@authhero/proxy 0.11.4 → 0.11.6

package/dist/proxy.mjs

@@ -626,14 +626,14 @@ var Fe = /* @__PURE__ */ function(e) {
 	return e.QUERY = "query", e.FRAGMENT = "fragment", e.FORM_POST = "form_post", e.WEB_MESSAGE = "web_message", e.SAML_POST = "saml_post", e;
 }({}), Le = /* @__PURE__ */ function(e) {
 	return e.S256 = "S256", e.Plain = "plain", e;
-}({}), x = e.union([e.null(), e.object({
+}({}), Re = e.union([e.null(), e.object({
 	essential: e.boolean().optional(),
 	value: e.unknown().optional(),
 	values: e.array(e.unknown()).optional()
-})]).nullable(), Re = e.object({
-	userinfo: e.record(e.string(), x).optional(),
-	id_token: e.record(e.string(), x).optional()
-}), ze = e.object({
+})]).nullable(), ze = e.object({
+	userinfo: e.record(e.string(), Re).optional(),
+	id_token: e.record(e.string(), Re).optional()
+}), Be = e.object({
 	client_id: e.string(),
 	act_as: e.string().optional(),
 	response_type: e.nativeEnum(Fe).optional(),
@@ -651,7 +651,7 @@ var Fe = /* @__PURE__ */ function(e) {
 	ui_locales: e.string().optional(),
 	max_age: e.number().optional(),
 	acr_values: e.string().optional(),
-	claims: Re.optional(),
+	claims: ze.optional(),
 	vendor_id: e.string().optional()
 });
 e.object({
@@ -674,7 +674,7 @@ e.object({
 		"auto"
 	]).optional()
 });
-var Be = e.enum([
+var Ve = e.enum([
 	"password_reset",
 	"email_verification",
 	"otp",
@@ -689,7 +689,7 @@ e.object({
 	code_id: e.string().openapi({ description: "The code that will be used in for instance an email verification flow" }),
 	login_id: e.string().optional().openapi({ description: "The id of the login session that the code is connected to" }),
 	connection_id: e.string().optional().openapi({ description: "The connection that the code is connected to" }),
-	code_type: Be,
+	code_type: Ve,
 	code_verifier: e.string().optional().openapi({ description: "The code verifier used in PKCE in outbound flows" }),
 	code_challenge: e.string().optional().openapi({ description: "The code challenge used in PKCE in outbound flows" }),
 	code_challenge_method: e.enum(["plain", "S256"]).optional().openapi({ description: "The code challenge method used in PKCE in outbound flows" }),
@@ -701,7 +701,7 @@ e.object({
 	used_at: e.string().optional(),
 	user_id: e.string().optional()
 }).extend({ created_at: e.string() });
-var Ve = e.object({
+var He = e.object({
 	kid: e.string().optional(),
 	team_id: e.string().optional(),
 	realms: e.string().optional(),
@@ -821,23 +821,23 @@ var Ve = e.object({
 		"never_on_login"
 	]).optional()
 });
-function S(e) {
+function x(e) {
 	if (e !== null) {
-		if (Array.isArray(e)) return e.filter((e) => e !== null).map(S);
+		if (Array.isArray(e)) return e.filter((e) => e !== null).map(x);
 		if (e && typeof e == "object") {
 			let t = {};
-			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = S(r));
+			for (let [n, r] of Object.entries(e)) r !== null && (t[n] = x(r));
 			return t;
 		}
 		return e;
 	}
 }
-var He = e.object({
+var Ue = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	display_name: e.string().optional(),
 	strategy: e.string(),
-	options: e.preprocess((e) => e === null ? {} : S(e), Ve).default({}),
+	options: e.preprocess((e) => e === null ? {} : x(e), He).default({}),
 	enabled_clients: e.array(e.string()).default([]).optional(),
 	response_type: e.nativeEnum(Fe).optional(),
 	response_mode: e.nativeEnum(Ie).optional(),
@@ -850,8 +850,8 @@ e.object({
 	id: e.string(),
 	created_at: e.string().transform((e) => e === null ? "" : e),
 	updated_at: e.string().transform((e) => e === null ? "" : e)
-}).extend(He.shape);
-var Ue = e.object({
+}).extend(Ue.shape);
+var We = e.object({
 	domain: e.string(),
 	custom_domain_id: e.string().optional(),
 	type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -865,7 +865,7 @@ var Ue = e.object({
 		"null"
 	]).optional(),
 	domain_metadata: e.record(e.string(), e.string().max(255)).optional()
-}), We = e.discriminatedUnion("name", [e.object({
+}), Ge = e.discriminatedUnion("name", [e.object({
 	name: e.literal("txt"),
 	record: e.string(),
 	domain: e.string()
@@ -873,7 +873,7 @@ var Ue = e.object({
 	name: e.literal("http"),
 	http_body: e.string(),
 	http_url: e.string()
-})]), Ge = Ue.extend({
+})]), Ke = We.extend({
 	custom_domain_id: e.string(),
 	primary: e.boolean(),
 	status: e.enum([
@@ -883,28 +883,28 @@ var Ue = e.object({
 		"ready"
 	]),
 	origin_domain_name: e.string().optional(),
-	verification: e.object({ methods: e.array(We) }).optional(),
+	verification: e.object({ methods: e.array(Ge) }).optional(),
 	tls_policy: e.string().optional()
 });
-Ue.pick({
+We.pick({
 	tls_policy: !0,
 	custom_client_ip_header: !0,
 	domain_metadata: !0
-}).strict(), Ge.extend({ tenant_id: e.string() }), e.object({
+}).strict(), Ke.extend({ tenant_id: e.string() }), e.object({
 	certificate: e.string().regex(/^-----BEGIN CERTIFICATE-----[\s\S]+-----END CERTIFICATE-----\s*$/, "must be PEM-encoded; include the full certificate chain in leaf-first order"),
 	private_key: e.string().regex(/-----BEGIN (RSA |EC |ENCRYPTED )?PRIVATE KEY-----[\s\S]+-----END \1PRIVATE KEY-----\s*$/, "must be a PEM-encoded private key")
 });
-var C = e.object({
+var S = e.object({
 	id: e.string(),
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0)
-}), w = C.extend({ category: e.literal("BLOCK").optional() }), Ke = w.extend({
+}), C = S.extend({ category: e.literal("BLOCK").optional() }), qe = C.extend({
 	type: e.literal("DIVIDER"),
 	config: e.object({ text: e.string().optional() }).optional()
-}), qe = w.extend({
+}), Je = C.extend({
 	type: e.literal("HTML"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), Je = w.extend({
+}), Ye = C.extend({
 	type: e.literal("IMAGE"),
 	config: e.object({
 		src: e.string().optional(),
@@ -912,47 +912,47 @@ var C = e.object({
 		width: e.number().optional(),
 		height: e.number().optional()
 	}).optional()
-}), Ye = w.extend({
+}), Xe = C.extend({
 	type: e.literal("JUMP_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		target_step: e.string().optional()
 	})
-}), Xe = w.extend({
+}), Ze = C.extend({
 	type: e.literal("RESEND_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		resend_action: e.string().optional()
 	})
-}), Ze = w.extend({
+}), Qe = C.extend({
 	type: e.literal("NEXT_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		variant: e.enum(["primary", "secondary"]).optional(),
 		skip_validation: e.boolean().optional()
 	})
-}), Qe = w.extend({
+}), $e = C.extend({
 	type: e.literal("PREVIOUS_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), $e = w.extend({
+}), et = C.extend({
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), T = C.extend({
+}), w = S.extend({
 	category: e.literal("WIDGET").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), et = T.extend({
+}), tt = w.extend({
 	type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
 	config: e.object({ credential_type: e.string().optional() })
-}), tt = T.extend({
+}), nt = w.extend({
 	type: e.literal("GMAPS_ADDRESS"),
 	config: e.object({ api_key: e.string().optional() })
-}), nt = T.extend({
+}), rt = w.extend({
 	type: e.literal("RECAPTCHA"),
 	config: e.object({ site_key: e.string().optional() })
-}), E = C.extend({
+}), T = S.extend({
 	category: e.literal("FIELD").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
@@ -968,10 +968,10 @@ var C = e.object({
 	})).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), rt = E.extend({
+}), it = T.extend({
 	type: e.literal("BOOLEAN"),
 	config: e.object({ default_value: e.boolean().optional() }).optional()
-}), it = E.extend({
+}), at = T.extend({
 	type: e.literal("CARDS"),
 	config: e.object({
 		options: e.array(e.object({
@@ -982,7 +982,7 @@ var C = e.object({
 		})).optional(),
 		multi_select: e.boolean().optional()
 	}).optional()
-}), at = E.extend({
+}), ot = T.extend({
 	type: e.literal("CHOICE"),
 	config: e.object({
 		options: e.array(e.object({
@@ -993,7 +993,7 @@ var C = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), ot = E.extend({
+}), st = T.extend({
 	type: e.literal("CODE"),
 	config: e.object({
 		length: e.number().int().positive().max(100).optional(),
@@ -1010,7 +1010,7 @@ var C = e.object({
 		message: "default_value is longer than the configured length",
 		path: ["default_value"]
 	}).optional()
-}), st = E.extend({
+}), ct = T.extend({
 	type: e.literal("CUSTOM"),
 	config: e.object({
 		component: e.string().optional(),
@@ -1018,7 +1018,7 @@ var C = e.object({
 		schema: e.record(e.string(), e.any()).optional(),
 		code: e.string().optional()
 	})
-}), ct = E.extend({
+}), lt = T.extend({
 	type: e.literal("DATE"),
 	config: e.object({
 		format: e.string().optional(),
@@ -1026,7 +1026,7 @@ var C = e.object({
 		max: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), lt = E.extend({
+}), ut = T.extend({
 	type: e.literal("DROPDOWN"),
 	config: e.object({
 		options: e.array(e.object({
@@ -1038,7 +1038,7 @@ var C = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), ut = E.extend({
+}), dt = T.extend({
 	type: e.literal("EMAIL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1046,20 +1046,20 @@ var C = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), dt = E.extend({
+}), ft = T.extend({
 	type: e.literal("FILE"),
 	config: e.object({
 		accept: e.string().optional(),
 		max_size: e.number().optional(),
 		multiple: e.boolean().optional()
 	}).optional()
-}), ft = E.extend({
+}), pt = T.extend({
 	type: e.literal("LEGAL"),
 	config: e.object({
 		text: e.string(),
 		html: e.boolean().optional()
 	}).optional()
-}), pt = E.extend({
+}), mt = T.extend({
 	type: e.literal("NUMBER"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1068,7 +1068,7 @@ var C = e.object({
 		step: e.number().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), mt = E.extend({
+}), ht = T.extend({
 	type: e.literal("PASSWORD"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1077,13 +1077,13 @@ var C = e.object({
 		forgot_password_link: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), ht = E.extend({
+}), gt = T.extend({
 	type: e.literal("PAYMENT"),
 	config: e.object({
 		provider: e.string().optional(),
 		currency: e.string().optional()
 	}).optional()
-}), gt = E.extend({
+}), _t = T.extend({
 	type: e.literal("SOCIAL"),
 	config: e.object({
 		providers: e.array(e.string()).optional(),
@@ -1098,7 +1098,7 @@ var C = e.object({
 			last_used_label: e.string().optional()
 		})).optional()
 	}).optional()
-}), _t = E.extend({
+}), vt = T.extend({
 	type: e.literal("TEL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1106,7 +1106,7 @@ var C = e.object({
 		default_value: e.string().optional(),
 		allow_email: e.boolean().optional()
 	}).optional()
-}), vt = E.extend({
+}), yt = T.extend({
 	type: e.literal("TEXT"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1116,38 +1116,37 @@ var C = e.object({
 		last_used: e.boolean().optional(),
 		last_used_label: e.string().optional()
 	}).optional()
-}), yt = E.extend({
+}), bt = T.extend({
 	type: e.literal("COUNTRY"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), bt = E.extend({
+}), xt = T.extend({
 	type: e.literal("URL"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), xt = e.discriminatedUnion("type", [
-	Ke,
+}), St = e.discriminatedUnion("type", [
 	qe,
 	Je,
 	Ye,
 	Xe,
 	Ze,
 	Qe,
-	$e
-]), St = e.discriminatedUnion("type", [
-	et,
-	tt,
-	nt
+	$e,
+	et
 ]), Ct = e.discriminatedUnion("type", [
-	rt,
+	tt,
+	nt,
+	rt
+]), wt = e.discriminatedUnion("type", [
 	it,
 	at,
 	ot,
-	yt,
 	st,
+	bt,
 	ct,
 	lt,
 	ut,
@@ -1159,11 +1158,12 @@ var C = e.object({
 	gt,
 	_t,
 	vt,
-	bt
-]), wt = e.union([
-	xt,
+	yt,
+	xt
+]), Tt = e.union([
 	St,
-	Ct
+	Ct,
+	wt
 ]);
 new Set([
 	"BOOLEAN",
@@ -1190,22 +1190,22 @@ new Set([
 	visible: e.boolean().optional().default(!0),
 	customizations: e.record(e.string(), e.any()).optional()
 });
-var D = e.object({
+var E = e.object({
 	x: e.number(),
 	y: e.number()
-}), Tt = e.object({
+}), Et = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: D,
+	coordinates: E,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
 		flow_id: e.string().max(30),
 		next_node: e.string().optional()
 	})
-}), Et = e.object({
+}), Dt = e.object({
 	id: e.string(),
 	type: e.literal("ROUTER"),
-	coordinates: D,
+	coordinates: E,
 	alias: e.string().min(1).max(150),
 	config: e.object({
 		rules: e.array(e.object({
@@ -1216,20 +1216,20 @@ var D = e.object({
 		})),
 		fallback: e.string()
 	})
-}), Dt = e.object({
+}), Ot = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: D,
+	coordinates: E,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
-		components: e.array(wt),
+		components: e.array(Tt),
 		next_node: e.string().optional()
 	})
-}), Ot = e.discriminatedUnion("type", [
-	Tt,
+}), kt = e.discriminatedUnion("type", [
 	Et,
-	Dt
-]), kt = e.object({
+	Dt,
+	Ot
+]), At = e.object({
 	name: e.string().openapi({ description: "The name of the form" }),
 	messages: e.object({
 		errors: e.record(e.string(), e.any()).optional(),
@@ -1240,14 +1240,14 @@ var D = e.object({
 		default: e.string().optional()
 	}).optional(),
 	translations: e.record(e.string(), e.any()).optional(),
-	nodes: e.array(Ot).optional(),
+	nodes: e.array(kt).optional(),
 	start: e.object({
 		hidden_fields: e.array(e.object({
 			key: e.string(),
 			value: e.string()
 		})).optional(),
 		next_node: e.string().optional(),
-		coordinates: D.optional()
+		coordinates: E.optional()
 	}).optional(),
 	ending: e.object({
 		redirection: e.object({
@@ -1255,7 +1255,7 @@ var D = e.object({
 			target: e.string().optional()
 		}).optional(),
 		after_submit: e.object({ flow_id: e.string().optional() }).optional(),
-		coordinates: D.optional(),
+		coordinates: E.optional(),
 		resume_flow: e.boolean().optional()
 	}).optional(),
 	style: e.object({ css: e.string().optional() }).optional(),
@@ -1264,8 +1264,8 @@ var D = e.object({
 		sdk_src: e.string().optional()
 	}).optional()
 }).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" });
-n.extend(kt.shape).extend({ id: e.string() });
-var At = e.object({
+n.extend(At.shape).extend({ id: e.string() });
+var jt = e.object({
 	id: e.number().optional(),
 	text: e.string(),
 	type: e.enum([
@@ -1274,24 +1274,32 @@ var At = e.object({
 		"success",
 		"warning"
 	])
-}), jt = e.object({
+}), Mt = e.object({
 	id: e.string().optional(),
 	text: e.string(),
 	href: e.string(),
 	linkText: e.string().optional()
-});
+}), Nt = e.object({
+	"form-content-start": e.string().optional(),
+	"form-content-end": e.string().optional(),
+	"form-footer-start": e.string().optional(),
+	"form-footer-end": e.string().optional(),
+	"secondary-actions-start": e.string().optional(),
+	"secondary-actions-end": e.string().optional()
+}).strict();
 e.object({
 	name: e.string().optional(),
 	action: e.string(),
 	method: e.enum(["POST", "GET"]),
 	title: e.string().optional(),
 	description: e.string().optional(),
-	components: e.array(wt),
-	messages: e.array(At).optional(),
-	links: e.array(jt).optional(),
+	components: e.array(Tt),
+	messages: e.array(jt).optional(),
+	links: e.array(Mt).optional(),
+	partials: Nt.optional(),
 	footer: e.string().optional()
 });
-var O = e.enum([
+var D = e.enum([
 	"pre-user-registration",
 	"post-user-registration",
 	"post-user-login",
@@ -1299,95 +1307,95 @@ var O = e.enum([
 	"validate-registration-username",
 	"pre-user-deletion",
 	"post-user-deletion"
-]), k = e.enum(["post-user-login"]), A = e.enum([
+]), O = e.enum(["post-user-login"]), k = e.enum([
 	"post-user-login",
 	"post-user-registration",
 	"post-user-update",
 	"credentials-exchange"
-]), j = e.enum([
+]), A = e.enum([
 	"post-user-login",
 	"credentials-exchange",
 	"pre-user-registration",
 	"post-user-registration"
-]), M = e.enum(["post-user-login"]);
-O.options, k.options, A.options, j.options, M.options;
-var Mt = e.enum(["impersonate"]), Nt = e.enum([
+]), j = e.enum(["post-user-login"]);
+D.options, O.options, k.options, A.options, j.options;
+var Pt = e.enum(["impersonate"]), Ft = e.enum([
 	"ensure-username",
 	"set-preferred-username",
 	"account-linking"
-]), N = {
+]), M = {
 	enabled: e.boolean().default(!1),
 	synchronous: e.boolean().default(!1),
 	priority: e.number().optional(),
 	hook_id: e.string().optional(),
 	metadata: e.record(e.string(), e.unknown()).optional()
-}, Pt = e.object({
-	...N,
-	trigger_id: O,
+}, It = e.object({
+	...M,
+	trigger_id: D,
 	url: e.string()
-}), Ft = e.object({
-	...N,
-	trigger_id: k,
+}), Lt = e.object({
+	...M,
+	trigger_id: O,
 	form_id: e.string()
-}), It = e.object({
-	...N,
+}), Rt = e.object({
+	...M,
+	trigger_id: k,
+	template_id: Ft
+}), zt = e.object({
+	...M,
 	trigger_id: A,
-	template_id: Nt
-}), Lt = e.object({
-	...N,
-	trigger_id: j,
 	code_id: e.string()
-}), Rt = e.object({
-	...N,
-	trigger_id: M,
-	page_id: Mt,
+}), Bt = e.object({
+	...M,
+	trigger_id: j,
+	page_id: Pt,
 	permission_required: e.string().optional()
 });
 e.union([
-	Pt,
-	Ft,
 	It,
 	Lt,
-	Rt
+	Rt,
+	zt,
+	Bt
 ]);
-var zt = e.object({
-	...N,
-	trigger_id: O
+var Vt = e.object({
+	...M,
+	trigger_id: D
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	url: e.string()
-}), Bt = e.object({
-	...N,
-	trigger_id: k
+}), Ht = e.object({
+	...M,
+	trigger_id: O
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	form_id: e.string()
-}), Vt = e.object({
-	...N,
-	trigger_id: A
+}), Ut = e.object({
+	...M,
+	trigger_id: k
 }).extend(n.shape).extend({
 	hook_id: e.string(),
-	template_id: Nt
-}), Ht = e.object({
-	...N,
-	trigger_id: j
+	template_id: Ft
+}), Wt = e.object({
+	...M,
+	trigger_id: A
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	code_id: e.string()
-}), Ut = e.object({
-	...N,
-	trigger_id: M
+}), Gt = e.object({
+	...M,
+	trigger_id: j
 }).extend(n.shape).extend({
 	hook_id: e.string(),
-	page_id: Mt,
+	page_id: Pt,
 	permission_required: e.string().optional()
 });
 e.union([
-	zt,
-	Bt,
 	Vt,
 	Ht,
-	Ut
+	Ut,
+	Wt,
+	Gt
 ]), e.object({
 	code: e.string().max(1e5),
 	secrets: e.record(e.string(), e.string()).optional()
@@ -1395,11 +1403,11 @@ e.union([
 	id: e.string(),
 	tenant_id: e.string()
 }).extend(n.shape);
-var Wt = e.object({ name: e.string().optional() }), Gt = e.object({ email: e.string().optional() }), Kt = e.object({
+var Kt = e.object({ name: e.string().optional() }), qt = e.object({ email: e.string().optional() }), Jt = e.object({
 	id: e.string().optional(),
 	organization_id: e.string().max(50),
-	inviter: Wt,
-	invitee: Gt,
+	inviter: Kt,
+	invitee: qt,
 	invitation_url: e.string().url(),
 	client_id: e.string(),
 	connection_id: e.string().optional(),
@@ -1415,8 +1423,8 @@ e.object({
 	created_at: e.string().datetime(),
 	expires_at: e.string().datetime(),
 	ticket_id: e.string().optional()
-}).extend(Kt.omit({ id: !0 }).shape);
-var qt = e.object({
+}).extend(Jt.omit({ id: !0 }).shape);
+var Yt = e.object({
 	alg: e.enum([
 		"RS256",
 		"RS384",
@@ -1458,7 +1466,7 @@ var qt = e.object({
 		path: [r],
 		message: `EC JWK is missing required member '${r}'`
 	});
-}), Jt = e.object({ keys: e.array(qt) });
+}), Xt = e.object({ keys: e.array(Yt) });
 e.object({
 	issuer: e.string(),
 	authorization_endpoint: e.string(),
@@ -1486,35 +1494,35 @@ e.object({
 	backchannel_logout_supported: e.boolean().optional(),
 	backchannel_logout_session_supported: e.boolean().optional()
 });
-var Yt = /* @__PURE__ */ function(e) {
+var Zt = /* @__PURE__ */ function(e) {
 	return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.AWAITING_CONSENT = "awaiting_consent", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
-}({}), Xt = e.nativeEnum(Yt), Zt = e.object({
+}({}), Qt = e.nativeEnum(Zt), $t = e.object({
 	strategy: e.string(),
 	strategy_type: e.string()
 });
 e.object({
 	csrf_token: e.string(),
 	auth0Client: e.string().optional(),
-	authParams: ze,
+	authParams: Be,
 	expires_at: e.string(),
 	deleted_at: e.string().optional(),
 	ip: e.string().optional(),
 	useragent: e.string().optional(),
 	session_id: e.string().optional(),
 	authorization_url: e.string().optional(),
-	state: Xt.optional().default("pending"),
+	state: Qt.optional().default("pending"),
 	state_data: e.string().optional(),
 	failure_reason: e.string().optional(),
 	user_id: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: Zt.optional(),
+	auth_strategy: $t.optional(),
 	authenticated_at: e.string().optional()
 }).openapi({ description: "This represents a login sesion" }).extend({
 	id: e.string().openapi({ description: "This is is used as the state in the universal login" }),
 	created_at: e.string(),
 	updated_at: e.string()
 });
-var P = {
+var N = {
 	ACLS_SUMMARY: "acls_summary",
 	ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
 	API_LIMIT: "api_limit",
@@ -1674,17 +1682,17 @@ var P = {
 	WARNING_DURING_LOGIN: "w",
 	WARNING_SENDING_NOTIFICATION: "wn",
 	WARNING_USER_MANAGEMENT: "wum"
-}, Qt = e.string().refine((e) => Object.values(P).includes(e), { message: "Invalid log type" });
-P.ACLS_SUMMARY, P.ACTIONS_EXECUTION_FAILED, P.API_LIMIT, P.API_LIMIT_WARNING, P.APPI, P.CIBA_EXCHANGE_FAILED, P.CIBA_EXCHANGE_SUCCEEDED, P.CIBA_START_FAILED, P.CIBA_START_SUCCEEDED, P.CODE_LINK_SENT, P.CODE_SENT, P.DEPRECATION_NOTICE, P.FAILED_LOGIN, P.FAILED_BY_CONNECTOR, P.FAILED_CHANGE_EMAIL, P.FAILED_BY_CORS, P.FAILED_CROSS_ORIGIN_AUTHENTICATION, P.FAILED_CHANGE_PASSWORD, P.FAILED_POST_CHANGE_PASSWORD_HOOK, P.FAILED_CHANGE_PHONE_NUMBER, P.FAILED_CHANGE_PASSWORD_REQUEST, P.FAILED_CONNECTOR_PROVISIONING, P.FAILED_CHANGE_USERNAME, P.FAILED_DELEGATION, P.FAILED_DEVICE_ACTIVATION, P.FAILED_DEVICE_AUTHORIZATION_REQUEST, P.USER_CANCELED_DEVICE_CONFIRMATION, P.FAILED_USER_DELETION, P.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, P.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, P.FAILED_EXCHANGE_CUSTOM_TOKEN, P.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, P.FAILED_FEDERATED_LOGOUT, P.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN, P.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, P.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, P.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, P.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, P.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, P.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN, P.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, P.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, P.FAILED_HOOK, P.FAILED_IMPERSONATION, P.FAILED_INVITE_ACCEPT, P.FAILED_LOGOUT, P.FLOWS_EXECUTION_COMPLETED, P.FLOWS_EXECUTION_FAILED, P.FAILED_SENDING_NOTIFICATION, P.FORMS_SUBMISSION_FAILED, P.FORMS_SUBMISSION_SUCCEEDED, P.FAILED_LOGIN_INCORRECT_PASSWORD, P.FAILED_PUSHED_AUTHORIZATION_REQUEST, P.FAILED_POST_USER_REGISTRATION_HOOK, P.FAILED_SIGNUP, P.FAILED_SILENT_AUTH, P.FAILED_LOGIN_INVALID_EMAIL_USERNAME, P.FAILED_USERS_IMPORT, P.FAILED_VERIFICATION_EMAIL, P.FAILED_VERIFICATION_EMAIL_REQUEST, P.EMAIL_VERIFICATION_CONFIRMED, P.EMAIL_VERIFICATION_FAILED, P.MFA_AUTH_FAILED, P.MFA_AUTH_REJECTED, P.MFA_AUTH_SUCCESS, P.MFA_ENROLLMENT_COMPLETE, P.TOO_MANY_MFA_FAILURES, P.MFA_RECOVERY_FAILED, P.MFA_RECOVERY_RATE_LIMIT_EXCEED, P.MFA_RECOVERY_SUCCESS, P.MFA_EMAIL_SENT, P.EMAIL_VERIFICATION_SENT, P.EMAIL_VERIFICATION_SEND_FAILURE, P.PUSH_NOTIFICATION_SENT, P.ERROR_SENDING_MFA_PUSH_NOTIFICATION, P.MFA_SMS_SENT, P.ERROR_SENDING_MFA_SMS, P.MFA_VOICE_CALL_SUCCESS, P.MFA_VOICE_CALL_FAILED, P.SECOND_FACTOR_STARTED, P.MFA_ENROLL_STARTED, P.MFA_ENROLLMENT_FAILED, P.GUARDIAN_TENANT_UPDATE, P.UNENROLL_DEVICE_ACCOUNT, P.UPDATE_DEVICE_ACCOUNT, P.WEBAUTHN_CHALLENGE_FAILED, P.WEBAUTHN_ENROLLMENT_FAILED, P.FAILED_KMS_API_OPERATION, P.SUCCESS_KMS_API_OPERATION, P.KMS_KEY_STATE_CHANGED, P.TOO_MANY_CALLS_TO_DELEGATION, P.BLOCKED_IP_ADDRESS, P.BLOCKED_ACCOUNT_IP, P.BLOCKED_ACCOUNT_EMAIL, P.INFORMATION, P.MFA_REQUIRED, P.MANAGEMENT_API_READ_OPERATION, P.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, P.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, P.FAILED_OIDC_BACKCHANNEL_LOGOUT, P.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT, P.ORGANIZATION_MEMBER_ADDED, P.PASSKEY_CHALLENGE_FAILED, P.PASSKEY_CHALLENGE_STARTED, P.PRE_LOGIN_ASSESSMENT, P.BREACHED_PASSWORD, P.BREACHED_PASSWORD_ON_RESET, P.SUCCESS_RESOURCE_CLEANUP, P.RICH_CONSENTS_ACCESS_ERROR, P.SUCCESS_LOGIN, P.SUCCESS_API_OPERATION, P.FAILED_API_OPERATION, P.SUCCESS_CHANGE_EMAIL, P.SUCCESS_CROSS_ORIGIN_AUTHENTICATION, P.SUCCESS_CHANGE_PASSWORD, P.SUCCESS_CHANGE_PHONE_NUMBER, P.SUCCESS_CHANGE_PASSWORD_REQUEST, P.SUCCESS_CHANGE_USERNAME, P.SUCCESS_CREDENTIAL_VALIDATION, P.SUCCESS_DELEGATION, P.SUCCESS_USER_DELETION, P.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, P.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, P.SUCCESS_EXCHANGE_CUSTOM_TOKEN, P.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, P.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN, P.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, P.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, P.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, P.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, P.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN, P.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN, P.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN, P.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, P.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, P.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, P.SUCCESS_IMPERSONATION, P.SUCCESSFULLY_ACCEPTED_USER_INVITE, P.BREACHED_PASSWORD_ON_SIGNUP, P.SUCCESS_LOGOUT, P.SUCCESS_HOOK, P.SUCCESS_PASSWORD_MIGRATION, P.SUCCESS_REVOCATION, P.SUCCESS_SIGNUP, P.FAILED_SS_SSO_OPERATION, P.INFORMATION_FROM_SS_SSO_OPERATION, P.SUCCESS_SS_SSO_OPERATION, P.SUCCESS_SILENT_AUTH, P.SUCCESSFUL_SCIM_OPERATION, P.SUCCESSFULLY_IMPORTED_USERS, P.SUCCESS_VERIFICATION_EMAIL, P.SUCCESS_VERIFICATION_EMAIL_REQUEST, P.MAX_AMOUNT_OF_AUTHENTICATORS, P.USER_LOGIN_BLOCK_RELEASED, P.FAILED_UNIVERSAL_LOGOUT, P.SUCCESSFUL_UNIVERSAL_LOGOUT, P.WARNING_DURING_LOGIN, P.WARNING_SENDING_NOTIFICATION, P.WARNING_USER_MANAGEMENT, (() => {
+}, en = e.string().refine((e) => Object.values(N).includes(e), { message: "Invalid log type" });
+N.ACLS_SUMMARY, N.ACTIONS_EXECUTION_FAILED, N.API_LIMIT, N.API_LIMIT_WARNING, N.APPI, N.CIBA_EXCHANGE_FAILED, N.CIBA_EXCHANGE_SUCCEEDED, N.CIBA_START_FAILED, N.CIBA_START_SUCCEEDED, N.CODE_LINK_SENT, N.CODE_SENT, N.DEPRECATION_NOTICE, N.FAILED_LOGIN, N.FAILED_BY_CONNECTOR, N.FAILED_CHANGE_EMAIL, N.FAILED_BY_CORS, N.FAILED_CROSS_ORIGIN_AUTHENTICATION, N.FAILED_CHANGE_PASSWORD, N.FAILED_POST_CHANGE_PASSWORD_HOOK, N.FAILED_CHANGE_PHONE_NUMBER, N.FAILED_CHANGE_PASSWORD_REQUEST, N.FAILED_CONNECTOR_PROVISIONING, N.FAILED_CHANGE_USERNAME, N.FAILED_DELEGATION, N.FAILED_DEVICE_ACTIVATION, N.FAILED_DEVICE_AUTHORIZATION_REQUEST, N.USER_CANCELED_DEVICE_CONFIRMATION, N.FAILED_USER_DELETION, N.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, N.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, N.FAILED_EXCHANGE_CUSTOM_TOKEN, N.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, N.FAILED_FEDERATED_LOGOUT, N.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN, N.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, N.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, N.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, N.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, N.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, N.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN, N.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, N.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, N.FAILED_HOOK, N.FAILED_IMPERSONATION, N.FAILED_INVITE_ACCEPT, N.FAILED_LOGOUT, N.FLOWS_EXECUTION_COMPLETED, N.FLOWS_EXECUTION_FAILED, N.FAILED_SENDING_NOTIFICATION, N.FORMS_SUBMISSION_FAILED, N.FORMS_SUBMISSION_SUCCEEDED, N.FAILED_LOGIN_INCORRECT_PASSWORD, N.FAILED_PUSHED_AUTHORIZATION_REQUEST, N.FAILED_POST_USER_REGISTRATION_HOOK, N.FAILED_SIGNUP, N.FAILED_SILENT_AUTH, N.FAILED_LOGIN_INVALID_EMAIL_USERNAME, N.FAILED_USERS_IMPORT, N.FAILED_VERIFICATION_EMAIL, N.FAILED_VERIFICATION_EMAIL_REQUEST, N.EMAIL_VERIFICATION_CONFIRMED, N.EMAIL_VERIFICATION_FAILED, N.MFA_AUTH_FAILED, N.MFA_AUTH_REJECTED, N.MFA_AUTH_SUCCESS, N.MFA_ENROLLMENT_COMPLETE, N.TOO_MANY_MFA_FAILURES, N.MFA_RECOVERY_FAILED, N.MFA_RECOVERY_RATE_LIMIT_EXCEED, N.MFA_RECOVERY_SUCCESS, N.MFA_EMAIL_SENT, N.EMAIL_VERIFICATION_SENT, N.EMAIL_VERIFICATION_SEND_FAILURE, N.PUSH_NOTIFICATION_SENT, N.ERROR_SENDING_MFA_PUSH_NOTIFICATION, N.MFA_SMS_SENT, N.ERROR_SENDING_MFA_SMS, N.MFA_VOICE_CALL_SUCCESS, N.MFA_VOICE_CALL_FAILED, N.SECOND_FACTOR_STARTED, N.MFA_ENROLL_STARTED, N.MFA_ENROLLMENT_FAILED, N.GUARDIAN_TENANT_UPDATE, N.UNENROLL_DEVICE_ACCOUNT, N.UPDATE_DEVICE_ACCOUNT, N.WEBAUTHN_CHALLENGE_FAILED, N.WEBAUTHN_ENROLLMENT_FAILED, N.FAILED_KMS_API_OPERATION, N.SUCCESS_KMS_API_OPERATION, N.KMS_KEY_STATE_CHANGED, N.TOO_MANY_CALLS_TO_DELEGATION, N.BLOCKED_IP_ADDRESS, N.BLOCKED_ACCOUNT_IP, N.BLOCKED_ACCOUNT_EMAIL, N.INFORMATION, N.MFA_REQUIRED, N.MANAGEMENT_API_READ_OPERATION, N.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, N.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, N.FAILED_OIDC_BACKCHANNEL_LOGOUT, N.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT, N.ORGANIZATION_MEMBER_ADDED, N.PASSKEY_CHALLENGE_FAILED, N.PASSKEY_CHALLENGE_STARTED, N.PRE_LOGIN_ASSESSMENT, N.BREACHED_PASSWORD, N.BREACHED_PASSWORD_ON_RESET, N.SUCCESS_RESOURCE_CLEANUP, N.RICH_CONSENTS_ACCESS_ERROR, N.SUCCESS_LOGIN, N.SUCCESS_API_OPERATION, N.FAILED_API_OPERATION, N.SUCCESS_CHANGE_EMAIL, N.SUCCESS_CROSS_ORIGIN_AUTHENTICATION, N.SUCCESS_CHANGE_PASSWORD, N.SUCCESS_CHANGE_PHONE_NUMBER, N.SUCCESS_CHANGE_PASSWORD_REQUEST, N.SUCCESS_CHANGE_USERNAME, N.SUCCESS_CREDENTIAL_VALIDATION, N.SUCCESS_DELEGATION, N.SUCCESS_USER_DELETION, N.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, N.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, N.SUCCESS_EXCHANGE_CUSTOM_TOKEN, N.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, N.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN, N.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, N.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, N.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, N.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, N.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN, N.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN, N.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN, N.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, N.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, N.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, N.SUCCESS_IMPERSONATION, N.SUCCESSFULLY_ACCEPTED_USER_INVITE, N.BREACHED_PASSWORD_ON_SIGNUP, N.SUCCESS_LOGOUT, N.SUCCESS_HOOK, N.SUCCESS_PASSWORD_MIGRATION, N.SUCCESS_REVOCATION, N.SUCCESS_SIGNUP, N.FAILED_SS_SSO_OPERATION, N.INFORMATION_FROM_SS_SSO_OPERATION, N.SUCCESS_SS_SSO_OPERATION, N.SUCCESS_SILENT_AUTH, N.SUCCESSFUL_SCIM_OPERATION, N.SUCCESSFULLY_IMPORTED_USERS, N.SUCCESS_VERIFICATION_EMAIL, N.SUCCESS_VERIFICATION_EMAIL_REQUEST, N.MAX_AMOUNT_OF_AUTHENTICATORS, N.USER_LOGIN_BLOCK_RELEASED, N.FAILED_UNIVERSAL_LOGOUT, N.SUCCESSFUL_UNIVERSAL_LOGOUT, N.WARNING_DURING_LOGIN, N.WARNING_SENDING_NOTIFICATION, N.WARNING_USER_MANAGEMENT, (() => {
 	let e = {};
-	for (let [t, n] of Object.entries(P)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
+	for (let [t, n] of Object.entries(N)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
 	return e;
 })();
-var $t = e.object({
+var tn = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.object({ node: e.string().optional() }).optional()
-}), en = e.object({
+}), nn = e.object({
 	country_code: e.string().length(2),
 	city_name: e.string(),
 	latitude: e.string(),
@@ -1693,7 +1701,7 @@ var $t = e.object({
 	continent_code: e.string()
 });
 e.object({
-	type: Qt,
+	type: en,
 	date: e.string(),
 	description: e.string().optional(),
 	ip: e.string().optional(),
@@ -1711,63 +1719,63 @@ e.object({
 	strategy: e.string().optional(),
 	strategy_type: e.string().optional(),
 	hostname: e.string().optional(),
-	auth0_client: $t.optional(),
+	auth0_client: tn.optional(),
 	log_id: e.string().optional(),
-	location_info: en.optional()
+	location_info: nn.optional()
 }).extend({ log_id: e.string() });
-var tn = e.enum([
+var rn = e.enum([
 	"http",
 	"eventbridge",
 	"eventgrid",
 	"splunk",
 	"datadog",
 	"sumo"
-]), nn = e.enum([
+]), an = e.enum([
 	"active",
 	"paused",
 	"suspended"
-]), rn = e.object({
+]), on = e.object({
 	type: e.string(),
 	name: e.string()
 });
 e.object({
 	name: e.string(),
-	type: tn,
-	status: nn.optional(),
+	type: rn,
+	status: an.optional(),
 	sink: e.record(e.string(), e.unknown()),
-	filters: e.array(rn).optional(),
+	filters: e.array(on).optional(),
 	isPriority: e.boolean().optional()
 }).extend({
 	id: e.string(),
-	status: nn,
+	status: an,
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-var an = e.enum([
+var sn = e.enum([
 	"auth0",
 	"cognito",
 	"okta",
 	"oidc"
-]), on = e.object({
+]), cn = e.object({
 	domain: e.string(),
 	client_id: e.string(),
 	client_secret: e.string(),
 	audience: e.string().optional(),
 	scope: e.string().optional()
-}), sn = e.object({
+}), ln = e.object({
 	id: e.string().optional(),
 	name: e.string(),
-	provider: an,
+	provider: sn,
 	connection: e.string(),
 	enabled: e.boolean().default(!0),
-	credentials: on
+	credentials: cn
 });
 e.object({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(sn.shape);
-var cn = e.object({
+}).extend(ln.shape);
+var un = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	admin_notification_frequency: e.array(e.string()).optional(),
@@ -1776,13 +1784,13 @@ var cn = e.object({
 		"pre-user-registration": e.object({ shields: e.array(e.string()).optional() }).optional(),
 		"pre-change-password": e.object({ shields: e.array(e.string()).optional() }).optional()
 	}).optional()
-}), ln = e.object({
+}), dn = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
 	mode: e.string().optional(),
 	max_attempts: e.number().optional()
-}), un = e.object({
+}), fn = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
@@ -1796,10 +1804,10 @@ var cn = e.object({
 			rate: e.number().optional()
 		}).optional()
 	}).optional()
-}), dn = e.object({
-	breached_password_detection: cn.optional(),
-	brute_force_protection: ln.optional(),
-	suspicious_ip_throttling: un.optional()
+}), pn = e.object({
+	breached_password_detection: un.optional(),
+	brute_force_protection: dn.optional(),
+	suspicious_ip_throttling: fn.optional()
 });
 e.object({
 	id: e.string().optional(),
@@ -1812,14 +1820,14 @@ e.object({
 	created_at: e.string(),
 	updated_at: e.string()
 });
-var fn = e.object({
+var mn = e.object({
 	initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
 	initial_ip: e.string().describe("First IP address associated with this session"),
 	initial_asn: e.string().describe("First autonomous system number associated with this session"),
 	last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
 	last_ip: e.string().describe("Last IP address from which this user logged in"),
 	last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), pn = e.object({
+}), hn = e.object({
 	id: e.string(),
 	revoked_at: e.string().optional(),
 	used_at: e.string().optional(),
@@ -1827,7 +1835,7 @@ var fn = e.object({
 	expires_at: e.string().optional(),
 	login_session_id: e.string(),
 	idle_expires_at: e.string().optional(),
-	device: fn.describe("Metadata related to the device used in the session"),
+	device: mn.describe("Metadata related to the device used in the session"),
 	clients: e.array(e.string()).describe("List of client details for the session")
 });
 e.object({
@@ -1835,7 +1843,7 @@ e.object({
 	updated_at: e.string(),
 	authenticated_at: e.string(),
 	last_interaction_at: e.string()
-}).extend(pn.shape), e.object({
+}).extend(hn.shape), e.object({
 	kid: e.string().openapi({ description: "The key id of the signing key" }),
 	tenant_id: e.string().optional().openapi({ description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped." }),
 	cert: e.string().openapi({ description: "The public certificate of the signing key" }),
@@ -1852,7 +1860,7 @@ e.object({
 	connection: e.string().optional().openapi({ description: "The connection identifier associated with the key" }),
 	type: e.enum(["jwt_signing", "saml_encryption"]).openapi({ description: "The type of the signing key" })
 });
-var mn = e.object({
+var gn = e.object({
 	id: e.string().optional(),
 	audience: e.string().optional(),
 	friendly_name: e.string(),
@@ -1970,7 +1978,7 @@ var mn = e.object({
 		"shared_planetscale"
 	]).optional(),
 	d1_database_id: e.string().max(64).optional(),
-	attack_protection: dn.optional(),
+	attack_protection: pn.optional(),
 	mfa: e.object({
 		policy: e.enum(["never", "always"]).default("never").optional(),
 		factors: e.object({
@@ -2001,29 +2009,29 @@ var mn = e.object({
 e.object({
 	created_at: e.string().nullable().transform((e) => e ?? ""),
 	updated_at: e.string().nullable().transform((e) => e ?? "")
-}).extend(mn.shape).extend({
+}).extend(gn.shape).extend({
 	id: e.string(),
 	is_control_plane: e.boolean().optional()
 });
-var hn = e.enum([
+var _n = e.enum([
 	"provision",
 	"seed",
 	"upgrade",
 	"backup",
 	"deprovision",
 	"users_import"
-]), gn = e.enum([
+]), vn = e.enum([
 	"pending",
 	"running",
 	"succeeded",
 	"failed",
 	"cancelled"
-]), _n = e.string().max(64);
+]), yn = e.string().max(64);
 e.object({
 	tenant_id: e.string().max(255).nullable().default(null),
 	rollout_id: e.string().max(255).nullable().optional(),
-	kind: hn,
-	engine: _n,
+	kind: _n,
+	engine: yn,
 	engine_instance_id: e.string().max(100).nullable().optional(),
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
@@ -2031,7 +2039,7 @@ e.object({
 	input: e.record(e.string(), e.unknown()).nullable().optional()
 }).extend({
 	id: e.string(),
-	status: gn,
+	status: vn,
 	current_step: e.string().max(255).nullable().optional(),
 	error: e.string().nullable().optional(),
 	result: e.record(e.string(), e.unknown()).nullable().optional(),
@@ -2052,7 +2060,7 @@ e.object({
 	claim_expires_at: !0,
 	finished_at: !0
 }).partial();
-var vn = e.enum([
+var bn = e.enum([
 	"started",
 	"succeeded",
 	"failed",
@@ -2063,14 +2071,14 @@ var vn = e.enum([
 e.object({
 	operation_id: e.string().max(255),
 	step: e.string().max(255),
-	outcome: vn,
+	outcome: bn,
 	detail: e.record(e.string(), e.unknown()).nullable().optional(),
 	attempt: e.number().int().min(1).default(1)
 }).extend({
 	id: e.string(),
 	created_at: e.string()
 });
-var F = e.enum([
+var P = e.enum([
 	"pending",
 	"inserted",
 	"updated",
@@ -2081,28 +2089,28 @@ e.object({
 	operation_id: e.string().max(255),
 	seq: e.number().int().min(0),
 	payload: e.record(e.string(), e.unknown()),
-	status: F.default("pending"),
+	status: P.default("pending"),
 	error_code: e.string().max(64).nullable().optional(),
 	error_message: e.string().nullable().optional(),
 	error_path: e.string().max(255).nullable().optional(),
 	entity_id: e.string().max(255).nullable().optional()
 }).extend({
-	status: F,
+	status: P,
 	created_at: e.string(),
 	updated_at: e.string()
 }), e.object({
 	seq: e.number().int().min(0),
-	status: F,
+	status: P,
 	error_code: e.string().max(64).nullable().optional(),
 	error_message: e.string().nullable().optional(),
 	error_path: e.string().max(255).nullable().optional(),
 	entity_id: e.string().max(255).nullable().optional()
 });
-var yn = e.enum([
+var xn = e.enum([
 	"upgrade",
 	"reseed",
 	"backup"
-]), bn = e.enum([
+]), Sn = e.enum([
 	"pending",
 	"canary",
 	"rolling",
@@ -2111,7 +2119,7 @@ var yn = e.enum([
 	"failed"
 ]);
 e.object({
-	kind: yn,
+	kind: xn,
 	target_worker_version: e.string().max(255).nullable().optional(),
 	target_database_version: e.string().max(255).nullable().optional(),
 	wave_size: e.number().int().min(1).default(10),
@@ -2120,7 +2128,7 @@ e.object({
 	initiated_by: e.string().max(255).nullable().optional()
 }).extend({
 	id: e.string(),
-	status: bn,
+	status: Sn,
 	created_at: e.string(),
 	updated_at: e.string(),
 	finished_at: e.string().nullable().optional()
@@ -2142,7 +2150,7 @@ e.object({
 	code: e.string(),
 	state: e.string().optional()
 });
-var xn = e.object({
+var Cn = e.object({
 	button_border_radius: e.number(),
 	button_border_weight: e.number(),
 	buttons_style: e.enum([
@@ -2160,7 +2168,7 @@ var xn = e.object({
 	show_widget_shadow: e.boolean(),
 	widget_border_weight: e.number(),
 	widget_corner_radius: e.number()
-}), Sn = e.object({
+}), wn = e.object({
 	base_focus_color: e.string(),
 	base_hover_color: e.string(),
 	body_text: e.string(),
@@ -2184,20 +2192,20 @@ var xn = e.object({
 	success: e.string(),
 	widget_background: e.string(),
 	widget_border: e.string()
-}), I = e.object({
+}), F = e.object({
 	bold: e.boolean(),
 	size: e.number()
-}), Cn = e.object({
-	body_text: I,
-	buttons_text: I,
+}), Tn = e.object({
+	body_text: F,
+	buttons_text: F,
 	font_url: e.string(),
-	input_labels: I,
-	links: I,
+	input_labels: F,
+	links: F,
 	links_style: e.enum(["normal", "underlined"]),
 	reference_text_size: e.number(),
-	subtitle: I,
-	title: I
-}), wn = e.object({
+	subtitle: F,
+	title: F
+}), En = e.object({
 	background_color: e.string(),
 	background_image_url: e.string(),
 	page_layout: e.enum([
@@ -2210,7 +2218,7 @@ var xn = e.object({
 		"chip",
 		"none"
 	]).optional()
-}), Tn = e.object({
+}), Dn = e.object({
 	header_text_alignment: e.enum([
 		"center",
 		"left",
@@ -2227,12 +2235,12 @@ var xn = e.object({
 	social_buttons_layout: e.enum(["bottom", "top"])
 });
 e.object({
-	borders: xn,
-	colors: Sn,
+	borders: Cn,
+	colors: wn,
 	displayName: e.string(),
-	fonts: Cn,
-	page_background: wn,
-	widget: Tn
+	fonts: Tn,
+	page_background: En,
+	widget: Dn
 }).extend({ themeId: e.string() }), e.object({
 	universal_login_experience: e.enum(["new", "classic"]).default("new"),
 	identifier_first: e.boolean().default(!0),
@@ -2240,30 +2248,30 @@ e.object({
 	show_last_used_connection: e.boolean().default(!1),
 	webauthn_platform_first_factor: e.boolean()
 });
-var En = e.object({
+var On = e.object({
 	hosts: e.array(e.string()).optional(),
 	methods: e.array(e.string()).optional(),
 	path: e.string().default("/*"),
 	headers: e.record(e.string(), e.string()).optional(),
 	query: e.record(e.string(), e.string()).optional()
-}), Dn = e.object({
+}), kn = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
-}), L = e.object({
+}), I = e.object({
 	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
-	match: En,
-	handlers: e.array(Dn).min(1)
-}), On = L.extend({
+	match: On,
+	handlers: e.array(kn).min(1)
+}), An = I.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), kn = L.partial().omit({
+}), jn = I.partial().omit({
 	id: !0,
 	custom_domain_id: !0
-}), An = "custom_authentication", jn = [
+}), Mn = "custom_authentication", Nn = [
 	"urn:ietf:params:oauth:",
 	"urn:auth0",
 	"urn:okta",
@@ -2271,56 +2279,56 @@ var En = e.object({
 	"https://auth0.com",
 	"http://okta.com",
 	"https://okta.com"
-], Mn = e.string().min(1).max(200).refine((e) => e.startsWith("https://") || e.startsWith("urn:"), { message: "subject_token_type must be a URI starting with https:// or urn:" }).refine((e) => !jn.some((t) => e.toLowerCase().startsWith(t)), { message: "subject_token_type uses a reserved namespace" }), Nn = e.enum([
+], Pn = e.string().min(1).max(200).refine((e) => e.startsWith("https://") || e.startsWith("urn:"), { message: "subject_token_type must be a URI starting with https:// or urn:" }).refine((e) => !Nn.some((t) => e.toLowerCase().startsWith(t)), { message: "subject_token_type uses a reserved namespace" }), Fn = e.enum([
 	"RS256",
 	"RS384",
 	"RS512",
 	"ES256",
 	"ES384",
 	"ES512"
-]), Pn = e.discriminatedUnion("type", [e.object({
+]), In = e.discriminatedUnion("type", [e.object({
 	type: e.literal("connection"),
 	connection: e.string().min(1),
 	create_if_not_exists: e.boolean().default(!0),
 	trust_email_verified: e.boolean().default(!1)
-}), e.object({ type: e.literal("user_id") })]), Fn = e.object({
+}), e.object({ type: e.literal("user_id") })]), Ln = e.object({
 	issuer: e.string().min(1).max(2048),
-	jwks: Jt.optional(),
+	jwks: Xt.optional(),
 	jwks_uri: e.string().url().optional(),
 	audience: e.array(e.string().min(1)).min(1).optional(),
-	algorithms: e.array(Nn).min(1).optional(),
+	algorithms: e.array(Fn).min(1).optional(),
 	max_lifetime_seconds: e.number().int().min(1).max(3600).default(300),
 	require_jti: e.boolean().default(!0),
-	user_mapping: Pn
+	user_mapping: In
 });
 e.object({
 	name: e.string().min(1).max(255),
-	subject_token_type: Mn,
+	subject_token_type: Pn,
 	action_id: e.string().min(1).optional(),
-	type: e.literal(An),
-	jwt_verification: Fn.optional()
+	type: e.literal(Mn),
+	jwt_verification: Ln.optional()
 }).extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
 }), e.object({
 	name: e.string().min(1).max(255).optional(),
-	subject_token_type: Mn.optional(),
-	jwt_verification: Fn.optional()
+	subject_token_type: Pn.optional(),
+	jwt_verification: Ln.optional()
 });
-var In = e.object({
+var Rn = e.object({
 	scim: e.string(),
 	auth0: e.string()
-}), Ln = e.object({
+}), zn = e.object({
 	connection_id: e.string(),
 	user_id_attribute: e.string().default("externalId"),
-	mapping: e.array(In).default([])
+	mapping: e.array(Rn).default([])
 });
 e.object({
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(Ln.shape);
-var Rn = e.object({
+}).extend(zn.shape);
+var Bn = e.object({
 	token_id: e.string(),
 	connection_id: e.string(),
 	token_hash: e.string(),
@@ -2330,20 +2338,20 @@ var Rn = e.object({
 e.object({
 	created_at: e.string(),
 	last_used_at: e.string().optional()
-}).extend(Rn.shape);
-var zn = e.object({
+}).extend(Bn.shape);
+var Vn = e.object({
 	connection_id: e.string(),
 	external_id: e.string(),
 	user_id: e.string()
 });
-e.object({ created_at: e.string() }).extend(zn.shape), e.object({
+e.object({ created_at: e.string() }).extend(Vn.shape), e.object({
 	name: e.string(),
 	enabled: e.boolean().optional().default(!0),
 	default_from_address: e.string().optional(),
 	credentials: e.record(e.string(), e.unknown()),
 	settings: e.object({}).optional()
 });
-var Bn = e.enum([
+var Hn = e.enum([
 	"verify_email",
 	"verify_email_by_code",
 	"reset_email",
@@ -2358,7 +2366,7 @@ var Bn = e.enum([
 	"user_invitation"
 ]);
 e.object({
-	template: Bn,
+	template: Hn,
 	body: e.string(),
 	from: e.string(),
 	subject: e.string(),
@@ -2373,13 +2381,13 @@ e.object({
 	session_id: e.string().optional(),
 	organization: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: Zt.optional(),
+	auth_strategy: $t.optional(),
 	user_id: e.string(),
 	client_id: e.string(),
 	expires_at: e.string().optional(),
 	idle_expires_at: e.string().optional(),
 	last_exchanged_at: e.string().optional(),
-	device: fn,
+	device: mn,
 	resource_servers: e.array(e.object({
 		audience: e.string(),
 		scopes: e.string()
@@ -2400,10 +2408,10 @@ e.object({
 	name: e.string(),
 	options: e.object({})
 });
-var Vn = e.object({
+var Un = e.object({
 	value: e.string(),
 	description: e.string().optional()
-}), Hn = e.object({
+}), Wn = e.object({
 	token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
 	enforce_policies: e.boolean().optional(),
 	allow_skipping_userinfo: e.boolean().optional(),
@@ -2411,11 +2419,11 @@ var Vn = e.object({
 	persist_client_authorization: e.boolean().optional(),
 	enable_introspection_endpoint: e.boolean().optional(),
 	mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
-}), Un = e.object({
+}), Gn = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	identifier: e.string(),
-	scopes: e.array(Vn).optional(),
+	scopes: e.array(Un).optional(),
 	signing_alg: e.string().optional(),
 	signing_secret: e.string().optional(),
 	token_lifetime: e.number().default(86400),
@@ -2423,20 +2431,20 @@ var Vn = e.object({
 	skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
 	allow_offline_access: e.boolean().optional(),
 	verificationKey: e.string().optional(),
-	options: Hn.optional(),
+	options: Wn.optional(),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional()
 }).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Un);
-var Wn = e.object({
+e.array(Gn);
+var Kn = e.object({
 	role_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
 }).extend({ created_at: e.string() });
-e.array(Wn), e.object({
+e.array(Kn), e.object({
 	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
 	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
 	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
@@ -2449,7 +2457,7 @@ e.array(Wn), e.object({
 	failed_logins: e.array(e.string()).optional(),
 	last_password_reset: e.string().optional()
 });
-var Gn = e.object({
+var qn = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
@@ -2458,8 +2466,8 @@ var Gn = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(Gn);
-var Kn = e.object({
+e.array(qn);
+var Jn = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -2468,8 +2476,8 @@ var Kn = e.object({
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
 });
-e.array(Kn);
-var qn = e.object({
+e.array(Jn);
+var Yn = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
@@ -2477,8 +2485,8 @@ var qn = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(qn);
-var Jn = e.object({
+e.array(Yn);
+var Xn = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
@@ -2489,19 +2497,19 @@ var Jn = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Jn);
-var Yn = e.object({
+e.array(Xn);
+var Zn = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), Xn = e.object({
+}).optional(), Qn = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), Zn = e.object({ client_credentials: e.object({
+}), $n = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
@@ -2510,15 +2518,15 @@ e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: Yn,
+	branding: Zn,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(Xn).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: Zn
+	enabled_connections: e.array(Qn).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: $n
 }).extend(n.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
 });
-var Qn = e.object({
+var er = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
@@ -2531,7 +2539,7 @@ var Qn = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Qn), e.object({
+e.array(er), e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
 }).extend(n.shape).extend({ id: e.string() }), e.object({
@@ -2670,7 +2678,7 @@ e.array(Qn), e.object({
 	"passwordless",
 	"enterprise"
 ]);
-var $n = e.object({
+var tr = e.object({
 	cohort: e.string(),
 	sessions: e.number(),
 	active: e.array(e.number())
@@ -2679,9 +2687,9 @@ e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array($n)
+	cohorts: e.array(tr)
 });
-var er = e.object({
+var nr = e.object({
 	cohort: e.string(),
 	tokens: e.number(),
 	active: e.array(e.number())
@@ -2690,24 +2698,24 @@ e.object({
 	interval: e.literal("week"),
 	from: e.string(),
 	to: e.string(),
-	cohorts: e.array(er)
+	cohorts: e.array(nr)
 });
-var tr = e.object({
+var rr = e.object({
 	name: e.string(),
 	type: e.string()
-}), nr = e.object({
+}), ir = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
 });
 e.object({
-	meta: e.array(tr),
+	meta: e.array(rr),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: nr.optional()
+	statistics: ir.optional()
 });
-var rr = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), ir = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+var ar = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), or = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
@@ -2715,11 +2723,23 @@ var rr = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.
 	}
 });
 e.object({
-	prompt: rr,
+	prompt: ar,
 	language: e.string(),
-	custom_text: ir
+	custom_text: or
+});
+var sr = e.object({
+	"form-content-start": e.string().optional(),
+	"form-content-end": e.string().optional(),
+	"form-footer-start": e.string().optional(),
+	"form-footer-end": e.string().optional(),
+	"secondary-actions-start": e.string().optional(),
+	"secondary-actions-end": e.string().optional()
+}).strict(), cr = e.record(e.string(), sr);
+e.object({
+	prompt: e.string(),
+	partials: cr
 });
-var ar = e.enum([
+var lr = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -2727,9 +2747,9 @@ var ar = e.enum([
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), or = e.object({
+]), L = e.object({
 	user_id: e.string(),
-	type: ar,
+	type: lr,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
 	credential_id: e.string().optional(),
@@ -2763,7 +2783,7 @@ function R(t, n) {
 		path: ["public_key"]
 	}));
 }
-or.superRefine(R), or.extend({
+L.superRefine(R), L.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
@@ -2772,7 +2792,7 @@ or.superRefine(R), or.extend({
 	created_at: e.string().datetime({ offset: !0 }).optional(),
 	updated_at: e.string().datetime({ offset: !0 }).optional()
 });
-var sr = "x-authhero-preserve-location", z = class extends Error {
+var ur = "x-authhero-preserve-location", z = class extends Error {
 	ms;
 	constructor(e, t) {
 		super(`${t ?? "Operation"} timed out after ${e}ms`), this.name = "TimeoutError", this.ms = e;
@@ -2785,7 +2805,7 @@ function V(e, t) {
 	let n = new AbortController(), r = setTimeout(() => n.abort(), e);
 	return t(n.signal).finally(() => clearTimeout(r));
 }
-function cr(e) {
+function dr(e) {
 	let t = e.filter((e) => e !== void 0);
 	if (t.length <= 1) return t[0];
 	if (typeof AbortSignal.any == "function") return AbortSignal.any(t);
@@ -2799,7 +2819,7 @@ function cr(e) {
 	return n.signal;
 }
 function H(e, t, n, r) {
-	let i = new AbortController(), a = cr([n, i.signal]) ?? i.signal, o, s = new Promise((n, r) => {
+	let i = new AbortController(), a = dr([n, i.signal]) ?? i.signal, o, s = new Promise((n, r) => {
 		o = setTimeout(() => {
 			let n = new z(e, t);
 			i.abort(n), r(n);
@@ -2817,12 +2837,12 @@ function U(e, t, n) {
 }
 //#endregion
 //#region src/data-plane/cache.ts
-var lr = 1e4, ur = 8e3;
+var fr = 1e4, pr = 8e3;
 function W(e, t, n) {
 	let r = typeof t == "number" ? {
 		freshTtlMs: t,
 		maxEntries: n
-	} : t, i = r.freshTtlMs, a = r.staleTtlMs ?? 0, o = r.staleIfErrorTtlMs ?? 0, s = r.negativeTtlMs ?? i, c = r.maxEntries ?? lr, l = r.waitUntil, u = r.upstreamTimeoutMs ?? ur, d = u > 0 ? u : 1e4, f = /* @__PURE__ */ new Map();
+	} : t, i = r.freshTtlMs, a = r.staleTtlMs ?? 0, o = r.staleIfErrorTtlMs ?? 0, s = r.negativeTtlMs ?? i, c = r.maxEntries ?? fr, l = r.waitUntil, u = r.upstreamTimeoutMs ?? pr, d = u > 0 ? u : 1e4, f = /* @__PURE__ */ new Map();
 	function p(e) {
 		for (let [t, n] of f) n.stale_if_error_until <= e && n.stale_until <= e && f.delete(t);
 		for (; f.size >= c;) {
@@ -2877,7 +2897,7 @@ function W(e, t, n) {
 }
 //#endregion
 //#region src/data-plane/registry.ts
-var dr = class {
+var mr = class {
 	definitions = /* @__PURE__ */ new Map();
 	bindings;
 	constructor(e = {}) {
@@ -2902,33 +2922,33 @@ function G(e) {
 }
 //#endregion
 //#region src/data-plane/handlers/util.ts
-var fr = "__authhero_proxy_request__", pr = "__authhero_proxy_tenant_id__", mr = "__authhero_proxy_custom_domain_id__", hr = "__authhero_proxy_domain__", gr = "x-authhero-proxy-mutability-probe";
-function _r(e, t) {
-	e.set(fr, t);
+var hr = "__authhero_proxy_request__", gr = "__authhero_proxy_tenant_id__", _r = "__authhero_proxy_custom_domain_id__", vr = "__authhero_proxy_domain__", yr = "x-authhero-proxy-mutability-probe";
+function br(e, t) {
+	e.set(hr, t);
 }
 function K(e) {
-	return e.get(fr) ?? e.req.raw;
+	return e.get(hr) ?? e.req.raw;
 }
-function vr(e, t) {
-	e.set(pr, t.tenant_id), e.set(mr, t.custom_domain_id), e.set(hr, t.domain);
+function xr(e, t) {
+	e.set(gr, t.tenant_id), e.set(_r, t.custom_domain_id), e.set(vr, t.domain);
 }
-function yr(e) {
-	return e.get(pr);
+function Sr(e) {
+	return e.get(gr);
 }
-function br(e) {
-	return e.get(mr);
+function Cr(e) {
+	return e.get(_r);
 }
-function xr(e) {
-	return e.get(hr);
+function wr(e) {
+	return e.get(vr);
 }
-function Sr(e, t) {
+function Tr(e, t) {
 	let n = K(e), r = new Headers(n.headers);
-	t(r), _r(e, new Request(n, { headers: r }));
+	t(r), br(e, new Request(n, { headers: r }));
 }
 function q(e) {
 	let t = e.res;
 	try {
-		t.headers.append(gr, "1"), t.headers.delete(gr);
+		t.headers.append(yr, "1"), t.headers.delete(yr);
 		return;
 	} catch {
 		e.res = new Response(t.body, {
@@ -2940,7 +2960,7 @@ function q(e) {
 }
 //#endregion
 //#region src/data-plane/handlers/cors.ts
-var Cr = e.object({
+var Er = e.object({
 	origins: e.array(e.string()).optional(),
 	allow_credentials: e.boolean().optional(),
 	allow_headers: e.array(e.string()).optional(),
@@ -2948,44 +2968,44 @@ var Cr = e.object({
 	expose_headers: e.array(e.string()).optional(),
 	max_age: e.number().int().optional()
 }).refine((e) => !(e.allow_credentials && e.origins?.includes("*")), { message: "Cannot use wildcard origin (*) with allow_credentials" });
-function wr(e, t) {
+function Dr(e, t) {
 	let n = new Headers(), r = e.origins ?? ["*"], i = r.includes("*");
 	return i && !e.allow_credentials ? n.set("Access-Control-Allow-Origin", "*") : t && (i || r.includes(t)) && (n.set("Access-Control-Allow-Origin", t), n.append("Vary", "Origin")), e.allow_credentials && n.set("Access-Control-Allow-Credentials", "true"), e.allow_methods?.length && n.set("Access-Control-Allow-Methods", e.allow_methods.join(", ")), e.allow_headers?.length && n.set("Access-Control-Allow-Headers", e.allow_headers.join(", ")), e.expose_headers?.length && n.set("Access-Control-Expose-Headers", e.expose_headers.join(", ")), e.max_age !== void 0 && n.set("Access-Control-Max-Age", String(e.max_age)), n;
 }
-var Tr = G({
+var Or = G({
 	type: "cors",
-	optionsSchema: Cr,
+	optionsSchema: Er,
 	build(e) {
 		return async (t, n) => {
 			let r = t.req.header("origin") ?? null;
 			if (t.req.method === "OPTIONS" && r !== null && t.req.header("access-control-request-method") !== void 0) {
-				let t = wr(e, r);
+				let t = Dr(e, r);
 				return new Response(null, {
 					status: 204,
 					headers: t
 				});
 			}
 			await n();
-			let i = wr(e, r);
+			let i = Dr(e, r);
 			q(t), i.forEach((e, n) => {
 				n.toLowerCase() === "vary" ? t.res.headers.append(n, e) : t.res.headers.set(n, e);
 			});
 		};
 	}
-}), Er = e.object({
+}), kr = e.object({
 	username: e.string(),
 	password: e.string(),
 	realm: e.string().optional()
 });
-function Dr(e, t) {
+function Ar(e, t) {
 	let n = `${e}:${t}`;
 	return typeof btoa == "function" ? btoa(n) : Buffer.from(n, "utf-8").toString("base64");
 }
-var Or = G({
+var jr = G({
 	type: "basic_auth",
-	optionsSchema: Er,
+	optionsSchema: kr,
 	build(e) {
-		let t = Dr(e.username, e.password), n = (e.realm ?? "Restricted").replace(/["\\\r\n]/g, "");
+		let t = Ar(e.username, e.password), n = (e.realm ?? "Restricted").replace(/["\\\r\n]/g, "");
 		return async (e, r) => {
 			let i = e.req.header("authorization");
 			if (i) {
@@ -3001,7 +3021,7 @@ var Or = G({
 			});
 		};
 	}
-}), kr = G({
+}), Mr = G({
 	type: "headers",
 	optionsSchema: e.object({
 		request: e.record(e.string(), e.string()).optional(),
@@ -3011,12 +3031,12 @@ var Or = G({
 	}),
 	build(e) {
 		return async (t, n) => {
-			if ((e.request || e.remove_request) && Sr(t, (t) => {
+			if ((e.request || e.remove_request) && Tr(t, (t) => {
 				if (e.remove_request?.forEach((e) => t.delete(e)), e.request) for (let [n, r] of Object.entries(e.request)) t.set(n, r);
 			}), await n(), (e.response || e.remove_response) && (q(t), e.remove_response?.forEach((e) => t.res.headers.delete(e)), e.response)) for (let [n, r] of Object.entries(e.response)) t.res.headers.set(n, r);
 		};
 	}
-}), Ar = G({
+}), Nr = G({
 	type: "cache",
 	optionsSchema: e.object({ ttl_seconds: e.number().int().positive() }),
 	build(e) {
@@ -3027,7 +3047,7 @@ var Or = G({
 			}
 		};
 	}
-}), jr = [
+}), Pr = [
 	"173.245.48.0/20",
 	"103.21.244.0/22",
 	"103.22.200.0/22",
@@ -3051,7 +3071,7 @@ var Or = G({
 	"2a06:98c0::/29",
 	"2c0f:f248::/32"
 ];
-function Mr(e) {
+function Fr(e) {
 	let t = e.split(".");
 	if (t.length !== 4) return null;
 	let n = [];
@@ -3063,14 +3083,14 @@ function Mr(e) {
 	}
 	return n;
 }
-function Nr(e) {
+function Ir(e) {
 	if (e === "") return [];
 	let t = e.split(":"), n = [];
 	for (let e = 0; e < t.length; e++) {
 		let r = t[e];
 		if (r.includes(".")) {
 			if (e !== t.length - 1) return null;
-			let i = Mr(r);
+			let i = Fr(r);
 			if (!i) return null;
 			n.push(i[0] << 8 | i[1], i[2] << 8 | i[3]);
 			continue;
@@ -3080,14 +3100,14 @@ function Nr(e) {
 	}
 	return n;
 }
-function Pr(e) {
+function Lr(e) {
 	let t = e.split("::");
 	if (t.length > 2) return null;
-	let n = Nr(t[0] ?? "");
+	let n = Ir(t[0] ?? "");
 	if (!n) return null;
 	let r;
 	if (t.length === 2) {
-		let e = Nr(t[1] ?? "");
+		let e = Ir(t[1] ?? "");
 		if (!e) return null;
 		let i = 8 - n.length - e.length;
 		if (i < 1) return null;
@@ -3102,25 +3122,25 @@ function Pr(e) {
 	for (let e of r) i.push(e >> 8 & 255, e & 255);
 	return i;
 }
-function Fr(e) {
+function J(e) {
 	let t = e.trim();
 	t.startsWith("[") && t.endsWith("]") && (t = t.slice(1, -1));
 	let n = t.indexOf("%");
 	if (n !== -1 && (t = t.slice(0, n)), t === "") return null;
-	if (!t.includes(":")) return Mr(t);
-	let r = Pr(t);
+	if (!t.includes(":")) return Fr(t);
+	let r = Lr(t);
 	return r ? r.slice(0, 10).every((e) => e === 0) && r[10] === 255 && r[11] === 255 ? r.slice(12) : r : null;
 }
-function Ir(e) {
-	let [t, n] = e.split("/"), r = Fr(t ?? ""), i = Number(n);
+function Rr(e) {
+	let [t, n] = e.split("/"), r = J(t ?? ""), i = Number(n);
 	if (!r || !Number.isInteger(i)) throw Error(`Invalid Cloudflare CIDR: ${e}`);
 	return {
 		bytes: r,
 		prefixBits: i
 	};
 }
-var Lr = jr.map(Ir);
-function Rr(e, t) {
+var zr = Pr.map(Rr);
+function Br(e, t) {
 	if (e.length !== t.bytes.length) return !1;
 	let n = t.prefixBits >> 3;
 	for (let r = 0; r < n; r++) if (e[r] !== t.bytes[r]) return !1;
@@ -3129,11 +3149,11 @@ function Rr(e, t) {
 	let i = 255 << 8 - r & 255;
 	return (e[n] & i) === (t.bytes[n] & i);
 }
-function zr(e) {
-	let t = Fr(e);
-	return t ? Lr.some((e) => Rr(t, e)) : !1;
+function Vr(e) {
+	let t = J(e);
+	return t ? zr.some((e) => Br(t, e)) : !1;
 }
-var Br = G({
+var Hr = G({
 	type: "forwarded_headers",
 	optionsSchema: e.object({
 		client_ip_header: e.string().default("cf-connecting-ip"),
@@ -3144,46 +3164,46 @@ var Br = G({
 	build(e) {
 		return async (t, n) => {
 			let r = new URL(t.req.url);
-			Sr(t, (n) => {
+			Tr(t, (n) => {
 				n.set("x-forwarded-host", r.host), n.set("x-forwarded-proto", r.protocol.replace(":", "")), e.set_x_original_url && n.set("x-original-url", t.req.url);
-				let i = n.get(e.client_ip_header), a = i && e.skip_cloudflare_client_ip && zr(i) ? null : i, o = (n.get("x-forwarded-for") ?? "").split(",").map((e) => e.trim()).filter(Boolean), s = a ?? o[o.length - 1] ?? "127.0.0.1", c = o.length === 0 || o[o.length - 1] !== s, l = o.length ? c ? `${o.join(", ")}, ${s}` : o.join(", ") : s;
+				let i = n.get(e.client_ip_header), a = i && e.skip_cloudflare_client_ip && Vr(i) ? null : i, o = (n.get("x-forwarded-for") ?? "").split(",").map((e) => e.trim()).filter(Boolean), s = a ?? o[o.length - 1] ?? "127.0.0.1", c = o.length === 0 || o[o.length - 1] !== s, l = o.length ? c ? `${o.join(", ")}, ${s}` : o.join(", ") : s;
 				n.set("x-forwarded-for", l), e.set_x_real_ip && n.set("x-real-ip", s);
 			}), await n();
 		};
 	}
-}), Vr = e.object({ upstream_host: e.string().optional() });
-function Hr(e) {
+}), Ur = e.object({ upstream_host: e.string().optional() });
+function Wr(e) {
 	return e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function Ur(e) {
+function Gr(e) {
 	if (typeof e.getSetCookie == "function") return e.getSetCookie();
 	let t = [];
 	return e.forEach((e, n) => {
 		n.toLowerCase() === "set-cookie" && t.push(e);
 	}), t;
 }
-var Wr = G({
+var Kr = G({
 	type: "rewrite_cookies",
-	optionsSchema: Vr,
+	optionsSchema: Ur,
 	build(e) {
 		return async (t, n) => {
 			await n();
 			let r = new URL(t.req.url).hostname, i = e.upstream_host ?? t.get("__proxy_upstream_host__");
 			if (!i) return;
-			let a = Ur(t.res.headers);
+			let a = Gr(t.res.headers);
 			if (a.length === 0) return;
-			let o = Hr(i), s = RegExp(`(?:^|;\\s*)Domain=\\.?${o}(?=;|$)`, "i");
+			let o = Wr(i), s = RegExp(`(?:^|;\\s*)Domain=\\.?${o}(?=;|$)`, "i");
 			q(t), t.res.headers.delete("set-cookie");
 			for (let e of a) t.res.headers.append("set-cookie", e.replace(s, `Domain=${r}`));
 		};
 	}
-}), Gr = G({
+}), qr = G({
 	type: "rewrite_location",
 	optionsSchema: e.object({ upstream_origin: e.string().optional() }),
 	build(e) {
 		return async (t, n) => {
 			if (await n(), t.res.headers.has("x-authhero-preserve-location")) {
-				q(t), t.res.headers.delete(sr);
+				q(t), t.res.headers.delete(ur);
 				return;
 			}
 			let r = t.res.status;
@@ -3203,7 +3223,7 @@ var Wr = G({
 			q(t), t.res.headers.set("location", c);
 		};
 	}
-}), Kr = new Set([
+}), Jr = new Set([
 	"connection",
 	"keep-alive",
 	"proxy-authenticate",
@@ -3212,25 +3232,25 @@ var Wr = G({
 	"trailers",
 	"transfer-encoding",
 	"upgrade"
-]), qr = 3e4, Jr = e.object({
+]), Yr = 3e4, Xr = e.object({
 	upstream_url: e.string(),
 	preserve_host: e.boolean().default(!1),
 	timeout_ms: e.number().int().positive().optional()
 });
-function Yr(e, t) {
+function Zr(e, t) {
 	return e === "" || e === "/" ? t : `${e.endsWith("/") ? e.slice(0, -1) : e}${t.startsWith("/") ? t : `/${t}`}`;
 }
-function Xr(e) {
+function Qr(e) {
 	return e !== "GET" && e !== "HEAD";
 }
-var Zr = 128 * 1024;
-function Qr(e) {
+var $r = 128 * 1024;
+function ei(e) {
 	let t = e.headers.get("content-length");
 	if (t === null) return null;
 	let n = Number(t);
 	return Number.isInteger(n) && n >= 0 ? n : null;
 }
-async function $r(e, t) {
+async function ti(e, t) {
 	let n = e.getReader(), r = !1, i = setTimeout(() => {
 		r = !0, n.cancel().catch(() => {});
 	}, t), a = [], o = 0;
@@ -3248,7 +3268,7 @@ async function $r(e, t) {
 	for (let e of a) s.set(e, c), c += e.byteLength;
 	return s.buffer;
 }
-function ei(e) {
+function ni(e) {
 	return B(e) ? new Response("Request body timeout", {
 		status: 408,
 		headers: { "x-authhero-proxy-error": "request_body_timeout" }
@@ -3257,20 +3277,20 @@ function ei(e) {
 		headers: { "x-authhero-proxy-error": "request_body_failed" }
 	});
 }
-async function ti(e, t, n) {
-	if (!Xr(e.method) || !e.body) return;
-	let r = Qr(e);
-	if (r === null || r > Zr) return e.body;
-	let i = await $r(e.body, n);
+async function ri(e, t, n) {
+	if (!Qr(e.method) || !e.body) return;
+	let r = ei(e);
+	if (r === null || r > $r) return e.body;
+	let i = await ti(e.body, n);
 	return t.set("content-length", String(i.byteLength)), i;
 }
-async function ni(e, t, n) {
+async function ii(e, t, n) {
 	let r = new URL(t.url), i = new URL(e.upstream_url);
-	i.pathname = Yr(i.pathname, r.pathname), i.search = r.search;
+	i.pathname = Zr(i.pathname, r.pathname), i.search = r.search;
 	let a = new Headers(t.headers);
-	for (let e of Kr) a.delete(e);
+	for (let e of Jr) a.delete(e);
 	e.preserve_host || a.set("host", i.host), a.has("x-forwarded-host") || a.set("x-forwarded-host", r.host), a.has("x-forwarded-proto") || a.set("x-forwarded-proto", r.protocol.replace(":", ""));
-	let o = await ti(t, a, n), s = {
+	let o = await ri(t, a, n), s = {
 		method: t.method,
 		headers: a,
 		body: o,
@@ -3281,17 +3301,17 @@ async function ni(e, t, n) {
 		init: s
 	};
 }
-var ri = G({
+var ai = G({
 	type: "http",
-	optionsSchema: Jr,
+	optionsSchema: Xr,
 	build(e) {
-		let t = e.timeout_ms ?? qr;
+		let t = e.timeout_ms ?? Yr;
 		return async (n) => {
 			let r = K(n), i;
 			try {
-				i = await ni(e, r, t);
+				i = await ii(e, r, t);
 			} catch (e) {
-				return ei(e);
+				return ni(e);
 			}
 			let { target: a, init: o } = i;
 			n.set("__proxy_upstream_host__", a.hostname), n.set("__proxy_upstream_origin__", `${a.protocol}//${a.host}`);
@@ -3305,31 +3325,31 @@ var ri = G({
 			}
 		};
 	}
-}), ii = 3e4, ai = e.object({
+}), oi = 3e4, si = e.object({
 	binding: e.string(),
 	upstream_url: e.string().optional(),
 	preserve_host: e.boolean().default(!0),
 	timeout_ms: e.number().int().positive().optional()
 });
-function oi(e) {
+function ci(e) {
 	return typeof e == "object" && !!e && typeof e.fetch == "function";
 }
-var si = G({
+var li = G({
 	type: "service_binding",
-	optionsSchema: ai,
+	optionsSchema: si,
 	build(e, t) {
 		let n = t.bindings[e.binding];
-		if (!oi(n)) throw Error(`Service binding "${e.binding}" is not configured or is not a Fetcher`);
-		let r = e.upstream_url ?? `https://${e.binding}.binding.invalid/`, i = e.timeout_ms ?? ii;
+		if (!ci(n)) throw Error(`Service binding "${e.binding}" is not configured or is not a Fetcher`);
+		let r = e.upstream_url ?? `https://${e.binding}.binding.invalid/`, i = e.timeout_ms ?? oi;
 		return async (t) => {
 			let a = K(t), o;
 			try {
-				o = await ni({
+				o = await ii({
 					upstream_url: r,
 					preserve_host: e.preserve_host
 				}, a, i);
 			} catch (e) {
-				return ei(e);
+				return ni(e);
 			}
 			let { target: s, init: c } = o;
 			t.set("__proxy_upstream_host__", s.hostname), t.set("__proxy_upstream_origin__", `${s.protocol}//${s.host}`);
@@ -3343,35 +3363,35 @@ var si = G({
 			}
 		};
 	}
-}), ci = 3e4, li = e.object({
+}), ui = 3e4, di = e.object({
 	binding: e.string(),
 	script_name: e.string(),
 	cpu_ms: e.number().int().positive().optional(),
 	subrequests: e.number().int().positive().optional(),
 	timeout_ms: e.number().int().positive().optional()
 });
-function ui(e) {
+function fi(e) {
 	return typeof e == "object" && !!e && typeof e.get == "function";
 }
-var J = /\{(tenant_id|custom_domain_id|domain|host)\}/g;
-function di(e) {
-	return J.lastIndex = 0, J.test(e);
+var Y = /\{(tenant_id|custom_domain_id|domain|host)\}/g;
+function pi(e) {
+	return Y.lastIndex = 0, Y.test(e);
 }
-var fi = G({
+var mi = G({
 	type: "dispatch_namespace",
-	optionsSchema: li,
+	optionsSchema: di,
 	build(e, t) {
 		let n = t.bindings[e.binding];
-		if (!ui(n)) throw Error(`Dispatch namespace binding "${e.binding}" is not configured or does not expose .get()`);
-		let r = di(e.script_name), i = e.timeout_ms ?? ci, a = e.cpu_ms || e.subrequests ? { limits: {
+		if (!fi(n)) throw Error(`Dispatch namespace binding "${e.binding}" is not configured or does not expose .get()`);
+		let r = pi(e.script_name), i = e.timeout_ms ?? ui, a = e.cpu_ms || e.subrequests ? { limits: {
 			...e.cpu_ms ? { cpuMs: e.cpu_ms } : {},
 			...e.subrequests ? { subrequests: e.subrequests } : {}
 		} } : void 0;
 		return async (t) => {
 			let o = e.script_name;
 			if (r) {
-				let n = yr(t), r = br(t), i = xr(t), a = t.req.header("host") ?? t.req.header("x-forwarded-host") ?? "";
-				if (o = o.replace(J, (e, t) => {
+				let n = Sr(t), r = Cr(t), i = wr(t), a = t.req.header("host") ?? t.req.header("x-forwarded-host") ?? "";
+				if (o = o.replace(Y, (e, t) => {
 					switch (t) {
 						case "tenant_id": return n ?? "";
 						case "custom_domain_id": return r ?? "";
@@ -3393,7 +3413,7 @@ var fi = G({
 			}
 		};
 	}
-}), pi = G({
+}), hi = G({
 	type: "redirect",
 	optionsSchema: e.object({
 		upstream_url: e.string().refine((e) => {
@@ -3422,7 +3442,7 @@ var fi = G({
 			});
 		};
 	}
-}), mi = G({
+}), gi = G({
 	type: "static",
 	optionsSchema: e.object({
 		status: e.number().int().default(200),
@@ -3442,15 +3462,15 @@ var fi = G({
 });
 //#endregion
 //#region src/data-plane/handlers/index.ts
-function hi(e) {
-	e.add(Tr).add(Or).add(kr).add(Ar).add(Br).add(Wr).add(Gr).add(ri).add(si).add(fi).add(pi).add(mi);
+function _i(e) {
+	e.add(Or).add(jr).add(Mr).add(Nr).add(Hr).add(Kr).add(qr).add(ai).add(li).add(mi).add(hi).add(gi);
 }
 //#endregion
 //#region src/data-plane/matcher.ts
-function gi(e) {
+function vi(e) {
 	return [...e].sort((e, t) => e.priority === t.priority ? e.created_at.localeCompare(t.created_at) : e.priority - t.priority);
 }
-function _i(e, t) {
+function yi(e, t) {
 	let n = e.toLowerCase(), r = t.toLowerCase();
 	if (n === r) return !0;
 	if (n.startsWith("*.")) {
@@ -3459,13 +3479,13 @@ function _i(e, t) {
 	}
 	return !1;
 }
-function vi(e, t) {
-	return !e || e.length === 0 ? !0 : e.some((e) => _i(e, t));
+function bi(e, t) {
+	return !e || e.length === 0 ? !0 : e.some((e) => yi(e, t));
 }
-function yi(e) {
+function xi(e) {
 	let t = (e.headers ? Object.entries(e.headers) : []).map(([e, t]) => [e.toLowerCase(), new RegExp(t)]), n = (e.query ? Object.entries(e.query) : []).map(([e, t]) => [e, new RegExp(t)]), r = e.hosts;
 	return async (e, i) => {
-		if (r && !vi(r, e.req.header("host") ?? "")) return new Response("No matching route", { status: 404 });
+		if (r && !bi(r, e.req.header("host") ?? "")) return new Response("No matching route", { status: 404 });
 		for (let [n, r] of t) {
 			let t = e.req.header(n);
 			if (t === void 0 || !r.test(t)) return new Response("No matching route", { status: 404 });
@@ -3482,17 +3502,17 @@ function yi(e) {
 }
 //#endregion
 //#region src/data-plane/compile.ts
-var bi = "forwarded_headers";
-function xi(e) {
+var Si = "forwarded_headers";
+function Ci(e) {
 	return e.some((e) => e.type === "forwarded_headers") ? [...e] : [{
-		type: bi,
+		type: Si,
 		options: {}
 	}, ...e];
 }
-function Y(e, t) {
-	return e.has("forwarded_headers") ? xi(t) : [...t];
+function X(e, t) {
+	return e.has("forwarded_headers") ? Ci(t) : [...t];
 }
-var X = [
+var wi = [
 	"GET",
 	"POST",
 	"PUT",
@@ -3504,34 +3524,34 @@ var X = [
 function Z(e, n, r, i) {
 	let a = new t();
 	r && a.use("*", async (e, t) => {
-		vr(e, r), await t();
+		xr(e, r), await t();
 	});
-	let o = gi(e);
+	let o = vi(e);
 	for (let e of o) {
 		let t = [];
-		t.push(yi(e.match));
-		for (let r of Y(n, e.handlers)) t.push(n.build(r.type, r.options));
-		let r = e.match.methods?.length ? e.match.methods.map((e) => e.toUpperCase()) : X, i = e.match.path || "/*";
+		t.push(xi(e.match));
+		for (let r of X(n, e.handlers)) t.push(n.build(r.type, r.options));
+		let r = e.match.methods?.length ? e.match.methods.map((e) => e.toUpperCase()) : wi, i = e.match.path || "/*";
 		a.on(r, [i], ...t);
 	}
-	return i && i.length > 0 ? a.on(X, ["*"], ...i) : a.all("*", (e) => e.text("No matching route", 404)), a.onError((e, t) => {
+	return i && i.length > 0 ? a.on(wi, ["*"], ...i) : a.all("*", (e) => e.text("No matching route", 404)), a.onError((e, t) => {
 		let n = B(e);
 		return t.text(n ? "Upstream timeout" : "Bad gateway", n ? 504 : 502, { "x-authhero-proxy-error": n ? "handler_timeout" : "handler_failed" });
 	}), a;
 }
 //#endregion
 //#region src/data-plane/router.ts
-var Si = 1e4;
-function Ci(e) {
+var Ti = 1e4;
+function Ei(e) {
 	return e.resolver ? e.resolver : e.cache ? W(e.data, e.cache) : W(e.data, e.cacheTtlMs ?? 3e4);
 }
-function wi(e) {
+function Di(e) {
 	if (e.registry) return e.registry;
-	let t = new dr(e.bindings ?? {});
-	return hi(t), t;
+	let t = new mr(e.bindings ?? {});
+	return _i(t), t;
 }
 function Q(e) {
-	let t = Ci(e), n = wi(e), r = /* @__PURE__ */ new WeakMap(), i = e.resolveHostTimeoutMs ?? Si, a = e.defaultHandlers && e.defaultHandlers.length > 0 ? Y(n, e.defaultHandlers).map((e) => n.build(e.type, e.options)) : void 0, o = a ? Z([], n, void 0, a) : void 0;
+	let t = Ei(e), n = Di(e), r = /* @__PURE__ */ new WeakMap(), i = e.resolveHostTimeoutMs ?? Ti, a = e.defaultHandlers && e.defaultHandlers.length > 0 ? X(n, e.defaultHandlers).map((e) => n.build(e.type, e.options)) : void 0, o = a ? Z([], n, void 0, a) : void 0;
 	return async (e) => {
 		let s = e.req.header("host") ?? e.req.header("x-forwarded-host");
 		if (!s) return e.text("Missing host", 400);
@@ -3549,13 +3569,13 @@ function Q(e) {
 		}
 	};
 }
-function Ti(e) {
+function Oi(e) {
 	let n = new t();
 	return n.all("*", Q(e)), n;
 }
 //#endregion
 //#region src/app.ts
-function Ei(e) {
+function ki(e) {
 	let n = new t();
 	return n.all("*", Q({
 		data: e.data,
@@ -3573,17 +3593,17 @@ function Ei(e) {
 }
 //#endregion
 //#region src/data-plane/cache-api-cache.ts
-var Di = 1e3, Oi = 1e3;
-function ki(e, t) {
+var Ai = 1e3, ji = 1e3;
+function Mi(e, t) {
 	return new Request(`https://proxy-cache.internal/${encodeURIComponent(e)}/hosts/${encodeURIComponent(t.toLowerCase())}`, { method: "GET" });
 }
-function Ai() {
+function Ni() {
 	return globalThis.caches?.default;
 }
-function ji(e) {
-	let t = e.cache ?? Ai();
+function Pi(e) {
+	let t = e.cache ?? Ni();
 	if (!t) return e.upstream;
-	let n = t, r = e.namespace ?? "authhero-proxy", i = e.cacheTtlSeconds ?? 60, a = e.negativeCacheTtlSeconds ?? 10, o = e.waitUntil, s = e.cacheReadTimeoutMs ?? Di, c = e.cacheWriteTimeoutMs ?? Oi;
+	let n = t, r = e.namespace ?? "authhero-proxy", i = e.cacheTtlSeconds ?? 60, a = e.negativeCacheTtlSeconds ?? 10, o = e.waitUntil, s = e.cacheReadTimeoutMs ?? Ai, c = e.cacheWriteTimeoutMs ?? ji;
 	async function l(e) {
 		try {
 			return await U(Promise.resolve(n.match(e)), s, "cache.match");
@@ -3592,7 +3612,7 @@ function ji(e) {
 		}
 	}
 	return { async resolveHost(t, s) {
-		let u = ki(r, t), d = await l(u);
+		let u = Mi(r, t), d = await l(u);
 		if (d) try {
 			return (await d.json()).value;
 		} catch {}
@@ -3603,14 +3623,14 @@ function ji(e) {
 		return o ? o(h) : await h, f;
 	} };
 }
-function Mi(e, t) {
-	return ki(e, t);
+function Fi(e, t) {
+	return Mi(e, t);
 }
 //#endregion
 //#region src/data-plane/cache-adapter-cache.ts
-var Ni = 1e3, Pi = 1e3, Fi = 5e3;
-function Ii(e) {
-	let { upstream: t, cache: n, freshTtlMs: r, staleTtlMs: i = 0, staleIfErrorTtlMs: a = 0, negativeTtlMs: o = r, keyPrefix: s = "authhero-proxy-host", waitUntil: c, cacheReadTimeoutMs: l = Ni, cacheWriteTimeoutMs: u = Pi, upstreamTimeoutMs: d = Fi } = e, f = d > 0 ? d : 1e4, p = /* @__PURE__ */ new Map();
+var Ii = 1e3, Li = 1e3, Ri = 5e3;
+function zi(e) {
+	let { upstream: t, cache: n, freshTtlMs: r, staleTtlMs: i = 0, staleIfErrorTtlMs: a = 0, negativeTtlMs: o = r, keyPrefix: s = "authhero-proxy-host", waitUntil: c, cacheReadTimeoutMs: l = Ii, cacheWriteTimeoutMs: u = Li, upstreamTimeoutMs: d = Ri } = e, f = d > 0 ? d : 1e4, p = /* @__PURE__ */ new Map();
 	function m(e) {
 		return `${s}:${e.toLowerCase()}`;
 	}
@@ -3667,7 +3687,7 @@ function Ii(e) {
 		}
 	} };
 }
-function Li(e, t) {
+function Bi(e, t) {
 	return `${e}:${t.toLowerCase()}`;
 }
 //#endregion
@@ -3675,7 +3695,7 @@ function Li(e, t) {
 function $() {
 	throw Error("Static proxy adapter is read-only; configure routes at init time");
 }
-function Ri(e, t, n, r, i, a) {
+function Vi(e, t, n, r, i, a) {
 	return {
 		id: e.id ?? `${n}:${t}`,
 		tenant_id: r,
@@ -3690,10 +3710,10 @@ function Ri(e, t, n, r, i, a) {
 		updated_at: e.updated_at ?? a
 	};
 }
-function zi(e) {
+function Hi(e) {
 	let t = (/* @__PURE__ */ new Date()).toISOString(), n = e.defaultTenantId ?? "static", r = /* @__PURE__ */ new Map();
 	for (let [i, a] of Object.entries(e.hosts)) {
-		let e = i.toLowerCase(), o = Array.isArray(a) ? { routes: a } : a, s = o.tenant_id ?? n, c = o.custom_domain_id ?? e, l = o.routes.map((n, r) => Ri(n, r, e, s, c, t)).sort((e, t) => e.priority - t.priority);
+		let e = i.toLowerCase(), o = Array.isArray(a) ? { routes: a } : a, s = o.tenant_id ?? n, c = o.custom_domain_id ?? e, l = o.routes.map((n, r) => Vi(n, r, e, s, c, t)).sort((e, t) => e.priority - t.priority);
 		r.set(e, {
 			tenant_id: s,
 			custom_domain_id: c,
@@ -3737,7 +3757,7 @@ function zi(e) {
 		}
 	};
 }
-function Bi(e, t = {}) {
+function Ui(e, t = {}) {
 	return {
 		priority: t.priority,
 		match: { path: t.path ?? "/*" },
@@ -3752,10 +3772,10 @@ function Bi(e, t = {}) {
 }
 //#endregion
 //#region src/constants.ts
-var Vi = "proxy:resolve_host";
+var Wi = "proxy:resolve_host";
 //#endregion
 //#region src/http-adapter/index.ts
-function Hi() {
+function Gi() {
 	let e = () => {
 		throw Error("HTTP proxy adapter does not expose write access to proxy_routes; mutate via the control-plane management API");
 	};
@@ -3777,10 +3797,10 @@ function Hi() {
 		}
 	};
 }
-function Ui(e) {
+function Ki(e) {
 	let t = e.fetch ?? fetch, n = e.baseUrl.replace(/\/+$/, ""), r = e.resolveHostPath ?? "/api/v2/proxy/control-plane/hosts/", i = e.audience ?? `${n}/api/v2/`, a = e.scope ?? "proxy:resolve_host", o = e.tokenRefreshSkewSeconds ?? 60, s = e.timeoutMs ?? 2500;
 	function c(e, t) {
-		let n = new AbortController(), r = cr([e, n.signal]) ?? n.signal, i, a = new Promise((e, t) => {
+		let n = new AbortController(), r = dr([e, n.signal]) ?? n.signal, i, a = new Promise((e, t) => {
 			i = setTimeout(() => {
 				n.abort(), t(new z(s, "control plane"));
 			}, s);
@@ -3814,7 +3834,7 @@ function Ui(e) {
 		return l && l.expires_at > Date.now() ? l.value : u(e);
 	}
 	return {
-		proxyRoutes: Hi(),
+		proxyRoutes: Gi(),
 		async resolveHost(e, i) {
 			let a = i?.signal, o = await d(a), s = `${n}${r}${encodeURIComponent(e.toLowerCase())}`;
 			return c(a, async (e) => {
@@ -3831,7 +3851,7 @@ function Ui(e) {
 }
 //#endregion
 //#region src/http-adapter/service-binding-fetch.ts
-function Wi(e) {
+function qi(e) {
 	return (t, n) => {
 		let r = t instanceof Request && n === void 0 ? t : new Request(t, n);
 		return e.fetch(r);
@@ -3839,11 +3859,11 @@ function Wi(e) {
 }
 //#endregion
 //#region src/kv-adapter/index.ts
-var Gi = "authhero-proxy-host:";
-function Ki(e, t) {
+var Ji = "authhero-proxy-host:";
+function Yi(e, t) {
 	return `${e}${t.toLowerCase()}`;
 }
-function qi() {
+function Xi() {
 	let e = () => {
 		throw Error("KV proxy adapter does not expose write access to proxy_routes; mutate via the control-plane management API");
 	};
@@ -3865,15 +3885,15 @@ function qi() {
 		}
 	};
 }
-function Ji(e) {
-	let { kv: t, keyPrefix: n = Gi, timeoutMs: r } = e;
+function Zi(e) {
+	let { kv: t, keyPrefix: n = Ji, timeoutMs: r } = e;
 	return {
-		proxyRoutes: qi(),
+		proxyRoutes: Xi(),
 		async resolveHost(e) {
-			let i = Ki(n, e), a = t.get(i, "json");
+			let i = Yi(n, e), a = t.get(i, "json");
 			return (r && r > 0 ? await U(a, r, "kv.get") : await a) ?? null;
 		}
 	};
 }
 //#endregion
-export { Gi as DEFAULT_KV_HOST_KEY_PREFIX, bi as FORWARDED_HEADERS_HANDLER_TYPE, dr as HandlerRegistry, Vi as PROXY_RESOLVE_HOST_SCOPE, Or as basicAuthHandler, Li as buildCacheAdapterKey, Mi as buildCacheApiKey, Ki as buildKvHostKey, yi as buildMatchFilter, Ar as cacheHandler, Z as compileHostApp, Tr as corsHandler, Ii as createCacheAdapterHostCache, ji as createCacheApiHostCache, Ui as createHttpProxyAdapter, W as createInMemoryHostCache, Ji as createKvProxyAdapter, Ei as createProxyApp, Q as createProxyDataPlaneHandler, Ti as createProxyDataPlaneRouter, Wi as createServiceBindingFetch, zi as createStaticProxyAdapter, G as defineHandler, fi as dispatchNamespaceHandler, Br as forwardedHeadersHandler, Dn as handlerConfigSchema, kr as headersHandler, ri as httpHandler, Bi as httpRoute, zr as isCloudflareIp, En as matchSchema, vi as matchesAnyHost, _i as matchesHost, L as proxyRouteInsertSchema, On as proxyRouteSchema, kn as proxyRouteUpdateSchema, pi as redirectHandler, hi as registerBuiltinHandlers, Wr as rewriteCookiesHandler, Gr as rewriteLocationHandler, si as serviceBindingHandler, gi as sortRoutes, mi as staticHandler, xi as withForwardedHeaders, Y as withForwardedHeadersFor };
+export { Ji as DEFAULT_KV_HOST_KEY_PREFIX, Si as FORWARDED_HEADERS_HANDLER_TYPE, mr as HandlerRegistry, Wi as PROXY_RESOLVE_HOST_SCOPE, jr as basicAuthHandler, Bi as buildCacheAdapterKey, Fi as buildCacheApiKey, Yi as buildKvHostKey, xi as buildMatchFilter, Nr as cacheHandler, Z as compileHostApp, Or as corsHandler, zi as createCacheAdapterHostCache, Pi as createCacheApiHostCache, Ki as createHttpProxyAdapter, W as createInMemoryHostCache, Zi as createKvProxyAdapter, ki as createProxyApp, Q as createProxyDataPlaneHandler, Oi as createProxyDataPlaneRouter, qi as createServiceBindingFetch, Hi as createStaticProxyAdapter, G as defineHandler, mi as dispatchNamespaceHandler, Hr as forwardedHeadersHandler, kn as handlerConfigSchema, Mr as headersHandler, ai as httpHandler, Ui as httpRoute, Vr as isCloudflareIp, On as matchSchema, bi as matchesAnyHost, yi as matchesHost, I as proxyRouteInsertSchema, An as proxyRouteSchema, jn as proxyRouteUpdateSchema, hi as redirectHandler, _i as registerBuiltinHandlers, Kr as rewriteCookiesHandler, qr as rewriteLocationHandler, li as serviceBindingHandler, vi as sortRoutes, gi as staticHandler, Ci as withForwardedHeaders, X as withForwardedHeadersFor };