@authhero/aws-adapter 0.36.14 → 0.36.16

package/dist/aws-adapter.mjs

@@ -0,0 +1,2882 @@
+import { LoginSessionState as e, authenticationMethodSchema as t, brandingSchema as n, clientGrantSchema as r, clientRegistrationTokenSchema as i, clientSchema as a, codeSchema as o, connectionSchema as s, customDomainSchema as c, customDomainWithTenantIdSchema as l, emailProviderSchema as u, emailTemplateSchema as ee, flowSchema as te, formSchema as ne, handlerConfigSchema as re, hookSchema as ie, inviteSchema as ae, logSchema as oe, loginSessionSchema as se, matchSchema as ce, organizationSchema as le, parseUserId as ue, passwordSchema as de, promptSettingSchema as fe, refreshTokenSchema as pe, resourceServerSchema as me, rolePermissionSchema as he, roleSchema as ge, sessionSchema as _e, signingKeySchema as ve, tenantSchema as ye, themeSchema as be, userOrganizationSchema as xe, userPermissionWithDetailsSchema as Se, userSchema as Ce } from "@authhero/adapter-interfaces";
+import { BatchWriteCommand as we, DeleteCommand as Te, GetCommand as Ee, PutCommand as De, QueryCommand as Oe, TransactWriteCommand as ke, UpdateCommand as Ae } from "@aws-sdk/lib-dynamodb";
+//#region src/adapters/actions.ts
+function je() {
+	let e = (e) => {
+		throw Error(`Actions are not implemented in the AWS DynamoDB adapter (called ${e}). Use a SQL-backed adapter (kysely) for tenants that require actions.`);
+	};
+	return {
+		create: () => e("create"),
+		get: () => e("get"),
+		list: () => e("list"),
+		update: () => e("update"),
+		remove: () => e("remove")
+	};
+}
+//#endregion
+//#region src/adapters/actionExecutions.ts
+function Me() {
+	let e = (e) => {
+		throw Error(`Action executions are not implemented in the AWS DynamoDB adapter (called ${e}). Use a SQL-backed adapter (kysely) for tenants that require actions.`);
+	};
+	return {
+		create: () => e("create"),
+		get: () => e("get")
+	};
+}
+//#endregion
+//#region src/adapters/actionVersions.ts
+function Ne() {
+	let e = (e) => {
+		throw Error(`Action versions are not implemented in the AWS DynamoDB adapter (called ${e}). Use a SQL-backed adapter (kysely) for tenants that require actions.`);
+	};
+	return {
+		create: () => e("create"),
+		get: () => e("get"),
+		list: () => e("list"),
+		removeForAction: () => e("removeForAction")
+	};
+}
+//#endregion
+//#region ../../node_modules/.pnpm/nanoid@5.1.16/node_modules/nanoid/url-alphabet/index.js
+var Pe = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict", d = (e = 21) => {
+	let t = "", n = crypto.getRandomValues(new Uint8Array(e |= 0));
+	for (; e--;) t += Pe[n[e] & 63];
+	return t;
+}, f = {
+	pk: (e) => `TENANT#${e}`,
+	sk: () => "TENANT",
+	gsi1pk: () => "TENANTS",
+	gsi1sk: (e) => `TENANT#${e}`
+}, p = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `USER#${e}`,
+	gsi1pk: (e, t) => `TENANT#${e}#EMAIL#${t.toLowerCase()}`,
+	gsi1sk: () => "USER",
+	gsi2pk: (e, t) => `TENANT#${e}#CONNECTION#${t}`,
+	gsi2sk: (e) => `USER#${e}`
+}, m = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `SESSION#${e}`,
+	gsi1pk: (e, t) => `TENANT#${e}#USER#${t}`,
+	gsi1sk: (e) => `SESSION#${e}`
+}, h = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `LOGIN_SESSION#${e}`
+}, g = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `CLIENT#${e}`
+}, _ = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `CLIENT_GRANT#${e}`,
+	gsi1pk: (e, t) => `TENANT#${e}#CLIENT#${t}`,
+	gsi1sk: (e) => `CLIENT_GRANT#${e}`
+}, v = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `CONNECTION#${e}`,
+	gsi1pk: (e, t) => `TENANT#${e}#CONNECTION_NAME#${t}`,
+	gsi1sk: () => "CONNECTION"
+}, y = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e, t) => `CODE#${e}#${t}`,
+	skPrefixByCodeId: (e) => `CODE#${e}#`
+}, b = {
+	pk: (e, t) => `TENANT#${e}#USER#${t}`,
+	sk: (e) => `PASSWORD#${e}`,
+	skPrefix: () => "PASSWORD#"
+}, Fe = {
+	pk: (e) => `TENANT#${e}`,
+	sk: () => "BRANDING"
+}, x = {
+	pk: (e) => `TENANT#${e}`,
+	sk: () => "UNIVERSAL_LOGIN_TEMPLATE"
+}, S = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `THEME#${e}`
+}, C = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `HOOK#${e}`
+}, Ie = {
+	pk: () => "KEYS",
+	sk: (e) => `KEY#${e}`
+}, w = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `CUSTOM_DOMAIN#${e}`,
+	gsi1pk: (e) => `DOMAIN#${e}`,
+	gsi1sk: () => "CUSTOM_DOMAIN"
+}, T = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `PROXY_ROUTE#${e}`,
+	gsi1pk: (e, t) => `TENANT#${e}#CUSTOM_DOMAIN#${t}`,
+	gsi1sk: (e) => `PROXY_ROUTE#${e}`
+}, E = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `LOG#${e}`,
+	gsi1pk: (e, t) => `TENANT#${e}#LOG#${t}`,
+	gsi1sk: (e) => `LOG#${e}`
+}, D = {
+	pk: (e) => `TENANT#${e}`,
+	sk: () => "EMAIL_PROVIDER"
+}, O = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `EMAIL_TEMPLATE#${e}`,
+	skPrefix: () => "EMAIL_TEMPLATE#"
+}, Le = {
+	pk: (e) => `TENANT#${e}`,
+	sk: () => "PROMPT_SETTINGS"
+}, k = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `REFRESH_TOKEN#${e}`,
+	gsi1pk: (e, t) => `TENANT#${e}#USER#${t}`,
+	gsi1sk: (e) => `REFRESH_TOKEN#${e}`,
+	gsi2pk: (e, t) => `TENANT#${e}#RT_LOOKUP#${t}`,
+	gsi2sk: () => "REFRESH_TOKEN"
+}, A = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `FORM#${e}`
+}, j = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `FLOW#${e}`
+}, M = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `RESOURCE_SERVER#${e}`,
+	gsi1pk: (e, t) => `TENANT#${e}#RESOURCE_SERVER_ID#${t}`,
+	gsi1sk: () => "RESOURCE_SERVER"
+}, N = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `ROLE#${e}`
+}, P = {
+	pk: (e, t) => `TENANT#${e}#ROLE#${t}`,
+	sk: (e, t) => `PERMISSION#${e}#${t}`,
+	skPrefix: () => "PERMISSION#"
+}, F = {
+	pk: (e, t, n) => n ? `TENANT#${e}#ORG#${n}#USER#${t}` : `TENANT#${e}#USER#${t}`,
+	sk: (e, t) => `USER_PERMISSION#${e}#${t}`,
+	skPrefix: () => "USER_PERMISSION#"
+}, I = {
+	pk: (e, t, n) => n ? `TENANT#${e}#ORG#${n}#USER#${t}` : `TENANT#${e}#USER#${t}`,
+	sk: (e) => `USER_ROLE#${e}`,
+	skPrefix: () => "USER_ROLE#"
+}, L = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `ORGANIZATION#${e}`,
+	gsi1pk: (e, t) => `TENANT#${e}#ORG_NAME#${t}`,
+	gsi1sk: () => "ORGANIZATION"
+}, R = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `USER_ORG#${e}`,
+	gsi1pk: (e, t) => `TENANT#${e}#USER#${t}`,
+	gsi1sk: (e) => `USER_ORG#${e}`,
+	gsi2pk: (e, t) => `TENANT#${e}#ORG#${t}`,
+	gsi2sk: (e) => `USER_ORG#${e}`
+}, z = {
+	pk: (e, t) => `TENANT#${e}#ORG#${t}`,
+	sk: (e) => `ORG_CONNECTION#${e}`,
+	skPrefix: () => "ORG_CONNECTION#"
+}, B = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `INVITE#${e}`,
+	gsi1pk: (e, t) => `TENANT#${e}#ORG#${t}`,
+	gsi1sk: (e) => `INVITE#${e}`
+}, Re = {
+	pk: () => "LEGACY_CLIENTS",
+	sk: (e) => `LEGACY_CLIENT#${e}`
+}, V = {
+	pk: (e, t) => `TENANT#${e}#CLIENT#${t}`,
+	sk: (e, t) => `CLIENT_CONNECTION#${String(t).padStart(5, "0")}#${e}`,
+	skPrefix: () => "CLIENT_CONNECTION#",
+	gsi1pk: (e, t) => `TENANT#${e}#CONNECTION#${t}`,
+	gsi1sk: (e) => `CLIENT_CONNECTION#${e}`
+}, H = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `AUTHENTICATION_METHOD#${e}`,
+	gsi1pk: (e, t) => `TENANT#${e}#USER#${t}`,
+	gsi1sk: (e) => `AUTHENTICATION_METHOD#${e}`,
+	gsi1skPrefix: () => "AUTHENTICATION_METHOD#"
+}, U = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `CLIENT_REGISTRATION_TOKEN#${e}`,
+	skPrefix: () => "CLIENT_REGISTRATION_TOKEN#",
+	gsi1pk: (e, t) => `TENANT#${e}#CRT_HASH#${t}`,
+	gsi1sk: () => "CLIENT_REGISTRATION_TOKEN",
+	gsi2pk: (e, t) => `TENANT#${e}#CLIENT#${t}`,
+	gsi2sk: (e) => `CLIENT_REGISTRATION_TOKEN#${e}`
+}, W = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e, t) => `CUSTOM_TEXT#${e}#${t}`,
+	skPrefix: () => "CUSTOM_TEXT#"
+};
+//#endregion
+//#region src/utils.ts
+async function ze(e, t) {
+	let n = t.map((t) => {
+		if (t.type === "put" && t.item) return { Put: {
+			TableName: e.tableName,
+			Item: t.item,
+			ConditionExpression: t.conditionExpression
+		} };
+		if (t.type === "delete" && t.pk && t.sk) return { Delete: {
+			TableName: e.tableName,
+			Key: {
+				PK: t.pk,
+				SK: t.sk
+			}
+		} };
+		throw Error("Invalid transaction operation");
+	});
+	await e.client.send(new ke({ TransactItems: n }));
+}
+async function G(e, t, n) {
+	return (await e.client.send(new Ee({
+		TableName: e.tableName,
+		Key: {
+			PK: t,
+			SK: n
+		}
+	}))).Item || null;
+}
+async function K(e, t, n) {
+	await e.client.send(new De({
+		TableName: e.tableName,
+		Item: t,
+		ConditionExpression: n?.conditionExpression
+	}));
+}
+async function q(e, t, n) {
+	return await e.client.send(new Te({
+		TableName: e.tableName,
+		Key: {
+			PK: t,
+			SK: n
+		}
+	})), !0;
+}
+async function J(e, t, n) {
+	let { skPrefix: r, skValue: i, indexName: a, limit: o, startKey: s, scanIndexForward: c = !0 } = n || {}, l = a ? `${a}PK = :pk` : "PK = :pk", u = { ":pk": t };
+	if (r) {
+		let e = a ? `${a}SK` : "SK";
+		l += ` AND begins_with(${e}, :skPrefix)`, u[":skPrefix"] = r;
+	} else if (i) {
+		let e = a ? `${a}SK` : "SK";
+		l += ` AND ${e} = :sk`, u[":sk"] = i;
+	}
+	let ee = await e.client.send(new Oe({
+		TableName: e.tableName,
+		IndexName: a,
+		KeyConditionExpression: l,
+		ExpressionAttributeValues: u,
+		Limit: o,
+		ExclusiveStartKey: s,
+		ScanIndexForward: c
+	}));
+	return {
+		items: ee.Items || [],
+		lastKey: ee.LastEvaluatedKey
+	};
+}
+async function Y(e, t, n = {}, r) {
+	let { page: i, per_page: a, include_totals: o = !1, from: s, take: c } = n, { skPrefix: l, indexName: u, scanIndexForward: ee = !0 } = r || {}, te = c || a || 50, ne = s === void 0 ? (i || 0) * te : parseInt(s, 10), re = u ? `${u}PK = :pk` : "PK = :pk", ie = { ":pk": t };
+	if (l) {
+		let e = u ? `${u}SK` : "SK";
+		re += ` AND begins_with(${e}, :skPrefix)`, ie[":skPrefix"] = l;
+	}
+	let ae = [], oe, se = 0, ce = ne + te;
+	for (; se < ce;) {
+		let t = await e.client.send(new Oe({
+			TableName: e.tableName,
+			IndexName: u,
+			KeyConditionExpression: re,
+			ExpressionAttributeValues: ie,
+			Limit: Math.min(ce - se, 1e3),
+			ExclusiveStartKey: oe,
+			ScanIndexForward: ee
+		})), n = t.Items || [];
+		if (ae = ae.concat(n), se += n.length, oe = t.LastEvaluatedKey, !oe) break;
+	}
+	let le = ae.slice(ne, ne + te), ue = ae.length;
+	if (o && oe) {
+		let t = oe;
+		for (; t;) {
+			let n = await e.client.send(new Oe({
+				TableName: e.tableName,
+				IndexName: u,
+				KeyConditionExpression: re,
+				ExpressionAttributeValues: ie,
+				Select: "COUNT",
+				ExclusiveStartKey: t
+			}));
+			ue += n.Count || 0, t = n.LastEvaluatedKey;
+		}
+	}
+	return {
+		items: le,
+		start: ne,
+		limit: te,
+		length: le.length,
+		total: o ? ue : void 0
+	};
+}
+async function X(e, t, n, r) {
+	let i = Object.entries(r).filter(([, e]) => e !== void 0);
+	if (i.length === 0) return !0;
+	let a = "SET " + i.map(([e], t) => `#attr${t} = :val${t}`).join(", "), o = {}, s = {};
+	return i.forEach(([e, t], n) => {
+		o[`#attr${n}`] = e, s[`:val${n}`] = t;
+	}), await e.client.send(new Ae({
+		TableName: e.tableName,
+		Key: {
+			PK: t,
+			SK: n
+		},
+		UpdateExpression: a,
+		ConditionExpression: "attribute_exists(PK)",
+		ExpressionAttributeNames: o,
+		ExpressionAttributeValues: s
+	})), !0;
+}
+function Z(e) {
+	let { PK: t, SK: n, GSI1PK: r, GSI1SK: i, GSI2PK: a, GSI2SK: o, entityType: s, ttl: c, ...l } = e;
+	return l;
+}
+function Q(e) {
+	let t = { ...e };
+	for (let e in t) (t[e] === null || t[e] === void 0) && delete t[e];
+	return t;
+}
+//#endregion
+//#region src/adapters/flows.ts
+function Be(e) {
+	let { tenant_id: t, ...n } = Z(e), r = [];
+	if (e.actions) try {
+		r = JSON.parse(e.actions);
+	} catch {
+		console.error(`Failed to parse actions JSON for flow ${e.id}`);
+	}
+	let i = Q({
+		...n,
+		actions: r
+	});
+	return te.parse(i);
+}
+function Ve(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = `af_${d()}`, a = {
+				PK: j.pk(t),
+				SK: j.sk(i),
+				entityType: "FLOW",
+				tenant_id: t,
+				id: i,
+				name: n.name,
+				actions: n.actions ? JSON.stringify(n.actions) : void 0,
+				created_at: r,
+				updated_at: r
+			};
+			return await K(e, a), Be(a);
+		},
+		async get(t, n) {
+			let r = await G(e, j.pk(t), j.sk(n));
+			return r ? Be(r) : null;
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, j.pk(t), n, { skPrefix: "FLOW#" });
+			return {
+				flows: r.items.map(Be),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async update(t, n, r) {
+			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
+			return r.name !== void 0 && (i.name = r.name), r.actions !== void 0 && (i.actions = JSON.stringify(r.actions)), await X(e, j.pk(t), j.sk(n), i) ? this.get(t, n) : null;
+		},
+		async remove(t, n) {
+			return q(e, j.pk(t), j.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/tenants.ts
+function He(e) {
+	let t = Z(e);
+	return ye.parse(Q(t));
+}
+function Ue(e) {
+	return {
+		async create(t) {
+			let n = (/* @__PURE__ */ new Date()).toISOString(), r = t.id || d(), i = {
+				PK: f.pk(r),
+				SK: f.sk(),
+				GSI1PK: f.gsi1pk(),
+				GSI1SK: f.gsi1sk(r),
+				entityType: "TENANT",
+				id: r,
+				audience: t.audience,
+				friendly_name: t.friendly_name,
+				sender_name: t.sender_name,
+				sender_email: t.sender_email,
+				session_lifetime: t.session_lifetime,
+				idle_session_lifetime: t.idle_session_lifetime,
+				created_at: n,
+				updated_at: n
+			};
+			return await K(e, i), He(i);
+		},
+		async get(t) {
+			let n = await G(e, f.pk(t), f.sk());
+			return n ? He(n) : null;
+		},
+		async list(t = {}) {
+			let { include_totals: n = !1 } = t, r = await Y(e, f.gsi1pk(), t, {
+				indexName: "GSI1",
+				skPrefix: "TENANT#"
+			}), i = r.items.map(He);
+			return n ? {
+				tenants: i,
+				totals: {
+					start: r.start,
+					limit: r.limit,
+					length: r.length
+				}
+			} : { tenants: i };
+		},
+		async update(t, n) {
+			let r = {
+				...n,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			await X(e, f.pk(t), f.sk(), r);
+		},
+		async remove(t) {
+			return q(e, f.pk(t), f.sk());
+		}
+	};
+}
+//#endregion
+//#region ../../node_modules/.pnpm/hono@4.12.27/node_modules/hono/dist/http-exception.js
+var We = class extends Error {
+	res;
+	status;
+	constructor(e = 500, t) {
+		super(t?.message, { cause: t?.cause }), this.res = t?.res, this.status = e;
+	}
+	getResponse() {
+		return this.res ? new Response(this.res.body, {
+			status: this.status,
+			headers: this.res.headers
+		}) : new Response(this.message, { status: this.status });
+	}
+};
+//#endregion
+//#region src/adapters/users.ts
+function Ge(e, t = []) {
+	let { tenant_id: n, ...r } = Z(e), i = Q({
+		...r,
+		app_metadata: JSON.parse(e.app_metadata || "{}"),
+		user_metadata: JSON.parse(e.user_metadata || "{}"),
+		identities: [{
+			connection: e.connection,
+			provider: e.provider,
+			user_id: ue(e.user_id).id,
+			isSocial: e.is_social,
+			...e.email ? { email: e.email } : {},
+			...e.email_verified === void 0 ? {} : { email_verified: !!e.email_verified },
+			...e.phone_number ? { phone_number: e.phone_number } : {},
+			...e.phone_verified === void 0 ? {} : { phone_verified: !!e.phone_verified },
+			...e.username ? { username: e.username } : {}
+		}, ...t.map((e) => ({
+			connection: e.connection,
+			provider: e.provider,
+			user_id: ue(e.user_id).id,
+			isSocial: e.is_social,
+			...e.email ? { email: e.email } : {},
+			...e.email_verified === void 0 ? {} : { email_verified: !!e.email_verified },
+			...e.phone_number ? { phone_number: e.phone_number } : {},
+			...e.phone_verified === void 0 ? {} : { phone_verified: !!e.phone_verified },
+			...e.username ? { username: e.username } : {}
+		}))]
+	});
+	return Ce.parse(i);
+}
+function Ke(e) {
+	let t = async (t, n) => {
+		let r = (/* @__PURE__ */ new Date()).toISOString(), i = n.user_id || `${n.provider}|${d()}`, a = {
+			PK: p.pk(t),
+			SK: p.sk(i),
+			entityType: "USER",
+			tenant_id: t,
+			user_id: i,
+			email: n.email,
+			username: n.username,
+			phone_number: n.phone_number,
+			given_name: n.given_name,
+			family_name: n.family_name,
+			nickname: n.nickname,
+			name: n.name,
+			picture: n.picture,
+			locale: n.locale,
+			linked_to: n.linked_to,
+			profileData: n.profileData,
+			email_verified: n.email_verified ?? !1,
+			last_ip: n.last_ip,
+			last_login: n.last_login,
+			provider: n.provider || "auth",
+			connection: n.connection,
+			is_social: n.is_social ?? !1,
+			login_count: 0,
+			app_metadata: JSON.stringify(n.app_metadata || {}),
+			user_metadata: JSON.stringify(n.user_metadata || {}),
+			middle_name: n.middle_name,
+			preferred_username: n.preferred_username,
+			profile: n.profile,
+			website: n.website,
+			gender: n.gender,
+			birthdate: n.birthdate,
+			zoneinfo: n.zoneinfo,
+			created_at: r,
+			updated_at: r
+		};
+		n.email && (a.GSI1PK = p.gsi1pk(t, n.email), a.GSI1SK = p.gsi1sk()), a.GSI2PK = p.gsi2pk(t, n.connection), a.GSI2SK = p.gsi2sk(i);
+		try {
+			if (n.password) {
+				let o = d(), s = {
+					PK: b.pk(t, i),
+					SK: b.sk(o),
+					entityType: "PASSWORD",
+					id: o,
+					tenant_id: t,
+					user_id: i,
+					password: n.password.hash,
+					algorithm: n.password.algorithm,
+					is_current: !0,
+					created_at: r,
+					updated_at: r
+				};
+				await ze(e, [{
+					type: "put",
+					item: a,
+					conditionExpression: "attribute_not_exists(PK)"
+				}, {
+					type: "put",
+					item: s
+				}]);
+			} else await K(e, a, { conditionExpression: "attribute_not_exists(PK)" });
+		} catch (e) {
+			throw e.name === "ConditionalCheckFailedException" || e.name === "TransactionCanceledException" && (e.CancellationReasons || []).some((e) => e?.Code === "ConditionalCheckFailed") ? new We(409, { message: "User already exists" }) : e;
+		}
+		return Ge(a);
+	};
+	return {
+		create: t,
+		rawCreate: t,
+		async get(t, n) {
+			let [r, i] = await Promise.all([G(e, p.pk(t), p.sk(n)), J(e, p.pk(t), { skPrefix: "USER#" }).then((e) => e.items.filter((e) => e.linked_to === n))]);
+			return r ? Ge(r, i) : null;
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, p.pk(t), n, { skPrefix: "USER#" }), i = r.items.filter((e) => !e.linked_to), a = r.items.filter((e) => e.linked_to);
+			return {
+				users: i.map((e) => Ge(e, a.filter((t) => t.linked_to === e.user_id))),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async update(t, n, r) {
+			let i = {
+				...r,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return r.app_metadata !== void 0 && (i.app_metadata = JSON.stringify(r.app_metadata)), r.user_metadata !== void 0 && (i.user_metadata = JSON.stringify(r.user_metadata)), delete i.user_id, delete i.identities, X(e, p.pk(t), p.sk(n), i);
+		},
+		async remove(t, n) {
+			return q(e, p.pk(t), p.sk(n));
+		},
+		async unlink(t, n, r, i) {
+			let a = `${r}|${i}`;
+			return q(e, p.pk(t), p.sk(a));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/sessions.ts
+function qe(e) {
+	let { tenant_id: t, ...n } = Z(e), r = Q({
+		...n,
+		device: JSON.parse(e.device || "{}"),
+		clients: JSON.parse(e.clients || "[]")
+	});
+	return _e.parse(r);
+}
+function Je(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
+				PK: m.pk(t),
+				SK: m.sk(n.id),
+				GSI1PK: m.gsi1pk(t, n.user_id),
+				GSI1SK: m.gsi1sk(n.id),
+				entityType: "SESSION",
+				tenant_id: t,
+				id: n.id,
+				user_id: n.user_id,
+				login_session_id: n.login_session_id,
+				revoked_at: n.revoked_at,
+				used_at: n.used_at,
+				expires_at: n.expires_at,
+				idle_expires_at: n.idle_expires_at,
+				authenticated_at: r,
+				last_interaction_at: r,
+				device: JSON.stringify(n.device || {}),
+				clients: JSON.stringify(n.clients || []),
+				created_at: r,
+				updated_at: r
+			};
+			return n.expires_at && (i.ttl = Math.floor(new Date(n.expires_at).getTime() / 1e3)), await K(e, i), qe(i);
+		},
+		async get(t, n) {
+			let r = await G(e, m.pk(t), m.sk(n));
+			return r ? qe(r) : null;
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, m.pk(t), n, { skPrefix: "SESSION#" });
+			return {
+				sessions: r.items.map(qe),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async update(t, n, r) {
+			let i = {
+				...r,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return r.device !== void 0 && (i.device = JSON.stringify(r.device)), r.clients !== void 0 && (i.clients = JSON.stringify(r.clients)), r.expires_at && (i.ttl = Math.floor(new Date(r.expires_at).getTime() / 1e3)), delete i.id, X(e, m.pk(t), m.sk(n), i);
+		},
+		async remove(t, n) {
+			return q(e, m.pk(t), m.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/passwords.ts
+function Ye(e) {
+	let { tenant_id: t, ...n } = Z(e);
+	return de.parse(Q(n));
+}
+function Xe(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = d(), a = await this.list(t, n.user_id);
+			for (let i of a) i.is_current && await X(e, b.pk(t, n.user_id), b.sk(i.id), {
+				is_current: !1,
+				updated_at: r
+			});
+			let o = {
+				PK: b.pk(t, n.user_id),
+				SK: b.sk(i),
+				entityType: "PASSWORD",
+				id: i,
+				tenant_id: t,
+				user_id: n.user_id,
+				password: n.password,
+				algorithm: n.algorithm || "bcrypt",
+				is_current: !0,
+				created_at: r,
+				updated_at: r
+			};
+			return await K(e, o), Ye(o);
+		},
+		async update(e, t) {
+			return await this.create(e, t), !0;
+		},
+		async get(t, n) {
+			let { items: r } = await J(e, b.pk(t, n), { skPrefix: b.skPrefix() }), i = r.find((e) => e.is_current);
+			return i ? Ye(i) : null;
+		},
+		async list(t, n, r) {
+			let { items: i } = await J(e, b.pk(t, n), {
+				skPrefix: b.skPrefix(),
+				limit: r
+			});
+			return i.map(Ye);
+		}
+	};
+}
+//#endregion
+//#region src/adapters/codes.ts
+function Ze(e) {
+	let { tenant_id: t, ...n } = Z(e);
+	return o.parse(Q(n));
+}
+function Qe(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
+				PK: y.pk(t),
+				SK: y.sk(n.code_id, n.code_type),
+				entityType: "CODE",
+				code_id: n.code_id,
+				tenant_id: t,
+				code_type: n.code_type,
+				login_id: n.login_id,
+				connection_id: n.connection_id,
+				code_verifier: n.code_verifier,
+				code_challenge: n.code_challenge,
+				code_challenge_method: n.code_challenge_method,
+				nonce: n.nonce,
+				state: n.state,
+				redirect_uri: n.redirect_uri,
+				user_id: n.user_id,
+				used_at: n.used_at,
+				expires_at: n.expires_at,
+				created_at: r,
+				updated_at: r
+			};
+			return i.ttl = Math.floor(new Date(n.expires_at).getTime() / 1e3), await K(e, i), Ze(i);
+		},
+		async get(t, n, r) {
+			let i = await G(e, y.pk(t), y.sk(n, r));
+			return i ? Ze(i) : null;
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, y.pk(t), n, { skPrefix: "CODE#" });
+			return {
+				codes: r.items.map(Ze),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async used(t, n) {
+			let { items: r } = await J(e, y.pk(t), {
+				skPrefix: y.skPrefixByCodeId(n),
+				limit: 1
+			}), i = r[0];
+			return i ? X(e, y.pk(t), y.sk(n, i.code_type), { used_at: (/* @__PURE__ */ new Date()).toISOString() }) : !1;
+		},
+		async consume(t, n) {
+			let { items: r } = await J(e, y.pk(t), {
+				skPrefix: y.skPrefixByCodeId(n),
+				limit: 1
+			}), i = r[0];
+			if (!i) return !1;
+			try {
+				return await e.client.send(new Ae({
+					TableName: e.tableName,
+					Key: {
+						PK: y.pk(t),
+						SK: y.sk(n, i.code_type)
+					},
+					UpdateExpression: "SET #used_at = :now",
+					ConditionExpression: "attribute_not_exists(#used_at) OR #used_at = :null",
+					ExpressionAttributeNames: { "#used_at": "used_at" },
+					ExpressionAttributeValues: {
+						":now": (/* @__PURE__ */ new Date()).toISOString(),
+						":null": null
+					}
+				})), !0;
+			} catch (e) {
+				if (e.name === "ConditionalCheckFailedException") return !1;
+				throw e;
+			}
+		},
+		async remove(t, n) {
+			let { items: r } = await J(e, y.pk(t), {
+				skPrefix: y.skPrefixByCodeId(n),
+				limit: 1
+			}), i = r[0];
+			return i ? q(e, y.pk(t), y.sk(n, i.code_type)) : !1;
+		}
+	};
+}
+//#endregion
+//#region src/adapters/clients.ts
+function $e(e) {
+	let { tenant_id: t, ...n } = Z(e), r = Q({
+		...n,
+		callbacks: e.callbacks ? JSON.parse(e.callbacks) : void 0,
+		allowed_origins: e.allowed_origins ? JSON.parse(e.allowed_origins) : void 0,
+		web_origins: e.web_origins ? JSON.parse(e.web_origins) : void 0,
+		client_aliases: e.client_aliases ? JSON.parse(e.client_aliases) : void 0,
+		allowed_clients: e.allowed_clients ? JSON.parse(e.allowed_clients) : void 0,
+		connections: e.connections ? JSON.parse(e.connections) : void 0,
+		allowed_logout_urls: e.allowed_logout_urls ? JSON.parse(e.allowed_logout_urls) : void 0,
+		session_transfer: e.session_transfer ? JSON.parse(e.session_transfer) : void 0,
+		oidc_logout: e.oidc_logout ? JSON.parse(e.oidc_logout) : void 0,
+		grant_types: e.grant_types ? JSON.parse(e.grant_types) : void 0,
+		jwt_configuration: e.jwt_configuration ? JSON.parse(e.jwt_configuration) : void 0,
+		signing_keys: e.signing_keys ? JSON.parse(e.signing_keys) : void 0,
+		encryption_key: e.encryption_key ? JSON.parse(e.encryption_key) : void 0,
+		addons: e.addons ? JSON.parse(e.addons) : void 0,
+		client_metadata: e.client_metadata ? JSON.parse(e.client_metadata) : void 0,
+		mobile: e.mobile ? JSON.parse(e.mobile) : void 0,
+		native_social_login: e.native_social_login ? JSON.parse(e.native_social_login) : void 0,
+		refresh_token: e.refresh_token ? JSON.parse(e.refresh_token) : void 0,
+		default_organization: e.default_organization ? JSON.parse(e.default_organization) : void 0,
+		client_authentication_methods: e.client_authentication_methods ? JSON.parse(e.client_authentication_methods) : void 0,
+		signed_request_object: e.signed_request_object ? JSON.parse(e.signed_request_object) : void 0,
+		token_quota: e.token_quota ? JSON.parse(e.token_quota) : void 0
+	});
+	return a.parse(r);
+}
+function et(e) {
+	return {
+		...$e(e),
+		tenant_id: e.tenant_id
+	};
+}
+function tt(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = n.client_id ?? d(), a = {
+				PK: g.pk(t),
+				SK: g.sk(i),
+				entityType: "CLIENT",
+				tenant_id: t,
+				client_id: i,
+				name: n.name,
+				client_secret: n.client_secret,
+				description: n.description,
+				logo_uri: n.logo_uri,
+				app_type: n.app_type,
+				token_endpoint_auth_method: n.token_endpoint_auth_method,
+				initiate_login_uri: n.initiate_login_uri,
+				cross_origin_loc: n.cross_origin_loc,
+				custom_login_page: n.custom_login_page,
+				custom_login_page_preview: n.custom_login_page_preview,
+				form_template: n.form_template,
+				organization_usage: n.organization_usage,
+				organization_require_behavior: n.organization_require_behavior,
+				compliance_level: n.compliance_level,
+				par_request_expiry: n.par_request_expiry,
+				global: n.global ?? !1,
+				is_first_party: n.is_first_party ?? !1,
+				oidc_conformant: n.oidc_conformant ?? !0,
+				auth0_conformant: n.auth0_conformant ?? !0,
+				sso: n.sso,
+				sso_disabled: n.sso_disabled,
+				cross_origin_authentication: n.cross_origin_authentication,
+				custom_login_page_on: n.custom_login_page_on,
+				require_pushed_authorization_requests: n.require_pushed_authorization_requests,
+				require_proof_of_possession: n.require_proof_of_possession,
+				callbacks: n.callbacks ? JSON.stringify(n.callbacks) : void 0,
+				allowed_origins: n.allowed_origins ? JSON.stringify(n.allowed_origins) : void 0,
+				web_origins: n.web_origins ? JSON.stringify(n.web_origins) : void 0,
+				client_aliases: n.client_aliases ? JSON.stringify(n.client_aliases) : void 0,
+				allowed_clients: n.allowed_clients ? JSON.stringify(n.allowed_clients) : void 0,
+				connections: n.connections ? JSON.stringify(n.connections) : void 0,
+				allowed_logout_urls: n.allowed_logout_urls ? JSON.stringify(n.allowed_logout_urls) : void 0,
+				session_transfer: n.session_transfer ? JSON.stringify(n.session_transfer) : void 0,
+				oidc_logout: n.oidc_logout ? JSON.stringify(n.oidc_logout) : void 0,
+				grant_types: n.grant_types ? JSON.stringify(n.grant_types) : void 0,
+				jwt_configuration: n.jwt_configuration ? JSON.stringify(n.jwt_configuration) : void 0,
+				signing_keys: n.signing_keys ? JSON.stringify(n.signing_keys) : void 0,
+				encryption_key: n.encryption_key ? JSON.stringify(n.encryption_key) : void 0,
+				addons: n.addons ? JSON.stringify(n.addons) : void 0,
+				client_metadata: n.client_metadata ? JSON.stringify(n.client_metadata) : void 0,
+				mobile: n.mobile ? JSON.stringify(n.mobile) : void 0,
+				native_social_login: n.native_social_login ? JSON.stringify(n.native_social_login) : void 0,
+				refresh_token: n.refresh_token ? JSON.stringify(n.refresh_token) : void 0,
+				default_organization: n.default_organization ? JSON.stringify(n.default_organization) : void 0,
+				client_authentication_methods: n.client_authentication_methods ? JSON.stringify(n.client_authentication_methods) : void 0,
+				signed_request_object: n.signed_request_object ? JSON.stringify(n.signed_request_object) : void 0,
+				token_quota: n.token_quota ? JSON.stringify(n.token_quota) : void 0,
+				created_at: r,
+				updated_at: r
+			};
+			return await K(e, a), $e(a);
+		},
+		async get(t, n) {
+			let r = await G(e, g.pk(t), g.sk(n));
+			return r ? $e(r) : null;
+		},
+		async getByClientId(t) {
+			let n = await G(e, Re.pk(), Re.sk(t));
+			if (!n?.tenant_id) return null;
+			let r = await G(e, g.pk(n.tenant_id), g.sk(t));
+			return r ? et(r) : null;
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, g.pk(t), n, { skPrefix: "CLIENT#" }), i = r.items.map($e);
+			return n.include_totals ? {
+				clients: i,
+				totals: {
+					start: r.start,
+					limit: r.limit,
+					length: r.length
+				}
+			} : { clients: i };
+		},
+		async update(t, n, r) {
+			let i = {
+				...r,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			for (let e of [
+				"callbacks",
+				"allowed_origins",
+				"web_origins",
+				"client_aliases",
+				"allowed_clients",
+				"connections",
+				"allowed_logout_urls",
+				"session_transfer",
+				"oidc_logout",
+				"grant_types",
+				"jwt_configuration",
+				"signing_keys",
+				"encryption_key",
+				"addons",
+				"client_metadata",
+				"mobile",
+				"native_social_login",
+				"refresh_token",
+				"default_organization",
+				"client_authentication_methods",
+				"signed_request_object",
+				"token_quota"
+			]) r[e] !== void 0 && (i[e] = JSON.stringify(r[e]));
+			return delete i.client_id, X(e, g.pk(t), g.sk(n), i);
+		},
+		async remove(t, n) {
+			return q(e, g.pk(t), g.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/clientGrants.ts
+function nt(e) {
+	let { tenant_id: t, ...n } = Z(e), i = Q({
+		...n,
+		scope: e.scope ? JSON.parse(e.scope) : void 0,
+		authorization_details_types: e.authorization_details_types ? JSON.parse(e.authorization_details_types) : void 0
+	});
+	return r.parse(i);
+}
+function rt(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = d(), a = {
+				PK: _.pk(t),
+				SK: _.sk(i),
+				GSI1PK: _.gsi1pk(t, n.client_id),
+				GSI1SK: _.gsi1sk(n.audience),
+				entityType: "CLIENT_GRANT",
+				tenant_id: t,
+				id: i,
+				client_id: n.client_id,
+				audience: n.audience,
+				scope: n.scope ? JSON.stringify(n.scope) : void 0,
+				organization_usage: n.organization_usage,
+				allow_any_organization: n.allow_any_organization,
+				is_system: n.is_system,
+				subject_type: n.subject_type,
+				authorization_details_types: n.authorization_details_types ? JSON.stringify(n.authorization_details_types) : void 0,
+				created_at: r,
+				updated_at: r
+			};
+			return await K(e, a), nt(a);
+		},
+		async get(t, n) {
+			let r = await G(e, _.pk(t), _.sk(n));
+			return r ? nt(r) : null;
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, _.pk(t), n, { skPrefix: "CLIENT_GRANT#" });
+			return {
+				client_grants: r.items.map(nt),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async update(t, n, r) {
+			let i = {
+				...r,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return r.scope !== void 0 && (i.scope = JSON.stringify(r.scope)), r.authorization_details_types !== void 0 && (i.authorization_details_types = JSON.stringify(r.authorization_details_types)), delete i.id, X(e, _.pk(t), _.sk(n), i);
+		},
+		async remove(t, n) {
+			return q(e, _.pk(t), _.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/clientConnections.ts
+function it(e) {
+	let { tenant_id: t, ...n } = Z(e), r = Q({
+		...n,
+		options: e.options ? JSON.parse(e.options) : void 0
+	});
+	return s.parse(r);
+}
+function at(e) {
+	return {
+		async listByClient(t, n) {
+			let { items: r } = await J(e, V.pk(t, n), { skPrefix: V.skPrefix() });
+			r.sort((e, t) => e.order - t.order);
+			let i = [];
+			for (let n of r) {
+				let r = await G(e, v.pk(t), v.sk(n.connection_id));
+				r && i.push(it(r));
+			}
+			return i;
+		},
+		async updateByClient(t, n, r) {
+			let { items: i } = await J(e, V.pk(t, n), { skPrefix: V.skPrefix() });
+			if (i.length > 0) {
+				let r = i.map((e) => ({ DeleteRequest: { Key: {
+					PK: V.pk(t, n),
+					SK: V.sk(e.connection_id, e.order)
+				} } }));
+				for (let t = 0; t < r.length; t += 25) {
+					let n = r.slice(t, t + 25);
+					await e.client.send(new we({ RequestItems: { [e.tableName]: n } }));
+				}
+			}
+			let a = (/* @__PURE__ */ new Date()).toISOString();
+			for (let i = 0; i < r.length; i++) {
+				let o = r[i];
+				await K(e, {
+					PK: V.pk(t, n),
+					SK: V.sk(o, i),
+					GSI1PK: V.gsi1pk(t, o),
+					GSI1SK: V.gsi1sk(n),
+					entityType: "CLIENT_CONNECTION",
+					tenant_id: t,
+					client_id: n,
+					connection_id: o,
+					order: i,
+					created_at: a,
+					updated_at: a
+				});
+			}
+			return !0;
+		},
+		async listByConnection(t, n) {
+			let { items: r } = await J(e, V.gsi1pk(t, n), {
+				indexName: "GSI1",
+				skPrefix: "CLIENT_CONNECTION#"
+			});
+			return r.map((e) => e.client_id);
+		},
+		async addClientToConnection(t, n, r) {
+			let { items: i } = await J(e, V.pk(t, r), { skPrefix: V.skPrefix() });
+			if (i.some((e) => e.connection_id === n)) return !0;
+			let a = i.length, o = (/* @__PURE__ */ new Date()).toISOString();
+			return await K(e, {
+				PK: V.pk(t, r),
+				SK: V.sk(n, a),
+				GSI1PK: V.gsi1pk(t, n),
+				GSI1SK: V.gsi1sk(r),
+				entityType: "CLIENT_CONNECTION",
+				tenant_id: t,
+				client_id: r,
+				connection_id: n,
+				order: a,
+				created_at: o,
+				updated_at: o
+			}), !0;
+		},
+		async removeClientFromConnection(t, n, r) {
+			let { items: i } = await J(e, V.pk(t, r), { skPrefix: V.skPrefix() }), a = i.find((e) => e.connection_id === n);
+			return a ? q(e, V.pk(t, r), V.sk(n, a.order)) : !1;
+		}
+	};
+}
+//#endregion
+//#region src/adapters/clientRegistrationTokens.ts
+function ot(e) {
+	let { tenant_id: t, constraints: n, ...r } = Z(e), a = Q({
+		...r,
+		constraints: n ? JSON.parse(n) : void 0
+	});
+	return i.parse(a);
+}
+function st(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
+				PK: U.pk(t),
+				SK: U.sk(n.id),
+				GSI1PK: U.gsi1pk(t, n.token_hash),
+				GSI1SK: U.gsi1sk(),
+				entityType: "CLIENT_REGISTRATION_TOKEN",
+				tenant_id: t,
+				id: n.id,
+				token_hash: n.token_hash,
+				type: n.type,
+				client_id: n.client_id,
+				sub: n.sub,
+				constraints: n.constraints ? JSON.stringify(n.constraints) : void 0,
+				single_use: n.single_use,
+				expires_at: n.expires_at,
+				created_at: r,
+				updated_at: r
+			};
+			return n.client_id && (i.GSI2PK = U.gsi2pk(t, n.client_id), i.GSI2SK = U.gsi2sk(n.id)), n.expires_at && (i.ttl = Math.floor(new Date(n.expires_at).getTime() / 1e3)), await K(e, i), ot(i);
+		},
+		async get(t, n) {
+			let r = await G(e, U.pk(t), U.sk(n));
+			return r ? ot(r) : null;
+		},
+		async getByHash(t, n) {
+			let r = await J(e, U.gsi1pk(t, n), {
+				indexName: "GSI1",
+				skValue: U.gsi1sk(),
+				limit: 1
+			});
+			return r.items[0] ? ot(r.items[0]) : null;
+		},
+		async listByClient(t, n) {
+			return (await J(e, U.gsi2pk(t, n), {
+				indexName: "GSI2",
+				skPrefix: U.skPrefix(),
+				scanIndexForward: !1
+			})).items.map(ot);
+		},
+		async markUsed(t, n, r) {
+			try {
+				return await e.client.send(new Ae({
+					TableName: e.tableName,
+					Key: {
+						PK: U.pk(t),
+						SK: U.sk(n)
+					},
+					UpdateExpression: "SET #used_at = :used_at, #updated_at = :updated_at",
+					ConditionExpression: "attribute_exists(PK) AND attribute_not_exists(#used_at)",
+					ExpressionAttributeNames: {
+						"#used_at": "used_at",
+						"#updated_at": "updated_at"
+					},
+					ExpressionAttributeValues: {
+						":used_at": r,
+						":updated_at": (/* @__PURE__ */ new Date()).toISOString()
+					}
+				})), !0;
+			} catch (e) {
+				if (e?.name === "ConditionalCheckFailedException") return !1;
+				throw e;
+			}
+		},
+		async revoke(t, n, r) {
+			try {
+				return await e.client.send(new Ae({
+					TableName: e.tableName,
+					Key: {
+						PK: U.pk(t),
+						SK: U.sk(n)
+					},
+					UpdateExpression: "SET #revoked_at = :revoked_at, #updated_at = :updated_at",
+					ConditionExpression: "attribute_exists(PK)",
+					ExpressionAttributeNames: {
+						"#revoked_at": "revoked_at",
+						"#updated_at": "updated_at"
+					},
+					ExpressionAttributeValues: {
+						":revoked_at": r,
+						":updated_at": (/* @__PURE__ */ new Date()).toISOString()
+					}
+				})), !0;
+			} catch (e) {
+				if (e?.name === "ConditionalCheckFailedException") return !1;
+				throw e;
+			}
+		},
+		async revokeByClient(t, n, r) {
+			let i = await J(e, U.gsi2pk(t, n), {
+				indexName: "GSI2",
+				skPrefix: U.skPrefix()
+			}), a = 0, o = (/* @__PURE__ */ new Date()).toISOString();
+			for (let t of i.items) if (!t.revoked_at) try {
+				await e.client.send(new Ae({
+					TableName: e.tableName,
+					Key: {
+						PK: t.PK,
+						SK: t.SK
+					},
+					UpdateExpression: "SET #revoked_at = :revoked_at, #updated_at = :updated_at",
+					ConditionExpression: "attribute_exists(PK) AND attribute_not_exists(#revoked_at)",
+					ExpressionAttributeNames: {
+						"#revoked_at": "revoked_at",
+						"#updated_at": "updated_at"
+					},
+					ExpressionAttributeValues: {
+						":revoked_at": r,
+						":updated_at": o
+					}
+				})), a++;
+			} catch (e) {
+				if (e?.name === "ConditionalCheckFailedException") continue;
+				throw e;
+			}
+			return a;
+		},
+		async remove(t, n) {
+			return q(e, U.pk(t), U.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/connections.ts
+function ct(e) {
+	let { tenant_id: t, is_system: n, ...r } = Z(e), i = Q({
+		...r,
+		options: e.options ? JSON.parse(e.options) : void 0,
+		is_system: n ? !0 : void 0
+	});
+	return s.parse(i);
+}
+function lt(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = n.id || d(), a = {
+				PK: v.pk(t),
+				SK: v.sk(i),
+				GSI1PK: v.gsi1pk(t, n.name),
+				GSI1SK: v.gsi1sk(),
+				entityType: "CONNECTION",
+				tenant_id: t,
+				id: i,
+				name: n.name,
+				strategy: n.strategy,
+				options: n.options ? JSON.stringify(n.options) : void 0,
+				is_system: n.is_system ?? !1,
+				created_at: r,
+				updated_at: r
+			};
+			return await K(e, a), ct(a);
+		},
+		async get(t, n) {
+			let r = await G(e, v.pk(t), v.sk(n));
+			return r ? ct(r) : null;
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, v.pk(t), n, { skPrefix: "CONNECTION#" });
+			return {
+				connections: r.items.map(ct),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async update(t, n, r) {
+			let i = {
+				...r,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return r.options !== void 0 && (i.options = JSON.stringify(r.options)), r.name !== void 0 && (i.GSI1PK = v.gsi1pk(t, r.name), i.GSI1SK = v.gsi1sk()), delete i.id, X(e, v.pk(t), v.sk(n), i);
+		},
+		async remove(t, n) {
+			return q(e, v.pk(t), v.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/loginSessions.ts
+function ut(e) {
+	let { tenant_id: t, authParams: n, ...r } = Z(e), i = Q({
+		...r,
+		authParams: JSON.parse(n)
+	});
+	return se.parse(i);
+}
+function dt(t) {
+	return {
+		async create(n, r) {
+			let i = (/* @__PURE__ */ new Date()).toISOString(), a = d(), o = {
+				PK: h.pk(n),
+				SK: h.sk(a),
+				entityType: "LOGIN_SESSION",
+				tenant_id: n,
+				id: a,
+				csrf_token: r.csrf_token,
+				authParams: JSON.stringify(r.authParams),
+				expires_at: r.expires_at,
+				state: r.state ?? e.PENDING,
+				state_data: r.state_data,
+				failure_reason: r.failure_reason,
+				user_id: r.user_id,
+				auth0Client: r.auth0Client,
+				deleted_at: r.deleted_at,
+				ip: r.ip,
+				useragent: r.useragent,
+				session_id: r.session_id,
+				authorization_url: r.authorization_url?.slice(0, 1024),
+				created_at: i,
+				updated_at: i
+			};
+			return o.ttl = Math.floor(new Date(r.expires_at).getTime() / 1e3), await K(t, o), ut(o);
+		},
+		async get(e, n) {
+			let r = await G(t, h.pk(e), h.sk(n));
+			return r ? ut(r) : null;
+		},
+		async update(e, n, r) {
+			let i = {
+				...r,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return r.authParams !== void 0 && (i.authParams = JSON.stringify(r.authParams)), delete i.id, X(t, h.pk(e), h.sk(n), i);
+		},
+		async remove(e, n) {
+			return q(t, h.pk(e), h.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/branding.ts
+function ft(e) {
+	let { tenant_id: t, ...r } = Z(e), i = Q({
+		...r,
+		colors: e.colors ? JSON.parse(e.colors) : void 0,
+		font: e.font ? JSON.parse(e.font) : void 0
+	});
+	return n.parse(i);
+}
+function pt(e) {
+	return {
+		async set(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = await G(e, Fe.pk(t), Fe.sk());
+			await K(e, {
+				PK: Fe.pk(t),
+				SK: Fe.sk(),
+				entityType: "BRANDING",
+				tenant_id: t,
+				colors: n.colors ? JSON.stringify(n.colors) : void 0,
+				favicon_url: n.favicon_url,
+				logo_url: n.logo_url,
+				powered_by_logo_url: n.powered_by_logo_url,
+				font: n.font ? JSON.stringify(n.font) : void 0,
+				created_at: i?.created_at || r,
+				updated_at: r
+			});
+		},
+		async get(t) {
+			let n = await G(e, Fe.pk(t), Fe.sk());
+			return n ? ft(n) : null;
+		}
+	};
+}
+//#endregion
+//#region src/adapters/universalLoginTemplates.ts
+function mt(e) {
+	return {
+		async get(t) {
+			let n = await G(e, x.pk(t), x.sk());
+			return n ? { body: n.body } : null;
+		},
+		async set(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = await G(e, x.pk(t), x.sk());
+			await K(e, {
+				PK: x.pk(t),
+				SK: x.sk(),
+				entityType: "UNIVERSAL_LOGIN_TEMPLATE",
+				tenant_id: t,
+				body: n.body,
+				created_at: i?.created_at || r,
+				updated_at: r
+			});
+		},
+		async delete(t) {
+			await q(e, x.pk(t), x.sk());
+		}
+	};
+}
+//#endregion
+//#region src/adapters/hookCode.ts
+var $ = {
+	pk: (e) => `TENANT#${e}`,
+	sk: (e) => `HOOK_CODE#${e}`
+};
+function ht(e) {
+	let { tenant_id: t, secrets: n, ...r } = Z(e);
+	return {
+		...r,
+		tenant_id: t,
+		secrets: n ? JSON.parse(n) : void 0
+	};
+}
+function gt(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = `hc_${d()}`, a = {
+				PK: $.pk(t),
+				SK: $.sk(i),
+				entityType: "HOOK_CODE",
+				id: i,
+				tenant_id: t,
+				code: n.code,
+				secrets: n.secrets ? JSON.stringify(n.secrets) : null,
+				created_at: r,
+				updated_at: r
+			};
+			return await K(e, a), ht(a);
+		},
+		async get(t, n) {
+			let r = await G(e, $.pk(t), $.sk(n));
+			return r ? ht(r) : null;
+		},
+		async update(t, n, r) {
+			let i = await G(e, $.pk(t), $.sk(n));
+			if (!i) return !1;
+			let a = {
+				...i,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return r.code !== void 0 && (a.code = r.code), r.secrets !== void 0 && (a.secrets = JSON.stringify(r.secrets)), await K(e, a), !0;
+		},
+		async remove(t, n) {
+			return await G(e, $.pk(t), $.sk(n)) ? (await q(e, $.pk(t), $.sk(n)), !0) : !1;
+		}
+	};
+}
+//#endregion
+//#region src/adapters/hooks.ts
+function _t(e) {
+	let { tenant_id: t, ...n } = Z(e);
+	return ie.parse(Q(n));
+}
+function vt(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = n.hook_id || d(), a = "url" in n ? n.url : void 0, o = "form_id" in n ? n.form_id : void 0, s = "template_id" in n ? n.template_id : void 0, c = {
+				PK: C.pk(t),
+				SK: C.sk(i),
+				entityType: "HOOK",
+				tenant_id: t,
+				hook_id: i,
+				trigger_id: n.trigger_id,
+				url: a,
+				form_id: o,
+				template_id: s,
+				enabled: n.enabled ?? !1,
+				synchronous: n.synchronous ?? !1,
+				priority: n.priority,
+				created_at: r,
+				updated_at: r
+			};
+			return await K(e, c), _t(c);
+		},
+		async get(t, n) {
+			let r = await G(e, C.pk(t), C.sk(n));
+			return r ? _t(r) : null;
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, C.pk(t), n, { skPrefix: "HOOK#" });
+			return {
+				hooks: r.items.map(_t),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async update(t, n, r) {
+			let i = {
+				...r,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return delete i.hook_id, X(e, C.pk(t), C.sk(n), i);
+		},
+		async remove(t, n) {
+			return q(e, C.pk(t), C.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/keys.ts
+function yt(e) {
+	return ve.parse(Q(Z(e)));
+}
+function bt(e) {
+	return {
+		async create(t) {
+			let n = (/* @__PURE__ */ new Date()).toISOString();
+			await K(e, {
+				PK: Ie.pk(),
+				SK: Ie.sk(t.kid),
+				entityType: "KEY",
+				kid: t.kid,
+				cert: t.cert,
+				fingerprint: t.fingerprint,
+				thumbprint: t.thumbprint,
+				pkcs7: t.pkcs7,
+				current: t.current,
+				next: t.next,
+				previous: t.previous,
+				current_since: t.current_since,
+				current_until: t.current_until,
+				revoked: t.revoked,
+				revoked_at: t.revoked_at,
+				connection: t.connection,
+				type: t.type,
+				created_at: n,
+				updated_at: n
+			});
+		},
+		async list(t = {}) {
+			let n = await Y(e, Ie.pk(), t, { skPrefix: "KEY#" });
+			return {
+				signingKeys: n.items.map(yt),
+				start: n.start,
+				limit: n.limit,
+				length: n.length
+			};
+		},
+		async update(t, n) {
+			let r = {
+				...n,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return X(e, Ie.pk(), Ie.sk(t), r);
+		}
+	};
+}
+//#endregion
+//#region src/adapters/customDomains.ts
+function xt(e) {
+	let { tenant_id: t, verification: n, domain_metadata: r, ...i } = Z(e), a = Q({
+		...i,
+		verification: n ? JSON.parse(n) : void 0,
+		domain_metadata: r ? JSON.parse(r) : void 0
+	});
+	return c.parse(a);
+}
+function St(e) {
+	let { verification: t, domain_metadata: n, ...r } = Z(e), i = Q({
+		...r,
+		tenant_id: e.tenant_id,
+		verification: t ? JSON.parse(t) : void 0,
+		domain_metadata: n ? JSON.parse(n) : void 0
+	});
+	return l.parse(i);
+}
+function Ct(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = n.custom_domain_id || d(), a = {
+				PK: w.pk(t),
+				SK: w.sk(i),
+				GSI1PK: w.gsi1pk(n.domain),
+				GSI1SK: w.gsi1sk(),
+				entityType: "CUSTOM_DOMAIN",
+				tenant_id: t,
+				custom_domain_id: i,
+				domain: n.domain,
+				primary: !1,
+				status: "pending_verification",
+				type: n.type,
+				verification_method: n.verification_method,
+				custom_client_ip_header: n.custom_client_ip_header,
+				tls_policy: n.tls_policy,
+				domain_metadata: n.domain_metadata ? JSON.stringify(n.domain_metadata) : void 0,
+				created_at: r,
+				updated_at: r
+			};
+			return await K(e, a), xt(a);
+		},
+		async get(t, n) {
+			let r = await G(e, w.pk(t), w.sk(n));
+			return r ? xt(r) : null;
+		},
+		async getByDomain(t) {
+			let { items: n } = await J(e, w.gsi1pk(t), {
+				indexName: "GSI1",
+				skValue: w.gsi1sk()
+			});
+			return n.length ? St(n[0]) : null;
+		},
+		async list(t) {
+			let { items: n } = await J(e, w.pk(t), { skPrefix: "CUSTOM_DOMAIN#" });
+			return n.map(xt);
+		},
+		async update(t, n, r) {
+			let i = {
+				...r,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return r.verification !== void 0 && (i.verification = JSON.stringify(r.verification)), r.domain_metadata !== void 0 && (i.domain_metadata = JSON.stringify(r.domain_metadata)), delete i.custom_domain_id, X(e, w.pk(t), w.sk(n), i);
+		},
+		async remove(t, n) {
+			return q(e, w.pk(t), w.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/logs.ts
+function wt(e) {
+	let { tenant_id: t, country_code: n, city_name: r, latitude: i, longitude: a, time_zone: o, continent_code: s, ...c } = Z(e), l = Q({
+		...c,
+		auth0_client: e.auth0_client ? JSON.parse(e.auth0_client) : void 0,
+		details: e.details ? JSON.parse(e.details) : void 0,
+		location_info: n ? {
+			country_code: n,
+			city_name: r,
+			latitude: i,
+			longitude: a,
+			time_zone: o,
+			continent_code: s
+		} : void 0
+	});
+	return oe.parse(l);
+}
+function Tt(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = n.log_id || d(), a = n.date || r, o = a.substring(0, 10), s = {
+				PK: E.pk(t),
+				SK: E.sk(i),
+				GSI1PK: E.gsi1pk(t, o),
+				GSI1SK: E.gsi1sk(i),
+				entityType: "LOG",
+				tenant_id: t,
+				log_id: i,
+				type: n.type,
+				description: n.description,
+				ip: n.ip,
+				user_agent: n.user_agent,
+				date: a,
+				user_id: n.user_id,
+				user_name: n.user_name,
+				connection: n.connection,
+				connection_id: n.connection_id,
+				client_id: n.client_id,
+				client_name: n.client_name,
+				audience: n.audience,
+				scope: n.scope,
+				strategy: n.strategy,
+				strategy_type: n.strategy_type,
+				hostname: n.hostname,
+				isMobile: n.isMobile,
+				auth0_client: n.auth0_client ? JSON.stringify(n.auth0_client) : void 0,
+				details: n.details ? JSON.stringify(n.details) : void 0,
+				country_code: n.location_info?.country_code,
+				city_name: n.location_info?.city_name,
+				latitude: n.location_info?.latitude,
+				longitude: n.location_info?.longitude,
+				time_zone: n.location_info?.time_zone,
+				continent_code: n.location_info?.continent_code,
+				created_at: r,
+				updated_at: r
+			}, c = new Date(a);
+			return c.setDate(c.getDate() + 30), s.ttl = Math.floor(c.getTime() / 1e3), await K(e, s), wt(s);
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, E.pk(t), n, {
+				skPrefix: "LOG#",
+				scanIndexForward: !1
+			});
+			return {
+				logs: r.items.map(wt),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async get(t, n) {
+			let r = await G(e, E.pk(t), E.sk(n));
+			return r ? wt(r) : null;
+		}
+	};
+}
+//#endregion
+//#region src/adapters/themes.ts
+function Et(e) {
+	let { tenant_id: t, ...n } = Z(e), r = Q({
+		...n,
+		borders: e.borders ? JSON.parse(e.borders) : void 0,
+		colors: e.colors ? JSON.parse(e.colors) : void 0,
+		fonts: e.fonts ? JSON.parse(e.fonts) : void 0,
+		page_background: e.page_background ? JSON.parse(e.page_background) : void 0,
+		widget: e.widget ? JSON.parse(e.widget) : void 0
+	});
+	return be.parse(r);
+}
+function Dt(e) {
+	return {
+		async create(t, n, r) {
+			let i = (/* @__PURE__ */ new Date()).toISOString(), a = r || d(), o = {
+				PK: S.pk(t),
+				SK: S.sk(a),
+				entityType: "THEME",
+				tenant_id: t,
+				themeId: a,
+				displayName: n.displayName,
+				borders: n.borders ? JSON.stringify(n.borders) : void 0,
+				colors: n.colors ? JSON.stringify(n.colors) : void 0,
+				fonts: n.fonts ? JSON.stringify(n.fonts) : void 0,
+				page_background: n.page_background ? JSON.stringify(n.page_background) : void 0,
+				widget: n.widget ? JSON.stringify(n.widget) : void 0,
+				created_at: i,
+				updated_at: i
+			};
+			return await K(e, o), Et(o);
+		},
+		async get(t, n) {
+			let r = await G(e, S.pk(t), S.sk(n));
+			return r ? Et(r) : null;
+		},
+		async update(t, n, r) {
+			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
+			return r.displayName !== void 0 && (i.displayName = r.displayName), r.borders !== void 0 && (i.borders = JSON.stringify(r.borders)), r.colors !== void 0 && (i.colors = JSON.stringify(r.colors)), r.fonts !== void 0 && (i.fonts = JSON.stringify(r.fonts)), r.page_background !== void 0 && (i.page_background = JSON.stringify(r.page_background)), r.widget !== void 0 && (i.widget = JSON.stringify(r.widget)), X(e, S.pk(t), S.sk(n), i);
+		},
+		async remove(t, n) {
+			return q(e, S.pk(t), S.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/promptSettings.ts
+var Ot = {
+	universal_login_experience: "new",
+	identifier_first: !1,
+	password_first: !1,
+	webauthn_platform_first_factor: !1
+};
+function kt(e) {
+	let { tenant_id: t, ...n } = Z(e), r = Q({
+		universal_login_experience: n.universal_login_experience || "new",
+		identifier_first: n.identifier_first ?? !1,
+		password_first: n.password_first ?? !1,
+		webauthn_platform_first_factor: n.webauthn_platform_first_factor ?? !1
+	});
+	return fe.parse(r);
+}
+function At(e) {
+	return {
+		async set(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = await this.get(t), a = await G(e, Le.pk(t), Le.sk());
+			await K(e, {
+				PK: Le.pk(t),
+				SK: Le.sk(),
+				entityType: "PROMPT_SETTING",
+				tenant_id: t,
+				universal_login_experience: n.universal_login_experience ?? i.universal_login_experience,
+				identifier_first: n.identifier_first ?? i.identifier_first,
+				password_first: n.password_first ?? i.password_first,
+				webauthn_platform_first_factor: n.webauthn_platform_first_factor ?? i.webauthn_platform_first_factor,
+				created_at: a?.created_at || r,
+				updated_at: r
+			});
+		},
+		async get(t) {
+			let n = await G(e, Le.pk(t), Le.sk());
+			return n ? kt(n) : Ot;
+		}
+	};
+}
+//#endregion
+//#region src/adapters/emailProviders.ts
+function jt(e) {
+	let { tenant_id: t, ...n } = Z(e), r = Q({
+		...n,
+		credentials: e.credentials ? JSON.parse(e.credentials) : void 0,
+		settings: e.settings ? JSON.parse(e.settings) : void 0
+	});
+	return u.parse(r);
+}
+function Mt(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString();
+			await K(e, {
+				PK: D.pk(t),
+				SK: D.sk(),
+				entityType: "EMAIL_PROVIDER",
+				tenant_id: t,
+				name: n.name,
+				enabled: n.enabled ?? !0,
+				default_from_address: n.default_from_address,
+				credentials: n.credentials ? JSON.stringify(n.credentials) : void 0,
+				settings: n.settings ? JSON.stringify(n.settings) : void 0,
+				created_at: r,
+				updated_at: r
+			});
+		},
+		async get(t) {
+			let n = await G(e, D.pk(t), D.sk());
+			return n ? jt(n) : null;
+		},
+		async update(t, n) {
+			let r = {
+				...n,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			n.credentials !== void 0 && (r.credentials = JSON.stringify(n.credentials)), n.settings !== void 0 && (r.settings = JSON.stringify(n.settings)), await X(e, D.pk(t), D.sk(), r);
+		},
+		async remove(t) {
+			await q(e, D.pk(t), D.sk());
+		}
+	};
+}
+//#endregion
+//#region src/adapters/emailTemplates.ts
+function Nt(e) {
+	let t = Z(e), n = Q({
+		template: t.template,
+		body: t.body,
+		from: t.from,
+		subject: t.subject,
+		syntax: t.syntax,
+		resultUrl: t.result_url,
+		urlLifetimeInSeconds: t.url_lifetime_in_seconds,
+		includeEmailInRedirect: !!t.include_email_in_redirect,
+		enabled: !!t.enabled
+	});
+	return ee.parse(n);
+}
+function Pt(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString();
+			return await K(e, {
+				PK: O.pk(t),
+				SK: O.sk(n.template),
+				entityType: "EMAIL_TEMPLATE",
+				tenant_id: t,
+				template: n.template,
+				body: n.body,
+				from: n.from,
+				subject: n.subject,
+				syntax: n.syntax,
+				result_url: n.resultUrl,
+				url_lifetime_in_seconds: n.urlLifetimeInSeconds,
+				include_email_in_redirect: n.includeEmailInRedirect,
+				enabled: n.enabled,
+				created_at: r,
+				updated_at: r
+			}), n;
+		},
+		async get(t, n) {
+			let r = await G(e, O.pk(t), O.sk(n));
+			return r ? Nt(r) : null;
+		},
+		async list(t) {
+			let { items: n } = await J(e, O.pk(t), { skPrefix: O.skPrefix() });
+			return n.map(Nt);
+		},
+		async update(t, n, r) {
+			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
+			return r.body !== void 0 && (i.body = r.body), r.from !== void 0 && (i.from = r.from), r.subject !== void 0 && (i.subject = r.subject), r.syntax !== void 0 && (i.syntax = r.syntax), r.resultUrl !== void 0 && (i.result_url = r.resultUrl), r.urlLifetimeInSeconds !== void 0 && (i.url_lifetime_in_seconds = r.urlLifetimeInSeconds), r.includeEmailInRedirect !== void 0 && (i.include_email_in_redirect = r.includeEmailInRedirect), r.enabled !== void 0 && (i.enabled = r.enabled), await G(e, O.pk(t), O.sk(n)) ? (await X(e, O.pk(t), O.sk(n), i), !0) : !1;
+		},
+		async remove(t, n) {
+			return await G(e, O.pk(t), O.sk(n)) ? (await q(e, O.pk(t), O.sk(n)), !0) : !1;
+		}
+	};
+}
+//#endregion
+//#region src/adapters/refreshTokens.ts
+function Ft(e) {
+	let { tenant_id: t, device: n, resource_servers: r, ...i } = Z(e), a = Q({
+		...i,
+		device: JSON.parse(n),
+		resource_servers: JSON.parse(r)
+	});
+	return pe.parse(a);
+}
+function It(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
+				PK: k.pk(t),
+				SK: k.sk(n.id),
+				GSI1PK: k.gsi1pk(t, n.user_id),
+				GSI1SK: k.gsi1sk(n.id),
+				entityType: "REFRESH_TOKEN",
+				tenant_id: t,
+				id: n.id,
+				user_id: n.user_id,
+				login_id: n.login_id,
+				client_id: n.client_id,
+				expires_at: n.expires_at,
+				idle_expires_at: n.idle_expires_at,
+				last_exchanged_at: n.last_exchanged_at,
+				device: JSON.stringify(n.device),
+				resource_servers: JSON.stringify(n.resource_servers),
+				rotating: n.rotating,
+				token_lookup: n.token_lookup,
+				token_hash: n.token_hash,
+				family_id: n.family_id,
+				rotated_to: n.rotated_to,
+				rotated_at: n.rotated_at,
+				created_at: r,
+				updated_at: r
+			};
+			return n.token_lookup && (i.GSI2PK = k.gsi2pk(t, n.token_lookup), i.GSI2SK = k.gsi2sk()), n.expires_at && (i.ttl = Math.floor(new Date(n.expires_at).getTime() / 1e3)), await K(e, i), Ft(i);
+		},
+		async get(t, n) {
+			let r = await G(e, k.pk(t), k.sk(n));
+			return r ? Ft(r) : null;
+		},
+		async getByLookup(t, n) {
+			let r = await J(e, k.gsi2pk(t, n), {
+				indexName: "GSI2",
+				skValue: k.gsi2sk(),
+				limit: 1
+			});
+			return r.items[0] ? Ft(r.items[0]) : null;
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, k.pk(t), n, { skPrefix: "REFRESH_TOKEN#" });
+			return {
+				refresh_tokens: r.items.map(Ft),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async update(t, n, r, i) {
+			let a = {
+				...r,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			r.device !== void 0 && (a.device = JSON.stringify(r.device)), r.resource_servers !== void 0 && (a.resource_servers = JSON.stringify(r.resource_servers)), delete a.id;
+			let o = await X(e, k.pk(t), k.sk(n), a);
+			if (o && i?.loginSessionBump) try {
+				await X(e, h.pk(t), h.sk(i.loginSessionBump.login_id), {
+					expires_at: i.loginSessionBump.expires_at,
+					updated_at: (/* @__PURE__ */ new Date()).toISOString()
+				});
+			} catch {}
+			return o;
+		},
+		async remove(t, n) {
+			return q(e, k.pk(t), k.sk(n));
+		},
+		async revokeByLoginSession(t, n, r) {
+			let i = 0, a = 0;
+			for (;;) {
+				let o = await Y(e, k.pk(t), {
+					page: a,
+					per_page: 100
+				}, { skPrefix: "REFRESH_TOKEN#" });
+				for (let a of o.items) if (a.login_id === n && !a.revoked_at) try {
+					await e.client.send(new Ae({
+						TableName: e.tableName,
+						Key: {
+							PK: k.pk(t),
+							SK: k.sk(a.id)
+						},
+						UpdateExpression: "SET #revoked_at = :revoked_at, #updated_at = :updated_at",
+						ConditionExpression: "attribute_exists(PK) AND attribute_not_exists(#revoked_at)",
+						ExpressionAttributeNames: {
+							"#revoked_at": "revoked_at",
+							"#updated_at": "updated_at"
+						},
+						ExpressionAttributeValues: {
+							":revoked_at": r,
+							":updated_at": (/* @__PURE__ */ new Date()).toISOString()
+						}
+					})), i++;
+				} catch (e) {
+					if (e?.name === "ConditionalCheckFailedException") continue;
+					throw e;
+				}
+				if (o.items.length < 100) break;
+				a++;
+			}
+			return i;
+		},
+		async revokeFamily(t, n, r) {
+			let i = 0, a = 0;
+			for (;;) {
+				let o = await Y(e, k.pk(t), {
+					page: a,
+					per_page: 100
+				}, { skPrefix: "REFRESH_TOKEN#" });
+				for (let a of o.items) if (a.family_id === n && !a.revoked_at) try {
+					await e.client.send(new Ae({
+						TableName: e.tableName,
+						Key: {
+							PK: k.pk(t),
+							SK: k.sk(a.id)
+						},
+						UpdateExpression: "SET #revoked_at = :revoked_at, #updated_at = :updated_at",
+						ConditionExpression: "attribute_exists(PK) AND attribute_not_exists(#revoked_at)",
+						ExpressionAttributeNames: {
+							"#revoked_at": "revoked_at",
+							"#updated_at": "updated_at"
+						},
+						ExpressionAttributeValues: {
+							":revoked_at": r,
+							":updated_at": (/* @__PURE__ */ new Date()).toISOString()
+						}
+					})), i++;
+				} catch (e) {
+					if (e?.name === "ConditionalCheckFailedException") continue;
+					throw e;
+				}
+				if (o.items.length < 100) break;
+				a++;
+			}
+			return i;
+		}
+	};
+}
+//#endregion
+//#region src/adapters/forms.ts
+function Lt(e) {
+	let { tenant_id: t, ...n } = Z(e), r = Q({
+		...n,
+		nodes: e.nodes ? JSON.parse(e.nodes) : void 0,
+		start: e.start ? JSON.parse(e.start) : void 0,
+		ending: e.ending ? JSON.parse(e.ending) : void 0,
+		messages: e.messages ? JSON.parse(e.messages) : void 0,
+		languages: e.languages ? JSON.parse(e.languages) : void 0,
+		translations: e.translations ? JSON.parse(e.translations) : void 0,
+		style: e.style ? JSON.parse(e.style) : void 0
+	});
+	return ne.parse(r);
+}
+function Rt(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = d(), a = {
+				PK: A.pk(t),
+				SK: A.sk(i),
+				entityType: "FORM",
+				tenant_id: t,
+				id: i,
+				name: n.name,
+				nodes: n.nodes ? JSON.stringify(n.nodes) : void 0,
+				start: n.start ? JSON.stringify(n.start) : void 0,
+				ending: n.ending ? JSON.stringify(n.ending) : void 0,
+				messages: n.messages ? JSON.stringify(n.messages) : void 0,
+				languages: n.languages ? JSON.stringify(n.languages) : void 0,
+				translations: n.translations ? JSON.stringify(n.translations) : void 0,
+				style: n.style ? JSON.stringify(n.style) : void 0,
+				created_at: r,
+				updated_at: r
+			};
+			return await K(e, a), Lt(a);
+		},
+		async get(t, n) {
+			let r = await G(e, A.pk(t), A.sk(n));
+			return r ? Lt(r) : null;
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, A.pk(t), n, { skPrefix: "FORM#" });
+			return {
+				forms: r.items.map(Lt),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async update(t, n, r) {
+			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
+			return r.name !== void 0 && (i.name = r.name), r.nodes !== void 0 && (i.nodes = JSON.stringify(r.nodes)), r.start !== void 0 && (i.start = JSON.stringify(r.start)), r.ending !== void 0 && (i.ending = JSON.stringify(r.ending)), r.messages !== void 0 && (i.messages = JSON.stringify(r.messages)), r.languages !== void 0 && (i.languages = JSON.stringify(r.languages)), r.translations !== void 0 && (i.translations = JSON.stringify(r.translations)), r.style !== void 0 && (i.style = JSON.stringify(r.style)), X(e, A.pk(t), A.sk(n), i);
+		},
+		async remove(t, n) {
+			return q(e, A.pk(t), A.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/resourceServers.ts
+function zt(e) {
+	let { tenant_id: t, verification_key: n, is_system: r, metadata: i, ...a } = Z(e), o = Q({
+		...a,
+		verificationKey: n,
+		scopes: e.scopes ? JSON.parse(e.scopes) : void 0,
+		options: e.options ? JSON.parse(e.options) : void 0,
+		is_system: r ? !0 : void 0,
+		metadata: i
+	});
+	return me.parse(o);
+}
+function Bt(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = n.id || d(), a = {
+				PK: M.pk(t),
+				SK: M.sk(i),
+				GSI1PK: M.gsi1pk(t, n.identifier),
+				GSI1SK: M.gsi1sk(),
+				entityType: "RESOURCE_SERVER",
+				tenant_id: t,
+				id: i,
+				identifier: n.identifier,
+				name: n.name,
+				signing_alg: n.signing_alg,
+				signing_secret: n.signing_secret,
+				allow_offline_access: n.allow_offline_access,
+				skip_consent_for_verifiable_first_party_clients: n.skip_consent_for_verifiable_first_party_clients,
+				token_lifetime: n.token_lifetime,
+				token_lifetime_for_web: n.token_lifetime_for_web,
+				enforce_policies: n.options?.enforce_policies,
+				token_dialect: n.options?.token_dialect,
+				scopes: n.scopes ? JSON.stringify(n.scopes) : void 0,
+				options: n.options ? JSON.stringify(n.options) : void 0,
+				verification_key: n.verificationKey,
+				is_system: n.is_system ?? !1,
+				metadata: n.metadata,
+				created_at: r,
+				updated_at: r
+			};
+			return await K(e, a), zt(a);
+		},
+		async get(t, n) {
+			let r = await G(e, M.pk(t), M.sk(n));
+			return r ? zt(r) : null;
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, M.pk(t), n, { skPrefix: "RESOURCE_SERVER#" });
+			return {
+				resource_servers: r.items.map(zt),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async update(t, n, r) {
+			let i = {
+				...r,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return r.scopes !== void 0 && (i.scopes = JSON.stringify(r.scopes)), r.options !== void 0 && (i.options = JSON.stringify(r.options)), r.verificationKey !== void 0 && (i.verification_key = r.verificationKey, delete i.verificationKey), delete i.id, X(e, M.pk(t), M.sk(n), i);
+		},
+		async remove(t, n) {
+			return q(e, M.pk(t), M.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/roles.ts
+function Vt(e) {
+	let { tenant_id: t, is_system: n, metadata: r, ...i } = Z(e);
+	return ge.parse(Q({
+		...i,
+		is_system: n ? !0 : void 0,
+		metadata: r
+	}));
+}
+function Ht(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = d(), a = {
+				PK: N.pk(t),
+				SK: N.sk(i),
+				entityType: "ROLE",
+				tenant_id: t,
+				id: i,
+				name: n.name,
+				description: n.description,
+				is_system: n.is_system ?? !1,
+				metadata: n.metadata,
+				created_at: r,
+				updated_at: r
+			};
+			return await K(e, a), Vt(a);
+		},
+		async get(t, n) {
+			let r = await G(e, N.pk(t), N.sk(n));
+			return r ? Vt(r) : null;
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, N.pk(t), n, { skPrefix: "ROLE#" });
+			return {
+				roles: r.items.map(Vt),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async update(t, n, r) {
+			let i = {
+				...r,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return delete i.id, X(e, N.pk(t), N.sk(n), i);
+		},
+		async remove(t, n) {
+			return q(e, N.pk(t), N.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/rolePermissions.ts
+function Ut(e) {
+	let { tenant_id: t, ...n } = Z(e);
+	return he.parse(Q(n));
+}
+function Wt(e) {
+	return {
+		async assign(t, n, r) {
+			let i = (/* @__PURE__ */ new Date()).toISOString();
+			for (let a of r) await K(e, {
+				PK: P.pk(t, n),
+				SK: P.sk(a.resource_server_identifier, a.permission_name),
+				entityType: "ROLE_PERMISSION",
+				tenant_id: t,
+				role_id: a.role_id,
+				resource_server_identifier: a.resource_server_identifier,
+				permission_name: a.permission_name,
+				created_at: i,
+				updated_at: i
+			});
+			return !0;
+		},
+		async remove(t, n, r) {
+			for (let i of r) await q(e, P.pk(t, n), P.sk(i.resource_server_identifier, i.permission_name));
+			return !0;
+		},
+		async list(t, n, r = {}) {
+			return (await Y(e, P.pk(t, n), r, { skPrefix: P.skPrefix() })).items.map(Ut);
+		}
+	};
+}
+//#endregion
+//#region src/adapters/userPermissions.ts
+function Gt(e) {
+	let { tenant_id: t, sources: n, ...r } = Z(e), i = Q({
+		...r,
+		resource_server_name: e.resource_server_name || e.resource_server_identifier,
+		sources: n ? JSON.parse(n) : void 0
+	});
+	return Se.parse(i);
+}
+function Kt(e) {
+	return {
+		async create(t, n, r, i) {
+			let a = (/* @__PURE__ */ new Date()).toISOString();
+			return await K(e, {
+				PK: F.pk(t, n, i),
+				SK: F.sk(r.resource_server_identifier, r.permission_name),
+				entityType: "USER_PERMISSION",
+				tenant_id: t,
+				user_id: n,
+				organization_id: i,
+				resource_server_identifier: r.resource_server_identifier,
+				permission_name: r.permission_name,
+				created_at: a,
+				updated_at: a
+			}), !0;
+		},
+		async remove(t, n, r, i) {
+			return q(e, F.pk(t, n, i), F.sk(r.resource_server_identifier, r.permission_name));
+		},
+		async list(t, n, r = {}, i) {
+			return (await Y(e, F.pk(t, n, i), r, { skPrefix: F.skPrefix() })).items.map(Gt);
+		}
+	};
+}
+//#endregion
+//#region src/adapters/userRoles.ts
+function qt(e) {
+	let { tenant_id: t, ...n } = Z(e);
+	return ge.parse(Q(n));
+}
+function Jt(e) {
+	return {
+		async create(t, n, r, i) {
+			let a = (/* @__PURE__ */ new Date()).toISOString();
+			return await K(e, {
+				PK: I.pk(t, n, i),
+				SK: I.sk(r),
+				entityType: "USER_ROLE",
+				tenant_id: t,
+				user_id: n,
+				organization_id: i,
+				role_id: r,
+				created_at: a,
+				updated_at: a
+			}), !0;
+		},
+		async remove(t, n, r, i) {
+			return q(e, I.pk(t, n, i), I.sk(r));
+		},
+		async list(t, n, r = {}, i) {
+			let { items: a } = await J(e, I.pk(t, n, i), { skPrefix: I.skPrefix() }), o = [];
+			for (let n of a) {
+				let r = await G(e, N.pk(t), N.sk(n.role_id));
+				r && o.push(qt(r));
+			}
+			return o;
+		}
+	};
+}
+//#endregion
+//#region src/adapters/organizations.ts
+function Yt(e) {
+	let { tenant_id: t, ...n } = Z(e), r = Q({
+		...n,
+		branding: e.branding ? JSON.parse(e.branding) : void 0,
+		metadata: e.metadata ? JSON.parse(e.metadata) : void 0,
+		enabled_connections: e.enabled_connections ? JSON.parse(e.enabled_connections) : void 0,
+		token_quota: e.token_quota ? JSON.parse(e.token_quota) : void 0
+	});
+	return le.parse(r);
+}
+function Xt(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = n.id || d(), a = {
+				PK: L.pk(t),
+				SK: L.sk(i),
+				GSI1PK: L.gsi1pk(t, n.name),
+				GSI1SK: L.gsi1sk(),
+				entityType: "ORGANIZATION",
+				tenant_id: t,
+				id: i,
+				name: n.name,
+				display_name: n.display_name,
+				branding: n.branding ? JSON.stringify(n.branding) : void 0,
+				metadata: n.metadata ? JSON.stringify(n.metadata) : void 0,
+				enabled_connections: n.enabled_connections ? JSON.stringify(n.enabled_connections) : void 0,
+				token_quota: n.token_quota ? JSON.stringify(n.token_quota) : void 0,
+				created_at: r,
+				updated_at: r
+			};
+			return await K(e, a), Yt(a);
+		},
+		async get(t, n) {
+			let r = await G(e, L.pk(t), L.sk(n));
+			return r ||= (await Y(e, L.gsi1pk(t, n), {
+				page: 0,
+				per_page: 1
+			}, {
+				indexName: "GSI1",
+				skPrefix: "ORGANIZATION"
+			})).items[0] || null, r ? Yt(r) : null;
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, L.pk(t), n, { skPrefix: "ORGANIZATION#" });
+			return {
+				organizations: r.items.map(Yt),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async update(t, n, r) {
+			let i = {
+				...r,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return r.branding !== void 0 && (i.branding = JSON.stringify(r.branding)), r.metadata !== void 0 && (i.metadata = JSON.stringify(r.metadata)), r.enabled_connections !== void 0 && (i.enabled_connections = JSON.stringify(r.enabled_connections)), r.token_quota !== void 0 && (i.token_quota = JSON.stringify(r.token_quota)), delete i.id, X(e, L.pk(t), L.sk(n), i);
+		},
+		async remove(t, n) {
+			return q(e, L.pk(t), L.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/organizationConnections.ts
+async function Zt(e, t, n) {
+	let r = await G(e, v.pk(t), v.sk(n));
+	if (r) return {
+		name: r.name,
+		strategy: r.strategy
+	};
+}
+function Qt(e, t) {
+	return {
+		connection_id: e.connection_id,
+		assign_membership_on_login: e.assign_membership_on_login,
+		show_as_button: e.show_as_button,
+		is_signup_enabled: e.is_signup_enabled,
+		connection: t ? {
+			name: t.name,
+			strategy: t.strategy
+		} : void 0,
+		created_at: e.created_at,
+		updated_at: e.updated_at
+	};
+}
+function $t(e) {
+	return {
+		async create(t, n, r) {
+			let i = (/* @__PURE__ */ new Date()).toISOString(), a = {
+				PK: z.pk(t, n),
+				SK: z.sk(r.connection_id),
+				entityType: "ORGANIZATION_CONNECTION",
+				tenant_id: t,
+				organization_id: n,
+				connection_id: r.connection_id,
+				assign_membership_on_login: r.assign_membership_on_login ?? !1,
+				show_as_button: r.show_as_button ?? !0,
+				is_signup_enabled: r.is_signup_enabled ?? !0,
+				created_at: i,
+				updated_at: i
+			};
+			return await K(e, a), Qt(a, await Zt(e, t, r.connection_id));
+		},
+		async list(t, n) {
+			let { items: r } = await J(e, z.pk(t, n), { skPrefix: z.skPrefix() }), i = [];
+			for (let n of r) {
+				let r = await Zt(e, t, n.connection_id);
+				i.push(Qt(n, r));
+			}
+			return i;
+		},
+		async get(t, n, r) {
+			let i = await G(e, z.pk(t, n), z.sk(r));
+			return i ? Qt(i, await Zt(e, t, r)) : null;
+		},
+		async update(t, n, r, i) {
+			if (!await G(e, z.pk(t, n), z.sk(r))) return null;
+			let a = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
+			i.assign_membership_on_login !== void 0 && (a.assign_membership_on_login = i.assign_membership_on_login), i.show_as_button !== void 0 && (a.show_as_button = i.show_as_button), i.is_signup_enabled !== void 0 && (a.is_signup_enabled = i.is_signup_enabled), await X(e, z.pk(t, n), z.sk(r), a);
+			let o = await G(e, z.pk(t, n), z.sk(r));
+			return o ? Qt(o, await Zt(e, t, r)) : null;
+		},
+		async remove(t, n, r) {
+			return await G(e, z.pk(t, n), z.sk(r)) ? q(e, z.pk(t, n), z.sk(r)) : !1;
+		}
+	};
+}
+//#endregion
+//#region src/adapters/userOrganizations.ts
+function en(e) {
+	let { tenant_id: t, ...n } = Z(e);
+	return xe.parse(Q(n));
+}
+function tn(e) {
+	let { tenant_id: t, ...n } = Z(e), r = Q({
+		...n,
+		branding: e.branding ? JSON.parse(e.branding) : void 0,
+		metadata: e.metadata ? JSON.parse(e.metadata) : void 0,
+		enabled_connections: e.enabled_connections ? JSON.parse(e.enabled_connections) : void 0,
+		token_quota: e.token_quota ? JSON.parse(e.token_quota) : void 0
+	});
+	return le.parse(r);
+}
+function nn(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = d(), a = {
+				PK: R.pk(t),
+				SK: R.sk(i),
+				GSI1PK: R.gsi1pk(t, n.user_id),
+				GSI1SK: R.gsi1sk(n.organization_id),
+				GSI2PK: R.gsi2pk(t, n.organization_id),
+				GSI2SK: R.gsi2sk(n.user_id),
+				entityType: "USER_ORGANIZATION",
+				tenant_id: t,
+				id: i,
+				user_id: n.user_id,
+				organization_id: n.organization_id,
+				created_at: r,
+				updated_at: r
+			};
+			return await K(e, a), en(a);
+		},
+		async get(t, n) {
+			let r = await G(e, R.pk(t), R.sk(n));
+			return r ? en(r) : null;
+		},
+		async remove(t, n) {
+			return q(e, R.pk(t), R.sk(n));
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, R.pk(t), n, { skPrefix: "USER_ORG#" });
+			return {
+				userOrganizations: r.items.map(en),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async listUserOrganizations(t, n, r = {}) {
+			let i = await Y(e, R.gsi1pk(t, n), r, {
+				indexName: "GSI1",
+				skPrefix: "USER_ORG#"
+			}), a = [];
+			for (let n of i.items) {
+				let r = await G(e, L.pk(t), L.sk(n.organization_id));
+				r && a.push(tn(r));
+			}
+			return {
+				organizations: a,
+				start: i.start,
+				limit: i.limit,
+				length: i.length
+			};
+		},
+		async update(t, n, r) {
+			let i = {
+				...r,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return X(e, R.pk(t), R.sk(n), i);
+		}
+	};
+}
+//#endregion
+//#region src/adapters/invites.ts
+function rn(e) {
+	let { tenant_id: t, ...n } = Z(e), r = Q({
+		...n,
+		inviter: e.inviter ? JSON.parse(e.inviter) : {},
+		invitee: e.invitee ? JSON.parse(e.invitee) : {},
+		app_metadata: e.app_metadata ? JSON.parse(e.app_metadata) : void 0,
+		user_metadata: e.user_metadata ? JSON.parse(e.user_metadata) : void 0,
+		roles: e.roles ? JSON.parse(e.roles) : void 0
+	});
+	return ae.parse(r);
+}
+function an(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = d(), a = n.ttl_sec || 604800, o = new Date(Date.now() + a * 1e3).toISOString(), s = {
+				PK: B.pk(t),
+				SK: B.sk(i),
+				GSI1PK: B.gsi1pk(t, n.organization_id),
+				GSI1SK: B.gsi1sk(i),
+				entityType: "INVITE",
+				tenant_id: t,
+				id: i,
+				organization_id: n.organization_id,
+				inviter: JSON.stringify(n.inviter || {}),
+				invitee: JSON.stringify(n.invitee || {}),
+				client_id: n.client_id,
+				connection_id: n.connection_id,
+				invitation_url: n.invitation_url,
+				expires_at: o,
+				app_metadata: n.app_metadata ? JSON.stringify(n.app_metadata) : void 0,
+				user_metadata: n.user_metadata ? JSON.stringify(n.user_metadata) : void 0,
+				roles: n.roles ? JSON.stringify(n.roles) : void 0,
+				ttl_sec: a,
+				send_invitation_email: n.send_invitation_email ?? !0,
+				created_at: r,
+				updated_at: r
+			};
+			return s.ttl = Math.floor(new Date(o).getTime() / 1e3), await K(e, s), rn(s);
+		},
+		async get(t, n) {
+			let r = await G(e, B.pk(t), B.sk(n));
+			return r ? rn(r) : null;
+		},
+		async list(t, n = {}) {
+			let r = await Y(e, B.pk(t), n, { skPrefix: "INVITE#" });
+			return {
+				invites: r.items.map(rn),
+				start: r.start,
+				limit: r.limit,
+				length: r.length
+			};
+		},
+		async update(t, n, r) {
+			let i = {
+				...r,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			return r.inviter !== void 0 && (i.inviter = JSON.stringify(r.inviter)), r.invitee !== void 0 && (i.invitee = JSON.stringify(r.invitee)), r.app_metadata !== void 0 && (i.app_metadata = JSON.stringify(r.app_metadata)), r.user_metadata !== void 0 && (i.user_metadata = JSON.stringify(r.user_metadata)), r.roles !== void 0 && (i.roles = JSON.stringify(r.roles)), delete i.id, X(e, B.pk(t), B.sk(n), i);
+		},
+		async remove(t, n) {
+			return q(e, B.pk(t), B.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/customText.ts
+function on(e) {
+	return {
+		async get(t, n, r) {
+			let i = await G(e, W.pk(t), W.sk(n, r));
+			if (!i) return null;
+			try {
+				return JSON.parse(i.custom_text);
+			} catch {
+				return null;
+			}
+		},
+		async set(t, n, r, i) {
+			let a = (/* @__PURE__ */ new Date()).toISOString(), o = await G(e, W.pk(t), W.sk(n, r));
+			await K(e, {
+				PK: W.pk(t),
+				SK: W.sk(n, r),
+				entityType: "CUSTOM_TEXT",
+				tenant_id: t,
+				prompt: n,
+				language: r,
+				custom_text: JSON.stringify(i),
+				created_at: o?.created_at || a,
+				updated_at: a
+			});
+		},
+		async delete(t, n, r) {
+			await q(e, W.pk(t), W.sk(n, r));
+		},
+		async list(t) {
+			return (await J(e, W.pk(t), { skPrefix: W.skPrefix() })).items.map((e) => ({
+				prompt: e.prompt,
+				language: e.language
+			}));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/authenticationMethods.ts
+function sn(e) {
+	let { tenant_id: n, ...r } = Z(e);
+	return t.parse(Q(r));
+}
+function cn(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = d(), a = {
+				PK: H.pk(t),
+				SK: H.sk(i),
+				GSI1PK: H.gsi1pk(t, n.user_id),
+				GSI1SK: H.gsi1sk(i),
+				entityType: "AUTHENTICATION_METHOD",
+				id: i,
+				tenant_id: t,
+				user_id: n.user_id,
+				type: n.type,
+				phone_number: n.phone_number,
+				totp_secret: n.totp_secret,
+				credential_id: n.credential_id,
+				public_key: n.public_key,
+				sign_count: n.sign_count,
+				credential_backed_up: n.credential_backed_up,
+				transports: n.transports,
+				friendly_name: n.friendly_name,
+				confirmed: n.confirmed ?? !1,
+				created_at: r,
+				updated_at: r
+			}, o = sn(a);
+			return await K(e, a), o;
+		},
+		async get(t, n) {
+			let r = await G(e, H.pk(t), H.sk(n));
+			return r ? sn(r) : null;
+		},
+		async getByCredentialId(t, n) {
+			let r = (await J(e, H.pk(t), { skPrefix: "AUTHENTICATION_METHOD#" })).items.find((e) => e.credential_id === n);
+			return r ? sn(r) : null;
+		},
+		async list(t, n) {
+			return (await J(e, H.gsi1pk(t, n), {
+				skPrefix: H.gsi1skPrefix(),
+				indexName: "GSI1"
+			})).items.map(sn);
+		},
+		async update(n, r, i) {
+			let a = await this.get(n, r);
+			if (!a) throw Error(`Authentication method ${r} not found`);
+			let o = {
+				...a,
+				...i,
+				updated_at: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			t.parse(o);
+			let s = { updated_at: o.updated_at };
+			return i.phone_number !== void 0 && (s.phone_number = i.phone_number), i.totp_secret !== void 0 && (s.totp_secret = i.totp_secret), i.credential_id !== void 0 && (s.credential_id = i.credential_id), i.public_key !== void 0 && (s.public_key = i.public_key), i.sign_count !== void 0 && (s.sign_count = i.sign_count), i.credential_backed_up !== void 0 && (s.credential_backed_up = i.credential_backed_up), i.transports !== void 0 && (s.transports = i.transports), i.friendly_name !== void 0 && (s.friendly_name = i.friendly_name), i.confirmed !== void 0 && (s.confirmed = i.confirmed), await X(e, H.pk(n), H.sk(r), s), t.parse(o);
+		},
+		async remove(t, n) {
+			return q(e, H.pk(t), H.sk(n));
+		}
+	};
+}
+//#endregion
+//#region src/adapters/proxyRoutes.ts
+function ln(e) {
+	if (!e) return { path: "/*" };
+	try {
+		let t = JSON.parse(e), n = ce.safeParse(t);
+		if (n.success) return n.data;
+	} catch {}
+	return { path: "/*" };
+}
+function un(e) {
+	if (!e) return [];
+	try {
+		let t = JSON.parse(e);
+		if (!Array.isArray(t)) return [];
+		let n = [];
+		for (let e of t) {
+			let t = re.safeParse(e);
+			t.success && n.push(t.data);
+		}
+		return n;
+	} catch {
+		return [];
+	}
+}
+function dn(e) {
+	let { match: t, handlers: n, ...r } = Z(e);
+	return Q({
+		...r,
+		match: ln(t),
+		handlers: un(n)
+	});
+}
+function fn(e) {
+	return [...e].sort((e, t) => e.priority === t.priority ? e.created_at.localeCompare(t.created_at) : e.priority - t.priority);
+}
+function pn(e) {
+	return {
+		async create(t, n) {
+			let r = (/* @__PURE__ */ new Date()).toISOString(), i = d(), a = {
+				PK: T.pk(t),
+				SK: T.sk(i),
+				GSI1PK: T.gsi1pk(t, n.custom_domain_id),
+				GSI1SK: T.gsi1sk(i),
+				entityType: "PROXY_ROUTE",
+				tenant_id: t,
+				id: i,
+				custom_domain_id: n.custom_domain_id,
+				priority: n.priority,
+				match: JSON.stringify(n.match),
+				handlers: JSON.stringify(n.handlers),
+				created_at: r,
+				updated_at: r
+			};
+			return await K(e, a), dn(a);
+		},
+		async get(t, n) {
+			let r = await G(e, T.pk(t), T.sk(n));
+			return r ? dn(r) : null;
+		},
+		async list(t, n = {}) {
+			let r = n.page ?? 0, i = n.per_page ?? 50, a;
+			if (n.custom_domain_id) {
+				let { items: r } = await J(e, T.gsi1pk(t, n.custom_domain_id), { indexName: "GSI1" });
+				a = r;
+			} else {
+				let { items: n } = await J(e, T.pk(t), { skPrefix: "PROXY_ROUTE#" });
+				a = n;
+			}
+			let o = fn(a).slice(r * i, r * i + i);
+			return {
+				proxy_routes: o.map(dn),
+				start: r * i,
+				limit: i,
+				length: o.length
+			};
+		},
+		async update(t, n, r) {
+			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
+			return r.priority !== void 0 && (i.priority = r.priority), r.match !== void 0 && (i.match = JSON.stringify(r.match)), r.handlers !== void 0 && (i.handlers = JSON.stringify(r.handlers)), await G(e, T.pk(t), T.sk(n)) ? X(e, T.pk(t), T.sk(n), i) : !1;
+		},
+		async remove(t, n) {
+			return await G(e, T.pk(t), T.sk(n)) ? q(e, T.pk(t), T.sk(n)) : !1;
+		}
+	};
+}
+//#endregion
+//#region src/adapters/proxyData.ts
+function mn(e) {
+	if (!e) return null;
+	let t;
+	try {
+		t = JSON.parse(e);
+	} catch {
+		return null;
+	}
+	let n = ce.safeParse(t);
+	return n.success ? n.data : null;
+}
+function hn(e) {
+	if (!e) return null;
+	let t;
+	try {
+		t = JSON.parse(e);
+	} catch {
+		return null;
+	}
+	if (!Array.isArray(t) || t.length === 0) return null;
+	let n = [];
+	for (let e of t) {
+		let t = re.safeParse(e);
+		if (!t.success) return null;
+		n.push(t.data);
+	}
+	return n;
+}
+function gn(e) {
+	let t = mn(e.match), n = hn(e.handlers);
+	return t === null || n === null ? null : {
+		id: e.id,
+		tenant_id: e.tenant_id,
+		custom_domain_id: e.custom_domain_id,
+		priority: e.priority,
+		match: t,
+		handlers: n,
+		created_at: e.created_at,
+		updated_at: e.updated_at
+	};
+}
+async function _n(e, t) {
+	let n = t.indexOf(":"), r = n === -1 ? t : t.slice(0, n), i = (r.endsWith(".") ? r.slice(0, -1) : r).toLowerCase(), { items: a } = await J(e, w.gsi1pk(i), {
+		indexName: "GSI1",
+		skValue: w.gsi1sk()
+	}), o = a[0];
+	if (!o) return null;
+	let { items: s } = await J(e, T.gsi1pk(o.tenant_id, o.custom_domain_id), { indexName: "GSI1" }), c = s.map(gn).filter((e) => e !== null).sort((e, t) => e.priority === t.priority ? e.created_at.localeCompare(t.created_at) : e.priority - t.priority);
+	return {
+		tenant_id: o.tenant_id,
+		custom_domain_id: o.custom_domain_id,
+		domain: o.domain,
+		routes: c
+	};
+}
+function vn(e) {
+	return {
+		proxyRoutes: pn(e),
+		resolveHost: (t) => _n(e, t)
+	};
+}
+//#endregion
+//#region src/index.ts
+function yn(e, t) {
+	let n = {
+		client: e,
+		tableName: t.tableName
+	}, r = {
+		actions: je(),
+		actionExecutions: Me(),
+		actionVersions: Ne(),
+		branding: pt(n),
+		clients: tt(n),
+		clientConnections: at(n),
+		clientGrants: rt(n),
+		clientRegistrationTokens: st(n),
+		codes: Qe(n),
+		connections: lt(n),
+		customDomains: Ct(n),
+		emailProviders: Mt(n),
+		emailTemplates: Pt(n),
+		flows: Ve(n),
+		forms: Rt(n),
+		hookCode: gt(n),
+		hooks: vt(n),
+		invites: an(n),
+		keys: bt(n),
+		loginSessions: dt(n),
+		logs: Tt(n),
+		authenticationMethods: cn(n),
+		organizations: Xt(n),
+		organizationConnections: $t(n),
+		passwords: Xe(n),
+		promptSettings: At(n),
+		proxyRoutes: pn(n),
+		refreshTokens: It(n),
+		resourceServers: Bt(n),
+		rolePermissions: Wt(n),
+		roles: Ht(n),
+		sessions: Je(n),
+		tenants: Ue(n),
+		themes: Dt(n),
+		universalLoginTemplates: mt(n),
+		customText: on(n),
+		userOrganizations: nn(n),
+		userPermissions: Kt(n),
+		userRoles: Jt(n),
+		users: Ke(n),
+		async transaction(e) {
+			if (r.outbox) throw Error("DynamoDB adapter does not support atomic transactions. Cannot guarantee atomicity between entity writes and outbox events. Use a SQL-backed adapter for outbox-enabled tenants.");
+			return e(r);
+		}
+	};
+	return r;
+}
+//#endregion
+export { H as authenticationMethodKeys, Fe as brandingKeys, V as clientConnectionKeys, _ as clientGrantKeys, g as clientKeys, U as clientRegistrationTokenKeys, y as codeKeys, v as connectionKeys, cn as createAuthenticationMethodsAdapter, pt as createBrandingAdapter, at as createClientConnectionsAdapter, rt as createClientGrantsAdapter, tt as createClientsAdapter, Qe as createCodesAdapter, lt as createConnectionsAdapter, Ct as createCustomDomainsAdapter, Mt as createEmailProvidersAdapter, Ve as createFlowsAdapter, Rt as createFormsAdapter, vt as createHooksAdapter, an as createInvitesAdapter, bt as createKeysAdapter, dt as createLoginSessionsAdapter, Tt as createLogsAdapter, $t as createOrganizationConnectionsAdapter, Xt as createOrganizationsAdapter, Xe as createPasswordsAdapter, At as createPromptSettingsAdapter, vn as createProxyDataAdapter, pn as createProxyRoutesAdapter, It as createRefreshTokensAdapter, Bt as createResourceServersAdapter, Wt as createRolePermissionsAdapter, Ht as createRolesAdapter, Je as createSessionsAdapter, Ue as createTenantsAdapter, Dt as createThemesAdapter, nn as createUserOrganizationsAdapter, Kt as createUserPermissionsAdapter, Jt as createUserRolesAdapter, Ke as createUsersAdapter, w as customDomainKeys, W as customTextKeys, yn as default, q as deleteItem, D as emailProviderKeys, O as emailTemplateKeys, j as flowKeys, A as formKeys, G as getItem, C as hookKeys, B as inviteKeys, Ie as keyKeys, Re as legacyClientKeys, E as logKeys, h as loginSessionKeys, z as organizationConnectionKeys, L as organizationKeys, b as passwordKeys, Le as promptSettingsKeys, T as proxyRouteKeys, K as putItem, J as queryItems, Y as queryWithPagination, k as refreshTokenKeys, Q as removeNullProperties, M as resourceServerKeys, N as roleKeys, P as rolePermissionKeys, m as sessionKeys, Z as stripDynamoDBFields, f as tenantKeys, S as themeKeys, ze as transactWriteItems, x as universalLoginTemplateKeys, X as updateItem, p as userKeys, R as userOrganizationKeys, F as userPermissionKeys, I as userRoleKeys };