;
 	let n = t.prefixBits >> 3;
 	for (let r = 0; r < n; r++) if (e[r] !== t.bytes[r]) return !1;
@@ -3258,11 +3294,11 @@ function Kr(e, t) {
 	let i = 255 << 8 - r & 255;
 	return (e[n] & i) === (t.bytes[n] & i);
 }
-function qr(e) {
-	let t = Ur(e);
-	return t ? Gr.some((e) => Kr(t, e)) : !1;
+function Qr(e) {
+	let t = Jr(e);
+	return t ? Xr.some((e) => Zr(t, e)) : !1;
 }
-var Jr = K({
+var $r = K({
 	type: "forwarded_headers",
 	optionsSchema: e.object({
 		client_ip_header: e.string().default("cf-connecting-ip"),
@@ -3273,46 +3309,46 @@ var Jr = K({
 	build(e) {
 		return async (t, n) => {
 			let r = new URL(t.req.url);
-			Ar(t, (n) => {
+			Fr(t, (n) => {
 				n.set("x-forwarded-host", r.host), n.set("x-forwarded-proto", r.protocol.replace(":", "")), e.set_x_original_url && n.set("x-original-url", t.req.url);
-				let i = n.get(e.client_ip_header), a = i && e.skip_cloudflare_client_ip && qr(i) ? null : i, o = (n.get("x-forwarded-for") ?? "").split(",").map((e) => e.trim()).filter(Boolean), s = a ?? o[o.length - 1] ?? "127.0.0.1", c = o.length === 0 || o[o.length - 1] !== s, l = o.length ? c ? `${o.join(", ")}, ${s}` : o.join(", ") : s;
+				let i = n.get(e.client_ip_header), a = i && e.skip_cloudflare_client_ip && Qr(i) ? null : i, o = (n.get("x-forwarded-for") ?? "").split(",").map((e) => e.trim()).filter(Boolean), s = a ?? o[o.length - 1] ?? "127.0.0.1", c = o.length === 0 || o[o.length - 1] !== s, l = o.length ? c ? `${o.join(", ")}, ${s}` : o.join(", ") : s;
 				n.set("x-forwarded-for", l), e.set_x_real_ip && n.set("x-real-ip", s);
 			}), await n();
 		};
 	}
-}), Yr = e.object({ upstream_host: e.string().optional() });
-function Xr(e) {
+}), ei = e.object({ upstream_host: e.string().optional() });
+function ti(e) {
 	return e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function Zr(e) {
+function ni(e) {
 	if (typeof e.getSetCookie == "function") return e.getSetCookie();
 	let t = [];
 	return e.forEach((e, n) => {
 		n.toLowerCase() === "set-cookie" && t.push(e);
 	}), t;
 }
-var Qr = K({
+var ri = K({
 	type: "rewrite_cookies",
-	optionsSchema: Yr,
+	optionsSchema: ei,
 	build(e) {
 		return async (t, n) => {
 			await n();
 			let r = new URL(t.req.url).hostname, i = e.upstream_host ?? t.get("__proxy_upstream_host__");
 			if (!i) return;
-			let a = Zr(t.res.headers);
+			let a = ni(t.res.headers);
 			if (a.length === 0) return;
-			let o = Xr(i), s = RegExp(`(?:^|;\\s*)Domain=\\.?${o}(?=;|$)`, "i");
+			let o = ti(i), s = RegExp(`(?:^|;\\s*)Domain=\\.?${o}(?=;|$)`, "i");
 			J(t), t.res.headers.delete("set-cookie");
 			for (let e of a) t.res.headers.append("set-cookie", e.replace(s, `Domain=${r}`));
 		};
 	}
-}), $r = K({
+}), ii = K({
 	type: "rewrite_location",
 	optionsSchema: e.object({ upstream_origin: e.string().optional() }),
 	build(e) {
 		return async (t, n) => {
 			if (await n(), t.res.headers.has("x-authhero-preserve-location")) {
-				J(t), t.res.headers.delete(hr);
+				J(t), t.res.headers.delete(br);
 				return;
 			}
 			let r = t.res.status;
@@ -3332,7 +3368,7 @@ var Qr = K({
 			J(t), t.res.headers.set("location", c);
 		};
 	}
-}), ei = new Set([
+}), ai = new Set([
 	"connection",
 	"keep-alive",
 	"proxy-authenticate",
@@ -3341,25 +3377,25 @@ var Qr = K({
 	"trailers",
 	"transfer-encoding",
 	"upgrade"
-]), ti = 3e4, ni = e.object({
+]), oi = 3e4, si = e.object({
 	upstream_url: e.string(),
 	preserve_host: e.boolean().default(!1),
 	timeout_ms: e.number().int().positive().optional()
 });
-function ri(e, t) {
+function ci(e, t) {
 	return e === "" || e === "/" ? t : `${e.endsWith("/") ? e.slice(0, -1) : e}${t.startsWith("/") ? t : `/${t}`}`;
 }
-function ii(e) {
+function li(e) {
 	return e !== "GET" && e !== "HEAD";
 }
-var ai = 128 * 1024;
-function oi(e) {
+var ui = 128 * 1024;
+function di(e) {
 	let t = e.headers.get("content-length");
 	if (t === null) return null;
 	let n = Number(t);
 	return Number.isInteger(n) && n >= 0 ? n : null;
 }
-async function si(e, t) {
+async function fi(e, t) {
 	let n = e.getReader(), r = !1, i = setTimeout(() => {
 		r = !0, n.cancel().catch(() => {});
 	}, t), a = [], o = 0;
@@ -3377,7 +3413,7 @@ async function si(e, t) {
 	for (let e of a) s.set(e, c), c += e.byteLength;
 	return s.buffer;
 }
-function ci(e) {
+function pi(e) {
 	return V(e) ? new Response("Request body timeout", {
 		status: 408,
 		headers: { "x-authhero-proxy-error": "request_body_timeout" }
@@ -3386,20 +3422,20 @@ function ci(e) {
 		headers: { "x-authhero-proxy-error": "request_body_failed" }
 	});
 }
-async function li(e, t, n) {
-	if (!ii(e.method) || !e.body) return;
-	let r = oi(e);
-	if (r === null || r > ai) return e.body;
-	let i = await si(e.body, n);
+async function mi(e, t, n) {
+	if (!li(e.method) || !e.body) return;
+	let r = di(e);
+	if (r === null || r > ui) return e.body;
+	let i = await fi(e.body, n);
 	return t.set("content-length", String(i.byteLength)), i;
 }
-async function ui(e, t, n) {
+async function hi(e, t, n) {
 	let r = new URL(t.url), i = new URL(e.upstream_url);
-	i.pathname = ri(i.pathname, r.pathname), i.search = r.search;
+	i.pathname = ci(i.pathname, r.pathname), i.search = r.search;
 	let a = new Headers(t.headers);
-	for (let e of ei) a.delete(e);
+	for (let e of ai) a.delete(e);
 	e.preserve_host || a.set("host", i.host), a.has("x-forwarded-host") || a.set("x-forwarded-host", r.host), a.has("x-forwarded-proto") || a.set("x-forwarded-proto", r.protocol.replace(":", ""));
-	let o = await li(t, a, n), s = {
+	let o = await mi(t, a, n), s = {
 		method: t.method,
 		headers: a,
 		body: o,
@@ -3410,17 +3446,17 @@ async function ui(e, t, n) {
 		init: s
 	};
 }
-var di = K({
+var gi = K({
 	type: "http",
-	optionsSchema: ni,
+	optionsSchema: si,
 	build(e) {
-		let t = e.timeout_ms ?? ti;
+		let t = e.timeout_ms ?? oi;
 		return async (n) => {
 			let r = q(n), i;
 			try {
-				i = await ui(e, r, t);
+				i = await hi(e, r, t);
 			} catch (e) {
-				return ci(e);
+				return pi(e);
 			}
 			let { target: a, init: o } = i;
 			n.set("__proxy_upstream_host__", a.hostname), n.set("__proxy_upstream_origin__", `${a.protocol}//${a.host}`);
@@ -3434,31 +3470,31 @@ var di = K({
 			}
 		};
 	}
-}), fi = 3e4, pi = e.object({
+}), _i = 3e4, vi = e.object({
 	binding: e.string(),
 	upstream_url: e.string().optional(),
 	preserve_host: e.boolean().default(!0),
 	timeout_ms: e.number().int().positive().optional()
 });
-function mi(e) {
+function yi(e) {
 	return typeof e == "object" && !!e && typeof e.fetch == "function";
 }
-var hi = K({
+var bi = K({
 	type: "service_binding",
-	optionsSchema: pi,
+	optionsSchema: vi,
 	build(e, t) {
 		let n = t.bindings[e.binding];
-		if (!mi(n)) throw Error(`Service binding "${e.binding}" is not configured or is not a Fetcher`);
-		let r = e.upstream_url ?? `https://${e.binding}.binding.invalid/`, i = e.timeout_ms ?? fi;
+		if (!yi(n)) throw Error(`Service binding "${e.binding}" is not configured or is not a Fetcher`);
+		let r = e.upstream_url ?? `https://${e.binding}.binding.invalid/`, i = e.timeout_ms ?? _i;
 		return async (t) => {
 			let a = q(t), o;
 			try {
-				o = await ui({
+				o = await hi({
 					upstream_url: r,
 					preserve_host: e.preserve_host
 				}, a, i);
 			} catch (e) {
-				return ci(e);
+				return pi(e);
 			}
 			let { target: s, init: c } = o;
 			t.set("__proxy_upstream_host__", s.hostname), t.set("__proxy_upstream_origin__", `${s.protocol}//${s.host}`);
@@ -3472,34 +3508,34 @@ var hi = K({
 			}
 		};
 	}
-}), gi = 3e4, _i = e.object({
+}), xi = 3e4, Si = e.object({
 	binding: e.string(),
 	script_name: e.string(),
 	cpu_ms: e.number().int().positive().optional(),
 	subrequests: e.number().int().positive().optional(),
 	timeout_ms: e.number().int().positive().optional()
 });
-function vi(e) {
+function Ci(e) {
 	return typeof e == "object" && !!e && typeof e.get == "function";
 }
 var Y = /\{(tenant_id|custom_domain_id|domain|host)\}/g;
-function yi(e) {
+function wi(e) {
 	return Y.lastIndex = 0, Y.test(e);
 }
-var bi = K({
+var Ti = K({
 	type: "dispatch_namespace",
-	optionsSchema: _i,
+	optionsSchema: Si,
 	build(e, t) {
 		let n = t.bindings[e.binding];
-		if (!vi(n)) throw Error(`Dispatch namespace binding "${e.binding}" is not configured or does not expose .get()`);
-		let r = yi(e.script_name), i = e.timeout_ms ?? gi, a = e.cpu_ms || e.subrequests ? { limits: {
+		if (!Ci(n)) throw Error(`Dispatch namespace binding "${e.binding}" is not configured or does not expose .get()`);
+		let r = wi(e.script_name), i = e.timeout_ms ?? xi, a = e.cpu_ms || e.subrequests ? { limits: {
 			...e.cpu_ms ? { cpuMs: e.cpu_ms } : {},
 			...e.subrequests ? { subrequests: e.subrequests } : {}
 		} } : void 0;
 		return async (t) => {
 			let o = e.script_name;
 			if (r) {
-				let n = Dr(t), r = Or(t), i = kr(t), a = t.req.header("host") ?? t.req.header("x-forwarded-host") ?? "";
+				let n = Mr(t), r = Nr(t), i = Pr(t), a = t.req.header("host") ?? t.req.header("x-forwarded-host") ?? "";
 				if (o = o.replace(Y, (e, t) => {
 					switch (t) {
 						case "tenant_id": return n ?? "";
@@ -3522,7 +3558,7 @@ var bi = K({
 			}
 		};
 	}
-}), xi = K({
+}), Ei = K({
 	type: "redirect",
 	optionsSchema: e.object({
 		upstream_url: e.string().refine((e) => {
@@ -3551,7 +3587,7 @@ var bi = K({
 			});
 		};
 	}
-}), Si = K({
+}), Di = K({
 	type: "static",
 	optionsSchema: e.object({
 		status: e.number().int().default(200),
@@ -3571,15 +3607,15 @@ var bi = K({
 });
 //#endregion
 //#region src/data-plane/handlers/index.ts
-function Ci(e) {
-	e.add(Nr).add(Ir).add(Lr).add(Rr).add(Jr).add(Qr).add($r).add(di).add(hi).add(bi).add(xi).add(Si);
+function Oi(e) {
+	e.add(Rr).add(Vr).add(Hr).add(Ur).add($r).add(ri).add(ii).add(gi).add(bi).add(Ti).add(Ei).add(Di);
 }
 //#endregion
 //#region src/data-plane/matcher.ts
-function wi(e) {
+function ki(e) {
 	return [...e].sort((e, t) => e.priority === t.priority ? e.created_at.localeCompare(t.created_at) : e.priority - t.priority);
 }
-function Ti(e, t) {
+function Ai(e, t) {
 	let n = e.toLowerCase(), r = t.toLowerCase();
 	if (n === r) return !0;
 	if (n.startsWith("*.")) {
@@ -3588,13 +3624,13 @@ function Ti(e, t) {
 	}
 	return !1;
 }
-function Ei(e, t) {
-	return !e || e.length === 0 ? !0 : e.some((e) => Ti(e, t));
+function ji(e, t) {
+	return !e || e.length === 0 ? !0 : e.some((e) => Ai(e, t));
 }
-function Di(e) {
+function Mi(e) {
 	let t = (e.headers ? Object.entries(e.headers) : []).map(([e, t]) => [e.toLowerCase(), new RegExp(t)]), n = (e.query ? Object.entries(e.query) : []).map(([e, t]) => [e, new RegExp(t)]), r = e.hosts;
 	return async (e, i) => {
-		if (r && !Ei(r, e.req.header("host") ?? "")) return new Response("No matching route", { status: 404 });
+		if (r && !ji(r, e.req.header("host") ?? "")) return new Response("No matching route", { status: 404 });
 		for (let [n, r] of t) {
 			let t = e.req.header(n);
 			if (t === void 0 || !r.test(t)) return new Response("No matching route", { status: 404 });
@@ -3611,17 +3647,17 @@ function Di(e) {
 }
 //#endregion
 //#region src/data-plane/compile.ts
-var Oi = "forwarded_headers";
-function ki(e) {
+var Ni = "forwarded_headers";
+function Pi(e) {
 	return e.some((e) => e.type === "forwarded_headers") ? [...e] : [{
-		type: Oi,
+		type: Ni,
 		options: {}
 	}, ...e];
 }
 function X(e, t) {
-	return e.has("forwarded_headers") ? ki(t) : [...t];
+	return e.has("forwarded_headers") ? Pi(t) : [...t];
 }
-var Ai = [
+var Fi = [
 	"GET",
 	"POST",
 	"PUT",
@@ -3633,34 +3669,34 @@ var Ai = [
 function Z(e, n, r, i) {
 	let a = new t();
 	r && a.use("*", async (e, t) => {
-		Er(e, r), await t();
+		jr(e, r), await t();
 	});
-	let o = wi(e);
+	let o = ki(e);
 	for (let e of o) {
 		let t = [];
-		t.push(Di(e.match));
+		t.push(Mi(e.match));
 		for (let r of X(n, e.handlers)) t.push(n.build(r.type, r.options));
-		let r = e.match.methods?.length ? e.match.methods.map((e) => e.toUpperCase()) : Ai, i = e.match.path || "/*";
+		let r = e.match.methods?.length ? e.match.methods.map((e) => e.toUpperCase()) : Fi, i = e.match.path || "/*";
 		a.on(r, [i], ...t);
 	}
-	return i && i.length > 0 ? a.on(Ai, ["*"], ...i) : a.all("*", (e) => e.text("No matching route", 404)), a.onError((e, t) => {
+	return i && i.length > 0 ? a.on(Fi, ["*"], ...i) : a.all("*", (e) => e.text("No matching route", 404)), a.onError((e, t) => {
 		let n = V(e);
 		return t.text(n ? "Upstream timeout" : "Bad gateway", n ? 504 : 502, { "x-authhero-proxy-error": n ? "handler_timeout" : "handler_failed" });
 	}), a;
 }
 //#endregion
 //#region src/data-plane/router.ts
-var ji = 1e4;
-function Mi(e) {
+var Ii = 1e4;
+function Li(e) {
 	return e.resolver ? e.resolver : e.cache ? G(e.data, e.cache) : G(e.data, e.cacheTtlMs ?? 3e4);
 }
-function Ni(e) {
+function Ri(e) {
 	if (e.registry) return e.registry;
-	let t = new yr(e.bindings ?? {});
-	return Ci(t), t;
+	let t = new wr(e.bindings ?? {});
+	return Oi(t), t;
 }
 function Q(e) {
-	let t = Mi(e), n = Ni(e), r = /* @__PURE__ */ new WeakMap(), i = e.resolveHostTimeoutMs ?? ji, a = e.defaultHandlers && e.defaultHandlers.length > 0 ? X(n, e.defaultHandlers).map((e) => n.build(e.type, e.options)) : void 0, o = a ? Z([], n, void 0, a) : void 0;
+	let t = Li(e), n = Ri(e), r = /* @__PURE__ */ new WeakMap(), i = e.resolveHostTimeoutMs ?? Ii, a = e.defaultHandlers && e.defaultHandlers.length > 0 ? X(n, e.defaultHandlers).map((e) => n.build(e.type, e.options)) : void 0, o = a ? Z([], n, void 0, a) : void 0;
 	return async (e) => {
 		let s = e.req.header("host") ?? e.req.header("x-forwarded-host");
 		if (!s) return e.text("Missing host", 400);
@@ -3678,13 +3714,13 @@ function Q(e) {
 		}
 	};
 }
-function Pi(e) {
+function zi(e) {
 	let n = new t();
 	return n.all("*", Q(e)), n;
 }
 //#endregion
 //#region src/app.ts
-function Fi(e) {
+function Bi(e) {
 	let n = new t();
 	return n.all("*", Q({
 		data: e.data,
@@ -3702,17 +3738,17 @@ function Fi(e) {
 }
 //#endregion
 //#region src/data-plane/cache-api-cache.ts
-var Ii = 1e3, Li = 1e3;
-function Ri(e, t) {
+var Vi = 1e3, Hi = 1e3;
+function Ui(e, t) {
 	return new Request(`https://proxy-cache.internal/${encodeURIComponent(e)}/hosts/${encodeURIComponent(t.toLowerCase())}`, { method: "GET" });
 }
-function zi() {
+function Wi() {
 	return globalThis.caches?.default;
 }
-function Bi(e) {
-	let t = e.cache ?? zi();
+function Gi(e) {
+	let t = e.cache ?? Wi();
 	if (!t) return e.upstream;
-	let n = t, r = e.namespace ?? "authhero-proxy", i = e.cacheTtlSeconds ?? 60, a = e.negativeCacheTtlSeconds ?? 10, o = e.waitUntil, s = e.cacheReadTimeoutMs ?? Ii, c = e.cacheWriteTimeoutMs ?? Li;
+	let n = t, r = e.namespace ?? "authhero-proxy", i = e.cacheTtlSeconds ?? 60, a = e.negativeCacheTtlSeconds ?? 10, o = e.waitUntil, s = e.cacheReadTimeoutMs ?? Vi, c = e.cacheWriteTimeoutMs ?? Hi;
 	async function l(e) {
 		try {
 			return await W(Promise.resolve(n.match(e)), s, "cache.match");
@@ -3721,7 +3757,7 @@ function Bi(e) {
 		}
 	}
 	return { async resolveHost(t, s) {
-		let u = Ri(r, t), d = await l(u);
+		let u = Ui(r, t), d = await l(u);
 		if (d) try {
 			return (await d.json()).value;
 		} catch {}
@@ -3732,14 +3768,14 @@ function Bi(e) {
 		return o ? o(h) : await h, f;
 	} };
 }
-function Vi(e, t) {
-	return Ri(e, t);
+function Ki(e, t) {
+	return Ui(e, t);
 }
 //#endregion
 //#region src/data-plane/cache-adapter-cache.ts
-var Hi = 1e3, Ui = 1e3, Wi = 5e3;
-function Gi(e) {
-	let { upstream: t, cache: n, freshTtlMs: r, staleTtlMs: i = 0, staleIfErrorTtlMs: a = 0, negativeTtlMs: o = r, keyPrefix: s = "authhero-proxy-host", waitUntil: c, cacheReadTimeoutMs: l = Hi, cacheWriteTimeoutMs: u = Ui, upstreamTimeoutMs: d = Wi } = e, f = d > 0 ? d : 1e4, p = /* @__PURE__ */ new Map();
+var qi = 1e3, Ji = 1e3, Yi = 5e3;
+function Xi(e) {
+	let { upstream: t, cache: n, freshTtlMs: r, staleTtlMs: i = 0, staleIfErrorTtlMs: a = 0, negativeTtlMs: o = r, keyPrefix: s = "authhero-proxy-host", waitUntil: c, cacheReadTimeoutMs: l = qi, cacheWriteTimeoutMs: u = Ji, upstreamTimeoutMs: d = Yi } = e, f = d > 0 ? d : 1e4, p = /* @__PURE__ */ new Map();
 	function m(e) {
 		return `${s}:${e.toLowerCase()}`;
 	}
@@ -3796,7 +3832,7 @@ function Gi(e) {
 		}
 	} };
 }
-function Ki(e, t) {
+function Zi(e, t) {
 	return `${e}:${t.toLowerCase()}`;
 }
 //#endregion
@@ -3804,7 +3840,7 @@ function Ki(e, t) {
 function $() {
 	throw Error("Static proxy adapter is read-only; configure routes at init time");
 }
-function qi(e, t, n, r, i, a) {
+function Qi(e, t, n, r, i, a) {
 	return {
 		id: e.id ?? `${n}:${t}`,
 		tenant_id: r,
@@ -3819,10 +3855,10 @@ function qi(e, t, n, r, i, a) {
 		updated_at: e.updated_at ?? a
 	};
 }
-function Ji(e) {
+function $i(e) {
 	let t = (/* @__PURE__ */ new Date()).toISOString(), n = e.defaultTenantId ?? "static", r = /* @__PURE__ */ new Map();
 	for (let [i, a] of Object.entries(e.hosts)) {
-		let e = i.toLowerCase(), o = Array.isArray(a) ? { routes: a } : a, s = o.tenant_id ?? n, c = o.custom_domain_id ?? e, l = o.routes.map((n, r) => qi(n, r, e, s, c, t)).sort((e, t) => e.priority - t.priority);
+		let e = i.toLowerCase(), o = Array.isArray(a) ? { routes: a } : a, s = o.tenant_id ?? n, c = o.custom_domain_id ?? e, l = o.routes.map((n, r) => Qi(n, r, e, s, c, t)).sort((e, t) => e.priority - t.priority);
 		r.set(e, {
 			tenant_id: s,
 			custom_domain_id: c,
@@ -3866,7 +3902,7 @@ function Ji(e) {
 		}
 	};
 }
-function Yi(e, t = {}) {
+function ea(e, t = {}) {
 	return {
 		priority: t.priority,
 		match: { path: t.path ?? "/*" },
@@ -3881,10 +3917,10 @@ function Yi(e, t = {}) {
 }
 //#endregion
 //#region src/constants.ts
-var Xi = "proxy:resolve_host";
+var ta = "proxy:resolve_host";
 //#endregion
 //#region src/http-adapter/index.ts
-function Zi() {
+function na() {
 	let e = () => {
 		throw Error("HTTP proxy adapter does not expose write access to proxy_routes; mutate via the control-plane management API");
 	};
@@ -3906,10 +3942,10 @@ function Zi() {
 		}
 	};
 }
-function Qi(e) {
+function ra(e) {
 	let t = e.fetch ?? fetch, n = e.baseUrl.replace(/\/+$/, ""), r = e.resolveHostPath ?? "/api/v2/proxy/control-plane/hosts/", i = e.audience ?? `${n}/api/v2/`, a = e.scope ?? "proxy:resolve_host", o = e.tokenRefreshSkewSeconds ?? 60, s = e.timeoutMs ?? 2500;
 	function c(e, t) {
-		let n = new AbortController(), r = gr([e, n.signal]) ?? n.signal, i, a = new Promise((e, t) => {
+		let n = new AbortController(), r = xr([e, n.signal]) ?? n.signal, i, a = new Promise((e, t) => {
 			i = setTimeout(() => {
 				n.abort(), t(new B(s, "control plane"));
 			}, s);
@@ -3943,7 +3979,7 @@ function Qi(e) {
 		return l && l.expires_at > Date.now() ? l.value : u(e);
 	}
 	return {
-		proxyRoutes: Zi(),
+		proxyRoutes: na(),
 		async resolveHost(e, i) {
 			let a = i?.signal, o = await d(a), s = `${n}${r}${encodeURIComponent(e.toLowerCase())}`;
 			return c(a, async (e) => {
@@ -3960,7 +3996,7 @@ function Qi(e) {
 }
 //#endregion
 //#region src/http-adapter/service-binding-fetch.ts
-function $i(e) {
+function ia(e) {
 	return (t, n) => {
 		let r = t instanceof Request && n === void 0 ? t : new Request(t, n);
 		return e.fetch(r);
@@ -3968,11 +4004,11 @@ function $i(e) {
 }
 //#endregion
 //#region src/kv-adapter/index.ts
-var ea = "authhero-proxy-host:";
-function ta(e, t) {
+var aa = "authhero-proxy-host:";
+function oa(e, t) {
 	return `${e}${t.toLowerCase()}`;
 }
-function na() {
+function sa() {
 	let e = () => {
 		throw Error("KV proxy adapter does not expose write access to proxy_routes; mutate via the control-plane management API");
 	};
@@ -3994,15 +4030,15 @@ function na() {
 		}
 	};
 }
-function ra(e) {
-	let { kv: t, keyPrefix: n = ea, timeoutMs: r } = e;
+function ca(e) {
+	let { kv: t, keyPrefix: n = aa, timeoutMs: r } = e;
 	return {
-		proxyRoutes: na(),
+		proxyRoutes: sa(),
 		async resolveHost(e) {
-			let i = ta(n, e), a = t.get(i, "json");
+			let i = oa(n, e), a = t.get(i, "json");
 			return (r && r > 0 ? await W(a, r, "kv.get") : await a) ?? null;
 		}
 	};
 }
 //#endregion
-export { ea as DEFAULT_KV_HOST_KEY_PREFIX, Oi as FORWARDED_HEADERS_HANDLER_TYPE, yr as HandlerRegistry, Xi as PROXY_RESOLVE_HOST_SCOPE, Ir as basicAuthHandler, Ki as buildCacheAdapterKey, Vi as buildCacheApiKey, ta as buildKvHostKey, Di as buildMatchFilter, Rr as cacheHandler, Z as compileHostApp, Nr as corsHandler, Gi as createCacheAdapterHostCache, Bi as createCacheApiHostCache, Qi as createHttpProxyAdapter, G as createInMemoryHostCache, ra as createKvProxyAdapter, Fi as createProxyApp, Q as createProxyDataPlaneHandler, Pi as createProxyDataPlaneRouter, $i as createServiceBindingFetch, Ji as createStaticProxyAdapter, K as defineHandler, bi as dispatchNamespaceHandler, Jr as forwardedHeadersHandler, Pn as handlerConfigSchema, Lr as headersHandler, di as httpHandler, Yi as httpRoute, qr as isCloudflareIp, Nn as matchSchema, Ei as matchesAnyHost, Ti as matchesHost, L as proxyRouteInsertSchema, Fn as proxyRouteSchema, In as proxyRouteUpdateSchema, xi as redirectHandler, Ci as registerBuiltinHandlers, Qr as rewriteCookiesHandler, $r as rewriteLocationHandler, hi as serviceBindingHandler, wi as sortRoutes, Si as staticHandler, ki as withForwardedHeaders, X as withForwardedHeadersFor };
+export { aa as DEFAULT_KV_HOST_KEY_PREFIX, Ni as FORWARDED_HEADERS_HANDLER_TYPE, wr as HandlerRegistry, ta as PROXY_RESOLVE_HOST_SCOPE, Vr as basicAuthHandler, Zi as buildCacheAdapterKey, Ki as buildCacheApiKey, oa as buildKvHostKey, Mi as buildMatchFilter, Ur as cacheHandler, Z as compileHostApp, Rr as corsHandler, Xi as createCacheAdapterHostCache, Gi as createCacheApiHostCache, ra as createHttpProxyAdapter, G as createInMemoryHostCache, ca as createKvProxyAdapter, Bi as createProxyApp, Q as createProxyDataPlaneHandler, zi as createProxyDataPlaneRouter, ia as createServiceBindingFetch, $i as createStaticProxyAdapter, K as defineHandler, Ti as dispatchNamespaceHandler, $r as forwardedHeadersHandler, Ln as handlerConfigSchema, Hr as headersHandler, gi as httpHandler, ea as httpRoute, Qr as isCloudflareIp, In as matchSchema, ji as matchesAnyHost, Ai as matchesHost, z as proxyRouteInsertSchema, Rn as proxyRouteSchema, zn as proxyRouteUpdateSchema, Ei as redirectHandler, Oi as registerBuiltinHandlers, ri as rewriteCookiesHandler, ii as rewriteLocationHandler, bi as serviceBindingHandler, ki as sortRoutes, Di as staticHandler, Pi as withForwardedHeaders, X as withForwardedHeadersFor };