@absolutejs/auth 0.54.4 → 0.54.6

package/dist/cli/migrate.js

@@ -339,43 +339,74 @@ var apiKeysTable = pgTable2("auth_api_keys", {
   scopes: text("scopes").array().notNull()
 });
 
-// src/audit/postgresAuditStore.ts
-import { desc as desc3, eq as eq3, lt as lt2 } from "drizzle-orm";
+// src/agents/postgresStores.ts
+import { and as and2, desc as desc3, eq as eq3, gt, isNull, or } from "drizzle-orm";
 import { bigint as bigint3, jsonb, pgTable as pgTable3, varchar as varchar3 } from "drizzle-orm/pg-core";
 var ID_LENGTH3 = 255;
+var NAME_LENGTH = 255;
+var STATUS_LENGTH = 16;
+var agentDelegationsTable = pgTable3("auth_agent_delegations", {
+  agent_id: varchar3("agent_id", { length: ID_LENGTH3 }).notNull(),
+  authorization_details: jsonb("authorization_details").$type(),
+  created_at_ms: bigint3("created_at_ms", { mode: "number" }).notNull(),
+  delegation_id: varchar3("delegation_id", {
+    length: ID_LENGTH3
+  }).primaryKey(),
+  expires_at_ms: bigint3("expires_at_ms", { mode: "number" }),
+  organization_id: varchar3("organization_id", { length: ID_LENGTH3 }),
+  scopes: jsonb("scopes").$type().notNull().default([]),
+  status: varchar3("status", { length: STATUS_LENGTH }).$type().notNull(),
+  updated_at_ms: bigint3("updated_at_ms", { mode: "number" }).notNull(),
+  user_id: varchar3("user_id", { length: ID_LENGTH3 }).notNull()
+});
+var agentRegistrationsTable = pgTable3("auth_agent_registrations", {
+  agent_id: varchar3("agent_id", { length: ID_LENGTH3 }).primaryKey(),
+  allowed_scopes: jsonb("allowed_scopes").$type().notNull().default([]),
+  client_id: varchar3("client_id", { length: ID_LENGTH3 }).unique(),
+  created_at_ms: bigint3("created_at_ms", { mode: "number" }).notNull(),
+  metadata: jsonb("metadata").$type(),
+  name: varchar3("name", { length: NAME_LENGTH }).notNull(),
+  status: varchar3("status", { length: STATUS_LENGTH }).$type().notNull(),
+  updated_at_ms: bigint3("updated_at_ms", { mode: "number" }).notNull()
+});
+
+// src/audit/postgresAuditStore.ts
+import { desc as desc4, eq as eq4, lt as lt2 } from "drizzle-orm";
+import { bigint as bigint4, jsonb as jsonb2, pgTable as pgTable4, varchar as varchar4 } from "drizzle-orm/pg-core";
+var ID_LENGTH4 = 255;
 var IP_LENGTH = 64;
 var TYPE_LENGTH = 64;
-var auditEventsTable = pgTable3("auth_audit_events", {
-  at_ms: bigint3("at_ms", { mode: "number" }).notNull(),
-  id: varchar3("id", { length: ID_LENGTH3 }).primaryKey(),
-  ip: varchar3("ip", { length: IP_LENGTH }),
-  metadata_json: jsonb("metadata_json").$type(),
-  organization_id: varchar3("organization_id", { length: ID_LENGTH3 }),
-  type: varchar3("type", { length: TYPE_LENGTH }).notNull(),
-  user_id: varchar3("user_id", { length: ID_LENGTH3 })
+var auditEventsTable = pgTable4("auth_audit_events", {
+  at_ms: bigint4("at_ms", { mode: "number" }).notNull(),
+  id: varchar4("id", { length: ID_LENGTH4 }).primaryKey(),
+  ip: varchar4("ip", { length: IP_LENGTH }),
+  metadata_json: jsonb2("metadata_json").$type(),
+  organization_id: varchar4("organization_id", { length: ID_LENGTH4 }),
+  type: varchar4("type", { length: TYPE_LENGTH }).notNull(),
+  user_id: varchar4("user_id", { length: ID_LENGTH4 })
 });
 
 // src/credentials/postgresCredentialStore.ts
-import { eq as eq4 } from "drizzle-orm";
-import { bigint as bigint4, boolean as boolean2, pgTable as pgTable4, text as text2, varchar as varchar4 } from "drizzle-orm/pg-core";
+import { eq as eq5 } from "drizzle-orm";
+import { bigint as bigint5, boolean as boolean2, pgTable as pgTable5, text as text2, varchar as varchar5 } from "drizzle-orm/pg-core";
 var EMAIL_LENGTH = 320;
-var ID_LENGTH4 = 255;
-var STATUS_LENGTH = 32;
+var ID_LENGTH5 = 255;
+var STATUS_LENGTH2 = 32;
 var TOKEN_HASH_LENGTH = 255;
-var credentialsTable = pgTable4("auth_credentials", {
-  created_at_ms: bigint4("created_at_ms", { mode: "number" }).notNull(),
-  email: varchar4("email", { length: EMAIL_LENGTH }).primaryKey(),
+var credentialsTable = pgTable5("auth_credentials", {
+  created_at_ms: bigint5("created_at_ms", { mode: "number" }).notNull(),
+  email: varchar5("email", { length: EMAIL_LENGTH }).primaryKey(),
   email_verified: boolean2("email_verified").notNull().default(false),
-  organization_id: varchar4("organization_id", { length: ID_LENGTH4 }),
+  organization_id: varchar5("organization_id", { length: ID_LENGTH5 }),
   password_hash: text2("password_hash").notNull(),
-  status: varchar4("status", { length: STATUS_LENGTH }).notNull().default("active"),
-  updated_at_ms: bigint4("updated_at_ms", { mode: "number" }).notNull(),
-  user_id: varchar4("user_id", { length: ID_LENGTH4 })
+  status: varchar5("status", { length: STATUS_LENGTH2 }).notNull().default("active"),
+  updated_at_ms: bigint5("updated_at_ms", { mode: "number" }).notNull(),
+  user_id: varchar5("user_id", { length: ID_LENGTH5 })
 });
-var createTokenTable = (name) => pgTable4(name, {
-  email: varchar4("email", { length: EMAIL_LENGTH }).notNull(),
-  expires_at_ms: bigint4("expires_at_ms", { mode: "number" }).notNull(),
-  token_hash: varchar4("token_hash", {
+var createTokenTable = (name) => pgTable5(name, {
+  email: varchar5("email", { length: EMAIL_LENGTH }).notNull(),
+  expires_at_ms: bigint5("expires_at_ms", { mode: "number" }).notNull(),
+  token_hash: varchar5("token_hash", {
     length: TOKEN_HASH_LENGTH
   }).primaryKey()
 });
@@ -383,24 +414,24 @@ var credentialResetTokensTable = createTokenTable("auth_credential_reset_tokens"
 var credentialVerificationTokensTable = createTokenTable("auth_credential_verification_tokens");
 
 // src/fga/postgresStores.ts
-import { and as and2, eq as eq5 } from "drizzle-orm";
-import { pgTable as pgTable5, varchar as varchar5 } from "drizzle-orm/pg-core";
-var ID_LENGTH5 = 255;
-var warrantsTable = pgTable5("auth_fga_warrants", {
-  id: varchar5("id", { length: ID_LENGTH5 }).primaryKey(),
-  relation: varchar5("relation", { length: ID_LENGTH5 }).notNull(),
-  resource_id: varchar5("resource_id", { length: ID_LENGTH5 }).notNull(),
-  resource_type: varchar5("resource_type", { length: ID_LENGTH5 }).notNull(),
-  subject_id: varchar5("subject_id", { length: ID_LENGTH5 }).notNull(),
-  subject_relation: varchar5("subject_relation", { length: ID_LENGTH5 }),
-  subject_type: varchar5("subject_type", { length: ID_LENGTH5 }).notNull()
+import { and as and3, eq as eq6 } from "drizzle-orm";
+import { pgTable as pgTable6, varchar as varchar6 } from "drizzle-orm/pg-core";
+var ID_LENGTH6 = 255;
+var warrantsTable = pgTable6("auth_fga_warrants", {
+  id: varchar6("id", { length: ID_LENGTH6 }).primaryKey(),
+  relation: varchar6("relation", { length: ID_LENGTH6 }).notNull(),
+  resource_id: varchar6("resource_id", { length: ID_LENGTH6 }).notNull(),
+  resource_type: varchar6("resource_type", { length: ID_LENGTH6 }).notNull(),
+  subject_id: varchar6("subject_id", { length: ID_LENGTH6 }).notNull(),
+  subject_relation: varchar6("subject_relation", { length: ID_LENGTH6 }),
+  subject_type: varchar6("subject_type", { length: ID_LENGTH6 }).notNull()
 });
 
 // src/linkedProviders/neonStores.ts
 import { neon as neon3 } from "@neondatabase/serverless";
-import { desc as desc4, eq as eq6 } from "drizzle-orm";
+import { desc as desc5, eq as eq7 } from "drizzle-orm";
 import { drizzle as drizzle2 } from "drizzle-orm/neon-http";
-import { jsonb as jsonb2, pgTable as pgTable6, text as text3, timestamp, varchar as varchar6 } from "drizzle-orm/pg-core";
+import { jsonb as jsonb3, pgTable as pgTable7, text as text3, timestamp, varchar as varchar7 } from "drizzle-orm/pg-core";
 
 // node_modules/citra/dist/index.js
 var NUM_GENERATOR_BYTES = 32;
@@ -2165,6 +2196,7 @@ var providers = defineProviders({
     }
   },
   withings: {
+    accessTokenPath: ["body", "access_token"],
     authorizationUrl: "https://account.withings.com/oauth2_user/authorize2",
     isOIDC: false,
     isRefreshable: true,
@@ -2451,472 +2483,472 @@ var revocableProviderOptions = Object.keys(providers).filter(isRevocableProvider
 var scopeRequiredProviderOptions = Object.keys(providers).filter(isScopeRequiredProviderOption);
 
 // src/linkedProviders/neonStores.ts
-var linkedProviderBindingsTable = pgTable6("linked_provider_bindings", {
-  available_scopes: jsonb2("available_scopes").$type().notNull().default([]),
-  capabilities: jsonb2("capabilities").$type().default([]),
-  connector_provider: varchar6("connector_provider", { length: 64 }).notNull(),
+var linkedProviderBindingsTable = pgTable7("linked_provider_bindings", {
+  available_scopes: jsonb3("available_scopes").$type().notNull().default([]),
+  capabilities: jsonb3("capabilities").$type().default([]),
+  connector_provider: varchar7("connector_provider", { length: 64 }).notNull(),
   created_at: timestamp("created_at").notNull().defaultNow(),
-  email: varchar6("email", { length: 320 }),
-  external_account_id: varchar6("external_account_id", {
+  email: varchar7("email", { length: 320 }),
+  external_account_id: varchar7("external_account_id", {
     length: 255
   }).notNull(),
-  external_account_type: varchar6("external_account_type", {
+  external_account_type: varchar7("external_account_type", {
     length: 64
   }).notNull(),
-  grant_id: varchar6("grant_id", { length: 255 }).notNull(),
-  id: varchar6("id", { length: 255 }).primaryKey(),
-  label: varchar6("label", { length: 255 }),
-  metadata: jsonb2("metadata").$type().default({}),
-  status: varchar6("status", { length: 64 }).$type().notNull(),
+  grant_id: varchar7("grant_id", { length: 255 }).notNull(),
+  id: varchar7("id", { length: 255 }).primaryKey(),
+  label: varchar7("label", { length: 255 }),
+  metadata: jsonb3("metadata").$type().default({}),
+  status: varchar7("status", { length: 64 }).$type().notNull(),
   updated_at: timestamp("updated_at").notNull().defaultNow(),
-  username: varchar6("username", { length: 255 })
+  username: varchar7("username", { length: 255 })
 });
-var linkedProviderGrantsTable = pgTable6("linked_provider_grants", {
+var linkedProviderGrantsTable = pgTable7("linked_provider_grants", {
   access_token_ciphertext: text3("access_token_ciphertext"),
-  auth_provider_key: varchar6("auth_provider_key", { length: 64 }).notNull(),
+  auth_provider_key: varchar7("auth_provider_key", { length: 64 }).notNull(),
   created_at: timestamp("created_at").notNull().defaultNow(),
   expires_at: timestamp("expires_at"),
-  granted_scopes: jsonb2("granted_scopes").$type().notNull().default([]),
-  id: varchar6("id", { length: 255 }).primaryKey(),
+  granted_scopes: jsonb3("granted_scopes").$type().notNull().default([]),
+  id: varchar7("id", { length: 255 }).primaryKey(),
   last_refresh_error: text3("last_refresh_error"),
   last_refreshed_at: timestamp("last_refreshed_at"),
-  metadata: jsonb2("metadata").$type().default({}),
-  owner_ref: varchar6("owner_ref", { length: 255 }).notNull(),
-  provider_family: varchar6("provider_family", { length: 64 }).notNull(),
-  provider_subject: varchar6("provider_subject", { length: 255 }).notNull(),
+  metadata: jsonb3("metadata").$type().default({}),
+  owner_ref: varchar7("owner_ref", { length: 255 }).notNull(),
+  provider_family: varchar7("provider_family", { length: 64 }).notNull(),
+  provider_subject: varchar7("provider_subject", { length: 255 }).notNull(),
   refresh_token_ciphertext: text3("refresh_token_ciphertext"),
-  status: varchar6("status", { length: 64 }).$type().notNull(),
-  token_type: varchar6("token_type", { length: 64 }),
+  status: varchar7("status", { length: 64 }).$type().notNull(),
+  token_type: varchar7("token_type", { length: 64 }),
   updated_at: timestamp("updated_at").notNull().defaultNow()
 });
 
 // src/lockout/postgresLockoutStore.ts
-import { eq as eq7 } from "drizzle-orm";
-import { bigint as bigint5, integer, pgTable as pgTable7, varchar as varchar7 } from "drizzle-orm/pg-core";
+import { eq as eq8 } from "drizzle-orm";
+import { bigint as bigint6, integer, pgTable as pgTable8, varchar as varchar8 } from "drizzle-orm/pg-core";
 var KEY_LENGTH = 320;
-var lockoutsTable = pgTable7("auth_lockouts", {
+var lockoutsTable = pgTable8("auth_lockouts", {
   failed_attempts: integer("failed_attempts").notNull().default(0),
-  key: varchar7("key", { length: KEY_LENGTH }).primaryKey(),
-  locked_until_ms: bigint5("locked_until_ms", { mode: "number" }),
-  window_started_at_ms: bigint5("window_started_at_ms", {
+  key: varchar8("key", { length: KEY_LENGTH }).primaryKey(),
+  locked_until_ms: bigint6("locked_until_ms", { mode: "number" }),
+  window_started_at_ms: bigint6("window_started_at_ms", {
     mode: "number"
   }).notNull()
 });
 
 // src/mfa/postgresMfaStore.ts
-import { eq as eq8 } from "drizzle-orm";
+import { eq as eq9 } from "drizzle-orm";
 import {
-  bigint as bigint6,
+  bigint as bigint7,
   boolean as boolean3,
-  jsonb as jsonb3,
-  pgTable as pgTable8,
+  jsonb as jsonb4,
+  pgTable as pgTable9,
   smallint,
   text as text4,
-  varchar as varchar8
+  varchar as varchar9
 } from "drizzle-orm/pg-core";
-var ID_LENGTH6 = 255;
+var ID_LENGTH7 = 255;
 var PHONE_LENGTH = 20;
-var mfaEnrollmentsTable = pgTable8("auth_mfa_enrollments", {
-  backup_code_hashes: jsonb3("backup_code_hashes").$type().notNull().default([]),
-  created_at_ms: bigint6("created_at_ms", { mode: "number" }).notNull(),
-  last_used_at_ms: bigint6("last_used_at_ms", { mode: "number" }),
+var mfaEnrollmentsTable = pgTable9("auth_mfa_enrollments", {
+  backup_code_hashes: jsonb4("backup_code_hashes").$type().notNull().default([]),
+  created_at_ms: bigint7("created_at_ms", { mode: "number" }).notNull(),
+  last_used_at_ms: bigint7("last_used_at_ms", { mode: "number" }),
   sms_failed_attempts: smallint("sms_failed_attempts").notNull().default(0),
-  sms_pending_code_expires_at_ms: bigint6("sms_pending_code_expires_at_ms", {
+  sms_pending_code_expires_at_ms: bigint7("sms_pending_code_expires_at_ms", {
     mode: "number"
   }),
   sms_pending_code_hash: text4("sms_pending_code_hash"),
-  sms_phone: varchar8("sms_phone", { length: PHONE_LENGTH }),
+  sms_phone: varchar9("sms_phone", { length: PHONE_LENGTH }),
   sms_verified: boolean3("sms_verified").notNull().default(false),
   totp_failed_attempts: smallint("totp_failed_attempts").notNull().default(0),
   totp_secret_ciphertext: text4("totp_secret_ciphertext"),
   totp_verified: boolean3("totp_verified").notNull().default(false),
-  updated_at_ms: bigint6("updated_at_ms", { mode: "number" }).notNull(),
-  user_id: varchar8("user_id", { length: ID_LENGTH6 }).primaryKey()
+  updated_at_ms: bigint7("updated_at_ms", { mode: "number" }).notNull(),
+  user_id: varchar9("user_id", { length: ID_LENGTH7 }).primaryKey()
 });
 
 // src/oidc/postgresStores.ts
-import { and as and3, desc as desc5, eq as eq9, gt, lt as lt3 } from "drizzle-orm";
+import { and as and4, desc as desc6, eq as eq10, gt as gt2, lt as lt3 } from "drizzle-orm";
 import {
-  bigint as bigint7,
+  bigint as bigint8,
   boolean as boolean4,
-  jsonb as jsonb4,
-  pgTable as pgTable9,
+  jsonb as jsonb5,
+  pgTable as pgTable10,
   text as text5,
-  varchar as varchar9
+  varchar as varchar10
 } from "drizzle-orm/pg-core";
 var URL_LENGTH = 2048;
-var ID_LENGTH7 = 255;
-var oauthBackchannelAuthRequestsTable = pgTable9("auth_oauth_backchannel_auth_requests", {
-  auth_req_id: varchar9("auth_req_id", { length: ID_LENGTH7 }).primaryKey(),
+var ID_LENGTH8 = 255;
+var oauthBackchannelAuthRequestsTable = pgTable10("auth_oauth_backchannel_auth_requests", {
+  auth_req_id: varchar10("auth_req_id", { length: ID_LENGTH8 }).primaryKey(),
   binding_message: text5("binding_message"),
-  client_id: varchar9("client_id", { length: ID_LENGTH7 }).notNull(),
-  created_at_ms: bigint7("created_at_ms", { mode: "number" }).notNull(),
-  expires_at_ms: bigint7("expires_at_ms", { mode: "number" }).notNull(),
-  interval_seconds: bigint7("interval_seconds", {
+  client_id: varchar10("client_id", { length: ID_LENGTH8 }).notNull(),
+  created_at_ms: bigint8("created_at_ms", { mode: "number" }).notNull(),
+  expires_at_ms: bigint8("expires_at_ms", { mode: "number" }).notNull(),
+  interval_seconds: bigint8("interval_seconds", {
     mode: "number"
   }).notNull(),
-  last_polled_at_ms: bigint7("last_polled_at_ms", { mode: "number" }),
+  last_polled_at_ms: bigint8("last_polled_at_ms", { mode: "number" }),
   scopes: text5("scopes").array().notNull(),
-  status: varchar9("status", { length: 16 }).notNull(),
-  user_sub: varchar9("user_sub", { length: ID_LENGTH7 })
+  status: varchar10("status", { length: 16 }).notNull(),
+  user_sub: varchar10("user_sub", { length: ID_LENGTH8 })
 });
-var oauthClientAssertionJtisTable = pgTable9("auth_oauth_client_assertion_jtis", {
-  client_id: varchar9("client_id", { length: ID_LENGTH7 }).notNull(),
-  composite_key: varchar9("composite_key", {
-    length: ID_LENGTH7
+var oauthClientAssertionJtisTable = pgTable10("auth_oauth_client_assertion_jtis", {
+  client_id: varchar10("client_id", { length: ID_LENGTH8 }).notNull(),
+  composite_key: varchar10("composite_key", {
+    length: ID_LENGTH8
   }).primaryKey(),
-  expires_at_ms: bigint7("expires_at_ms", { mode: "number" }).notNull(),
-  jti: varchar9("jti", { length: ID_LENGTH7 }).notNull()
+  expires_at_ms: bigint8("expires_at_ms", { mode: "number" }).notNull(),
+  jti: varchar10("jti", { length: ID_LENGTH8 }).notNull()
 });
-var oauthClientRegistrationTokensTable = pgTable9("auth_oauth_client_registration_tokens", {
-  client_id: varchar9("client_id", { length: ID_LENGTH7 }).notNull(),
-  created_at_ms: bigint7("created_at_ms", { mode: "number" }).notNull(),
-  token_hash: varchar9("token_hash", { length: ID_LENGTH7 }).primaryKey()
+var oauthClientRegistrationTokensTable = pgTable10("auth_oauth_client_registration_tokens", {
+  client_id: varchar10("client_id", { length: ID_LENGTH8 }).notNull(),
+  created_at_ms: bigint8("created_at_ms", { mode: "number" }).notNull(),
+  token_hash: varchar10("token_hash", { length: ID_LENGTH8 }).primaryKey()
 });
-var oauthClientsTable = pgTable9("auth_oauth_clients", {
-  backchannel_logout_uri: varchar9("backchannel_logout_uri", {
+var oauthClientsTable = pgTable10("auth_oauth_clients", {
+  backchannel_logout_uri: varchar10("backchannel_logout_uri", {
     length: URL_LENGTH
   }),
-  client_id: varchar9("client_id", { length: ID_LENGTH7 }).primaryKey(),
-  hashed_secret: varchar9("hashed_secret", { length: ID_LENGTH7 }),
-  jwks_json: jsonb4("jwks_json").$type(),
-  jwks_uri: varchar9("jwks_uri", { length: URL_LENGTH }),
-  name: varchar9("name", { length: ID_LENGTH7 }).notNull(),
+  client_id: varchar10("client_id", { length: ID_LENGTH8 }).primaryKey(),
+  hashed_secret: varchar10("hashed_secret", { length: ID_LENGTH8 }),
+  jwks_json: jsonb5("jwks_json").$type(),
+  jwks_uri: varchar10("jwks_uri", { length: URL_LENGTH }),
+  name: varchar10("name", { length: ID_LENGTH8 }).notNull(),
   post_logout_redirect_uris: text5("post_logout_redirect_uris").array(),
   redirect_uris: text5("redirect_uris").array().notNull(),
   require_pushed_authorization_requests: boolean4("require_pushed_authorization_requests"),
   require_signed_request_object: boolean4("require_signed_request_object"),
   scopes: text5("scopes").array().notNull()
 });
-var oauthCodesTable = pgTable9("auth_oauth_codes", {
-  acr: varchar9("acr", { length: ID_LENGTH7 }),
-  claims_json: jsonb4("claims_json").$type(),
-  client_id: varchar9("client_id", { length: ID_LENGTH7 }).notNull(),
-  code_challenge: varchar9("code_challenge", { length: ID_LENGTH7 }).notNull(),
-  code_hash: varchar9("code_hash", { length: ID_LENGTH7 }).primaryKey(),
-  created_at_ms: bigint7("created_at_ms", { mode: "number" }).notNull(),
-  dpop_jkt: varchar9("dpop_jkt", { length: ID_LENGTH7 }),
-  expires_at_ms: bigint7("expires_at_ms", { mode: "number" }).notNull(),
-  nonce: varchar9("nonce", { length: ID_LENGTH7 }),
-  redirect_uri: varchar9("redirect_uri", { length: ID_LENGTH7 }).notNull(),
+var oauthCodesTable = pgTable10("auth_oauth_codes", {
+  acr: varchar10("acr", { length: ID_LENGTH8 }),
+  claims_json: jsonb5("claims_json").$type(),
+  client_id: varchar10("client_id", { length: ID_LENGTH8 }).notNull(),
+  code_challenge: varchar10("code_challenge", { length: ID_LENGTH8 }).notNull(),
+  code_hash: varchar10("code_hash", { length: ID_LENGTH8 }).primaryKey(),
+  created_at_ms: bigint8("created_at_ms", { mode: "number" }).notNull(),
+  dpop_jkt: varchar10("dpop_jkt", { length: ID_LENGTH8 }),
+  expires_at_ms: bigint8("expires_at_ms", { mode: "number" }).notNull(),
+  nonce: varchar10("nonce", { length: ID_LENGTH8 }),
+  redirect_uri: varchar10("redirect_uri", { length: ID_LENGTH8 }).notNull(),
   scopes: text5("scopes").array().notNull(),
-  user_id: varchar9("user_id", { length: ID_LENGTH7 }).notNull()
+  user_id: varchar10("user_id", { length: ID_LENGTH8 }).notNull()
 });
-var oauthDeviceAuthorizationsTable = pgTable9("auth_oauth_device_authorizations", {
-  client_id: varchar9("client_id", { length: ID_LENGTH7 }).notNull(),
-  created_at_ms: bigint7("created_at_ms", { mode: "number" }).notNull(),
-  device_code_hash: varchar9("device_code_hash", {
-    length: ID_LENGTH7
+var oauthDeviceAuthorizationsTable = pgTable10("auth_oauth_device_authorizations", {
+  client_id: varchar10("client_id", { length: ID_LENGTH8 }).notNull(),
+  created_at_ms: bigint8("created_at_ms", { mode: "number" }).notNull(),
+  device_code_hash: varchar10("device_code_hash", {
+    length: ID_LENGTH8
   }).primaryKey(),
-  expires_at_ms: bigint7("expires_at_ms", { mode: "number" }).notNull(),
-  interval_seconds: bigint7("interval_seconds", {
+  expires_at_ms: bigint8("expires_at_ms", { mode: "number" }).notNull(),
+  interval_seconds: bigint8("interval_seconds", {
     mode: "number"
   }).notNull(),
   scopes: text5("scopes").array().notNull(),
-  status: varchar9("status", { length: 16 }).notNull(),
-  user_code: varchar9("user_code", { length: 16 }).notNull().unique(),
-  user_sub: varchar9("user_sub", { length: ID_LENGTH7 })
+  status: varchar10("status", { length: 16 }).notNull(),
+  user_code: varchar10("user_code", { length: 16 }).notNull().unique(),
+  user_sub: varchar10("user_sub", { length: ID_LENGTH8 })
 });
-var oauthInitialAccessTokensTable = pgTable9("auth_oauth_initial_access_tokens", {
-  token_hash: varchar9("token_hash", { length: ID_LENGTH7 }).primaryKey()
+var oauthInitialAccessTokensTable = pgTable10("auth_oauth_initial_access_tokens", {
+  token_hash: varchar10("token_hash", { length: ID_LENGTH8 }).primaryKey()
 });
-var oauthLogoutDeliveriesTable = pgTable9("auth_oauth_logout_deliveries", {
-  attempts: bigint7("attempts", { mode: "number" }).notNull(),
-  client_id: varchar9("client_id", { length: ID_LENGTH7 }).notNull(),
-  created_at_ms: bigint7("created_at_ms", { mode: "number" }).notNull(),
-  endpoint_url: varchar9("endpoint_url", { length: URL_LENGTH }).notNull(),
-  id: varchar9("id", { length: ID_LENGTH7 }).primaryKey(),
+var oauthLogoutDeliveriesTable = pgTable10("auth_oauth_logout_deliveries", {
+  attempts: bigint8("attempts", { mode: "number" }).notNull(),
+  client_id: varchar10("client_id", { length: ID_LENGTH8 }).notNull(),
+  created_at_ms: bigint8("created_at_ms", { mode: "number" }).notNull(),
+  endpoint_url: varchar10("endpoint_url", { length: URL_LENGTH }).notNull(),
+  id: varchar10("id", { length: ID_LENGTH8 }).primaryKey(),
   last_error: text5("last_error"),
-  last_status: bigint7("last_status", { mode: "number" }),
+  last_status: bigint8("last_status", { mode: "number" }),
   logout_token: text5("logout_token").notNull(),
-  user_id: varchar9("user_id", { length: ID_LENGTH7 }).notNull()
+  user_id: varchar10("user_id", { length: ID_LENGTH8 }).notNull()
 });
-var oauthPushedAuthorizationRequestsTable = pgTable9("auth_oauth_pushed_authorization_requests", {
-  client_id: varchar9("client_id", { length: ID_LENGTH7 }).notNull(),
-  created_at_ms: bigint7("created_at_ms", { mode: "number" }).notNull(),
-  expires_at_ms: bigint7("expires_at_ms", { mode: "number" }).notNull(),
-  params_json: jsonb4("params_json").$type().notNull(),
-  request_uri_hash: varchar9("request_uri_hash", {
-    length: ID_LENGTH7
+var oauthPushedAuthorizationRequestsTable = pgTable10("auth_oauth_pushed_authorization_requests", {
+  client_id: varchar10("client_id", { length: ID_LENGTH8 }).notNull(),
+  created_at_ms: bigint8("created_at_ms", { mode: "number" }).notNull(),
+  expires_at_ms: bigint8("expires_at_ms", { mode: "number" }).notNull(),
+  params_json: jsonb5("params_json").$type().notNull(),
+  request_uri_hash: varchar10("request_uri_hash", {
+    length: ID_LENGTH8
   }).primaryKey()
 });
-var oauthRefreshTokensTable = pgTable9("auth_oauth_refresh_tokens", {
-  acr: varchar9("acr", { length: ID_LENGTH7 }),
-  claims_json: jsonb4("claims_json").$type(),
-  client_id: varchar9("client_id", { length: ID_LENGTH7 }).notNull(),
-  created_at_ms: bigint7("created_at_ms", { mode: "number" }).notNull(),
-  dpop_jkt: varchar9("dpop_jkt", { length: ID_LENGTH7 }),
-  expires_at_ms: bigint7("expires_at_ms", { mode: "number" }).notNull(),
+var oauthRefreshTokensTable = pgTable10("auth_oauth_refresh_tokens", {
+  acr: varchar10("acr", { length: ID_LENGTH8 }),
+  claims_json: jsonb5("claims_json").$type(),
+  client_id: varchar10("client_id", { length: ID_LENGTH8 }).notNull(),
+  created_at_ms: bigint8("created_at_ms", { mode: "number" }).notNull(),
+  dpop_jkt: varchar10("dpop_jkt", { length: ID_LENGTH8 }),
+  expires_at_ms: bigint8("expires_at_ms", { mode: "number" }).notNull(),
   scopes: text5("scopes").array().notNull(),
-  token_hash: varchar9("token_hash", { length: ID_LENGTH7 }).primaryKey(),
-  user_id: varchar9("user_id", { length: ID_LENGTH7 }).notNull()
+  token_hash: varchar10("token_hash", { length: ID_LENGTH8 }).primaryKey(),
+  user_id: varchar10("user_id", { length: ID_LENGTH8 }).notNull()
 });
 
 // src/organizations/postgresOrganizationStore.ts
-import { and as and4, desc as desc6, eq as eq10 } from "drizzle-orm";
+import { and as and5, desc as desc7, eq as eq11 } from "drizzle-orm";
 import {
-  bigint as bigint8,
-  jsonb as jsonb5,
-  pgTable as pgTable10,
+  bigint as bigint9,
+  jsonb as jsonb6,
+  pgTable as pgTable11,
   primaryKey as primaryKey2,
-  varchar as varchar10
+  varchar as varchar11
 } from "drizzle-orm/pg-core";
-var ID_LENGTH8 = 255;
-var NAME_LENGTH = 255;
+var ID_LENGTH9 = 255;
+var NAME_LENGTH2 = 255;
 var STATE_LENGTH = 16;
-var organizationInvitationsTable = pgTable10("auth_organization_invitations", {
-  accepted_at_ms: bigint8("accepted_at_ms", { mode: "number" }),
-  created_at_ms: bigint8("created_at_ms", { mode: "number" }).notNull(),
-  email: varchar10("email", { length: ID_LENGTH8 }).notNull(),
-  expires_at_ms: bigint8("expires_at_ms", { mode: "number" }).notNull(),
-  invitation_id: varchar10("invitation_id", {
-    length: ID_LENGTH8
+var organizationInvitationsTable = pgTable11("auth_organization_invitations", {
+  accepted_at_ms: bigint9("accepted_at_ms", { mode: "number" }),
+  created_at_ms: bigint9("created_at_ms", { mode: "number" }).notNull(),
+  email: varchar11("email", { length: ID_LENGTH9 }).notNull(),
+  expires_at_ms: bigint9("expires_at_ms", { mode: "number" }).notNull(),
+  invitation_id: varchar11("invitation_id", {
+    length: ID_LENGTH9
   }).primaryKey(),
-  inviter_user_id: varchar10("inviter_user_id", { length: ID_LENGTH8 }),
-  organization_id: varchar10("organization_id", {
-    length: ID_LENGTH8
+  inviter_user_id: varchar11("inviter_user_id", { length: ID_LENGTH9 }),
+  organization_id: varchar11("organization_id", {
+    length: ID_LENGTH9
   }).notNull(),
-  roles: jsonb5("roles").$type().notNull().default([]),
-  state: varchar10("state", { length: STATE_LENGTH }).$type().notNull().default("pending"),
-  token_hash: varchar10("token_hash", { length: ID_LENGTH8 }).notNull().unique()
+  roles: jsonb6("roles").$type().notNull().default([]),
+  state: varchar11("state", { length: STATE_LENGTH }).$type().notNull().default("pending"),
+  token_hash: varchar11("token_hash", { length: ID_LENGTH9 }).notNull().unique()
 });
-var organizationMembershipsTable = pgTable10("auth_organization_memberships", {
-  created_at_ms: bigint8("created_at_ms", { mode: "number" }).notNull(),
-  organization_id: varchar10("organization_id", {
-    length: ID_LENGTH8
+var organizationMembershipsTable = pgTable11("auth_organization_memberships", {
+  created_at_ms: bigint9("created_at_ms", { mode: "number" }).notNull(),
+  organization_id: varchar11("organization_id", {
+    length: ID_LENGTH9
   }).notNull(),
-  roles: jsonb5("roles").$type().notNull().default([]),
-  status: varchar10("status", { length: STATE_LENGTH }).$type().notNull().default("active"),
-  updated_at_ms: bigint8("updated_at_ms", { mode: "number" }).notNull(),
-  user_id: varchar10("user_id", { length: ID_LENGTH8 }).notNull()
+  roles: jsonb6("roles").$type().notNull().default([]),
+  status: varchar11("status", { length: STATE_LENGTH }).$type().notNull().default("active"),
+  updated_at_ms: bigint9("updated_at_ms", { mode: "number" }).notNull(),
+  user_id: varchar11("user_id", { length: ID_LENGTH9 }).notNull()
 }, (table) => [primaryKey2({ columns: [table.organization_id, table.user_id] })]);
-var organizationsTable = pgTable10("auth_organizations", {
-  created_at_ms: bigint8("created_at_ms", { mode: "number" }).notNull(),
-  metadata: jsonb5("metadata").$type(),
-  name: varchar10("name", { length: NAME_LENGTH }).notNull(),
-  organization_id: varchar10("organization_id", {
-    length: ID_LENGTH8
+var organizationsTable = pgTable11("auth_organizations", {
+  created_at_ms: bigint9("created_at_ms", { mode: "number" }).notNull(),
+  metadata: jsonb6("metadata").$type(),
+  name: varchar11("name", { length: NAME_LENGTH2 }).notNull(),
+  organization_id: varchar11("organization_id", {
+    length: ID_LENGTH9
   }).primaryKey(),
-  updated_at_ms: bigint8("updated_at_ms", { mode: "number" }).notNull()
+  updated_at_ms: bigint9("updated_at_ms", { mode: "number" }).notNull()
 });
 
 // src/passwordless/postgresPasswordlessTokenStore.ts
-import { eq as eq11 } from "drizzle-orm";
-import { bigint as bigint9, pgTable as pgTable11, varchar as varchar11 } from "drizzle-orm/pg-core";
-var ID_LENGTH9 = 255;
-var passwordlessTokensTable = pgTable11("auth_passwordless_tokens", {
-  email: varchar11("email", { length: ID_LENGTH9 }).notNull(),
-  expires_at_ms: bigint9("expires_at_ms", { mode: "number" }).notNull(),
-  token_hash: varchar11("token_hash", { length: ID_LENGTH9 }).primaryKey()
-});
-
-// src/portal/postgresSetupSessionStore.ts
 import { eq as eq12 } from "drizzle-orm";
-import { bigint as bigint10, jsonb as jsonb6, pgTable as pgTable12, varchar as varchar12 } from "drizzle-orm/pg-core";
+import { bigint as bigint10, pgTable as pgTable12, varchar as varchar12 } from "drizzle-orm/pg-core";
 var ID_LENGTH10 = 255;
-var setupSessionsTable = pgTable12("auth_setup_sessions", {
-  capabilities: jsonb6("capabilities").$type().notNull().default([]),
-  created_at_ms: bigint10("created_at_ms", { mode: "number" }).notNull(),
-  created_by: varchar12("created_by", { length: ID_LENGTH10 }),
+var passwordlessTokensTable = pgTable12("auth_passwordless_tokens", {
+  email: varchar12("email", { length: ID_LENGTH10 }).notNull(),
   expires_at_ms: bigint10("expires_at_ms", { mode: "number" }).notNull(),
-  organization_id: varchar12("organization_id", {
-    length: ID_LENGTH10
+  token_hash: varchar12("token_hash", { length: ID_LENGTH10 }).primaryKey()
+});
+
+// src/portal/postgresSetupSessionStore.ts
+import { eq as eq13 } from "drizzle-orm";
+import { bigint as bigint11, jsonb as jsonb7, pgTable as pgTable13, varchar as varchar13 } from "drizzle-orm/pg-core";
+var ID_LENGTH11 = 255;
+var setupSessionsTable = pgTable13("auth_setup_sessions", {
+  capabilities: jsonb7("capabilities").$type().notNull().default([]),
+  created_at_ms: bigint11("created_at_ms", { mode: "number" }).notNull(),
+  created_by: varchar13("created_by", { length: ID_LENGTH11 }),
+  expires_at_ms: bigint11("expires_at_ms", { mode: "number" }).notNull(),
+  organization_id: varchar13("organization_id", {
+    length: ID_LENGTH11
   }).notNull(),
-  setup_session_id: varchar12("setup_session_id", {
-    length: ID_LENGTH10
+  setup_session_id: varchar13("setup_session_id", {
+    length: ID_LENGTH11
   }).primaryKey(),
-  token_hash: varchar12("token_hash", { length: ID_LENGTH10 }).notNull().unique()
+  token_hash: varchar13("token_hash", { length: ID_LENGTH11 }).notNull().unique()
 });
 
 // src/roles/postgresRoleStore.ts
-import { and as and5, eq as eq13 } from "drizzle-orm";
+import { and as and6, eq as eq14 } from "drizzle-orm";
 import {
-  bigint as bigint11,
-  jsonb as jsonb7,
-  pgTable as pgTable13,
+  bigint as bigint12,
+  jsonb as jsonb8,
+  pgTable as pgTable14,
   primaryKey as primaryKey3,
-  varchar as varchar13
+  varchar as varchar14
 } from "drizzle-orm/pg-core";
-var ID_LENGTH11 = 255;
+var ID_LENGTH12 = 255;
 var SLUG_LENGTH = 128;
 var GLOBAL_SCOPE = "";
-var rolesTable = pgTable13("auth_roles", {
-  created_at_ms: bigint11("created_at_ms", { mode: "number" }).notNull(),
-  organization_id: varchar13("organization_id", { length: ID_LENGTH11 }).notNull().default(GLOBAL_SCOPE),
-  permissions: jsonb7("permissions").$type().notNull().default([]),
-  slug: varchar13("slug", { length: SLUG_LENGTH }).notNull(),
-  updated_at_ms: bigint11("updated_at_ms", { mode: "number" }).notNull()
+var rolesTable = pgTable14("auth_roles", {
+  created_at_ms: bigint12("created_at_ms", { mode: "number" }).notNull(),
+  organization_id: varchar14("organization_id", { length: ID_LENGTH12 }).notNull().default(GLOBAL_SCOPE),
+  permissions: jsonb8("permissions").$type().notNull().default([]),
+  slug: varchar14("slug", { length: SLUG_LENGTH }).notNull(),
+  updated_at_ms: bigint12("updated_at_ms", { mode: "number" }).notNull()
 }, (table) => [primaryKey3({ columns: [table.organization_id, table.slug] })]);
 
 // src/scim/postgresScimTokenStore.ts
-import { desc as desc7, eq as eq14 } from "drizzle-orm";
-import { bigint as bigint12, pgTable as pgTable14, varchar as varchar14 } from "drizzle-orm/pg-core";
-var ID_LENGTH12 = 255;
-var scimTokensTable = pgTable14("auth_scim_tokens", {
-  created_at_ms: bigint12("created_at_ms", { mode: "number" }).notNull(),
-  hashed_token: varchar14("hashed_token", { length: ID_LENGTH12 }).notNull(),
-  last_used_at_ms: bigint12("last_used_at_ms", { mode: "number" }),
-  organization_id: varchar14("organization_id", {
-    length: ID_LENGTH12
+import { desc as desc8, eq as eq15 } from "drizzle-orm";
+import { bigint as bigint13, pgTable as pgTable15, varchar as varchar15 } from "drizzle-orm/pg-core";
+var ID_LENGTH13 = 255;
+var scimTokensTable = pgTable15("auth_scim_tokens", {
+  created_at_ms: bigint13("created_at_ms", { mode: "number" }).notNull(),
+  hashed_token: varchar15("hashed_token", { length: ID_LENGTH13 }).notNull(),
+  last_used_at_ms: bigint13("last_used_at_ms", { mode: "number" }),
+  organization_id: varchar15("organization_id", {
+    length: ID_LENGTH13
   }).notNull(),
-  token_id: varchar14("token_id", { length: ID_LENGTH12 }).primaryKey()
+  token_id: varchar15("token_id", { length: ID_LENGTH13 }).primaryKey()
 });
 
 // src/session/neonStore.ts
 import { neon as neon4 } from "@neondatabase/serverless";
-import { eq as eq15, lt as lt4 } from "drizzle-orm";
+import { eq as eq16, lt as lt4 } from "drizzle-orm";
 import { drizzle as drizzle3 } from "drizzle-orm/neon-http";
 import {
-  bigint as bigint13,
+  bigint as bigint14,
   index,
-  jsonb as jsonb8,
-  pgTable as pgTable15,
+  jsonb as jsonb9,
+  pgTable as pgTable16,
   text as text6,
   timestamp as timestamp2,
-  varchar as varchar15
+  varchar as varchar16
 } from "drizzle-orm/pg-core";
-var authSessionsTable = pgTable15("auth_sessions", {
+var authSessionsTable = pgTable16("auth_sessions", {
   access_token: text6("access_token"),
-  authenticated_at_ms: bigint13("authenticated_at_ms", { mode: "number" }),
+  authenticated_at_ms: bigint14("authenticated_at_ms", { mode: "number" }),
   created_at: timestamp2("created_at").notNull().defaultNow(),
-  expires_at_ms: bigint13("expires_at_ms", { mode: "number" }).notNull(),
-  id: varchar15("id", { length: 255 }).primaryKey(),
+  expires_at_ms: bigint14("expires_at_ms", { mode: "number" }).notNull(),
+  id: varchar16("id", { length: 255 }).primaryKey(),
   refresh_token: text6("refresh_token"),
   updated_at: timestamp2("updated_at").notNull().defaultNow(),
-  user_json: jsonb8("user_json").$type().notNull()
+  user_json: jsonb9("user_json").$type().notNull()
 }, (table) => [index("auth_sessions_expires_at_idx").on(table.expires_at_ms)]);
-var authUnregisteredSessionsTable = pgTable15("auth_unregistered_sessions", {
+var authUnregisteredSessionsTable = pgTable16("auth_unregistered_sessions", {
   access_token: text6("access_token"),
   created_at: timestamp2("created_at").notNull().defaultNow(),
-  expires_at_ms: bigint13("expires_at_ms", { mode: "number" }).notNull(),
-  id: varchar15("id", { length: 255 }).primaryKey(),
+  expires_at_ms: bigint14("expires_at_ms", { mode: "number" }).notNull(),
+  id: varchar16("id", { length: 255 }).primaryKey(),
   refresh_token: text6("refresh_token"),
-  session_information_json: jsonb8("session_information_json").$type(),
+  session_information_json: jsonb9("session_information_json").$type(),
   updated_at: timestamp2("updated_at").notNull().defaultNow(),
-  user_identity_json: jsonb8("user_identity_json").$type()
+  user_identity_json: jsonb9("user_identity_json").$type()
 }, (table) => [
   index("auth_unregistered_sessions_expires_at_idx").on(table.expires_at_ms)
 ]);
 
 // src/sso/postgresSamlServiceProviderStore.ts
-import { eq as eq16 } from "drizzle-orm";
-import { bigint as bigint14, pgTable as pgTable16, text as text7, varchar as varchar16 } from "drizzle-orm/pg-core";
-var ID_LENGTH13 = 255;
+import { eq as eq17 } from "drizzle-orm";
+import { bigint as bigint15, pgTable as pgTable17, text as text7, varchar as varchar17 } from "drizzle-orm/pg-core";
+var ID_LENGTH14 = 255;
 var URL_LENGTH2 = 2048;
-var samlServiceProvidersTable = pgTable16("auth_saml_service_providers", {
-  acs_url: varchar16("acs_url", { length: URL_LENGTH2 }).notNull(),
-  created_at_ms: bigint14("created_at_ms", { mode: "number" }).notNull(),
-  entity_id: varchar16("entity_id", { length: URL_LENGTH2 }).primaryKey(),
-  name_id_format: varchar16("name_id_format", { length: ID_LENGTH13 }),
+var samlServiceProvidersTable = pgTable17("auth_saml_service_providers", {
+  acs_url: varchar17("acs_url", { length: URL_LENGTH2 }).notNull(),
+  created_at_ms: bigint15("created_at_ms", { mode: "number" }).notNull(),
+  entity_id: varchar17("entity_id", { length: URL_LENGTH2 }).primaryKey(),
+  name_id_format: varchar17("name_id_format", { length: ID_LENGTH14 }),
   signing_cert: text7("signing_cert"),
-  updated_at_ms: bigint14("updated_at_ms", { mode: "number" }).notNull()
+  updated_at_ms: bigint15("updated_at_ms", { mode: "number" }).notNull()
 });
 
 // src/sso/postgresSsoConnectionStore.ts
-import { and as and6, desc as desc8, eq as eq17 } from "drizzle-orm";
-import { bigint as bigint15, boolean as boolean5, jsonb as jsonb9, pgTable as pgTable17, varchar as varchar17 } from "drizzle-orm/pg-core";
-var ID_LENGTH14 = 255;
+import { and as and7, desc as desc9, eq as eq18 } from "drizzle-orm";
+import { bigint as bigint16, boolean as boolean5, jsonb as jsonb10, pgTable as pgTable18, varchar as varchar18 } from "drizzle-orm/pg-core";
+var ID_LENGTH15 = 255;
 var TYPE_LENGTH2 = 16;
-var ssoConnectionsTable = pgTable17("auth_sso_connections", {
-  config: jsonb9("config").$type().notNull(),
-  connection_id: varchar17("connection_id", { length: ID_LENGTH14 }).primaryKey(),
-  created_at_ms: bigint15("created_at_ms", { mode: "number" }).notNull(),
+var ssoConnectionsTable = pgTable18("auth_sso_connections", {
+  config: jsonb10("config").$type().notNull(),
+  connection_id: varchar18("connection_id", { length: ID_LENGTH15 }).primaryKey(),
+  created_at_ms: bigint16("created_at_ms", { mode: "number" }).notNull(),
   enabled: boolean5("enabled").notNull().default(true),
-  organization_id: varchar17("organization_id", {
-    length: ID_LENGTH14
+  organization_id: varchar18("organization_id", {
+    length: ID_LENGTH15
   }).notNull(),
-  type: varchar17("type", { length: TYPE_LENGTH2 }).$type().notNull(),
-  updated_at_ms: bigint15("updated_at_ms", { mode: "number" }).notNull()
+  type: varchar18("type", { length: TYPE_LENGTH2 }).$type().notNull(),
+  updated_at_ms: bigint16("updated_at_ms", { mode: "number" }).notNull()
 });
 
 // src/vc/postgresVcStores.ts
-import { eq as eq18 } from "drizzle-orm";
-import { bigint as bigint16, boolean as boolean6, jsonb as jsonb10, pgTable as pgTable18, varchar as varchar18 } from "drizzle-orm/pg-core";
-var ID_LENGTH15 = 255;
-var vcCredentialNoncesTable = pgTable18("auth_vc_credential_nonces", {
-  expires_at_ms: bigint16("expires_at_ms", { mode: "number" }).notNull(),
-  nonce_hash: varchar18("nonce_hash", { length: ID_LENGTH15 }).primaryKey()
+import { eq as eq19 } from "drizzle-orm";
+import { bigint as bigint17, boolean as boolean6, jsonb as jsonb11, pgTable as pgTable19, varchar as varchar19 } from "drizzle-orm/pg-core";
+var ID_LENGTH16 = 255;
+var vcCredentialNoncesTable = pgTable19("auth_vc_credential_nonces", {
+  expires_at_ms: bigint17("expires_at_ms", { mode: "number" }).notNull(),
+  nonce_hash: varchar19("nonce_hash", { length: ID_LENGTH16 }).primaryKey()
 });
-var vcCredentialOffersTable = pgTable18("auth_vc_credential_offers", {
-  client_id: varchar18("client_id", { length: ID_LENGTH15 }).notNull(),
-  configuration_id: varchar18("configuration_id", {
-    length: ID_LENGTH15
+var vcCredentialOffersTable = pgTable19("auth_vc_credential_offers", {
+  client_id: varchar19("client_id", { length: ID_LENGTH16 }).notNull(),
+  configuration_id: varchar19("configuration_id", {
+    length: ID_LENGTH16
   }).notNull(),
-  created_at_ms: bigint16("created_at_ms", { mode: "number" }).notNull(),
-  expires_at_ms: bigint16("expires_at_ms", { mode: "number" }).notNull(),
-  pre_authorized_code_hash: varchar18("pre_authorized_code_hash", {
-    length: ID_LENGTH15
+  created_at_ms: bigint17("created_at_ms", { mode: "number" }).notNull(),
+  expires_at_ms: bigint17("expires_at_ms", { mode: "number" }).notNull(),
+  pre_authorized_code_hash: varchar19("pre_authorized_code_hash", {
+    length: ID_LENGTH16
   }).primaryKey(),
   redeemed: boolean6("redeemed").notNull(),
-  user_id: varchar18("user_id", { length: ID_LENGTH15 }).notNull()
+  user_id: varchar19("user_id", { length: ID_LENGTH16 }).notNull()
 });
-var vcPresentationRequestsTable = pgTable18("auth_vc_presentation_requests", {
-  client_id: varchar18("client_id", { length: ID_LENGTH15 }).notNull(),
-  created_at_ms: bigint16("created_at_ms", { mode: "number" }).notNull(),
-  expected_issuer_jwk_json: jsonb10("expected_issuer_jwk_json").$type().notNull(),
-  expires_at_ms: bigint16("expires_at_ms", { mode: "number" }).notNull(),
-  nonce: varchar18("nonce", { length: ID_LENGTH15 }).notNull(),
-  request_id: varchar18("request_id", { length: ID_LENGTH15 }).primaryKey(),
-  requested_claims: jsonb10("requested_claims").$type().notNull(),
-  response_uri: varchar18("response_uri", { length: ID_LENGTH15 }).notNull(),
-  state: varchar18("state", { length: ID_LENGTH15 })
+var vcPresentationRequestsTable = pgTable19("auth_vc_presentation_requests", {
+  client_id: varchar19("client_id", { length: ID_LENGTH16 }).notNull(),
+  created_at_ms: bigint17("created_at_ms", { mode: "number" }).notNull(),
+  expected_issuer_jwk_json: jsonb11("expected_issuer_jwk_json").$type().notNull(),
+  expires_at_ms: bigint17("expires_at_ms", { mode: "number" }).notNull(),
+  nonce: varchar19("nonce", { length: ID_LENGTH16 }).notNull(),
+  request_id: varchar19("request_id", { length: ID_LENGTH16 }).primaryKey(),
+  requested_claims: jsonb11("requested_claims").$type().notNull(),
+  response_uri: varchar19("response_uri", { length: ID_LENGTH16 }).notNull(),
+  state: varchar19("state", { length: ID_LENGTH16 })
 });
 
 // src/vault/postgresVaultStore.ts
-import { and as and7, eq as eq19 } from "drizzle-orm";
+import { and as and8, eq as eq20 } from "drizzle-orm";
 import {
-  bigint as bigint17,
-  pgTable as pgTable19,
+  bigint as bigint18,
+  pgTable as pgTable20,
   primaryKey as primaryKey4,
   text as text8,
-  varchar as varchar19
+  varchar as varchar20
 } from "drizzle-orm/pg-core";
-var ID_LENGTH16 = 255;
-var vaultEntriesTable = pgTable19("auth_vault_entries", {
-  created_at_ms: bigint17("created_at_ms", { mode: "number" }).notNull(),
+var ID_LENGTH17 = 255;
+var vaultEntriesTable = pgTable20("auth_vault_entries", {
+  created_at_ms: bigint18("created_at_ms", { mode: "number" }).notNull(),
   encrypted_value: text8("encrypted_value").notNull(),
-  name: varchar19("name", { length: ID_LENGTH16 }).notNull(),
-  owner_id: varchar19("owner_id", { length: ID_LENGTH16 }).notNull(),
-  updated_at_ms: bigint17("updated_at_ms", { mode: "number" }).notNull()
+  name: varchar20("name", { length: ID_LENGTH17 }).notNull(),
+  owner_id: varchar20("owner_id", { length: ID_LENGTH17 }).notNull(),
+  updated_at_ms: bigint18("updated_at_ms", { mode: "number" }).notNull()
 }, (table) => ({ pk: primaryKey4({ columns: [table.owner_id, table.name] }) }));
 
 // src/webauthn/postgresWebAuthnCredentialStore.ts
-import { eq as eq20 } from "drizzle-orm";
+import { eq as eq21 } from "drizzle-orm";
 import {
-  bigint as bigint18,
+  bigint as bigint19,
   boolean as boolean7,
-  jsonb as jsonb11,
-  pgTable as pgTable20,
+  jsonb as jsonb12,
+  pgTable as pgTable21,
   text as text9,
-  varchar as varchar20
+  varchar as varchar21
 } from "drizzle-orm/pg-core";
-var ID_LENGTH17 = 255;
+var ID_LENGTH18 = 255;
 var DEVICE_TYPE_LENGTH = 32;
-var webauthnCredentialsTable = pgTable20("auth_webauthn_credentials", {
+var webauthnCredentialsTable = pgTable21("auth_webauthn_credentials", {
   backed_up: boolean7("backed_up"),
-  counter: bigint18("counter", { mode: "number" }).notNull().default(0),
-  created_at_ms: bigint18("created_at_ms", { mode: "number" }).notNull(),
-  credential_id: varchar20("credential_id", { length: ID_LENGTH17 }).primaryKey(),
-  device_type: varchar20("device_type", { length: DEVICE_TYPE_LENGTH }),
-  last_used_at_ms: bigint18("last_used_at_ms", { mode: "number" }),
+  counter: bigint19("counter", { mode: "number" }).notNull().default(0),
+  created_at_ms: bigint19("created_at_ms", { mode: "number" }).notNull(),
+  credential_id: varchar21("credential_id", { length: ID_LENGTH18 }).primaryKey(),
+  device_type: varchar21("device_type", { length: DEVICE_TYPE_LENGTH }),
+  last_used_at_ms: bigint19("last_used_at_ms", { mode: "number" }),
   public_key: text9("public_key").notNull(),
-  transports: jsonb11("transports").$type(),
-  user_id: varchar20("user_id", { length: ID_LENGTH17 }).notNull()
+  transports: jsonb12("transports").$type(),
+  user_id: varchar21("user_id", { length: ID_LENGTH18 }).notNull()
 });
 
 // src/webhooks/postgresStore.ts
-import { desc as desc9, eq as eq21 } from "drizzle-orm";
-import { bigint as bigint19, jsonb as jsonb12, pgTable as pgTable21, text as text10, varchar as varchar21 } from "drizzle-orm/pg-core";
-var ID_LENGTH18 = 255;
+import { desc as desc10, eq as eq22 } from "drizzle-orm";
+import { bigint as bigint20, jsonb as jsonb13, pgTable as pgTable22, text as text10, varchar as varchar22 } from "drizzle-orm/pg-core";
+var ID_LENGTH19 = 255;
 var URL_LENGTH3 = 2048;
-var webhookDeliveriesTable = pgTable21("auth_webhook_deliveries", {
-  attempts: bigint19("attempts", { mode: "number" }).notNull(),
-  created_at_ms: bigint19("created_at_ms", { mode: "number" }).notNull(),
-  endpoint_url: varchar21("endpoint_url", { length: URL_LENGTH3 }).notNull(),
-  envelope_id: varchar21("envelope_id", { length: ID_LENGTH18 }).primaryKey(),
-  envelope_json: jsonb12("envelope_json").$type().notNull(),
+var webhookDeliveriesTable = pgTable22("auth_webhook_deliveries", {
+  attempts: bigint20("attempts", { mode: "number" }).notNull(),
+  created_at_ms: bigint20("created_at_ms", { mode: "number" }).notNull(),
+  endpoint_url: varchar22("endpoint_url", { length: URL_LENGTH3 }).notNull(),
+  envelope_id: varchar22("envelope_id", { length: ID_LENGTH19 }).primaryKey(),
+  envelope_json: jsonb13("envelope_json").$type().notNull(),
   last_error: text10("last_error"),
-  last_status: bigint19("last_status", { mode: "number" })
+  last_status: bigint20("last_status", { mode: "number" })
 });
 
 // src/migrations/generate.ts
@@ -3049,6 +3081,10 @@ var mfaTotpLockoutMigration = {
 };
 var blockMigrations = {
   adaptive: initMigration("adaptive", [knownDevicesTable, loginHistoryTable]),
+  agents: initMigration("agents", [
+    agentRegistrationsTable,
+    agentDelegationsTable
+  ]),
   apikeys: initMigration("apikeys", [
     accessTokensTable,
     apiClientsTable,
@@ -3277,5 +3313,5 @@ var main = async () => {
 };
 await main();
 
-//# debugId=C531C2A7A3FFA37664756E2164756E21
+//# debugId=0F50F54AA9959FD164756E2164756E21
 //# sourceMappingURL=migrate.js.map