@authhero/proxy 0.6.0 → 0.7.0

package/dist/proxy.mjs

@@ -1239,7 +1239,7 @@ e.object({
 	links: e.array(Mt).optional(),
 	footer: e.string().optional()
 });
-var w = e.enum([
+var Nt = e.enum([
 	"pre-user-registration",
 	"post-user-registration",
 	"post-user-login",
@@ -1247,86 +1247,86 @@ var w = e.enum([
 	"validate-registration-username",
 	"pre-user-deletion",
 	"post-user-deletion"
-]), T = e.enum([
+]), w = e.enum([
 	"pre-user-registration",
 	"post-user-registration",
 	"post-user-login",
 	"validate-registration-username",
 	"pre-user-deletion",
 	"post-user-deletion"
-]), E = e.enum([
+]), T = e.enum([
 	"post-user-login",
 	"post-user-registration",
 	"post-user-update",
 	"credentials-exchange"
-]), D = e.enum([
+]), E = e.enum([
 	"post-user-login",
 	"credentials-exchange",
 	"pre-user-registration",
 	"post-user-registration"
-]), O = e.enum([
+]), D = e.enum([
 	"ensure-username",
 	"set-preferred-username",
 	"account-linking"
-]), k = {
+]), O = {
 	enabled: e.boolean().default(!1),
 	synchronous: e.boolean().default(!1),
 	priority: e.number().optional(),
 	hook_id: e.string().optional(),
 	metadata: e.record(e.string(), e.unknown()).optional()
-}, Nt = e.object({
-	...k,
-	trigger_id: w,
+}, Pt = e.object({
+	...O,
+	trigger_id: Nt,
 	url: e.string()
-}), Pt = e.object({
-	...k,
-	trigger_id: T,
-	form_id: e.string()
 }), Ft = e.object({
-	...k,
-	trigger_id: E,
-	template_id: O
+	...O,
+	trigger_id: w,
+	form_id: e.string()
 }), It = e.object({
-	...k,
-	trigger_id: D,
+	...O,
+	trigger_id: T,
+	template_id: D
+}), Lt = e.object({
+	...O,
+	trigger_id: E,
 	code_id: e.string()
 });
 e.union([
-	Nt,
 	Pt,
 	Ft,
-	It
+	It,
+	Lt
 ]);
-var Lt = e.object({
-	...k,
-	trigger_id: w
+var Rt = e.object({
+	...O,
+	trigger_id: Nt
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	url: e.string()
-}), Rt = e.object({
-	...k,
-	trigger_id: T
+}), zt = e.object({
+	...O,
+	trigger_id: w
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	form_id: e.string()
-}), zt = e.object({
-	...k,
-	trigger_id: E
+}), Bt = e.object({
+	...O,
+	trigger_id: T
 }).extend(n.shape).extend({
 	hook_id: e.string(),
-	template_id: O
-}), Bt = e.object({
-	...k,
-	trigger_id: D
+	template_id: D
+}), Vt = e.object({
+	...O,
+	trigger_id: E
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	code_id: e.string()
 });
 e.union([
-	Lt,
 	Rt,
 	zt,
-	Bt
+	Bt,
+	Vt
 ]), e.object({
 	code: e.string().max(1e5),
 	secrets: e.record(e.string(), e.string()).optional()
@@ -1334,11 +1334,11 @@ e.union([
 	id: e.string(),
 	tenant_id: e.string()
 }).extend(n.shape);
-var Vt = e.object({ name: e.string().optional() }), Ht = e.object({ email: e.string().optional() }), Ut = e.object({
+var Ht = e.object({ name: e.string().optional() }), Ut = e.object({ email: e.string().optional() }), Wt = e.object({
 	id: e.string().optional(),
 	organization_id: e.string().max(50),
-	inviter: Vt,
-	invitee: Ht,
+	inviter: Ht,
+	invitee: Ut,
 	invitation_url: e.string().url(),
 	client_id: e.string(),
 	connection_id: e.string().optional(),
@@ -1354,8 +1354,8 @@ e.object({
 	created_at: e.string().datetime(),
 	expires_at: e.string().datetime(),
 	ticket_id: e.string().optional()
-}).extend(Ut.omit({ id: !0 }).shape);
-var Wt = e.object({
+}).extend(Wt.omit({ id: !0 }).shape);
+var Gt = e.object({
 	alg: e.enum([
 		"RS256",
 		"RS384",
@@ -1397,7 +1397,7 @@ var Wt = e.object({
 		message: `EC JWK is missing required member '${r}'`
 	});
 });
-e.object({ keys: e.array(Wt) }), e.object({
+e.object({ keys: e.array(Gt) }), e.object({
 	issuer: e.string(),
 	authorization_endpoint: e.string(),
 	token_endpoint: e.string(),
@@ -1422,9 +1422,9 @@ e.object({ keys: e.array(Wt) }), e.object({
 	token_endpoint_auth_signing_alg_values_supported: e.array(e.string()),
 	client_id_metadata_document_supported: e.boolean().optional()
 });
-var Gt = /* @__PURE__ */ function(e) {
+var Kt = /* @__PURE__ */ function(e) {
 	return e.PENDING = "pending", e.AUTHENTICATED = "authenticated", e.AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification", e.AWAITING_MFA = "awaiting_mfa", e.AWAITING_HOOK = "awaiting_hook", e.AWAITING_CONTINUATION = "awaiting_continuation", e.AWAITING_CONSENT = "awaiting_consent", e.COMPLETED = "completed", e.FAILED = "failed", e.EXPIRED = "expired", e;
-}({}), Kt = e.nativeEnum(Gt), qt = e.object({
+}({}), qt = e.nativeEnum(Kt), Jt = e.object({
 	strategy: e.string(),
 	strategy_type: e.string()
 });
@@ -1438,19 +1438,19 @@ e.object({
 	useragent: e.string().optional(),
 	session_id: e.string().optional(),
 	authorization_url: e.string().optional(),
-	state: Kt.optional().default("pending"),
+	state: qt.optional().default("pending"),
 	state_data: e.string().optional(),
 	failure_reason: e.string().optional(),
 	user_id: e.string().optional(),
 	auth_connection: e.string().optional(),
-	auth_strategy: qt.optional(),
+	auth_strategy: Jt.optional(),
 	authenticated_at: e.string().optional()
 }).openapi({ description: "This represents a login sesion" }).extend({
 	id: e.string().openapi({ description: "This is is used as the state in the universal login" }),
 	created_at: e.string(),
 	updated_at: e.string()
 });
-var A = {
+var k = {
 	ACLS_SUMMARY: "acls_summary",
 	ACTIONS_EXECUTION_FAILED: "actions_execution_failed",
 	API_LIMIT: "api_limit",
@@ -1610,17 +1610,17 @@ var A = {
 	WARNING_DURING_LOGIN: "w",
 	WARNING_SENDING_NOTIFICATION: "wn",
 	WARNING_USER_MANAGEMENT: "wum"
-}, Jt = e.string().refine((e) => Object.values(A).includes(e), { message: "Invalid log type" });
-A.ACLS_SUMMARY, A.ACTIONS_EXECUTION_FAILED, A.API_LIMIT, A.API_LIMIT_WARNING, A.APPI, A.CIBA_EXCHANGE_FAILED, A.CIBA_EXCHANGE_SUCCEEDED, A.CIBA_START_FAILED, A.CIBA_START_SUCCEEDED, A.CODE_LINK_SENT, A.CODE_SENT, A.DEPRECATION_NOTICE, A.FAILED_LOGIN, A.FAILED_BY_CONNECTOR, A.FAILED_CHANGE_EMAIL, A.FAILED_BY_CORS, A.FAILED_CROSS_ORIGIN_AUTHENTICATION, A.FAILED_CHANGE_PASSWORD, A.FAILED_POST_CHANGE_PASSWORD_HOOK, A.FAILED_CHANGE_PHONE_NUMBER, A.FAILED_CHANGE_PASSWORD_REQUEST, A.FAILED_CONNECTOR_PROVISIONING, A.FAILED_CHANGE_USERNAME, A.FAILED_DELEGATION, A.FAILED_DEVICE_ACTIVATION, A.FAILED_DEVICE_AUTHORIZATION_REQUEST, A.USER_CANCELED_DEVICE_CONFIRMATION, A.FAILED_USER_DELETION, A.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, A.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, A.FAILED_EXCHANGE_CUSTOM_TOKEN, A.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, A.FAILED_FEDERATED_LOGOUT, A.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN, A.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, A.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, A.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, A.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, A.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, A.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN, A.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, A.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, A.FAILED_HOOK, A.FAILED_IMPERSONATION, A.FAILED_INVITE_ACCEPT, A.FAILED_LOGOUT, A.FLOWS_EXECUTION_COMPLETED, A.FLOWS_EXECUTION_FAILED, A.FAILED_SENDING_NOTIFICATION, A.FORMS_SUBMISSION_FAILED, A.FORMS_SUBMISSION_SUCCEEDED, A.FAILED_LOGIN_INCORRECT_PASSWORD, A.FAILED_PUSHED_AUTHORIZATION_REQUEST, A.FAILED_POST_USER_REGISTRATION_HOOK, A.FAILED_SIGNUP, A.FAILED_SILENT_AUTH, A.FAILED_LOGIN_INVALID_EMAIL_USERNAME, A.FAILED_USERS_IMPORT, A.FAILED_VERIFICATION_EMAIL, A.FAILED_VERIFICATION_EMAIL_REQUEST, A.EMAIL_VERIFICATION_CONFIRMED, A.EMAIL_VERIFICATION_FAILED, A.MFA_AUTH_FAILED, A.MFA_AUTH_REJECTED, A.MFA_AUTH_SUCCESS, A.MFA_ENROLLMENT_COMPLETE, A.TOO_MANY_MFA_FAILURES, A.MFA_RECOVERY_FAILED, A.MFA_RECOVERY_RATE_LIMIT_EXCEED, A.MFA_RECOVERY_SUCCESS, A.MFA_EMAIL_SENT, A.EMAIL_VERIFICATION_SENT, A.EMAIL_VERIFICATION_SEND_FAILURE, A.PUSH_NOTIFICATION_SENT, A.ERROR_SENDING_MFA_PUSH_NOTIFICATION, A.MFA_SMS_SENT, A.ERROR_SENDING_MFA_SMS, A.MFA_VOICE_CALL_SUCCESS, A.MFA_VOICE_CALL_FAILED, A.SECOND_FACTOR_STARTED, A.MFA_ENROLL_STARTED, A.MFA_ENROLLMENT_FAILED, A.GUARDIAN_TENANT_UPDATE, A.UNENROLL_DEVICE_ACCOUNT, A.UPDATE_DEVICE_ACCOUNT, A.WEBAUTHN_CHALLENGE_FAILED, A.WEBAUTHN_ENROLLMENT_FAILED, A.FAILED_KMS_API_OPERATION, A.SUCCESS_KMS_API_OPERATION, A.KMS_KEY_STATE_CHANGED, A.TOO_MANY_CALLS_TO_DELEGATION, A.BLOCKED_IP_ADDRESS, A.BLOCKED_ACCOUNT_IP, A.BLOCKED_ACCOUNT_EMAIL, A.INFORMATION, A.MFA_REQUIRED, A.MANAGEMENT_API_READ_OPERATION, A.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, A.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, A.FAILED_OIDC_BACKCHANNEL_LOGOUT, A.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT, A.ORGANIZATION_MEMBER_ADDED, A.PASSKEY_CHALLENGE_FAILED, A.PASSKEY_CHALLENGE_STARTED, A.PRE_LOGIN_ASSESSMENT, A.BREACHED_PASSWORD, A.BREACHED_PASSWORD_ON_RESET, A.SUCCESS_RESOURCE_CLEANUP, A.RICH_CONSENTS_ACCESS_ERROR, A.SUCCESS_LOGIN, A.SUCCESS_API_OPERATION, A.FAILED_API_OPERATION, A.SUCCESS_CHANGE_EMAIL, A.SUCCESS_CROSS_ORIGIN_AUTHENTICATION, A.SUCCESS_CHANGE_PASSWORD, A.SUCCESS_CHANGE_PHONE_NUMBER, A.SUCCESS_CHANGE_PASSWORD_REQUEST, A.SUCCESS_CHANGE_USERNAME, A.SUCCESS_CREDENTIAL_VALIDATION, A.SUCCESS_DELEGATION, A.SUCCESS_USER_DELETION, A.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, A.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, A.SUCCESS_EXCHANGE_CUSTOM_TOKEN, A.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, A.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN, A.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, A.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, A.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, A.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, A.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN, A.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN, A.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN, A.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, A.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, A.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, A.SUCCESS_IMPERSONATION, A.SUCCESSFULLY_ACCEPTED_USER_INVITE, A.BREACHED_PASSWORD_ON_SIGNUP, A.SUCCESS_LOGOUT, A.SUCCESS_HOOK, A.SUCCESS_PASSWORD_MIGRATION, A.SUCCESS_REVOCATION, A.SUCCESS_SIGNUP, A.FAILED_SS_SSO_OPERATION, A.INFORMATION_FROM_SS_SSO_OPERATION, A.SUCCESS_SS_SSO_OPERATION, A.SUCCESS_SILENT_AUTH, A.SUCCESSFUL_SCIM_OPERATION, A.SUCCESSFULLY_IMPORTED_USERS, A.SUCCESS_VERIFICATION_EMAIL, A.SUCCESS_VERIFICATION_EMAIL_REQUEST, A.MAX_AMOUNT_OF_AUTHENTICATORS, A.USER_LOGIN_BLOCK_RELEASED, A.FAILED_UNIVERSAL_LOGOUT, A.SUCCESSFUL_UNIVERSAL_LOGOUT, A.WARNING_DURING_LOGIN, A.WARNING_SENDING_NOTIFICATION, A.WARNING_USER_MANAGEMENT, (() => {
+}, Yt = e.string().refine((e) => Object.values(k).includes(e), { message: "Invalid log type" });
+k.ACLS_SUMMARY, k.ACTIONS_EXECUTION_FAILED, k.API_LIMIT, k.API_LIMIT_WARNING, k.APPI, k.CIBA_EXCHANGE_FAILED, k.CIBA_EXCHANGE_SUCCEEDED, k.CIBA_START_FAILED, k.CIBA_START_SUCCEEDED, k.CODE_LINK_SENT, k.CODE_SENT, k.DEPRECATION_NOTICE, k.FAILED_LOGIN, k.FAILED_BY_CONNECTOR, k.FAILED_CHANGE_EMAIL, k.FAILED_BY_CORS, k.FAILED_CROSS_ORIGIN_AUTHENTICATION, k.FAILED_CHANGE_PASSWORD, k.FAILED_POST_CHANGE_PASSWORD_HOOK, k.FAILED_CHANGE_PHONE_NUMBER, k.FAILED_CHANGE_PASSWORD_REQUEST, k.FAILED_CONNECTOR_PROVISIONING, k.FAILED_CHANGE_USERNAME, k.FAILED_DELEGATION, k.FAILED_DEVICE_ACTIVATION, k.FAILED_DEVICE_AUTHORIZATION_REQUEST, k.USER_CANCELED_DEVICE_CONFIRMATION, k.FAILED_USER_DELETION, k.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, k.FAILED_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, k.FAILED_EXCHANGE_CUSTOM_TOKEN, k.FAILED_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, k.FAILED_FEDERATED_LOGOUT, k.FAILED_EXCHANGE_NATIVE_SOCIAL_LOGIN, k.FAILED_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, k.FAILED_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, k.FAILED_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, k.FAILED_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, k.FAILED_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, k.FAILED_EXCHANGE_ROTATING_REFRESH_TOKEN, k.FAILED_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, k.FAILED_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, k.FAILED_HOOK, k.FAILED_IMPERSONATION, k.FAILED_INVITE_ACCEPT, k.FAILED_LOGOUT, k.FLOWS_EXECUTION_COMPLETED, k.FLOWS_EXECUTION_FAILED, k.FAILED_SENDING_NOTIFICATION, k.FORMS_SUBMISSION_FAILED, k.FORMS_SUBMISSION_SUCCEEDED, k.FAILED_LOGIN_INCORRECT_PASSWORD, k.FAILED_PUSHED_AUTHORIZATION_REQUEST, k.FAILED_POST_USER_REGISTRATION_HOOK, k.FAILED_SIGNUP, k.FAILED_SILENT_AUTH, k.FAILED_LOGIN_INVALID_EMAIL_USERNAME, k.FAILED_USERS_IMPORT, k.FAILED_VERIFICATION_EMAIL, k.FAILED_VERIFICATION_EMAIL_REQUEST, k.EMAIL_VERIFICATION_CONFIRMED, k.EMAIL_VERIFICATION_FAILED, k.MFA_AUTH_FAILED, k.MFA_AUTH_REJECTED, k.MFA_AUTH_SUCCESS, k.MFA_ENROLLMENT_COMPLETE, k.TOO_MANY_MFA_FAILURES, k.MFA_RECOVERY_FAILED, k.MFA_RECOVERY_RATE_LIMIT_EXCEED, k.MFA_RECOVERY_SUCCESS, k.MFA_EMAIL_SENT, k.EMAIL_VERIFICATION_SENT, k.EMAIL_VERIFICATION_SEND_FAILURE, k.PUSH_NOTIFICATION_SENT, k.ERROR_SENDING_MFA_PUSH_NOTIFICATION, k.MFA_SMS_SENT, k.ERROR_SENDING_MFA_SMS, k.MFA_VOICE_CALL_SUCCESS, k.MFA_VOICE_CALL_FAILED, k.SECOND_FACTOR_STARTED, k.MFA_ENROLL_STARTED, k.MFA_ENROLLMENT_FAILED, k.GUARDIAN_TENANT_UPDATE, k.UNENROLL_DEVICE_ACCOUNT, k.UPDATE_DEVICE_ACCOUNT, k.WEBAUTHN_CHALLENGE_FAILED, k.WEBAUTHN_ENROLLMENT_FAILED, k.FAILED_KMS_API_OPERATION, k.SUCCESS_KMS_API_OPERATION, k.KMS_KEY_STATE_CHANGED, k.TOO_MANY_CALLS_TO_DELEGATION, k.BLOCKED_IP_ADDRESS, k.BLOCKED_ACCOUNT_IP, k.BLOCKED_ACCOUNT_EMAIL, k.INFORMATION, k.MFA_REQUIRED, k.MANAGEMENT_API_READ_OPERATION, k.FAILED_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, k.SUCCESSFUL_AUTHENTICATION_METHOD_OPERATION_MY_ACCOUNT, k.FAILED_OIDC_BACKCHANNEL_LOGOUT, k.SUCCESSFUL_OIDC_BACKCHANNEL_LOGOUT, k.ORGANIZATION_MEMBER_ADDED, k.PASSKEY_CHALLENGE_FAILED, k.PASSKEY_CHALLENGE_STARTED, k.PRE_LOGIN_ASSESSMENT, k.BREACHED_PASSWORD, k.BREACHED_PASSWORD_ON_RESET, k.SUCCESS_RESOURCE_CLEANUP, k.RICH_CONSENTS_ACCESS_ERROR, k.SUCCESS_LOGIN, k.SUCCESS_API_OPERATION, k.FAILED_API_OPERATION, k.SUCCESS_CHANGE_EMAIL, k.SUCCESS_CROSS_ORIGIN_AUTHENTICATION, k.SUCCESS_CHANGE_PASSWORD, k.SUCCESS_CHANGE_PHONE_NUMBER, k.SUCCESS_CHANGE_PASSWORD_REQUEST, k.SUCCESS_CHANGE_USERNAME, k.SUCCESS_CREDENTIAL_VALIDATION, k.SUCCESS_DELEGATION, k.SUCCESS_USER_DELETION, k.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_ACCESS_TOKEN_FOR_CLIENT_CREDENTIALS, k.SUCCESS_EXCHANGE_CUSTOM_TOKEN, k.SUCCESS_EXCHANGE_DEVICE_CODE_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_NATIVE_SOCIAL_LOGIN, k.SUCCESS_EXCHANGE_PASSWORD_OOB_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_PASSWORD_OTP_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_PASSWORDLESS_OTP_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_PASSWORD_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_PASSKEY_OOB_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_PASSKEY_OTP_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_PASSKEY_MFA_RECOVERY_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_PASSWORD_MFA_RECOVERY_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN, k.SUCCESS_EXCHANGE_SUBJECT_TOKEN_FOR_ACCESS_TOKEN, k.SUCCESS_IMPERSONATION, k.SUCCESSFULLY_ACCEPTED_USER_INVITE, k.BREACHED_PASSWORD_ON_SIGNUP, k.SUCCESS_LOGOUT, k.SUCCESS_HOOK, k.SUCCESS_PASSWORD_MIGRATION, k.SUCCESS_REVOCATION, k.SUCCESS_SIGNUP, k.FAILED_SS_SSO_OPERATION, k.INFORMATION_FROM_SS_SSO_OPERATION, k.SUCCESS_SS_SSO_OPERATION, k.SUCCESS_SILENT_AUTH, k.SUCCESSFUL_SCIM_OPERATION, k.SUCCESSFULLY_IMPORTED_USERS, k.SUCCESS_VERIFICATION_EMAIL, k.SUCCESS_VERIFICATION_EMAIL_REQUEST, k.MAX_AMOUNT_OF_AUTHENTICATORS, k.USER_LOGIN_BLOCK_RELEASED, k.FAILED_UNIVERSAL_LOGOUT, k.SUCCESSFUL_UNIVERSAL_LOGOUT, k.WARNING_DURING_LOGIN, k.WARNING_SENDING_NOTIFICATION, k.WARNING_USER_MANAGEMENT, (() => {
 	let e = {};
-	for (let [t, n] of Object.entries(A)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
+	for (let [t, n] of Object.entries(k)) t.startsWith("SUCCESS_") || t.startsWith("SUCCESSFUL_") || t.startsWith("SUCCESSFULLY_") || t.endsWith("_SUCCEEDED") || t.endsWith("_COMPLETED") ? e[n] = "success" : t.startsWith("FAILED_") || t.startsWith("ERROR_") || t.startsWith("BREACHED_") || t.startsWith("BLOCKED_") || t === "MFA_AUTH_FAILED" || t === "MFA_AUTH_REJECTED" || t === "MFA_RECOVERY_FAILED" || t === "MFA_ENROLLMENT_FAILED" || t === "EMAIL_VERIFICATION_FAILED" || t === "WEBAUTHN_CHALLENGE_FAILED" || t === "WEBAUTHN_ENROLLMENT_FAILED" || t === "PASSKEY_CHALLENGE_FAILED" || t === "FLOWS_EXECUTION_FAILED" || t === "FORMS_SUBMISSION_FAILED" || t === "CIBA_EXCHANGE_FAILED" || t === "CIBA_START_FAILED" || t === "ACTIONS_EXECUTION_FAILED" || t === "RICH_CONSENTS_ACCESS_ERROR" || t === "USER_CANCELED_DEVICE_CONFIRMATION" || t === "TOO_MANY_MFA_FAILURES" || t === "MFA_RECOVERY_RATE_LIMIT_EXCEED" || t === "API_LIMIT" || t === "MAX_AMOUNT_OF_AUTHENTICATORS" ? e[n] = "failure" : t.startsWith("WARNING_") || t === "API_LIMIT_WARNING" || t === "DEPRECATION_NOTICE" || t === "PRE_LOGIN_ASSESSMENT" ? e[n] = "warning" : t === "CODE_SENT" || t === "CODE_LINK_SENT" || t === "MFA_EMAIL_SENT" || t === "MFA_SMS_SENT" || t === "EMAIL_VERIFICATION_SENT" || t === "PUSH_NOTIFICATION_SENT" ? e[n] = "code_sent" : t === "INFORMATION" || t === "INFORMATION_FROM_SS_SSO_OPERATION" || t === "MANAGEMENT_API_READ_OPERATION" || t === "APPI" || t === "ACLS_SUMMARY" || t === "ORGANIZATION_MEMBER_ADDED" ? e[n] = "info" : e[n] = "other";
 	return e;
 })();
-var Yt = e.object({
+var Xt = e.object({
 	name: e.string(),
 	version: e.string(),
 	env: e.object({ node: e.string().optional() }).optional()
-}), Xt = e.object({
+}), Zt = e.object({
 	country_code: e.string().length(2),
 	city_name: e.string(),
 	latitude: e.string(),
@@ -1629,7 +1629,7 @@ var Yt = e.object({
 	continent_code: e.string()
 });
 e.object({
-	type: Jt,
+	type: Yt,
 	date: e.string(),
 	description: e.string().optional(),
 	ip: e.string().optional(),
@@ -1647,63 +1647,63 @@ e.object({
 	strategy: e.string().optional(),
 	strategy_type: e.string().optional(),
 	hostname: e.string().optional(),
-	auth0_client: Yt.optional(),
+	auth0_client: Xt.optional(),
 	log_id: e.string().optional(),
-	location_info: Xt.optional()
+	location_info: Zt.optional()
 }).extend({ log_id: e.string() });
-var Zt = e.enum([
+var Qt = e.enum([
 	"http",
 	"eventbridge",
 	"eventgrid",
 	"splunk",
 	"datadog",
 	"sumo"
-]), Qt = e.enum([
+]), $t = e.enum([
 	"active",
 	"paused",
 	"suspended"
-]), $t = e.object({
+]), en = e.object({
 	type: e.string(),
 	name: e.string()
 });
 e.object({
 	name: e.string(),
-	type: Zt,
-	status: Qt.optional(),
+	type: Qt,
+	status: $t.optional(),
 	sink: e.record(e.string(), e.unknown()),
-	filters: e.array($t).optional(),
+	filters: e.array(en).optional(),
 	isPriority: e.boolean().optional()
 }).extend({
 	id: e.string(),
-	status: Qt,
+	status: $t,
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-var en = e.enum([
+var tn = e.enum([
 	"auth0",
 	"cognito",
 	"okta",
 	"oidc"
-]), tn = e.object({
+]), nn = e.object({
 	domain: e.string(),
 	client_id: e.string(),
 	client_secret: e.string(),
 	audience: e.string().optional(),
 	scope: e.string().optional()
-}), nn = e.object({
+}), rn = e.object({
 	id: e.string().optional(),
 	name: e.string(),
-	provider: en,
+	provider: tn,
 	connection: e.string(),
 	enabled: e.boolean().default(!0),
-	credentials: tn
+	credentials: nn
 });
 e.object({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).extend(nn.shape);
-var rn = e.object({
+}).extend(rn.shape);
+var an = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	admin_notification_frequency: e.array(e.string()).optional(),
@@ -1712,13 +1712,13 @@ var rn = e.object({
 		"pre-user-registration": e.object({ shields: e.array(e.string()).optional() }).optional(),
 		"pre-change-password": e.object({ shields: e.array(e.string()).optional() }).optional()
 	}).optional()
-}), an = e.object({
+}), on = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
 	mode: e.string().optional(),
 	max_attempts: e.number().optional()
-}), on = e.object({
+}), sn = e.object({
 	enabled: e.boolean().optional(),
 	shields: e.array(e.string()).optional(),
 	allowlist: e.array(e.string()).optional(),
@@ -1732,10 +1732,10 @@ var rn = e.object({
 			rate: e.number().optional()
 		}).optional()
 	}).optional()
-}), sn = e.object({
-	breached_password_detection: rn.optional(),
-	brute_force_protection: an.optional(),
-	suspicious_ip_throttling: on.optional()
+}), cn = e.object({
+	breached_password_detection: an.optional(),
+	brute_force_protection: on.optional(),
+	suspicious_ip_throttling: sn.optional()
 });
 e.object({
 	id: e.string().optional(),
@@ -1748,14 +1748,14 @@ e.object({
 	created_at: e.string(),
 	updated_at: e.string()
 });
-var cn = e.object({
+var ln = e.object({
 	initial_user_agent: e.string().describe("First user agent of the device from which this user logged in"),
 	initial_ip: e.string().describe("First IP address associated with this session"),
 	initial_asn: e.string().describe("First autonomous system number associated with this session"),
 	last_user_agent: e.string().describe("Last user agent of the device from which this user logged in"),
 	last_ip: e.string().describe("Last IP address from which this user logged in"),
 	last_asn: e.string().describe("Last autonomous system number from which this user logged in")
-}), ln = e.object({
+}), un = e.object({
 	id: e.string(),
 	revoked_at: e.string().optional(),
 	used_at: e.string().optional(),
@@ -1763,7 +1763,7 @@ var cn = e.object({
 	expires_at: e.string().optional(),
 	login_session_id: e.string(),
 	idle_expires_at: e.string().optional(),
-	device: cn.describe("Metadata related to the device used in the session"),
+	device: ln.describe("Metadata related to the device used in the session"),
 	clients: e.array(e.string()).describe("List of client details for the session")
 });
 e.object({
@@ -1771,7 +1771,7 @@ e.object({
 	updated_at: e.string(),
 	authenticated_at: e.string(),
 	last_interaction_at: e.string()
-}).extend(ln.shape), e.object({
+}).extend(un.shape), e.object({
 	kid: e.string().openapi({ description: "The key id of the signing key" }),
 	tenant_id: e.string().optional().openapi({ description: "The tenant the key belongs to. Omitted means the key is shared / control-plane scoped." }),
 	cert: e.string().openapi({ description: "The public certificate of the signing key" }),
@@ -1788,7 +1788,7 @@ e.object({
 	connection: e.string().optional().openapi({ description: "The connection identifier associated with the key" }),
 	type: e.enum(["jwt_signing", "saml_encryption"]).openapi({ description: "The type of the signing key" })
 });
-var un = e.object({
+var dn = e.object({
 	id: e.string().optional(),
 	audience: e.string().optional(),
 	friendly_name: e.string(),
@@ -1905,7 +1905,7 @@ var un = e.object({
 		"shared_planetscale"
 	]).optional(),
 	d1_database_id: e.string().max(64).optional(),
-	attack_protection: sn.optional(),
+	attack_protection: cn.optional(),
 	mfa: e.object({
 		policy: e.enum(["never", "always"]).default("never").optional(),
 		factors: e.object({
@@ -1936,7 +1936,7 @@ var un = e.object({
 e.object({
 	created_at: e.string().nullable().transform((e) => e ?? ""),
 	updated_at: e.string().nullable().transform((e) => e ?? "")
-}).extend(un.shape).extend({
+}).extend(dn.shape).extend({
 	id: e.string(),
 	is_control_plane: e.boolean().optional()
 }), e.object({
@@ -1951,7 +1951,7 @@ e.object({
 	code: e.string(),
 	state: e.string().optional()
 });
-var dn = e.object({
+var fn = e.object({
 	button_border_radius: e.number(),
 	button_border_weight: e.number(),
 	buttons_style: e.enum([
@@ -1969,7 +1969,7 @@ var dn = e.object({
 	show_widget_shadow: e.boolean(),
 	widget_border_weight: e.number(),
 	widget_corner_radius: e.number()
-}), fn = e.object({
+}), pn = e.object({
 	base_focus_color: e.string(),
 	base_hover_color: e.string(),
 	body_text: e.string(),
@@ -1993,20 +1993,20 @@ var dn = e.object({
 	success: e.string(),
 	widget_background: e.string(),
 	widget_border: e.string()
-}), j = e.object({
+}), A = e.object({
 	bold: e.boolean(),
 	size: e.number()
-}), pn = e.object({
-	body_text: j,
-	buttons_text: j,
+}), mn = e.object({
+	body_text: A,
+	buttons_text: A,
 	font_url: e.string(),
-	input_labels: j,
-	links: j,
+	input_labels: A,
+	links: A,
 	links_style: e.enum(["normal", "underlined"]),
 	reference_text_size: e.number(),
-	subtitle: j,
-	title: j
-}), mn = e.object({
+	subtitle: A,
+	title: A
+}), hn = e.object({
 	background_color: e.string(),
 	background_image_url: e.string(),
 	page_layout: e.enum([
@@ -2019,7 +2019,7 @@ var dn = e.object({
 		"chip",
 		"none"
 	]).optional()
-}), hn = e.object({
+}), gn = e.object({
 	header_text_alignment: e.enum([
 		"center",
 		"left",
@@ -2036,39 +2036,39 @@ var dn = e.object({
 	social_buttons_layout: e.enum(["bottom", "top"])
 });
 e.object({
-	borders: dn,
-	colors: fn,
+	borders: fn,
+	colors: pn,
 	displayName: e.string(),
-	fonts: pn,
-	page_background: mn,
-	widget: hn
+	fonts: mn,
+	page_background: hn,
+	widget: gn
 }).extend({ themeId: e.string() }), e.object({
 	universal_login_experience: e.enum(["new", "classic"]).default("new"),
 	identifier_first: e.boolean().default(!0),
 	password_first: e.boolean().default(!1),
 	webauthn_platform_first_factor: e.boolean()
 });
-var gn = e.object({
+var _n = e.object({
 	hosts: e.array(e.string()).optional(),
 	methods: e.array(e.string()).optional(),
 	path: e.string().default("/*"),
 	headers: e.record(e.string(), e.string()).optional(),
 	query: e.record(e.string(), e.string()).optional()
-}), _n = e.object({
+}), vn = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
-}), M = e.object({
+}), j = e.object({
 	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
-	match: gn,
-	handlers: e.array(_n).min(1)
-}), vn = M.extend({
+	match: _n,
+	handlers: e.array(vn).min(1)
+}), yn = j.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), yn = M.partial().omit({
+}), bn = j.partial().omit({
 	id: !0,
 	custom_domain_id: !0
 });
@@ -2079,7 +2079,7 @@ e.object({
 	credentials: e.record(e.string(), e.unknown()),
 	settings: e.object({}).optional()
 });
-var bn = e.enum([
+var xn = e.enum([
 	"verify_email",
 	"verify_email_by_code",
 	"reset_email",
@@ -2094,7 +2094,7 @@ var bn = e.enum([
 	"user_invitation"
 ]);
 e.object({
-	template: bn,
+	template: xn,
 	body: e.string(),
 	from: e.string(),
 	subject: e.string(),
@@ -2111,7 +2111,7 @@ e.object({
 	expires_at: e.string().optional(),
 	idle_expires_at: e.string().optional(),
 	last_exchanged_at: e.string().optional(),
-	device: cn,
+	device: ln,
 	resource_servers: e.array(e.object({
 		audience: e.string(),
 		scopes: e.string()
@@ -2132,10 +2132,10 @@ e.object({
 	name: e.string(),
 	options: e.object({})
 });
-var xn = e.object({
+var Sn = e.object({
 	value: e.string(),
 	description: e.string().optional()
-}), Sn = e.object({
+}), Cn = e.object({
 	token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
 	enforce_policies: e.boolean().optional(),
 	allow_skipping_userinfo: e.boolean().optional(),
@@ -2143,11 +2143,11 @@ var xn = e.object({
 	persist_client_authorization: e.boolean().optional(),
 	enable_introspection_endpoint: e.boolean().optional(),
 	mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
-}), Cn = e.object({
+}), wn = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	identifier: e.string(),
-	scopes: e.array(xn).optional(),
+	scopes: e.array(Sn).optional(),
 	signing_alg: e.string().optional(),
 	signing_secret: e.string().optional(),
 	token_lifetime: e.number().default(86400),
@@ -2155,26 +2155,26 @@ var xn = e.object({
 	skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
 	allow_offline_access: e.boolean().optional(),
 	verificationKey: e.string().optional(),
-	options: Sn.optional(),
+	options: Cn.optional(),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional()
 }).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Cn);
-var wn = e.object({
+e.array(wn);
+var Tn = e.object({
 	role_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
 }).extend({ created_at: e.string() });
-e.array(wn), e.object({
+e.array(Tn), e.object({
 	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
 	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
 	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
 	scope: e.array(e.string()).default([]).openapi({ description: "The list of OAuth scopes the user has consented to" })
 }).extend({ id: e.string() });
-var Tn = e.object({
+var En = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
@@ -2183,8 +2183,8 @@ var Tn = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(Tn);
-var En = e.object({
+e.array(En);
+var Dn = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -2193,8 +2193,8 @@ var En = e.object({
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
 });
-e.array(En);
-var Dn = e.object({
+e.array(Dn);
+var On = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
@@ -2202,8 +2202,8 @@ var Dn = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(Dn);
-var On = e.object({
+e.array(On);
+var kn = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
@@ -2214,19 +2214,19 @@ var On = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(On);
-var kn = e.object({
+e.array(kn);
+var An = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), An = e.object({
+}).optional(), jn = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), jn = e.object({ client_credentials: e.object({
+}), Mn = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
@@ -2235,15 +2235,15 @@ e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: kn,
+	branding: An,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(An).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: jn
+	enabled_connections: e.array(jn).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: Mn
 }).extend(n.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
 });
-var Mn = e.object({
+var Nn = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
@@ -2256,7 +2256,7 @@ var Mn = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Mn), e.object({
+e.array(Nn), e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
 }).extend(n.shape).extend({ id: e.string() }), e.object({
@@ -2389,22 +2389,22 @@ e.array(Mn), e.object({
 	"passwordless",
 	"enterprise"
 ]);
-var Nn = e.object({
+var Pn = e.object({
 	name: e.string(),
 	type: e.string()
-}), Pn = e.object({
+}), Fn = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
 });
 e.object({
-	meta: e.array(Nn),
+	meta: e.array(Pn),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: Pn.optional()
+	statistics: Fn.optional()
 });
-var Fn = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), In = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+var In = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), Ln = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
@@ -2412,11 +2412,11 @@ var Fn = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.
 	}
 });
 e.object({
-	prompt: Fn,
+	prompt: In,
 	language: e.string(),
-	custom_text: In
+	custom_text: Ln
 });
-var Ln = e.enum([
+var Rn = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -2424,9 +2424,9 @@ var Ln = e.enum([
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), N = e.object({
+]), M = e.object({
 	user_id: e.string(),
-	type: Ln,
+	type: Rn,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
 	credential_id: e.string().optional(),
@@ -2437,7 +2437,7 @@ var Ln = e.enum([
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function P(t, n) {
+function N(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -2460,19 +2460,19 @@ function P(t, n) {
 		path: ["public_key"]
 	}));
 }
-N.superRefine(P), N.extend({
+M.superRefine(N), M.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(P);
+}).superRefine(N);
 //#endregion
 //#region src/data-plane/cache.ts
-var Rn = 1e4;
-function F(e, t, n) {
+var zn = 1e4;
+function P(e, t, n) {
 	let r = typeof t == "number" ? {
 		freshTtlMs: t,
 		maxEntries: n
-	} : t, i = r.freshTtlMs, a = r.staleTtlMs ?? 0, o = r.staleIfErrorTtlMs ?? 0, s = r.negativeTtlMs ?? i, c = r.maxEntries ?? Rn, l = r.waitUntil, u = /* @__PURE__ */ new Map();
+	} : t, i = r.freshTtlMs, a = r.staleTtlMs ?? 0, o = r.staleIfErrorTtlMs ?? 0, s = r.negativeTtlMs ?? i, c = r.maxEntries ?? zn, l = r.waitUntil, u = /* @__PURE__ */ new Map();
 	function d(e) {
 		for (let [t, n] of u) n.stale_if_error_until <= e && n.stale_until <= e && !n.refreshing && u.delete(t);
 		for (; u.size >= c;) {
@@ -2529,7 +2529,7 @@ function F(e, t, n) {
 }
 //#endregion
 //#region src/data-plane/registry.ts
-var I = class {
+var F = class {
 	definitions = /* @__PURE__ */ new Map();
 	bindings;
 	constructor(e = {}) {
@@ -2549,38 +2549,38 @@ var I = class {
 		return n.build(r.data, { bindings: this.bindings });
 	}
 };
-function L(e) {
+function I(e) {
 	return e;
 }
 //#endregion
 //#region src/data-plane/handlers/util.ts
-var R = "__authhero_proxy_request__", z = "__authhero_proxy_tenant_id__", B = "__authhero_proxy_custom_domain_id__", V = "__authhero_proxy_domain__", H = "x-authhero-proxy-mutability-probe";
-function zn(e, t) {
-	e.set(R, t);
-}
-function U(e) {
-	return e.get(R) ?? e.req.raw;
-}
+var L = "__authhero_proxy_request__", R = "__authhero_proxy_tenant_id__", z = "__authhero_proxy_custom_domain_id__", B = "__authhero_proxy_domain__", V = "x-authhero-proxy-mutability-probe";
 function Bn(e, t) {
-	e.set(z, t.tenant_id), e.set(B, t.custom_domain_id), e.set(V, t.domain);
+	e.set(L, t);
 }
-function Vn(e) {
-	return e.get(z);
+function H(e) {
+	return e.get(L) ?? e.req.raw;
+}
+function Vn(e, t) {
+	e.set(R, t.tenant_id), e.set(z, t.custom_domain_id), e.set(B, t.domain);
 }
 function Hn(e) {
-	return e.get(B);
+	return e.get(R);
 }
 function Un(e) {
-	return e.get(V);
+	return e.get(z);
+}
+function Wn(e) {
+	return e.get(B);
 }
-function W(e, t) {
-	let n = U(e), r = new Headers(n.headers);
-	t(r), zn(e, new Request(n, { headers: r }));
+function U(e, t) {
+	let n = H(e), r = new Headers(n.headers);
+	t(r), Bn(e, new Request(n, { headers: r }));
 }
-function G(e) {
+function W(e) {
 	let t = e.res;
 	try {
-		t.headers.append(H, "1"), t.headers.delete(H);
+		t.headers.append(V, "1"), t.headers.delete(V);
 		return;
 	} catch {
 		e.res = new Response(t.body, {
@@ -2592,7 +2592,7 @@ function G(e) {
 }
 //#endregion
 //#region src/data-plane/handlers/cors.ts
-var Wn = e.object({
+var Gn = e.object({
 	origins: e.array(e.string()).optional(),
 	allow_credentials: e.boolean().optional(),
 	allow_headers: e.array(e.string()).optional(),
@@ -2600,44 +2600,44 @@ var Wn = e.object({
 	expose_headers: e.array(e.string()).optional(),
 	max_age: e.number().int().optional()
 }).refine((e) => !(e.allow_credentials && e.origins?.includes("*")), { message: "Cannot use wildcard origin (*) with allow_credentials" });
-function K(e, t) {
+function G(e, t) {
 	let n = new Headers(), r = e.origins ?? ["*"], i = r.includes("*");
 	return i && !e.allow_credentials ? n.set("Access-Control-Allow-Origin", "*") : t && (i || r.includes(t)) && (n.set("Access-Control-Allow-Origin", t), n.append("Vary", "Origin")), e.allow_credentials && n.set("Access-Control-Allow-Credentials", "true"), e.allow_methods?.length && n.set("Access-Control-Allow-Methods", e.allow_methods.join(", ")), e.allow_headers?.length && n.set("Access-Control-Allow-Headers", e.allow_headers.join(", ")), e.expose_headers?.length && n.set("Access-Control-Expose-Headers", e.expose_headers.join(", ")), e.max_age !== void 0 && n.set("Access-Control-Max-Age", String(e.max_age)), n;
 }
-var Gn = L({
+var Kn = I({
 	type: "cors",
-	optionsSchema: Wn,
+	optionsSchema: Gn,
 	build(e) {
 		return async (t, n) => {
 			let r = t.req.header("origin") ?? null;
 			if (t.req.method === "OPTIONS" && r !== null && t.req.header("access-control-request-method") !== void 0) {
-				let t = K(e, r);
+				let t = G(e, r);
 				return new Response(null, {
 					status: 204,
 					headers: t
 				});
 			}
 			await n();
-			let i = K(e, r);
-			G(t), i.forEach((e, n) => {
+			let i = G(e, r);
+			W(t), i.forEach((e, n) => {
 				n.toLowerCase() === "vary" ? t.res.headers.append(n, e) : t.res.headers.set(n, e);
 			});
 		};
 	}
-}), Kn = e.object({
+}), qn = e.object({
 	username: e.string(),
 	password: e.string(),
 	realm: e.string().optional()
 });
-function qn(e, t) {
+function Jn(e, t) {
 	let n = `${e}:${t}`;
 	return typeof btoa == "function" ? btoa(n) : Buffer.from(n, "utf-8").toString("base64");
 }
-var Jn = L({
+var Yn = I({
 	type: "basic_auth",
-	optionsSchema: Kn,
+	optionsSchema: qn,
 	build(e) {
-		let t = qn(e.username, e.password), n = (e.realm ?? "Restricted").replace(/["\\\r\n]/g, "");
+		let t = Jn(e.username, e.password), n = (e.realm ?? "Restricted").replace(/["\\\r\n]/g, "");
 		return async (e, r) => {
 			let i = e.req.header("authorization");
 			if (i) {
@@ -2653,7 +2653,7 @@ var Jn = L({
 			});
 		};
 	}
-}), Yn = L({
+}), Xn = I({
 	type: "headers",
 	optionsSchema: e.object({
 		request: e.record(e.string(), e.string()).optional(),
@@ -2663,23 +2663,23 @@ var Jn = L({
 	}),
 	build(e) {
 		return async (t, n) => {
-			if ((e.request || e.remove_request) && W(t, (t) => {
+			if ((e.request || e.remove_request) && U(t, (t) => {
 				if (e.remove_request?.forEach((e) => t.delete(e)), e.request) for (let [n, r] of Object.entries(e.request)) t.set(n, r);
-			}), await n(), (e.response || e.remove_response) && (G(t), e.remove_response?.forEach((e) => t.res.headers.delete(e)), e.response)) for (let [n, r] of Object.entries(e.response)) t.res.headers.set(n, r);
+			}), await n(), (e.response || e.remove_response) && (W(t), e.remove_response?.forEach((e) => t.res.headers.delete(e)), e.response)) for (let [n, r] of Object.entries(e.response)) t.res.headers.set(n, r);
 		};
 	}
-}), Xn = L({
+}), Zn = I({
 	type: "cache",
 	optionsSchema: e.object({ ttl_seconds: e.number().int().positive() }),
 	build(e) {
 		return async (t, n) => {
 			if (await n(), !t.res.headers.has("Cache-Control")) {
 				let n = t.res.headers.has("set-cookie") ? "private" : "public";
-				G(t), t.res.headers.set("Cache-Control", `${n}, max-age=${e.ttl_seconds}`);
+				W(t), t.res.headers.set("Cache-Control", `${n}, max-age=${e.ttl_seconds}`);
 			}
 		};
 	}
-}), Zn = L({
+}), Qn = I({
 	type: "forwarded_headers",
 	optionsSchema: e.object({
 		client_ip_header: e.string().default("cf-connecting-ip"),
@@ -2689,40 +2689,40 @@ var Jn = L({
 	build(e) {
 		return async (t, n) => {
 			let r = new URL(t.req.url);
-			W(t, (n) => {
+			U(t, (n) => {
 				n.set("x-forwarded-host", r.host), n.set("x-forwarded-proto", r.protocol.replace(":", "")), e.set_x_original_url && n.set("x-original-url", t.req.url);
 				let i = n.get(e.client_ip_header), a = (n.get("x-forwarded-for") ?? "").split(",").map((e) => e.trim()).filter(Boolean), o = i ?? a[a.length - 1] ?? "127.0.0.1", s = a.length === 0 || a[a.length - 1] !== o, c = a.length ? s ? `${a.join(", ")}, ${o}` : a.join(", ") : o;
 				n.set("x-forwarded-for", c), e.set_x_real_ip && n.set("x-real-ip", o);
 			}), await n();
 		};
 	}
-}), Qn = e.object({ upstream_host: e.string().optional() });
-function $n(e) {
+}), $n = e.object({ upstream_host: e.string().optional() });
+function er(e) {
 	return e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function er(e) {
+function tr(e) {
 	if (typeof e.getSetCookie == "function") return e.getSetCookie();
 	let t = [];
 	return e.forEach((e, n) => {
 		n.toLowerCase() === "set-cookie" && t.push(e);
 	}), t;
 }
-var tr = L({
+var nr = I({
 	type: "rewrite_cookies",
-	optionsSchema: Qn,
+	optionsSchema: $n,
 	build(e) {
 		return async (t, n) => {
 			await n();
 			let r = new URL(t.req.url).hostname, i = e.upstream_host ?? t.get("__proxy_upstream_host__");
 			if (!i) return;
-			let a = er(t.res.headers);
+			let a = tr(t.res.headers);
 			if (a.length === 0) return;
-			let o = $n(i), s = RegExp(`(?:^|;\\s*)Domain=\\.?${o}(?=;|$)`, "i");
-			G(t), t.res.headers.delete("set-cookie");
+			let o = er(i), s = RegExp(`(?:^|;\\s*)Domain=\\.?${o}(?=;|$)`, "i");
+			W(t), t.res.headers.delete("set-cookie");
 			for (let e of a) t.res.headers.append("set-cookie", e.replace(s, `Domain=${r}`));
 		};
 	}
-}), nr = L({
+}), rr = I({
 	type: "rewrite_location",
 	optionsSchema: e.object({ upstream_origin: e.string().optional() }),
 	build(e) {
@@ -2742,25 +2742,25 @@ var tr = L({
 			}
 			if (o.origin !== a) return;
 			let s = new URL(t.req.url), c = `${`${s.protocol}//${s.host}`}${o.pathname}${o.search}${o.hash}`;
-			G(t), t.res.headers.set("location", c);
+			W(t), t.res.headers.set("location", c);
 		};
 	}
-}), rr = class extends Error {
+}), ir = class extends Error {
 	ms;
 	constructor(e, t) {
 		super(`${t ?? "Operation"} timed out after ${e}ms`), this.name = "TimeoutError", this.ms = e;
 	}
 };
-function q(e) {
-	return e instanceof rr ? !0 : e instanceof Error ? e.name === "AbortError" || e.name === "TimeoutError" : !1;
+function K(e) {
+	return e instanceof ir ? !0 : e instanceof Error ? e.name === "AbortError" || e.name === "TimeoutError" : !1;
 }
-function J(e, t) {
+function q(e, t) {
 	let n = new AbortController(), r = setTimeout(() => n.abort(), e);
 	return t(n.signal).finally(() => clearTimeout(r));
 }
-function Y(e, t, n) {
+function J(e, t, n) {
 	let r, i = new Promise((e, i) => {
-		r = setTimeout(() => i(new rr(t, n)), t);
+		r = setTimeout(() => i(new ir(t, n)), t);
 	});
 	return Promise.race([e, i]).finally(() => {
 		r && clearTimeout(r);
@@ -2768,7 +2768,7 @@ function Y(e, t, n) {
 }
 //#endregion
 //#region src/data-plane/handlers/http.ts
-var ir = new Set([
+var ar = new Set([
 	"connection",
 	"keep-alive",
 	"proxy-authenticate",
@@ -2777,24 +2777,24 @@ var ir = new Set([
 	"trailers",
 	"transfer-encoding",
 	"upgrade"
-]), ar = 3e4, or = e.object({
+]), or = 3e4, sr = e.object({
 	upstream_url: e.string(),
 	preserve_host: e.boolean().default(!1),
 	timeout_ms: e.number().int().positive().optional()
 });
-function sr(e, t) {
+function cr(e, t) {
 	return e === "" || e === "/" ? t : `${e.endsWith("/") ? e.slice(0, -1) : e}${t.startsWith("/") ? t : `/${t}`}`;
 }
-function cr(e) {
+function lr(e) {
 	return e !== "GET" && e !== "HEAD";
 }
-function lr(e, t) {
+function ur(e, t) {
 	let n = new URL(t.url), r = new URL(e.upstream_url);
-	r.pathname = sr(r.pathname, n.pathname), r.search = n.search;
+	r.pathname = cr(r.pathname, n.pathname), r.search = n.search;
 	let i = new Headers(t.headers);
-	for (let e of ir) i.delete(e);
+	for (let e of ar) i.delete(e);
 	e.preserve_host || i.set("host", r.host), i.has("x-forwarded-host") || i.set("x-forwarded-host", n.host), i.has("x-forwarded-proto") || i.set("x-forwarded-proto", n.protocol.replace(":", ""));
-	let a = cr(t.method) ? t.body : void 0, o = {
+	let a = lr(t.method) ? t.body : void 0, o = {
 		method: t.method,
 		headers: i,
 		body: a,
@@ -2805,85 +2805,85 @@ function lr(e, t) {
 		init: o
 	};
 }
-var ur = L({
+var dr = I({
 	type: "http",
-	optionsSchema: or,
+	optionsSchema: sr,
 	build(e) {
-		let t = e.timeout_ms ?? ar;
+		let t = e.timeout_ms ?? or;
 		return async (n) => {
-			let { target: r, init: i } = lr(e, U(n));
+			let { target: r, init: i } = ur(e, H(n));
 			n.set("__proxy_upstream_host__", r.hostname), n.set("__proxy_upstream_origin__", `${r.protocol}//${r.host}`);
 			try {
-				return await J(t, (e) => fetch(r.toString(), {
+				return await q(t, (e) => fetch(r.toString(), {
 					...i,
 					signal: e
 				}));
 			} catch (e) {
-				return q(e) ? n.text("Upstream timeout", 504, { "x-authhero-proxy-error": "http_timeout" }) : n.text("Bad gateway", 502, { "x-authhero-proxy-error": "http_failed" });
+				return K(e) ? n.text("Upstream timeout", 504, { "x-authhero-proxy-error": "http_timeout" }) : n.text("Bad gateway", 502, { "x-authhero-proxy-error": "http_failed" });
 			}
 		};
 	}
-}), dr = 3e4, fr = e.object({
+}), fr = 3e4, pr = e.object({
 	binding: e.string(),
 	upstream_url: e.string().optional(),
 	preserve_host: e.boolean().default(!0),
 	timeout_ms: e.number().int().positive().optional()
 });
-function pr(e) {
+function mr(e) {
 	return typeof e == "object" && !!e && typeof e.fetch == "function";
 }
-var mr = L({
+var hr = I({
 	type: "service_binding",
-	optionsSchema: fr,
+	optionsSchema: pr,
 	build(e, t) {
 		let n = t.bindings[e.binding];
-		if (!pr(n)) throw Error(`Service binding "${e.binding}" is not configured or is not a Fetcher`);
-		let r = e.upstream_url ?? `https://${e.binding}.binding.invalid/`, i = e.timeout_ms ?? dr;
+		if (!mr(n)) throw Error(`Service binding "${e.binding}" is not configured or is not a Fetcher`);
+		let r = e.upstream_url ?? `https://${e.binding}.binding.invalid/`, i = e.timeout_ms ?? fr;
 		return async (t) => {
-			let a = U(t), { target: o, init: s } = lr({
+			let a = H(t), { target: o, init: s } = ur({
 				upstream_url: r,
 				preserve_host: e.preserve_host
 			}, a);
 			t.set("__proxy_upstream_host__", o.hostname), t.set("__proxy_upstream_origin__", `${o.protocol}//${o.host}`);
 			try {
-				return await J(i, async (e) => n.fetch(new Request(o.toString(), {
+				return await q(i, async (e) => n.fetch(new Request(o.toString(), {
 					...s,
 					signal: e
 				})));
 			} catch (e) {
-				return q(e) ? t.text(`service_binding timed out after ${i}ms`, 504, { "x-authhero-proxy-error": "service_binding_timeout" }) : t.text("Bad gateway", 502, { "x-authhero-proxy-error": "service_binding_failed" });
+				return K(e) ? t.text(`service_binding timed out after ${i}ms`, 504, { "x-authhero-proxy-error": "service_binding_timeout" }) : t.text("Bad gateway", 502, { "x-authhero-proxy-error": "service_binding_failed" });
 			}
 		};
 	}
-}), hr = 3e4, gr = e.object({
+}), gr = 3e4, _r = e.object({
 	binding: e.string(),
 	script_name: e.string(),
 	cpu_ms: e.number().int().positive().optional(),
 	subrequests: e.number().int().positive().optional(),
 	timeout_ms: e.number().int().positive().optional()
 });
-function _r(e) {
+function vr(e) {
 	return typeof e == "object" && !!e && typeof e.get == "function";
 }
-var X = /\{(tenant_id|custom_domain_id|domain|host)\}/g;
-function vr(e) {
-	return X.lastIndex = 0, X.test(e);
+var Y = /\{(tenant_id|custom_domain_id|domain|host)\}/g;
+function yr(e) {
+	return Y.lastIndex = 0, Y.test(e);
 }
-var yr = L({
+var br = I({
 	type: "dispatch_namespace",
-	optionsSchema: gr,
+	optionsSchema: _r,
 	build(e, t) {
 		let n = t.bindings[e.binding];
-		if (!_r(n)) throw Error(`Dispatch namespace binding "${e.binding}" is not configured or does not expose .get()`);
-		let r = vr(e.script_name), i = e.timeout_ms ?? hr, a = e.cpu_ms || e.subrequests ? { limits: {
+		if (!vr(n)) throw Error(`Dispatch namespace binding "${e.binding}" is not configured or does not expose .get()`);
+		let r = yr(e.script_name), i = e.timeout_ms ?? gr, a = e.cpu_ms || e.subrequests ? { limits: {
 			...e.cpu_ms ? { cpuMs: e.cpu_ms } : {},
 			...e.subrequests ? { subrequests: e.subrequests } : {}
 		} } : void 0;
 		return async (t) => {
 			let o = e.script_name;
 			if (r) {
-				let n = Vn(t), r = Hn(t), i = Un(t), a = t.req.header("host") ?? t.req.header("x-forwarded-host") ?? "";
-				if (o = o.replace(X, (e, t) => {
+				let n = Hn(t), r = Un(t), i = Wn(t), a = t.req.header("host") ?? t.req.header("x-forwarded-host") ?? "";
+				if (o = o.replace(Y, (e, t) => {
 					switch (t) {
 						case "tenant_id": return n ?? "";
 						case "custom_domain_id": return r ?? "";
@@ -2893,19 +2893,19 @@ var yr = L({
 					}
 				}), o.includes("{") || o === "") return t.text(`dispatch_namespace: could not resolve script name from template "${e.script_name}"`, 500);
 			}
-			let s = U(t);
+			let s = H(t);
 			try {
 				let e = n.get(o, void 0, a);
-				return await J(i, async (t) => {
+				return await q(i, async (t) => {
 					let n = new Request(s, { signal: t });
 					return e.fetch(n);
 				});
 			} catch (e) {
-				return q(e) ? t.text(`dispatch_namespace timed out after ${i}ms`, 504, { "x-authhero-proxy-error": "dispatch_namespace_timeout" }) : t.text("Bad gateway", 502, { "x-authhero-proxy-error": "dispatch_namespace_failed" });
+				return K(e) ? t.text(`dispatch_namespace timed out after ${i}ms`, 504, { "x-authhero-proxy-error": "dispatch_namespace_timeout" }) : t.text("Bad gateway", 502, { "x-authhero-proxy-error": "dispatch_namespace_failed" });
 			}
 		};
 	}
-}), br = L({
+}), xr = I({
 	type: "redirect",
 	optionsSchema: e.object({
 		upstream_url: e.string().refine((e) => {
@@ -2934,7 +2934,7 @@ var yr = L({
 			});
 		};
 	}
-}), xr = L({
+}), Sr = I({
 	type: "static",
 	optionsSchema: e.object({
 		status: e.number().int().default(200),
@@ -2954,15 +2954,15 @@ var yr = L({
 });
 //#endregion
 //#region src/data-plane/handlers/index.ts
-function Sr(e) {
-	e.add(Gn).add(Jn).add(Yn).add(Xn).add(Zn).add(tr).add(nr).add(ur).add(mr).add(yr).add(br).add(xr);
+function Cr(e) {
+	e.add(Kn).add(Yn).add(Xn).add(Zn).add(Qn).add(nr).add(rr).add(dr).add(hr).add(br).add(xr).add(Sr);
 }
 //#endregion
 //#region src/data-plane/matcher.ts
-function Z(e) {
+function X(e) {
 	return [...e].sort((e, t) => e.priority === t.priority ? e.created_at.localeCompare(t.created_at) : e.priority - t.priority);
 }
-function Cr(e, t) {
+function wr(e, t) {
 	let n = e.toLowerCase(), r = t.toLowerCase();
 	if (n === r) return !0;
 	if (n.startsWith("*.")) {
@@ -2971,13 +2971,13 @@ function Cr(e, t) {
 	}
 	return !1;
 }
-function wr(e, t) {
-	return !e || e.length === 0 ? !0 : e.some((e) => Cr(e, t));
+function Tr(e, t) {
+	return !e || e.length === 0 ? !0 : e.some((e) => wr(e, t));
 }
-function Tr(e) {
+function Er(e) {
 	let t = (e.headers ? Object.entries(e.headers) : []).map(([e, t]) => [e.toLowerCase(), new RegExp(t)]), n = (e.query ? Object.entries(e.query) : []).map(([e, t]) => [e, new RegExp(t)]), r = e.hosts;
 	return async (e, i) => {
-		if (r && !wr(r, e.req.header("host") ?? "")) return new Response("No matching route", { status: 404 });
+		if (r && !Tr(r, e.req.header("host") ?? "")) return new Response("No matching route", { status: 404 });
 		for (let [n, r] of t) {
 			let t = e.req.header(n);
 			if (t === void 0 || !r.test(t)) return new Response("No matching route", { status: 404 });
@@ -2994,7 +2994,7 @@ function Tr(e) {
 }
 //#endregion
 //#region src/data-plane/compile.ts
-var Er = [
+var Dr = [
 	"GET",
 	"POST",
 	"PUT",
@@ -3003,51 +3003,51 @@ var Er = [
 	"OPTIONS",
 	"HEAD"
 ];
-function Dr(e, n, r) {
-	let i = new t();
-	r && i.use("*", async (e, t) => {
-		Bn(e, r), await t();
+function Z(e, n, r, i) {
+	let a = new t();
+	r && a.use("*", async (e, t) => {
+		Vn(e, r), await t();
 	});
-	let a = Z(e);
-	for (let e of a) {
+	let o = X(e);
+	for (let e of o) {
 		let t = [];
-		t.push(Tr(e.match));
+		t.push(Er(e.match));
 		for (let r of e.handlers) t.push(n.build(r.type, r.options));
-		let r = e.match.methods?.length ? e.match.methods.map((e) => e.toUpperCase()) : Er, a = e.match.path || "/*";
-		i.on(r, [a], ...t);
+		let r = e.match.methods?.length ? e.match.methods.map((e) => e.toUpperCase()) : Dr, i = e.match.path || "/*";
+		a.on(r, [i], ...t);
 	}
-	return i.all("*", (e) => e.text("No matching route", 404)), i.onError((e, t) => {
-		let n = q(e);
+	return i && i.length > 0 ? a.on(Dr, ["*"], ...i) : a.all("*", (e) => e.text("No matching route", 404)), a.onError((e, t) => {
+		let n = K(e);
 		return t.text(n ? "Upstream timeout" : "Bad gateway", n ? 504 : 502, { "x-authhero-proxy-error": n ? "handler_timeout" : "handler_failed" });
-	}), i;
+	}), a;
 }
 //#endregion
 //#region src/data-plane/router.ts
-var Or = 5e3;
+var Or = 1e4;
 function kr(e) {
-	return e.resolver ? e.resolver : e.cache ? F(e.data, e.cache) : F(e.data, e.cacheTtlMs ?? 3e4);
+	return e.resolver ? e.resolver : e.cache ? P(e.data, e.cache) : P(e.data, e.cacheTtlMs ?? 3e4);
 }
 function Ar(e) {
 	if (e.registry) return e.registry;
-	let t = new I(e.bindings ?? {});
-	return Sr(t), t;
+	let t = new F(e.bindings ?? {});
+	return Cr(t), t;
 }
 function Q(e) {
-	let t = kr(e), n = Ar(e), r = /* @__PURE__ */ new WeakMap(), i = e.resolveHostTimeoutMs ?? Or;
+	let t = kr(e), n = Ar(e), r = /* @__PURE__ */ new WeakMap(), i = e.resolveHostTimeoutMs ?? Or, a = e.defaultHandlers && e.defaultHandlers.length > 0 ? e.defaultHandlers.map((e) => n.build(e.type, e.options)) : void 0, o = a ? Z([], n, void 0, a) : void 0;
 	return async (e) => {
-		let a = e.req.header("host") ?? e.req.header("x-forwarded-host");
-		if (!a) return e.text("Missing host", 400);
+		let s = e.req.header("host") ?? e.req.header("x-forwarded-host");
+		if (!s) return e.text("Missing host", 400);
 		try {
-			let o = await Y(t.resolveHost(a), i, "resolveHost");
-			if (!o) return e.text("Unknown host", 404);
-			let s = r.get(o);
-			return s || (s = Dr(o.routes, n, {
-				tenant_id: o.tenant_id,
-				custom_domain_id: o.custom_domain_id,
-				domain: o.domain
-			}), r.set(o, s)), await s.fetch(e.req.raw);
+			let c = await J(t.resolveHost(s), i, "resolveHost");
+			if (!c) return o ? await o.fetch(e.req.raw) : e.text("Unknown host", 404);
+			let l = r.get(c);
+			return l || (l = Z(c.routes, n, {
+				tenant_id: c.tenant_id,
+				custom_domain_id: c.custom_domain_id,
+				domain: c.domain
+			}, a), r.set(c, l)), await l.fetch(e.req.raw);
 		} catch (t) {
-			return q(t) ? e.text(`Resolve host timed out after ${i}ms`, 504, { "x-authhero-proxy-error": "resolve_host_timeout" }) : e.text("Bad gateway", 502, { "x-authhero-proxy-error": "data_plane_error" });
+			return o ? await o.fetch(e.req.raw) : K(t) ? e.text(`Resolve host timed out after ${i}ms`, 504, { "x-authhero-proxy-error": "resolve_host_timeout" }) : e.text("Bad gateway", 502, { "x-authhero-proxy-error": "data_plane_error" });
 		}
 	};
 }
@@ -3066,9 +3066,10 @@ function Mr(e) {
 		resolver: e.resolver,
 		registry: e.registry,
 		bindings: e.bindings,
-		resolveHostTimeoutMs: e.resolveHostTimeoutMs
+		resolveHostTimeoutMs: e.resolveHostTimeoutMs,
+		defaultHandlers: e.defaultHandlers
 	})), n.onError((e, t) => {
-		let n = q(e);
+		let n = K(e);
 		return t.text(n ? "Proxy timeout" : "Bad gateway", n ? 504 : 502, { "x-authhero-proxy-error": n ? "proxy_timeout" : "proxy_error" });
 	}), n;
 }
@@ -3087,7 +3088,7 @@ function Lr(e) {
 	let n = t, r = e.namespace ?? "authhero-proxy", i = e.cacheTtlSeconds ?? 60, a = e.negativeCacheTtlSeconds ?? 10, o = e.waitUntil, s = e.cacheReadTimeoutMs ?? Nr, c = e.cacheWriteTimeoutMs ?? Pr;
 	async function l(e) {
 		try {
-			return await Y(Promise.resolve(n.match(e)), s, "cache.match");
+			return await J(Promise.resolve(n.match(e)), s, "cache.match");
 		} catch {
 			return;
 		}
@@ -3100,7 +3101,7 @@ function Lr(e) {
 		let d = await e.upstream.resolveHost(t), f = d === null ? a : i, p = new Response(JSON.stringify({ value: d }), { headers: {
 			"content-type": "application/json",
 			"cache-control": `public, max-age=${f}`
-		} }), m = Y(Promise.resolve(n.put(s, p)), c, "cache.put").catch(() => void 0);
+		} }), m = J(Promise.resolve(n.put(s, p)), c, "cache.put").catch(() => void 0);
 		return o ? o(m) : await m, d;
 	} };
 }
@@ -3117,13 +3118,13 @@ function Vr(e) {
 	}
 	async function p(e) {
 		try {
-			return await Y(n.get(e), l, "cache.get") ?? null;
+			return await J(n.get(e), l, "cache.get") ?? null;
 		} catch {
 			return null;
 		}
 	}
 	function m(e, t, r) {
-		let i = Y(Promise.resolve().then(() => n.set(e, t, r)), u, "cache.set").catch(() => void 0);
+		let i = J(Promise.resolve().then(() => n.set(e, t, r)), u, "cache.set").catch(() => void 0);
 		return c ? (c(i), Promise.resolve()) : i;
 	}
 	async function h(e) {
@@ -3275,7 +3276,7 @@ function qr() {
 	};
 }
 function Jr(e) {
-	let t = e.fetch ?? fetch, n = e.baseUrl.replace(/\/+$/, ""), r = e.resolveHostPath ?? "/api/v2/proxy/control-plane/hosts/", i = e.audience ?? `${n}/api/v2/`, a = e.scope ?? "proxy:resolve_host", o = e.tokenRefreshSkewSeconds ?? 60, s = e.timeoutMs ?? 5e3;
+	let t = e.fetch ?? fetch, n = e.baseUrl.replace(/\/+$/, ""), r = e.resolveHostPath ?? "/api/v2/proxy/control-plane/hosts/", i = e.audience ?? `${n}/api/v2/`, a = e.scope ?? "proxy:resolve_host", o = e.tokenRefreshSkewSeconds ?? 60, s = e.timeoutMs ?? 2500;
 	function c(e) {
 		let t = new AbortController(), n = setTimeout(() => t.abort(), s);
 		return e(t.signal).finally(() => clearTimeout(n));
@@ -3320,4 +3321,4 @@ function Jr(e) {
 	};
 }
 //#endregion
-export { I as HandlerRegistry, Kr as PROXY_RESOLVE_HOST_SCOPE, Jn as basicAuthHandler, Hr as buildCacheAdapterKey, Rr as buildCacheApiKey, Tr as buildMatchFilter, Xn as cacheHandler, Dr as compileHostApp, Gn as corsHandler, Vr as createCacheAdapterHostCache, Lr as createCacheApiHostCache, Jr as createHttpProxyAdapter, F as createInMemoryHostCache, Mr as createProxyApp, Q as createProxyDataPlaneHandler, jr as createProxyDataPlaneRouter, Wr as createStaticProxyAdapter, L as defineHandler, yr as dispatchNamespaceHandler, Zn as forwardedHeadersHandler, _n as handlerConfigSchema, Yn as headersHandler, ur as httpHandler, Gr as httpRoute, gn as matchSchema, wr as matchesAnyHost, Cr as matchesHost, M as proxyRouteInsertSchema, vn as proxyRouteSchema, yn as proxyRouteUpdateSchema, br as redirectHandler, Sr as registerBuiltinHandlers, tr as rewriteCookiesHandler, nr as rewriteLocationHandler, mr as serviceBindingHandler, Z as sortRoutes, xr as staticHandler };
+export { F as HandlerRegistry, Kr as PROXY_RESOLVE_HOST_SCOPE, Yn as basicAuthHandler, Hr as buildCacheAdapterKey, Rr as buildCacheApiKey, Er as buildMatchFilter, Zn as cacheHandler, Z as compileHostApp, Kn as corsHandler, Vr as createCacheAdapterHostCache, Lr as createCacheApiHostCache, Jr as createHttpProxyAdapter, P as createInMemoryHostCache, Mr as createProxyApp, Q as createProxyDataPlaneHandler, jr as createProxyDataPlaneRouter, Wr as createStaticProxyAdapter, I as defineHandler, br as dispatchNamespaceHandler, Qn as forwardedHeadersHandler, vn as handlerConfigSchema, Xn as headersHandler, dr as httpHandler, Gr as httpRoute, _n as matchSchema, Tr as matchesAnyHost, wr as matchesHost, j as proxyRouteInsertSchema, yn as proxyRouteSchema, bn as proxyRouteUpdateSchema, xr as redirectHandler, Cr as registerBuiltinHandlers, nr as rewriteCookiesHandler, rr as rewriteLocationHandler, hr as serviceBindingHandler, X as sortRoutes, Sr as staticHandler };