authhero 0.264.0 → 0.265.0

package/dist/authhero.mjs

@@ -107,7 +107,7 @@ const E1 = [" ", ",", "?", "!", ";"], C1 = new A1(20), N1 = (t, e, n) => {
     i = a;
   }
   return i;
-}, io = (t) => t?.replace("_", "-"), j1 = {
+}, oo = (t) => t?.replace("_", "-"), j1 = {
   type: "logger",
   log(t) {
     this.output("log", t);
@@ -535,12 +535,12 @@ class Gp {
     this.options = e, this.supportedLngs = this.options.supportedLngs || !1, this.logger = qt.create("languageUtils");
   }
   getScriptPartFromCode(e) {
-    if (e = io(e), !e || e.indexOf("-") < 0) return null;
+    if (e = oo(e), !e || e.indexOf("-") < 0) return null;
     const n = e.split("-");
     return n.length === 2 || (n.pop(), n[n.length - 1].toLowerCase() === "x") ? null : this.formatLanguageCode(n.join("-"));
   }
   getLanguagePartFromCode(e) {
-    if (e = io(e), !e || e.indexOf("-") < 0) return e;
+    if (e = oo(e), !e || e.indexOf("-") < 0) return e;
     const n = e.split("-");
     return this.formatLanguageCode(n[0]);
   }
@@ -618,7 +618,7 @@ class O1 {
     this.pluralRulesCache = {};
   }
   getRule(e, n = {}) {
-    const r = io(e === "dev" ? "en" : e), i = n.ordinal ? "ordinal" : "cardinal", s = JSON.stringify({
+    const r = oo(e === "dev" ? "en" : e), i = n.ordinal ? "ordinal" : "cardinal", s = JSON.stringify({
       cleanedCode: r,
       type: i
     });
@@ -804,9 +804,9 @@ const T1 = (t) => {
     });
     const a = r + JSON.stringify(s);
     let c = e[a];
-    return c || (c = t(io(r), i), e[a] = c), c(n);
+    return c || (c = t(oo(r), i), e[a] = c), c(n);
   };
-}, R1 = (t) => (e, n, r) => t(io(n), r)(e);
+}, R1 = (t) => (e, n, r) => t(oo(n), r)(e);
 class B1 {
   constructor(e = {}) {
     this.logger = qt.create("formatter"), this.options = e, this.init(e);
@@ -1076,13 +1076,13 @@ const Yp = () => ({
     skipOnVariables: !0
   },
   cacheInBuiltFormats: !0
-}), Qp = (t) => (Q(t.ns) && (t.ns = [t.ns]), Q(t.fallbackLng) && (t.fallbackLng = [t.fallbackLng]), Q(t.fallbackNS) && (t.fallbackNS = [t.fallbackNS]), t.supportedLngs?.indexOf?.("cimode") < 0 && (t.supportedLngs = t.supportedLngs.concat(["cimode"])), typeof t.initImmediate == "boolean" && (t.initAsync = t.initImmediate), t), os = () => {
+}), Qp = (t) => (Q(t.ns) && (t.ns = [t.ns]), Q(t.fallbackLng) && (t.fallbackLng = [t.fallbackLng]), Q(t.fallbackNS) && (t.fallbackNS = [t.fallbackNS]), t.supportedLngs?.indexOf?.("cimode") < 0 && (t.supportedLngs = t.supportedLngs.concat(["cimode"])), typeof t.initImmediate == "boolean" && (t.initAsync = t.initImmediate), t), ss = () => {
 }, D1 = (t) => {
   Object.getOwnPropertyNames(Object.getPrototypeOf(t)).forEach((n) => {
     typeof t[n] == "function" && (t[n] = t[n].bind(t));
   });
 };
-class oo extends ba {
+class so extends ba {
   constructor(e = {}, n) {
     if (super(), this.options = Qp(e), this.services = {}, this.logger = qt, this.modules = {
       external: []
@@ -1126,7 +1126,7 @@ class oo extends ba {
         _.init && _.init(this);
       });
     }
-    if (this.format = this.options.interpolation.format, n || (n = os), this.options.fallbackLng && !this.services.languageDetector && !this.options.lng) {
+    if (this.format = this.options.interpolation.format, n || (n = ss), this.options.fallbackLng && !this.services.languageDetector && !this.options.lng) {
       const d = this.services.languageUtils.getFallbackCodes(this.options.fallbackLng);
       d.length > 0 && d[0] !== "dev" && (this.options.lng = d[0]);
     }
@@ -1144,7 +1144,7 @@ class oo extends ba {
     };
     return this.options.resources || !this.options.initAsync ? l() : setTimeout(l, 0), c;
   }
-  loadResources(e, n = os) {
+  loadResources(e, n = ss) {
     let r = n;
     const i = Q(e) ? e : this.language;
     if (typeof e == "function" && (r = e), !this.options.resources || this.options.partialBundledLanguages) {
@@ -1163,7 +1163,7 @@ class oo extends ba {
   }
   reloadResources(e, n, r) {
     const i = bi();
-    return typeof e == "function" && (r = e, e = void 0), typeof n == "function" && (r = n, n = void 0), e || (e = this.languages), n || (n = this.options.ns), r || (r = os), this.services.backendConnector.reload(e, n, (s) => {
+    return typeof e == "function" && (r = e, e = void 0), typeof n == "function" && (r = n, n = void 0), e || (e = this.languages), n || (n = this.options.ns), r || (r = ss), this.services.backendConnector.reload(e, n, (s) => {
       i.resolve(), r(s);
     }), i;
   }
@@ -1275,16 +1275,16 @@ class oo extends ba {
     return e.toLowerCase().indexOf("-latn") > 1 ? "ltr" : n.indexOf(r.getLanguagePartFromCode(e)) > -1 || e.toLowerCase().indexOf("-arab") > 1 ? "rtl" : "ltr";
   }
   static createInstance(e = {}, n) {
-    return new oo(e, n);
+    return new so(e, n);
   }
-  cloneInstance(e = {}, n = os) {
+  cloneInstance(e = {}, n = ss) {
     const r = e.forkResourceStore;
     r && delete e.forkResourceStore;
     const i = {
       ...this.options,
       ...e,
       isClone: !0
-    }, s = new oo(i);
+    }, s = new so(i);
     if ((e.debug !== void 0 || e.prefix !== void 0) && (s.logger = s.logger.clone(e)), ["store", "services", "language"].forEach((c) => {
       s[c] = this[c];
     }), s.services = {
@@ -1315,8 +1315,8 @@ class oo extends ba {
     };
   }
 }
-const y = oo.createInstance();
-y.createInstance = oo.createInstance;
+const y = so.createInstance();
+y.createInstance = so.createInstance;
 y.createInstance;
 y.dir;
 y.init;
@@ -1637,7 +1637,7 @@ const _l = o.object({
   ...yl.shape,
   created_at: o.string().optional(),
   updated_at: o.string().optional()
-}), AK = o.array(Ir), Oo = o.object({
+}), AK = o.array(Ir), Po = o.object({
   x: o.number(),
   y: o.number()
 });
@@ -1765,7 +1765,7 @@ const Z1 = o.object({
     "STEP"
     /* STEP */
   ),
-  coordinates: Oo,
+  coordinates: Po,
   alias: o.string().optional(),
   config: o.object({
     components: o.array(J1),
@@ -1777,7 +1777,7 @@ const Z1 = o.object({
     "FLOW"
     /* FLOW */
   ),
-  coordinates: Oo,
+  coordinates: Po,
   alias: o.string().optional(),
   config: o.object({
     flow_id: o.string(),
@@ -1786,17 +1786,17 @@ const Z1 = o.object({
 }), Q1 = o.object({
   id: o.string(),
   type: o.string(),
-  coordinates: Oo
+  coordinates: Po
 }).passthrough(), ew = o.union([
   Z1,
   Y1,
   Q1
 ]), tw = o.object({
   next_node: o.string(),
-  coordinates: Oo
+  coordinates: Po
 }).passthrough(), nw = o.object({
   resume_flow: o.boolean().optional(),
-  coordinates: Oo
+  coordinates: Po
 }).passthrough(), rw = o.object({
   id: o.string(),
   name: o.string(),
@@ -1883,7 +1883,7 @@ const Ns = o.object({
   id: o.string(),
   created_at: o.string().transform((t) => t === null ? "" : t),
   updated_at: o.string().transform((t) => t === null ? "" : t)
-}).extend(wl.shape), fs = o.object({
+}).extend(wl.shape), hs = o.object({
   id: o.string().optional(),
   // Basic settings
   audience: o.string(),
@@ -2006,7 +2006,7 @@ const Ns = o.object({
 }), Fn = o.object({
   created_at: o.string().nullable().transform((t) => t ?? ""),
   updated_at: o.string().nullable().transform((t) => t ?? ""),
-  ...fs.shape,
+  ...hs.shape,
   id: o.string()
 });
 o.object({
@@ -2275,7 +2275,7 @@ const iw = o.enum([
   ttl_sec: o.number().int().max(2592e3).default(604800).optional(),
   roles: o.array(o.string()).default([]).optional(),
   send_invitation_email: o.boolean().default(!0).optional()
-}), hs = o.object({
+}), gs = o.object({
   id: o.string(),
   organization_id: o.string().max(50),
   created_at: o.string().datetime(),
@@ -3272,7 +3272,7 @@ function fu(t, e) {
     );
   t < 4 ? t = 4 : t > 31 && (t = 31);
   var n = [];
-  return n.push("$2b$"), t < 10 && n.push("0"), n.push(t.toString()), n.push("$"), n.push(js(Gw(so), so)), n.join("");
+  return n.push("$2b$"), t < 10 && n.push("0"), n.push(t.toString()), n.push("$"), n.push(js(Gw(ao), ao)), n.join("");
 }
 function I0(t, e, n) {
   if (typeof e == "function" && (n = e, e = void 0), typeof t == "function" && (n = t, t = void 0), typeof t > "u") t = hu;
@@ -3570,7 +3570,7 @@ function B0(t, e) {
   for (n = 0; n < i; n++) g.push(s[n].charCodeAt(0));
   return g;
 }
-var so = 16, hu = 10, tb = 16, nb = 100, of = [
+var ao = 16, hu = 10, tb = 16, nb = 100, of = [
   608135816,
   2242054355,
   320440878,
@@ -4622,7 +4622,7 @@ var so = 16, hu = 10, tb = 16, nb = 100, of = [
   1668446532,
   1869963892
 ];
-function ao(t, e, n, r) {
+function co(t, e, n, r) {
   var i, s = t[e], a = t[e + 1];
   return s ^= n[0], i = r[s >>> 24], i += r[256 | s >> 16 & 255], i ^= r[512 | s >> 8 & 255], i += r[768 | s & 255], a ^= i ^ n[1], i = r[a >>> 24], i += r[256 | a >> 16 & 255], i ^= r[512 | a >> 8 & 255], i += r[768 | a & 255], s ^= i ^ n[2], i = r[s >>> 24], i += r[256 | s >> 16 & 255], i ^= r[512 | s >> 8 & 255], i += r[768 | s & 255], a ^= i ^ n[3], i = r[a >>> 24], i += r[256 | a >> 16 & 255], i ^= r[512 | a >> 8 & 255], i += r[768 | a & 255], s ^= i ^ n[4], i = r[s >>> 24], i += r[256 | s >> 16 & 255], i ^= r[512 | s >> 8 & 255], i += r[768 | s & 255], a ^= i ^ n[5], i = r[a >>> 24], i += r[256 | a >> 16 & 255], i ^= r[512 | a >> 8 & 255], i += r[768 | a & 255], s ^= i ^ n[6], i = r[s >>> 24], i += r[256 | s >> 16 & 255], i ^= r[512 | s >> 8 & 255], i += r[768 | s & 255], a ^= i ^ n[7], i = r[a >>> 24], i += r[256 | a >> 16 & 255], i ^= r[512 | a >> 8 & 255], i += r[768 | a & 255], s ^= i ^ n[8], i = r[s >>> 24], i += r[256 | s >> 16 & 255], i ^= r[512 | s >> 8 & 255], i += r[768 | s & 255], a ^= i ^ n[9], i = r[a >>> 24], i += r[256 | a >> 16 & 255], i ^= r[512 | a >> 8 & 255], i += r[768 | a & 255], s ^= i ^ n[10], i = r[s >>> 24], i += r[256 | s >> 16 & 255], i ^= r[512 | s >> 8 & 255], i += r[768 | s & 255], a ^= i ^ n[11], i = r[a >>> 24], i += r[256 | a >> 16 & 255], i ^= r[512 | a >> 8 & 255], i += r[768 | a & 255], s ^= i ^ n[12], i = r[s >>> 24], i += r[256 | s >> 16 & 255], i ^= r[512 | s >> 8 & 255], i += r[768 | s & 255], a ^= i ^ n[13], i = r[a >>> 24], i += r[256 | a >> 16 & 255], i ^= r[512 | a >> 8 & 255], i += r[768 | a & 255], s ^= i ^ n[14], i = r[s >>> 24], i += r[256 | s >> 16 & 255], i ^= r[512 | s >> 8 & 255], i += r[768 | s & 255], a ^= i ^ n[15], i = r[a >>> 24], i += r[256 | a >> 16 & 255], i ^= r[512 | a >> 8 & 255], i += r[768 | a & 255], s ^= i ^ n[16], t[e] = a ^ n[tb + 1], t[e + 1] = s, t;
 }
@@ -4635,17 +4635,17 @@ function af(t, e, n) {
   for (var r = 0, i = [0, 0], s = e.length, a = n.length, c, l = 0; l < s; l++)
     c = Sr(t, r), r = c.offp, e[l] = e[l] ^ c.key;
   for (l = 0; l < s; l += 2)
-    i = ao(i, 0, e, n), e[l] = i[0], e[l + 1] = i[1];
+    i = co(i, 0, e, n), e[l] = i[0], e[l + 1] = i[1];
   for (l = 0; l < a; l += 2)
-    i = ao(i, 0, e, n), n[l] = i[0], n[l + 1] = i[1];
+    i = co(i, 0, e, n), n[l] = i[0], n[l + 1] = i[1];
 }
 function rb(t, e, n, r) {
   for (var i = 0, s = [0, 0], a = n.length, c = r.length, l, d = 0; d < a; d++)
     l = Sr(e, i), i = l.offp, n[d] = n[d] ^ l.key;
   for (i = 0, d = 0; d < a; d += 2)
-    l = Sr(t, i), i = l.offp, s[0] ^= l.key, l = Sr(t, i), i = l.offp, s[1] ^= l.key, s = ao(s, 0, n, r), n[d] = s[0], n[d + 1] = s[1];
+    l = Sr(t, i), i = l.offp, s[0] ^= l.key, l = Sr(t, i), i = l.offp, s[1] ^= l.key, s = co(s, 0, n, r), n[d] = s[0], n[d + 1] = s[1];
   for (d = 0; d < c; d += 2)
-    l = Sr(t, i), i = l.offp, s[0] ^= l.key, l = Sr(t, i), i = l.offp, s[1] ^= l.key, s = ao(s, 0, n, r), r[d] = s[0], r[d + 1] = s[1];
+    l = Sr(t, i), i = l.offp, s[0] ^= l.key, l = Sr(t, i), i = l.offp, s[1] ^= l.key, s = co(s, 0, n, r), r[d] = s[0], r[d + 1] = s[1];
 }
 function cf(t, e, n, r, i) {
   var s = L0.slice(), a = s.length, c;
@@ -4654,9 +4654,9 @@ function cf(t, e, n, r, i) {
       xt(r.bind(this, c));
       return;
     } else throw c;
-  if (e.length !== so)
+  if (e.length !== ao)
     if (c = Error(
-      "Illegal salt length: " + e.length + " != " + so
+      "Illegal salt length: " + e.length + " != " + ao
     ), r) {
       xt(r.bind(this, c));
       return;
@@ -4670,7 +4670,7 @@ function cf(t, e, n, r, i) {
         ;
     else {
       for (p = 0; p < 64; p++)
-        for (f = 0; f < a >> 1; f++) ao(s, f << 1, l, d);
+        for (f = 0; f < a >> 1; f++) co(s, f << 1, l, d);
       var x = [];
       for (p = 0; p < a; p++)
         x.push((s[p] >> 24 & 255) >>> 0), x.push((s[p] >> 16 & 255) >>> 0), x.push((s[p] >> 8 & 255) >>> 0), x.push((s[p] & 255) >>> 0);
@@ -4715,7 +4715,7 @@ function Cl(t, e, n, r) {
     } else throw i;
   var c = parseInt(e.substring(a, a + 1), 10) * 10, l = parseInt(e.substring(a + 1, a + 2), 10), d = c + l, p = e.substring(a + 3, a + 25);
   t += s >= "a" ? "\0" : "";
-  var f = eb(t), g = B0(p, so);
+  var f = eb(t), g = B0(p, ao);
   function _(w) {
     var x = [];
     return x.push("$2"), s >= "a" && x.push(s), x.push("$"), d < 10 && x.push("0"), x.push(d.toString()), x.push("$"), x.push(js(g, g.length)), x.push(js(w, L0.length * 4 - 1)), x.join("");
@@ -4772,7 +4772,7 @@ const lb = 24;
 function ka() {
   return U0("0123456789abcdef", lb)();
 }
-function ss(t) {
+function as(t) {
   if (!t.includes("|"))
     return console.error("Invalid user_id format"), t;
   const [, e] = t.split("|");
@@ -5173,7 +5173,7 @@ async function wb(t, e) {
     includePadding: !1
   });
 }
-const as = 300, Sa = 720 * 60 * 60, Yn = 1440 * 60, bb = "auth-token", gs = 1800 * 1e3, jl = 10080 * 60 * 1e3, vb = 300, $b = 300, kb = 1800 * 1e3, xb = 1800 * 1e3, Sb = 1440 * 60 * 1e3;
+const cs = 300, Sa = 720 * 60 * 60, Yn = 1440 * 60, bb = "auth-token", ms = 1800 * 1e3, jl = 10080 * 60 * 1e3, vb = 300, $b = 300, kb = 1800 * 1e3, xb = 1800 * 1e3, Sb = 1440 * 60 * 1e3;
 function q0(t, e, n) {
   const r = [];
   return r.push([encodeURIComponent(t), encodeURIComponent(e)]), n?.domain !== void 0 && r.push(["Domain", n.domain]), n?.expires !== void 0 && r.push(["Expires", n.expires.toUTCString()]), n?.httpOnly && r.push(["HttpOnly"]), n?.maxAge !== void 0 && r.push(["Max-Age", n.maxAge.toString()]), n?.path !== void 0 && r.push(["Path", n.path]), n?.sameSite === "lax" && r.push(["SameSite", "Lax"]), n?.sameSite === "none" && r.push(["SameSite", "None"]), n?.sameSite === "strict" && r.push(["SameSite", "Strict"]), n?.secure && r.push(["Secure"]), r.map((i) => i.join("=")).join("; ");
@@ -5221,7 +5221,7 @@ function Os(t, e, n) {
     domain: n ? F0(n) : void 0
   });
 }
-class z extends v {
+class D extends v {
   constructor(e, n) {
     super(e, {
       message: JSON.stringify(n),
@@ -6276,27 +6276,27 @@ function Qb(t, e, n) {
 }
 async function ev(t, e, n, r, i) {
   if (!n.redirect_uri)
-    throw new z(400, {
+    throw new D(400, {
       message: "Missing redirect_uri in authParams"
     });
   if (!r.email)
-    throw new z(400, {
+    throw new D(400, {
       message: "Missing email in user"
     });
   const { signingKeys: s } = await t.env.data.keys.list({
     q: "type:saml_encryption"
   }), [a] = s;
   if (!a)
-    throw new z(500, {
+    throw new D(500, {
       message: "No signing key found"
     });
   if (!e.addons?.samlp)
-    throw new z(400, {
+    throw new D(400, {
       message: `SAML Addon is not enabled for client ${e.client_id}`
     });
   const { recipient: c, audience: l } = e.addons.samlp, d = n.state || "";
   if (!c || !d || !r || !n.state)
-    throw new z(400, {
+    throw new D(400, {
       message: "Missing recipient or inResponseTo"
     });
   const p = JSON.parse(n.state), f = new URL(n.redirect_uri), g = t.env.samlSigner || (t.env.SAML_SIGN_URL ? new Yb(t.env.SAML_SIGN_URL) : void 0), _ = await Zb(
@@ -6442,7 +6442,7 @@ async function Ps(t, e) {
   })).userOrganizations.some(
     (X) => X.organization_id === a
   ))
-    throw new z(403, {
+    throw new D(403, {
       error: "access_denied",
       error_description: "User is not a member of the specified organization"
     });
@@ -6527,7 +6527,7 @@ async function Aa(t, e) {
     (O) => !O.revoked_at || new Date(O.revoked_at) > /* @__PURE__ */ new Date()
   ), f = p[p.length - 1];
   if (!f?.pkcs7)
-    throw new z(500, { message: "No signing key available" });
+    throw new D(500, { message: "No signing key available" });
   const g = yb(f.pkcs7), _ = t.var.custom_domain ? `https://${t.var.custom_domain}/` : t.env.ISSUER, w = {
     // TODO: consider if the dafault should be removed
     aud: n.audience || "default",
@@ -6590,7 +6590,7 @@ async function Aa(t, e) {
       },
       access: {
         deny: (O) => {
-          throw new z(400, {
+          throw new D(400, {
             message: `Access denied: ${O}`
           });
         }
@@ -6713,7 +6713,7 @@ async function Kt(t, e) {
   const a = n.response_type || Et.CODE, c = n.response_mode || sn.QUERY;
   if (i) {
     if (!e.loginSession)
-      throw new z(500, {
+      throw new D(500, {
         message: "Login session not found for ticket auth."
       });
     const _ = _b(), w = me(12), x = await t.env.data.codes.create(r.tenant.id, {
@@ -6744,7 +6744,7 @@ async function Kt(t, e) {
     });
   } else if (!d) {
     if (!e.loginSession)
-      throw new z(500, {
+      throw new D(500, {
         message: "Login session not found for creating a new session."
       });
     d = (await Z0(t, {
@@ -6791,7 +6791,7 @@ async function Kt(t, e) {
     return p;
   if (c === sn.WEB_MESSAGE) {
     if (!n.redirect_uri)
-      throw new z(400, {
+      throw new D(400, {
         message: "Redirect URI not allowed for WEB_MESSAGE response mode."
       });
     const _ = new Headers();
@@ -6818,7 +6818,7 @@ async function Kt(t, e) {
     );
   }
   if (!n.redirect_uri)
-    throw new z(400, {
+    throw new D(400, {
       message: "Redirect uri not found for this response mode."
     });
   const f = new Headers();
@@ -6843,7 +6843,7 @@ async function Kt(t, e) {
       ...n.scope && { scope: n.scope }
     }).toString();
   else
-    throw new z(500, {
+    throw new D(500, {
       message: "Invalid token response for implicit flow."
     });
   return f.set("location", g.toString()), new Response("Redirecting", {
@@ -6864,7 +6864,7 @@ async function nv(t, e) {
   )).userOrganizations.some(
     (d) => d.organization_id === e.organization.id
   ))
-    throw new z(403, {
+    throw new D(403, {
       error: "access_denied",
       error_description: "User is not a member of the specified organization"
     });
@@ -6884,7 +6884,7 @@ async function nv(t, e) {
       else {
         const l = n?.user_id || e.user?.user_id;
         if (!l)
-          throw new z(400, {
+          throw new D(400, {
             error: "invalid_request",
             error_description: "User ID is required for user-based grants"
           });
@@ -6936,7 +6936,7 @@ async function nv(t, e) {
   }
   if (r === Et.CODE) {
     if (!n || !e.loginSession)
-      throw new z(500, {
+      throw new D(500, {
         message: "User and loginSession is required for code flow"
       });
     return await J0(t, {
@@ -7161,7 +7161,7 @@ function fv(t, e) {
     if (t.var.client_id) {
       const a = await e.legacyClients.get(t.var.client_id);
       if (!a)
-        throw new z(400, {
+        throw new D(400, {
           message: "Client not found"
         });
       r.email && await gv(t, a, e, r.email);
@@ -7226,7 +7226,7 @@ function hv(t, e) {
       return e.users.update(n, r, i);
     const s = await e.users.get(n, r);
     if (!s)
-      throw new z(404, {
+      throw new D(404, {
         message: "User not found"
       });
     const a = {
@@ -7253,7 +7253,7 @@ function hv(t, e) {
               }
             },
             cancel: () => {
-              throw new z(400, {
+              throw new D(400, {
                 message: "User update cancelled by pre-update hook"
               });
             },
@@ -7261,7 +7261,7 @@ function hv(t, e) {
           }
         );
       } catch {
-        throw new z(400, {
+        throw new D(400, {
           message: "Pre user update hook failed"
         });
       }
@@ -7383,7 +7383,7 @@ async function gv(t, e, n, r) {
       type: ie.FAILED_SIGNUP,
       description: i.reason || "Signup not allowed"
     });
-    throw se(t, n.logs.create(e.tenant.id, s)), new z(400, {
+    throw se(t, n.logs.create(e.tenant.id, s)), new D(400, {
       message: i.reason || "Signups are disabled for this client"
     });
   }
@@ -7414,7 +7414,7 @@ function mv(t, e) {
           },
           {
             cancel: () => {
-              throw new z(400, {
+              throw new D(400, {
                 message: "User deletion cancelled by pre-deletion hook"
               });
             },
@@ -7428,7 +7428,7 @@ function mv(t, e) {
           type: ie.FAILED_HOOK,
           description: `Pre user deletion hook failed: ${c instanceof Error ? c.message : String(c)}`
         });
-        throw se(t, e.logs.create(n, l)), new z(400, {
+        throw se(t, e.logs.create(n, l)), new D(400, {
           message: "Pre user deletion hook failed"
         });
       }
@@ -7439,7 +7439,7 @@ function mv(t, e) {
         type: ie.FAILED_HOOK,
         description: `Pre user deletion webhook failed: ${c instanceof Error ? c.message : String(c)}`
       });
-      throw se(t, e.logs.create(n, l)), new z(400, {
+      throw se(t, e.logs.create(n, l)), new D(400, {
         message: "Pre user deletion webhook failed"
       });
     }
@@ -7494,7 +7494,7 @@ function mv(t, e) {
     return a;
   };
 }
-function Po(t, e) {
+function To(t, e) {
   const n = e;
   return {
     ...e,
@@ -7739,7 +7739,7 @@ async function em(t, e, n, r, i, s) {
   return r;
 }
 function yv(t) {
-  return Po(t, t.env.data);
+  return To(t, t.env.data);
 }
 async function mu(t, e, n) {
   return (await t.list(e, {
@@ -7790,7 +7790,7 @@ async function _u({
     throw new Error("Primary account not found");
   return a;
 }
-async function co({
+async function lo({
   userAdapter: t,
   tenant_id: e,
   username: n,
@@ -7815,7 +7815,7 @@ async function Na(t, e) {
     profileData: l = {},
     ip: d = ""
   } = e;
-  let p = await co({
+  let p = await lo({
     userAdapter: t.env.data.users,
     tenant_id: e.client.tenant.id,
     username: n,
@@ -8074,7 +8074,7 @@ const wf = ut.extend({
       provider: c,
       connection: l,
       password: d
-    } = e, p = e.user_id, f = p ? ss(p) : ka(), g = `${e.provider}|${f}`;
+    } = e, p = e.user_id, f = p ? as(p) : ka(), g = `${e.provider}|${f}`;
     try {
       const _ = {
         email: n,
@@ -8116,7 +8116,7 @@ const wf = ut.extend({
           {
             connection: w.connection,
             provider: w.provider,
-            user_id: ss(w.user_id),
+            user_id: as(w.user_id),
             isSocial: w.is_social
           }
         ]
@@ -8214,7 +8214,7 @@ const wf = ut.extend({
         if (a === "Username-Password-Authentication")
           _ = {
             provider: p.provider,
-            user_id: ss(d)
+            user_id: as(d)
           };
         else
           throw new v(400, {
@@ -8322,7 +8322,7 @@ const wf = ut.extend({
     }), a = [i, ...s.users].map((c) => ({
       connection: c.connection,
       provider: c.provider,
-      user_id: ss(c.user_id),
+      user_id: as(c.user_id),
       isSocial: c.is_social
     }));
     return t.json(a, { status: 201 });
@@ -9071,13 +9071,13 @@ function kv() {
         var E, B, Z;
         {
           var Ae = $.toString;
-          if (is(Ae)) {
+          if (os(Ae)) {
             var B = Ae.call($);
             if (!Te(B))
               return B;
           }
           var E = $.valueOf;
-          if (is(E)) {
+          if (os(E)) {
             var B = E.call($);
             if (!Te(B))
               return B;
@@ -9098,7 +9098,7 @@ function kv() {
       function Pp($) {
         return Array.isArray ? Array.isArray($) : $ instanceof Object ? $ instanceof Array : Object.prototype.toString.call($) === "[object Array]";
       }
-      function is($) {
+      function os($) {
         return typeof $ == "function";
       }
       function Tp($) {
@@ -9120,14 +9120,14 @@ function kv() {
       function Rp($, S) {
         var E = $[S];
         if (E != null) {
-          if (!is(E))
+          if (!os(E))
             throw new TypeError();
           return E;
         }
       }
       function Bp($) {
         var S = Rp($, c);
-        if (!is(S))
+        if (!os(S))
           throw new TypeError();
         var E = S.call($);
         if (!Te(E))
@@ -9982,7 +9982,7 @@ class ja {
     return yu(this.items);
   }
 }
-const vi = [new Uint8Array([1])], xf = "0123456789", qc = "name", Sf = "valueHexView", Iv = "isHexOnly", Ov = "idBlock", Pv = "tagClass", Tv = "tagNumber", Rv = "isConstructed", Bv = "fromBER", Lv = "toBER", Uv = "local", ot = "", Rt = new ArrayBuffer(0), Ia = new Uint8Array(0), lo = "EndOfContent", rm = "OCTET STRING", im = "BIT STRING";
+const vi = [new Uint8Array([1])], xf = "0123456789", qc = "name", Sf = "valueHexView", Iv = "isHexOnly", Ov = "idBlock", Pv = "tagClass", Tv = "tagNumber", Rv = "isConstructed", Bv = "fromBER", Lv = "toBER", Uv = "local", ot = "", Rt = new ArrayBuffer(0), Ia = new Uint8Array(0), uo = "EndOfContent", rm = "OCTET STRING", im = "BIT STRING";
 function Wt(t) {
   var e;
   return e = class extends t {
@@ -10228,7 +10228,7 @@ class sm extends mr {
   }
 }
 sm.NAME = "lengthBlock";
-const M = {};
+const z = {};
 class Fe extends mr {
   constructor({ name: e = ot, optional: n = !1, primitiveSchema: r, ...i } = {}, s) {
     super(i), this.name = e, this.optional = n, r && (this.primitiveSchema = r), this.idBlock = new om(i), this.lenBlock = new sm(i), this.valueBlock = s ? new s(i) : new nt(i);
@@ -10281,7 +10281,7 @@ class Fe extends mr {
 Fe.NAME = "BaseBlock";
 function am(t) {
   var e;
-  if (t instanceof M.Constructed)
+  if (t instanceof z.Constructed)
     for (const n of t.valueBlock.value)
       am(n) && (t.lenBlock.isIndefiniteForm = !0);
   return !!(!((e = t.lenBlock) === null || e === void 0) && e.isIndefiniteForm);
@@ -10312,14 +10312,14 @@ class cm extends Wt(nt) {
 }
 cm.NAME = "PrimitiveValueBlock";
 var lm;
-class To extends Fe {
+class Ro extends Fe {
   constructor(e = {}) {
     super(e, cm), this.idBlock.isConstructed = !1;
   }
 }
-lm = To;
-M.Primitive = lm;
-To.NAME = "PRIMITIVE";
+lm = Ro;
+z.Primitive = lm;
+Ro.NAME = "PRIMITIVE";
 function Dv(t, e) {
   if (t instanceof e)
     return t;
@@ -10371,37 +10371,37 @@ function si(t, e = 0, n = t.length) {
               offset: -1,
               result: i
             };
-          l = M.EndOfContent;
+          l = z.EndOfContent;
           break;
         case 1:
-          l = M.Boolean;
+          l = z.Boolean;
           break;
         case 2:
-          l = M.Integer;
+          l = z.Integer;
           break;
         case 3:
-          l = M.BitString;
+          l = z.BitString;
           break;
         case 4:
-          l = M.OctetString;
+          l = z.OctetString;
           break;
         case 5:
-          l = M.Null;
+          l = z.Null;
           break;
         case 6:
-          l = M.ObjectIdentifier;
+          l = z.ObjectIdentifier;
           break;
         case 10:
-          l = M.Enumerated;
+          l = z.Enumerated;
           break;
         case 12:
-          l = M.Utf8String;
+          l = z.Utf8String;
           break;
         case 13:
-          l = M.RelativeObjectIdentifier;
+          l = z.RelativeObjectIdentifier;
           break;
         case 14:
-          l = M.TIME;
+          l = z.TIME;
           break;
         case 15:
           return i.error = "[UNIVERSAL 15] is reserved by ASN.1 standard", {
@@ -10409,64 +10409,64 @@ function si(t, e = 0, n = t.length) {
             result: i
           };
         case 16:
-          l = M.Sequence;
+          l = z.Sequence;
           break;
         case 17:
-          l = M.Set;
+          l = z.Set;
           break;
         case 18:
-          l = M.NumericString;
+          l = z.NumericString;
           break;
         case 19:
-          l = M.PrintableString;
+          l = z.PrintableString;
           break;
         case 20:
-          l = M.TeletexString;
+          l = z.TeletexString;
           break;
         case 21:
-          l = M.VideotexString;
+          l = z.VideotexString;
           break;
         case 22:
-          l = M.IA5String;
+          l = z.IA5String;
           break;
         case 23:
-          l = M.UTCTime;
+          l = z.UTCTime;
           break;
         case 24:
-          l = M.GeneralizedTime;
+          l = z.GeneralizedTime;
           break;
         case 25:
-          l = M.GraphicString;
+          l = z.GraphicString;
           break;
         case 26:
-          l = M.VisibleString;
+          l = z.VisibleString;
           break;
         case 27:
-          l = M.GeneralString;
+          l = z.GeneralString;
           break;
         case 28:
-          l = M.UniversalString;
+          l = z.UniversalString;
           break;
         case 29:
-          l = M.CharacterString;
+          l = z.CharacterString;
           break;
         case 30:
-          l = M.BmpString;
+          l = z.BmpString;
           break;
         case 31:
-          l = M.DATE;
+          l = z.DATE;
           break;
         case 32:
-          l = M.TimeOfDay;
+          l = z.TimeOfDay;
           break;
         case 33:
-          l = M.DateTime;
+          l = z.DateTime;
           break;
         case 34:
-          l = M.Duration;
+          l = z.Duration;
           break;
         default: {
-          const d = i.idBlock.isConstructed ? new M.Constructed() : new M.Primitive();
+          const d = i.idBlock.isConstructed ? new z.Constructed() : new z.Primitive();
           d.idBlock = i.idBlock, d.lenBlock = i.lenBlock, d.warnings = i.warnings, i = d;
         }
       }
@@ -10475,7 +10475,7 @@ function si(t, e = 0, n = t.length) {
     case 3:
     case 4:
     default:
-      l = i.idBlock.isConstructed ? M.Constructed : M.Primitive;
+      l = i.idBlock.isConstructed ? z.Constructed : z.Primitive;
   }
   return i = Dv(i, l), c = i.fromBER(t, e, i.lenBlock.isIndefiniteForm ? n : i.lenBlock.length), i.valueBeforeDecodeView = t.subarray(r, r + i.blockLength), {
     offset: c,
@@ -10510,10 +10510,10 @@ class Nn extends nt {
       const a = si(i, s, r);
       if (a.offset === -1)
         return this.error = a.result.error, this.warnings.concat(a.result.warnings), -1;
-      if (s = a.offset, this.blockLength += a.result.blockLength, r -= a.result.blockLength, this.value.push(a.result), this.isIndefiniteForm && a.result.constructor.NAME === lo)
+      if (s = a.offset, this.blockLength += a.result.blockLength, r -= a.result.blockLength, this.value.push(a.result), this.isIndefiniteForm && a.result.constructor.NAME === uo)
         break;
     }
-    return this.isIndefiniteForm && (this.value[this.value.length - 1].constructor.NAME === lo ? this.value.pop() : this.warnings.push("No EndOfContent block encoded")), s;
+    return this.isIndefiniteForm && (this.value[this.value.length - 1].constructor.NAME === uo ? this.value.pop() : this.warnings.push("No EndOfContent block encoded")), s;
   }
   toBER(e, n) {
     const r = n || new ja();
@@ -10556,7 +10556,7 @@ ${e.join(`
   }
 }
 dm = tt;
-M.Constructed = dm;
+z.Constructed = dm;
 tt.NAME = "CONSTRUCTED";
 class um extends nt {
   fromBER(e, n, r) {
@@ -10574,8 +10574,8 @@ class bu extends Fe {
   }
 }
 pm = bu;
-M.EndOfContent = pm;
-bu.NAME = lo;
+z.EndOfContent = pm;
+bu.NAME = uo;
 var fm;
 class tr extends Fe {
   constructor(e = {}) {
@@ -10597,7 +10597,7 @@ class tr extends Fe {
   }
 }
 fm = tr;
-M.Null = fm;
+z.Null = fm;
 tr.NAME = "NULL";
 class hm extends Wt(nt) {
   get value() {
@@ -10643,7 +10643,7 @@ let Oa = class extends Fe {
   }
 };
 gm = Oa;
-M.Boolean = gm;
+z.Boolean = gm;
 Oa.NAME = "BOOLEAN";
 class mm extends Wt(Nn) {
   constructor({ isConstructed: e = !1, ...n } = {}) {
@@ -10656,7 +10656,7 @@ class mm extends Wt(Nn) {
         return i;
       for (let s = 0; s < this.value.length; s++) {
         const a = this.value[s].constructor.NAME;
-        if (a === lo) {
+        if (a === uo) {
           if (this.isIndefiniteForm)
             break;
           return this.error = "EndOfContent is unexpected, OCTET STRING may consists of OCTET STRINGs only", -1;
@@ -10726,7 +10726,7 @@ let Jn = class extends Fe {
   }
 };
 vu = Jn;
-M.OctetString = vu;
+z.OctetString = vu;
 Jn.NAME = rm;
 class _m extends Wt(Nn) {
   constructor({ unusedBits: e = 0, isConstructed: n = !1, ...r } = {}) {
@@ -10741,7 +10741,7 @@ class _m extends Wt(Nn) {
         return i;
       for (const c of this.value) {
         const l = c.constructor.NAME;
-        if (l === lo) {
+        if (l === uo) {
           if (this.isIndefiniteForm)
             break;
           return this.error = "EndOfContent is unexpected, BIT STRING may consists of BIT STRINGs only", -1;
@@ -10824,7 +10824,7 @@ let Xn = class extends Fe {
   }
 };
 ym = Xn;
-M.BitString = ym;
+z.BitString = ym;
 Xn.NAME = im;
 var wm;
 function zv(t, e) {
@@ -11003,7 +11003,7 @@ class ai extends Fe {
   }
 }
 Zi = ai;
-M.Integer = Zi;
+z.Integer = Zi;
 ai.NAME = "INTEGER";
 var bm;
 class Pa extends ai {
@@ -11012,7 +11012,7 @@ class Pa extends ai {
   }
 }
 bm = Pa;
-M.Enumerated = bm;
+z.Enumerated = bm;
 Pa.NAME = "ENUMERATED";
 class Pl extends Wt(nt) {
   constructor({ valueDec: e = -1, isFirstSid: n = !1, ...r } = {}) {
@@ -11187,7 +11187,7 @@ class Ta extends Fe {
   }
 }
 $m = Ta;
-M.ObjectIdentifier = $m;
+z.ObjectIdentifier = $m;
 Ta.NAME = "OBJECT IDENTIFIER";
 class Tl extends Wt(mr) {
   constructor({ valueDec: e = 0, ...n } = {}) {
@@ -11320,7 +11320,7 @@ class ku extends Fe {
   }
 }
 xm = ku;
-M.RelativeObjectIdentifier = xm;
+z.RelativeObjectIdentifier = xm;
 ku.NAME = "RelativeObjectIdentifier";
 var Sm;
 class Ct extends tt {
@@ -11329,7 +11329,7 @@ class Ct extends tt {
   }
 }
 Sm = Ct;
-M.Sequence = Sm;
+z.Sequence = Sm;
 Ct.NAME = "SEQUENCE";
 var Am;
 let Ht = class extends tt {
@@ -11338,7 +11338,7 @@ let Ht = class extends tt {
   }
 };
 Am = Ht;
-M.Set = Am;
+z.Set = Am;
 Ht.NAME = "SET";
 class Em extends Wt(nt) {
   constructor({ ...e } = {}) {
@@ -11391,7 +11391,7 @@ class _n extends Nm {
   }
 }
 jm = _n;
-M.Utf8String = jm;
+z.Utf8String = jm;
 _n.NAME = "UTF8String";
 class Im extends pt {
   fromBuffer(e) {
@@ -11409,7 +11409,7 @@ class Ra extends Im {
   }
 }
 Om = Ra;
-M.BmpString = Om;
+z.BmpString = Om;
 Ra.NAME = "BMPString";
 class Pm extends pt {
   fromBuffer(e) {
@@ -11439,7 +11439,7 @@ class Ba extends Pm {
   }
 }
 Tm = Ba;
-M.UniversalString = Tm;
+z.UniversalString = Tm;
 Ba.NAME = "UniversalString";
 var Rm;
 class La extends pt {
@@ -11448,7 +11448,7 @@ class La extends pt {
   }
 }
 Rm = La;
-M.NumericString = Rm;
+z.NumericString = Rm;
 La.NAME = "NumericString";
 var Bm;
 class Ua extends pt {
@@ -11457,7 +11457,7 @@ class Ua extends pt {
   }
 }
 Bm = Ua;
-M.PrintableString = Bm;
+z.PrintableString = Bm;
 Ua.NAME = "PrintableString";
 var Lm;
 class Da extends pt {
@@ -11466,7 +11466,7 @@ class Da extends pt {
   }
 }
 Lm = Da;
-M.TeletexString = Lm;
+z.TeletexString = Lm;
 Da.NAME = "TeletexString";
 var Um;
 class Ma extends pt {
@@ -11475,7 +11475,7 @@ class Ma extends pt {
   }
 }
 Um = Ma;
-M.VideotexString = Um;
+z.VideotexString = Um;
 Ma.NAME = "VideotexString";
 var Dm;
 class za extends pt {
@@ -11484,7 +11484,7 @@ class za extends pt {
   }
 }
 Dm = za;
-M.IA5String = Dm;
+z.IA5String = Dm;
 za.NAME = "IA5String";
 var Mm;
 class qa extends pt {
@@ -11493,17 +11493,17 @@ class qa extends pt {
   }
 }
 Mm = qa;
-M.GraphicString = Mm;
+z.GraphicString = Mm;
 qa.NAME = "GraphicString";
 var zm;
-class Ro extends pt {
+class Bo extends pt {
   constructor(e = {}) {
     super(e), this.idBlock.tagClass = 1, this.idBlock.tagNumber = 26;
   }
 }
-zm = Ro;
-M.VisibleString = zm;
-Ro.NAME = "VisibleString";
+zm = Bo;
+z.VisibleString = zm;
+Bo.NAME = "VisibleString";
 var qm;
 class Fa extends pt {
   constructor(e = {}) {
@@ -11511,7 +11511,7 @@ class Fa extends pt {
   }
 }
 qm = Fa;
-M.GeneralString = qm;
+z.GeneralString = qm;
 Fa.NAME = "GeneralString";
 var Fm;
 class Ha extends pt {
@@ -11520,10 +11520,10 @@ class Ha extends pt {
   }
 }
 Fm = Ha;
-M.CharacterString = Fm;
+z.CharacterString = Fm;
 Ha.NAME = "CharacterString";
 var Hm;
-class Bo extends Ro {
+class Lo extends Bo {
   constructor({ value: e, valueDate: n, ...r } = {}) {
     if (super(r), this.year = 0, this.month = 0, this.day = 0, this.hour = 0, this.minute = 0, this.second = 0, e) {
       this.fromString(e), this.valueBlock.valueHexView = new Uint8Array(e.length);
@@ -11578,11 +11578,11 @@ class Bo extends Ro {
     };
   }
 }
-Hm = Bo;
-M.UTCTime = Hm;
-Bo.NAME = "UTCTime";
+Hm = Lo;
+z.UTCTime = Hm;
+Lo.NAME = "UTCTime";
 var Vm;
-class Va extends Bo {
+class Va extends Lo {
   constructor(e = {}) {
     var n;
     super(e), (n = this.millisecond) !== null && n !== void 0 || (this.millisecond = 0), this.idBlock.tagClass = 1, this.idBlock.tagNumber = 24;
@@ -11704,7 +11704,7 @@ class Va extends Bo {
   }
 }
 Vm = Va;
-M.GeneralizedTime = Vm;
+z.GeneralizedTime = Vm;
 Va.NAME = "GeneralizedTime";
 var Km;
 class xu extends _n {
@@ -11713,7 +11713,7 @@ class xu extends _n {
   }
 }
 Km = xu;
-M.DATE = Km;
+z.DATE = Km;
 xu.NAME = "DATE";
 var Gm;
 class Su extends _n {
@@ -11722,7 +11722,7 @@ class Su extends _n {
   }
 }
 Gm = Su;
-M.TimeOfDay = Gm;
+z.TimeOfDay = Gm;
 Su.NAME = "TimeOfDay";
 var Wm;
 class Au extends _n {
@@ -11731,7 +11731,7 @@ class Au extends _n {
   }
 }
 Wm = Au;
-M.DateTime = Wm;
+z.DateTime = Wm;
 Au.NAME = "DateTime";
 var Jm;
 class Eu extends _n {
@@ -11740,7 +11740,7 @@ class Eu extends _n {
   }
 }
 Jm = Eu;
-M.Duration = Jm;
+z.Duration = Jm;
 Eu.NAME = "Duration";
 var Xm;
 class Cu extends _n {
@@ -11749,7 +11749,7 @@ class Cu extends _n {
   }
 }
 Xm = Cu;
-M.TIME = Xm;
+z.TIME = Xm;
 Cu.NAME = "TIME";
 class nr {
   constructor({ name: e = ot, optional: n = !1 } = {}) {
@@ -11905,7 +11905,7 @@ function An(t, e, n) {
           result: t
         };
   }
-  if (n.name && (n.name = n.name.replace(/^\s+|\s+$/g, ot), n.name && (t[n.name] = e)), n instanceof M.Constructed) {
+  if (n.name && (n.name = n.name.replace(/^\s+|\s+$/g, ot), n.name && (t[n.name] = e)), n instanceof z.Constructed) {
     let s = 0, a = {
       verified: !1,
       result: { error: "Unknown error" }
@@ -12017,7 +12017,7 @@ const Zm = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   NumericString: La,
   ObjectIdentifier: Ta,
   OctetString: Jn,
-  Primitive: To,
+  Primitive: Ro,
   PrintableString: Ua,
   RawData: Fv,
   RelativeObjectIdentifier: ku,
@@ -12027,13 +12027,13 @@ const Zm = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   TIME: Cu,
   TeletexString: Da,
   TimeOfDay: Su,
-  UTCTime: Bo,
+  UTCTime: Lo,
   UniversalString: Ba,
   Utf8String: _n,
   ValueBlock: nt,
   VideotexString: Ma,
   ViewWriter: ja,
-  VisibleString: Ro,
+  VisibleString: Bo,
   compareSchema: An,
   fromBER: Br,
   verifySchema: Hv
@@ -12149,9 +12149,9 @@ function bt(t) {
     toASN: (e) => new t({ value: e })
   };
 }
-const Ym = bt(_n), Yv = bt(Ra), Qv = bt(Ba), e2 = bt(La), t2 = bt(Ua), n2 = bt(Da), r2 = bt(Ma), i2 = bt(za), o2 = bt(qa), s2 = bt(Ro), a2 = bt(Fa), c2 = bt(Ha), l2 = {
+const Ym = bt(_n), Yv = bt(Ra), Qv = bt(Ba), e2 = bt(La), t2 = bt(Ua), n2 = bt(Da), r2 = bt(Ma), i2 = bt(za), o2 = bt(qa), s2 = bt(Bo), a2 = bt(Fa), c2 = bt(Ha), l2 = {
   fromASN: (t) => t.toDate(),
-  toASN: (t) => new Bo({ valueDate: t })
+  toASN: (t) => new Lo({ valueDate: t })
 }, d2 = {
   fromASN: (t) => t.toDate(),
   toASN: (t) => new Va({ valueDate: t })
@@ -12275,7 +12275,7 @@ class f2 {
       if (a.context !== null && a.context !== void 0)
         if (a.implicit)
           if (typeof a.type == "number" || on(a.type)) {
-            const p = a.repeated ? tt : To;
+            const p = a.repeated ? tt : Ro;
             i.push(new p({ name: c, optional: d, idBlock: { tagClass: 3, tagNumber: a.context } }));
           } else {
             this.cache(a.type);
@@ -12606,7 +12606,7 @@ class ju {
           if (c.implicit)
             if (!c.repeated && (typeof c.type == "number" || on(c.type))) {
               const p = {};
-              p.valueHex = d instanceof tr ? d.valueBeforeDecodeView : d.valueBlock.toBER(), i.push(new To({
+              p.valueHex = d instanceof tr ? d.valueBeforeDecodeView : d.valueBlock.toBER(), i.push(new Ro({
                 optional: c.optional,
                 idBlock: {
                   tagClass: 3,
@@ -12905,17 +12905,17 @@ const g2 = {
   fromASN: (t) => Ef.toString(Bs.fromASN(t)),
   toASN: (t) => Bs.toASN(Ef.fromString(t))
 };
-class uo {
+class po {
   constructor(e = {}) {
     this.typeId = "", this.value = new ArrayBuffer(0), Object.assign(this, e);
   }
 }
 h([
   m({ type: b.ObjectIdentifier })
-], uo.prototype, "typeId", void 0);
+], po.prototype, "typeId", void 0);
 h([
   m({ type: b.Any, context: 0 })
-], uo.prototype, "value", void 0);
+], po.prototype, "value", void 0);
 class Iu {
   constructor(e = {}) {
     this.partyName = new He(), Object.assign(this, e);
@@ -12933,7 +12933,7 @@ let ne = class {
   }
 };
 h([
-  m({ type: uo, context: 0, implicit: !0 })
+  m({ type: po, context: 0, implicit: !0 })
 ], ne.prototype, "otherName", void 0);
 h([
   m({ type: b.IA5String, context: 1, implicit: !0 })
@@ -12970,24 +12970,24 @@ ne = h([
 const Ou = "1.3.6.1.5.5.7", m2 = `${Ou}.1`, ci = `${Ou}.3`, Wa = `${Ou}.48`, Cf = `${Wa}.1`, Nf = `${Wa}.2`, jf = `${Wa}.3`, If = `${Wa}.5`, yn = "2.5.29";
 var Dl;
 const Ml = `${m2}.1`;
-class Lo {
+class Uo {
   constructor(e = {}) {
     this.accessMethod = "", this.accessLocation = new ne(), Object.assign(this, e);
   }
 }
 h([
   m({ type: b.ObjectIdentifier })
-], Lo.prototype, "accessMethod", void 0);
+], Uo.prototype, "accessMethod", void 0);
 h([
   m({ type: ne })
-], Lo.prototype, "accessLocation", void 0);
+], Uo.prototype, "accessLocation", void 0);
 let Tr = Dl = class extends pe {
   constructor(e) {
     super(e), Object.setPrototypeOf(this, Dl.prototype);
   }
 };
 Tr = Dl = h([
-  P({ type: C.Sequence, itemType: Lo })
+  P({ type: C.Sequence, itemType: Uo })
 ], Tr);
 const zl = `${yn}.35`;
 class Pu extends le {
@@ -13483,34 +13483,34 @@ let Uf = id = class extends pe {
   }
 };
 Uf = id = h([
-  P({ type: C.Sequence, itemType: Lo })
+  P({ type: C.Sequence, itemType: Uo })
 ], Uf);
-class D {
+class M {
   constructor(e = {}) {
     this.algorithm = "", Object.assign(this, e);
   }
   isEqual(e) {
-    return e instanceof D && e.algorithm == this.algorithm && (e.parameters && this.parameters && tm(e.parameters, this.parameters) || e.parameters === this.parameters);
+    return e instanceof M && e.algorithm == this.algorithm && (e.parameters && this.parameters && tm(e.parameters, this.parameters) || e.parameters === this.parameters);
   }
 }
 h([
   m({
     type: b.ObjectIdentifier
   })
-], D.prototype, "algorithm", void 0);
+], M.prototype, "algorithm", void 0);
 h([
   m({
     type: b.Any,
     optional: !0
   })
-], D.prototype, "parameters", void 0);
+], M.prototype, "parameters", void 0);
 class St {
   constructor(e = {}) {
-    this.algorithm = new D(), this.subjectPublicKey = new ArrayBuffer(0), Object.assign(this, e);
+    this.algorithm = new M(), this.subjectPublicKey = new ArrayBuffer(0), Object.assign(this, e);
   }
 }
 h([
-  m({ type: D })
+  m({ type: M })
 ], St.prototype, "algorithm", void 0);
 h([
   m({ type: b.BitString })
@@ -13544,17 +13544,17 @@ h([
 ze = h([
   P({ type: C.Choice })
 ], ze);
-class Uo {
+class Do {
   constructor(e) {
     this.notBefore = new ze(/* @__PURE__ */ new Date()), this.notAfter = new ze(/* @__PURE__ */ new Date()), e && (this.notBefore = new ze(e.notBefore), this.notAfter = new ze(e.notAfter));
   }
 }
 h([
   m({ type: ze })
-], Uo.prototype, "notBefore", void 0);
+], Do.prototype, "notBefore", void 0);
 h([
   m({ type: ze })
-], Uo.prototype, "notAfter", void 0);
+], Do.prototype, "notAfter", void 0);
 var od;
 let yt = class f_ {
   constructor(e = {}) {
@@ -13588,7 +13588,7 @@ var ir;
 })(ir || (ir = {}));
 class ft {
   constructor(e = {}) {
-    this.version = ir.v1, this.serialNumber = new ArrayBuffer(0), this.signature = new D(), this.issuer = new je(), this.validity = new Uo(), this.subject = new je(), this.subjectPublicKeyInfo = new St(), Object.assign(this, e);
+    this.version = ir.v1, this.serialNumber = new ArrayBuffer(0), this.signature = new M(), this.issuer = new je(), this.validity = new Do(), this.subject = new je(), this.subjectPublicKeyInfo = new St(), Object.assign(this, e);
   }
 }
 h([
@@ -13605,13 +13605,13 @@ h([
   })
 ], ft.prototype, "serialNumber", void 0);
 h([
-  m({ type: D })
+  m({ type: M })
 ], ft.prototype, "signature", void 0);
 h([
   m({ type: je })
 ], ft.prototype, "issuer", void 0);
 h([
-  m({ type: Uo })
+  m({ type: Do })
 ], ft.prototype, "validity", void 0);
 h([
   m({ type: je })
@@ -13635,14 +13635,14 @@ h([
 ], ft.prototype, "extensions", void 0);
 class or {
   constructor(e = {}) {
-    this.tbsCertificate = new ft(), this.signatureAlgorithm = new D(), this.signatureValue = new ArrayBuffer(0), Object.assign(this, e);
+    this.tbsCertificate = new ft(), this.signatureAlgorithm = new M(), this.signatureValue = new ArrayBuffer(0), Object.assign(this, e);
   }
 }
 h([
   m({ type: ft, raw: !0 })
 ], or.prototype, "tbsCertificate", void 0);
 h([
-  m({ type: D })
+  m({ type: M })
 ], or.prototype, "signatureAlgorithm", void 0);
 h([
   m({ type: b.BitString })
@@ -13663,14 +13663,14 @@ h([
 ], Za.prototype, "crlEntryExtensions", void 0);
 class wn {
   constructor(e = {}) {
-    this.signature = new D(), this.issuer = new je(), this.thisUpdate = new ze(), Object.assign(this, e);
+    this.signature = new M(), this.issuer = new je(), this.thisUpdate = new ze(), Object.assign(this, e);
   }
 }
 h([
   m({ type: b.Integer, optional: !0 })
 ], wn.prototype, "version", void 0);
 h([
-  m({ type: D })
+  m({ type: M })
 ], wn.prototype, "signature", void 0);
 h([
   m({ type: je })
@@ -13689,14 +13689,14 @@ h([
 ], wn.prototype, "crlExtensions", void 0);
 class Uu {
   constructor(e = {}) {
-    this.tbsCertList = new wn(), this.signatureAlgorithm = new D(), this.signature = new ArrayBuffer(0), Object.assign(this, e);
+    this.tbsCertList = new wn(), this.signatureAlgorithm = new M(), this.signature = new ArrayBuffer(0), Object.assign(this, e);
   }
 }
 h([
   m({ type: wn, raw: !0 })
 ], Uu.prototype, "tbsCertList", void 0);
 h([
-  m({ type: D })
+  m({ type: M })
 ], Uu.prototype, "signatureAlgorithm", void 0);
 h([
   m({ type: b.BitString })
@@ -13730,32 +13730,32 @@ var dn;
 (function(t) {
   t[t.v0 = 0] = "v0", t[t.v1 = 1] = "v1", t[t.v2 = 2] = "v2", t[t.v3 = 3] = "v3", t[t.v4 = 4] = "v4", t[t.v5 = 5] = "v5";
 })(dn || (dn = {}));
-let po = class extends D {
+let fo = class extends M {
 };
-po = h([
+fo = h([
   P({ type: C.Sequence })
-], po);
-let Fs = class extends D {
+], fo);
+let Fs = class extends M {
 };
 Fs = h([
   P({ type: C.Sequence })
 ], Fs);
-let Gt = class extends D {
+let Gt = class extends M {
 };
 Gt = h([
   P({ type: C.Sequence })
 ], Gt);
-let Hs = class extends D {
+let Hs = class extends M {
 };
 Hs = h([
   P({ type: C.Sequence })
 ], Hs);
-let Df = class extends D {
+let Df = class extends M {
 };
 Df = h([
   P({ type: C.Sequence })
 ], Df);
-let sd = class extends D {
+let sd = class extends M {
 };
 sd = h([
   P({ type: C.Sequence })
@@ -13774,7 +13774,7 @@ h([
 var ad;
 class Jt {
   constructor(e = {}) {
-    this.version = dn.v0, this.sid = new Kr(), this.digestAlgorithm = new po(), this.signatureAlgorithm = new Fs(), this.signature = new le(), Object.assign(this, e);
+    this.version = dn.v0, this.sid = new Kr(), this.digestAlgorithm = new fo(), this.signatureAlgorithm = new Fs(), this.signature = new le(), Object.assign(this, e);
   }
 }
 h([
@@ -13784,7 +13784,7 @@ h([
   m({ type: Kr })
 ], Jt.prototype, "sid", void 0);
 h([
-  m({ type: po })
+  m({ type: fo })
 ], Jt.prototype, "digestAlgorithm", void 0);
 h([
   m({
@@ -13883,7 +13883,7 @@ var ld;
 })(ld || (ld = {}));
 class yr {
   constructor(e = {}) {
-    this.digestedObjectType = ld.publicKey, this.digestAlgorithm = new D(), this.objectDigest = new ArrayBuffer(0), Object.assign(this, e);
+    this.digestedObjectType = ld.publicKey, this.digestAlgorithm = new M(), this.objectDigest = new ArrayBuffer(0), Object.assign(this, e);
   }
 }
 h([
@@ -13893,7 +13893,7 @@ h([
   m({ type: b.ObjectIdentifier, optional: !0 })
 ], yr.prototype, "otherObjectTypeID", void 0);
 h([
-  m({ type: D })
+  m({ type: M })
 ], yr.prototype, "digestAlgorithm", void 0);
 h([
   m({ type: b.BitString })
@@ -13937,40 +13937,40 @@ h([
 h([
   m({ type: b.GeneralizedTime })
 ], ec.prototype, "notAfterTime", void 0);
-class Do {
+class Mo {
   constructor(e = {}) {
     Object.assign(this, e);
   }
 }
 h([
   m({ type: _r, implicit: !0, context: 0, optional: !0 })
-], Do.prototype, "baseCertificateID", void 0);
+], Mo.prototype, "baseCertificateID", void 0);
 h([
   m({ type: Ye, implicit: !0, context: 1, optional: !0 })
-], Do.prototype, "entityName", void 0);
+], Mo.prototype, "entityName", void 0);
 h([
   m({ type: yr, implicit: !0, context: 2, optional: !0 })
-], Do.prototype, "objectDigestInfo", void 0);
+], Mo.prototype, "objectDigestInfo", void 0);
 var dd;
 (function(t) {
   t[t.v2 = 1] = "v2";
 })(dd || (dd = {}));
 class Bt {
   constructor(e = {}) {
-    this.version = dd.v2, this.holder = new Do(), this.issuer = new Gr(), this.signature = new D(), this.serialNumber = new ArrayBuffer(0), this.attrCertValidityPeriod = new ec(), this.attributes = [], Object.assign(this, e);
+    this.version = dd.v2, this.holder = new Mo(), this.issuer = new Gr(), this.signature = new M(), this.serialNumber = new ArrayBuffer(0), this.attrCertValidityPeriod = new ec(), this.attributes = [], Object.assign(this, e);
   }
 }
 h([
   m({ type: b.Integer })
 ], Bt.prototype, "version", void 0);
 h([
-  m({ type: Do })
+  m({ type: Mo })
 ], Bt.prototype, "holder", void 0);
 h([
   m({ type: Gr })
 ], Bt.prototype, "issuer", void 0);
 h([
-  m({ type: D })
+  m({ type: M })
 ], Bt.prototype, "signature", void 0);
 h([
   m({ type: b.Integer, converter: ye })
@@ -13989,14 +13989,14 @@ h([
 ], Bt.prototype, "extensions", void 0);
 class tc {
   constructor(e = {}) {
-    this.acinfo = new Bt(), this.signatureAlgorithm = new D(), this.signatureValue = new ArrayBuffer(0), Object.assign(this, e);
+    this.acinfo = new Bt(), this.signatureAlgorithm = new M(), this.signatureValue = new ArrayBuffer(0), Object.assign(this, e);
   }
 }
 h([
   m({ type: Bt })
 ], tc.prototype, "acinfo", void 0);
 h([
-  m({ type: D })
+  m({ type: M })
 ], tc.prototype, "signatureAlgorithm", void 0);
 h([
   m({ type: b.BitString })
@@ -14179,20 +14179,20 @@ h([
 h([
   m({ type: b.Any, context: 0 })
 ], pi.prototype, "content", void 0);
-let fo = class {
+let ho = class {
   constructor(e = {}) {
     Object.assign(this, e);
   }
 };
 h([
   m({ type: le })
-], fo.prototype, "single", void 0);
+], ho.prototype, "single", void 0);
 h([
   m({ type: b.Any })
-], fo.prototype, "any", void 0);
-fo = h([
+], ho.prototype, "any", void 0);
+ho = h([
   P({ type: C.Choice })
-], fo);
+], ho);
 class ic {
   constructor(e = {}) {
     this.eContentType = "", Object.assign(this, e);
@@ -14202,16 +14202,16 @@ h([
   m({ type: b.ObjectIdentifier })
 ], ic.prototype, "eContentType", void 0);
 h([
-  m({ type: fo, context: 0, optional: !0 })
+  m({ type: ho, context: 0, optional: !0 })
 ], ic.prototype, "eContent", void 0);
-let ho = class {
+let go = class {
   constructor(e = {}) {
     Object.assign(this, e);
   }
 };
 h([
   m({ type: le, context: 0, implicit: !0, optional: !0 })
-], ho.prototype, "value", void 0);
+], go.prototype, "value", void 0);
 h([
   m({
     type: le,
@@ -14221,24 +14221,24 @@ h([
     optional: !0,
     repeated: "sequence"
   })
-], ho.prototype, "constructedValue", void 0);
-ho = h([
+], go.prototype, "constructedValue", void 0);
+go = h([
   P({ type: C.Choice })
-], ho);
-class Mo {
+], go);
+class zo {
   constructor(e = {}) {
     this.contentType = "", this.contentEncryptionAlgorithm = new Hs(), Object.assign(this, e);
   }
 }
 h([
   m({ type: b.ObjectIdentifier })
-], Mo.prototype, "contentType", void 0);
+], zo.prototype, "contentType", void 0);
 h([
   m({ type: Hs })
-], Mo.prototype, "contentEncryptionAlgorithm", void 0);
+], zo.prototype, "contentEncryptionAlgorithm", void 0);
 h([
-  m({ type: ho, optional: !0 })
-], Mo.prototype, "encryptedContent", void 0);
+  m({ type: go, optional: !0 })
+], zo.prototype, "encryptedContent", void 0);
 class oc {
   constructor(e = {}) {
     this.keyAttrId = "", Object.assign(this, e);
@@ -14300,11 +14300,11 @@ Js = md = h([
 ], Js);
 class Vu {
   constructor(e = {}) {
-    this.algorithm = new D(), this.publicKey = new ArrayBuffer(0), Object.assign(this, e);
+    this.algorithm = new M(), this.publicKey = new ArrayBuffer(0), Object.assign(this, e);
   }
 }
 h([
-  m({ type: D })
+  m({ type: M })
 ], Vu.prototype, "algorithm", void 0);
 h([
   m({ type: b.BitString })
@@ -14360,71 +14360,71 @@ h([
 Zr = h([
   P({ type: C.Choice })
 ], Zr);
-class zo {
+class qo {
   constructor(e = {}) {
     this.version = dn.v0, this.rid = new Zr(), this.keyEncryptionAlgorithm = new Gt(), this.encryptedKey = new le(), Object.assign(this, e);
   }
 }
 h([
   m({ type: b.Integer })
-], zo.prototype, "version", void 0);
+], qo.prototype, "version", void 0);
 h([
   m({ type: Zr })
-], zo.prototype, "rid", void 0);
+], qo.prototype, "rid", void 0);
 h([
   m({ type: Gt })
-], zo.prototype, "keyEncryptionAlgorithm", void 0);
+], qo.prototype, "keyEncryptionAlgorithm", void 0);
 h([
   m({ type: le })
-], zo.prototype, "encryptedKey", void 0);
-class qo {
+], qo.prototype, "encryptedKey", void 0);
+class Fo {
   constructor(e = {}) {
     this.keyIdentifier = new le(), Object.assign(this, e);
   }
 }
 h([
   m({ type: le })
-], qo.prototype, "keyIdentifier", void 0);
+], Fo.prototype, "keyIdentifier", void 0);
 h([
   m({ type: b.GeneralizedTime, optional: !0 })
-], qo.prototype, "date", void 0);
+], Fo.prototype, "date", void 0);
 h([
   m({ type: oc, optional: !0 })
-], qo.prototype, "other", void 0);
-class Fo {
+], Fo.prototype, "other", void 0);
+class Ho {
   constructor(e = {}) {
-    this.version = dn.v4, this.kekid = new qo(), this.keyEncryptionAlgorithm = new Gt(), this.encryptedKey = new le(), Object.assign(this, e);
+    this.version = dn.v4, this.kekid = new Fo(), this.keyEncryptionAlgorithm = new Gt(), this.encryptedKey = new le(), Object.assign(this, e);
   }
 }
 h([
   m({ type: b.Integer })
-], Fo.prototype, "version", void 0);
+], Ho.prototype, "version", void 0);
 h([
-  m({ type: qo })
-], Fo.prototype, "kekid", void 0);
+  m({ type: Fo })
+], Ho.prototype, "kekid", void 0);
 h([
   m({ type: Gt })
-], Fo.prototype, "keyEncryptionAlgorithm", void 0);
+], Ho.prototype, "keyEncryptionAlgorithm", void 0);
 h([
   m({ type: le })
-], Fo.prototype, "encryptedKey", void 0);
-class Ho {
+], Ho.prototype, "encryptedKey", void 0);
+class Vo {
   constructor(e = {}) {
     this.version = dn.v0, this.keyEncryptionAlgorithm = new Gt(), this.encryptedKey = new le(), Object.assign(this, e);
   }
 }
 h([
   m({ type: b.Integer })
-], Ho.prototype, "version", void 0);
+], Vo.prototype, "version", void 0);
 h([
   m({ type: sd, context: 0, optional: !0 })
-], Ho.prototype, "keyDerivationAlgorithm", void 0);
+], Vo.prototype, "keyDerivationAlgorithm", void 0);
 h([
   m({ type: Gt })
-], Ho.prototype, "keyEncryptionAlgorithm", void 0);
+], Vo.prototype, "keyEncryptionAlgorithm", void 0);
 h([
   m({ type: le })
-], Ho.prototype, "encryptedKey", void 0);
+], Vo.prototype, "encryptedKey", void 0);
 class Ku {
   constructor(e = {}) {
     this.oriType = "", this.oriValue = new ArrayBuffer(0), Object.assign(this, e);
@@ -14442,16 +14442,16 @@ let Tn = class {
   }
 };
 h([
-  m({ type: zo, optional: !0 })
+  m({ type: qo, optional: !0 })
 ], Tn.prototype, "ktri", void 0);
 h([
   m({ type: fi, context: 1, implicit: !0, optional: !0 })
 ], Tn.prototype, "kari", void 0);
 h([
-  m({ type: Fo, context: 2, implicit: !0, optional: !0 })
+  m({ type: Ho, context: 2, implicit: !0, optional: !0 })
 ], Tn.prototype, "kekri", void 0);
 h([
-  m({ type: Ho, context: 3, implicit: !0, optional: !0 })
+  m({ type: Vo, context: 3, implicit: !0, optional: !0 })
 ], Tn.prototype, "pwri", void 0);
 h([
   m({ type: Ku, context: 4, implicit: !0, optional: !0 })
@@ -14519,26 +14519,26 @@ let bd = wd = class extends pe {
 bd = wd = h([
   P({ type: C.Set, itemType: ui })
 ], bd);
-class Vo {
+class Ko {
   constructor(e = {}) {
-    this.version = dn.v0, this.recipientInfos = new Xs(), this.encryptedContentInfo = new Mo(), Object.assign(this, e);
+    this.version = dn.v0, this.recipientInfos = new Xs(), this.encryptedContentInfo = new zo(), Object.assign(this, e);
   }
 }
 h([
   m({ type: b.Integer })
-], Vo.prototype, "version", void 0);
+], Ko.prototype, "version", void 0);
 h([
   m({ type: Gu, context: 0, implicit: !0, optional: !0 })
-], Vo.prototype, "originatorInfo", void 0);
+], Ko.prototype, "originatorInfo", void 0);
 h([
   m({ type: Xs })
-], Vo.prototype, "recipientInfos", void 0);
+], Ko.prototype, "recipientInfos", void 0);
 h([
-  m({ type: Mo })
-], Vo.prototype, "encryptedContentInfo", void 0);
+  m({ type: zo })
+], Ko.prototype, "encryptedContentInfo", void 0);
 h([
   m({ type: bd, context: 1, implicit: !0, optional: !0 })
-], Vo.prototype, "unprotectedAttrs", void 0);
+], Ko.prototype, "unprotectedAttrs", void 0);
 const k2 = "1.2.840.113549.1.7.2";
 var vd;
 let Qs = vd = class extends pe {
@@ -14547,7 +14547,7 @@ let Qs = vd = class extends pe {
   }
 };
 Qs = vd = h([
-  P({ type: C.Set, itemType: po })
+  P({ type: C.Set, itemType: fo })
 ], Qs);
 class hi {
   constructor(e = {}) {
@@ -14572,27 +14572,27 @@ h([
 h([
   m({ type: Vs })
 ], hi.prototype, "signerInfos", void 0);
-const go = "1.2.840.10045.2.1", Wu = "1.2.840.10045.4.1", m_ = "1.2.840.10045.4.3.1", Ju = "1.2.840.10045.4.3.2", Xu = "1.2.840.10045.4.3.3", Zu = "1.2.840.10045.4.3.4", Ff = "1.2.840.10045.3.1.7", Hf = "1.3.132.0.34", Vf = "1.3.132.0.35";
-function Ko(t) {
-  return new D({ algorithm: t });
-}
-const x2 = Ko(Wu);
-Ko(m_);
-const S2 = Ko(Ju), A2 = Ko(Xu), E2 = Ko(Zu);
-let mo = class {
+const mo = "1.2.840.10045.2.1", Wu = "1.2.840.10045.4.1", m_ = "1.2.840.10045.4.3.1", Ju = "1.2.840.10045.4.3.2", Xu = "1.2.840.10045.4.3.3", Zu = "1.2.840.10045.4.3.4", Ff = "1.2.840.10045.3.1.7", Hf = "1.3.132.0.34", Vf = "1.3.132.0.35";
+function Go(t) {
+  return new M({ algorithm: t });
+}
+const x2 = Go(Wu);
+Go(m_);
+const S2 = Go(Ju), A2 = Go(Xu), E2 = Go(Zu);
+let _o = class {
   constructor(e = {}) {
     Object.assign(this, e);
   }
 };
 h([
   m({ type: b.ObjectIdentifier })
-], mo.prototype, "fieldType", void 0);
+], _o.prototype, "fieldType", void 0);
 h([
   m({ type: b.Any })
-], mo.prototype, "parameters", void 0);
-mo = h([
+], _o.prototype, "parameters", void 0);
+_o = h([
   P({ type: C.Sequence })
-], mo);
+], _o);
 class C2 extends le {
 }
 let Yr = class {
@@ -14625,7 +14625,7 @@ h([
   m({ type: b.Integer })
 ], un.prototype, "version", void 0);
 h([
-  m({ type: mo })
+  m({ type: _o })
 ], un.prototype, "fieldID", void 0);
 h([
   m({ type: Yr })
@@ -14689,7 +14689,7 @@ h([
 ], ea.prototype, "s", void 0);
 const at = "1.2.840.113549.1.1", ar = `${at}.1`, N2 = `${at}.7`, j2 = `${at}.9`, to = `${at}.10`, I2 = `${at}.2`, O2 = `${at}.4`, ta = `${at}.5`, P2 = `${at}.14`, kd = `${at}.11`, na = `${at}.12`, ra = `${at}.13`, __ = `${at}.15`, y_ = `${at}.16`, ia = "1.3.14.3.2.26", w_ = "2.16.840.1.101.3.4.2.4", oa = "2.16.840.1.101.3.4.2.1", sa = "2.16.840.1.101.3.4.2.2", aa = "2.16.840.1.101.3.4.2.3", T2 = "2.16.840.1.101.3.4.2.5", R2 = "2.16.840.1.101.3.4.2.6", B2 = "1.2.840.113549.2.2", L2 = "1.2.840.113549.2.5", lc = `${at}.8`;
 function Le(t) {
-  return new D({ algorithm: t, parameters: null });
+  return new M({ algorithm: t, parameters: null });
 }
 Le(B2);
 Le(L2);
@@ -14700,10 +14700,10 @@ Le(sa);
 Le(aa);
 Le(T2);
 Le(R2);
-const b_ = new D({
+const b_ = new M({
   algorithm: lc,
   parameters: T.serialize(cr)
-}), v_ = new D({
+}), v_ = new M({
   algorithm: j2,
   parameters: T.serialize(Bs.toASN(new Uint8Array([
     218,
@@ -14740,38 +14740,38 @@ Le(__);
 Le(y_);
 class dc {
   constructor(e = {}) {
-    this.hashAlgorithm = new D(cr), this.maskGenAlgorithm = new D({
+    this.hashAlgorithm = new M(cr), this.maskGenAlgorithm = new M({
       algorithm: lc,
       parameters: T.serialize(cr)
-    }), this.pSourceAlgorithm = new D(v_), Object.assign(this, e);
+    }), this.pSourceAlgorithm = new M(v_), Object.assign(this, e);
   }
 }
 h([
-  m({ type: D, context: 0, defaultValue: cr })
+  m({ type: M, context: 0, defaultValue: cr })
 ], dc.prototype, "hashAlgorithm", void 0);
 h([
-  m({ type: D, context: 1, defaultValue: b_ })
+  m({ type: M, context: 1, defaultValue: b_ })
 ], dc.prototype, "maskGenAlgorithm", void 0);
 h([
-  m({ type: D, context: 2, defaultValue: v_ })
+  m({ type: M, context: 2, defaultValue: v_ })
 ], dc.prototype, "pSourceAlgorithm", void 0);
-new D({
+new M({
   algorithm: N2,
   parameters: T.serialize(new dc())
 });
 class lr {
   constructor(e = {}) {
-    this.hashAlgorithm = new D(cr), this.maskGenAlgorithm = new D({
+    this.hashAlgorithm = new M(cr), this.maskGenAlgorithm = new M({
       algorithm: lc,
       parameters: T.serialize(cr)
     }), this.saltLength = 20, this.trailerField = 1, Object.assign(this, e);
   }
 }
 h([
-  m({ type: D, context: 0, defaultValue: cr })
+  m({ type: M, context: 0, defaultValue: cr })
 ], lr.prototype, "hashAlgorithm", void 0);
 h([
-  m({ type: D, context: 1, defaultValue: b_ })
+  m({ type: M, context: 1, defaultValue: b_ })
 ], lr.prototype, "maskGenAlgorithm", void 0);
 h([
   m({ type: b.Integer, context: 2, defaultValue: 20 })
@@ -14779,17 +14779,17 @@ h([
 h([
   m({ type: b.Integer, context: 3, defaultValue: 1 })
 ], lr.prototype, "trailerField", void 0);
-new D({
+new M({
   algorithm: to,
   parameters: T.serialize(new lr())
 });
 class uc {
   constructor(e = {}) {
-    this.digestAlgorithm = new D(), this.digest = new le(), Object.assign(this, e);
+    this.digestAlgorithm = new M(), this.digest = new le(), Object.assign(this, e);
   }
 }
 h([
-  m({ type: D })
+  m({ type: M })
 ], uc.prototype, "digestAlgorithm", void 0);
 h([
   m({ type: le })
@@ -14969,7 +14969,7 @@ function D2(t, e) {
     return { value: d[0] ? d[1] : void 0, done: !0 };
   }
 }
-function cs(t) {
+function ls(t) {
   var e = typeof Symbol == "function" && Symbol.iterator, n = e && t[e], r = 0;
   if (n) return n.call(t);
   if (t && typeof t.length == "number") return {
@@ -15060,14 +15060,14 @@ function Kf(t) {
 function F2(t) {
   return typeof t == "function" || t instanceof k_;
 }
-function ms(t) {
+function _s(t) {
   return !!t.useToken;
 }
-function _s(t) {
+function ys(t) {
   return t.useValue != null;
 }
 function H2(t) {
-  return $_(t) || _s(t) || ms(t) || Cd(t);
+  return $_(t) || ys(t) || _s(t) || Cd(t);
 }
 var ep = (function() {
   function t() {
@@ -15098,7 +15098,7 @@ var ep = (function() {
     return t !== null && t.apply(this, arguments) || this;
   }
   return e;
-})(ep), ls = /* @__PURE__ */ (function() {
+})(ep), ds = /* @__PURE__ */ (function() {
   function t() {
     this.scopedResolutions = /* @__PURE__ */ new Map();
   }
@@ -15151,16 +15151,16 @@ var X2 = (function(t) {
   return t.prototype.register = function(e, n, r) {
     r === void 0 && (r = { lifecycle: it.Transient }), this.ensureNotDisposed();
     var i;
-    if (H2(n) ? i = n : i = { useClass: n }, ms(i))
+    if (H2(n) ? i = n : i = { useClass: n }, _s(i))
       for (var s = [e], a = i; a != null; ) {
         var c = a.useToken;
         if (s.includes(c))
           throw new Error("Token registration cycle detected! " + Hn(s, [c]).join(" -> "));
         s.push(c);
         var l = this._registry.get(c);
-        l && ms(l.provider) ? a = l.provider : a = null;
+        l && _s(l.provider) ? a = l.provider : a = null;
       }
-    if ((r.lifecycle === it.Singleton || r.lifecycle == it.ContainerScoped || r.lifecycle == it.ResolutionScoped) && (_s(i) || Cd(i)))
+    if ((r.lifecycle === it.Singleton || r.lifecycle == it.ContainerScoped || r.lifecycle == it.ResolutionScoped) && (ys(i) || Cd(i)))
       throw new Error('Cannot use lifecycle "' + it[r.lifecycle] + '" with ValueProviders or FactoryProviders');
     return this._registry.set(e, { provider: i, options: r }), this;
   }, t.prototype.registerType = function(e, n) {
@@ -15190,7 +15190,7 @@ var X2 = (function(t) {
       useClass: r
     }, { lifecycle: it.Singleton });
   }, t.prototype.resolve = function(e, n, r) {
-    n === void 0 && (n = new ls()), r === void 0 && (r = !1), this.ensureNotDisposed();
+    n === void 0 && (n = new ds()), r === void 0 && (r = !1), this.ensureNotDisposed();
     var i = this.getRegistration(e);
     if (!i && $r(e)) {
       if (r)
@@ -15211,7 +15211,7 @@ var X2 = (function(t) {
     if (this.interceptors.preResolution.has(e)) {
       var s = [];
       try {
-        for (var a = cs(this.interceptors.preResolution.getAll(e)), c = a.next(); !c.done; c = a.next()) {
+        for (var a = ls(this.interceptors.preResolution.getAll(e)), c = a.next(); !c.done; c = a.next()) {
           var l = c.value;
           l.options.frequency != "Once" && s.push(l), l.callback(e, n);
         }
@@ -15231,7 +15231,7 @@ var X2 = (function(t) {
     if (this.interceptors.postResolution.has(e)) {
       var a = [];
       try {
-        for (var c = cs(this.interceptors.postResolution.getAll(e)), l = c.next(); !l.done; l = c.next()) {
+        for (var c = ls(this.interceptors.postResolution.getAll(e)), l = c.next(); !l.done; l = c.next()) {
           var d = l.value;
           d.options.frequency != "Once" && a.push(d), d.callback(e, n, r);
         }
@@ -15250,10 +15250,10 @@ var X2 = (function(t) {
     if (this.ensureNotDisposed(), e.options.lifecycle === it.ResolutionScoped && n.scopedResolutions.has(e))
       return n.scopedResolutions.get(e);
     var r = e.options.lifecycle === it.Singleton, i = e.options.lifecycle === it.ContainerScoped, s = r || i, a;
-    return _s(e.provider) ? a = e.provider.useValue : ms(e.provider) ? a = s ? e.instance || (e.instance = this.resolve(e.provider.useToken, n)) : this.resolve(e.provider.useToken, n) : $_(e.provider) ? a = s ? e.instance || (e.instance = this.construct(e.provider.useClass, n)) : this.construct(e.provider.useClass, n) : Cd(e.provider) ? a = e.provider.useFactory(this) : a = this.construct(e.provider, n), e.options.lifecycle === it.ResolutionScoped && n.scopedResolutions.set(e, a), a;
+    return ys(e.provider) ? a = e.provider.useValue : _s(e.provider) ? a = s ? e.instance || (e.instance = this.resolve(e.provider.useToken, n)) : this.resolve(e.provider.useToken, n) : $_(e.provider) ? a = s ? e.instance || (e.instance = this.construct(e.provider.useClass, n)) : this.construct(e.provider.useClass, n) : Cd(e.provider) ? a = e.provider.useFactory(this) : a = this.construct(e.provider, n), e.options.lifecycle === it.ResolutionScoped && n.scopedResolutions.set(e, a), a;
   }, t.prototype.resolveAll = function(e, n, r) {
     var i = this;
-    n === void 0 && (n = new ls()), r === void 0 && (r = !1), this.ensureNotDisposed();
+    n === void 0 && (n = new ds()), r === void 0 && (r = !1), this.ensureNotDisposed();
     var s = this.getAllRegistrations(e);
     if (!s && $r(e)) {
       if (r)
@@ -15276,10 +15276,10 @@ var X2 = (function(t) {
     var e, n;
     this.ensureNotDisposed();
     try {
-      for (var r = cs(this._registry.entries()), i = r.next(); !i.done; i = r.next()) {
+      for (var r = ls(this._registry.entries()), i = r.next(); !i.done; i = r.next()) {
         var s = ca(i.value, 2), a = s[0], c = s[1];
         this._registry.setAll(a, c.filter(function(l) {
-          return !_s(l.provider);
+          return !ys(l.provider);
         }).map(function(l) {
           return l.instance = void 0, l;
         }));
@@ -15298,7 +15298,7 @@ var X2 = (function(t) {
     this.ensureNotDisposed();
     var r = new t(this);
     try {
-      for (var i = cs(this._registry.entries()), s = i.next(); !s.done; s = i.next()) {
+      for (var i = ls(this._registry.entries()), s = i.next(); !s.done; s = i.next()) {
         var a = ca(s.value, 2), c = a[0], l = a[1];
         l.some(function(d) {
           var p = d.options;
@@ -15371,7 +15371,7 @@ var X2 = (function(t) {
     return function(i, s) {
       var a, c, l;
       try {
-        return q2(i) ? Kf(i) ? i.multiple ? (a = r.resolve(i.transform)).transform.apply(a, Hn([r.resolveAll(i.token, new ls(), i.isOptional)], i.transformArgs)) : (c = r.resolve(i.transform)).transform.apply(c, Hn([r.resolve(i.token, e, i.isOptional)], i.transformArgs)) : i.multiple ? r.resolveAll(i.token, new ls(), i.isOptional) : r.resolve(i.token, e, i.isOptional) : Kf(i) ? (l = r.resolve(i.transform, e)).transform.apply(l, Hn([r.resolve(i.token, e)], i.transformArgs)) : r.resolve(i, e);
+        return q2(i) ? Kf(i) ? i.multiple ? (a = r.resolve(i.transform)).transform.apply(a, Hn([r.resolveAll(i.token, new ds(), i.isOptional)], i.transformArgs)) : (c = r.resolve(i.transform)).transform.apply(c, Hn([r.resolve(i.token, e, i.isOptional)], i.transformArgs)) : i.multiple ? r.resolveAll(i.token, new ds(), i.isOptional) : r.resolve(i.token, e, i.isOptional) : Kf(i) ? (l = r.resolve(i.transform, e)).transform.apply(l, Hn([r.resolve(i.token, e)], i.transformArgs)) : r.resolve(i, e);
       } catch (d) {
         throw new Error(W2(n, s, d));
       }
@@ -15443,11 +15443,11 @@ class E_ extends le {
 }
 let gc = class {
   constructor(e = {}) {
-    this.encryptionAlgorithm = new D(), this.encryptedData = new E_(), Object.assign(this, e);
+    this.encryptionAlgorithm = new M(), this.encryptedData = new E_(), Object.assign(this, e);
   }
 };
 h([
-  m({ type: D })
+  m({ type: M })
 ], gc.prototype, "encryptionAlgorithm", void 0);
 h([
   m({ type: E_ })
@@ -15466,24 +15466,24 @@ let Pd = Id = class extends pe {
 Pd = Id = h([
   P({ type: C.Sequence, itemType: ln })
 ], Pd);
-class Go {
+class Wo {
   constructor(e = {}) {
-    this.version = Od.v1, this.privateKeyAlgorithm = new D(), this.privateKey = new C_(), Object.assign(this, e);
+    this.version = Od.v1, this.privateKeyAlgorithm = new M(), this.privateKey = new C_(), Object.assign(this, e);
   }
 }
 h([
   m({ type: b.Integer })
-], Go.prototype, "version", void 0);
+], Wo.prototype, "version", void 0);
 h([
-  m({ type: D })
-], Go.prototype, "privateKeyAlgorithm", void 0);
+  m({ type: M })
+], Wo.prototype, "privateKeyAlgorithm", void 0);
 h([
   m({ type: C_ })
-], Go.prototype, "privateKey", void 0);
+], Wo.prototype, "privateKey", void 0);
 h([
   m({ type: Pd, implicit: !0, context: 0, optional: !0 })
-], Go.prototype, "attributes", void 0);
-let Jf = class extends Go {
+], Wo.prototype, "attributes", void 0);
+let Jf = class extends Wo {
 };
 Jf = h([
   P({ type: C.Sequence })
@@ -15504,23 +15504,23 @@ h([
 h([
   m({ type: b.Any, context: 0 })
 ], N_.prototype, "secretValue", void 0);
-class Wo {
+class Jo {
   constructor(e = {}) {
     this.mac = new uc(), this.macSalt = new le(), this.iterations = 1, Object.assign(this, e);
   }
 }
 h([
   m({ type: uc })
-], Wo.prototype, "mac", void 0);
+], Jo.prototype, "mac", void 0);
 h([
   m({ type: le })
-], Wo.prototype, "macSalt", void 0);
+], Jo.prototype, "macSalt", void 0);
 h([
   m({ type: b.Integer, defaultValue: 1 })
-], Wo.prototype, "iterations", void 0);
+], Jo.prototype, "iterations", void 0);
 class mc {
   constructor(e = {}) {
-    this.version = 3, this.authSafe = new pi(), this.macData = new Wo(), Object.assign(this, e);
+    this.version = 3, this.authSafe = new pi(), this.macData = new Jo(), Object.assign(this, e);
   }
 }
 h([
@@ -15530,7 +15530,7 @@ h([
   m({ type: pi })
 ], mc.prototype, "authSafe", void 0);
 h([
-  m({ type: Wo, optional: !0 })
+  m({ type: Jo, optional: !0 })
 ], mc.prototype, "macData", void 0);
 var Td;
 class _c {
@@ -15737,7 +15737,7 @@ h([
 Fd = h([
   P({ type: C.Choice })
 ], Fd);
-let Hd = class extends D {
+let Hd = class extends M {
 };
 Hd = h([
   P({ type: C.Sequence })
@@ -15776,24 +15776,24 @@ h([
 h([
   m({ type: pa, implicit: !0, context: 0 })
 ], gi.prototype, "attributes", void 0);
-class _o {
+class yo {
   constructor(e = {}) {
-    this.certificationRequestInfo = new gi(), this.signatureAlgorithm = new D(), this.signature = new ArrayBuffer(0), Object.assign(this, e);
+    this.certificationRequestInfo = new gi(), this.signatureAlgorithm = new M(), this.signature = new ArrayBuffer(0), Object.assign(this, e);
   }
 }
 h([
   m({ type: gi, raw: !0 })
-], _o.prototype, "certificationRequestInfo", void 0);
+], yo.prototype, "certificationRequestInfo", void 0);
 h([
-  m({ type: D })
-], _o.prototype, "signatureAlgorithm", void 0);
+  m({ type: M })
+], yo.prototype, "signatureAlgorithm", void 0);
 h([
   m({ type: b.BitString })
-], _o.prototype, "signature", void 0);
-const Jo = "crypto.algorithm";
+], yo.prototype, "signature", void 0);
+const Xo = "crypto.algorithm";
 class e3 {
   getAlgorithms() {
-    return Ve.resolveAll(Jo);
+    return Ve.resolveAll(Xo);
   }
   toAsnAlgorithm(e) {
     ({ ...e });
@@ -15803,7 +15803,7 @@ class e3 {
         return r;
     }
     if (/^[0-9.]+$/.test(e.name)) {
-      const n = new D({
+      const n = new M({
         algorithm: e.name
       });
       if ("parameters" in e) {
@@ -15828,9 +15828,9 @@ class e3 {
 }
 const dr = "crypto.algorithmProvider";
 Ve.registerSingleton(dr, e3);
-var ys;
+var ws;
 const ct = "1.3.36.3.3.2.8.1.1", uh = `${ct}.1`, ph = `${ct}.2`, fh = `${ct}.3`, hh = `${ct}.4`, gh = `${ct}.5`, mh = `${ct}.6`, _h = `${ct}.7`, yh = `${ct}.8`, wh = `${ct}.9`, bh = `${ct}.10`, vh = `${ct}.11`, $h = `${ct}.12`, kh = `${ct}.13`, xh = `${ct}.14`, Sh = "brainpoolP160r1", Ah = "brainpoolP160t1", Eh = "brainpoolP192r1", Ch = "brainpoolP192t1", Nh = "brainpoolP224r1", jh = "brainpoolP224t1", Ih = "brainpoolP256r1", Oh = "brainpoolP256t1", Ph = "brainpoolP320r1", Th = "brainpoolP320t1", Rh = "brainpoolP384r1", Bh = "brainpoolP384t1", Lh = "brainpoolP512r1", Uh = "brainpoolP512t1", $e = "ECDSA";
-let yo = ys = class {
+let wo = ws = class {
   toAsnAlgorithm(e) {
     switch (e.name.toLowerCase()) {
       case $e.toLowerCase():
@@ -15852,7 +15852,7 @@ let yo = ys = class {
               n = Ff;
               break;
             case "K-256":
-              n = ys.SECP256K1;
+              n = ws.SECP256K1;
               break;
             case "P-384":
               n = Hf;
@@ -15904,8 +15904,8 @@ let yo = ys = class {
               break;
           }
           if (n)
-            return new D({
-              algorithm: go,
+            return new M({
+              algorithm: mo,
               parameters: T.serialize(new Rn({ namedCurve: n }))
             });
         }
@@ -15922,13 +15922,13 @@ let yo = ys = class {
         return { name: $e, hash: { name: "SHA-384" } };
       case Zu:
         return { name: $e, hash: { name: "SHA-512" } };
-      case go: {
+      case mo: {
         if (!e.parameters)
           throw new TypeError("Cannot get required parameters from EC algorithm");
         switch (T.parse(e.parameters, Rn).namedCurve) {
           case Ff:
             return { name: $e, namedCurve: "P-256" };
-          case ys.SECP256K1:
+          case ws.SECP256K1:
             return { name: $e, namedCurve: "K-256" };
           case Hf:
             return { name: $e, namedCurve: "P-384" };
@@ -15968,11 +15968,11 @@ let yo = ys = class {
     return null;
   }
 };
-yo.SECP256K1 = "1.3.132.0.10";
-yo = ys = h([
+wo.SECP256K1 = "1.3.132.0.10";
+wo = ws = h([
   fc()
-], yo);
-Ve.registerSingleton(Jo, yo);
+], wo);
+Ve.registerSingleton(Xo, wo);
 const O_ = Symbol("name"), P_ = Symbol("value");
 class de {
   constructor(e, n = {}, r = "") {
@@ -15988,8 +15988,8 @@ class t3 {
     const n = new de("Algorithm Identifier", {}, Un.toString(e.algorithm));
     if (e.parameters)
       switch (e.algorithm) {
-        case go: {
-          const r = new yo().toWebAlgorithm(e);
+        case mo: {
+          const r = new wo().toWebAlgorithm(e);
           r && "namedCurve" in r ? n["Named Curve"] = r.namedCurve : n.Parameters = e.parameters;
           break;
         }
@@ -16017,7 +16017,7 @@ Un.items = {
   [kd]: "sha256WithRSAEncryption",
   [na]: "sha384WithRSAEncryption",
   [ra]: "sha512WithRSAEncryption",
-  [go]: "ecPublicKey",
+  [mo]: "ecPublicKey",
   [Wu]: "ecdsaWithSHA1",
   [m_]: "ecdsaWithSHA224",
   [Ju]: "ecdsaWithSHA256",
@@ -16367,7 +16367,7 @@ class At {
     return e.length >= 1 && !(!((n = e[0]) === null || n === void 0) && n.subtle) ? (i = e[0] || i, r = e[1] || De.get()) : r = e[0] || De.get(), await r.subtle.digest(i, this.toArrayBuffer());
   }
 }
-const B_ = "Cannot initialize GeneralName from ASN.1 data.", Dh = `${B_} Unsupported string format in use.`, s3 = `${B_} Value doesn't match to GUID regular expression.`, Mh = /^([0-9a-f]{8})-?([0-9a-f]{4})-?([0-9a-f]{4})-?([0-9a-f]{4})-?([0-9a-f]{12})$/i, zh = "1.3.6.1.4.1.311.25.1", qh = "1.3.6.1.4.1.311.20.2.3", Hc = "dns", Vc = "dn", Kc = "email", Gc = "ip", Wc = "url", Jc = "guid", Xc = "upn", ds = "id";
+const B_ = "Cannot initialize GeneralName from ASN.1 data.", Dh = `${B_} Unsupported string format in use.`, s3 = `${B_} Value doesn't match to GUID regular expression.`, Mh = /^([0-9a-f]{8})-?([0-9a-f]{4})-?([0-9a-f]{4})-?([0-9a-f]{4})-?([0-9a-f]{12})$/i, zh = "1.3.6.1.4.1.311.25.1", qh = "1.3.6.1.4.1.311.20.2.3", Hc = "dns", Vc = "dn", Kc = "email", Gc = "ip", Wc = "url", Jc = "guid", Xc = "upn", us = "id";
 class Cn extends Dn {
   constructor(...e) {
     let n;
@@ -16390,7 +16390,7 @@ class Cn extends Dn {
             throw new Error("Cannot parse GUID value. Value doesn't match to regular expression");
           const i = r.slice(1).map((s, a) => a < 3 ? F.ToHex(new Uint8Array(F.FromHex(s)).reverse()) : s).join("");
           n = new ne({
-            otherName: new uo({
+            otherName: new po({
               typeId: zh,
               value: T.serialize(new le(F.FromHex(i)))
             })
@@ -16400,12 +16400,12 @@ class Cn extends Dn {
         case Gc:
           n = new ne({ iPAddress: e[1] });
           break;
-        case ds:
+        case us:
           n = new ne({ registeredID: e[1] });
           break;
         case Xc: {
           n = new ne({
-            otherName: new uo({
+            otherName: new po({
               typeId: qh,
               value: T.serialize(Ym.toASN(e[1]))
             })
@@ -16431,7 +16431,7 @@ class Cn extends Dn {
     else if (e.uniformResourceIdentifier != null)
       this.type = Wc, this.value = e.uniformResourceIdentifier;
     else if (e.registeredID != null)
-      this.type = ds, this.value = e.registeredID;
+      this.type = us, this.value = e.registeredID;
     else if (e.directoryName != null)
       this.type = Vc, this.value = new At(e.directoryName).toString();
     else if (e.otherName != null)
@@ -16461,7 +16461,7 @@ class Cn extends Dn {
       case Hc:
       case Jc:
       case Gc:
-      case ds:
+      case us:
       case Xc:
       case Wc:
         e = this.type.toUpperCase();
@@ -16473,7 +16473,7 @@ class Cn extends Dn {
         throw new Error("Unsupported GeneralName type");
     }
     let n = this.value;
-    return this.type === ds && (n = Un.toString(n)), new de(e, void 0, n);
+    return this.type === us && (n = Un.toString(n)), new de(e, void 0, n);
   }
 }
 class pr extends Dn {
@@ -16524,7 +16524,7 @@ class pr extends Dn {
   }
 }
 pr.NAME = "GeneralNames";
-const no = "-{5}", wo = "\\n", a3 = `[^${wo}]+`, c3 = `${no}BEGIN (${a3}(?=${no}))${no}`, l3 = `${no}END \\1${no}`, Qr = "\\n", d3 = `[^:${wo}]+`, u3 = `(?:[^${wo}]+${Qr}(?: +[^${wo}]+${Qr})*)`, p3 = "[a-zA-Z0-9=+/]+", f3 = `(?:${p3}${Qr})+`, Fh = `${c3}${Qr}(?:((?:${d3}: ${u3})+))?${Qr}?(${f3})${l3}`;
+const no = "-{5}", bo = "\\n", a3 = `[^${bo}]+`, c3 = `${no}BEGIN (${a3}(?=${no}))${no}`, l3 = `${no}END \\1${no}`, Qr = "\\n", d3 = `[^:${bo}]+`, u3 = `(?:[^${bo}]+${Qr}(?: +[^${bo}]+${Qr})*)`, p3 = "[a-zA-Z0-9=+/]+", f3 = `(?:${p3}${Qr})+`, Fh = `${c3}${Qr}(?:((?:${d3}: ${u3})+))?${Qr}?(${f3})${l3}`;
 class dt {
   static isPem(e) {
     return typeof e == "string" && new RegExp(Fh, "g").test(e.replace(/\r/g, ""));
@@ -16534,7 +16534,7 @@ class dt {
     const n = new RegExp(Fh, "g"), r = [];
     let i = null;
     for (; i = n.exec(e); ) {
-      const s = i[3].replace(new RegExp(`[${wo}]+`, "g"), ""), a = {
+      const s = i[3].replace(new RegExp(`[${bo}]+`, "g"), ""), a = {
         type: i[1],
         headers: [],
         rawData: F.FromBase64(s)
@@ -16708,7 +16708,7 @@ class Nt extends pn {
   toTextObject() {
     const e = this.toTextObjectEmpty(), n = T.parse(this.rawData, St);
     switch (e.Algorithm = ur.serializeAlgorithm(n.algorithm), n.algorithm.algorithm) {
-      case go:
+      case mo:
         e["EC Point"] = n.subjectPublicKey;
         break;
       case ar:
@@ -16719,17 +16719,17 @@ class Nt extends pn {
   }
 }
 function h3(t, e) {
-  return t.algorithm = new D({
+  return t.algorithm = new M({
     algorithm: ar,
     parameters: null
   }), e = T.serialize(t), e;
 }
-class bo extends ht {
+class vo extends ht {
   static async create(e, n = !1, r = De.get()) {
     if ("name" in e && "serialNumber" in e)
-      return new bo(e, n);
+      return new vo(e, n);
     const s = await (await Nt.create(e, r)).getKeyIdentifier(r);
-    return new bo(F.ToHex(s), n);
+    return new vo(F.ToHex(s), n);
   }
   constructor(...e) {
     if (R.isBufferSource(e[0]))
@@ -16758,7 +16758,7 @@ class bo extends ht {
     return n.authorityCertIssuer && (e["Authority Issuer"] = new pr(n.authorityCertIssuer).toTextObject()), n.authorityCertSerialNumber && (e["Authority Serial Number"] = n.authorityCertSerialNumber), n.keyIdentifier && (e[""] = n.keyIdentifier), e;
   }
 }
-bo.NAME = "Authority Key Identifier";
+vo.NAME = "Authority Key Identifier";
 class np extends ht {
   constructor(...e) {
     if (R.isBufferSource(e[0])) {
@@ -16821,10 +16821,10 @@ class ip extends ht {
   }
 }
 ip.NAME = "Key Usages";
-class Xo extends ht {
+class Zo extends ht {
   static async create(e, n = !1, r = De.get()) {
     const s = await (await Nt.create(e, r)).getKeyIdentifier(r);
-    return new Xo(F.ToHex(s), n);
+    return new Zo(F.ToHex(s), n);
   }
   constructor(...e) {
     if (R.isBufferSource(e[0])) {
@@ -16841,7 +16841,7 @@ class Xo extends ht {
     return e[""] = n, e;
   }
 }
-Xo.NAME = "Subject Key Identifier";
+Zo.NAME = "Subject Key Identifier";
 class L_ extends ht {
   constructor(...e) {
     R.isBufferSource(e[0]) ? super(e[0]) : super(c_, e[1], new pr(e[0] || []).rawData);
@@ -16933,7 +16933,7 @@ class M_ extends ht {
       super(Ml, e[1], T.serialize(a));
     } else {
       const a = e[0], c = new Tr();
-      ps(c, a, Cf, "ocsp"), ps(c, a, Nf, "caIssuers"), ps(c, a, jf, "timeStamping"), ps(c, a, If, "caRepository"), super(Ml, e[1], T.serialize(c));
+      fs(c, a, Cf, "ocsp"), fs(c, a, Nf, "caIssuers"), fs(c, a, jf, "timeStamping"), fs(c, a, If, "caRepository"), super(Ml, e[1], T.serialize(c));
     }
     (n = this.ocsp) !== null && n !== void 0 || (this.ocsp = []), (r = this.caIssuers) !== null && r !== void 0 || (this.caIssuers = []), (i = this.timeStamping) !== null && i !== void 0 || (this.timeStamping = []), (s = this.caRepository) !== null && s !== void 0 || (this.caRepository = []);
   }
@@ -16957,11 +16957,11 @@ class M_ extends ht {
   }
   toTextObject() {
     const e = this.toTextObjectWithoutValue();
-    return this.ocsp.length && us(e, "OCSP", this.ocsp), this.caIssuers.length && us(e, "CA Issuers", this.caIssuers), this.timeStamping.length && us(e, "Time Stamping", this.timeStamping), this.caRepository.length && us(e, "CA Repository", this.caRepository), e;
+    return this.ocsp.length && ps(e, "OCSP", this.ocsp), this.caIssuers.length && ps(e, "CA Issuers", this.caIssuers), this.timeStamping.length && ps(e, "Time Stamping", this.timeStamping), this.caRepository.length && ps(e, "CA Repository", this.caRepository), e;
   }
 }
 M_.NAME = "Authority Info Access";
-function us(t, e, n) {
+function ps(t, e, n) {
   if (n.length === 1)
     t[e] = n[0].toTextObject();
   else {
@@ -16973,10 +16973,10 @@ function us(t, e, n) {
     }), t[e] = r;
   }
 }
-function ps(t, e, n, r) {
+function fs(t, e, n, r) {
   const i = e[r];
   i && (Array.isArray(i) ? i : [i]).forEach((a) => {
-    typeof a == "string" && (a = new Cn("url", a)), t.push(new Lo({
+    typeof a == "string" && (a = new Cn("url", a)), t.push(new Uo({
       accessMethod: n,
       accessLocation: T.parse(a.rawData, ne)
     }));
@@ -17085,7 +17085,7 @@ class yc {
   }
 }
 yc.items = /* @__PURE__ */ new Map();
-const Zo = "crypto.signatureFormatter";
+const Yo = "crypto.signatureFormatter";
 class g3 {
   toAsnSignature(e, n) {
     return R.toArrayBuffer(n);
@@ -17094,13 +17094,13 @@ class g3 {
     return R.toArrayBuffer(n);
   }
 }
-var ws;
-let Kd = ws = class {
+var bs;
+let Kd = bs = class {
   static createPssParams(e, n) {
-    const r = ws.getHashAlgorithm(e);
+    const r = bs.getHashAlgorithm(e);
     return r ? new lr({
       hashAlgorithm: r,
-      maskGenAlgorithm: new D({
+      maskGenAlgorithm: new M({
         algorithm: lc,
         parameters: T.serialize(r)
       }),
@@ -17124,27 +17124,27 @@ let Kd = ws = class {
             throw new Error("Cannot get hash algorithm name");
           switch (n.toLowerCase()) {
             case "sha-1":
-              return new D({ algorithm: ta, parameters: null });
+              return new M({ algorithm: ta, parameters: null });
             case "sha-256":
-              return new D({ algorithm: kd, parameters: null });
+              return new M({ algorithm: kd, parameters: null });
             case "sha-384":
-              return new D({ algorithm: na, parameters: null });
+              return new M({ algorithm: na, parameters: null });
             case "sha-512":
-              return new D({ algorithm: ra, parameters: null });
+              return new M({ algorithm: ra, parameters: null });
           }
         } else
-          return new D({ algorithm: ar, parameters: null });
+          return new M({ algorithm: ar, parameters: null });
         break;
       case "rsa-pss":
         if ("hash" in e) {
           if (!("saltLength" in e && typeof e.saltLength == "number"))
             throw new Error("Cannot get 'saltLength' from 'alg' argument");
-          const n = ws.createPssParams(e.hash, e.saltLength);
+          const n = bs.createPssParams(e.hash, e.saltLength);
           if (!n)
             throw new Error("Cannot create PSS parameters");
-          return new D({ algorithm: to, parameters: T.serialize(n) });
+          return new M({ algorithm: to, parameters: T.serialize(n) });
         } else
-          return new D({ algorithm: to, parameters: null });
+          return new M({ algorithm: to, parameters: null });
     }
     return null;
   }
@@ -17174,21 +17174,21 @@ let Kd = ws = class {
     return null;
   }
 };
-Kd = ws = h([
+Kd = bs = h([
   fc()
 ], Kd);
-Ve.registerSingleton(Jo, Kd);
+Ve.registerSingleton(Xo, Kd);
 let Gd = class {
   toAsnAlgorithm(e) {
     switch (e.name.toLowerCase()) {
       case "sha-1":
-        return new D({ algorithm: ia });
+        return new M({ algorithm: ia });
       case "sha-256":
-        return new D({ algorithm: oa });
+        return new M({ algorithm: oa });
       case "sha-384":
-        return new D({ algorithm: sa });
+        return new M({ algorithm: sa });
       case "sha-512":
-        return new D({ algorithm: aa });
+        return new M({ algorithm: aa });
     }
     return null;
   }
@@ -17209,7 +17209,7 @@ let Gd = class {
 Gd = h([
   fc()
 ], Gd);
-Ve.registerSingleton(Jo, Gd);
+Ve.registerSingleton(Xo, Gd);
 class _t {
   addPadding(e, n) {
     const r = R.toUint8Array(n), i = new Uint8Array(e);
@@ -17276,7 +17276,7 @@ let Wd = class {
             break;
         }
     }
-    return n ? new D({
+    return n ? new M({
       algorithm: n
     }) : null;
   }
@@ -17297,7 +17297,7 @@ let Wd = class {
 Wd = h([
   fc()
 ], Wd);
-Ve.registerSingleton(Jo, Wd);
+Ve.registerSingleton(Xo, Wd);
 var ji, Ii, Oi, Pi, Ti, Ri, Bi, Er;
 class m3 extends pn {
   get subjectName() {
@@ -17334,7 +17334,7 @@ class m3 extends pn {
     return re(this, ji, "f") || we(this, ji, this.asn.certificationRequestInfoRaw || T.serialize(this.asn.certificationRequestInfo), "f"), re(this, ji, "f");
   }
   constructor(e) {
-    const n = pn.isAsnEncoded(e) ? [e, _o] : [e];
+    const n = pn.isAsnEncoded(e) ? [e, yo] : [e];
     super(n[0], n[1]), ji.set(this, void 0), Ii.set(this, void 0), Oi.set(this, void 0), Pi.set(this, void 0), Ti.set(this, void 0), Ri.set(this, void 0), Bi.set(this, void 0), Er.set(this, void 0), this.tag = dt.CertificateRequestTag;
   }
   onInit(e) {
@@ -17358,7 +17358,7 @@ class m3 extends pn {
     return this.extensions.filter((n) => n.type === e);
   }
   async verify(e = De.get()) {
-    const n = { ...this.publicKey.algorithm, ...this.signatureAlgorithm }, r = await this.publicKey.export(n, ["verify"], e), i = Ve.resolveAll(Zo).reverse();
+    const n = { ...this.publicKey.algorithm, ...this.signatureAlgorithm }, r = await this.publicKey.export(n, ["verify"], e), i = Ve.resolveAll(Yo).reverse();
     let s = null;
     for (const c of i)
       if (s = c.toWebSignature(n, this.signature), s)
@@ -17368,7 +17368,7 @@ class m3 extends pn {
     return await e.subtle.verify(this.signatureAlgorithm, r, s, this.tbs);
   }
   toTextObject() {
-    const e = this.toTextObjectEmpty(), n = T.parse(this.rawData, _o), r = n.certificationRequestInfo, i = new de("", {
+    const e = this.toTextObjectEmpty(), n = T.parse(this.rawData, yo), r = n.certificationRequestInfo, i = new de("", {
       Version: `${ir[r.version]} (${r.version})`,
       Subject: this.subject,
       "Subject Public Key Info": this.publicKey
@@ -17484,7 +17484,7 @@ class wc extends pn {
     } catch {
       return !1;
     }
-    const a = Ve.resolveAll(Zo).reverse();
+    const a = Ve.resolveAll(Yo).reverse();
     let c = null;
     for (const d of a)
       if (c = d.toWebSignature(r, this.signature), c)
@@ -17574,7 +17574,7 @@ class y3 {
       tbsCertificate: new ft({
         version: ir.v3,
         serialNumber: s,
-        validity: new Uo({
+        validity: new Do({
           notBefore: a,
           notAfter: c
         }),
@@ -17594,7 +17594,7 @@ class y3 {
       hash: "SHA-256"
     }, p = "signingKey" in e ? { ...d, ...e.signingAlgorithm, ...e.signingKey.algorithm } : { ...d, ...e.signingAlgorithm }, f = Ve.resolve(dr);
     l.tbsCertificate.signature = l.signatureAlgorithm = f.toAsnAlgorithm(p);
-    const g = T.serialize(l.tbsCertificate), _ = "signingKey" in e ? await n.subtle.sign(p, e.signingKey, g) : e.signature, w = Ve.resolveAll(Zo).reverse();
+    const g = T.serialize(l.tbsCertificate), _ = "signingKey" in e ? await n.subtle.sign(p, e.signingKey, g) : e.signature, w = Ve.resolveAll(Yo).reverse();
     let x = null;
     for (const A of w)
       if (x = A.toAsnSignature(p, _), x)
@@ -17611,16 +17611,16 @@ var Gh;
 gt.register(e_, np);
 gt.register(r_, rp);
 gt.register(o_, ip);
-gt.register(l_, Xo);
-gt.register(zl, bo);
+gt.register(l_, Zo);
+gt.register(zl, vo);
 gt.register(c_, L_);
 gt.register(Kl, D_);
 gt.register(Ml, M_);
 gt.register(i_, z_);
 yc.register(I_, q_);
 yc.register(tp, op);
-Ve.registerSingleton(Zo, g3);
-Ve.registerSingleton(Zo, _t);
+Ve.registerSingleton(Yo, g3);
+Ve.registerSingleton(Yo, _t);
 _t.namedCurveSize.set("P-256", 32);
 _t.namedCurveSize.set("K-256", 32);
 _t.namedCurveSize.set("P-384", 48);
@@ -17647,7 +17647,7 @@ async function Jd(t) {
         fa.keyCertSign | fa.cRLSign,
         !0
       ),
-      await Xo.create(n.publicKey)
+      await Zo.create(n.publicKey)
     ]
   }), a = await crypto.subtle.exportKey("pkcs8", n.privateKey), c = s.toString("pem"), l = await b3(s), d = Nl(await s.getThumbprint()), p = w3("PRIVATE", a);
   return {
@@ -18100,7 +18100,7 @@ const A3 = ut.extend({
       body: {
         content: {
           "application/json": {
-            schema: o.object(fs.shape).partial()
+            schema: o.object(hs.shape).partial()
           }
         }
       }
@@ -18236,7 +18236,7 @@ const A3 = ut.extend({
       body: {
         content: {
           "application/json": {
-            schema: o.object(fs.shape).partial()
+            schema: o.object(hs.shape).partial()
           }
         }
       },
@@ -18268,7 +18268,7 @@ const A3 = ut.extend({
       body: {
         content: {
           "application/json": {
-            schema: o.object(fs.shape)
+            schema: o.object(hs.shape)
           }
         }
       }
@@ -19333,7 +19333,7 @@ async function g4(t, e) {
   try {
     const { header: n } = f4(e), i = (await h4(t.env)).find((c) => c.kid === n.kid);
     if (!i)
-      throw new z(401, { message: "No matching kid found" });
+      throw new D(401, { message: "No matching kid found" });
     const s = await crypto.subtle.importKey(
       "jwk",
       i,
@@ -19343,7 +19343,7 @@ async function g4(t, e) {
     );
     return await p4(e, s, "RS256");
   } catch (n) {
-    throw n instanceof v ? n : new z(403, { message: "Invalid JWT signature" });
+    throw n instanceof v ? n : new D(403, { message: "Invalid JWT signature" });
   }
 }
 function m4(t) {
@@ -19368,7 +19368,7 @@ function ap(t) {
         return await n();
       const l = e.req.header("authorization") || "", [d, p] = l.split(" ");
       if (d?.toLowerCase() !== "bearer" || !p)
-        throw new z(401, {
+        throw new D(401, {
           message: "Missing bearer token"
         });
       try {
@@ -19379,9 +19379,9 @@ function ap(t) {
         (c.some(
           (w) => g.includes(w)
         ) || c.some((w) => _.includes(w))))
-          throw new z(403, { message: "Unauthorized" });
+          throw new D(403, { message: "Unauthorized" });
       } catch (f) {
-        throw f instanceof v ? f : new z(403, { message: "Invalid token" });
+        throw f instanceof v ? f : new D(403, { message: "Invalid token" });
       }
     }
     return await n();
@@ -21152,7 +21152,7 @@ const A4 = ut.extend({
     description: "Field to sort by. Use field:order where order is 1 for ascending and -1 for descending. Defaults to created_at:-1."
   })
 }), B4 = o.object({
-  invitations: o.array(hs),
+  invitations: o.array(gs),
   start: o.number(),
   limit: o.number(),
   length: o.number()
@@ -21802,7 +21802,7 @@ const A4 = ut.extend({
         content: {
           "application/json": {
             schema: o.union([
-              o.array(hs),
+              o.array(gs),
               B4
             ])
           }
@@ -21881,7 +21881,7 @@ const A4 = ut.extend({
       200: {
         content: {
           "application/json": {
-            schema: hs
+            schema: gs
           }
         },
         description: "An invitation"
@@ -21929,7 +21929,7 @@ const A4 = ut.extend({
       201: {
         content: {
           "application/json": {
-            schema: hs
+            schema: gs
           }
         },
         description: "The created invitation"
@@ -22016,7 +22016,7 @@ function H4(t) {
       credentials: !0
     })
   ), sp(e), e.use(async (r, i) => {
-    const s = Po(r, t.dataAdapter), a = Ac({
+    const s = To(r, t.dataAdapter), a = Ac({
       defaultTtlSeconds: 0,
       // No TTL for request-scoped cache
       maxEntries: 100,
@@ -22134,20 +22134,20 @@ var K4 = (t, ...e) => {
     return i instanceof Promise ? i.then((s) => jt(s, s.callbacks)) : jt(i);
   };
   return n.values = e, n.Provider = n, n[lp] = Q_(e), ei.push(n), n;
-}, _i = (t) => t.values.at(-1), bs = {
+}, _i = (t) => t.values.at(-1), vs = {
   title: [],
   script: ["src"],
   style: ["data-href"],
   link: ["href"],
   meta: ["name", "httpEquiv", "charset", "itemProp"]
-}, Yd = {}, vs = "data-precedence", Yo = (t) => Array.isArray(t) ? t : [t], eg = /* @__PURE__ */ new WeakMap(), tg = (t, e, n, r) => ({ buffer: i, context: s }) => {
+}, Yd = {}, $s = "data-precedence", Qo = (t) => Array.isArray(t) ? t : [t], eg = /* @__PURE__ */ new WeakMap(), tg = (t, e, n, r) => ({ buffer: i, context: s }) => {
   if (!i)
     return;
   const a = eg.get(s) || {};
   eg.set(s, a);
   const c = a[t] ||= [];
   let l = !1;
-  const d = bs[t];
+  const d = vs[t];
   if (d.length > 0) {
     e:
       for (const [, p] of c)
@@ -22172,12 +22172,12 @@ var K4 = (t, ...e) => {
       i[0] = i[0].replaceAll(f, "");
     }), i[0] = i[0].replace(/(?=<\/head>)/, p.join(""));
   }
-}, Qo = (t, e, n) => jt(new It(t, n, Yo(e ?? [])).toString()), es = (t, e, n, r) => {
+}, es = (t, e, n) => jt(new It(t, n, Qo(e ?? [])).toString()), ts = (t, e, n, r) => {
   if ("itemProp" in n)
-    return Qo(t, e, n);
+    return es(t, e, n);
   let { precedence: i, blocking: s, ...a } = n;
-  i = r ? i ?? "" : void 0, r && (a[vs] = i);
-  const c = new It(t, a, Yo(e || [])).toString();
+  i = r ? i ?? "" : void 0, r && (a[$s] = i);
+  const c = new It(t, a, Qo(e || [])).toString();
   return c instanceof Promise ? c.then(
     (l) => jt(c, [
       ...l.callbacks || [],
@@ -22192,23 +22192,23 @@ var K4 = (t, ...e) => {
       return new It(
         "title",
         e,
-        Yo(t ?? [])
+        Qo(t ?? [])
       );
   }
-  return es("title", t, e, !1);
+  return ts("title", t, e, !1);
 }, J4 = ({
   children: t,
   ...e
 }) => {
   const n = dp();
-  return ["src", "async"].some((r) => !e[r]) || n && _i(n) === "head" ? Qo("script", t, e) : es("script", t, e, !1);
+  return ["src", "async"].some((r) => !e[r]) || n && _i(n) === "head" ? es("script", t, e) : ts("script", t, e, !1);
 }, X4 = ({
   children: t,
   ...e
-}) => ["href", "precedence"].every((n) => n in e) ? (e["data-href"] = e.href, delete e.href, es("style", t, e, !0)) : Qo("style", t, e), Z4 = ({ children: t, ...e }) => ["onLoad", "onError"].some((n) => n in e) || e.rel === "stylesheet" && (!("precedence" in e) || "disabled" in e) ? Qo("link", t, e) : es("link", t, e, "precedence" in e), Y4 = ({ children: t, ...e }) => {
+}) => ["href", "precedence"].every((n) => n in e) ? (e["data-href"] = e.href, delete e.href, ts("style", t, e, !0)) : es("style", t, e), Z4 = ({ children: t, ...e }) => ["onLoad", "onError"].some((n) => n in e) || e.rel === "stylesheet" && (!("precedence" in e) || "disabled" in e) ? es("link", t, e) : ts("link", t, e, "precedence" in e), Y4 = ({ children: t, ...e }) => {
   const n = dp();
-  return n && _i(n) === "head" ? Qo("meta", t, e) : es("meta", t, e, !1);
-}, ny = (t, { children: e, ...n }) => new It(t, n, Yo(e ?? [])), Q4 = (t) => (typeof t.action == "function" && (t.action = ga in t.action ? t.action[ga] : void 0), ny("form", t)), ry = (t, e) => (typeof e.formAction == "function" && (e.formAction = ga in e.formAction ? e.formAction[ga] : void 0), ny(t, e)), e$ = (t) => ry("input", t), t$ = (t) => ry("button", t);
+  return n && _i(n) === "head" ? es("meta", t, e) : ts("meta", t, e, !1);
+}, ny = (t, { children: e, ...n }) => new It(t, n, Qo(e ?? [])), Q4 = (t) => (typeof t.action == "function" && (t.action = ga in t.action ? t.action[ga] : void 0), ny("form", t)), ry = (t, e) => (typeof e.formAction == "function" && (e.formAction = ga in e.formAction ? e.formAction[ga] : void 0), ny(t, e)), e$ = (t) => ry("input", t), t$ = (t) => ry("button", t);
 const tl = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
   button: t$,
@@ -22239,7 +22239,7 @@ var n$ = /* @__PURE__ */ new Map([
       ) ? `${r}` : `${r}px` : r
     );
   }
-}, vo = void 0, dp = () => vo, r$ = (t) => /[A-Z]/.test(t) && t.match(
+}, $o = void 0, dp = () => $o, r$ = (t) => /[A-Z]/.test(t) && t.match(
   /^(?:al|basel|clip(?:Path|Rule)$|co|do|fill|fl|fo|gl|let|lig|i|marker[EMS]|o|pai|pointe|sh|st[or]|text[^L]|tr|u|ve|w)/
 ) ? t.replace(/([A-Z])/g, "-$1").toLowerCase() : t, i$ = [
   "area",
@@ -22329,7 +22329,7 @@ var n$ = /* @__PURE__ */ new Map([
     const e = this.tag, n = this.props;
     let { children: r } = this;
     t[0] += `<${e}`;
-    const i = vo && _i(vo) === "svg" ? (s) => r$(ma(s)) : (s) => ma(s);
+    const i = $o && _i($o) === "svg" ? (s) => r$(ma(s)) : (s) => ma(s);
     for (let [s, a] of Object.entries(n))
       if (s = i(s), s !== "children") {
         if (s === "style" && typeof a == "object") {
@@ -22388,9 +22388,9 @@ var n$ = /* @__PURE__ */ new Map([
   e ??= {}, n.length && (e.children = n.length === 1 ? n[0] : n);
   const r = e.key;
   delete e.key;
-  const i = $s(t, e, n);
+  const i = ks(t, e, n);
   return i.key = r, i;
-}, ng = !1, $s = (t, e, n) => {
+}, ng = !1, ks = (t, e, n) => {
   if (!ng) {
     for (const r in Yd)
       tl[r][lp] = Yd[r];
@@ -22400,9 +22400,9 @@ var n$ = /* @__PURE__ */ new Map([
     tl[t],
     e,
     n
-  ) : t === "svg" || t === "head" ? (vo ||= ty(""), new It(t, e, [
+  ) : t === "svg" || t === "head" ? ($o ||= ty(""), new It(t, e, [
     new nl(
-      vo,
+      $o,
       {
         value: t
       },
@@ -22434,10 +22434,10 @@ var n$ = /* @__PURE__ */ new Map([
 function u(t, e, n) {
   let r;
   if (!e || !("children" in e))
-    r = $s(t, e, []);
+    r = ks(t, e, []);
   else {
     const i = e.children;
-    r = Array.isArray(i) ? $s(t, e, i) : $s(t, e, [i]);
+    r = Array.isArray(i) ? ks(t, e, i) : ks(t, e, [i]);
   }
   return r.key = n, r;
 }
@@ -22450,10 +22450,10 @@ var ig;
   t[t.Required = 0] = "Required", t[t.Ignore = 1] = "Ignore";
 })(ig || (ig = {}));
 function c$(t) {
-  return ay(t, l$, $o.Include);
+  return ay(t, l$, ko.Include);
 }
 function sy(t) {
-  return ay(t, d$, $o.None);
+  return ay(t, d$, ko.None);
 }
 function ay(t, e, n) {
   let r = "";
@@ -22462,15 +22462,15 @@ function ay(t, e, n) {
     for (let c = 0; c < 3 && i + c < t.byteLength; c++)
       s = s << 8 | t[i + c], a += 8;
     for (let c = 0; c < 4; c++)
-      a >= 6 ? (r += e[s >> a - 6 & 63], a -= 6) : a > 0 ? (r += e[s << 6 - a & 63], a = 0) : n === $o.Include && (r += "=");
+      a >= 6 ? (r += e[s >> a - 6 & 63], a -= 6) : a > 0 ? (r += e[s << 6 - a & 63], a = 0) : n === ko.Include && (r += "=");
   }
   return r;
 }
 const l$ = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/", d$ = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
-var $o;
+var ko;
 (function(t) {
   t[t.Include = 0] = "Include", t[t.None = 1] = "None";
-})($o || ($o = {}));
+})(ko || (ko = {}));
 var og;
 (function(t) {
   t[t.Required = 0] = "Required", t[t.Ignore = 1] = "Ignore";
@@ -22966,10 +22966,10 @@ class hp {
   }
   createAuthorizationURLWithPKCE(e, n, r, i, s) {
     const a = new URL(e);
-    if (a.searchParams.set("response_type", "code"), a.searchParams.set("client_id", this.clientId), this.redirectURI !== null && a.searchParams.set("redirect_uri", this.redirectURI), a.searchParams.set("state", n), r === ko.S256) {
+    if (a.searchParams.set("response_type", "code"), a.searchParams.set("client_id", this.clientId), this.redirectURI !== null && a.searchParams.set("redirect_uri", this.redirectURI), a.searchParams.set("state", n), r === xo.S256) {
       const c = ly(i);
       a.searchParams.set("code_challenge_method", "S256"), a.searchParams.set("code_challenge", c);
-    } else r === ko.Plain && (a.searchParams.set("code_challenge_method", "plain"), a.searchParams.set("code_challenge", i));
+    } else r === xo.Plain && (a.searchParams.set("code_challenge_method", "plain"), a.searchParams.set("code_challenge", i));
     return s.length > 0 && a.searchParams.set("scope", s.join(" ")), a;
   }
   async validateAuthorizationCode(e, n, r) {
@@ -23003,10 +23003,10 @@ class hp {
     await m$(i);
   }
 }
-var ko;
+var xo;
 (function(t) {
   t[t.S256 = 0] = "S256", t[t.Plain = 1] = "Plain";
-})(ko || (ko = {}));
+})(xo || (xo = {}));
 var lg;
 (function(t) {
   t[t.Include = 0] = "Include", t[t.None = 1] = "None";
@@ -23168,7 +23168,7 @@ let hy = class {
     this.client = new hp(e, n, r);
   }
   createAuthorizationURL(e, n, r) {
-    return this.client.createAuthorizationURLWithPKCE(E$, e, ko.S256, n, r);
+    return this.client.createAuthorizationURLWithPKCE(E$, e, xo.S256, n, r);
   }
   async validateAuthorizationCode(e, n) {
     return await this.client.validateAuthorizationCode(hg, e, n);
@@ -23218,7 +23218,7 @@ class gy {
     return await ti(i);
   }
 }
-const ts = o.object({
+const ns = o.object({
   iss: o.string().url(),
   sub: o.string(),
   aud: o.string(),
@@ -23244,7 +23244,7 @@ const ts = o.object({
   c_hash: o.string().optional()
   // Code hash
 }).passthrough();
-ts.omit({
+ns.omit({
   iat: !0,
   auth_time: !0,
   nonce: !0,
@@ -23308,7 +23308,7 @@ async function O$(t, e, n) {
   ).validateAuthorizationCode(n), c = xa(a.idToken());
   if (!c)
     throw new Error("Invalid ID token");
-  const l = ts.parse(c.payload);
+  const l = ns.parse(c.payload);
   return {
     sub: l.sub,
     email: l.email,
@@ -23469,7 +23469,7 @@ async function M$(t, e, n, r) {
   ).validateAuthorizationCode(n, r), c = xa(a.idToken());
   if (!c)
     throw new Error("Invalid ID token");
-  const l = ts.parse(c.payload);
+  const l = ns.parse(c.payload);
   return {
     sub: l.sub,
     email: l.email,
@@ -23557,7 +23557,7 @@ async function H$(t, e, n) {
   ), a = xa(s.idToken());
   if (!a)
     throw new Error("Invalid ID token");
-  const c = ts.parse(a.payload);
+  const c = ns.parse(a.payload);
   if (typeof c.msn != "string")
     throw new Error("msn not available in id token");
   const l = await fetch(
@@ -23570,7 +23570,7 @@ async function H$(t, e, n) {
     }
   );
   if (!l.ok)
-    throw new z(400, {
+    throw new D(400, {
       message: "Failed to get user from vipps"
     });
   return await l.json();
@@ -23707,7 +23707,7 @@ async function Y$(t, e, n, r) {
   ).validateAuthorizationCode(n, r), l = xa(c.idToken());
   if (!l)
     throw new Error("Invalid ID token");
-  const d = ts.parse(l.payload);
+  const d = ns.parse(l.payload);
   return t.set("log", `Microsoft user: ${JSON.stringify(d)}`), {
     sub: d.sub,
     email: d.email,
@@ -23751,7 +23751,7 @@ function xy(t) {
 async function yi(t, e) {
   const n = await t.data.legacyClients.get(e);
   if (!n)
-    throw new z(403, { message: "Client not found" });
+    throw new D(403, { message: "Client not found" });
   let r = n;
   if (t.DEFAULT_CLIENT_ID || t.DEFAULT_TENANT_ID) {
     const i = t.DEFAULT_CLIENT_ID ? await t.data.legacyClients.get(t.DEFAULT_CLIENT_ID) : void 0, s = await t.data.connections.list(n.tenant.id), a = t.DEFAULT_TENANT_ID ? await t.data.connections.list(t.DEFAULT_TENANT_ID) : { connections: [] }, c = s.connections.map((l) => {
@@ -23808,7 +23808,7 @@ async function yi(t, e) {
 }
 async function gg(t, e, n, r) {
   if (!r.state)
-    throw new z(400, { message: "State not found" });
+    throw new D(400, { message: "State not found" });
   const i = e.connections.find((l) => l.name === n);
   if (!i) {
     t.set("client_id", e.client_id);
@@ -23816,7 +23816,7 @@ async function gg(t, e, n, r) {
       type: ie.FAILED_LOGIN,
       description: "Connection not found"
     });
-    throw se(t, t.env.data.logs.create(e.tenant.id, l)), new z(403, { message: "Connection Not Found" });
+    throw se(t, t.env.data.logs.create(e.tenant.id, l)), new D(403, { message: "Connection Not Found" });
   }
   let s = await t.env.data.loginSessions.get(
     e.tenant.id,
@@ -23859,13 +23859,13 @@ async function mg(t, { code: e, state: n }) {
     "oauth2_state"
   );
   if (!i || !i.connection_id)
-    throw new z(403, { message: "State not found" });
+    throw new D(403, { message: "State not found" });
   const s = await r.data.loginSessions.get(
     t.var.tenant_id || "",
     i.login_id
   );
   if (!s)
-    throw new z(403, { message: "Session not found" });
+    throw new D(403, { message: "Session not found" });
   if (s.authorization_url) {
     const w = new URL(s.authorization_url).hostname, x = t.var.host || "";
     if (w !== x && w) {
@@ -23892,14 +23892,14 @@ async function mg(t, { code: e, state: n }) {
       type: ie.FAILED_LOGIN,
       description: "Connection not found"
     });
-    throw se(t, r.data.logs.create(a.tenant.id, w)), new z(403, { message: "Connection not found" });
+    throw se(t, r.data.logs.create(a.tenant.id, w)), new D(403, { message: "Connection not found" });
   }
   if (t.set("connection", c.name), !s.authParams.redirect_uri) {
     const w = oe(t, {
       type: ie.FAILED_LOGIN,
       description: "Redirect URI not defined"
     });
-    throw se(t, r.data.logs.create(a.tenant.id, w)), new z(403, { message: "Redirect URI not defined" });
+    throw se(t, r.data.logs.create(a.tenant.id, w)), new D(403, { message: "Redirect URI not defined" });
   }
   const d = await ky(t, c.strategy).validateAuthorizationCodeAndGetUser(
     t,
@@ -24294,7 +24294,7 @@ const tk = new W().openapi(
         headers: {
           "access-control-allow-origin": "*",
           "access-control-allow-method": "GET",
-          "cache-control": `public, max-age=${as}, stale-while-revalidate=${as * 2}, stale-if-error=86400`
+          "cache-control": `public, max-age=${cs}, stale-while-revalidate=${cs * 2}, stale-if-error=86400`
         }
       }
     );
@@ -24393,12 +24393,12 @@ const tk = new W().openapi(
       headers: {
         "access-control-allow-origin": "*",
         "access-control-allow-method": "GET",
-        "cache-control": `public, max-age=${as}, stale-while-revalidate=${as * 2}, stale-if-error=86400`
+        "cache-control": `public, max-age=${cs}, stale-while-revalidate=${cs * 2}, stale-if-error=86400`
       }
     });
   }
 );
-function ks(t, e) {
+function io(t, e) {
   if (!t || !e || t.length !== e.length) return !1;
   let n = 0;
   for (let r = 0; r < t.length; r++)
@@ -24415,9 +24415,9 @@ const Sy = o.object({
 async function ik(t, e) {
   const n = await t.env.data.legacyClients.get(e.client_id);
   if (!n)
-    throw new z(403, { message: "Invalid client credentials" });
-  if (n.client_secret && !ks(n.client_secret, e.client_secret))
-    throw new z(403, { message: "Invalid client credentials" });
+    throw new D(403, { message: "Invalid client credentials" });
+  if (n.client_secret && !io(n.client_secret, e.client_secret))
+    throw new D(403, { message: "Invalid client credentials" });
   const r = {
     client_id: n.client_id,
     scope: e.scope,
@@ -24445,7 +24445,7 @@ const ok = o.object({
 async function sk(t, e) {
   const n = await t.env.data.legacyClients.get(e.client_id);
   if (!n)
-    throw new z(403, { message: "Client not found" });
+    throw new D(403, { message: "Client not found" });
   const r = await t.env.data.codes.get(
     n.tenant.id,
     e.code,
@@ -24456,21 +24456,21 @@ async function sk(t, e) {
       type: ie.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN,
       description: "Invalid client credentials"
     });
-    throw se(t, t.env.data.logs.create(n.tenant.id, l)), new z(403, { message: "Invalid client credentials" });
+    throw se(t, t.env.data.logs.create(n.tenant.id, l)), new D(403, { message: "Invalid client credentials" });
   } else if (new Date(r.expires_at) < /* @__PURE__ */ new Date()) {
     const l = oe(t, {
       type: ie.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN,
       description: "Code expired",
       userId: r.user_id
     });
-    throw se(t, t.env.data.logs.create(n.tenant.id, l)), new z(403, { message: "Code expired" });
+    throw se(t, t.env.data.logs.create(n.tenant.id, l)), new D(403, { message: "Code expired" });
   } else if (r.used_at) {
     const l = oe(t, {
       type: ie.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN,
       description: "Invalid authorization code",
       userId: r.user_id
     });
-    throw se(t, t.env.data.logs.create(n.tenant.id, l)), new z(403, {
+    throw se(t, t.env.data.logs.create(n.tenant.id, l)), new D(403, {
       error: "invalid_grant",
       error_description: "Invalid authorization code"
     });
@@ -24480,21 +24480,21 @@ async function sk(t, e) {
     r.login_id
   );
   if (!i)
-    throw new z(403, { message: "Invalid login" });
+    throw new D(403, { message: "Invalid login" });
   if (e.organization && i.authParams.organization && e.organization !== i.authParams.organization)
-    throw new z(400, {
+    throw new D(400, {
       error: "invalid_request",
       error_description: "Organization parameter does not match login session organization"
     });
   if ("client_secret" in e) {
     const l = await t.env.data.legacyClients.get("DEFAULT_CLIENT");
-    if (!ks(n.client_secret, e.client_secret) && !ks(l?.client_secret, e.client_secret)) {
+    if (!io(n.client_secret, e.client_secret) && !io(l?.client_secret, e.client_secret)) {
       const d = oe(t, {
         type: ie.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN,
         description: "Invalid client credentials",
         userId: r.user_id
       });
-      throw se(t, t.env.data.logs.create(n.tenant.id, d)), new z(403, {
+      throw se(t, t.env.data.logs.create(n.tenant.id, d)), new D(403, {
         message: "Invalid client credentials"
       });
     }
@@ -24503,13 +24503,13 @@ async function sk(t, e) {
       e.code_verifier,
       r.code_challenge_method
     );
-    if (!ks(l, r.code_challenge)) {
+    if (!io(l, r.code_challenge)) {
       const d = oe(t, {
         type: ie.FAILED_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN,
         description: "Invalid client credentials",
         userId: r.user_id
       });
-      throw se(t, t.env.data.logs.create(n.tenant.id, d)), new z(403, {
+      throw se(t, t.env.data.logs.create(n.tenant.id, d)), new D(403, {
         message: "Invalid client credentials"
       });
     }
@@ -24520,11 +24520,11 @@ async function sk(t, e) {
       description: "Invalid redirect uri",
       userId: r.user_id
     });
-    throw se(t, t.env.data.logs.create(n.tenant.id, l)), new z(403, { message: "Invalid redirect uri" });
+    throw se(t, t.env.data.logs.create(n.tenant.id, l)), new D(403, { message: "Invalid redirect uri" });
   }
   const s = await t.env.data.users.get(n.tenant.id, r.user_id);
   if (!s)
-    throw new z(403, { message: "User not found" });
+    throw new D(403, { message: "User not found" });
   await t.env.data.codes.used(n.tenant.id, e.code);
   let a;
   i.session_id && i.authParams.scope?.split(" ").includes("offline_access") && (a = await X0(t, {
@@ -24578,23 +24578,29 @@ const ak = o.object({
   grant_type: o.literal("refresh_token"),
   client_id: o.string(),
   redirect_uri: o.string().optional(),
-  refresh_token: o.string()
+  refresh_token: o.string(),
+  client_secret: o.string().optional()
 });
 async function ck(t, e) {
   const n = await t.env.data.legacyClients.get(e.client_id);
   if (!n)
-    throw new z(403, { message: "Client not found" });
+    throw new D(403, { message: "Client not found" });
+  if (e.client_secret && n.client_secret && !io(n.client_secret, e.client_secret))
+    throw new D(403, {
+      error: "invalid_client",
+      error_description: "Client authentication failed"
+    });
   const r = await t.env.data.refreshTokens.get(
     n.tenant.id,
     e.refresh_token
   );
   if (r) {
     if (r.expires_at && new Date(r.expires_at) < /* @__PURE__ */ new Date() || r.idle_expires_at && new Date(r.idle_expires_at) < /* @__PURE__ */ new Date())
-      throw new z(403, {
+      throw new D(403, {
         error: "invalid_grant",
         error_description: "Refresh token has expired"
       });
-  } else throw new z(403, {
+  } else throw new D(403, {
     error: "invalid_grant",
     error_description: "Invalid refresh token"
   });
@@ -24603,7 +24609,7 @@ async function ck(t, e) {
     r.user_id
   );
   if (!i)
-    throw new z(403, { message: "User not found" });
+    throw new D(403, { message: "User not found" });
   const s = r.resource_servers[0];
   if (r.idle_expires_at) {
     const a = new Date(
@@ -25550,13 +25556,13 @@ function p5(t, e) {
     n++;
   }
 }
-function xo(t) {
+function So(t) {
   "@babel/helpers - typeof";
-  return xo = typeof Symbol == "function" && typeof Symbol.iterator == "symbol" ? function(e) {
+  return So = typeof Symbol == "function" && typeof Symbol.iterator == "symbol" ? function(e) {
     return typeof e;
   } : function(e) {
     return e && typeof Symbol == "function" && e.constructor === Symbol && e !== Symbol.prototype ? "symbol" : typeof e;
-  }, xo(t);
+  }, So(t);
 }
 function Ag(t, e) {
   var n = Object.keys(t);
@@ -25596,14 +25602,14 @@ function m5(t, e, n) {
 }
 function Oy(t) {
   var e = _5(t, "string");
-  return xo(e) == "symbol" ? e : e + "";
+  return So(e) == "symbol" ? e : e + "";
 }
 function _5(t, e) {
-  if (xo(t) != "object" || !t) return t;
+  if (So(t) != "object" || !t) return t;
   var n = t[Symbol.toPrimitive];
   if (n !== void 0) {
     var r = n.call(t, e);
-    if (xo(r) != "object") return r;
+    if (So(r) != "object") return r;
     throw new TypeError("@@toPrimitive must return a primitive value.");
   }
   return String(t);
@@ -25742,7 +25748,7 @@ function k5(t, e) {
   if (!(t instanceof e)) throw new TypeError("Cannot call a class as a function");
 }
 function x5(t, e, n) {
-  return e = Ao(e), S5(t, vp() ? Reflect.construct(e, n || [], Ao(t).constructor) : e.apply(t, n));
+  return e = Eo(e), S5(t, vp() ? Reflect.construct(e, n || [], Eo(t).constructor) : e.apply(t, n));
 }
 function S5(t, e) {
   if (e && (eu(e) == "object" || typeof e == "function")) return e;
@@ -25755,7 +25761,7 @@ function A5(t) {
 }
 function E5(t, e) {
   if (typeof e != "function" && e !== null) throw new TypeError("Super expression must either be null or a function");
-  t.prototype = Object.create(e && e.prototype, { constructor: { value: t, writable: !0, configurable: !0 } }), Object.defineProperty(t, "prototype", { writable: !1 }), e && So(t, e);
+  t.prototype = Object.create(e && e.prototype, { constructor: { value: t, writable: !0, configurable: !0 } }), Object.defineProperty(t, "prototype", { writable: !1 }), e && Ao(t, e);
 }
 function tu(t) {
   var e = typeof Map == "function" ? /* @__PURE__ */ new Map() : void 0;
@@ -25767,9 +25773,9 @@ function tu(t) {
       e.set(r, i);
     }
     function i() {
-      return C5(r, arguments, Ao(this).constructor);
+      return C5(r, arguments, Eo(this).constructor);
     }
-    return i.prototype = Object.create(r.prototype, { constructor: { value: i, enumerable: !1, writable: !0, configurable: !0 } }), So(i, r);
+    return i.prototype = Object.create(r.prototype, { constructor: { value: i, enumerable: !1, writable: !0, configurable: !0 } }), Ao(i, r);
   }, tu(t);
 }
 function C5(t, e, n) {
@@ -25777,7 +25783,7 @@ function C5(t, e, n) {
   var r = [null];
   r.push.apply(r, e);
   var i = new (t.bind.apply(t, r))();
-  return n && So(i, n.prototype), i;
+  return n && Ao(i, n.prototype), i;
 }
 function vp() {
   try {
@@ -25796,15 +25802,15 @@ function N5(t) {
     return typeof t == "function";
   }
 }
-function So(t, e) {
-  return So = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function(n, r) {
+function Ao(t, e) {
+  return Ao = Object.setPrototypeOf ? Object.setPrototypeOf.bind() : function(n, r) {
     return n.__proto__ = r, n;
-  }, So(t, e);
+  }, Ao(t, e);
 }
-function Ao(t) {
-  return Ao = Object.setPrototypeOf ? Object.getPrototypeOf.bind() : function(e) {
+function Eo(t) {
+  return Eo = Object.setPrototypeOf ? Object.getPrototypeOf.bind() : function(e) {
     return e.__proto__ || Object.getPrototypeOf(e);
-  }, Ao(t);
+  }, Eo(t);
 }
 var nn = /* @__PURE__ */ (function(t) {
   function e(n) {
@@ -26071,13 +26077,13 @@ function t6(t, e, n, r) {
     carrierCode: f
   };
 }
-function Eo(t) {
+function Co(t) {
   "@babel/helpers - typeof";
-  return Eo = typeof Symbol == "function" && typeof Symbol.iterator == "symbol" ? function(e) {
+  return Co = typeof Symbol == "function" && typeof Symbol.iterator == "symbol" ? function(e) {
     return typeof e;
   } : function(e) {
     return e && typeof Symbol == "function" && e.constructor === Symbol && e !== Symbol.prototype ? "symbol" : typeof e;
-  }, Eo(t);
+  }, Co(t);
 }
 function Pg(t, e) {
   var n = Object.keys(t);
@@ -26105,14 +26111,14 @@ function n6(t, e, n) {
 }
 function r6(t) {
   var e = i6(t, "string");
-  return Eo(e) == "symbol" ? e : e + "";
+  return Co(e) == "symbol" ? e : e + "";
 }
 function i6(t, e) {
-  if (Eo(t) != "object" || !t) return t;
+  if (Co(t) != "object" || !t) return t;
   var n = t[Symbol.toPrimitive];
   if (n !== void 0) {
     var r = n.call(t, e);
-    if (Eo(r) != "object") return r;
+    if (Co(r) != "object") return r;
     throw new TypeError("@@toPrimitive must return a primitive value.");
   }
   return (e === "string" ? String : Number)(t);
@@ -26122,13 +26128,13 @@ function o6(t, e, n) {
     v2: !0
   }), n);
 }
-function Co(t) {
+function No(t) {
   "@babel/helpers - typeof";
-  return Co = typeof Symbol == "function" && typeof Symbol.iterator == "symbol" ? function(e) {
+  return No = typeof Symbol == "function" && typeof Symbol.iterator == "symbol" ? function(e) {
     return typeof e;
   } : function(e) {
     return e && typeof Symbol == "function" && e.constructor === Symbol && e !== Symbol.prototype ? "symbol" : typeof e;
-  }, Co(t);
+  }, No(t);
 }
 function Rg(t, e) {
   var n = Object.keys(t);
@@ -26156,14 +26162,14 @@ function a6(t, e, n) {
 }
 function c6(t) {
   var e = l6(t, "string");
-  return Co(e) == "symbol" ? e : e + "";
+  return No(e) == "symbol" ? e : e + "";
 }
 function l6(t, e) {
-  if (Co(t) != "object" || !t) return t;
+  if (No(t) != "object" || !t) return t;
   var n = t[Symbol.toPrimitive];
   if (n !== void 0) {
     var r = n.call(t, e);
-    if (Co(r) != "object") return r;
+    if (No(r) != "object") return r;
     throw new TypeError("@@toPrimitive must return a primitive value.");
   }
   return (e === "string" ? String : Number)(t);
@@ -26226,13 +26232,13 @@ function g6(t) {
     metadata: d
   };
 }
-function No(t) {
+function jo(t) {
   "@babel/helpers - typeof";
-  return No = typeof Symbol == "function" && typeof Symbol.iterator == "symbol" ? function(e) {
+  return jo = typeof Symbol == "function" && typeof Symbol.iterator == "symbol" ? function(e) {
     return typeof e;
   } : function(e) {
     return e && typeof Symbol == "function" && e.constructor === Symbol && e !== Symbol.prototype ? "symbol" : typeof e;
-  }, No(t);
+  }, jo(t);
 }
 function Lg(t, e) {
   var n = Object.keys(t);
@@ -26260,14 +26266,14 @@ function m6(t, e, n) {
 }
 function _6(t) {
   var e = y6(t, "string");
-  return No(e) == "symbol" ? e : e + "";
+  return jo(e) == "symbol" ? e : e + "";
 }
 function y6(t, e) {
-  if (No(t) != "object" || !t) return t;
+  if (jo(t) != "object" || !t) return t;
   var n = t[Symbol.toPrimitive];
   if (n !== void 0) {
     var r = n.call(t, e);
-    if (No(r) != "object") return r;
+    if (jo(r) != "object") return r;
     throw new TypeError("@@toPrimitive must return a primitive value.");
   }
   return (e === "string" ? String : Number)(t);
@@ -26401,23 +26407,23 @@ async function Ty(t, {
     c
   );
   if (!d)
-    throw new z(400, {
+    throw new D(400, {
       message: "Invalid username format"
     });
   const p = await t.env.data.legacyClients.get(e);
   if (!p)
-    throw new z(403, { message: "Client not found" });
+    throw new D(403, { message: "Client not found" });
   const { env: f } = t, g = await f.data.codes.get(p.tenant.id, r, "otp");
   if (!g)
-    throw new z(400, {
+    throw new D(400, {
       message: Y("code_invalid")
     });
   if (g.expires_at < (/* @__PURE__ */ new Date()).toISOString())
-    throw new z(400, {
+    throw new D(400, {
       message: Y("code_expired")
     });
   if (g.used_at)
-    throw new z(400, {
+    throw new D(400, {
       message: Y("code_used")
     });
   const _ = await f.data.loginSessions.get(
@@ -26425,7 +26431,7 @@ async function Ty(t, {
     g.login_id
   );
   if (!_ || _.authParams.username !== n)
-    throw new z(400, {
+    throw new D(400, {
       message: "Code not found or expired"
     });
   if (s && _.ip && a && !S6(_.ip, a))
@@ -26488,9 +26494,10 @@ const zg = o.object({
   // Refresh token
   o.object({
     grant_type: o.literal("refresh_token"),
-    client_id: o.string(),
+    client_id: o.string().optional(),
     refresh_token: o.string(),
-    redirect_uri: o.string().optional()
+    redirect_uri: o.string().optional(),
+    client_secret: o.string().optional()
   }),
   // OTP
   o.object({
@@ -26640,7 +26647,7 @@ const C6 = new W().openapi(
           });
         else {
           if (!s.user?.user_id)
-            throw new z(400, {
+            throw new D(400, {
               error: "invalid_request",
               error_description: "User ID is required for user-based grants"
             });
@@ -26732,7 +26739,7 @@ function xp(t) {
   /[0-9]/.test(t) && // At least one number
   /[^A-Za-z0-9]/.test(t);
 }
-async function ns(t, e) {
+async function rs(t, e) {
   const n = await t.env.data.emailProviders.get(t.var.tenant_id) || // Fallback to default tenant
   (t.env.DEFAULT_TENANT_ID ? await t.env.data.emailProviders.get(t.env.DEFAULT_TENANT_ID) : null);
   if (!n)
@@ -26776,7 +26783,7 @@ async function By(t, e, n, r, i) {
     vendorName: s.friendly_name,
     lng: "en"
   };
-  await ns(t, {
+  await rs(t, {
     to: e,
     subject: Y("reset_password_title", p),
     html: `Click here to reset your password: ${qe(t.env)}reset-password?state=${r}&code=${n}`,
@@ -26812,7 +26819,7 @@ async function Sp(t, { to: e, code: n, language: r }) {
     code: n,
     lng: r || "en"
   };
-  s === "email" ? await ns(t, {
+  s === "email" ? await rs(t, {
     to: e,
     subject: Y("code_email_subject", p),
     html: `Click here to validate your email: ${qe(t.env)}validate-email`,
@@ -26861,7 +26868,7 @@ async function Ap(t, { to: e, code: n, authParams: r, language: i }) {
     lng: i || "en"
   };
   if (a === "email")
-    await ns(t, {
+    await rs(t, {
       to: e,
       subject: Y("code_email_subject", f),
       html: `Click here to validate your email: ${qe(t.env)}validate-email`,
@@ -26910,7 +26917,7 @@ async function Ep(t, e, n) {
     vendorName: r.friendly_name,
     lng: n || "en"
   };
-  await ns(t, {
+  await rs(t, {
     to: e.email,
     subject: Y("welcome_to_your_account", c),
     html: `Click here to validate your email: ${qe(t.env)}validate-email`,
@@ -26937,7 +26944,7 @@ async function O6(t, e, n, r, i) {
     vendorName: s.friendly_name,
     lng: "en"
   }, p = `${qe(t.env)}signup?state=${r}&code=${n}`;
-  await ns(t, {
+  await rs(t, {
     to: e,
     subject: Y("register_password_account", d),
     html: `Click here to register: ${p}`,
@@ -27005,7 +27012,7 @@ const P6 = new W().openapi(
       throw new v(400, {
         message: "Password does not meet the requirements"
       });
-    if (await co({
+    if (await lo({
       userAdapter: t.env.data.users,
       tenant_id: i.tenant.id,
       username: e,
@@ -27157,7 +27164,7 @@ const T6 = new W().openapi(
       c.tenant.id,
       {
         authParams: { ...s, client_id: r, username: l },
-        expires_at: new Date(Date.now() + gs).toISOString(),
+        expires_at: new Date(Date.now() + ms).toISOString(),
         csrf_token: me(),
         ip: d,
         useragent: p,
@@ -27167,7 +27174,7 @@ const T6 = new W().openapi(
       code_id: Bn(),
       code_type: "otp",
       login_id: _.id,
-      expires_at: new Date(Date.now() + gs).toISOString(),
+      expires_at: new Date(Date.now() + ms).toISOString(),
       redirect_uri: s.redirect_uri
     }), x = s?.ui_locales?.split(" ")?.map((A) => A.split("-")[0])[0];
     return i === "link" ? await Ap(t, {
@@ -27279,7 +27286,7 @@ const T6 = new W().openapi(
           ...g,
           username: r
         },
-        expires_at: new Date(Date.now() + gs).toISOString(),
+        expires_at: new Date(Date.now() + ms).toISOString(),
         csrf_token: me(),
         ip: w,
         useragent: x,
@@ -27304,7 +27311,7 @@ class Nr extends v {
 async function Ly(t, e, n, r) {
   const { data: i } = t.env, { username: s } = n;
   if (t.set("username", s), !s)
-    throw new z(400, { message: "Username is required" });
+    throw new D(400, { message: "Username is required" });
   const a = await oi({
     userAdapter: t.env.data.users,
     tenant_id: e.tenant.id,
@@ -27621,25 +27628,25 @@ function U6(t) {
     return "auth2";
   if (t === "email")
     return "email";
-  throw new z(403, { message: "Invalid realm" });
+  throw new D(403, { message: "Invalid realm" });
 }
 async function D6(t, e, n, r, i) {
   const { env: s } = t;
   t.set("connection", i);
   const a = await s.data.codes.get(e, n, "ticket");
   if (!a || a.used_at)
-    throw new z(403, { message: "Ticket not found" });
+    throw new D(403, { message: "Ticket not found" });
   const c = await s.data.loginSessions.get(
     e,
     a.login_id
   );
   if (!c || !c.authParams.username)
-    throw new z(403, { message: "Session not found" });
+    throw new D(403, { message: "Session not found" });
   const l = await s.data.legacyClients.get(
     c.authParams.client_id
   );
   if (!l)
-    throw new z(403, { message: "Client not found" });
+    throw new D(403, { message: "Client not found" });
   t.set("client_id", c.authParams.client_id), await s.data.codes.used(e, n);
   const d = U6(i);
   let p = await Na(t, {
@@ -28072,7 +28079,7 @@ const z6 = ["email", "sms", "Username-Password-Authentication"], q6 = new W().op
 function H6(t) {
   const e = new W();
   e.use(async (r, i) => {
-    const s = Po(r, t.dataAdapter), a = t.dataAdapter.cache || Ac({
+    const s = To(r, t.dataAdapter), a = t.dataAdapter.cache || Ac({
       defaultTtlSeconds: 0,
       // No TTL for request-scoped cache
       maxEntries: 100,
@@ -28134,7 +28141,7 @@ async function ge(t, e, n = !1) {
     e
   );
   if (!i)
-    throw new z(400, { message: "Login session not found" });
+    throw new D(400, { message: "Login session not found" });
   t.set("loginSession", i);
   const s = await yi(
     r,
@@ -28153,13 +28160,13 @@ async function ge(t, e, n = !1) {
   if (l) {
     if (i.session_id && !n) {
       if (!i.authParams.redirect_uri)
-        throw new z(400, {
+        throw new D(400, {
           message: "Login session closed and no redirect URI available"
         });
       const g = new URL(i.authParams.redirect_uri);
       throw g.searchParams.set("error", "access_denied"), g.searchParams.set("error_description", "Login session closed"), i.authParams.state && g.searchParams.set("state", i.authParams.state), new fr(g.toString(), 302);
     }
-  } else throw new z(400, { message: "Tenant not found" });
+  } else throw new D(400, { message: "Tenant not found" });
   const d = await r.data.themes.get(l.id, "default"), p = await r.data.branding.get(l.id), f = i.authParams?.ui_locales?.split(" ")?.map((g) => g.split("-")[0])?.find((g) => {
     if (Array.isArray(y.options.supportedLngs))
       return y.options.supportedLngs.includes(g);
@@ -28974,7 +28981,7 @@ const te = /* @__PURE__ */ $v(G6), bn = ({
     const d = t.get("countryCode"), { normalized: p, connectionType: f } = jc(
       r.username,
       d
-    ), g = p ? await co({
+    ), g = p ? await lo({
       userAdapter: e.data.users,
       tenant_id: i.tenant.id,
       username: p,
@@ -29094,7 +29101,7 @@ const te = /* @__PURE__ */ $v(G6), bn = ({
       code_id: x,
       code_type: "otp",
       login_id: s.id,
-      expires_at: new Date(Date.now() + gs).toISOString(),
+      expires_at: new Date(Date.now() + ms).toISOString(),
       redirect_uri: s.authParams.redirect_uri
     }), N = i.connections.find(
       (I) => I.strategy === f
@@ -29126,13 +29133,13 @@ const te = /* @__PURE__ */ $v(G6), bn = ({
     children: y.t("go_back")
   }
 );
-var jo = "_hp", o8 = {
+var Io = "_hp", o8 = {
   Change: "Input",
   DoubleClick: "DblClick"
 }, s8 = {
   svg: "2000/svg",
   math: "1998/Math/MathML"
-}, Io = [], iu = /* @__PURE__ */ new WeakMap(), ri = void 0, a8 = () => ri, rn = (t) => "t" in t, ll = {
+}, Oo = [], iu = /* @__PURE__ */ new WeakMap(), ri = void 0, a8 = () => ri, rn = (t) => "t" in t, ll = {
   onClick: ["click", !1]
 }, Hg = (t) => {
   if (!t.startsWith("on"))
@@ -29193,7 +29200,7 @@ var jo = "_hp", o8 = {
       }
     }
 }, l8 = (t, e) => {
-  e[Se][0] = 0, Io.push([t, e]);
+  e[Se][0] = 0, Oo.push([t, e]);
   const n = e.tag[lp] || e.tag, r = n.defaultProps ? {
     ...n.defaultProps,
     ...e.props
@@ -29201,7 +29208,7 @@ var jo = "_hp", o8 = {
   try {
     return [n.call(null, r)];
   } finally {
-    Io.pop();
+    Oo.pop();
   }
 }, My = (t, e, n, r, i) => {
   t.vR?.length && (r.push(...t.vR), delete t.vR), typeof t.tag == "function" && t[Se][1][Hy]?.forEach((s) => i.push(s)), t.vC.forEach((s) => {
@@ -29219,10 +29226,10 @@ var jo = "_hp", o8 = {
       n.push(s), s.vR?.length && (r.push(...s.vR), delete s.vR);
   });
 }, d8 = (t) => {
-  for (; ; t = t.tag === jo || !t.vC || !t.pP ? t.nN : t.vC[0]) {
+  for (; ; t = t.tag === Io || !t.vC || !t.pP ? t.nN : t.vC[0]) {
     if (!t)
       return null;
-    if (t.tag !== jo && t.e)
+    if (t.tag !== Io && t.e)
       return t.e;
   }
 }, zy = (t) => {
@@ -29246,7 +29253,7 @@ var jo = "_hp", o8 = {
     c = 0;
   else {
     const d = Kg(a, d8(t.nN));
-    d !== void 0 ? (l = a[d], c = d) : c = Kg(a, r.find((p) => p.tag !== jo && p.e)?.e) ?? -1, c === -1 && (n = !0);
+    d !== void 0 ? (l = a[d], c = d) : c = Kg(a, r.find((p) => p.tag !== Io && p.e)?.e) ?? -1, c === -1 && (n = !0);
   }
   for (let d = 0, p = r.length; d < p; d++, c++) {
     const f = r[d];
@@ -29257,7 +29264,7 @@ var jo = "_hp", o8 = {
       const _ = n || !f.e;
       rn(f) ? (f.e && f.d && (f.e.textContent = f.t), f.d = !1, g = f.e ||= document.createTextNode(f.t)) : (g = f.e ||= f.n ? document.createElementNS(f.n, f.tag) : document.createElement(f.tag), c8(g, f.props, f.pP), Fy(f, g, _));
     }
-    f.tag === jo ? c-- : n ? g.parentNode || e.appendChild(g) : a[c] !== g && a[c - 1] !== g && (a[c + 1] === g ? e.appendChild(a[c]) : e.insertBefore(g, l || a[c] || null));
+    f.tag === Io ? c-- : n ? g.parentNode || e.appendChild(g) : a[c] !== g && a[c - 1] !== g && (a[c + 1] === g ? e.appendChild(a[c]) : e.insertBefore(g, l || a[c] || null));
   }
   if (t.pP && delete t.pP, s.length) {
     const d = [], p = [];
@@ -29272,7 +29279,7 @@ var jo = "_hp", o8 = {
   n && (e.pC ||= e.vC);
   let i;
   try {
-    n ||= typeof e.tag == "function" ? l8(t, e) : Yo(e.props.children), n[0]?.tag === "" && n[0][Zd] && (i = n[0][Zd], t[5].push([t, i, e]));
+    n ||= typeof e.tag == "function" ? l8(t, e) : Qo(e.props.children), n[0]?.tag === "" && n[0][Zd] && (i = n[0][Zd], t[5].push([t, i, e]));
     const s = r ? [...e.pC] : e.vC ? [...e.vC] : void 0, a = [];
     let c;
     for (let l = 0; l < n.length; l++) {
@@ -29407,7 +29414,7 @@ var jo = "_hp", o8 = {
   }
   return i;
 }, f8 = (t, e, n) => ({
-  tag: jo,
+  tag: Io,
   props: {
     children: t
   },
@@ -29415,7 +29422,7 @@ var jo = "_hp", o8 = {
   e,
   p: 1
 }), h8 = 0, Hy = 1, g8 = 2, m8 = 3, dl = /* @__PURE__ */ new WeakMap(), Vy = (t, e) => !t || !e || t.length !== e.length || e.some((n, r) => n !== t[r]), _8 = void 0, Xg = [], y8 = (t) => {
-  const e = () => typeof t == "function" ? t() : t, n = Io.at(-1);
+  const e = () => typeof t == "function" ? t() : t, n = Oo.at(-1);
   if (!n)
     return [e(), () => {
     }];
@@ -29445,7 +29452,7 @@ var jo = "_hp", o8 = {
     }
   ];
 }, Cp = (t, e) => {
-  const n = Io.at(-1);
+  const n = Oo.at(-1);
   if (!n)
     return t;
   const [, r] = n, i = r[Se][1][g8] ||= [], s = r[Se][0]++, a = i[s];
@@ -29462,7 +29469,7 @@ var jo = "_hp", o8 = {
     (n) => dl.set(t, [void 0, n])
   ), t;
 }, b8 = (t, e) => {
-  const n = Io.at(-1);
+  const n = Oo.at(-1);
   if (!n)
     return t();
   const [, r] = n, i = r[Se][1][m8] ||= [], s = r[Se][0]++, a = i[s];
@@ -29488,7 +29495,7 @@ var jo = "_hp", o8 = {
     };
   },
   [t]
-), Yg = /* @__PURE__ */ Object.create(null), Qg = /* @__PURE__ */ Object.create(null), rs = (t, e, n, r, i) => {
+), Yg = /* @__PURE__ */ Object.create(null), Qg = /* @__PURE__ */ Object.create(null), is = (t, e, n, r, i) => {
   if (e?.itemProp)
     return {
       tag: t,
@@ -29498,13 +29505,13 @@ var jo = "_hp", o8 = {
     };
   const s = document.head;
   let { onLoad: a, onError: c, precedence: l, blocking: d, ...p } = e, f = null, g = !1;
-  const _ = bs[t];
+  const _ = vs[t];
   let w;
   if (_.length > 0) {
     const N = s.querySelectorAll(t);
     e:
       for (const O of N)
-        for (const I of bs[t])
+        for (const I of vs[t])
           if (O.getAttribute(I) === e[I]) {
             f = O;
             break e;
@@ -29523,17 +29530,17 @@ var jo = "_hp", o8 = {
     }
   } else
     w = s.querySelectorAll(t);
-  l = r ? l ?? "" : void 0, r && (p[vs] = l);
+  l = r ? l ?? "" : void 0, r && (p[$s] = l);
   const x = Cp(
     (N) => {
       if (_.length > 0) {
         let O = !1;
         for (const I of s.querySelectorAll(t)) {
-          if (O && I.getAttribute(vs) !== l) {
+          if (O && I.getAttribute($s) !== l) {
             s.insertBefore(N, I);
             return;
           }
-          I.getAttribute(vs) === l && (O = !0);
+          I.getAttribute($s) === l && (O = !0);
         }
         s.appendChild(N);
       } else if (w) {
@@ -29563,7 +29570,7 @@ var jo = "_hp", o8 = {
     });
   });
   if (i && d === "render") {
-    const N = bs[t][0];
+    const N = vs[t][0];
     if (e[N]) {
       const O = e[N], I = Yg[O] ||= new Promise((U, J) => {
         x(f), f.addEventListener("load", U), f.addEventListener("error", J);
@@ -29591,23 +29598,23 @@ var jo = "_hp", o8 = {
     props: t,
     type: "title",
     ref: t.ref
-  } : rs("title", t, void 0, !1, !1);
+  } : is("title", t, void 0, !1, !1);
 }, x8 = (t) => !t || ["src", "async"].some((e) => !t[e]) ? {
   tag: "script",
   props: t,
   type: "script",
   ref: t.ref
-} : rs("script", t, 1, !1, !0), S8 = (t) => !t || !["href", "precedence"].every((e) => e in t) ? {
+} : is("script", t, 1, !1, !0), S8 = (t) => !t || !["href", "precedence"].every((e) => e in t) ? {
   tag: "style",
   props: t,
   type: "style",
   ref: t.ref
-} : (t["data-href"] = t.href, delete t.href, rs("style", t, 2, !0, !0)), A8 = (t) => !t || ["onLoad", "onError"].some((e) => e in t) || t.rel === "stylesheet" && (!("precedence" in t) || "disabled" in t) ? {
+} : (t["data-href"] = t.href, delete t.href, is("style", t, 2, !0, !0)), A8 = (t) => !t || ["onLoad", "onError"].some((e) => e in t) || t.rel === "stylesheet" && (!("precedence" in t) || "disabled" in t) ? {
   tag: "link",
   props: t,
   type: "link",
   ref: t.ref
-} : rs("link", t, 1, "precedence" in t, !0), E8 = (t) => rs("meta", t, void 0, !1, !1), Ky = Symbol(), C8 = (t) => {
+} : is("link", t, 1, "precedence" in t, !0), E8 = (t) => is("meta", t, void 0, !1, !1), Ky = Symbol(), C8 = (t) => {
   const { action: e, ...n } = t;
   typeof e != "function" && (n.action = e);
   const [r, i] = y8([null, !1]), s = Cp(
@@ -30030,7 +30037,7 @@ const gr = (t) => {
           ),
           400
         );
-      const l = await co({
+      const l = await lo({
         userAdapter: t.env.data.users,
         tenant_id: a.tenant.id,
         username: s.authParams.username,
@@ -30156,7 +30163,7 @@ const gr = (t) => {
     } catch (d) {
       let p;
       try {
-        p = await co({
+        p = await lo({
           userAdapter: t.env.data.users,
           tenant_id: a.tenant.id,
           username: c.authParams.username,
@@ -34481,7 +34488,7 @@ function yx(t) {
   }), e.get("/js/client.js", async (s) => s.text(ux, 200, {
     "content-type": "application/javascript; charset=utf-8"
   })), e.use(async (s, a) => {
-    const c = Po(s, t.dataAdapter), l = Sc(c, {
+    const c = To(s, t.dataAdapter), l = Sc(c, {
       defaultTtl: r,
       cacheEntities: [
         "tenants",
@@ -36215,7 +36222,7 @@ const GS = new W().openapi(
 function WS(t) {
   const e = new W();
   e.use(async (r, i) => {
-    const s = Po(r, t.dataAdapter), a = t.dataAdapter.cache || Ac({
+    const s = To(r, t.dataAdapter), a = t.dataAdapter.cache || Ac({
       defaultTtlSeconds: 0,
       // No TTL for request-scoped cache
       maxEntries: 100,
@@ -37829,7 +37836,7 @@ export {
   wl as connectionInsertSchema,
   Xi as connectionOptionsSchema,
   Ft as connectionSchema,
-  Oo as coordinatesSchema,
+  Po as coordinatesSchema,
   Ac as createInMemoryCache,
   k0 as customDomainInsertSchema,
   qn as customDomainSchema,
@@ -37852,7 +37859,7 @@ export {
   JW as init,
   HW as injectTailwindCSS,
   A0 as inviteInsertSchema,
-  hs as inviteSchema,
+  gs as inviteSchema,
   fw as inviteeSchema,
   pw as inviterSchema,
   hw as jwksKeySchema,
@@ -37899,7 +37906,7 @@ export {
   tw as startSchema,
   Z1 as stepNodeSchema,
   Wy as tailwindCss,
-  fs as tenantInsertSchema,
+  hs as tenantInsertSchema,
   Fn as tenantSchema,
   zK as tenantSettingsSchema,
   Aw as themeInsertSchema,