@authhero/drizzle 0.55.0 → 0.56.0

package/dist/drizzle-adapter.mjs

@@ -16328,7 +16328,11 @@ rb.superRefine(ib), rb.extend({
 	id: V(),
 	created_at: V(),
 	updated_at: V()
-}).superRefine(ib);
+}).superRefine(ib), q({
+	id: V().optional(),
+	created_at: V().datetime({ offset: !0 }).optional(),
+	updated_at: V().datetime({ offset: !0 }).optional()
+});
 function ab(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
@@ -17645,9 +17649,31 @@ function px(e) {
 	};
 }
 //#endregion
+//#region src/adapters/atomic.ts
+function mx(e) {
+	let t = e;
+	return typeof t == "object" && !!t && "batch" in t && typeof t.batch == "function";
+}
+async function hx(e, t) {
+	if (mx(e)) return e.batch(t);
+	await e.run(p`BEGIN`);
+	try {
+		let n = [];
+		for (let e of t) n.push(await e);
+		return await e.run(p`COMMIT`), n;
+	} catch (t) {
+		try {
+			await e.run(p`ROLLBACK`);
+		} catch (e) {
+			console.error("runAtomic rollback failed", e);
+		}
+		throw t;
+	}
+}
+//#endregion
 //#region src/adapters/refreshTokens.ts
 Xe();
-function mx(e) {
+function gx(e) {
 	let { tenant_id: t, created_at_ts: n, expires_at_ts: r, idle_expires_at_ts: i, last_exchanged_at_ts: a, revoked_at_ts: o, rotated_at_ts: s, device: c, resource_servers: l, rotating: u, ...d } = e, f = Ab({
 		created_at_ts: n,
 		expires_at_ts: r,
@@ -17670,10 +17696,10 @@ function mx(e) {
 		resource_servers: A(l, [])
 	});
 }
-function hx(e, t) {
+function _x(e, t) {
 	return Math.max(e ?? 0, t ?? 0);
 }
-function gx(e) {
+function vx(e) {
 	return {
 		async create(t, n) {
 			let r = Date.now(), i = {
@@ -17694,30 +17720,22 @@ function gx(e) {
 				expires_at_ts: $(n.expires_at),
 				idle_expires_at_ts: $(n.idle_expires_at),
 				last_exchanged_at_ts: $(n.last_exchanged_at)
-			};
-			await e.run(p`BEGIN`);
-			try {
-				await e.insert(S).values(i);
-				let n = hx(i.expires_at_ts, i.idle_expires_at_ts);
-				n > 0 && i.login_id && await e.update(C).set({
-					expires_at_ts: n,
-					updated_at_ts: r
-				}).where(h(m(C.tenant_id, t), m(C.id, i.login_id), je(C.expires_at_ts, n))), await e.run(p`COMMIT`);
-			} catch (t) {
-				throw await e.run(p`ROLLBACK`), t;
-			}
-			return mx({
+			}, a = [e.insert(S).values(i)], o = _x(i.expires_at_ts, i.idle_expires_at_ts);
+			return o > 0 && i.login_id && a.push(e.update(C).set({
+				expires_at_ts: o,
+				updated_at_ts: r
+			}).where(h(m(C.tenant_id, t), m(C.id, i.login_id), je(C.expires_at_ts, o)))), await hx(e, a), gx({
 				...i,
 				tenant_id: t
 			});
 		},
 		async get(t, n) {
 			let r = await e.select().from(S).where(h(m(S.tenant_id, t), m(S.id, n))).get();
-			return r ? mx(r) : null;
+			return r ? gx(r) : null;
 		},
 		async getByLookup(t, n) {
 			let r = await e.select().from(S).where(h(m(S.tenant_id, t), m(S.token_lookup, n))).get();
-			return r ? mx(r) : null;
+			return r ? gx(r) : null;
 		},
 		async update(t, n, r, i) {
 			let a = {};
@@ -17738,7 +17756,7 @@ function gx(e) {
 				let e = S[o.sort_by];
 				e && (c = c.orderBy(o.sort_order === "desc" ? ze(e) : Re(e)));
 			}
-			let l = (await c.offset(r * i).limit(i)).map(mx);
+			let l = (await c.offset(r * i).limit(i)).map(gx);
 			if (!a) return { refresh_tokens: l };
 			let [u] = await e.select({ count: Be() }).from(S).where(m(S.tenant_id, t));
 			return {
@@ -17761,16 +17779,16 @@ function gx(e) {
 }
 //#endregion
 //#region src/adapters/resourceServers.ts
-var _x = ["name", "identifier"];
-function vx() {
+var yx = ["name", "identifier"];
+function bx() {
 	let { customAlphabet: e } = (Xe(), s(Ge));
 	return `api_${e("0123456789abcdefghijklmnopqrstuvwxyz", 17)()}`;
 }
-var yx = [
+var xx = [
 	"skip_consent_for_verifiable_first_party_clients",
 	"allow_offline_access",
 	"is_system"
-], bx = /* @__PURE__ */ new Set([
+], Sx = /* @__PURE__ */ new Set([
 	"id",
 	"tenant_id",
 	"identifier",
@@ -17789,17 +17807,17 @@ var yx = [
 	"created_at",
 	"updated_at"
 ]);
-function xx(e) {
+function Cx(e) {
 	let { tenant_id: t, verification_key: n, scopes: r, options: i, metadata: a, ...o } = e, s = { ...o };
 	s.scopes = A(r, []), s.options = A(i, {}), s.metadata = A(a), n !== void 0 && (s.verificationKey = n);
-	for (let e of yx) o[e] !== void 0 && o[e] !== null && (s[e] = !!o[e]);
+	for (let e of xx) o[e] !== void 0 && o[e] !== null && (s[e] = !!o[e]);
 	return k(s);
 }
-function Sx(e) {
+function wx(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
-				id: n.id || vx(),
+				id: n.id || bx(),
 				tenant_id: t,
 				identifier: n.identifier,
 				name: n.name,
@@ -17814,37 +17832,37 @@ function Sx(e) {
 				created_at: r,
 				updated_at: r
 			};
-			for (let e of yx) n[e] !== void 0 && (i[e] = +!!n[e]);
-			return i.is_system === void 0 && (i.is_system = 0), await e.insert(fn).values(i), xx({
+			for (let e of xx) n[e] !== void 0 && (i[e] = +!!n[e]);
+			return i.is_system === void 0 && (i.is_system = 0), await e.insert(fn).values(i), Cx({
 				...i,
 				tenant_id: t
 			});
 		},
 		async get(t, n) {
 			let r = await e.select().from(fn).where(h(m(fn.tenant_id, t), m(fn.id, n))).get();
-			return r ? xx(r) : null;
+			return r ? Cx(r) : null;
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
 			r.name !== void 0 && (i.name = r.name), r.identifier !== void 0 && (i.identifier = r.identifier), r.signing_alg !== void 0 && (i.signing_alg = r.signing_alg), r.signing_secret !== void 0 && (i.signing_secret = r.signing_secret), r.token_lifetime !== void 0 && (i.token_lifetime = r.token_lifetime), r.token_lifetime_for_web !== void 0 && (i.token_lifetime_for_web = r.token_lifetime_for_web), r.scopes !== void 0 && (i.scopes = JSON.stringify(r.scopes)), r.options !== void 0 && (i.options = p`json_patch(COALESCE(${fn.options}, '{}'), ${JSON.stringify(r.options)})`), r.metadata !== void 0 && (i.metadata = JSON.stringify(r.metadata)), r.verificationKey !== void 0 && (i.verification_key = r.verificationKey);
-			for (let e of yx) r[e] !== void 0 && (i[e] = +!!r[e]);
+			for (let e of xx) r[e] !== void 0 && (i[e] = +!!r[e]);
 			return (await e.update(fn).set(i).where(h(m(fn.tenant_id, t), m(fn.id, n))).returning()).length > 0;
 		},
 		async list(t, n) {
 			let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: o, q: s } = n || {}, c = Math.max(0, Math.floor(Number(r) || 0)), l = Math.min(Math.max(1, Math.floor(Number(i) || 50)), 500), u = [m(fn.tenant_id, t)];
 			if (s) {
-				let e = Nn(s, _x);
+				let e = Nn(s, yx);
 				if (e) {
-					let t = Pn(fn, e, _x, ["name", "identifier"]);
+					let t = Pn(fn, e, yx, ["name", "identifier"]);
 					t && u.push(t);
 				}
 			}
 			let d = e.select().from(fn).where(h(...u)).$dynamic();
-			if (o?.sort_by && bx.has(o.sort_by)) {
+			if (o?.sort_by && Sx.has(o.sort_by)) {
 				let e = fn[o.sort_by];
 				d = d.orderBy(o.sort_order === "desc" ? ze(e) : Re(e));
 			}
-			let f = (await d.offset(c * l).limit(l)).map(xx);
+			let f = (await d.offset(c * l).limit(l)).map(Cx);
 			if (!a) return { resource_servers: f };
 			let [ee] = await e.select({ count: Be() }).from(fn).where(h(...u));
 			return {
@@ -17861,7 +17879,7 @@ function Sx(e) {
 }
 //#endregion
 //#region src/adapters/rolePermissions.ts
-function Cx(e) {
+function Tx(e) {
 	return {
 		async assign(t, n, r) {
 			let i = (/* @__PURE__ */ new Date()).toISOString();
@@ -17899,7 +17917,7 @@ function Cx(e) {
 }
 //#endregion
 //#region src/adapters/userPermissions.ts
-function wx(e) {
+function Ex(e) {
 	return {
 		async create(t, n, r, i) {
 			try {
@@ -17939,7 +17957,7 @@ function wx(e) {
 //#endregion
 //#region src/adapters/roles.ts
 Xe();
-function Tx(e) {
+function Dx(e) {
 	let { tenant_id: t, is_system: n, metadata: r, ...i } = e;
 	return k({
 		...i,
@@ -17947,7 +17965,7 @@ function Tx(e) {
 		metadata: A(r)
 	});
 }
-function Ex(e) {
+function Ox(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
@@ -17960,14 +17978,14 @@ function Ex(e) {
 				created_at: r,
 				updated_at: r
 			};
-			return await e.insert(cn).values(i), Tx({
+			return await e.insert(cn).values(i), Dx({
 				...i,
 				tenant_id: t
 			});
 		},
 		async get(t, n) {
 			let r = await e.select().from(cn).where(h(m(cn.tenant_id, t), m(cn.id, n))).get();
-			return r ? Tx(r) : null;
+			return r ? Dx(r) : null;
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -17979,7 +17997,7 @@ function Ex(e) {
 				let e = cn[o.sort_by];
 				e && (u = u.orderBy(o.sort_order === "desc" ? ze(e) : Re(e)));
 			}
-			let d = (await u.offset(r * i).limit(i)).map(Tx);
+			let d = (await u.offset(r * i).limit(i)).map(Dx);
 			if (!a) return { roles: d };
 			let [f] = await e.select({ count: Be() }).from(cn).where(l);
 			return {
@@ -17997,7 +18015,7 @@ function Ex(e) {
 //#endregion
 //#region src/adapters/sessions.ts
 Xe();
-var Dx = ["created_at_ts", "updated_at_ts"], Ox = [
+var kx = ["created_at_ts", "updated_at_ts"], Ax = [
 	"expires_at_ts",
 	"idle_expires_at_ts",
 	"authenticated_at_ts",
@@ -18005,7 +18023,7 @@ var Dx = ["created_at_ts", "updated_at_ts"], Ox = [
 	"used_at_ts",
 	"revoked_at_ts"
 ];
-function kx(e) {
+function jx(e) {
 	let { tenant_id: t, created_at_ts: n, updated_at_ts: r, expires_at_ts: i, idle_expires_at_ts: a, authenticated_at_ts: o, last_interaction_at_ts: s, used_at_ts: c, revoked_at_ts: l, device: u, clients: d, ...f } = e, ee = Ab({
 		created_at_ts: n,
 		updated_at_ts: r,
@@ -18015,7 +18033,7 @@ function kx(e) {
 		last_interaction_at_ts: s,
 		used_at_ts: c,
 		revoked_at_ts: l
-	}, [...Dx], [...Ox]);
+	}, [...kx], [...Ax]);
 	return k({
 		...f,
 		...ee,
@@ -18023,10 +18041,10 @@ function kx(e) {
 		clients: A(d, [])
 	});
 }
-function Ax(e, t) {
+function Mx(e, t) {
 	return Math.max(e ?? 0, t ?? 0);
 }
-function jx(e) {
+function Nx(e) {
 	return {
 		async create(t, n) {
 			let r = Date.now(), i = {
@@ -18044,31 +18062,23 @@ function jx(e) {
 				last_interaction_at_ts: n.last_interaction_at ? $(n.last_interaction_at) : r,
 				used_at_ts: $(n.used_at),
 				revoked_at_ts: $(n.revoked_at)
-			};
-			await e.run(p`BEGIN`);
-			try {
-				await e.insert(Yt).values(i);
-				let n = Ax(i.expires_at_ts, i.idle_expires_at_ts);
-				n > 0 && i.login_session_id && await e.update(C).set({
-					expires_at_ts: n,
-					updated_at_ts: r
-				}).where(h(m(C.tenant_id, t), m(C.id, i.login_session_id), je(C.expires_at_ts, n))), await e.run(p`COMMIT`);
-			} catch (t) {
-				throw await e.run(p`ROLLBACK`), t;
-			}
-			return kx({
+			}, a = [e.insert(Yt).values(i)], o = Mx(i.expires_at_ts, i.idle_expires_at_ts);
+			return o > 0 && i.login_session_id && a.push(e.update(C).set({
+				expires_at_ts: o,
+				updated_at_ts: r
+			}).where(h(m(C.tenant_id, t), m(C.id, i.login_session_id), je(C.expires_at_ts, o)))), await hx(e, a), jx({
 				...i,
 				tenant_id: t
 			});
 		},
 		async get(t, n) {
 			let r = await e.select().from(Yt).where(h(m(Yt.tenant_id, t), m(Yt.id, n))).get();
-			return r ? kx(r) : null;
+			return r ? jx(r) : null;
 		},
 		async update(t, n, r) {
 			let i = { updated_at_ts: Date.now() };
 			r.user_id !== void 0 && (i.user_id = r.user_id), r.login_session_id !== void 0 && (i.login_session_id = r.login_session_id), r.device !== void 0 && (i.device = JSON.stringify(r.device)), r.clients !== void 0 && (i.clients = JSON.stringify(r.clients)), r.expires_at !== void 0 && (i.expires_at_ts = $(r.expires_at)), r.idle_expires_at !== void 0 && (i.idle_expires_at_ts = $(r.idle_expires_at)), r.authenticated_at !== void 0 && (i.authenticated_at_ts = $(r.authenticated_at)), r.last_interaction_at !== void 0 && (i.last_interaction_at_ts = $(r.last_interaction_at)), r.used_at !== void 0 && (i.used_at_ts = $(r.used_at)), r.revoked_at !== void 0 && (i.revoked_at_ts = $(r.revoked_at));
-			let a = await e.update(Yt).set(i).where(h(m(Yt.tenant_id, t), m(Yt.id, n))).returning(), o = Ax(i.expires_at_ts, i.idle_expires_at_ts), s = a[0];
+			let a = await e.update(Yt).set(i).where(h(m(Yt.tenant_id, t), m(Yt.id, n))).returning(), o = Mx(i.expires_at_ts, i.idle_expires_at_ts), s = a[0];
 			if (o > 0 && s) {
 				let n = r.login_session_id ?? s.login_session_id;
 				n && await e.update(C).set({
@@ -18084,7 +18094,7 @@ function jx(e) {
 				let e = Yt[o.sort_by];
 				e && (u = u.orderBy(o.sort_order === "desc" ? ze(e) : Re(e)));
 			}
-			let d = (await u.offset(r * i).limit(i)).map(kx);
+			let d = (await u.offset(r * i).limit(i)).map(jx);
 			if (!a) return { sessions: d };
 			let [f] = await e.select({ count: Be() }).from(Yt).where(l);
 			return {
@@ -18102,7 +18112,7 @@ function jx(e) {
 //#endregion
 //#region src/adapters/tenants.ts
 Xe();
-var Mx = [
+var Px = [
 	"session_cookie",
 	"enabled_locales",
 	"error_page",
@@ -18118,25 +18128,25 @@ var Mx = [
 	"acr_values_supported",
 	"mtls",
 	"mfa"
-], Nx = [
+], Fx = [
 	"allow_organization_name_in_authentication_api",
 	"customize_mfa_in_postlogin_action",
 	"pushed_authorization_requests_supported",
 	"authorization_response_iss_parameter_supported"
 ];
-function Px(e) {
+function Ix(e) {
 	let t = { ...e };
-	for (let e of Mx) typeof t[e] == "string" && (t[e] = A(t[e]));
-	for (let e of Nx) t[e] !== void 0 && t[e] !== null && (t[e] = t[e] === 1);
+	for (let e of Px) typeof t[e] == "string" && (t[e] = A(t[e]));
+	for (let e of Fx) t[e] !== void 0 && t[e] !== null && (t[e] = t[e] === 1);
 	return k(t);
 }
-function Fx(e) {
+function Lx(e) {
 	let t = { ...e };
-	Dn(e, Mx, t);
-	for (let n of Nx) e[n] !== void 0 && (t[n] = +!!e[n]);
+	Dn(e, Px, t);
+	for (let n of Fx) e[n] !== void 0 && (t[n] = +!!e[n]);
 	return kn(t);
 }
-function Ix(e) {
+function Rx(e) {
 	return {
 		async create(t) {
 			let n = {
@@ -18144,7 +18154,7 @@ function Ix(e) {
 				created_at: (/* @__PURE__ */ new Date()).toISOString(),
 				updated_at: (/* @__PURE__ */ new Date()).toISOString(),
 				...t
-			}, r = Fx(n);
+			}, r = Lx(n);
 			try {
 				await e.insert(b).values(r);
 			} catch (e) {
@@ -18155,7 +18165,7 @@ function Ix(e) {
 		},
 		async get(t) {
 			let n = await e.select().from(b).where(m(b.id, t)).get();
-			return n ? Px(n) : null;
+			return n ? Ix(n) : null;
 		},
 		async list(t) {
 			let { page: n = 0, per_page: r = 50, include_totals: i = !1, sort: a, q: o } = t || {}, s = e.select().from(b).$dynamic();
@@ -18167,7 +18177,7 @@ function Ix(e) {
 				let e = b[a.sort_by];
 				e && (s = s.orderBy(a.sort_order === "desc" ? ze(e) : Re(e)));
 			}
-			let c = (await s.offset(n * r).limit(r)).map(Px);
+			let c = (await s.offset(n * r).limit(r)).map(Ix);
 			if (!i) return { tenants: c };
 			let [l] = await e.select({ count: Be() }).from(b);
 			return {
@@ -18178,7 +18188,7 @@ function Ix(e) {
 			};
 		},
 		async update(t, n) {
-			let r = Fx({
+			let r = Lx({
 				...n,
 				id: t,
 				updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -18193,35 +18203,38 @@ function Ix(e) {
 //#endregion
 //#region src/adapters/themes.ts
 Xe();
-var Lx = [
+var zx = [
 	"colors",
 	"borders",
 	"fonts",
 	"page_background",
 	"widget"
 ];
-function Rx(e) {
-	let { tenant_id: t, ...n } = e, r = jn(n, Lx);
-	return r.borders && (r.borders.show_widget_shadow = !!r.borders.show_widget_shadow), r.fonts && (r.fonts.links_bold = !!r.fonts.links_bold, r.fonts.subtitle_bold = !!r.fonts.subtitle_bold, r.fonts.title_bold = !!r.fonts.title_bold), k(r);
+function Bx(e) {
+	let { tenant_id: t, ...n } = e, r = jn(n, zx);
+	return r.borders && (r.borders.show_widget_shadow = !!r.borders.show_widget_shadow), r.fonts && (r.fonts.body_text_bold = !!r.fonts.body_text_bold, r.fonts.buttons_text_bold = !!r.fonts.buttons_text_bold, r.fonts.input_labels_bold = !!r.fonts.input_labels_bold, r.fonts.links_bold = !!r.fonts.links_bold, r.fonts.subtitle_bold = !!r.fonts.subtitle_bold, r.fonts.title_bold = !!r.fonts.title_bold), k(r);
 }
-function zx(e) {
+function Vx(e) {
 	return {
-		async create(t, n, r) {
-			let i = (/* @__PURE__ */ new Date()).toISOString(), a = r || Ye(), o = {
+		async create(t, n, r, i) {
+			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.id || r || Ye(), c = {
 				...An(n),
 				tenant_id: t,
-				themeId: a,
-				created_at: i,
-				updated_at: i
+				themeId: s,
+				created_at: a?.created_at ?? o,
+				updated_at: a?.updated_at ?? o
 			};
-			return await e.insert(hn).values(o), Rx({
-				...o,
+			return await e.insert(hn).values(c), Bx({
+				...c,
 				tenant_id: t
 			});
 		},
 		async get(t, n) {
 			let r = await e.select().from(hn).where(h(m(hn.tenant_id, t), m(hn.themeId, n))).get();
-			return r ? Rx(r) : null;
+			return r ? Bx(r) : null;
+		},
+		async list(t) {
+			return (await e.select().from(hn).where(m(hn.tenant_id, t)).all()).map(Bx);
 		},
 		async update(t, n, r) {
 			let i = An(r);
@@ -18234,7 +18247,7 @@ function zx(e) {
 }
 //#endregion
 //#region src/adapters/universalLoginTemplates.ts
-function Bx(e) {
+function Hx(e) {
 	return {
 		async get(t) {
 			let n = await e.select({ body: mn.body }).from(mn).where(m(mn.tenant_id, t)).get();
@@ -18263,7 +18276,7 @@ function Bx(e) {
 //#endregion
 //#region src/adapters/users.ts
 Xe();
-var Vx = [
+var Ux = [
 	"user_id",
 	"email",
 	"email_verified",
@@ -18285,13 +18298,13 @@ var Vx = [
 	"login_count",
 	"created_at",
 	"updated_at"
-], Hx = [
+], Wx = [
 	"email",
 	"name",
 	"phone_number",
 	"user_id"
 ];
-function Ux(e, t) {
+function Gx(e, t) {
 	let n = {
 		connection: e.connection,
 		provider: e.provider,
@@ -18304,8 +18317,8 @@ function Ux(e, t) {
 		...typeof e.profileData == "string" ? A(e.profileData, {}) : {}
 	}, n;
 }
-function Wx(e, t = []) {
-	let { tenant_id: n, app_metadata: r, user_metadata: i, address: a, email_verified: o, phone_verified: s, is_social: c, linked_to: l, profileData: u, ...d } = e, f = Ux(e, !0), ee = t.map((e) => Ux(e, !1));
+function Kx(e, t = []) {
+	let { tenant_id: n, app_metadata: r, user_metadata: i, address: a, email_verified: o, phone_verified: s, is_social: c, linked_to: l, profileData: u, ...d } = e, f = Gx(e, !0), ee = t.map((e) => Gx(e, !1));
 	return k({
 		...d,
 		email: e.email || "",
@@ -18318,7 +18331,7 @@ function Wx(e, t = []) {
 		identities: [f, ...ee]
 	});
 }
-function Gx(e) {
+function qx(e) {
 	let t = async (t, n) => {
 		let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
 			user_id: n.user_id,
@@ -18357,34 +18370,27 @@ function Gx(e) {
 			updated_at: n.updated_at || r
 		}, a = n.password ? Ye() : void 0;
 		try {
-			if (n.password && a) {
-				await e.run(p`BEGIN`);
-				try {
-					await e.insert(x).values(i), await e.insert(Jt).values({
-						id: a,
-						tenant_id: t,
-						user_id: n.user_id,
-						password: n.password.hash || n.password,
-						algorithm: n.password.algorithm || "bcrypt",
-						is_current: 1,
-						created_at: r,
-						updated_at: r
-					}), await e.run(p`COMMIT`);
-				} catch (t) {
-					throw await e.run(p`ROLLBACK`), t;
-				}
-			} else await e.insert(x).values(i);
+			n.password && a ? await hx(e, [e.insert(x).values(i), e.insert(Jt).values({
+				id: a,
+				tenant_id: t,
+				user_id: n.user_id,
+				password: n.password.hash || n.password,
+				algorithm: n.password.algorithm || "bcrypt",
+				is_current: 1,
+				created_at: r,
+				updated_at: r
+			})]) : await e.insert(x).values(i);
 		} catch (e) {
 			throw e?.message?.includes("UNIQUE constraint") || e?.message?.includes("AlreadyExists") ? new Un(409, { message: "User already exists" }) : (console.error("User upsert failed:", e?.code, e?.message), new Un(500, { message: "Internal server error" }));
 		}
-		return Wx(i);
+		return Kx(i);
 	};
 	return {
 		create: t,
 		rawCreate: t,
 		async get(t, n) {
 			let r = await e.select().from(x).where(h(m(x.tenant_id, t), m(x.user_id, n))).get();
-			return r ? Wx(r, await e.select().from(x).where(h(m(x.tenant_id, t), m(x.linked_to, n))).all()) : null;
+			return r ? Kx(r, await e.select().from(x).where(h(m(x.tenant_id, t), m(x.linked_to, n))).all()) : null;
 		},
 		async update(t, n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -18418,9 +18424,9 @@ function Gx(e) {
 		async list(t, n) {
 			let { page: r = 0, per_page: i = 50, include_totals: a = !1, sort: o, q: s } = n || {}, c = [m(x.tenant_id, t), Pe(x.linked_to)];
 			if (s) {
-				let e = Nn(s, Vx);
+				let e = Nn(s, Ux);
 				if (e) {
-					let t = Pn(x, e, Hx);
+					let t = Pn(x, e, Wx);
 					t && c.push(t);
 				}
 			}
@@ -18431,7 +18437,7 @@ function Gx(e) {
 			}
 			let d = await u.offset(r * i).limit(i), f = d.map((e) => e.user_id), ee = [];
 			f.length > 0 && (ee = await e.select().from(x).where(h(m(x.tenant_id, t), Ne(x.linked_to, f))));
-			let te = d.map((e) => Wx(e, ee.filter((t) => t.linked_to === e.user_id)));
+			let te = d.map((e) => Kx(e, ee.filter((t) => t.linked_to === e.user_id)));
 			if (!a) return { users: te };
 			let [ne] = await e.select({ count: Be() }).from(x).where(l);
 			return {
@@ -18442,15 +18448,13 @@ function Gx(e) {
 			};
 		},
 		async remove(t, n) {
-			await e.run(p`BEGIN`);
-			try {
-				let r = [n, ...(await e.select({ user_id: x.user_id }).from(x).where(h(m(x.tenant_id, t), m(x.linked_to, n)))).map((e) => e.user_id)];
-				await e.delete(Tn).where(h(m(Tn.tenant_id, t), Ne(Tn.user_id, r))), await e.delete(Jt).where(h(m(Jt.tenant_id, t), Ne(Jt.user_id, r))), await e.delete(x).where(h(m(x.tenant_id, t), m(x.linked_to, n)));
-				let i = await e.delete(x).where(h(m(x.tenant_id, t), m(x.user_id, n))).returning();
-				return await e.run(p`COMMIT`), i.length > 0;
-			} catch (t) {
-				throw await e.run(p`ROLLBACK`), t;
-			}
+			let r = (await e.select({ user_id: x.user_id }).from(x).where(h(m(x.tenant_id, t), m(x.linked_to, n)))).map((e) => e.user_id), i = [n, ...r], a = await hx(e, [
+				e.delete(Tn).where(h(m(Tn.tenant_id, t), Ne(Tn.user_id, i))),
+				e.delete(Jt).where(h(m(Jt.tenant_id, t), Ne(Jt.user_id, i))),
+				e.delete(x).where(h(m(x.tenant_id, t), Ne(x.user_id, r))),
+				e.delete(x).where(h(m(x.tenant_id, t), m(x.user_id, n))).returning()
+			]), o = a[a.length - 1];
+			return Array.isArray(o) && o.length > 0;
 		},
 		async unlink(t, n, r, i) {
 			let a = `${r}|${i}`;
@@ -18460,7 +18464,7 @@ function Gx(e) {
 }
 //#endregion
 //#region src/adapters/userRoles.ts
-function Kx(e) {
+function Jx(e) {
 	return {
 		async create(t, n, r, i) {
 			try {
@@ -18500,7 +18504,7 @@ function Kx(e) {
 //#endregion
 //#region src/adapters/userOrganizations.ts
 Xe();
-function qx(e) {
+function Yx(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
@@ -18577,19 +18581,19 @@ function qx(e) {
 }
 //#endregion
 //#region src/adapters/stats.ts
-var Jx = ["s"], Yx = ["pwd_leak"];
-function Xx(e) {
+var Xx = ["s"], Zx = ["pwd_leak"];
+function Qx(e) {
 	return /^\d{8}$/.test(e) ? `${e.slice(0, 4)}-${e.slice(4, 6)}-${e.slice(6, 8)}` : e;
 }
-function Zx(e) {
+function $x(e) {
 	return {
 		async getDaily(t, n) {
-			let r = /* @__PURE__ */ new Date(), i = n?.from ? Xx(n.from) : (/* @__PURE__ */ new Date(r.getTime() - 720 * 60 * 60 * 1e3)).toISOString().split("T")[0], a = n?.to ? Xx(n.to) : r.toISOString().split("T")[0];
+			let r = /* @__PURE__ */ new Date(), i = n?.from ? Qx(n.from) : (/* @__PURE__ */ new Date(r.getTime() - 720 * 60 * 60 * 1e3)).toISOString().split("T")[0], a = n?.to ? Qx(n.to) : r.toISOString().split("T")[0];
 			return (await e.select({
 				date: p`substr(${E.date}, 1, 10)`.as("date"),
-				logins: p`SUM(CASE WHEN ${E.type} IN (${p.join(Jx.map((e) => p`${e}`), p`, `)}) THEN 1 ELSE 0 END)`.as("logins"),
+				logins: p`SUM(CASE WHEN ${E.type} IN (${p.join(Xx.map((e) => p`${e}`), p`, `)}) THEN 1 ELSE 0 END)`.as("logins"),
 				signups: p`SUM(CASE WHEN ${E.type} = 'ss' THEN 1 ELSE 0 END)`.as("signups"),
-				leaked_passwords: p`SUM(CASE WHEN ${E.type} IN (${p.join(Yx.map((e) => p`${e}`), p`, `)}) THEN 1 ELSE 0 END)`.as("leaked_passwords")
+				leaked_passwords: p`SUM(CASE WHEN ${E.type} IN (${p.join(Zx.map((e) => p`${e}`), p`, `)}) THEN 1 ELSE 0 END)`.as("leaked_passwords")
 			}).from(E).where(h(m(E.tenant_id, t), Ae(E.date, i), Me(E.date, `${a}T23:59:59.999Z`))).groupBy(p`substr(${E.date}, 1, 10)`).orderBy(p`substr(${E.date}, 1, 10)`).all()).map((e) => ({
 				date: e.date,
 				logins: Number(e.logins) || 0,
@@ -18600,14 +18604,14 @@ function Zx(e) {
 			}));
 		},
 		async getActiveUsers(t) {
-			let n = (/* @__PURE__ */ new Date(Date.now() - 720 * 60 * 60 * 1e3)).toISOString(), [r] = await e.select({ count: p`COUNT(DISTINCT ${E.user_id})`.as("count") }).from(E).where(h(m(E.tenant_id, t), Ae(E.date, n), p`${E.type} IN (${p.join(Jx.map((e) => p`${e}`), p`, `)})`));
+			let n = (/* @__PURE__ */ new Date(Date.now() - 720 * 60 * 60 * 1e3)).toISOString(), [r] = await e.select({ count: p`COUNT(DISTINCT ${E.user_id})`.as("count") }).from(E).where(h(m(E.tenant_id, t), Ae(E.date, n), p`${E.type} IN (${p.join(Xx.map((e) => p`${e}`), p`, `)})`));
 			return Number(r?.count) || 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/analytics.ts
-var Qx = {
+var eS = {
 	"active-users": ["s", "seacft"],
 	logins: [
 		"s",
@@ -18617,7 +18621,7 @@ var Qx = {
 	signups: ["ss", "fs"],
 	"refresh-tokens": ["seacft", "fertft"],
 	sessions: ["slo"]
-}, $x = {
+}, tS = {
 	"active-users": {
 		alias: "active_users",
 		type: "UInt64",
@@ -18644,7 +18648,7 @@ var Qx = {
 		agg: "count"
 	}
 };
-function eS(e) {
+function nS(e) {
 	switch (e) {
 		case "hour": return p`substr(${E.date}, 1, 13)`;
 		case "month": return p`substr(${E.date}, 1, 7)`;
@@ -18653,10 +18657,10 @@ function eS(e) {
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
 }
-function tS(e) {
+function rS(e) {
 	return `"${e.replace(/"/g, "\"\"")}"`;
 }
-function nS(e) {
+function iS(e) {
 	switch (e) {
 		case "connection": return E.connection;
 		case "client_id": return E.client_id;
@@ -18665,9 +18669,9 @@ function nS(e) {
 		case "time": throw Error("time dimension handled separately");
 	}
 }
-function rS(e) {
+function aS(e) {
 	return { async query(t, n, r) {
-		let i = Date.now(), a = Qx[n], o = $x[n], s = [
+		let i = Date.now(), a = eS[n], o = tS[n], s = [
 			m(E.tenant_id, t),
 			Ae(E.date, r.from),
 			je(E.date, r.to),
@@ -18676,13 +18680,13 @@ function rS(e) {
 		r.filters.connection?.length && s.push(Ne(E.connection, r.filters.connection)), r.filters.client_id?.length && s.push(Ne(E.client_id, r.filters.client_id)), r.filters.user_type?.length && s.push(Ne(E.strategy_type, r.filters.user_type)), r.filters.user_id?.length && s.push(Ne(E.user_id, r.filters.user_id));
 		let c = {}, l = [], u = [];
 		for (let e of r.group_by) if (e === "time") {
-			let e = eS(r.interval);
+			let e = nS(r.interval);
 			c.time = e, l.push(e), u.push({
 				name: "time",
 				type: r.interval === "hour" ? "DateTime" : "Date"
 			});
 		} else {
-			let t = nS(e);
+			let t = iS(e);
 			c[e] = t, l.push(t), u.push({
 				name: e,
 				type: "String"
@@ -18698,9 +18702,9 @@ function rS(e) {
 		if (r.order_by) {
 			let e = r.order_by.startsWith("-"), t = e ? r.order_by.slice(1) : r.order_by;
 			if (!f.has(t)) throw Error(`Invalid order_by column '${t}' for analytics query`);
-			let n = tS(t);
+			let n = rS(t);
 			d = d.orderBy(p.raw(`${n} ${e ? "DESC" : "ASC"}`));
-		} else d = r.group_by[0] === "time" ? d.orderBy(p.raw(`${tS("time")} ASC`)) : d.orderBy(p.raw(`${tS(o.alias)} DESC`));
+		} else d = r.group_by[0] === "time" ? d.orderBy(p.raw(`${rS("time")} ASC`)) : d.orderBy(p.raw(`${rS(o.alias)} DESC`));
 		d = d.limit(r.limit).offset(r.offset);
 		let ee = (await d.all()).map((e) => {
 			let t = {};
@@ -18722,13 +18726,13 @@ function rS(e) {
 //#endregion
 //#region src/adapters/outbox.ts
 Xe();
-function iS(e) {
+function oS(e) {
 	return {
 		...e,
 		payload: A(e.payload, {})
 	};
 }
-function aS(e) {
+function sS(e) {
 	return {
 		async create(t, n) {
 			let r = Ye(), i = (/* @__PURE__ */ new Date()).toISOString();
@@ -18753,11 +18757,11 @@ function aS(e) {
 			}), r;
 		},
 		async getByIds(t) {
-			return t.length === 0 ? [] : (await e.select().from(D).where(Ne(D.id, t)).all()).map(iS);
+			return t.length === 0 ? [] : (await e.select().from(D).where(Ne(D.id, t)).all()).map(oS);
 		},
 		async getUnprocessed(t) {
 			let n = (/* @__PURE__ */ new Date()).toISOString();
-			return (await e.select().from(D).where(h(Pe(D.processed_at), Oe(Pe(D.next_retry_at), Me(D.next_retry_at, n)), Oe(Pe(D.claimed_by), Me(D.claim_expires_at, n)))).orderBy(D.created_at, D.id).limit(t).all()).map(iS);
+			return (await e.select().from(D).where(h(Pe(D.processed_at), Oe(Pe(D.next_retry_at), Me(D.next_retry_at, n)), Oe(Pe(D.claimed_by), Me(D.claim_expires_at, n)))).orderBy(D.created_at, D.id).limit(t).all()).map(oS);
 		},
 		async claimEvents(t, n, r) {
 			if (t.length === 0) return [];
@@ -18827,10 +18831,10 @@ function aS(e) {
 }
 //#endregion
 //#region src/adapters/cleanup.ts
-var oS = 10080 * 60 * 1e3;
-function sS(e) {
+var cS = 10080 * 60 * 1e3;
+function lS(e) {
 	return async (t) => {
-		let n = Date.now() - oS;
+		let n = Date.now() - cS;
 		try {
 			let r = [Oe(je(S.expires_at_ts, n), je(S.idle_expires_at_ts, n))];
 			t?.tenant_id && r.push(m(S.tenant_id, t.tenant_id)), await e.delete(S).where(h(...r)), r = [Oe(je(Yt.expires_at_ts, n), je(Yt.idle_expires_at_ts, n))], t?.tenant_id && r.push(m(Yt.tenant_id, t.tenant_id)), t?.user_id && r.push(m(Yt.user_id, t.user_id)), await e.delete(Yt).where(h(...r)), r = [je(C.expires_at_ts, n)], t?.tenant_id && r.push(m(C.tenant_id, t.tenant_id)), await e.delete(C).where(h(...r));
@@ -18841,7 +18845,7 @@ function sS(e) {
 }
 //#endregion
 //#region src/adapters/index.ts
-function cS(e, t = { useTransactions: !0 }) {
+function uS(e, t = { useTransactions: !0 }) {
 	let n = {
 		actions: Ln(e),
 		actionExecutions: Rn(e),
@@ -18870,22 +18874,22 @@ function cS(e, t = { useTransactions: !0 }) {
 		passwords: cx(e),
 		promptSettings: lx(e),
 		proxyRoutes: px(e),
-		refreshTokens: gx(e),
-		resourceServers: Sx(e),
-		rolePermissions: Cx(e),
-		userPermissions: wx(e),
-		roles: Ex(e),
-		sessions: jx(e),
-		sessionCleanup: sS(e),
-		tenants: Ix(e),
-		themes: zx(e),
-		universalLoginTemplates: Bx(e),
-		users: Gx(e),
-		userRoles: Kx(e),
-		userOrganizations: qx(e),
-		stats: Zx(e),
-		analytics: rS(e),
-		outbox: aS(e),
+		refreshTokens: vx(e),
+		resourceServers: wx(e),
+		rolePermissions: Tx(e),
+		userPermissions: Ex(e),
+		roles: Ox(e),
+		sessions: Nx(e),
+		sessionCleanup: lS(e),
+		tenants: Rx(e),
+		themes: Vx(e),
+		universalLoginTemplates: Hx(e),
+		users: qx(e),
+		userRoles: Jx(e),
+		userOrganizations: Yx(e),
+		stats: $x(e),
+		analytics: aS(e),
+		outbox: sS(e),
 		async transaction(r) {
 			if (t.useTransactions === !1) return r(n);
 			await e.run(p`BEGIN`);
@@ -18901,7 +18905,7 @@ function cS(e, t = { useTransactions: !0 }) {
 }
 //#endregion
 //#region src/adapters/resolveHost.ts
-function lS(e) {
+function dS(e) {
 	if (!e) return { path: "/*" };
 	try {
 		let t = JSON.parse(e), n = Wy.safeParse(t);
@@ -18909,7 +18913,7 @@ function lS(e) {
 	} catch {}
 	return { path: "/*" };
 }
-function uS(e) {
+function fS(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -18924,7 +18928,7 @@ function uS(e) {
 		return [];
 	}
 }
-async function dS(e, t) {
+async function pS(e, t) {
 	let n = t.toLowerCase(), r = (await e.select({
 		custom_domain_id: nn.custom_domain_id,
 		tenant_id: nn.tenant_id,
@@ -18936,8 +18940,8 @@ async function dS(e, t) {
 		tenant_id: e.tenant_id,
 		custom_domain_id: e.custom_domain_id,
 		priority: e.priority,
-		match: lS(e.match),
-		handlers: uS(e.handlers),
+		match: dS(e.match),
+		handlers: fS(e.handlers),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	}));
@@ -18950,11 +18954,11 @@ async function dS(e, t) {
 }
 //#endregion
 //#region src/adapters/proxyData.ts
-function fS(e) {
+function mS(e) {
 	return {
 		proxyRoutes: px(e),
-		resolveHost: (t) => dS(e, t)
+		resolveHost: (t) => pS(e, t)
 	};
 }
 //#endregion
-export { fS as createProxyDataAdapter, px as createProxyRoutesAdapter, cS as default, En as sqlite };
+export { mS as createProxyDataAdapter, px as createProxyRoutesAdapter, uS as default, En as sqlite };