@authhero/proxy 0.9.6 → 0.10.1

package/dist/proxy.mjs

@@ -126,7 +126,8 @@ var p = e.enum([
 	body: e.unknown().optional(),
 	ip: e.string(),
 	user_agent: e.string().optional(),
-	correlation_id: e.string().optional()
+	correlation_id: e.string().optional(),
+	redirect_uri: e.string().optional()
 }), te = e.object({
 	status_code: e.number(),
 	body: e.unknown().optional()
@@ -308,6 +309,7 @@ pe.extend({
 	provider: e.string().optional(),
 	connection: e.string(),
 	is_social: e.boolean().optional(),
+	blocked: e.boolean().optional(),
 	registration_completed_at: e.string().optional(),
 	password: e.object({
 		hash: e.string(),
@@ -826,8 +828,8 @@ var We = e.object({
 	strategy: e.string(),
 	options: e.preprocess((e) => e === null ? {} : v(e), Ue).default({}),
 	enabled_clients: e.array(e.string()).default([]).optional(),
-	response_type: e.custom().optional(),
-	response_mode: e.custom().optional(),
+	response_type: e.nativeEnum(Ie).optional(),
+	response_mode: e.nativeEnum(Le).optional(),
 	is_domain_connection: e.boolean().optional(),
 	show_as_button: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional(),
@@ -838,7 +840,7 @@ e.object({
 	created_at: e.string().transform((e) => e === null ? "" : e),
 	updated_at: e.string().transform((e) => e === null ? "" : e)
 }).extend(We.shape);
-var Ge = e.object({
+var y = e.object({
 	domain: e.string(),
 	custom_domain_id: e.string().optional(),
 	type: e.enum(["auth0_managed_certs", "self_managed_certs"]),
@@ -852,7 +854,7 @@ var Ge = e.object({
 		"null"
 	]).optional(),
 	domain_metadata: e.record(e.string(), e.string().max(255)).optional()
-}), Ke = e.discriminatedUnion("name", [e.object({
+}), Ge = e.discriminatedUnion("name", [e.object({
 	name: e.literal("txt"),
 	record: e.string(),
 	domain: e.string()
@@ -860,7 +862,7 @@ var Ge = e.object({
 	name: e.literal("http"),
 	http_body: e.string(),
 	http_url: e.string()
-})]), qe = Ge.extend({
+})]), Ke = y.extend({
 	custom_domain_id: e.string(),
 	primary: e.boolean(),
 	status: e.enum([
@@ -870,28 +872,28 @@ var Ge = e.object({
 		"ready"
 	]),
 	origin_domain_name: e.string().optional(),
-	verification: e.object({ methods: e.array(Ke) }).optional(),
+	verification: e.object({ methods: e.array(Ge) }).optional(),
 	tls_policy: e.string().optional()
 });
-Ge.pick({
+y.pick({
 	tls_policy: !0,
 	custom_client_ip_header: !0,
 	domain_metadata: !0
-}).strict(), qe.extend({ tenant_id: e.string() }), e.object({
+}).strict(), Ke.extend({ tenant_id: e.string() }), e.object({
 	certificate: e.string().regex(/^-----BEGIN CERTIFICATE-----[\s\S]+-----END CERTIFICATE-----\s*$/, "must be PEM-encoded; include the full certificate chain in leaf-first order"),
 	private_key: e.string().regex(/-----BEGIN (RSA |EC |ENCRYPTED )?PRIVATE KEY-----[\s\S]+-----END \1PRIVATE KEY-----\s*$/, "must be a PEM-encoded private key")
 });
-var y = e.object({
+var b = e.object({
 	id: e.string(),
 	order: e.number().optional(),
 	visible: e.boolean().optional().default(!0)
-}), b = y.extend({ category: e.literal("BLOCK").optional() }), Je = b.extend({
+}), x = b.extend({ category: e.literal("BLOCK").optional() }), qe = x.extend({
 	type: e.literal("DIVIDER"),
 	config: e.object({ text: e.string().optional() }).optional()
-}), Ye = b.extend({
+}), Je = x.extend({
 	type: e.literal("HTML"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), Xe = b.extend({
+}), Ye = x.extend({
 	type: e.literal("IMAGE"),
 	config: e.object({
 		src: e.string().optional(),
@@ -899,43 +901,43 @@ var y = e.object({
 		width: e.number().optional(),
 		height: e.number().optional()
 	}).optional()
-}), Ze = b.extend({
+}), Xe = x.extend({
 	type: e.literal("JUMP_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		target_step: e.string().optional()
 	})
-}), Qe = b.extend({
+}), Ze = x.extend({
 	type: e.literal("RESEND_BUTTON"),
 	config: e.object({
 		text: e.string().optional(),
 		resend_action: e.string().optional()
 	})
-}), $e = b.extend({
+}), Qe = x.extend({
 	type: e.literal("NEXT_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), et = b.extend({
+}), $e = x.extend({
 	type: e.literal("PREVIOUS_BUTTON"),
 	config: e.object({ text: e.string().optional() })
-}), tt = b.extend({
+}), et = x.extend({
 	type: e.literal("RICH_TEXT"),
 	config: e.object({ content: e.string().optional() }).optional()
-}), x = y.extend({
+}), S = b.extend({
 	category: e.literal("WIDGET").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), nt = x.extend({
+}), tt = S.extend({
 	type: e.literal("AUTH0_VERIFIABLE_CREDENTIALS"),
 	config: e.object({ credential_type: e.string().optional() })
-}), rt = x.extend({
+}), nt = S.extend({
 	type: e.literal("GMAPS_ADDRESS"),
 	config: e.object({ api_key: e.string().optional() })
-}), it = x.extend({
+}), rt = S.extend({
 	type: e.literal("RECAPTCHA"),
 	config: e.object({ site_key: e.string().optional() })
-}), S = y.extend({
+}), C = b.extend({
 	category: e.literal("FIELD").optional(),
 	label: e.string().min(1).optional(),
 	hint: e.string().min(1).max(500).optional(),
@@ -951,10 +953,10 @@ var y = e.object({
 	})).optional(),
 	required: e.boolean().optional(),
 	sensitive: e.boolean().optional()
-}), at = S.extend({
+}), it = C.extend({
 	type: e.literal("BOOLEAN"),
 	config: e.object({ default_value: e.boolean().optional() }).optional()
-}), ot = S.extend({
+}), at = C.extend({
 	type: e.literal("CARDS"),
 	config: e.object({
 		options: e.array(e.object({
@@ -965,7 +967,7 @@ var y = e.object({
 		})).optional(),
 		multi_select: e.boolean().optional()
 	}).optional()
-}), st = S.extend({
+}), ot = C.extend({
 	type: e.literal("CHOICE"),
 	config: e.object({
 		options: e.array(e.object({
@@ -976,7 +978,7 @@ var y = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), ct = S.extend({
+}), st = C.extend({
 	type: e.literal("CODE"),
 	config: e.object({
 		length: e.number().int().positive().max(100).optional(),
@@ -993,7 +995,7 @@ var y = e.object({
 		message: "default_value is longer than the configured length",
 		path: ["default_value"]
 	}).optional()
-}), lt = S.extend({
+}), ct = C.extend({
 	type: e.literal("CUSTOM"),
 	config: e.object({
 		component: e.string().optional(),
@@ -1001,7 +1003,7 @@ var y = e.object({
 		schema: e.record(e.string(), e.any()).optional(),
 		code: e.string().optional()
 	})
-}), ut = S.extend({
+}), lt = C.extend({
 	type: e.literal("DATE"),
 	config: e.object({
 		format: e.string().optional(),
@@ -1009,7 +1011,7 @@ var y = e.object({
 		max: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), dt = S.extend({
+}), ut = C.extend({
 	type: e.literal("DROPDOWN"),
 	config: e.object({
 		options: e.array(e.object({
@@ -1021,26 +1023,26 @@ var y = e.object({
 		multiple: e.boolean().optional(),
 		default_value: e.union([e.string(), e.array(e.string())]).optional()
 	}).optional()
-}), ft = S.extend({
+}), dt = C.extend({
 	type: e.literal("EMAIL"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), pt = S.extend({
+}), ft = C.extend({
 	type: e.literal("FILE"),
 	config: e.object({
 		accept: e.string().optional(),
 		max_size: e.number().optional(),
 		multiple: e.boolean().optional()
 	}).optional()
-}), mt = S.extend({
+}), pt = C.extend({
 	type: e.literal("LEGAL"),
 	config: e.object({
 		text: e.string(),
 		html: e.boolean().optional()
 	}).optional()
-}), ht = S.extend({
+}), mt = C.extend({
 	type: e.literal("NUMBER"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1049,7 +1051,7 @@ var y = e.object({
 		step: e.number().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), gt = S.extend({
+}), ht = C.extend({
 	type: e.literal("PASSWORD"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1058,13 +1060,13 @@ var y = e.object({
 		forgot_password_link: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), _t = S.extend({
+}), gt = C.extend({
 	type: e.literal("PAYMENT"),
 	config: e.object({
 		provider: e.string().optional(),
 		currency: e.string().optional()
 	}).optional()
-}), vt = S.extend({
+}), _t = C.extend({
 	type: e.literal("SOCIAL"),
 	config: e.object({
 		providers: e.array(e.string()).optional(),
@@ -1073,10 +1075,12 @@ var y = e.object({
 			strategy: e.string().optional(),
 			display_name: e.string().optional(),
 			icon_url: e.string().optional(),
-			href: e.string().optional()
+			href: e.string().optional(),
+			last_used: e.boolean().optional(),
+			last_used_label: e.string().optional()
 		})).optional()
 	}).optional()
-}), yt = S.extend({
+}), vt = C.extend({
 	type: e.literal("TEL"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1084,7 +1088,7 @@ var y = e.object({
 		default_value: e.string().optional(),
 		allow_email: e.boolean().optional()
 	}).optional()
-}), bt = S.extend({
+}), yt = C.extend({
 	type: e.literal("TEXT"),
 	config: e.object({
 		placeholder: e.string().optional(),
@@ -1092,37 +1096,38 @@ var y = e.object({
 		max_length: e.number().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), xt = S.extend({
+}), bt = C.extend({
 	type: e.literal("COUNTRY"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), St = S.extend({
+}), xt = C.extend({
 	type: e.literal("URL"),
 	config: e.object({
 		placeholder: e.string().optional(),
 		default_value: e.string().optional()
 	}).optional()
-}), Ct = e.discriminatedUnion("type", [
+}), St = e.discriminatedUnion("type", [
+	qe,
 	Je,
 	Ye,
 	Xe,
 	Ze,
 	Qe,
 	$e,
-	et,
-	tt
-]), wt = e.discriminatedUnion("type", [
+	et
+]), Ct = e.discriminatedUnion("type", [
+	tt,
 	nt,
-	rt,
-	it
-]), Tt = e.discriminatedUnion("type", [
+	rt
+]), wt = e.discriminatedUnion("type", [
+	it,
 	at,
 	ot,
 	st,
+	bt,
 	ct,
-	xt,
 	lt,
 	ut,
 	dt,
@@ -1134,14 +1139,28 @@ var y = e.object({
 	_t,
 	vt,
 	yt,
-	bt,
-	St
-]), Et = e.union([
+	xt
+]), w = e.union([
+	St,
 	Ct,
-	wt,
-	Tt
+	wt
 ]);
-e.object({
+new Set([
+	"BOOLEAN",
+	"CARDS",
+	"CHOICE",
+	"CODE",
+	"COUNTRY",
+	"DATE",
+	"DROPDOWN",
+	"EMAIL",
+	"LEGAL",
+	"NUMBER",
+	"PASSWORD",
+	"TEL",
+	"TEXT",
+	"URL"
+]), e.object({
 	id: e.string(),
 	type: e.literal("submit"),
 	label: e.string(),
@@ -1151,22 +1170,22 @@ e.object({
 	visible: e.boolean().optional().default(!0),
 	customizations: e.record(e.string(), e.any()).optional()
 });
-var C = e.object({
+var T = e.object({
 	x: e.number(),
 	y: e.number()
-}), Dt = e.object({
+}), Tt = e.object({
 	id: e.string(),
 	type: e.literal("FLOW"),
-	coordinates: C,
+	coordinates: T,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
 		flow_id: e.string().max(30),
 		next_node: e.string().optional()
 	})
-}), Ot = e.object({
+}), Et = e.object({
 	id: e.string(),
 	type: e.literal("ROUTER"),
-	coordinates: C,
+	coordinates: T,
 	alias: e.string().min(1).max(150),
 	config: e.object({
 		rules: e.array(e.object({
@@ -1177,20 +1196,20 @@ var C = e.object({
 		})),
 		fallback: e.string()
 	})
-}), kt = e.object({
+}), Dt = e.object({
 	id: e.string(),
 	type: e.literal("STEP"),
-	coordinates: C,
+	coordinates: T,
 	alias: e.string().min(1).max(150).optional(),
 	config: e.object({
-		components: e.array(Et),
+		components: e.array(w),
 		next_node: e.string().optional()
 	})
-}), At = e.discriminatedUnion("type", [
-	Dt,
-	Ot,
-	kt
-]), jt = e.object({
+}), Ot = e.discriminatedUnion("type", [
+	Tt,
+	Et,
+	Dt
+]), kt = e.object({
 	name: e.string().openapi({ description: "The name of the form" }),
 	messages: e.object({
 		errors: e.record(e.string(), e.any()).optional(),
@@ -1201,14 +1220,14 @@ var C = e.object({
 		default: e.string().optional()
 	}).optional(),
 	translations: e.record(e.string(), e.any()).optional(),
-	nodes: e.array(At).optional(),
+	nodes: e.array(Ot).optional(),
 	start: e.object({
 		hidden_fields: e.array(e.object({
 			key: e.string(),
 			value: e.string()
 		})).optional(),
 		next_node: e.string().optional(),
-		coordinates: C.optional()
+		coordinates: T.optional()
 	}).optional(),
 	ending: e.object({
 		redirection: e.object({
@@ -1216,7 +1235,7 @@ var C = e.object({
 			target: e.string().optional()
 		}).optional(),
 		after_submit: e.object({ flow_id: e.string().optional() }).optional(),
-		coordinates: C.optional(),
+		coordinates: T.optional(),
 		resume_flow: e.boolean().optional()
 	}).optional(),
 	style: e.object({ css: e.string().optional() }).optional(),
@@ -1225,8 +1244,8 @@ var C = e.object({
 		sdk_src: e.string().optional()
 	}).optional()
 }).openapi({ description: "Schema for flow-based forms (matches Auth0 Forms structure)" });
-n.extend(jt.shape).extend({ id: e.string() });
-var Mt = e.object({
+n.extend(kt.shape).extend({ id: e.string() });
+var At = e.object({
 	id: e.number().optional(),
 	text: e.string(),
 	type: e.enum([
@@ -1235,7 +1254,7 @@ var Mt = e.object({
 		"success",
 		"warning"
 	])
-}), Nt = e.object({
+}), jt = e.object({
 	id: e.string().optional(),
 	text: e.string(),
 	href: e.string(),
@@ -1247,12 +1266,12 @@ e.object({
 	method: e.enum(["POST", "GET"]),
 	title: e.string().optional(),
 	description: e.string().optional(),
-	components: e.array(Et),
-	messages: e.array(Mt).optional(),
-	links: e.array(Nt).optional(),
+	components: e.array(w),
+	messages: e.array(At).optional(),
+	links: e.array(jt).optional(),
 	footer: e.string().optional()
 });
-var Pt = e.enum([
+var E = e.enum([
 	"pre-user-registration",
 	"post-user-registration",
 	"post-user-login",
@@ -1260,24 +1279,24 @@ var Pt = e.enum([
 	"validate-registration-username",
 	"pre-user-deletion",
 	"post-user-deletion"
-]), w = e.enum([
+]), D = e.enum([
 	"pre-user-registration",
 	"post-user-registration",
 	"post-user-login",
 	"validate-registration-username",
 	"pre-user-deletion",
 	"post-user-deletion"
-]), T = e.enum([
+]), Mt = e.enum([
 	"post-user-login",
 	"post-user-registration",
 	"post-user-update",
 	"credentials-exchange"
-]), E = e.enum([
+]), Nt = e.enum([
 	"post-user-login",
 	"credentials-exchange",
 	"pre-user-registration",
 	"post-user-registration"
-]), D = e.enum([
+]), Pt = e.enum([
 	"ensure-username",
 	"set-preferred-username",
 	"account-linking"
@@ -1289,19 +1308,19 @@ var Pt = e.enum([
 	metadata: e.record(e.string(), e.unknown()).optional()
 }, Ft = e.object({
 	...O,
-	trigger_id: Pt,
+	trigger_id: E,
 	url: e.string()
 }), It = e.object({
 	...O,
-	trigger_id: w,
+	trigger_id: D,
 	form_id: e.string()
 }), Lt = e.object({
 	...O,
-	trigger_id: T,
-	template_id: D
+	trigger_id: Mt,
+	template_id: Pt
 }), Rt = e.object({
 	...O,
-	trigger_id: E,
+	trigger_id: Nt,
 	code_id: e.string()
 });
 e.union([
@@ -1312,25 +1331,25 @@ e.union([
 ]);
 var zt = e.object({
 	...O,
-	trigger_id: Pt
+	trigger_id: E
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	url: e.string()
 }), Bt = e.object({
 	...O,
-	trigger_id: w
+	trigger_id: D
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	form_id: e.string()
 }), Vt = e.object({
 	...O,
-	trigger_id: T
+	trigger_id: Mt
 }).extend(n.shape).extend({
 	hook_id: e.string(),
-	template_id: D
+	template_id: Pt
 }), Ht = e.object({
 	...O,
-	trigger_id: E
+	trigger_id: Nt
 }).extend(n.shape).extend({
 	hook_id: e.string(),
 	code_id: e.string()
@@ -2152,6 +2171,7 @@ e.object({
 	universal_login_experience: e.enum(["new", "classic"]).default("new"),
 	identifier_first: e.boolean().default(!0),
 	password_first: e.boolean().default(!1),
+	show_last_used_connection: e.boolean().default(!1),
 	webauthn_platform_first_factor: e.boolean()
 });
 var wn = e.object({
@@ -2160,32 +2180,59 @@ var wn = e.object({
 	path: e.string().default("/*"),
 	headers: e.record(e.string(), e.string()).optional(),
 	query: e.record(e.string(), e.string()).optional()
-}), Tn = e.object({
+}), j = e.object({
 	type: e.string(),
 	options: e.record(e.string(), e.unknown()).default({})
-}), j = e.object({
+}), M = e.object({
 	id: e.string().optional(),
 	custom_domain_id: e.string(),
 	priority: e.number().int().default(100),
 	match: wn,
-	handlers: e.array(Tn).min(1)
-}), En = j.extend({
+	handlers: e.array(j).min(1)
+}), Tn = M.extend({
 	id: e.string(),
 	tenant_id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}), Dn = j.partial().omit({
+}), En = M.partial().omit({
 	id: !0,
 	custom_domain_id: !0
+}), Dn = e.object({
+	scim: e.string(),
+	auth0: e.string()
+}), On = e.object({
+	connection_id: e.string(),
+	user_id_attribute: e.string().default("externalId"),
+	mapping: e.array(Dn).default([])
 });
 e.object({
+	created_at: e.string(),
+	updated_at: e.string()
+}).extend(On.shape);
+var kn = e.object({
+	token_id: e.string(),
+	connection_id: e.string(),
+	token_hash: e.string(),
+	scopes: e.array(e.string()).default([]),
+	valid_until: e.string().optional()
+});
+e.object({
+	created_at: e.string(),
+	last_used_at: e.string().optional()
+}).extend(kn.shape);
+var An = e.object({
+	connection_id: e.string(),
+	external_id: e.string(),
+	user_id: e.string()
+});
+e.object({ created_at: e.string() }).extend(An.shape), e.object({
 	name: e.string(),
 	enabled: e.boolean().optional().default(!0),
 	default_from_address: e.string().optional(),
 	credentials: e.record(e.string(), e.unknown()),
 	settings: e.object({}).optional()
 });
-var On = e.enum([
+var jn = e.enum([
 	"verify_email",
 	"verify_email_by_code",
 	"reset_email",
@@ -2200,7 +2247,7 @@ var On = e.enum([
 	"user_invitation"
 ]);
 e.object({
-	template: On,
+	template: jn,
 	body: e.string(),
 	from: e.string(),
 	subject: e.string(),
@@ -2238,10 +2285,10 @@ e.object({
 	name: e.string(),
 	options: e.object({})
 });
-var kn = e.object({
+var Mn = e.object({
 	value: e.string(),
 	description: e.string().optional()
-}), An = e.object({
+}), Nn = e.object({
 	token_dialect: e.enum(["access_token", "access_token_authz"]).optional(),
 	enforce_policies: e.boolean().optional(),
 	allow_skipping_userinfo: e.boolean().optional(),
@@ -2249,11 +2296,11 @@ var kn = e.object({
 	persist_client_authorization: e.boolean().optional(),
 	enable_introspection_endpoint: e.boolean().optional(),
 	mtls: e.object({ bound_access_tokens: e.boolean().optional() }).optional()
-}), jn = e.object({
+}), Pn = e.object({
 	id: e.string().optional(),
 	name: e.string(),
 	identifier: e.string(),
-	scopes: e.array(kn).optional(),
+	scopes: e.array(Mn).optional(),
 	signing_alg: e.string().optional(),
 	signing_secret: e.string().optional(),
 	token_lifetime: e.number().default(86400),
@@ -2261,20 +2308,20 @@ var kn = e.object({
 	skip_consent_for_verifiable_first_party_clients: e.boolean().optional(),
 	allow_offline_access: e.boolean().optional(),
 	verificationKey: e.string().optional(),
-	options: An.optional(),
+	options: Nn.optional(),
 	is_system: e.boolean().optional(),
 	metadata: e.record(e.string(), e.any()).optional()
 }).extend({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(jn);
-var Mn = e.object({
+e.array(Pn);
+var Fn = e.object({
 	role_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string()
 }).extend({ created_at: e.string() });
-e.array(Mn), e.object({
+e.array(Fn), e.object({
 	user_id: e.string().openapi({ description: "The id of the user that granted the consent" }),
 	clientID: e.string().openapi({ description: "The id of the client the grant was issued to" }),
 	audience: e.string().optional().openapi({ description: "The audience the grant applies to" }),
@@ -2287,7 +2334,7 @@ e.array(Mn), e.object({
 	failed_logins: e.array(e.string()).optional(),
 	last_password_reset: e.string().optional()
 });
-var Nn = e.object({
+var In = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	permission_name: e.string(),
@@ -2296,8 +2343,8 @@ var Nn = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(Nn);
-var Pn = e.object({
+e.array(In);
+var Ln = e.object({
 	user_id: e.string(),
 	resource_server_identifier: e.string(),
 	resource_server_name: e.string(),
@@ -2306,8 +2353,8 @@ var Pn = e.object({
 	created_at: e.string().optional(),
 	organization_id: e.string().optional()
 });
-e.array(Pn);
-var Fn = e.object({
+e.array(Ln);
+var Rn = e.object({
 	user_id: e.string(),
 	role_id: e.string(),
 	organization_id: e.string().optional()
@@ -2315,8 +2362,8 @@ var Fn = e.object({
 	tenant_id: e.string(),
 	created_at: e.string().optional()
 });
-e.array(Fn);
-var In = e.object({
+e.array(Rn);
+var zn = e.object({
 	id: e.string().optional().openapi({ description: "The unique identifier of the role. If not provided, one will be generated." }),
 	name: e.string().min(1).max(50).openapi({ description: "The name of the role. Cannot include '<' or '>'" }),
 	description: e.string().max(255).optional().openapi({ description: "The description of the role" }),
@@ -2327,19 +2374,19 @@ var In = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(In);
-var Ln = e.object({
+e.array(zn);
+var Bn = e.object({
 	logo_url: e.string().optional().openapi({ description: "URL of the organization's logo" }),
 	colors: e.object({
 		primary: e.string().optional().openapi({ description: "Primary color in hex format (e.g., #FF0000)" }),
 		page_background: e.string().optional().openapi({ description: "Page background color in hex format (e.g., #FFFFFF)" })
 	}).optional()
-}).optional(), Rn = e.object({
+}).optional(), Vn = e.object({
 	connection_id: e.string().openapi({ description: "ID of the connection" }),
 	assign_membership_on_login: e.boolean().default(!1).openapi({ description: "Whether to assign membership to the organization on login" }),
 	show_as_button: e.boolean().default(!0).openapi({ description: "Whether to show this connection as a button in the login screen" }),
 	is_signup_enabled: e.boolean().default(!0).openapi({ description: "Whether signup is enabled for this connection" })
-}), zn = e.object({ client_credentials: e.object({
+}), Hn = e.object({ client_credentials: e.object({
 	enforce: e.boolean().default(!1).openapi({ description: "Whether to enforce token quota limits" }),
 	per_day: e.number().min(0).default(0).openapi({ description: "Maximum tokens per day (0 = unlimited)" }),
 	per_hour: e.number().min(0).default(0).openapi({ description: "Maximum tokens per hour (0 = unlimited)" })
@@ -2348,15 +2395,15 @@ e.object({
 	id: e.string().optional(),
 	name: e.string().min(1).regex(/^[a-z0-9_-]+$/, { message: "Organization name must be lowercase and can only contain letters, numbers, hyphens, and underscores" }).openapi({ description: "The name of the organization. Must be lowercase and can only contain letters, numbers, hyphens, and underscores." }),
 	display_name: e.string().optional().openapi({ description: "The display name of the organization" }),
-	branding: Ln,
+	branding: Bn,
 	metadata: e.record(e.string(), e.any()).default({}).optional().openapi({ description: "Custom metadata for the organization" }),
-	enabled_connections: e.array(Rn).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
-	token_quota: zn
+	enabled_connections: e.array(Vn).default([]).optional().openapi({ description: "List of enabled connections for the organization" }),
+	token_quota: Hn
 }).extend(n.shape).extend({
 	id: e.string(),
 	name: e.string().min(1).openapi({ description: "The name of the organization" })
 });
-var Bn = e.object({
+var Un = e.object({
 	connection_id: e.string().openapi({ description: "ID of the tenant-level connection to enable for the org." }),
 	assign_membership_on_login: e.boolean().optional().default(!1),
 	show_as_button: e.boolean().optional().default(!0),
@@ -2369,7 +2416,7 @@ var Bn = e.object({
 	created_at: e.string().optional(),
 	updated_at: e.string().optional()
 });
-e.array(Bn), e.object({
+e.array(Un), e.object({
 	user_id: e.string().openapi({ description: "ID of the user" }),
 	organization_id: e.string().openapi({ description: "ID of the organization" })
 }).extend(n.shape).extend({ id: e.string() }), e.object({
@@ -2508,22 +2555,22 @@ e.array(Bn), e.object({
 	"passwordless",
 	"enterprise"
 ]);
-var Vn = e.object({
+var Wn = e.object({
 	name: e.string(),
 	type: e.string()
-}), Hn = e.object({
+}), Gn = e.object({
 	elapsed: e.number(),
 	rows_read: e.number().optional(),
 	bytes_read: e.number().optional()
 });
 e.object({
-	meta: e.array(Vn),
+	meta: e.array(Wn),
 	data: e.array(e.record(e.string(), e.any())),
 	rows: e.number(),
 	rows_before_limit_at_least: e.number().optional(),
-	statistics: Hn.optional()
+	statistics: Gn.optional()
 });
-var Un = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), Wn = e.record(e.string(), e.record(e.string(), e.string())).openapi({
+var Kn = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.signup-password.reset-password.consent.mfa.mfa-push.mfa-otp.mfa-voice.mfa-phone.mfa-webauthn.mfa-email.mfa-recovery-code.status.device-flow.email-verification.email-otp-challenge.organizations.invitation.common.passkeys.captcha.custom-form.login-passwordless.mfa-login-options".split(".")), qn = e.record(e.string(), e.record(e.string(), e.string())).openapi({
 	type: "object",
 	additionalProperties: {
 		type: "object",
@@ -2531,11 +2578,11 @@ var Un = e.enum(/* @__PURE__ */ "login.login-id.login-password.signup.signup-id.
 	}
 });
 e.object({
-	prompt: Un,
+	prompt: Kn,
 	language: e.string(),
-	custom_text: Wn
+	custom_text: qn
 });
-var Gn = e.enum([
+var Jn = e.enum([
 	"phone",
 	"totp",
 	"email",
@@ -2543,9 +2590,9 @@ var Gn = e.enum([
 	"webauthn-roaming",
 	"webauthn-platform",
 	"passkey"
-]), M = e.object({
+]), N = e.object({
 	user_id: e.string(),
-	type: Gn,
+	type: Jn,
 	phone_number: e.string().optional(),
 	totp_secret: e.string().optional(),
 	credential_id: e.string().optional(),
@@ -2556,7 +2603,7 @@ var Gn = e.enum([
 	friendly_name: e.string().optional(),
 	confirmed: e.boolean().default(!1)
 });
-function N(t, n) {
+function P(t, n) {
 	t.type === "phone" && !t.phone_number && n.addIssue({
 		code: e.ZodIssueCode.custom,
 		message: "phone_number is required when type is 'phone'",
@@ -2579,23 +2626,23 @@ function N(t, n) {
 		path: ["public_key"]
 	}));
 }
-M.superRefine(N), M.extend({
+N.superRefine(P), N.extend({
 	id: e.string(),
 	created_at: e.string(),
 	updated_at: e.string()
-}).superRefine(N), e.object({
+}).superRefine(P), e.object({
 	id: e.string().optional(),
 	created_at: e.string().datetime({ offset: !0 }).optional(),
 	updated_at: e.string().datetime({ offset: !0 }).optional()
 });
 //#endregion
 //#region src/data-plane/cache.ts
-var Kn = 1e4;
-function P(e, t, n) {
+var Yn = 1e4;
+function F(e, t, n) {
 	let r = typeof t == "number" ? {
 		freshTtlMs: t,
 		maxEntries: n
-	} : t, i = r.freshTtlMs, a = r.staleTtlMs ?? 0, o = r.staleIfErrorTtlMs ?? 0, s = r.negativeTtlMs ?? i, c = r.maxEntries ?? Kn, l = r.waitUntil, u = /* @__PURE__ */ new Map();
+	} : t, i = r.freshTtlMs, a = r.staleTtlMs ?? 0, o = r.staleIfErrorTtlMs ?? 0, s = r.negativeTtlMs ?? i, c = r.maxEntries ?? Yn, l = r.waitUntil, u = /* @__PURE__ */ new Map();
 	function d(e) {
 		for (let [t, n] of u) n.stale_if_error_until <= e && n.stale_until <= e && !n.refreshing && u.delete(t);
 		for (; u.size >= c;) {
@@ -2652,7 +2699,7 @@ function P(e, t, n) {
 }
 //#endregion
 //#region src/data-plane/registry.ts
-var F = class {
+var I = class {
 	definitions = /* @__PURE__ */ new Map();
 	bindings;
 	constructor(e = {}) {
@@ -2672,38 +2719,38 @@ var F = class {
 		return n.build(r.data, { bindings: this.bindings });
 	}
 };
-function I(e) {
+function L(e) {
 	return e;
 }
 //#endregion
 //#region src/data-plane/handlers/util.ts
-var L = "__authhero_proxy_request__", R = "__authhero_proxy_tenant_id__", z = "__authhero_proxy_custom_domain_id__", B = "__authhero_proxy_domain__", V = "x-authhero-proxy-mutability-probe";
-function qn(e, t) {
-	e.set(L, t);
+var R = "__authhero_proxy_request__", z = "__authhero_proxy_tenant_id__", B = "__authhero_proxy_custom_domain_id__", V = "__authhero_proxy_domain__", H = "x-authhero-proxy-mutability-probe";
+function Xn(e, t) {
+	e.set(R, t);
 }
-function H(e) {
-	return e.get(L) ?? e.req.raw;
+function U(e) {
+	return e.get(R) ?? e.req.raw;
 }
-function Jn(e, t) {
-	e.set(R, t.tenant_id), e.set(z, t.custom_domain_id), e.set(B, t.domain);
+function Zn(e, t) {
+	e.set(z, t.tenant_id), e.set(B, t.custom_domain_id), e.set(V, t.domain);
 }
-function Yn(e) {
-	return e.get(R);
-}
-function Xn(e) {
+function Qn(e) {
 	return e.get(z);
 }
-function Zn(e) {
+function $n(e) {
 	return e.get(B);
 }
-function U(e, t) {
-	let n = H(e), r = new Headers(n.headers);
-	t(r), qn(e, new Request(n, { headers: r }));
+function er(e) {
+	return e.get(V);
+}
+function W(e, t) {
+	let n = U(e), r = new Headers(n.headers);
+	t(r), Xn(e, new Request(n, { headers: r }));
 }
-function W(e) {
+function G(e) {
 	let t = e.res;
 	try {
-		t.headers.append(V, "1"), t.headers.delete(V);
+		t.headers.append(H, "1"), t.headers.delete(H);
 		return;
 	} catch {
 		e.res = new Response(t.body, {
@@ -2715,7 +2762,7 @@ function W(e) {
 }
 //#endregion
 //#region src/data-plane/handlers/cors.ts
-var Qn = e.object({
+var tr = e.object({
 	origins: e.array(e.string()).optional(),
 	allow_credentials: e.boolean().optional(),
 	allow_headers: e.array(e.string()).optional(),
@@ -2723,44 +2770,44 @@ var Qn = e.object({
 	expose_headers: e.array(e.string()).optional(),
 	max_age: e.number().int().optional()
 }).refine((e) => !(e.allow_credentials && e.origins?.includes("*")), { message: "Cannot use wildcard origin (*) with allow_credentials" });
-function G(e, t) {
+function nr(e, t) {
 	let n = new Headers(), r = e.origins ?? ["*"], i = r.includes("*");
 	return i && !e.allow_credentials ? n.set("Access-Control-Allow-Origin", "*") : t && (i || r.includes(t)) && (n.set("Access-Control-Allow-Origin", t), n.append("Vary", "Origin")), e.allow_credentials && n.set("Access-Control-Allow-Credentials", "true"), e.allow_methods?.length && n.set("Access-Control-Allow-Methods", e.allow_methods.join(", ")), e.allow_headers?.length && n.set("Access-Control-Allow-Headers", e.allow_headers.join(", ")), e.expose_headers?.length && n.set("Access-Control-Expose-Headers", e.expose_headers.join(", ")), e.max_age !== void 0 && n.set("Access-Control-Max-Age", String(e.max_age)), n;
 }
-var $n = I({
+var rr = L({
 	type: "cors",
-	optionsSchema: Qn,
+	optionsSchema: tr,
 	build(e) {
 		return async (t, n) => {
 			let r = t.req.header("origin") ?? null;
 			if (t.req.method === "OPTIONS" && r !== null && t.req.header("access-control-request-method") !== void 0) {
-				let t = G(e, r);
+				let t = nr(e, r);
 				return new Response(null, {
 					status: 204,
 					headers: t
 				});
 			}
 			await n();
-			let i = G(e, r);
-			W(t), i.forEach((e, n) => {
+			let i = nr(e, r);
+			G(t), i.forEach((e, n) => {
 				n.toLowerCase() === "vary" ? t.res.headers.append(n, e) : t.res.headers.set(n, e);
 			});
 		};
 	}
-}), er = e.object({
+}), ir = e.object({
 	username: e.string(),
 	password: e.string(),
 	realm: e.string().optional()
 });
-function tr(e, t) {
+function ar(e, t) {
 	let n = `${e}:${t}`;
 	return typeof btoa == "function" ? btoa(n) : Buffer.from(n, "utf-8").toString("base64");
 }
-var nr = I({
+var or = L({
 	type: "basic_auth",
-	optionsSchema: er,
+	optionsSchema: ir,
 	build(e) {
-		let t = tr(e.username, e.password), n = (e.realm ?? "Restricted").replace(/["\\\r\n]/g, "");
+		let t = ar(e.username, e.password), n = (e.realm ?? "Restricted").replace(/["\\\r\n]/g, "");
 		return async (e, r) => {
 			let i = e.req.header("authorization");
 			if (i) {
@@ -2776,7 +2823,7 @@ var nr = I({
 			});
 		};
 	}
-}), rr = I({
+}), sr = L({
 	type: "headers",
 	optionsSchema: e.object({
 		request: e.record(e.string(), e.string()).optional(),
@@ -2786,23 +2833,23 @@ var nr = I({
 	}),
 	build(e) {
 		return async (t, n) => {
-			if ((e.request || e.remove_request) && U(t, (t) => {
+			if ((e.request || e.remove_request) && W(t, (t) => {
 				if (e.remove_request?.forEach((e) => t.delete(e)), e.request) for (let [n, r] of Object.entries(e.request)) t.set(n, r);
-			}), await n(), (e.response || e.remove_response) && (W(t), e.remove_response?.forEach((e) => t.res.headers.delete(e)), e.response)) for (let [n, r] of Object.entries(e.response)) t.res.headers.set(n, r);
+			}), await n(), (e.response || e.remove_response) && (G(t), e.remove_response?.forEach((e) => t.res.headers.delete(e)), e.response)) for (let [n, r] of Object.entries(e.response)) t.res.headers.set(n, r);
 		};
 	}
-}), ir = I({
+}), cr = L({
 	type: "cache",
 	optionsSchema: e.object({ ttl_seconds: e.number().int().positive() }),
 	build(e) {
 		return async (t, n) => {
 			if (await n(), !t.res.headers.has("Cache-Control")) {
 				let n = t.res.headers.has("set-cookie") ? "private" : "public";
-				W(t), t.res.headers.set("Cache-Control", `${n}, max-age=${e.ttl_seconds}`);
+				G(t), t.res.headers.set("Cache-Control", `${n}, max-age=${e.ttl_seconds}`);
 			}
 		};
 	}
-}), ar = I({
+}), lr = L({
 	type: "forwarded_headers",
 	optionsSchema: e.object({
 		client_ip_header: e.string().default("cf-connecting-ip"),
@@ -2812,40 +2859,40 @@ var nr = I({
 	build(e) {
 		return async (t, n) => {
 			let r = new URL(t.req.url);
-			U(t, (n) => {
+			W(t, (n) => {
 				n.set("x-forwarded-host", r.host), n.set("x-forwarded-proto", r.protocol.replace(":", "")), e.set_x_original_url && n.set("x-original-url", t.req.url);
 				let i = n.get(e.client_ip_header), a = (n.get("x-forwarded-for") ?? "").split(",").map((e) => e.trim()).filter(Boolean), o = i ?? a[a.length - 1] ?? "127.0.0.1", s = a.length === 0 || a[a.length - 1] !== o, c = a.length ? s ? `${a.join(", ")}, ${o}` : a.join(", ") : o;
 				n.set("x-forwarded-for", c), e.set_x_real_ip && n.set("x-real-ip", o);
 			}), await n();
 		};
 	}
-}), or = e.object({ upstream_host: e.string().optional() });
-function sr(e) {
+}), ur = e.object({ upstream_host: e.string().optional() });
+function dr(e) {
 	return e.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function cr(e) {
+function fr(e) {
 	if (typeof e.getSetCookie == "function") return e.getSetCookie();
 	let t = [];
 	return e.forEach((e, n) => {
 		n.toLowerCase() === "set-cookie" && t.push(e);
 	}), t;
 }
-var lr = I({
+var pr = L({
 	type: "rewrite_cookies",
-	optionsSchema: or,
+	optionsSchema: ur,
 	build(e) {
 		return async (t, n) => {
 			await n();
 			let r = new URL(t.req.url).hostname, i = e.upstream_host ?? t.get("__proxy_upstream_host__");
 			if (!i) return;
-			let a = cr(t.res.headers);
+			let a = fr(t.res.headers);
 			if (a.length === 0) return;
-			let o = sr(i), s = RegExp(`(?:^|;\\s*)Domain=\\.?${o}(?=;|$)`, "i");
-			W(t), t.res.headers.delete("set-cookie");
+			let o = dr(i), s = RegExp(`(?:^|;\\s*)Domain=\\.?${o}(?=;|$)`, "i");
+			G(t), t.res.headers.delete("set-cookie");
 			for (let e of a) t.res.headers.append("set-cookie", e.replace(s, `Domain=${r}`));
 		};
 	}
-}), ur = I({
+}), mr = L({
 	type: "rewrite_location",
 	optionsSchema: e.object({ upstream_origin: e.string().optional() }),
 	build(e) {
@@ -2865,17 +2912,17 @@ var lr = I({
 			}
 			if (o.origin !== a) return;
 			let s = new URL(t.req.url), c = `${`${s.protocol}//${s.host}`}${o.pathname}${o.search}${o.hash}`;
-			W(t), t.res.headers.set("location", c);
+			G(t), t.res.headers.set("location", c);
 		};
 	}
-}), dr = class extends Error {
+}), hr = class extends Error {
 	ms;
 	constructor(e, t) {
 		super(`${t ?? "Operation"} timed out after ${e}ms`), this.name = "TimeoutError", this.ms = e;
 	}
 };
 function K(e) {
-	return e instanceof dr ? !0 : e instanceof Error ? e.name === "AbortError" || e.name === "TimeoutError" : !1;
+	return e instanceof hr ? !0 : e instanceof Error ? e.name === "AbortError" || e.name === "TimeoutError" : !1;
 }
 function q(e, t) {
 	let n = new AbortController(), r = setTimeout(() => n.abort(), e);
@@ -2883,7 +2930,7 @@ function q(e, t) {
 }
 function J(e, t, n) {
 	let r, i = new Promise((e, i) => {
-		r = setTimeout(() => i(new dr(t, n)), t);
+		r = setTimeout(() => i(new hr(t, n)), t);
 	});
 	return Promise.race([e, i]).finally(() => {
 		r && clearTimeout(r);
@@ -2891,7 +2938,7 @@ function J(e, t, n) {
 }
 //#endregion
 //#region src/data-plane/handlers/http.ts
-var fr = /* @__PURE__ */ new Set([
+var gr = new Set([
 	"connection",
 	"keep-alive",
 	"proxy-authenticate",
@@ -2900,24 +2947,24 @@ var fr = /* @__PURE__ */ new Set([
 	"trailers",
 	"transfer-encoding",
 	"upgrade"
-]), pr = 3e4, mr = e.object({
+]), _r = 3e4, vr = e.object({
 	upstream_url: e.string(),
 	preserve_host: e.boolean().default(!1),
 	timeout_ms: e.number().int().positive().optional()
 });
-function hr(e, t) {
+function yr(e, t) {
 	return e === "" || e === "/" ? t : `${e.endsWith("/") ? e.slice(0, -1) : e}${t.startsWith("/") ? t : `/${t}`}`;
 }
-function gr(e) {
+function br(e) {
 	return e !== "GET" && e !== "HEAD";
 }
-function _r(e, t) {
+function xr(e, t) {
 	let n = new URL(t.url), r = new URL(e.upstream_url);
-	r.pathname = hr(r.pathname, n.pathname), r.search = n.search;
+	r.pathname = yr(r.pathname, n.pathname), r.search = n.search;
 	let i = new Headers(t.headers);
-	for (let e of fr) i.delete(e);
+	for (let e of gr) i.delete(e);
 	e.preserve_host || i.set("host", r.host), i.has("x-forwarded-host") || i.set("x-forwarded-host", n.host), i.has("x-forwarded-proto") || i.set("x-forwarded-proto", n.protocol.replace(":", ""));
-	let a = gr(t.method) ? t.body : void 0, o = {
+	let a = br(t.method) ? t.body : void 0, o = {
 		method: t.method,
 		headers: i,
 		body: a,
@@ -2928,13 +2975,13 @@ function _r(e, t) {
 		init: o
 	};
 }
-var vr = I({
+var Sr = L({
 	type: "http",
-	optionsSchema: mr,
+	optionsSchema: vr,
 	build(e) {
-		let t = e.timeout_ms ?? pr;
+		let t = e.timeout_ms ?? _r;
 		return async (n) => {
-			let { target: r, init: i } = _r(e, H(n));
+			let { target: r, init: i } = xr(e, U(n));
 			n.set("__proxy_upstream_host__", r.hostname), n.set("__proxy_upstream_origin__", `${r.protocol}//${r.host}`);
 			try {
 				return await q(t, (e) => fetch(r.toString(), {
@@ -2946,24 +2993,24 @@ var vr = I({
 			}
 		};
 	}
-}), yr = 3e4, br = e.object({
+}), Cr = 3e4, wr = e.object({
 	binding: e.string(),
 	upstream_url: e.string().optional(),
 	preserve_host: e.boolean().default(!0),
 	timeout_ms: e.number().int().positive().optional()
 });
-function xr(e) {
+function Tr(e) {
 	return typeof e == "object" && !!e && typeof e.fetch == "function";
 }
-var Sr = I({
+var Er = L({
 	type: "service_binding",
-	optionsSchema: br,
+	optionsSchema: wr,
 	build(e, t) {
 		let n = t.bindings[e.binding];
-		if (!xr(n)) throw Error(`Service binding "${e.binding}" is not configured or is not a Fetcher`);
-		let r = e.upstream_url ?? `https://${e.binding}.binding.invalid/`, i = e.timeout_ms ?? yr;
+		if (!Tr(n)) throw Error(`Service binding "${e.binding}" is not configured or is not a Fetcher`);
+		let r = e.upstream_url ?? `https://${e.binding}.binding.invalid/`, i = e.timeout_ms ?? Cr;
 		return async (t) => {
-			let a = H(t), { target: o, init: s } = _r({
+			let a = U(t), { target: o, init: s } = xr({
 				upstream_url: r,
 				preserve_host: e.preserve_host
 			}, a);
@@ -2978,34 +3025,34 @@ var Sr = I({
 			}
 		};
 	}
-}), Cr = 3e4, wr = e.object({
+}), Dr = 3e4, Or = e.object({
 	binding: e.string(),
 	script_name: e.string(),
 	cpu_ms: e.number().int().positive().optional(),
 	subrequests: e.number().int().positive().optional(),
 	timeout_ms: e.number().int().positive().optional()
 });
-function Tr(e) {
+function kr(e) {
 	return typeof e == "object" && !!e && typeof e.get == "function";
 }
 var Y = /\{(tenant_id|custom_domain_id|domain|host)\}/g;
-function Er(e) {
+function Ar(e) {
 	return Y.lastIndex = 0, Y.test(e);
 }
-var Dr = I({
+var jr = L({
 	type: "dispatch_namespace",
-	optionsSchema: wr,
+	optionsSchema: Or,
 	build(e, t) {
 		let n = t.bindings[e.binding];
-		if (!Tr(n)) throw Error(`Dispatch namespace binding "${e.binding}" is not configured or does not expose .get()`);
-		let r = Er(e.script_name), i = e.timeout_ms ?? Cr, a = e.cpu_ms || e.subrequests ? { limits: {
+		if (!kr(n)) throw Error(`Dispatch namespace binding "${e.binding}" is not configured or does not expose .get()`);
+		let r = Ar(e.script_name), i = e.timeout_ms ?? Dr, a = e.cpu_ms || e.subrequests ? { limits: {
 			...e.cpu_ms ? { cpuMs: e.cpu_ms } : {},
 			...e.subrequests ? { subrequests: e.subrequests } : {}
 		} } : void 0;
 		return async (t) => {
 			let o = e.script_name;
 			if (r) {
-				let n = Yn(t), r = Xn(t), i = Zn(t), a = t.req.header("host") ?? t.req.header("x-forwarded-host") ?? "";
+				let n = Qn(t), r = $n(t), i = er(t), a = t.req.header("host") ?? t.req.header("x-forwarded-host") ?? "";
 				if (o = o.replace(Y, (e, t) => {
 					switch (t) {
 						case "tenant_id": return n ?? "";
@@ -3016,7 +3063,7 @@ var Dr = I({
 					}
 				}), o.includes("{") || o === "") return t.text(`dispatch_namespace: could not resolve script name from template "${e.script_name}"`, 500);
 			}
-			let s = H(t);
+			let s = U(t);
 			try {
 				let e = n.get(o, void 0, a);
 				return await q(i, async (t) => {
@@ -3028,7 +3075,7 @@ var Dr = I({
 			}
 		};
 	}
-}), Or = I({
+}), Mr = L({
 	type: "redirect",
 	optionsSchema: e.object({
 		upstream_url: e.string().refine((e) => {
@@ -3057,7 +3104,7 @@ var Dr = I({
 			});
 		};
 	}
-}), kr = I({
+}), X = L({
 	type: "static",
 	optionsSchema: e.object({
 		status: e.number().int().default(200),
@@ -3077,15 +3124,15 @@ var Dr = I({
 });
 //#endregion
 //#region src/data-plane/handlers/index.ts
-function Ar(e) {
-	e.add($n).add(nr).add(rr).add(ir).add(ar).add(lr).add(ur).add(vr).add(Sr).add(Dr).add(Or).add(kr);
+function Nr(e) {
+	e.add(rr).add(or).add(sr).add(cr).add(lr).add(pr).add(mr).add(Sr).add(Er).add(jr).add(Mr).add(X);
 }
 //#endregion
 //#region src/data-plane/matcher.ts
-function X(e) {
+function Pr(e) {
 	return [...e].sort((e, t) => e.priority === t.priority ? e.created_at.localeCompare(t.created_at) : e.priority - t.priority);
 }
-function jr(e, t) {
+function Fr(e, t) {
 	let n = e.toLowerCase(), r = t.toLowerCase();
 	if (n === r) return !0;
 	if (n.startsWith("*.")) {
@@ -3094,16 +3141,13 @@ function jr(e, t) {
 	}
 	return !1;
 }
-function Mr(e, t) {
-	return !e || e.length === 0 || e.some((e) => jr(e, t));
+function Ir(e, t) {
+	return !e || e.length === 0 ? !0 : e.some((e) => Fr(e, t));
 }
-function Nr(e) {
+function Lr(e) {
 	let t = (e.headers ? Object.entries(e.headers) : []).map(([e, t]) => [e.toLowerCase(), new RegExp(t)]), n = (e.query ? Object.entries(e.query) : []).map(([e, t]) => [e, new RegExp(t)]), r = e.hosts;
 	return async (e, i) => {
-		if (r) {
-			let t = e.req.header("host") ?? "";
-			if (!Mr(r, t)) return new Response("No matching route", { status: 404 });
-		}
+		if (r && !Ir(r, e.req.header("host") ?? "")) return new Response("No matching route", { status: 404 });
 		for (let [n, r] of t) {
 			let t = e.req.header(n);
 			if (t === void 0 || !r.test(t)) return new Response("No matching route", { status: 404 });
@@ -3120,7 +3164,7 @@ function Nr(e) {
 }
 //#endregion
 //#region src/data-plane/compile.ts
-var Pr = [
+var Rr = [
 	"GET",
 	"POST",
 	"PUT",
@@ -3132,34 +3176,34 @@ var Pr = [
 function Z(e, n, r, i) {
 	let a = new t();
 	r && a.use("*", async (e, t) => {
-		Jn(e, r), await t();
+		Zn(e, r), await t();
 	});
-	let o = X(e);
+	let o = Pr(e);
 	for (let e of o) {
 		let t = [];
-		t.push(Nr(e.match));
+		t.push(Lr(e.match));
 		for (let r of e.handlers) t.push(n.build(r.type, r.options));
-		let r = e.match.methods?.length ? e.match.methods.map((e) => e.toUpperCase()) : Pr, i = e.match.path || "/*";
+		let r = e.match.methods?.length ? e.match.methods.map((e) => e.toUpperCase()) : Rr, i = e.match.path || "/*";
 		a.on(r, [i], ...t);
 	}
-	return i && i.length > 0 ? a.on(Pr, ["*"], ...i) : a.all("*", (e) => e.text("No matching route", 404)), a.onError((e, t) => {
+	return i && i.length > 0 ? a.on(Rr, ["*"], ...i) : a.all("*", (e) => e.text("No matching route", 404)), a.onError((e, t) => {
 		let n = K(e);
 		return t.text(n ? "Upstream timeout" : "Bad gateway", n ? 504 : 502, { "x-authhero-proxy-error": n ? "handler_timeout" : "handler_failed" });
 	}), a;
 }
 //#endregion
 //#region src/data-plane/router.ts
-var Fr = 1e4;
-function Ir(e) {
-	return e.resolver ? e.resolver : e.cache ? P(e.data, e.cache) : P(e.data, e.cacheTtlMs ?? 3e4);
+var zr = 1e4;
+function Br(e) {
+	return e.resolver ? e.resolver : e.cache ? F(e.data, e.cache) : F(e.data, e.cacheTtlMs ?? 3e4);
 }
-function Lr(e) {
+function Vr(e) {
 	if (e.registry) return e.registry;
-	let t = new F(e.bindings ?? {});
-	return Ar(t), t;
+	let t = new I(e.bindings ?? {});
+	return Nr(t), t;
 }
 function Q(e) {
-	let t = Ir(e), n = Lr(e), r = /* @__PURE__ */ new WeakMap(), i = e.resolveHostTimeoutMs ?? Fr, a = e.defaultHandlers && e.defaultHandlers.length > 0 ? e.defaultHandlers.map((e) => n.build(e.type, e.options)) : void 0, o = a ? Z([], n, void 0, a) : void 0;
+	let t = Br(e), n = Vr(e), r = /* @__PURE__ */ new WeakMap(), i = e.resolveHostTimeoutMs ?? zr, a = e.defaultHandlers && e.defaultHandlers.length > 0 ? e.defaultHandlers.map((e) => n.build(e.type, e.options)) : void 0, o = a ? Z([], n, void 0, a) : void 0;
 	return async (e) => {
 		let s = e.req.header("host") ?? e.req.header("x-forwarded-host");
 		if (!s) return e.text("Missing host", 400);
@@ -3177,13 +3221,13 @@ function Q(e) {
 		}
 	};
 }
-function Rr(e) {
+function Hr(e) {
 	let n = new t();
 	return n.all("*", Q(e)), n;
 }
 //#endregion
 //#region src/app.ts
-function zr(e) {
+function Ur(e) {
 	let n = new t();
 	return n.all("*", Q({
 		data: e.data,
@@ -3201,17 +3245,17 @@ function zr(e) {
 }
 //#endregion
 //#region src/data-plane/cache-api-cache.ts
-var Br = 1e3, Vr = 1e3;
-function Hr(e, t) {
+var Wr = 1e3, Gr = 1e3;
+function Kr(e, t) {
 	return new Request(`https://proxy-cache.internal/${encodeURIComponent(e)}/hosts/${encodeURIComponent(t.toLowerCase())}`, { method: "GET" });
 }
-function Ur() {
+function qr() {
 	return globalThis.caches?.default;
 }
-function Wr(e) {
-	let t = e.cache ?? Ur();
+function Jr(e) {
+	let t = e.cache ?? qr();
 	if (!t) return e.upstream;
-	let n = t, r = e.namespace ?? "authhero-proxy", i = e.cacheTtlSeconds ?? 60, a = e.negativeCacheTtlSeconds ?? 10, o = e.waitUntil, s = e.cacheReadTimeoutMs ?? Br, c = e.cacheWriteTimeoutMs ?? Vr;
+	let n = t, r = e.namespace ?? "authhero-proxy", i = e.cacheTtlSeconds ?? 60, a = e.negativeCacheTtlSeconds ?? 10, o = e.waitUntil, s = e.cacheReadTimeoutMs ?? Wr, c = e.cacheWriteTimeoutMs ?? Gr;
 	async function l(e) {
 		try {
 			return await J(Promise.resolve(n.match(e)), s, "cache.match");
@@ -3220,7 +3264,7 @@ function Wr(e) {
 		}
 	}
 	return { async resolveHost(t) {
-		let s = Hr(r, t), u = await l(s);
+		let s = Kr(r, t), u = await l(s);
 		if (u) try {
 			return (await u.json()).value;
 		} catch {}
@@ -3231,14 +3275,14 @@ function Wr(e) {
 		return o ? o(m) : await m, d;
 	} };
 }
-function Gr(e, t) {
-	return Hr(e, t);
+function Yr(e, t) {
+	return Kr(e, t);
 }
 //#endregion
 //#region src/data-plane/cache-adapter-cache.ts
-var Kr = 1e3, qr = 1e3;
-function Jr(e) {
-	let { upstream: t, cache: n, freshTtlMs: r, staleTtlMs: i = 0, staleIfErrorTtlMs: a = 0, negativeTtlMs: o = r, keyPrefix: s = "authhero-proxy-host", waitUntil: c, cacheReadTimeoutMs: l = Kr, cacheWriteTimeoutMs: u = qr } = e, d = /* @__PURE__ */ new Map();
+var Xr = 1e3, Zr = 1e3;
+function Qr(e) {
+	let { upstream: t, cache: n, freshTtlMs: r, staleTtlMs: i = 0, staleIfErrorTtlMs: a = 0, negativeTtlMs: o = r, keyPrefix: s = "authhero-proxy-host", waitUntil: c, cacheReadTimeoutMs: l = Xr, cacheWriteTimeoutMs: u = Zr } = e, d = /* @__PURE__ */ new Map();
 	function f(e) {
 		return `${s}:${e.toLowerCase()}`;
 	}
@@ -3291,7 +3335,7 @@ function Jr(e) {
 		}
 	} };
 }
-function Yr(e, t) {
+function $r(e, t) {
 	return `${e}:${t.toLowerCase()}`;
 }
 //#endregion
@@ -3299,7 +3343,7 @@ function Yr(e, t) {
 function $() {
 	throw Error("Static proxy adapter is read-only; configure routes at init time");
 }
-function Xr(e, t, n, r, i, a) {
+function ei(e, t, n, r, i, a) {
 	return {
 		id: e.id ?? `${n}:${t}`,
 		tenant_id: r,
@@ -3314,10 +3358,10 @@ function Xr(e, t, n, r, i, a) {
 		updated_at: e.updated_at ?? a
 	};
 }
-function Zr(e) {
+function ti(e) {
 	let t = (/* @__PURE__ */ new Date()).toISOString(), n = e.defaultTenantId ?? "static", r = /* @__PURE__ */ new Map();
 	for (let [i, a] of Object.entries(e.hosts)) {
-		let e = i.toLowerCase(), o = Array.isArray(a) ? { routes: a } : a, s = o.tenant_id ?? n, c = o.custom_domain_id ?? e, l = o.routes.map((n, r) => Xr(n, r, e, s, c, t)).sort((e, t) => e.priority - t.priority);
+		let e = i.toLowerCase(), o = Array.isArray(a) ? { routes: a } : a, s = o.tenant_id ?? n, c = o.custom_domain_id ?? e, l = o.routes.map((n, r) => ei(n, r, e, s, c, t)).sort((e, t) => e.priority - t.priority);
 		r.set(e, {
 			tenant_id: s,
 			custom_domain_id: c,
@@ -3361,7 +3405,7 @@ function Zr(e) {
 		}
 	};
 }
-function Qr(e, t = {}) {
+function ni(e, t = {}) {
 	return {
 		priority: t.priority,
 		match: { path: t.path ?? "/*" },
@@ -3376,10 +3420,10 @@ function Qr(e, t = {}) {
 }
 //#endregion
 //#region src/constants.ts
-var $r = "proxy:resolve_host";
+var ri = "proxy:resolve_host";
 //#endregion
 //#region src/http-adapter/index.ts
-function ei() {
+function ii() {
 	let e = () => {
 		throw Error("HTTP proxy adapter does not expose write access to proxy_routes; mutate via the control-plane management API");
 	};
@@ -3401,7 +3445,7 @@ function ei() {
 		}
 	};
 }
-function ti(e) {
+function ai(e) {
 	let t = e.fetch ?? fetch, n = e.baseUrl.replace(/\/+$/, ""), r = e.resolveHostPath ?? "/api/v2/proxy/control-plane/hosts/", i = e.audience ?? `${n}/api/v2/`, a = e.scope ?? "proxy:resolve_host", o = e.tokenRefreshSkewSeconds ?? 60, s = e.timeoutMs ?? 2500;
 	function c(e) {
 		let t = new AbortController(), n = setTimeout(() => t.abort(), s);
@@ -3434,7 +3478,7 @@ function ti(e) {
 		}), u);
 	}
 	return {
-		proxyRoutes: ei(),
+		proxyRoutes: ii(),
 		async resolveHost(e) {
 			let i = await f(), a = `${n}${r}${encodeURIComponent(e.toLowerCase())}`, o = await c((e) => t(a, {
 				headers: { authorization: `Bearer ${i}` },
@@ -3448,7 +3492,7 @@ function ti(e) {
 }
 //#endregion
 //#region src/http-adapter/service-binding-fetch.ts
-function ni(e) {
+function oi(e) {
 	return (t, n) => {
 		let r = t instanceof Request && n === void 0 ? t : new Request(t, n);
 		return e.fetch(r);
@@ -3456,11 +3500,11 @@ function ni(e) {
 }
 //#endregion
 //#region src/kv-adapter/index.ts
-var ri = "authhero-proxy-host:";
-function ii(e, t) {
+var si = "authhero-proxy-host:";
+function ci(e, t) {
 	return `${e}${t.toLowerCase()}`;
 }
-function ai() {
+function li() {
 	let e = () => {
 		throw Error("KV proxy adapter does not expose write access to proxy_routes; mutate via the control-plane management API");
 	};
@@ -3482,15 +3526,15 @@ function ai() {
 		}
 	};
 }
-function oi(e) {
-	let { kv: t, keyPrefix: n = ri, timeoutMs: r } = e;
+function ui(e) {
+	let { kv: t, keyPrefix: n = si, timeoutMs: r } = e;
 	return {
-		proxyRoutes: ai(),
+		proxyRoutes: li(),
 		async resolveHost(e) {
-			let i = ii(n, e), a = t.get(i, "json");
+			let i = ci(n, e), a = t.get(i, "json");
 			return (r && r > 0 ? await J(a, r, "kv.get") : await a) ?? null;
 		}
 	};
 }
 //#endregion
-export { ri as DEFAULT_KV_HOST_KEY_PREFIX, F as HandlerRegistry, $r as PROXY_RESOLVE_HOST_SCOPE, nr as basicAuthHandler, Yr as buildCacheAdapterKey, Gr as buildCacheApiKey, ii as buildKvHostKey, Nr as buildMatchFilter, ir as cacheHandler, Z as compileHostApp, $n as corsHandler, Jr as createCacheAdapterHostCache, Wr as createCacheApiHostCache, ti as createHttpProxyAdapter, P as createInMemoryHostCache, oi as createKvProxyAdapter, zr as createProxyApp, Q as createProxyDataPlaneHandler, Rr as createProxyDataPlaneRouter, ni as createServiceBindingFetch, Zr as createStaticProxyAdapter, I as defineHandler, Dr as dispatchNamespaceHandler, ar as forwardedHeadersHandler, Tn as handlerConfigSchema, rr as headersHandler, vr as httpHandler, Qr as httpRoute, wn as matchSchema, Mr as matchesAnyHost, jr as matchesHost, j as proxyRouteInsertSchema, En as proxyRouteSchema, Dn as proxyRouteUpdateSchema, Or as redirectHandler, Ar as registerBuiltinHandlers, lr as rewriteCookiesHandler, ur as rewriteLocationHandler, Sr as serviceBindingHandler, X as sortRoutes, kr as staticHandler };
+export { si as DEFAULT_KV_HOST_KEY_PREFIX, I as HandlerRegistry, ri as PROXY_RESOLVE_HOST_SCOPE, or as basicAuthHandler, $r as buildCacheAdapterKey, Yr as buildCacheApiKey, ci as buildKvHostKey, Lr as buildMatchFilter, cr as cacheHandler, Z as compileHostApp, rr as corsHandler, Qr as createCacheAdapterHostCache, Jr as createCacheApiHostCache, ai as createHttpProxyAdapter, F as createInMemoryHostCache, ui as createKvProxyAdapter, Ur as createProxyApp, Q as createProxyDataPlaneHandler, Hr as createProxyDataPlaneRouter, oi as createServiceBindingFetch, ti as createStaticProxyAdapter, L as defineHandler, jr as dispatchNamespaceHandler, lr as forwardedHeadersHandler, j as handlerConfigSchema, sr as headersHandler, Sr as httpHandler, ni as httpRoute, wn as matchSchema, Ir as matchesAnyHost, Fr as matchesHost, M as proxyRouteInsertSchema, Tn as proxyRouteSchema, En as proxyRouteUpdateSchema, Mr as redirectHandler, Nr as registerBuiltinHandlers, pr as rewriteCookiesHandler, mr as rewriteLocationHandler, Er as serviceBindingHandler, Pr as sortRoutes, X as staticHandler };