@authhero/drizzle 1.14.1 → 1.16.0

package/dist/drizzle-adapter.mjs

@@ -14,6 +14,10 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	return t || ze(n, Symbol.toStringTag, { value: "Module" }), n;
 }, O = w("tenants", {
 	id: T("id", { length: 191 }).primaryKey(),
+	parent_tenant_id: T("parent_tenant_id", { length: 191 }),
+	config_sync: T("config_sync", { length: 16 }),
+	config_sync_hash: T("config_sync_hash", { length: 64 }),
+	config_synced_at: T("config_synced_at", { length: 35 }),
 	name: T("name", { length: 255 }),
 	audience: T("audience", { length: 255 }),
 	sender_email: T("sender_email", { length: 255 }),
@@ -67,6 +71,24 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	worker_script_name: T("worker_script_name", { length: 255 }),
 	storage_kind: T("storage_kind", { length: 32 }),
 	d1_database_id: T("d1_database_id", { length: 64 })
+}), Ve = () => ({
+	scope: T("scope", {
+		length: 16,
+		enum: [
+			"local",
+			"shared",
+			"platform"
+		]
+	}),
+	override: T("override", {
+		length: 16,
+		enum: [
+			"none",
+			"secrets",
+			"fields"
+		]
+	}),
+	enforce: S("enforce", { mode: "boolean" })
 }), k = w("actions", {
 	id: T("id", { length: 255 }).notNull(),
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
@@ -80,6 +102,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	deployed_at_ts: S("deployed_at_ts"),
 	is_system: S("is_system"),
 	inherit: S("inherit"),
+	...Ve(),
 	created_at_ts: S("created_at_ts").notNull(),
 	updated_at_ts: S("updated_at_ts").notNull()
 }, (e) => [
@@ -89,7 +112,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	}),
 	x("idx_actions_tenant_id").on(e.tenant_id),
 	x("idx_actions_name").on(e.tenant_id, e.name)
-]), Ve = w("action_versions", {
+]), He = w("action_versions", {
 	id: T("id", { length: 255 }).notNull(),
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	action_id: T("action_id", { length: 255 }).notNull(),
@@ -109,7 +132,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	}),
 	re("uq_action_versions_number").on(e.tenant_id, e.action_id, e.number),
 	x("idx_action_versions_action_id").on(e.tenant_id, e.action_id)
-]), He = w("action_executions", {
+]), Ue = w("action_executions", {
 	id: T("id", { length: 255 }).notNull(),
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	trigger_id: T("trigger_id", { length: 255 }).notNull(),
@@ -175,7 +198,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	password: T("password", { length: 255 }).notNull(),
 	algorithm: T("algorithm", { length: 16 }).notNull().default("bcrypt"),
 	is_current: S("is_current").notNull().default(1)
-}), Ue = w("user_activity", {
+}), We = w("user_activity", {
 	tenant_id: T("tenant_id", { length: 255 }).notNull(),
 	user_id: T("user_id", { length: 255 }).notNull(),
 	last_login: T("last_login", { length: 35 }),
@@ -298,7 +321,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 }, (e) => [C({
 	columns: [e.code_id, e.code_type],
 	name: "PK_codes_code_id_code_type"
-}), x("codes_expires_at_index").on(e.expires_at)]), We = w("authentication_codes", {
+}), x("codes_expires_at_index").on(e.expires_at)]), Ge = w("authentication_codes", {
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	code: T("code", { length: 255 }).primaryKey(),
 	client_id: T("client_id", { length: 255 }).notNull(),
@@ -312,7 +335,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	created_at: T("created_at", { length: 35 }).notNull(),
 	expires_at: T("expires_at", { length: 35 }).notNull(),
 	used_at: T("used_at", { length: 35 })
-}), Ge = w("otps", {
+}), Ke = w("otps", {
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	id: T("id", { length: 255 }).primaryKey(),
 	client_id: T("client_id", { length: 255 }).notNull(),
@@ -331,7 +354,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	used_at: T("used_at", { length: 35 }),
 	audience: T("audience", { length: 255 }),
 	ip: T("ip", { length: 64 })
-}, (e) => [x("otps_email_index").on(e.email), x("otps_expires_at_index").on(e.expires_at)]), Ke = w("tickets", {
+}, (e) => [x("otps_email_index").on(e.email), x("otps_expires_at_index").on(e.expires_at)]), qe = w("tickets", {
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	id: T("id", { length: 255 }).primaryKey(),
 	client_id: T("client_id", { length: 255 }).notNull(),
@@ -419,7 +442,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	expires_at_ts: S("expires_at_ts"),
 	created_at_ts: S("created_at_ts").notNull(),
 	revoked_at_ts: S("revoked_at_ts")
-}, (e) => [re("idx_client_registration_tokens_hash").on(e.tenant_id, e.token_hash), x("idx_client_registration_tokens_client").on(e.tenant_id, e.client_id)]), qe = w("client_grants", {
+}, (e) => [re("idx_client_registration_tokens_hash").on(e.tenant_id, e.token_hash), x("idx_client_registration_tokens_client").on(e.tenant_id, e.client_id)]), Je = w("client_grants", {
 	id: T("id", { length: 21 }).notNull(),
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	client_id: T("client_id", { length: 191 }).notNull(),
@@ -470,12 +493,13 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	is_domain_connection: S("is_domain_connection"),
 	show_as_button: S("show_as_button"),
 	is_system: S("is_system").notNull().default(0),
+	...Ve(),
 	metadata: T("metadata", { length: 4096 })
 }, (e) => [
 	C({ columns: [e.tenant_id, e.id] }),
 	x("connections_tenant_id_index").on(e.tenant_id),
 	re("connections_id_unique").on(e.id)
-]), Je = w("custom_domains", {
+]), Ye = w("custom_domains", {
 	custom_domain_id: T("custom_domain_id", { length: 256 }).primaryKey(),
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	domain: T("domain", { length: 255 }).notNull(),
@@ -489,7 +513,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	domain_metadata: T("domain_metadata", { length: 2048 }),
 	created_at: T("created_at", { length: 35 }).notNull(),
 	updated_at: T("updated_at", { length: 35 }).notNull()
-}, (e) => [re("custom_domains_domain_unique").on(e.domain)]), Ye = w("domains", {
+}, (e) => [re("custom_domains_domain_unique").on(e.domain)]), Xe = w("domains", {
 	id: T("id", { length: 255 }).primaryKey(),
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	domain: T("domain", { length: 255 }).notNull(),
@@ -522,7 +546,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	x("idx_user_organizations_tenant_id").on(e.tenant_id),
 	x("idx_user_organizations_user_id").on(e.user_id),
 	x("idx_user_organizations_organization_id").on(e.organization_id)
-]), Xe = w("invites", {
+]), Ze = w("invites", {
 	id: T("id", { length: 21 }).primaryKey(),
 	tenant_id: T("tenant_id", { length: 191 }).notNull(),
 	organization_id: T("organization_id", { length: 21 }).notNull(),
@@ -544,7 +568,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	x("idx_invites_organization_id").on(e.organization_id),
 	x("idx_invites_expires_at").on(e.expires_at),
 	x("idx_invites_tenant_created").on(e.tenant_id, e.created_at)
-]), Ze = w("organization_connections", {
+]), Qe = w("organization_connections", {
 	tenant_id: T("tenant_id", { length: 191 }).notNull(),
 	organization_id: T("organization_id", { length: 21 }).notNull(),
 	connection_id: T("connection_id", { length: 191 }).notNull(),
@@ -587,7 +611,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	}),
 	x("role_permissions_role_fk").on(e.tenant_id, e.role_id),
 	x("role_permissions_permission_fk").on(e.tenant_id, e.resource_server_identifier, e.permission_name)
-]), Qe = w("user_permissions", {
+]), $e = w("user_permissions", {
 	tenant_id: T("tenant_id", { length: 191 }).notNull(),
 	user_id: T("user_id", { length: 191 }).notNull(),
 	resource_server_identifier: T("resource_server_identifier", { length: 191 }).notNull(),
@@ -642,14 +666,16 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	verification_key: T("verification_key", { length: 4096 }),
 	options: T("options", { length: 4096 }),
 	is_system: S("is_system").notNull().default(0),
+	...Ve(),
 	metadata: T("metadata", { length: 4096 }),
 	created_at: T("created_at", { length: 35 }).notNull(),
 	updated_at: T("updated_at", { length: 35 }).notNull()
 }, (e) => [C({
 	columns: [e.tenant_id, e.id],
 	name: "resource_servers_pk"
-})]), $e = w("branding", {
+})]), et = w("branding", {
 	tenant_id: T("tenant_id", { length: 191 }).primaryKey().references(() => O.id, { onDelete: "cascade" }),
+	...Ve(),
 	logo_url: T("logo_url", { length: 512 }),
 	favicon_url: T("favicon_url", { length: 512 }),
 	font_url: T("font_url", { length: 512 }),
@@ -659,12 +685,12 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	colors_page_background_end: T("colors_page_background_end", { length: 8 }),
 	colors_page_background_angle_dev: S("colors_page_background_angle_dev"),
 	dark_mode: T("dark_mode", { length: 8 })
-}), et = w("universal_login_templates", {
+}), tt = w("universal_login_templates", {
 	tenant_id: T("tenant_id", { length: 191 }).primaryKey().references(() => O.id, { onDelete: "cascade" }),
 	body: T("body").notNull(),
 	created_at_ts: S("created_at_ts").notNull(),
 	updated_at_ts: S("updated_at_ts").notNull()
-}), tt = w("themes", {
+}), nt = w("themes", {
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	themeId: T("themeId", { length: 255 }).notNull(),
 	displayName: T("displayName", { length: 255 }).notNull(),
@@ -724,7 +750,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 }, (e) => [C({
 	columns: [e.tenant_id, e.themeId],
 	name: "themes_pkey"
-}), x("themes_tenant_id_idx").on(e.tenant_id)]), nt = w("forms", {
+}), x("themes_tenant_id_idx").on(e.tenant_id)]), rt = w("forms", {
 	id: T("id", { length: 255 }).primaryKey(),
 	name: T("name", { length: 255 }).notNull(),
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
@@ -737,22 +763,24 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	style: T("style", { length: 1042 }),
 	created_at: T("created_at", { length: 35 }).notNull(),
 	updated_at: T("updated_at", { length: 35 }).notNull()
-}, (e) => [x("forms_tenant_id_idx").on(e.tenant_id)]), rt = w("flows", {
+}, (e) => [x("forms_tenant_id_idx").on(e.tenant_id)]), it = w("flows", {
 	id: T("id", { length: 24 }).primaryKey(),
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	name: T("name", { length: 150 }).notNull(),
 	actions: T("actions"),
 	created_at: T("created_at", { length: 35 }).notNull(),
 	updated_at: T("updated_at", { length: 35 }).notNull()
-}, (e) => [x("flows_tenant_id_idx").on(e.tenant_id)]), it = w("prompt_settings", {
+}, (e) => [x("flows_tenant_id_idx").on(e.tenant_id)]), at = w("prompt_settings", {
 	tenant_id: T("tenant_id", { length: 191 }).primaryKey(),
+	...Ve(),
 	universal_login_experience: T("universal_login_experience", { length: 16 }).notNull().default("new"),
 	identifier_first: S("identifier_first", { mode: "boolean" }).notNull().default(!0),
 	password_first: S("password_first", { mode: "boolean" }).notNull().default(!1),
 	webauthn_platform_first_factor: S("webauthn_platform_first_factor", { mode: "boolean" }).notNull().default(!1),
 	show_last_used_connection: S("show_last_used_connection", { mode: "boolean" }).notNull().default(!1)
-}), at = w("email_providers", {
+}), ot = w("email_providers", {
 	tenant_id: T("tenant_id", { length: 191 }).primaryKey(),
+	...Ve(),
 	name: T("name", { length: 255 }).notNull(),
 	enabled: S("enabled", { mode: "boolean" }).notNull(),
 	default_from_address: T("default_from_address", { length: 255 }),
@@ -760,7 +788,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	settings: T("settings", { length: 2048 }).notNull().default("{}"),
 	created_at: T("created_at", { length: 35 }).notNull(),
 	updated_at: T("updated_at", { length: 35 }).notNull()
-}), ot = w("email_templates", {
+}), st = w("email_templates", {
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	template: T("template", { length: 64 }).notNull(),
 	body: T("body").notNull(),
@@ -773,7 +801,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	enabled: S("enabled", { mode: "boolean" }).notNull().default(!0),
 	created_at: T("created_at", { length: 35 }).notNull(),
 	updated_at: T("updated_at", { length: 35 }).notNull()
-}, (e) => [C({ columns: [e.tenant_id, e.template] })]), st = w("hooks", {
+}, (e) => [C({ columns: [e.tenant_id, e.template] })]), ct = w("hooks", {
 	hook_id: T("hook_id", { length: 21 }).primaryKey(),
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	url: T("url", { length: 512 }),
@@ -788,15 +816,16 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	code_id: T("code_id", { length: 21 }),
 	page_id: T("page_id", { length: 64 }),
 	permission_required: T("permission_required", { length: 255 }),
-	metadata: T("metadata")
-}, (e) => [x("hooks_tenant_id_idx").on(e.tenant_id)]), ct = w("hook_code", {
+	metadata: T("metadata"),
+	...Ve()
+}, (e) => [x("hooks_tenant_id_idx").on(e.tenant_id)]), lt = w("hook_code", {
 	id: T("id", { length: 21 }).primaryKey(),
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	code: T("code").notNull(),
 	secrets: T("secrets"),
 	created_at_ts: S("created_at_ts").notNull(),
 	updated_at_ts: S("updated_at_ts").notNull()
-}, (e) => [x("hook_code_tenant_id_idx").on(e.tenant_id)]), lt = w("keys", {
+}, (e) => [x("hook_code_tenant_id_idx").on(e.tenant_id)]), ut = w("keys", {
 	kid: T("kid", { length: 255 }).primaryKey(),
 	tenant_id: T("tenant_id", { length: 191 }).references(() => O.id, { onDelete: "cascade" }),
 	created_at: T("created_at", { length: 35 }).notNull(),
@@ -809,7 +838,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	current_until: T("current_until", { length: 35 }),
 	type: T("type", { length: 50 }).notNull().default("jwt_signing"),
 	connection: T("connection", { length: 255 }).references(() => z.id, { onDelete: "cascade" })
-}), ut = w("custom_text", {
+}), dt = w("custom_text", {
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	prompt: T("prompt", { length: 64 }).notNull(),
 	language: T("language", { length: 16 }).notNull(),
@@ -820,13 +849,13 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	e.tenant_id,
 	e.prompt,
 	e.language
-] })]), dt = w("prompt_partials", {
+] })]), ft = w("prompt_partials", {
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	prompt: T("prompt", { length: 64 }).notNull(),
 	body: T("body").notNull(),
 	created_at_ts: S("created_at_ts").notNull(),
 	updated_at_ts: S("updated_at_ts").notNull()
-}, (e) => [C({ columns: [e.tenant_id, e.prompt] })]), ft = w("authentication_methods", {
+}, (e) => [C({ columns: [e.tenant_id, e.prompt] })]), pt = w("authentication_methods", {
 	id: T("id", { length: 26 }).primaryKey(),
 	tenant_id: T("tenant_id", { length: 191 }).notNull().references(() => O.id, { onDelete: "cascade" }),
 	user_id: T("user_id", { length: 255 }).notNull(),
@@ -908,7 +937,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	handlers: T("handlers", { length: 16384 }).notNull().default("[]"),
 	created_at: T("created_at", { length: 35 }).notNull(),
 	updated_at: T("updated_at", { length: 35 }).notNull()
-}, (e) => [x("proxy_routes_tenant_id_idx").on(e.tenant_id), x("proxy_routes_custom_domain_id_idx").on(e.custom_domain_id)]), pt = w("scim_configurations", {
+}, (e) => [x("proxy_routes_tenant_id_idx").on(e.tenant_id), x("proxy_routes_custom_domain_id_idx").on(e.custom_domain_id)]), mt = w("scim_configurations", {
 	connection_id: T("connection_id", { length: 255 }).notNull(),
 	tenant_id: T("tenant_id", { length: 255 }).notNull(),
 	user_id_attribute: T("user_id_attribute", { length: 255 }).notNull().default("externalId"),
@@ -928,7 +957,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	C({ columns: [e.tenant_id, e.token_id] }),
 	x("scim_tokens_tenant_connection_idx").on(e.tenant_id, e.connection_id),
 	re("scim_tokens_tenant_hash_idx").on(e.tenant_id, e.token_hash)
-]), mt = w("scim_external_ids", {
+]), ht = w("scim_external_ids", {
 	tenant_id: T("tenant_id", { length: 255 }).notNull(),
 	connection_id: T("connection_id", { length: 255 }).notNull(),
 	external_id: T("external_id", { length: 255 }).notNull(),
@@ -938,7 +967,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	e.tenant_id,
 	e.connection_id,
 	e.user_id
-] }), re("scim_external_ids_connection_external_idx").on(e.tenant_id, e.connection_id, e.external_id)]), ht = w("token_exchange_profiles", {
+] }), re("scim_external_ids_connection_external_idx").on(e.tenant_id, e.connection_id, e.external_id)]), gt = w("token_exchange_profiles", {
 	id: T("id", { length: 64 }).primaryKey(),
 	tenant_id: T("tenant_id", { length: 255 }).notNull(),
 	name: T("name", { length: 255 }).notNull(),
@@ -948,7 +977,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	jwt_verification: T("jwt_verification"),
 	created_at: T("created_at", { length: 35 }).notNull(),
 	updated_at: T("updated_at", { length: 35 }).notNull()
-}, (e) => [re("token_exchange_profiles_tenant_subject_token_type_idx").on(e.tenant_id, e.subject_token_type)]), gt = w("log_streams", {
+}, (e) => [re("token_exchange_profiles_tenant_subject_token_type_idx").on(e.tenant_id, e.subject_token_type)]), _t = w("log_streams", {
 	id: T("id", { length: 64 }).primaryKey(),
 	tenant_id: T("tenant_id", { length: 191 }).notNull(),
 	name: T("name", { length: 255 }).notNull(),
@@ -959,7 +988,7 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	is_priority: S("is_priority"),
 	created_at: T("created_at", { length: 35 }).notNull(),
 	updated_at: T("updated_at", { length: 35 }).notNull()
-}, (e) => [x("idx_log_streams_tenant_id").on(e.tenant_id)]), _t = w("migration_sources", {
+}, (e) => [x("idx_log_streams_tenant_id").on(e.tenant_id)]), vt = w("migration_sources", {
 	id: T("id", { length: 64 }).primaryKey(),
 	tenant_id: T("tenant_id", { length: 191 }).notNull(),
 	name: T("name", { length: 255 }).notNull(),
@@ -969,58 +998,58 @@ var ze = Object.defineProperty, Be = (e, t) => {
 	credentials: T("credentials").notNull(),
 	created_at: T("created_at", { length: 35 }).notNull(),
 	updated_at: T("updated_at", { length: 35 }).notNull()
-}, (e) => [x("idx_migration_sources_tenant_id").on(e.tenant_id)]), vt = /* @__PURE__ */ Be({
-	actionExecutions: () => He,
-	actionVersions: () => Ve,
+}, (e) => [x("idx_migration_sources_tenant_id").on(e.tenant_id)]), yt = /* @__PURE__ */ Be({
+	actionExecutions: () => Ue,
+	actionVersions: () => He,
 	actions: () => k,
-	authenticationCodes: () => We,
-	authenticationMethods: () => ft,
-	branding: () => $e,
-	clientGrants: () => qe,
+	authenticationCodes: () => Ge,
+	authenticationMethods: () => pt,
+	branding: () => et,
+	clientGrants: () => Je,
 	clientRegistrationTokens: () => L,
 	clients: () => I,
 	codes: () => F,
 	connections: () => z,
-	customDomains: () => Je,
-	customText: () => ut,
-	domains: () => Ye,
-	emailProviders: () => at,
-	emailTemplates: () => ot,
-	flows: () => rt,
-	forms: () => nt,
+	customDomains: () => Ye,
+	customText: () => dt,
+	domains: () => Xe,
+	emailProviders: () => ot,
+	emailTemplates: () => st,
+	flows: () => it,
+	forms: () => rt,
 	grants: () => R,
-	hookCode: () => ct,
-	hooks: () => st,
-	invites: () => Xe,
-	keys: () => lt,
-	logStreams: () => gt,
+	hookCode: () => lt,
+	hooks: () => ct,
+	invites: () => Ze,
+	keys: () => ut,
+	logStreams: () => _t,
 	loginSessions: () => P,
 	logs: () => K,
-	migrationSources: () => _t,
-	organizationConnections: () => Ze,
+	migrationSources: () => vt,
+	organizationConnections: () => Qe,
 	organizations: () => B,
-	otps: () => Ge,
+	otps: () => Ke,
 	outboxEvents: () => q,
 	passwords: () => j,
-	promptPartials: () => dt,
-	promptSettings: () => it,
+	promptPartials: () => ft,
+	promptSettings: () => at,
 	proxyRoutes: () => J,
 	refreshTokens: () => N,
 	resourceServers: () => G,
 	rolePermissions: () => U,
 	roles: () => H,
-	scimConfigurations: () => pt,
-	scimExternalIds: () => mt,
+	scimConfigurations: () => mt,
+	scimExternalIds: () => ht,
 	scimTokens: () => Y,
 	sessions: () => M,
 	tenants: () => O,
-	themes: () => tt,
-	tickets: () => Ke,
-	tokenExchangeProfiles: () => ht,
-	universalLoginTemplates: () => et,
-	userActivity: () => Ue,
+	themes: () => nt,
+	tickets: () => qe,
+	tokenExchangeProfiles: () => gt,
+	universalLoginTemplates: () => tt,
+	userActivity: () => We,
 	userOrganizations: () => V,
-	userPermissions: () => Qe,
+	userPermissions: () => $e,
 	userRoles: () => W,
 	users: () => A
 });
@@ -1035,14 +1064,14 @@ function X(e, t) {
 	}
 	return e;
 }
-function yt(e, t = "", n = {}) {
+function bt(e, t = "", n = {}) {
 	for (let r in e) if (Object.prototype.hasOwnProperty.call(e, r)) {
 		let i = t ? `${t}_${r}` : r, a = e[r];
-		typeof a == "object" && a && !Array.isArray(a) ? yt(a, i, n) : typeof a == "boolean" ? n[i] = +!!a : n[i] = a;
+		typeof a == "object" && a && !Array.isArray(a) ? bt(a, i, n) : typeof a == "boolean" ? n[i] = +!!a : n[i] = a;
 	}
 	return n;
 }
-function bt(e, t) {
+function xt(e, t) {
 	let n = {};
 	for (let [r, i] of Object.entries(e)) {
 		let e = t.find((e) => r.startsWith(`${e}_`));
@@ -1059,13 +1088,13 @@ function bt(e, t) {
 }
 //#endregion
 //#region src/helpers/filter.ts
-function xt(e) {
+function St(e) {
 	return typeof e == "object" && !!e && "coalesce" in e && "defaultValue" in e;
 }
-function St(e) {
+function Ct(e) {
 	return y`coalesce(${e.coalesce}, ${e.defaultValue})`;
 }
-function Ct(n, r, i, l = []) {
+function wt(n, r, i, l = []) {
 	let ee = u(n, te) ? o(n) : n, b = new Set(l), ne = (e) => {
 		let t = Number(e);
 		return Number.isFinite(t) ? t : e;
@@ -1078,7 +1107,7 @@ function Ct(n, r, i, l = []) {
 				let [, r, i] = n;
 				if (!r || !i) return null;
 				let o = r.trim(), s = Le(i.replace(/^"(.*)"$/, "$1").trim()), c = ee[o];
-				return xt(c) ? a(St(c), ne(s)) : u(c, e) ? b.has(o) ? p(c, `%${s}%`) : a(c, s) : null;
+				return St(c) ? a(Ct(c), ne(s)) : u(c, e) ? b.has(o) ? p(c, `%${s}%`) : a(c, s) : null;
 			}).filter((e) => e !== null);
 			return r.length === 0 ? null : r.length === 1 ? r[0] : t(...r) ?? null;
 		}).filter((e) => e !== null);
@@ -1101,12 +1130,12 @@ function Ct(n, r, i, l = []) {
 		};
 	}), C = [];
 	for (let { key: t, value: n, isNegation: r, isExistsQuery: o, operator: l } of S) if (t) {
-		let i = ee[t], v = xt(i), te = v ? i.coalesce : u(i, e) ? i : void 0, x = v ? ne(n) : n;
+		let i = ee[t], v = St(i), te = v ? i.coalesce : u(i, e) ? i : void 0, x = v ? ne(n) : n;
 		if (!te) {
 			o ? C.push(r ? y`${y.identifier(t)} IS NULL` : y`${y.identifier(t)} IS NOT NULL`) : C.push(y`${y.identifier(t)} ${y.raw(r ? "!=" : l ?? "=")} ${n}`);
 			continue;
 		}
-		let S = v ? St(i) : y`${te}`;
+		let S = v ? Ct(i) : y`${te}`;
 		if (o) C.push(r ? f(te) : d(te));
 		else if (b.has(t) && l === "=") C.push(r ? _(te, `%${n}%`) : p(te, `%${n}%`));
 		else if (r) switch (l) {
@@ -1155,18 +1184,18 @@ function Ct(n, r, i, l = []) {
 }
 //#endregion
 //#region src/helpers/paginate.ts
-function wt(e) {
+function Tt(e) {
 	return e?.from !== void 0 || e?.take !== void 0;
 }
 function Z(e) {
 	let t = e?.take, n = typeof t == "number" && Number.isFinite(t) ? Math.floor(t) : NaN;
 	return n >= 1 ? n : 50;
 }
-function Tt(e) {
+function Et(e) {
 	let t = e.sortOrder === "asc" ? n : i;
 	return [t(e.sortColumn), t(e.idColumn)];
 }
-function Et(e, t) {
+function Dt(e, t) {
 	let n = e?.from ? ge(e.from) : null;
 	if (!n) return;
 	if (n.k !== t.sortKey) throw new Re(400, { message: "The `from` cursor was issued under a different sort and cannot be used with this request" });
@@ -1174,7 +1203,7 @@ function Et(e, t) {
 	let r = t.sortOrder === "asc" ? y.raw(">") : y.raw("<");
 	return y`(${t.sortColumn}, ${t.idColumn}) ${r} (${n.s}, ${n.i})`;
 }
-function Dt(e, t, n, r = "id", i) {
+function Ot(e, t, n, r = "id", i) {
 	let a = e.length > t, o = a ? e.slice(0, t) : e, s, c = o[o.length - 1];
 	if (a && c) {
 		let e = c[n];
@@ -1191,33 +1220,36 @@ function Dt(e, t, n, r = "id", i) {
 }
 //#endregion
 //#region src/adapters/actions.ts
-function Ot(e) {
+function kt(e) {
 	let t = X(e);
 	return Array.isArray(t) ? t : [];
 }
-function kt(e) {
-	let { created_at_ts: t, updated_at_ts: n, deployed_at_ts: r, secrets: i, dependencies: a, supported_triggers: o, is_system: s, inherit: c, tenant_id: l, runtime: u, status: d, ...f } = e;
+function At(e) {
+	let { created_at_ts: t, updated_at_ts: n, deployed_at_ts: r, secrets: i, dependencies: a, supported_triggers: o, is_system: s, inherit: c, scope: l, override: u, enforce: d, tenant_id: f, runtime: p, status: m, ...h } = e;
 	return {
-		...f,
-		tenant_id: l,
-		runtime: u ?? void 0,
-		status: d || "built",
+		...h,
+		tenant_id: f,
+		runtime: p ?? void 0,
+		status: m || "built",
 		deployed_at: r ? new Date(Number(r)).toISOString() : void 0,
 		secrets: X(i),
 		dependencies: X(a),
 		supported_triggers: X(o),
 		is_system: !!s,
 		inherit: !!c,
+		scope: l ?? void 0,
+		override: u ?? void 0,
+		enforce: d ?? void 0,
 		created_at: new Date(Number(t)).toISOString(),
 		updated_at: new Date(Number(n)).toISOString()
 	};
 }
-function At(e) {
+function jt(e) {
 	return {
-		async create(t, n) {
-			let r = Date.now(), i = `act_${b()}`;
+		async create(t, n, r) {
+			let i = Date.now(), a = r?.importMetadata?.id ?? `act_${b()}`;
 			return await e.insert(k).values({
-				id: i,
+				id: a,
 				tenant_id: t,
 				name: n.name,
 				code: n.code,
@@ -1228,10 +1260,13 @@ function At(e) {
 				supported_triggers: n.supported_triggers ? JSON.stringify(n.supported_triggers) : null,
 				is_system: +!!n.is_system,
 				inherit: +!!n.inherit,
-				created_at_ts: r,
-				updated_at_ts: r
+				scope: n.scope ?? null,
+				override: n.override ?? null,
+				enforce: n.enforce ?? null,
+				created_at_ts: i,
+				updated_at_ts: i
 			}), {
-				id: i,
+				id: a,
 				tenant_id: t,
 				name: n.name,
 				code: n.code,
@@ -1242,27 +1277,30 @@ function At(e) {
 				supported_triggers: n.supported_triggers,
 				is_system: n.is_system ?? !1,
 				inherit: n.inherit ?? !1,
-				created_at: new Date(r).toISOString(),
-				updated_at: new Date(r).toISOString()
+				scope: n.scope,
+				override: n.override,
+				enforce: n.enforce,
+				created_at: new Date(i).toISOString(),
+				updated_at: new Date(i).toISOString()
 			};
 		},
 		async get(n, r) {
 			let i = await e.select().from(k).where(t(a(k.tenant_id, n), a(k.id, r))).get();
-			return i ? kt(i) : null;
+			return i ? At(i) : null;
 		},
 		async list(o, s = {}) {
 			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s, p = [a(k.tenant_id, o)];
 			if (f) {
-				let e = Ct(k, f, ["name"]);
+				let e = wt(k, f, ["name"]);
 				e && p.push(e);
 			}
 			let m = t(...p);
-			if (wt(s)) {
+			if (Tt(s)) {
 				let n = {
 					sortColumn: k.created_at_ts,
 					idColumn: k.id,
 					sortOrder: "desc"
-				}, r = Z(s), i = Et(s, n), { rows: a, next: o } = Dt(await e.select().from(k).where(i ? t(m, i) : m).orderBy(...Tt(n)).limit(r + 1), r, "created_at_ts", "id"), c = a.map(kt);
+				}, r = Z(s), i = Dt(s, n), { rows: a, next: o } = Ot(await e.select().from(k).where(i ? t(m, i) : m).orderBy(...Et(n)).limit(r + 1), r, "created_at_ts", "id"), c = a.map(At);
 				return {
 					actions: c,
 					start: 0,
@@ -1276,7 +1314,7 @@ function At(e) {
 				let e = k[d.sort_by];
 				e && (h = h.orderBy(d.sort_order === "desc" ? i(e) : n(e)));
 			}
-			let g = (await h.offset(c * l).limit(l)).map(kt);
+			let g = (await h.offset(c * l).limit(l)).map(At);
 			if (!u) return {
 				actions: g,
 				start: 0,
@@ -1294,7 +1332,7 @@ function At(e) {
 		async update(n, r, i) {
 			let o = { updated_at_ts: Date.now() };
 			if (i.name !== void 0 && (o.name = i.name), i.code !== void 0 && (o.code = i.code), i.runtime !== void 0 && (o.runtime = i.runtime), i.secrets !== void 0) {
-				let s = await e.select({ secrets: k.secrets }).from(k).where(t(a(k.tenant_id, n), a(k.id, r))).get(), c = new Map(Ot(s?.secrets).map((e) => [e.name, e])), l = i.secrets.map((e) => e.value === void 0 ? {
+				let s = await e.select({ secrets: k.secrets }).from(k).where(t(a(k.tenant_id, n), a(k.id, r))).get(), c = new Map(kt(s?.secrets).map((e) => [e.name, e])), l = i.secrets.map((e) => e.value === void 0 ? {
 					name: e.name,
 					value: c.get(e.name)?.value
 				} : e);
@@ -1304,7 +1342,7 @@ function At(e) {
 				let e = new Date(i.deployed_at).getTime();
 				Number.isFinite(e) && (o.deployed_at_ts = e);
 			}
-			return i.is_system !== void 0 && (o.is_system = +!!i.is_system), i.inherit !== void 0 && (o.inherit = +!!i.inherit), (await e.update(k).set(o).where(t(a(k.tenant_id, n), a(k.id, r))).returning()).length > 0;
+			return i.is_system !== void 0 && (o.is_system = +!!i.is_system), i.scope !== void 0 && (o.scope = i.scope), i.override !== void 0 && (o.override = i.override), i.enforce !== void 0 && (o.enforce = i.enforce), i.inherit !== void 0 && (o.inherit = +!!i.inherit), (await e.update(k).set(o).where(t(a(k.tenant_id, n), a(k.id, r))).returning()).length > 0;
 		},
 		async remove(n, r) {
 			return (await e.delete(k).where(t(a(k.tenant_id, n), a(k.id, r))).returning()).length > 0;
@@ -1313,12 +1351,12 @@ function At(e) {
 }
 //#endregion
 //#region src/adapters/actionExecutions.ts
-var jt = 500;
-function Mt(e) {
+var Mt = 500;
+function Nt(e) {
 	return {
 		async create(t, n) {
 			let r = Date.now();
-			return await e.insert(He).values({
+			return await e.insert(Ue).values({
 				id: n.id,
 				tenant_id: t,
 				trigger_id: n.trigger_id,
@@ -1339,7 +1377,7 @@ function Mt(e) {
 			};
 		},
 		async get(n, r) {
-			let i = await e.select().from(He).where(t(a(He.tenant_id, n), a(He.id, r))).get();
+			let i = await e.select().from(Ue).where(t(a(Ue.tenant_id, n), a(Ue.id, r))).get();
 			return i ? {
 				id: i.id,
 				tenant_id: i.tenant_id,
@@ -1356,8 +1394,8 @@ function Mt(e) {
 			if (Number.isNaN(n)) throw Error(`Invalid olderThan date: ${t}`);
 			let r = 0;
 			for (;;) {
-				let t = await e.delete(He).where(y`rowid IN (SELECT rowid FROM ${He} WHERE ${He.created_at_ts} < ${n} LIMIT ${jt})`).returning({ id: He.id });
-				if (r += t.length, t.length < jt) break;
+				let t = await e.delete(Ue).where(y`rowid IN (SELECT rowid FROM ${Ue} WHERE ${Ue.created_at_ts} < ${n} LIMIT ${Mt})`).returning({ id: Ue.id });
+				if (r += t.length, t.length < Mt) break;
 			}
 			return r;
 		}
@@ -1365,12 +1403,12 @@ function Mt(e) {
 }
 //#endregion
 //#region src/adapters/atomic.ts
-function Nt(e) {
+function Pt(e) {
 	let t = e;
 	return typeof t == "object" && !!t && "batch" in t && typeof t.batch == "function";
 }
-async function Pt(e, t) {
-	if (Nt(e)) return e.batch(t);
+async function Ft(e, t) {
+	if (Pt(e)) return e.batch(t);
 	await e.run(y`BEGIN`);
 	try {
 		let n = [];
@@ -1387,7 +1425,7 @@ async function Pt(e, t) {
 }
 //#endregion
 //#region src/adapters/actionVersions.ts
-function Ft(e) {
+function It(e) {
 	let { created_at_ts: t, updated_at_ts: n, secrets: r, dependencies: i, supported_triggers: a, deployed: o, runtime: s, ...c } = e;
 	return {
 		...c,
@@ -1400,10 +1438,10 @@ function Ft(e) {
 		updated_at: new Date(Number(n)).toISOString()
 	};
 }
-function It(e) {
+function Lt(e) {
 	return {
 		async create(n, r) {
-			let o = Date.now(), s = `ver_${b()}`, c = r.deployed !== !1, l = ((await e.select({ number: Ve.number }).from(Ve).where(t(a(Ve.tenant_id, n), a(Ve.action_id, r.action_id))).orderBy(i(Ve.number)).limit(1).get())?.number ?? 0) + 1, u = e.insert(Ve).values({
+			let o = Date.now(), s = `ver_${b()}`, c = r.deployed !== !1, l = ((await e.select({ number: He.number }).from(He).where(t(a(He.tenant_id, n), a(He.action_id, r.action_id))).orderBy(i(He.number)).limit(1).get())?.number ?? 0) + 1, u = e.insert(He).values({
 				id: s,
 				tenant_id: n,
 				action_id: r.action_id,
@@ -1417,10 +1455,10 @@ function It(e) {
 				created_at_ts: o,
 				updated_at_ts: o
 			});
-			return await Pt(e, c ? [e.update(Ve).set({
+			return await Ft(e, c ? [e.update(He).set({
 				deployed: 0,
 				updated_at_ts: o
-			}).where(t(a(Ve.tenant_id, n), a(Ve.action_id, r.action_id), a(Ve.deployed, 1))), u] : [u]), {
+			}).where(t(a(He.tenant_id, n), a(He.action_id, r.action_id), a(He.deployed, 1))), u] : [u]), {
 				id: s,
 				tenant_id: n,
 				action_id: r.action_id,
@@ -1436,18 +1474,18 @@ function It(e) {
 			};
 		},
 		async get(n, r, i) {
-			let o = await e.select().from(Ve).where(t(a(Ve.tenant_id, n), a(Ve.action_id, r), a(Ve.id, i))).get();
-			return o ? Ft(o) : null;
+			let o = await e.select().from(He).where(t(a(He.tenant_id, n), a(He.action_id, r), a(He.id, i))).get();
+			return o ? It(o) : null;
 		},
 		async list(n, o, s = {}) {
-			let { page: c = 0, per_page: l = 50, include_totals: u = !1 } = s, d = t(a(Ve.tenant_id, n), a(Ve.action_id, o)), f = (await e.select().from(Ve).where(d).orderBy(i(Ve.number)).offset(c * l).limit(l)).map(Ft);
+			let { page: c = 0, per_page: l = 50, include_totals: u = !1 } = s, d = t(a(He.tenant_id, n), a(He.action_id, o)), f = (await e.select().from(He).where(d).orderBy(i(He.number)).offset(c * l).limit(l)).map(It);
 			if (!u) return {
 				versions: f,
 				start: 0,
 				limit: 0,
 				length: 0
 			};
-			let [p] = await e.select({ count: r() }).from(Ve).where(d);
+			let [p] = await e.select({ count: r() }).from(He).where(d);
 			return {
 				versions: f,
 				start: c * l,
@@ -1456,19 +1494,19 @@ function It(e) {
 			};
 		},
 		async removeForAction(n, r) {
-			return (await e.delete(Ve).where(t(a(Ve.tenant_id, n), a(Ve.action_id, r))).returning()).length;
+			return (await e.delete(He).where(t(a(He.tenant_id, n), a(He.action_id, r))).returning()).length;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/branding.ts
-function Lt(e) {
+function Rt(e) {
 	return e === "dark" || e === "light" || e === "auto";
 }
-function Rt(e) {
+function zt(e) {
 	return {
 		async get(t) {
-			let n = await e.select().from($e).where(a($e.tenant_id, t)).get();
+			let n = await e.select().from(et).where(a(et.tenant_id, t)).get();
 			if (!n) return null;
 			let { tenant_id: r, colors_primary: i, colors_page_background_type: o, colors_page_background_start: s, colors_page_background_end: c, colors_page_background_angle_dev: l, font_url: u, dark_mode: d, ...f } = n;
 			return D({
@@ -1483,7 +1521,7 @@ function Rt(e) {
 					}
 				},
 				font: u ? { url: u } : void 0,
-				dark_mode: Lt(d) ? d : void 0
+				dark_mode: Rt(d) ? d : void 0
 			});
 		},
 		async set(t, n) {
@@ -1497,11 +1535,11 @@ function Rt(e) {
 				font_url: i?.url,
 				dark_mode: a
 			};
-			await e.insert($e).values({
+			await e.insert(et).values({
 				tenant_id: t,
 				...l
 			}).onConflictDoUpdate({
-				target: $e.tenant_id,
+				target: et.tenant_id,
 				set: l
 			});
 		}
@@ -1509,7 +1547,7 @@ function Rt(e) {
 }
 //#endregion
 //#region src/adapters/clients.ts
-var zt = [
+var Bt = [
 	"global",
 	"is_first_party",
 	"oidc_conformant",
@@ -1521,7 +1559,7 @@ var zt = [
 	"require_pushed_authorization_requests",
 	"require_proof_of_possession",
 	"hide_sign_up_disabled_error"
-], Bt = [
+], Vt = [
 	"callbacks",
 	"allowed_origins",
 	"web_origins",
@@ -1530,7 +1568,7 @@ var zt = [
 	"allowed_logout_urls",
 	"grant_types",
 	"signing_keys"
-], Vt = [
+], Ht = [
 	"session_transfer",
 	"oidc_logout",
 	"jwt_configuration",
@@ -1547,21 +1585,21 @@ var zt = [
 	"registration_metadata",
 	"token_exchange"
 ];
-function Ht(e) {
+function Ut(e) {
 	let { tenant_id: t, connections: n, ...r } = e, i = { ...r };
-	for (let e of zt) i[e] = !!r[e];
-	for (let e of Bt) i[e] = X(r[e], []);
-	for (let e of Vt) i[e] = X(r[e], {});
+	for (let e of Bt) i[e] = !!r[e];
+	for (let e of Vt) i[e] = X(r[e], []);
+	for (let e of Ht) i[e] = X(r[e], {});
 	return i.connections = X(n, []), D(i);
 }
-function Ut(e) {
+function Wt(e) {
 	let t = { ...e };
-	ie(e, zt, t);
-	for (let n of Bt) e[n] !== void 0 && (t[n] = JSON.stringify(e[n] || []));
-	for (let n of Vt) e[n] !== void 0 && (t[n] = JSON.stringify(e[n] || {}));
+	ie(e, Bt, t);
+	for (let n of Vt) e[n] !== void 0 && (t[n] = JSON.stringify(e[n] || []));
+	for (let n of Ht) e[n] !== void 0 && (t[n] = JSON.stringify(e[n] || {}));
 	return e.connections !== void 0 && (t.connections = JSON.stringify(e.connections || [])), ce(t);
 }
-function Wt(e) {
+function Gt(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
@@ -1585,12 +1623,12 @@ function Wt(e) {
 				created_at: r,
 				updated_at: r
 			};
-			for (let e of zt) i[e] = n[e] ?? !1;
+			for (let e of Bt) i[e] = n[e] ?? !1;
 			i.oidc_conformant = n.oidc_conformant ?? !0, i.auth0_conformant = n.auth0_conformant ?? !0, i.sso_disabled = n.sso_disabled ?? !1;
-			for (let e of Bt) i[e] = n[e] || [];
-			for (let e of Vt) i[e] = n[e] || {};
+			for (let e of Vt) i[e] = n[e] || [];
+			for (let e of Ht) i[e] = n[e] || {};
 			i.connections = n.connections || [];
-			let a = Ut(i);
+			let a = Wt(i);
 			try {
 				await e.insert(I).values({
 					...a,
@@ -1599,37 +1637,37 @@ function Wt(e) {
 			} catch (e) {
 				throw e?.message?.includes("UNIQUE constraint failed") || e?.message?.includes("duplicate key") ? new Re(409, { message: "Client already exists" }) : e;
 			}
-			return Ht({
+			return Ut({
 				...a,
 				tenant_id: t
 			});
 		},
 		async get(n, r) {
 			let i = await e.select().from(I).where(t(a(I.tenant_id, n), a(I.client_id, r))).get();
-			return i ? Ht(i) : null;
+			return i ? Ut(i) : null;
 		},
 		async getByClientId(t) {
 			let n = await e.select().from(I).where(a(I.client_id, t)).get();
 			return n ? {
-				...Ht(n),
+				...Ut(n),
 				tenant_id: n.tenant_id
 			} : null;
 		},
 		async update(n, r, i) {
-			let o = Ut({
+			let o = Wt({
 				...i,
 				updated_at: (/* @__PURE__ */ new Date()).toISOString()
 			});
 			return delete o.client_id, delete o.tenant_id, await e.update(I).set(o).where(t(a(I.tenant_id, n), a(I.client_id, r))), !0;
 		},
 		async list(o, s) {
-			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = f ? Ct(I, f, ["name", "client_id"]) : void 0, m = p ? t(a(I.tenant_id, o), p) : a(I.tenant_id, o);
-			if (wt(s)) {
+			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = f ? wt(I, f, ["name", "client_id"]) : void 0, m = p ? t(a(I.tenant_id, o), p) : a(I.tenant_id, o);
+			if (Tt(s)) {
 				let n = {
 					sortColumn: I.created_at,
 					idColumn: I.client_id,
 					sortOrder: "desc"
-				}, r = Et(s, n), i = Z(s), { rows: a, next: o } = Dt(await e.select().from(I).where(r ? t(m, r) : m).orderBy(...Tt(n)).limit(i + 1), i, "created_at", "client_id"), c = a.map(Ht);
+				}, r = Dt(s, n), i = Z(s), { rows: a, next: o } = Ot(await e.select().from(I).where(r ? t(m, r) : m).orderBy(...Et(n)).limit(i + 1), i, "created_at", "client_id"), c = a.map(Ut);
 				return {
 					clients: c,
 					totals: {
@@ -1645,7 +1683,7 @@ function Wt(e) {
 				let e = I[d.sort_by];
 				e && (h = h.orderBy(d.sort_order === "desc" ? i(e) : n(e)));
 			}
-			let g = (await h.offset(c * l).limit(l)).map(Ht);
+			let g = (await h.offset(c * l).limit(l)).map(Ut);
 			if (!u) return { clients: g };
 			let [_] = await e.select({ count: r() }).from(I).where(m);
 			return {
@@ -1665,7 +1703,7 @@ function Wt(e) {
 }
 //#endregion
 //#region src/adapters/clientConnections.ts
-function Gt(e) {
+function Kt(e) {
 	let { tenant_id: t, is_system: n, options: r, metadata: i, ...a } = e;
 	return D({
 		...a,
@@ -1674,14 +1712,14 @@ function Gt(e) {
 		is_system: n ? !0 : void 0
 	});
 }
-function Kt(e) {
+function qt(e) {
 	return {
 		async listByClient(n, r) {
 			let i = await e.select({ connections: I.connections }).from(I).where(t(a(I.tenant_id, n), a(I.client_id, r))).get();
 			if (!i) return [];
 			let o = X(i.connections, []) || [];
 			if (o.length === 0) return [];
-			let s = (await e.select().from(z).where(t(a(z.tenant_id, n), l(z.id, o))).all()).map(Gt);
+			let s = (await e.select().from(z).where(t(a(z.tenant_id, n), l(z.id, o))).all()).map(Kt);
 			return o.map((e) => s.find((t) => t.id === e)).filter(Boolean);
 		},
 		async updateByClient(n, r, i) {
@@ -1718,7 +1756,7 @@ function Kt(e) {
 }
 //#endregion
 //#region src/adapters/clientGrants.ts
-function qt(e) {
+function Jt(e) {
 	let { tenant_id: t, scope: n, authorization_details_types: r, allow_any_organization: i, is_system: a, ...o } = e;
 	return D({
 		...o,
@@ -1728,7 +1766,7 @@ function qt(e) {
 		is_system: !!a
 	});
 }
-function Jt(e) {
+function Yt(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
@@ -1745,30 +1783,30 @@ function Jt(e) {
 				created_at: r,
 				updated_at: r
 			};
-			return await e.insert(qe).values(i), qt({
+			return await e.insert(Je).values(i), Jt({
 				...i,
 				tenant_id: t
 			});
 		},
 		async get(n, r) {
-			let i = await e.select().from(qe).where(t(a(qe.tenant_id, n), a(qe.id, r))).get();
-			return i ? qt(i) : null;
+			let i = await e.select().from(Je).where(t(a(Je.tenant_id, n), a(Je.id, r))).get();
+			return i ? Jt(i) : null;
 		},
 		async update(n, r, i) {
 			let { scope: o, authorization_details_types: s, allow_any_organization: c, is_system: l, ...u } = i, d = {
 				...u,
 				updated_at: (/* @__PURE__ */ new Date()).toISOString()
 			};
-			return o !== void 0 && (d.scope = JSON.stringify(o)), s !== void 0 && (d.authorization_details_types = JSON.stringify(s)), c !== void 0 && (d.allow_any_organization = +!!c), l !== void 0 && (d.is_system = +!!l), (await e.update(qe).set(d).where(t(a(qe.tenant_id, n), a(qe.id, r))).returning()).length > 0;
+			return o !== void 0 && (d.scope = JSON.stringify(o)), s !== void 0 && (d.authorization_details_types = JSON.stringify(s)), c !== void 0 && (d.allow_any_organization = +!!c), l !== void 0 && (d.is_system = +!!l), (await e.update(Je).set(d).where(t(a(Je.tenant_id, n), a(Je.id, r))).returning()).length > 0;
 		},
 		async list(o, s) {
-			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = f ? Ct(qe, f, ["client_id", "audience"]) : void 0, m = p ? t(a(qe.tenant_id, o), p) : a(qe.tenant_id, o);
-			if (wt(s)) {
+			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = f ? wt(Je, f, ["client_id", "audience"]) : void 0, m = p ? t(a(Je.tenant_id, o), p) : a(Je.tenant_id, o);
+			if (Tt(s)) {
 				let n = {
-					sortColumn: qe.created_at,
-					idColumn: qe.id,
+					sortColumn: Je.created_at,
+					idColumn: Je.id,
 					sortOrder: "desc"
-				}, r = Et(s, n), i = Z(s), { rows: a, next: o } = Dt(await e.select().from(qe).where(r ? t(m, r) : m).orderBy(...Tt(n)).limit(i + 1), i, "created_at"), c = a.map(qt);
+				}, r = Dt(s, n), i = Z(s), { rows: a, next: o } = Ot(await e.select().from(Je).where(r ? t(m, r) : m).orderBy(...Et(n)).limit(i + 1), i, "created_at"), c = a.map(Jt);
 				return {
 					client_grants: c,
 					start: 0,
@@ -1777,14 +1815,14 @@ function Jt(e) {
 					next: o
 				};
 			}
-			let h = e.select().from(qe).where(m).$dynamic();
+			let h = e.select().from(Je).where(m).$dynamic();
 			if (d?.sort_by) {
-				let e = qe[d.sort_by];
+				let e = Je[d.sort_by];
 				e && (h = h.orderBy(d.sort_order === "desc" ? i(e) : n(e)));
-			} else h = h.orderBy(i(qe.created_at), i(qe.id));
-			let g = (await h.offset(c * l).limit(l)).map(qt);
+			} else h = h.orderBy(i(Je.created_at), i(Je.id));
+			let g = (await h.offset(c * l).limit(l)).map(Jt);
 			if (!u) return { client_grants: g };
-			let [_] = await e.select({ count: r() }).from(qe).where(m);
+			let [_] = await e.select({ count: r() }).from(Je).where(m);
 			return {
 				client_grants: g,
 				start: c * l,
@@ -1793,26 +1831,26 @@ function Jt(e) {
 			};
 		},
 		async remove(n, r) {
-			return (await e.delete(qe).where(t(a(qe.tenant_id, n), a(qe.id, r))).returning()).length > 0;
+			return (await e.delete(Je).where(t(a(Je.tenant_id, n), a(Je.id, r))).returning()).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/clientRegistrationTokens.ts
-function Yt(e) {
+function Xt(e) {
 	if (!e) return;
 	let t = JSON.parse(e);
 	return be(t) ? t : void 0;
 }
-function Xt(e) {
+function Zt(e) {
 	return e == null ? void 0 : new Date(e).toISOString();
 }
-function Zt(e) {
+function Qt(e) {
 	if (!e) return null;
 	let t = new Date(e);
 	return isNaN(t.getTime()) ? null : t.getTime();
 }
-function Qt(e) {
+function $t(e) {
 	let t = he.parse(e.type);
 	return {
 		id: e.id,
@@ -1820,15 +1858,15 @@ function Qt(e) {
 		type: t,
 		client_id: e.client_id ?? void 0,
 		sub: e.sub ?? void 0,
-		constraints: Yt(e.constraints),
+		constraints: Xt(e.constraints),
 		single_use: !!e.single_use,
-		expires_at: Xt(e.expires_at_ts),
-		used_at: Xt(e.used_at_ts),
-		revoked_at: Xt(e.revoked_at_ts),
+		expires_at: Zt(e.expires_at_ts),
+		used_at: Zt(e.used_at_ts),
+		revoked_at: Zt(e.revoked_at_ts),
 		created_at: new Date(e.created_at_ts).toISOString()
 	};
 }
-function $t(e) {
+function en(e) {
 	return {
 		async create(t, n) {
 			let r = Date.now();
@@ -1841,7 +1879,7 @@ function $t(e) {
 				sub: n.sub ?? null,
 				constraints: n.constraints ? JSON.stringify(n.constraints) : null,
 				single_use: +!!n.single_use,
-				expires_at_ts: Zt(n.expires_at),
+				expires_at_ts: Qt(n.expires_at),
 				created_at_ts: r
 			}), {
 				id: n.id,
@@ -1857,23 +1895,23 @@ function $t(e) {
 		},
 		async get(n, r) {
 			let i = await e.select().from(L).where(t(a(L.tenant_id, n), a(L.id, r))).get();
-			return i ? Qt(i) : null;
+			return i ? $t(i) : null;
 		},
 		async getByHash(n, r) {
 			let i = await e.select().from(L).where(t(a(L.tenant_id, n), a(L.token_hash, r))).get();
-			return i ? Qt(i) : null;
+			return i ? $t(i) : null;
 		},
 		async listByClient(n, r) {
-			return (await e.select().from(L).where(t(a(L.tenant_id, n), a(L.client_id, r))).orderBy(i(L.created_at_ts))).map(Qt);
+			return (await e.select().from(L).where(t(a(L.tenant_id, n), a(L.client_id, r))).orderBy(i(L.created_at_ts))).map($t);
 		},
 		async markUsed(n, r, i) {
-			return (await e.update(L).set({ used_at_ts: Zt(i) }).where(t(a(L.tenant_id, n), a(L.id, r), f(L.used_at_ts))).returning()).length > 0;
+			return (await e.update(L).set({ used_at_ts: Qt(i) }).where(t(a(L.tenant_id, n), a(L.id, r), f(L.used_at_ts))).returning()).length > 0;
 		},
 		async revoke(n, r, i) {
-			return (await e.update(L).set({ revoked_at_ts: Zt(i) }).where(t(a(L.tenant_id, n), a(L.id, r), f(L.revoked_at_ts))).returning()).length > 0;
+			return (await e.update(L).set({ revoked_at_ts: Qt(i) }).where(t(a(L.tenant_id, n), a(L.id, r), f(L.revoked_at_ts))).returning()).length > 0;
 		},
 		async revokeByClient(n, r, i) {
-			return (await e.update(L).set({ revoked_at_ts: Zt(i) }).where(t(a(L.tenant_id, n), a(L.client_id, r), f(L.revoked_at_ts))).returning()).length;
+			return (await e.update(L).set({ revoked_at_ts: Qt(i) }).where(t(a(L.tenant_id, n), a(L.client_id, r), f(L.revoked_at_ts))).returning()).length;
 		},
 		async remove(n, r) {
 			return (await e.delete(L).where(t(a(L.tenant_id, n), a(L.id, r))).returning()).length > 0;
@@ -1882,12 +1920,12 @@ function $t(e) {
 }
 //#endregion
 //#region src/adapters/codes.ts
-var en = ["code_id", "login_id"], tn = 500;
-function nn(e) {
+var tn = ["code_id", "login_id"], nn = 500;
+function rn(e) {
 	let { tenant_id: t, ...n } = e;
 	return D(n);
 }
-function rn(e) {
+function an(e) {
 	return {
 		async create(t, n) {
 			let r = {
@@ -1896,18 +1934,18 @@ function rn(e) {
 				created_at: n.created_at || (/* @__PURE__ */ new Date()).toISOString(),
 				expires_at: n.expires_at
 			};
-			return await e.insert(F).values(r), nn(r);
+			return await e.insert(F).values(r), rn(r);
 		},
 		async get(n, r, i) {
 			let o = n ? t(a(F.tenant_id, n), a(F.code_id, r), a(F.code_type, i)) : t(a(F.code_id, r), a(F.code_type, i)), s = await e.select().from(F).where(o).get();
-			return s ? nn(s) : null;
+			return s ? rn(s) : null;
 		},
 		async list(o, s) {
 			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = [a(F.tenant_id, o)];
 			if (f) {
-				let e = Ee(f, en);
+				let e = Ee(f, tn);
 				if (e) {
-					let t = Ct(F, e, en);
+					let t = wt(F, e, tn);
 					t && p.push(t);
 				}
 			}
@@ -1916,7 +1954,7 @@ function rn(e) {
 				let e = F[d.sort_by];
 				e && (h = h.orderBy(d.sort_order === "desc" ? i(e) : n(e)));
 			}
-			let g = (await h.offset(c * l).limit(l)).map(nn);
+			let g = (await h.offset(c * l).limit(l)).map(rn);
 			if (!u) return { codes: g };
 			let [_] = await e.select({ count: r() }).from(F).where(m);
 			return {
@@ -1938,8 +1976,8 @@ function rn(e) {
 		async cleanup(t) {
 			let n = 0;
 			for (;;) {
-				let r = await e.delete(F).where(y`rowid IN (SELECT rowid FROM ${F} WHERE ${F.expires_at} < ${t} LIMIT ${tn})`).returning({ code_id: F.code_id });
-				if (n += r.length, r.length < tn) break;
+				let r = await e.delete(F).where(y`rowid IN (SELECT rowid FROM ${F} WHERE ${F.expires_at} < ${t} LIMIT ${nn})`).returning({ code_id: F.code_id });
+				if (n += r.length, r.length < nn) break;
 			}
 			return n;
 		}
@@ -1947,10 +1985,10 @@ function rn(e) {
 }
 //#endregion
 //#region src/adapters/connections.ts
-function an() {
+function on() {
 	return `con_${ee("0123456789abcdefghijklmnopqrstuvwxyz", 17)()}`;
 }
-function on(e) {
+function sn(e) {
 	let { tenant_id: t, is_system: n, options: r, metadata: i, ...a } = e;
 	return D({
 		...a,
@@ -1959,11 +1997,11 @@ function on(e) {
 		is_system: n ? !0 : void 0
 	});
 }
-function sn(e) {
+function cn(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
-				id: n.id || an(),
+				id: n.id || on(),
 				...n,
 				tenant_id: t,
 				options: JSON.stringify(n.options || {}),
@@ -1977,28 +2015,28 @@ function sn(e) {
 			} catch (e) {
 				throw e?.message?.includes("UNIQUE constraint failed") || e?.message?.includes("duplicate key") ? new Re(409, { message: "Connection already exists" }) : e;
 			}
-			return on(i);
+			return sn(i);
 		},
 		async get(n, r) {
 			let i = await e.select().from(z).where(t(a(z.tenant_id, n), a(z.id, r))).get();
-			return i ? on(i) : null;
+			return i ? sn(i) : null;
 		},
 		async update(n, r, i) {
 			let o = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
-			return i.name !== void 0 && (o.name = i.name), i.strategy !== void 0 && (o.strategy = i.strategy), i.options !== void 0 && (o.options = JSON.stringify(i.options)), i.metadata !== void 0 && (o.metadata = JSON.stringify(i.metadata)), i.display_name !== void 0 && (o.display_name = i.display_name), i.response_type !== void 0 && (o.response_type = i.response_type), i.response_mode !== void 0 && (o.response_mode = i.response_mode), await e.update(z).set(o).where(t(a(z.tenant_id, n), a(z.id, r))), !0;
+			return i.name !== void 0 && (o.name = i.name), i.strategy !== void 0 && (o.strategy = i.strategy), i.options !== void 0 && (o.options = JSON.stringify(i.options)), i.metadata !== void 0 && (o.metadata = JSON.stringify(i.metadata)), i.display_name !== void 0 && (o.display_name = i.display_name), i.response_type !== void 0 && (o.response_type = i.response_type), i.response_mode !== void 0 && (o.response_mode = i.response_mode), i.scope !== void 0 && (o.scope = i.scope), i.override !== void 0 && (o.override = i.override), i.enforce !== void 0 && (o.enforce = i.enforce), await e.update(z).set(o).where(t(a(z.tenant_id, n), a(z.id, r))), !0;
 		},
 		async list(o, s) {
 			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = a(z.tenant_id, o);
 			if (f) {
-				let e = Ct(z, f, ["name"]);
+				let e = wt(z, f, ["name"]);
 				e && (p = t(p, e));
 			}
-			if (wt(s)) {
+			if (Tt(s)) {
 				let n = {
 					sortColumn: z.created_at,
 					idColumn: z.id,
 					sortOrder: "desc"
-				}, r = Et(s, n), i = Z(s), { rows: a, next: o } = Dt(await e.select().from(z).where(r ? t(p, r) : p).orderBy(...Tt(n)).limit(i + 1), i, "created_at", "id"), c = a.map(on);
+				}, r = Dt(s, n), i = Z(s), { rows: a, next: o } = Ot(await e.select().from(z).where(r ? t(p, r) : p).orderBy(...Et(n)).limit(i + 1), i, "created_at", "id"), c = a.map(sn);
 				return {
 					connections: c,
 					start: 0,
@@ -2012,7 +2050,7 @@ function sn(e) {
 				let e = z[d.sort_by];
 				e && (m = m.orderBy(d.sort_order === "desc" ? i(e) : n(e)));
 			}
-			let h = (await m.offset(c * l).limit(l)).map(on);
+			let h = (await m.offset(c * l).limit(l)).map(sn);
 			if (!u) return { connections: h };
 			let [g] = await e.select({ count: r() }).from(z).where(p);
 			return {
@@ -2029,7 +2067,7 @@ function sn(e) {
 }
 //#endregion
 //#region src/adapters/customDomains.ts
-function cn(e) {
+function ln(e) {
 	let { tenant_id: t, domain_metadata: n, verification: r, ...i } = e;
 	return D({
 		...i,
@@ -2038,7 +2076,7 @@ function cn(e) {
 		verification: X(r)
 	});
 }
-function ln(e) {
+function un(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
@@ -2056,40 +2094,40 @@ function ln(e) {
 				created_at: r,
 				updated_at: r
 			};
-			return await e.insert(Je).values(i), cn({
+			return await e.insert(Ye).values(i), ln({
 				...i,
 				tenant_id: t
 			});
 		},
 		async get(n, r) {
-			let i = await e.select().from(Je).where(t(a(Je.tenant_id, n), a(Je.custom_domain_id, r))).get();
-			return i ? cn(i) : null;
+			let i = await e.select().from(Ye).where(t(a(Ye.tenant_id, n), a(Ye.custom_domain_id, r))).get();
+			return i ? ln(i) : null;
 		},
 		async getByDomain(t) {
-			let n = await e.select().from(Je).where(a(Je.domain, t)).get();
+			let n = await e.select().from(Ye).where(a(Ye.domain, t)).get();
 			return n ? {
-				...cn(n),
+				...ln(n),
 				tenant_id: n.tenant_id
 			} : null;
 		},
 		async list(t) {
-			return (await e.select().from(Je).where(a(Je.tenant_id, t)).all()).map(cn);
+			return (await e.select().from(Ye).where(a(Ye.tenant_id, t)).all()).map(ln);
 		},
 		async update(n, r, i) {
 			let o = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
-			return i.domain !== void 0 && (o.domain = i.domain), i.primary !== void 0 && (o.primary = i.primary), i.status !== void 0 && (o.status = i.status), i.type !== void 0 && (o.type = i.type), i.origin_domain_name !== void 0 && (o.origin_domain_name = i.origin_domain_name), i.verification !== void 0 && (o.verification = JSON.stringify(i.verification)), i.custom_client_ip_header !== void 0 && (o.custom_client_ip_header = i.custom_client_ip_header), i.tls_policy !== void 0 && (o.tls_policy = i.tls_policy), i.domain_metadata !== void 0 && (o.domain_metadata = JSON.stringify(i.domain_metadata)), (await e.update(Je).set(o).where(t(a(Je.tenant_id, n), a(Je.custom_domain_id, r))).returning()).length > 0;
+			return i.domain !== void 0 && (o.domain = i.domain), i.primary !== void 0 && (o.primary = i.primary), i.status !== void 0 && (o.status = i.status), i.type !== void 0 && (o.type = i.type), i.origin_domain_name !== void 0 && (o.origin_domain_name = i.origin_domain_name), i.verification !== void 0 && (o.verification = JSON.stringify(i.verification)), i.custom_client_ip_header !== void 0 && (o.custom_client_ip_header = i.custom_client_ip_header), i.tls_policy !== void 0 && (o.tls_policy = i.tls_policy), i.domain_metadata !== void 0 && (o.domain_metadata = JSON.stringify(i.domain_metadata)), (await e.update(Ye).set(o).where(t(a(Ye.tenant_id, n), a(Ye.custom_domain_id, r))).returning()).length > 0;
 		},
 		async remove(n, r) {
-			return (await e.delete(Je).where(t(a(Je.tenant_id, n), a(Je.custom_domain_id, r))).returning()).length > 0;
+			return (await e.delete(Ye).where(t(a(Ye.tenant_id, n), a(Ye.custom_domain_id, r))).returning()).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/customText.ts
-function un(e) {
+function dn(e) {
 	return {
 		async get(n, r, i) {
-			let o = await e.select().from(ut).where(t(a(ut.tenant_id, n), a(ut.prompt, r), a(ut.language, i))).get();
+			let o = await e.select().from(dt).where(t(a(dt.tenant_id, n), a(dt.prompt, r), a(dt.language, i))).get();
 			if (!o) return null;
 			try {
 				return JSON.parse(o.custom_text);
@@ -2099,7 +2137,7 @@ function un(e) {
 		},
 		async set(t, n, r, i) {
 			let a = Date.now(), o = JSON.stringify(i);
-			await e.insert(ut).values({
+			await e.insert(dt).values({
 				tenant_id: t,
 				prompt: n,
 				language: r,
@@ -2108,9 +2146,9 @@ function un(e) {
 				updated_at_ts: a
 			}).onConflictDoUpdate({
 				target: [
-					ut.tenant_id,
-					ut.prompt,
-					ut.language
+					dt.tenant_id,
+					dt.prompt,
+					dt.language
 				],
 				set: {
 					custom_text: o,
@@ -2119,27 +2157,30 @@ function un(e) {
 			});
 		},
 		async delete(n, r, i) {
-			await e.delete(ut).where(t(a(ut.tenant_id, n), a(ut.prompt, r), a(ut.language, i)));
+			await e.delete(dt).where(t(a(dt.tenant_id, n), a(dt.prompt, r), a(dt.language, i)));
 		},
 		async list(t) {
 			return await e.select({
-				prompt: ut.prompt,
-				language: ut.language
-			}).from(ut).where(a(ut.tenant_id, t)).all();
+				prompt: dt.prompt,
+				language: dt.language
+			}).from(dt).where(a(dt.tenant_id, t)).all();
 		}
 	};
 }
 //#endregion
 //#region src/adapters/emailProviders.ts
-function dn(e) {
+function fn(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
-			await e.insert(at).values({
+			await e.insert(ot).values({
 				tenant_id: t,
 				name: n.name,
 				enabled: n.enabled,
 				default_from_address: n.default_from_address,
+				scope: n.scope,
+				override: n.override,
+				enforce: n.enforce,
 				credentials: JSON.stringify(n.credentials || {}),
 				settings: JSON.stringify(n.settings || {}),
 				created_at: r,
@@ -2147,7 +2188,7 @@ function dn(e) {
 			});
 		},
 		async get(t) {
-			let n = await e.select().from(at).where(a(at.tenant_id, t)).get();
+			let n = await e.select().from(ot).where(a(ot.tenant_id, t)).get();
 			if (!n) return null;
 			let { tenant_id: r, ...i } = n;
 			return D({
@@ -2159,16 +2200,16 @@ function dn(e) {
 		},
 		async update(t, n) {
 			let r = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
-			n.name !== void 0 && (r.name = n.name), n.enabled !== void 0 && (r.enabled = n.enabled), n.default_from_address !== void 0 && (r.default_from_address = n.default_from_address), n.credentials !== void 0 && (r.credentials = JSON.stringify(n.credentials)), n.settings !== void 0 && (r.settings = JSON.stringify(n.settings)), await e.update(at).set(r).where(a(at.tenant_id, t));
+			n.name !== void 0 && (r.name = n.name), n.enabled !== void 0 && (r.enabled = n.enabled), n.default_from_address !== void 0 && (r.default_from_address = n.default_from_address), n.scope !== void 0 && (r.scope = n.scope), n.override !== void 0 && (r.override = n.override), n.enforce !== void 0 && (r.enforce = n.enforce), n.credentials !== void 0 && (r.credentials = JSON.stringify(n.credentials)), n.settings !== void 0 && (r.settings = JSON.stringify(n.settings)), await e.update(ot).set(r).where(a(ot.tenant_id, t));
 		},
 		async remove(t) {
-			await e.delete(at).where(a(at.tenant_id, t));
+			await e.delete(ot).where(a(ot.tenant_id, t));
 		}
 	};
 }
 //#endregion
 //#region src/adapters/emailTemplates.ts
-function fn(e) {
+function pn(e) {
 	return D({
 		template: e.template,
 		body: e.body,
@@ -2181,18 +2222,18 @@ function fn(e) {
 		urlLifetimeInSeconds: e.url_lifetime_in_seconds ?? void 0
 	});
 }
-function pn(e) {
+function mn(e) {
 	return {
 		async get(n, r) {
-			let i = await e.select().from(ot).where(t(a(ot.tenant_id, n), a(ot.template, r))).get();
-			return i ? fn(i) : null;
+			let i = await e.select().from(st).where(t(a(st.tenant_id, n), a(st.template, r))).get();
+			return i ? pn(i) : null;
 		},
 		async list(t) {
-			return (await e.select().from(ot).where(a(ot.tenant_id, t)).all()).map(fn);
+			return (await e.select().from(st).where(a(st.tenant_id, t)).all()).map(pn);
 		},
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
-			return await e.insert(ot).values({
+			return await e.insert(st).values({
 				tenant_id: t,
 				template: n.template,
 				body: n.body,
@@ -2210,30 +2251,30 @@ function pn(e) {
 		async update(n, r, i) {
 			let o = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
 			i.body !== void 0 && (o.body = i.body), i.from !== void 0 && (o.from = i.from), i.subject !== void 0 && (o.subject = i.subject), i.syntax !== void 0 && (o.syntax = i.syntax), i.resultUrl !== void 0 && (o.result_url = i.resultUrl), i.urlLifetimeInSeconds !== void 0 && (o.url_lifetime_in_seconds = i.urlLifetimeInSeconds), i.includeEmailInRedirect !== void 0 && (o.include_email_in_redirect = i.includeEmailInRedirect), i.enabled !== void 0 && (o.enabled = i.enabled);
-			let s = await e.update(ot).set(o).where(t(a(ot.tenant_id, n), a(ot.template, r))).run();
+			let s = await e.update(st).set(o).where(t(a(st.tenant_id, n), a(st.template, r))).run();
 			return Number(s.changes ?? 0) > 0;
 		},
 		async remove(n, r) {
-			let i = await e.delete(ot).where(t(a(ot.tenant_id, n), a(ot.template, r))).run();
+			let i = await e.delete(st).where(t(a(st.tenant_id, n), a(st.template, r))).run();
 			return Number(i.changes ?? 0) > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/flows.ts
-var mn = ["id", "name"];
-function hn(e) {
+var hn = ["id", "name"];
+function gn(e) {
 	let { tenant_id: t, actions: n, ...r } = e;
 	return D({
 		...r,
 		actions: X(n, [])
 	});
 }
-function gn(e) {
+function _n(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = `af_${b()}`;
-			return await e.insert(rt).values({
+			return await e.insert(it).values({
 				id: i,
 				tenant_id: t,
 				name: n.name,
@@ -2249,7 +2290,7 @@ function gn(e) {
 			};
 		},
 		async get(n, r) {
-			let i = await e.select().from(rt).where(t(a(rt.tenant_id, n), a(rt.id, r))).get();
+			let i = await e.select().from(it).where(t(a(it.tenant_id, n), a(it.id, r))).get();
 			if (!i) return null;
 			let { tenant_id: o, actions: s, ...c } = i;
 			return D({
@@ -2259,24 +2300,24 @@ function gn(e) {
 		},
 		async update(n, r, i) {
 			let o = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
-			return i.name !== void 0 && (o.name = i.name), i.actions !== void 0 && (o.actions = JSON.stringify(i.actions)), (await e.update(rt).set(o).where(t(a(rt.tenant_id, n), a(rt.id, r))).returning()).length === 0 ? null : this.get(n, r);
+			return i.name !== void 0 && (o.name = i.name), i.actions !== void 0 && (o.actions = JSON.stringify(i.actions)), (await e.update(it).set(o).where(t(a(it.tenant_id, n), a(it.id, r))).returning()).length === 0 ? null : this.get(n, r);
 		},
 		async list(o, s) {
-			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = [a(rt.tenant_id, o)];
+			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = [a(it.tenant_id, o)];
 			if (f) {
-				let e = Ee(f, mn);
+				let e = Ee(f, hn);
 				if (e) {
-					let t = Ct(rt, e, []);
+					let t = wt(it, e, []);
 					t && p.push(t);
 				}
 			}
 			let m = t(...p);
-			if (wt(s)) {
+			if (Tt(s)) {
 				let n = {
-					sortColumn: rt.created_at,
-					idColumn: rt.id,
+					sortColumn: it.created_at,
+					idColumn: it.id,
 					sortOrder: "desc"
-				}, r = Z(s), i = Et(s, n), { rows: a, next: o } = Dt(await e.select().from(rt).where(i ? t(m, i) : m).orderBy(...Tt(n)).limit(r + 1), r, "created_at", "id"), c = a.map(hn);
+				}, r = Z(s), i = Dt(s, n), { rows: a, next: o } = Ot(await e.select().from(it).where(i ? t(m, i) : m).orderBy(...Et(n)).limit(r + 1), r, "created_at", "id"), c = a.map(gn);
 				return {
 					flows: c,
 					start: 0,
@@ -2285,14 +2326,14 @@ function gn(e) {
 					next: o
 				};
 			}
-			let h = e.select().from(rt).where(m).$dynamic();
+			let h = e.select().from(it).where(m).$dynamic();
 			if (d?.sort_by) {
-				let e = rt[d.sort_by];
+				let e = it[d.sort_by];
 				e && (h = h.orderBy(d.sort_order === "desc" ? i(e) : n(e)));
 			}
-			let g = (await h.offset(c * l).limit(l)).map(hn);
+			let g = (await h.offset(c * l).limit(l)).map(gn);
 			if (!u) return { flows: g };
-			let [_] = await e.select({ count: r() }).from(rt).where(m);
+			let [_] = await e.select({ count: r() }).from(it).where(m);
 			return {
 				flows: g,
 				start: c * l,
@@ -2301,23 +2342,23 @@ function gn(e) {
 			};
 		},
 		async remove(n, r) {
-			return (await e.delete(rt).where(t(a(rt.tenant_id, n), a(rt.id, r))).returning()).length > 0;
+			return (await e.delete(it).where(t(a(it.tenant_id, n), a(it.id, r))).returning()).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/forms.ts
-var _n = [
+var vn = [
 	"nodes",
 	"start",
 	"ending"
-], vn = ["name"];
-function yn(e) {
+], yn = ["name"];
+function bn(e) {
 	let { tenant_id: t, ...n } = e, r = { ...n };
-	for (let e of _n) r[e] = X(n[e]);
+	for (let e of vn) r[e] = X(n[e]);
 	return D(r);
 }
-function bn(e) {
+function xn(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = b(), a = {
@@ -2331,8 +2372,8 @@ function bn(e) {
 				created_at: r,
 				updated_at: r
 			};
-			for (let e of _n) a[e] = JSON.stringify(n[e] || (e === "nodes" ? [] : {}));
-			return await e.insert(nt).values(a), {
+			for (let e of vn) a[e] = JSON.stringify(n[e] || (e === "nodes" ? [] : {}));
+			return await e.insert(rt).values(a), {
 				id: i,
 				...n,
 				created_at: r,
@@ -2340,33 +2381,33 @@ function bn(e) {
 			};
 		},
 		async get(n, r) {
-			let i = await e.select().from(nt).where(t(a(nt.tenant_id, n), a(nt.id, r))).get();
+			let i = await e.select().from(rt).where(t(a(rt.tenant_id, n), a(rt.id, r))).get();
 			if (!i) return null;
 			let { tenant_id: o, ...s } = i, c = { ...s };
-			for (let e of _n) c[e] = X(s[e]);
+			for (let e of vn) c[e] = X(s[e]);
 			return D(c);
 		},
 		async update(n, r, i) {
 			let o = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
-			for (let [e, t] of Object.entries(i)) t !== void 0 && (_n.includes(e) ? o[e] = JSON.stringify(t) : o[e] = t);
-			return (await e.update(nt).set(o).where(t(a(nt.tenant_id, n), a(nt.id, r))).returning()).length > 0;
+			for (let [e, t] of Object.entries(i)) t !== void 0 && (vn.includes(e) ? o[e] = JSON.stringify(t) : o[e] = t);
+			return (await e.update(rt).set(o).where(t(a(rt.tenant_id, n), a(rt.id, r))).returning()).length > 0;
 		},
 		async list(o, s) {
-			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = [a(nt.tenant_id, o)];
+			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = [a(rt.tenant_id, o)];
 			if (f) {
-				let e = Ee(f, vn);
+				let e = Ee(f, yn);
 				if (e) {
-					let t = Ct(nt, e, vn);
+					let t = wt(rt, e, yn);
 					t && p.push(t);
 				}
 			}
 			let m = t(...p);
-			if (wt(s)) {
+			if (Tt(s)) {
 				let n = {
-					sortColumn: nt.created_at,
-					idColumn: nt.id,
+					sortColumn: rt.created_at,
+					idColumn: rt.id,
 					sortOrder: "desc"
-				}, r = Z(s), i = Et(s, n), { rows: a, next: o } = Dt(await e.select().from(nt).where(i ? t(m, i) : m).orderBy(...Tt(n)).limit(r + 1), r, "created_at", "id"), c = a.map(yn);
+				}, r = Z(s), i = Dt(s, n), { rows: a, next: o } = Ot(await e.select().from(rt).where(i ? t(m, i) : m).orderBy(...Et(n)).limit(r + 1), r, "created_at", "id"), c = a.map(bn);
 				return {
 					forms: c,
 					start: 0,
@@ -2375,14 +2416,14 @@ function bn(e) {
 					next: o
 				};
 			}
-			let h = e.select().from(nt).where(m).$dynamic();
+			let h = e.select().from(rt).where(m).$dynamic();
 			if (d?.sort_by) {
-				let e = nt[d.sort_by];
+				let e = rt[d.sort_by];
 				e && (h = h.orderBy(d.sort_order === "desc" ? i(e) : n(e)));
 			}
-			let g = (await h.offset(c * l).limit(l)).map(yn);
+			let g = (await h.offset(c * l).limit(l)).map(bn);
 			if (!u) return { forms: g };
-			let [_] = await e.select({ count: r() }).from(nt).where(m);
+			let [_] = await e.select({ count: r() }).from(rt).where(m);
 			return {
 				forms: g,
 				start: c * l,
@@ -2391,13 +2432,13 @@ function bn(e) {
 			};
 		},
 		async remove(n, r) {
-			return (await e.delete(nt).where(t(a(nt.tenant_id, n), a(nt.id, r))).returning()).length > 0;
+			return (await e.delete(rt).where(t(a(rt.tenant_id, n), a(rt.id, r))).returning()).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/grants.ts
-function xn(e) {
+function Sn(e) {
 	return {
 		id: e.id,
 		user_id: e.user_id,
@@ -2406,17 +2447,17 @@ function xn(e) {
 		scope: X(e.scope, []) ?? []
 	};
 }
-var Sn = {
+var Cn = {
 	user_id: R.user_id,
 	client_id: R.client_id,
 	audience: R.audience,
 	created_at: R.created_at,
 	updated_at: R.updated_at
 };
-function Cn(e) {
-	return Object.hasOwn(Sn, e) ? Sn[e] : void 0;
-}
 function wn(e) {
+	return Object.hasOwn(Cn, e) ? Cn[e] : void 0;
+}
+function Tn(e) {
 	return {
 		async create(n, r) {
 			let i = (/* @__PURE__ */ new Date()).toISOString(), o = r.scope ?? [], s = r.audience ?? "", c = await e.select().from(R).where(t(a(R.tenant_id, n), a(R.user_id, r.user_id), a(R.client_id, r.clientID), a(R.audience, s))).get();
@@ -2425,7 +2466,7 @@ function wn(e) {
 				return await e.update(R).set({
 					scope: JSON.stringify(s),
 					updated_at: i
-				}).where(t(a(R.tenant_id, n), a(R.id, c.id))), xn({
+				}).where(t(a(R.tenant_id, n), a(R.id, c.id))), Sn({
 					...c,
 					scope: JSON.stringify(s)
 				});
@@ -2450,20 +2491,20 @@ function wn(e) {
 		},
 		async get(n, r, i, o) {
 			let s = await e.select().from(R).where(t(a(R.tenant_id, n), a(R.user_id, r), a(R.client_id, i), a(R.audience, o ?? ""))).get();
-			return s ? xn(s) : null;
+			return s ? Sn(s) : null;
 		},
 		async list(o, s) {
-			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = f ? Ct(R, f, [
+			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = f ? wt(R, f, [
 				"user_id",
 				"client_id",
 				"audience"
 			]) : void 0, m = p ? t(a(R.tenant_id, o), p) : a(R.tenant_id, o);
-			if (wt(s)) {
+			if (Tt(s)) {
 				let n = {
 					sortColumn: R.created_at,
 					idColumn: R.id,
 					sortOrder: "desc"
-				}, r = Z(s), i = Et(s, n), { rows: a, next: o } = Dt(await e.select().from(R).where(i ? t(m, i) : m).orderBy(...Tt(n)).limit(r + 1), r, "created_at", "id"), c = a.map(xn);
+				}, r = Z(s), i = Dt(s, n), { rows: a, next: o } = Ot(await e.select().from(R).where(i ? t(m, i) : m).orderBy(...Et(n)).limit(r + 1), r, "created_at", "id"), c = a.map(Sn);
 				return {
 					grants: c,
 					start: 0,
@@ -2472,9 +2513,9 @@ function wn(e) {
 					next: o
 				};
 			}
-			let h = e.select().from(R).where(m).$dynamic(), g = d?.sort_by ? Cn(d.sort_by) : void 0;
+			let h = e.select().from(R).where(m).$dynamic(), g = d?.sort_by ? wn(d.sort_by) : void 0;
 			h = g ? h.orderBy(d?.sort_order === "desc" ? i(g) : n(g)) : h.orderBy(n(R.created_at));
-			let _ = (await h.offset(c * l).limit(l)).map(xn);
+			let _ = (await h.offset(c * l).limit(l)).map(Sn);
 			if (!u) return {
 				grants: _,
 				start: 0,
@@ -2499,11 +2540,11 @@ function wn(e) {
 }
 //#endregion
 //#region src/adapters/hookCode.ts
-var Tn = ee("0123456789abcdefghijklmnopqrstuvwxyz", 17);
-function En() {
-	return `hc_${Tn()}`;
+var En = ee("0123456789abcdefghijklmnopqrstuvwxyz", 17);
+function Dn() {
+	return `hc_${En()}`;
 }
-function Dn(e) {
+function On(e) {
 	let { created_at_ts: t, updated_at_ts: n, secrets: r, ...i } = e, a = ae({
 		created_at_ts: t,
 		updated_at_ts: n
@@ -2514,41 +2555,41 @@ function Dn(e) {
 		secrets: r ? JSON.parse(r) : void 0
 	};
 }
-function On(e) {
+function kn(e) {
 	return {
-		async create(t, n) {
-			let r = Date.now(), i = {
-				id: En(),
+		async create(t, n, r) {
+			let i = Date.now(), a = {
+				id: r?.importMetadata?.id ?? Dn(),
 				tenant_id: t,
 				code: n.code,
 				secrets: n.secrets ? JSON.stringify(n.secrets) : null,
-				created_at_ts: r,
-				updated_at_ts: r
+				created_at_ts: i,
+				updated_at_ts: i
 			};
-			return await e.insert(ct).values(i), Dn({
-				...i,
+			return await e.insert(lt).values(a), On({
+				...a,
 				tenant_id: t
 			});
 		},
 		async get(n, r) {
-			let i = await e.select().from(ct).where(t(a(ct.tenant_id, n), a(ct.id, r))).get();
-			return i ? Dn(i) : null;
+			let i = await e.select().from(lt).where(t(a(lt.tenant_id, n), a(lt.id, r))).get();
+			return i ? On(i) : null;
 		},
 		async update(n, r, i) {
 			let o = { updated_at_ts: Date.now() };
-			return i.code !== void 0 && (o.code = i.code), i.secrets !== void 0 && (o.secrets = JSON.stringify(i.secrets)), (await e.update(ct).set(o).where(t(a(ct.tenant_id, n), a(ct.id, r))).returning()).length > 0;
+			return i.code !== void 0 && (o.code = i.code), i.secrets !== void 0 && (o.secrets = JSON.stringify(i.secrets)), (await e.update(lt).set(o).where(t(a(lt.tenant_id, n), a(lt.id, r))).returning()).length > 0;
 		},
 		async remove(n, r) {
-			return (await e.delete(ct).where(t(a(ct.tenant_id, n), a(ct.id, r))).returning()).length > 0;
+			return (await e.delete(lt).where(t(a(lt.tenant_id, n), a(lt.id, r))).returning()).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/hooks.ts
-function kn() {
+function An() {
 	return `h_${ee("0123456789abcdefghijklmnopqrstuvwxyz", 17)()}`;
 }
-function An(e) {
+function jn(e) {
 	if (!(typeof e != "string" || !e)) try {
 		let t = JSON.parse(e);
 		return t && typeof t == "object" && !Array.isArray(t) ? t : void 0;
@@ -2556,7 +2597,7 @@ function An(e) {
 		return;
 	}
 }
-function jn(e) {
+function Mn(e) {
 	let { tenant_id: t, created_at_ts: n, updated_at_ts: r, metadata: i, ...a } = e, o = ae({
 		created_at_ts: n,
 		updated_at_ts: r
@@ -2565,15 +2606,15 @@ function jn(e) {
 		...a,
 		enabled: !!a.enabled,
 		synchronous: !!a.synchronous,
-		metadata: An(i),
+		metadata: jn(i),
 		...o
 	});
 }
-function Mn(e) {
+function Nn(e) {
 	return {
 		async create(t, n) {
 			let r = Date.now(), i = {
-				hook_id: n.hook_id || kn(),
+				hook_id: n.hook_id || An(),
 				tenant_id: t,
 				trigger_id: n.trigger_id,
 				url: n.url,
@@ -2585,36 +2626,39 @@ function Mn(e) {
 				code_id: n.code_id,
 				page_id: n.page_id,
 				permission_required: n.permission_required,
+				scope: n.scope,
+				override: n.override,
+				enforce: n.enforce,
 				metadata: n.metadata ? JSON.stringify(n.metadata) : null,
 				created_at_ts: r,
 				updated_at_ts: r
 			};
-			return await e.insert(st).values(i), jn({
+			return await e.insert(ct).values(i), Mn({
 				...i,
 				tenant_id: t
 			});
 		},
 		async get(n, r) {
-			let i = await e.select().from(st).where(t(a(st.tenant_id, n), a(st.hook_id, r))).get();
-			return i ? jn(i) : null;
+			let i = await e.select().from(ct).where(t(a(ct.tenant_id, n), a(ct.hook_id, r))).get();
+			return i ? Mn(i) : null;
 		},
 		async update(n, r, i) {
 			let o = { updated_at_ts: Date.now() };
-			return i.trigger_id !== void 0 && (o.trigger_id = i.trigger_id), i.url !== void 0 && (o.url = i.url), i.enabled !== void 0 && (o.enabled = i.enabled), i.synchronous !== void 0 && (o.synchronous = i.synchronous), i.priority !== void 0 && (o.priority = i.priority), i.form_id !== void 0 && (o.form_id = i.form_id), i.template_id !== void 0 && (o.template_id = i.template_id), i.code_id !== void 0 && (o.code_id = i.code_id), i.page_id !== void 0 && (o.page_id = i.page_id), i.permission_required !== void 0 && (o.permission_required = i.permission_required), i.metadata !== void 0 && (o.metadata = i.metadata === null ? null : JSON.stringify(i.metadata)), (await e.update(st).set(o).where(t(a(st.tenant_id, n), a(st.hook_id, r))).returning()).length > 0;
+			return i.trigger_id !== void 0 && (o.trigger_id = i.trigger_id), i.url !== void 0 && (o.url = i.url), i.enabled !== void 0 && (o.enabled = i.enabled), i.synchronous !== void 0 && (o.synchronous = i.synchronous), i.priority !== void 0 && (o.priority = i.priority), i.form_id !== void 0 && (o.form_id = i.form_id), i.template_id !== void 0 && (o.template_id = i.template_id), i.code_id !== void 0 && (o.code_id = i.code_id), i.page_id !== void 0 && (o.page_id = i.page_id), i.permission_required !== void 0 && (o.permission_required = i.permission_required), i.scope !== void 0 && (o.scope = i.scope), i.override !== void 0 && (o.override = i.override), i.enforce !== void 0 && (o.enforce = i.enforce), i.metadata !== void 0 && (o.metadata = i.metadata === null ? null : JSON.stringify(i.metadata)), (await e.update(ct).set(o).where(t(a(ct.tenant_id, n), a(ct.hook_id, r))).returning()).length > 0;
 		},
 		async list(o, s) {
-			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = f ? Ct(st, f, [
+			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = f ? wt(ct, f, [
 				"url",
 				"form_id",
 				"template_id",
 				"code_id"
-			]) : void 0, m = p ? t(a(st.tenant_id, o), p) : a(st.tenant_id, o);
-			if (wt(s)) {
+			]) : void 0, m = p ? t(a(ct.tenant_id, o), p) : a(ct.tenant_id, o);
+			if (Tt(s)) {
 				let n = {
-					sortColumn: st.created_at_ts,
-					idColumn: st.hook_id,
+					sortColumn: ct.created_at_ts,
+					idColumn: ct.hook_id,
 					sortOrder: "desc"
-				}, r = Z(s), i = Et(s, n), { rows: a, next: o } = Dt(await e.select().from(st).where(i ? t(m, i) : m).orderBy(...Tt(n)).limit(r + 1), r, "created_at_ts", "hook_id"), c = a.map(jn);
+				}, r = Z(s), i = Dt(s, n), { rows: a, next: o } = Ot(await e.select().from(ct).where(i ? t(m, i) : m).orderBy(...Et(n)).limit(r + 1), r, "created_at_ts", "hook_id"), c = a.map(Mn);
 				return {
 					hooks: c,
 					start: 0,
@@ -2623,11 +2667,11 @@ function Mn(e) {
 					next: o
 				};
 			}
-			let h = e.select().from(st).where(m).$dynamic(), g = d?.sort_by ? st[d.sort_by] : void 0;
-			h = g ? h.orderBy(d?.sort_order === "desc" ? i(g) : n(g)) : h.orderBy(i(st.priority), n(st.created_at_ts));
-			let _ = (await h.offset(c * l).limit(l)).map(jn);
+			let h = e.select().from(ct).where(m).$dynamic(), g = d?.sort_by ? ct[d.sort_by] : void 0;
+			h = g ? h.orderBy(d?.sort_order === "desc" ? i(g) : n(g)) : h.orderBy(i(ct.priority), n(ct.created_at_ts));
+			let _ = (await h.offset(c * l).limit(l)).map(Mn);
 			if (!u) return { hooks: _ };
-			let [v] = await e.select({ count: r() }).from(st).where(m);
+			let [v] = await e.select({ count: r() }).from(ct).where(m);
 			return {
 				hooks: _,
 				start: c * l,
@@ -2636,31 +2680,31 @@ function Mn(e) {
 			};
 		},
 		async remove(n, r) {
-			return (await e.delete(st).where(t(a(st.tenant_id, n), a(st.hook_id, r))).returning()).length > 0;
+			return (await e.delete(ct).where(t(a(ct.tenant_id, n), a(ct.hook_id, r))).returning()).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/invites.ts
-function Nn() {
+function Pn() {
 	return `inv_${ee("0123456789abcdefghijklmnopqrstuvwxyz", 17)()}`;
 }
-var Pn = [
+var Fn = [
 	"inviter",
 	"invitee",
 	"app_metadata",
 	"user_metadata",
 	"roles"
 ];
-function Fn(e) {
+function In(e) {
 	let { tenant_id: t, send_invitation_email: n, ...r } = e, i = { ...r };
-	for (let e of Pn) i[e] = X(r[e], e === "roles" ? [] : {});
+	for (let e of Fn) i[e] = X(r[e], e === "roles" ? [] : {});
 	return i.send_invitation_email = !!n, D(i);
 }
-function In(e) {
+function Ln(e) {
 	return {
 		async create(t, n) {
-			let r = n.id || Nn(), i = n.ttl_sec || 604800, a = /* @__PURE__ */ new Date(), o = new Date(a.getTime() + i * 1e3).toISOString(), s = {
+			let r = n.id || Pn(), i = n.ttl_sec || 604800, a = /* @__PURE__ */ new Date(), o = new Date(a.getTime() + i * 1e3).toISOString(), s = {
 				id: r,
 				tenant_id: t,
 				organization_id: n.organization_id,
@@ -2673,34 +2717,34 @@ function In(e) {
 				created_at: a.toISOString(),
 				expires_at: o
 			};
-			for (let e of Pn) n[e] !== void 0 && (s[e] = JSON.stringify(n[e]));
+			for (let e of Fn) n[e] !== void 0 && (s[e] = JSON.stringify(n[e]));
 			try {
-				await e.insert(Xe).values(s);
+				await e.insert(Ze).values(s);
 			} catch (e) {
 				throw e?.message?.includes("UNIQUE constraint failed") || e?.message?.includes("duplicate key") ? new Re(409, { message: "Invite already exists" }) : e;
 			}
-			return Fn({
+			return In({
 				...s,
 				tenant_id: t
 			});
 		},
 		async get(n, r) {
-			let i = await e.select().from(Xe).where(t(a(Xe.tenant_id, n), a(Xe.id, r))).get();
-			return i ? Fn(i) : null;
+			let i = await e.select().from(Ze).where(t(a(Ze.tenant_id, n), a(Ze.id, r))).get();
+			return i ? In(i) : null;
 		},
 		async update(n, r, i) {
 			let o = {};
-			for (let e of Pn) i[e] !== void 0 && (o[e] = JSON.stringify(i[e]));
-			return i.connection_id !== void 0 && (o.connection_id = i.connection_id), i.ttl_sec !== void 0 && (o.ttl_sec = i.ttl_sec, o.expires_at = new Date(Date.now() + i.ttl_sec * 1e3).toISOString()), (await e.update(Xe).set(o).where(t(a(Xe.tenant_id, n), a(Xe.id, r))).returning()).length > 0;
+			for (let e of Fn) i[e] !== void 0 && (o[e] = JSON.stringify(i[e]));
+			return i.connection_id !== void 0 && (o.connection_id = i.connection_id), i.ttl_sec !== void 0 && (o.ttl_sec = i.ttl_sec, o.expires_at = new Date(Date.now() + i.ttl_sec * 1e3).toISOString()), (await e.update(Ze).set(o).where(t(a(Ze.tenant_id, n), a(Ze.id, r))).returning()).length > 0;
 		},
 		async list(o, s) {
 			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d } = s || {};
-			if (wt(s)) {
+			if (Tt(s)) {
 				let n = {
-					sortColumn: Xe.created_at,
-					idColumn: Xe.id,
+					sortColumn: Ze.created_at,
+					idColumn: Ze.id,
 					sortOrder: "desc"
-				}, r = Z(s), i = s?.q ? Ct(Xe, s.q, ["invitee", "inviter"]) : void 0, { rows: c, next: l } = Dt(await e.select().from(Xe).where(t(a(Xe.tenant_id, o), i, Et(s, n))).orderBy(...Tt(n)).limit(r + 1), r, "created_at"), u = c.map(Fn);
+				}, r = Z(s), i = s?.q ? wt(Ze, s.q, ["invitee", "inviter"]) : void 0, { rows: c, next: l } = Ot(await e.select().from(Ze).where(t(a(Ze.tenant_id, o), i, Dt(s, n))).orderBy(...Et(n)).limit(r + 1), r, "created_at"), u = c.map(In);
 				return {
 					invites: u,
 					start: 0,
@@ -2709,14 +2753,14 @@ function In(e) {
 					next: l
 				};
 			}
-			let f = e.select().from(Xe).where(a(Xe.tenant_id, o)).$dynamic();
+			let f = e.select().from(Ze).where(a(Ze.tenant_id, o)).$dynamic();
 			if (d?.sort_by) {
-				let e = Xe[d.sort_by];
+				let e = Ze[d.sort_by];
 				e && (f = f.orderBy(d.sort_order === "desc" ? i(e) : n(e)));
 			}
-			let p = (await f.offset(c * l).limit(l)).map(Fn);
+			let p = (await f.offset(c * l).limit(l)).map(In);
 			if (!u) return { invites: p };
-			let [m] = await e.select({ count: r() }).from(Xe).where(a(Xe.tenant_id, o));
+			let [m] = await e.select({ count: r() }).from(Ze).where(a(Ze.tenant_id, o));
 			return {
 				invites: p,
 				start: c * l,
@@ -2725,39 +2769,39 @@ function In(e) {
 			};
 		},
 		async remove(n, r) {
-			return (await e.delete(Xe).where(t(a(Xe.tenant_id, n), a(Xe.id, r))).returning()).length > 0;
+			return (await e.delete(Ze).where(t(a(Ze.tenant_id, n), a(Ze.id, r))).returning()).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/keys.ts
-var Ln = [
+var Rn = [
 	"kid",
 	"connection",
 	"fingerprint",
 	"thumbprint",
 	"type"
 ];
-function Rn(e) {
+function zn(e) {
 	return {
 		async create(t) {
-			await e.insert(lt).values({
+			await e.insert(ut).values({
 				...t,
 				created_at: (/* @__PURE__ */ new Date()).toDateString()
 			});
 		},
 		async list(a) {
-			let { page: o = 0, per_page: c = 50, include_totals: l = !1, sort: u, q: d } = a || {}, p = (/* @__PURE__ */ new Date()).toISOString(), m = [v(s(lt.revoked_at, p), f(lt.revoked_at))];
+			let { page: o = 0, per_page: c = 50, include_totals: l = !1, sort: u, q: d } = a || {}, p = (/* @__PURE__ */ new Date()).toISOString(), m = [v(s(ut.revoked_at, p), f(ut.revoked_at))];
 			if (d) {
-				let e = Ee(d, Ln);
+				let e = Ee(d, Rn);
 				if (e) {
-					let t = Ct(lt, e, Ln);
+					let t = wt(ut, e, Rn);
 					t && m.push(t);
 				}
 			}
-			let h = t(...m), g = e.select().from(lt).where(h).$dynamic();
+			let h = t(...m), g = e.select().from(ut).where(h).$dynamic();
 			if (u?.sort_by) {
-				let e = lt[u.sort_by];
+				let e = ut[u.sort_by];
 				e && (g = g.orderBy(u.sort_order === "desc" ? i(e) : n(e)));
 			}
 			let _ = (await g.offset(o * c).limit(c)).map((e) => {
@@ -2765,7 +2809,7 @@ function Rn(e) {
 				return D(n);
 			});
 			if (!l) return { signingKeys: _ };
-			let [y] = await e.select({ count: r() }).from(lt).where(h);
+			let [y] = await e.select({ count: r() }).from(ut).where(h);
 			return {
 				signingKeys: _,
 				start: o * c,
@@ -2774,22 +2818,22 @@ function Rn(e) {
 			};
 		},
 		async update(t, n) {
-			return (await e.update(lt).set(n).where(a(lt.kid, t)).returning()).length > 0;
+			return (await e.update(ut).set(n).where(a(ut.kid, t)).returning()).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/loginSessions.ts
-var zn = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", Bn = 32;
-function Vn() {
+var Bn = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", Vn = 32;
+function Hn() {
 	let e = Date.now(), t = "";
-	for (let n = 10; n > 0; n--) t = zn.charAt(e % Bn) + t, e = Math.floor(e / Bn);
+	for (let n = 10; n > 0; n--) t = Bn.charAt(e % Vn) + t, e = Math.floor(e / Vn);
 	let n = new Uint8Array(16);
 	crypto.getRandomValues(n);
-	for (let e = 0; e < 16; e++) t += zn.charAt(n[e] % Bn);
+	for (let e = 0; e < 16; e++) t += Bn.charAt(n[e] % Vn);
 	return t;
 }
-function Hn(e) {
+function Un(e) {
 	let { tenant_id: t, created_at_ts: n, updated_at_ts: r, expires_at_ts: i, state_data: a, auth_params: o, ...s } = e, c = ae({
 		created_at_ts: n,
 		updated_at_ts: r,
@@ -2801,17 +2845,17 @@ function Hn(e) {
 	]), l = {};
 	for (let [e, t] of Object.entries(s)) t != null && (l[e] = t);
 	return D({
-		...bt(l, ["auth_strategy"]),
+		...xt(l, ["auth_strategy"]),
 		authParams: typeof o == "string" && o.length > 0 ? JSON.parse(o) : {},
 		...c,
 		state_data: X(a)
 	});
 }
-function Un(e) {
+function Wn(e) {
 	return {
 		async create(t, n) {
 			let r = Date.now(), i = {
-				id: Vn(),
+				id: Hn(),
 				tenant_id: t,
 				session_id: n.session_id,
 				csrf_token: n.csrf_token,
@@ -2832,14 +2876,14 @@ function Un(e) {
 				updated_at_ts: r,
 				expires_at_ts: n.expires_at ? E(n.expires_at) : r + 1e3 * 60 * 60 * 24
 			};
-			return await e.insert(P).values(i), Hn({
+			return await e.insert(P).values(i), Un({
 				...i,
 				tenant_id: t
 			});
 		},
 		async get(n, r) {
 			let i = n ? t(a(P.tenant_id, n), a(P.id, r)) : a(P.id, r), o = await e.select().from(P).where(i).get();
-			return o ? Hn(o) : null;
+			return o ? Un(o) : null;
 		},
 		async update(n, r, i) {
 			let o = { updated_at_ts: Date.now() };
@@ -2859,7 +2903,7 @@ function Un(e) {
 }
 //#endregion
 //#region src/adapters/logs.ts
-function Wn(e) {
+function Gn(e) {
 	let { tenant_id: t, isMobile: n, auth0_client: r, details: i, country_code: a, city_name: o, latitude: s, longitude: c, time_zone: l, continent_code: u, scope: d, ...f } = e, p = {
 		...f,
 		isMobile: !!n,
@@ -2876,7 +2920,7 @@ function Wn(e) {
 		continent_code: u
 	})), D(p);
 }
-function Gn(e) {
+function Kn(e) {
 	return {
 		async create(t, n) {
 			let r = {
@@ -2902,7 +2946,7 @@ function Gn(e) {
 				hostname: n.hostname,
 				session_connection: n.session_connection
 			};
-			return n.auth0_client && (r.auth0_client = JSON.stringify(n.auth0_client)), n.details && (r.details = JSON.stringify(n.details).substring(0, 8192)), n.location_info && (r.country_code = n.location_info.country_code, r.city_name = n.location_info.city_name, r.latitude = n.location_info.latitude, r.longitude = n.location_info.longitude, r.time_zone = n.location_info.time_zone, r.continent_code = n.location_info.continent_code), await e.insert(K).values(r), Wn({
+			return n.auth0_client && (r.auth0_client = JSON.stringify(n.auth0_client)), n.details && (r.details = JSON.stringify(n.details).substring(0, 8192)), n.location_info && (r.country_code = n.location_info.country_code, r.city_name = n.location_info.city_name, r.latitude = n.location_info.latitude, r.longitude = n.location_info.longitude, r.time_zone = n.location_info.time_zone, r.continent_code = n.location_info.continent_code), await e.insert(K).values(r), Gn({
 				...r,
 				tenant_id: t
 			});
@@ -2910,7 +2954,7 @@ function Gn(e) {
 		async list(o, s) {
 			let { page: l = 0, per_page: u = 50, include_totals: d = !1, sort: f, q: p, from_date: h, to_date: g } = s || {}, _ = [a(K.tenant_id, o)];
 			if (p) {
-				let e = Ct(K, p, [
+				let e = wt(K, p, [
 					"user_id",
 					"ip",
 					"type",
@@ -2920,14 +2964,14 @@ function Gn(e) {
 			}
 			typeof h == "number" && Number.isFinite(h) && _.push(c(K.date, (/* @__PURE__ */ new Date(Math.floor(h) * 1e3)).toISOString())), typeof g == "number" && Number.isFinite(g) && _.push(m(K.date, (/* @__PURE__ */ new Date((Math.floor(g) + 1) * 1e3)).toISOString()));
 			let v = t(..._);
-			if (wt(s)) {
+			if (Tt(s)) {
 				if (f?.sort_by && f.sort_by !== "date") throw new Re(400, { message: `Sorting by ${f.sort_by} is not supported with checkpoint pagination (from/take); only date is` });
 				let n = f?.sort_order === "asc" ? "asc" : "desc", r = {
 					sortColumn: K.date,
 					idColumn: K.log_id,
 					sortOrder: n,
 					sortKey: `date:${n}`
-				}, i = Et(s, r), a = Z(s), { rows: o, next: c } = Dt(await e.select().from(K).where(i ? t(v, i) : v).orderBy(...Tt(r)).limit(a + 1), a, "date", "log_id", r.sortKey), l = o.map(Wn);
+				}, i = Dt(s, r), a = Z(s), { rows: o, next: c } = Ot(await e.select().from(K).where(i ? t(v, i) : v).orderBy(...Et(r)).limit(a + 1), a, "date", "log_id", r.sortKey), l = o.map(Gn);
 				return {
 					logs: l,
 					start: 0,
@@ -2941,7 +2985,7 @@ function Gn(e) {
 				let e = K[f.sort_by];
 				e && (y = y.orderBy(f.sort_order === "desc" ? i(e) : n(e)));
 			} else y = y.orderBy(i(K.date));
-			let ee = (await y.offset(l * u).limit(u)).map(Wn);
+			let ee = (await y.offset(l * u).limit(u)).map(Gn);
 			if (!d) return { logs: ee };
 			let [b] = await e.select({ count: r() }).from(K).where(v);
 			return {
@@ -2953,22 +2997,22 @@ function Gn(e) {
 		},
 		async get(n, r) {
 			let i = await e.select().from(K).where(t(a(K.tenant_id, n), a(K.log_id, r))).get();
-			return i ? Wn(i) : null;
+			return i ? Gn(i) : null;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/authenticationMethods.ts
-var Kn = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", qn = 32;
-function Jn() {
+var qn = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", Jn = 32;
+function Yn() {
 	let e = Date.now(), t = "";
-	for (let n = 10; n > 0; n--) t = Kn.charAt(e % qn) + t, e = Math.floor(e / qn);
+	for (let n = 10; n > 0; n--) t = qn.charAt(e % Jn) + t, e = Math.floor(e / Jn);
 	let n = new Uint8Array(16);
 	crypto.getRandomValues(n);
-	for (let e = 0; e < 16; e++) t += Kn.charAt(n[e] % qn);
+	for (let e = 0; e < 16; e++) t += qn.charAt(n[e] % Jn);
 	return t;
 }
-function Yn(e) {
+function Xn(e) {
 	let { tenant_id: t, created_at_ts: n, updated_at_ts: r, credential_backed_up: i, confirmed: a, transports: o, ...s } = e;
 	return D({
 		...s,
@@ -2979,11 +3023,11 @@ function Yn(e) {
 		updated_at: oe(r)
 	});
 }
-function Xn(e) {
+function Zn(e) {
 	return {
 		async create(t, n) {
 			let r = Date.now(), i = {
-				id: n.id || Jn(),
+				id: n.id || Yn(),
 				tenant_id: t,
 				user_id: n.user_id,
 				type: n.type,
@@ -2999,41 +3043,41 @@ function Xn(e) {
 				created_at_ts: r,
 				updated_at_ts: r
 			};
-			return await e.insert(ft).values(i), Yn({
+			return await e.insert(pt).values(i), Xn({
 				...i,
 				tenant_id: t
 			});
 		},
 		async get(n, r) {
-			let i = await e.select().from(ft).where(t(a(ft.tenant_id, n), a(ft.id, r))).get();
-			return i ? Yn(i) : null;
+			let i = await e.select().from(pt).where(t(a(pt.tenant_id, n), a(pt.id, r))).get();
+			return i ? Xn(i) : null;
 		},
 		async getByCredentialId(n, r) {
-			let i = await e.select().from(ft).where(t(a(ft.tenant_id, n), a(ft.credential_id, r))).get();
-			return i ? Yn(i) : null;
+			let i = await e.select().from(pt).where(t(a(pt.tenant_id, n), a(pt.credential_id, r))).get();
+			return i ? Xn(i) : null;
 		},
 		async list(n, r) {
-			return (await e.select().from(ft).where(t(a(ft.tenant_id, n), a(ft.user_id, r))).all()).map(Yn);
+			return (await e.select().from(pt).where(t(a(pt.tenant_id, n), a(pt.user_id, r))).all()).map(Xn);
 		},
 		async update(n, r, i) {
 			let o = { updated_at_ts: Date.now() };
-			i.type !== void 0 && (o.type = i.type), i.phone_number !== void 0 && (o.phone_number = i.phone_number), i.totp_secret !== void 0 && (o.totp_secret = i.totp_secret), i.credential_id !== void 0 && (o.credential_id = i.credential_id), i.public_key !== void 0 && (o.public_key = i.public_key), i.sign_count !== void 0 && (o.sign_count = i.sign_count), i.credential_backed_up !== void 0 && (o.credential_backed_up = +!!i.credential_backed_up), i.transports !== void 0 && (o.transports = JSON.stringify(i.transports)), i.friendly_name !== void 0 && (o.friendly_name = i.friendly_name), i.confirmed !== void 0 && (o.confirmed = +!!i.confirmed), await e.update(ft).set(o).where(t(a(ft.tenant_id, n), a(ft.id, r)));
+			i.type !== void 0 && (o.type = i.type), i.phone_number !== void 0 && (o.phone_number = i.phone_number), i.totp_secret !== void 0 && (o.totp_secret = i.totp_secret), i.credential_id !== void 0 && (o.credential_id = i.credential_id), i.public_key !== void 0 && (o.public_key = i.public_key), i.sign_count !== void 0 && (o.sign_count = i.sign_count), i.credential_backed_up !== void 0 && (o.credential_backed_up = +!!i.credential_backed_up), i.transports !== void 0 && (o.transports = JSON.stringify(i.transports)), i.friendly_name !== void 0 && (o.friendly_name = i.friendly_name), i.confirmed !== void 0 && (o.confirmed = +!!i.confirmed), await e.update(pt).set(o).where(t(a(pt.tenant_id, n), a(pt.id, r)));
 			let s = await this.get(n, r);
 			if (!s) throw Error(`Authentication method ${r} not found after update`);
 			return s;
 		},
 		async remove(n, r) {
-			return (await e.delete(ft).where(t(a(ft.tenant_id, n), a(ft.id, r))).returning()).length > 0;
+			return (await e.delete(pt).where(t(a(pt.tenant_id, n), a(pt.id, r))).returning()).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/organizations.ts
-var Zn = ["name", "display_name"];
-function Qn() {
+var Qn = ["name", "display_name"];
+function $n() {
 	return `org_${ee("0123456789abcdefghijklmnopqrstuvwxyz", 17)()}`;
 }
-function $n(e) {
+function er(e) {
 	let { tenant_id: t, branding: n, metadata: r, enabled_connections: i, token_quota: a, ...o } = e;
 	return D({
 		...o,
@@ -3043,11 +3087,11 @@ function $n(e) {
 		token_quota: X(a, {})
 	});
 }
-function er(e) {
+function tr(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
-				id: n.id || Qn(),
+				id: n.id || $n(),
 				tenant_id: t,
 				name: n.name,
 				display_name: n.display_name,
@@ -3063,14 +3107,14 @@ function er(e) {
 			} catch (e) {
 				throw e?.message?.includes("UNIQUE constraint failed") || e?.message?.includes("AlreadyExists") ? new Re(409, { message: "Organization already exists" }) : e;
 			}
-			return $n({
+			return er({
 				...i,
 				tenant_id: t
 			});
 		},
 		async get(n, r) {
 			let i = await e.select().from(B).where(t(a(B.tenant_id, n), a(B.id, r))).get();
-			return i ||= await e.select().from(B).where(t(a(B.tenant_id, n), a(B.name, r))).get(), i ? $n(i) : null;
+			return i ||= await e.select().from(B).where(t(a(B.tenant_id, n), a(B.name, r))).get(), i ? er(i) : null;
 		},
 		async update(n, r, i) {
 			let o = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -3079,19 +3123,19 @@ function er(e) {
 		async list(o, s) {
 			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = [a(B.tenant_id, o)];
 			if (f) {
-				let e = Ee(f, Zn);
+				let e = Ee(f, Qn);
 				if (e) {
-					let t = Ct(B, e, Zn);
+					let t = wt(B, e, Qn);
 					t && p.push(t);
 				}
 			}
 			let m = t(...p);
-			if (wt(s)) {
+			if (Tt(s)) {
 				let n = {
 					sortColumn: B.created_at,
 					idColumn: B.id,
 					sortOrder: "desc"
-				}, r = Et(s, n), i = Z(s), { rows: a, next: o } = Dt(await e.select().from(B).where(r ? t(m, r) : m).orderBy(...Tt(n)).limit(i + 1), i, "created_at"), c = a.map($n);
+				}, r = Dt(s, n), i = Z(s), { rows: a, next: o } = Ot(await e.select().from(B).where(r ? t(m, r) : m).orderBy(...Et(n)).limit(i + 1), i, "created_at"), c = a.map(er);
 				return {
 					organizations: c,
 					start: 0,
@@ -3106,7 +3150,7 @@ function er(e) {
 				let e = B[d.sort_by];
 				e && (h = h.orderBy(d.sort_order === "desc" ? i(e) : n(e)));
 			}
-			let g = (await h.offset(c * l).limit(l)).map($n);
+			let g = (await h.offset(c * l).limit(l)).map(er);
 			if (!u) return { organizations: g };
 			let [_] = await e.select({ count: r() }).from(B).where(m);
 			return {
@@ -3123,7 +3167,7 @@ function er(e) {
 }
 //#endregion
 //#region src/adapters/organizationConnections.ts
-function tr(e, t) {
+function nr(e, t) {
 	return {
 		connection_id: e.connection_id,
 		assign_membership_on_login: !!e.assign_membership_on_login,
@@ -3137,7 +3181,7 @@ function tr(e, t) {
 		updated_at: e.updated_at
 	};
 }
-function nr(e) {
+function rr(e) {
 	async function n(n, r) {
 		let i = await e.select({
 			name: z.name,
@@ -3148,7 +3192,7 @@ function nr(e) {
 			strategy: typeof i.strategy == "string" ? i.strategy : void 0
 		};
 	}
-	let r = (e, n, r) => t(a(Ze.tenant_id, e), a(Ze.organization_id, n), a(Ze.connection_id, r));
+	let r = (e, n, r) => t(a(Qe.tenant_id, e), a(Qe.organization_id, n), a(Qe.connection_id, r));
 	return {
 		async create(t, r, i, a) {
 			let o = a?.importMetadata, s = (/* @__PURE__ */ new Date()).toISOString(), c = {
@@ -3161,43 +3205,43 @@ function nr(e) {
 				created_at: o?.created_at ?? s,
 				updated_at: o?.updated_at ?? s
 			};
-			return await e.insert(Ze).values(c), tr(c, await n(t, i.connection_id));
+			return await e.insert(Qe).values(c), nr(c, await n(t, i.connection_id));
 		},
 		async list(r, i) {
-			let o = await e.select().from(Ze).where(t(a(Ze.tenant_id, r), a(Ze.organization_id, i))).all(), s = [];
-			for (let e of o) s.push(tr(e, await n(r, e.connection_id)));
+			let o = await e.select().from(Qe).where(t(a(Qe.tenant_id, r), a(Qe.organization_id, i))).all(), s = [];
+			for (let e of o) s.push(nr(e, await n(r, e.connection_id)));
 			return s;
 		},
 		async listCheckpoint(r, i, o = {}) {
 			let s = {
-				sortColumn: Ze.connection_id,
-				idColumn: Ze.connection_id,
+				sortColumn: Qe.connection_id,
+				idColumn: Qe.connection_id,
 				sortOrder: "asc"
-			}, c = Z(o), { rows: l, next: u } = Dt(await e.select().from(Ze).where(t(a(Ze.tenant_id, r), a(Ze.organization_id, i), Et(o, s))).orderBy(...Tt(s)).limit(c + 1).all(), c, "connection_id", "connection_id"), d = [];
-			for (let e of l) d.push(tr(e, await n(r, e.connection_id)));
+			}, c = Z(o), { rows: l, next: u } = Ot(await e.select().from(Qe).where(t(a(Qe.tenant_id, r), a(Qe.organization_id, i), Dt(o, s))).orderBy(...Et(s)).limit(c + 1).all(), c, "connection_id", "connection_id"), d = [];
+			for (let e of l) d.push(nr(e, await n(r, e.connection_id)));
 			return {
 				connections: d,
 				next: u
 			};
 		},
 		async get(t, i, a) {
-			let o = await e.select().from(Ze).where(r(t, i, a)).get();
-			return o ? tr(o, await n(t, a)) : null;
+			let o = await e.select().from(Qe).where(r(t, i, a)).get();
+			return o ? nr(o, await n(t, a)) : null;
 		},
 		async update(t, i, a, o) {
 			let s = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
 			o.assign_membership_on_login !== void 0 && (s.assign_membership_on_login = +!!o.assign_membership_on_login), o.show_as_button !== void 0 && (s.show_as_button = +!!o.show_as_button), o.is_signup_enabled !== void 0 && (s.is_signup_enabled = +!!o.is_signup_enabled);
-			let c = await e.update(Ze).set(s).where(r(t, i, a)).returning();
-			return c.length === 0 ? null : tr(c[0], await n(t, a));
+			let c = await e.update(Qe).set(s).where(r(t, i, a)).returning();
+			return c.length === 0 ? null : nr(c[0], await n(t, a));
 		},
 		async remove(t, n, i) {
-			return (await e.delete(Ze).where(r(t, n, i)).returning({ id: Ze.connection_id })).length > 0;
+			return (await e.delete(Qe).where(r(t, n, i)).returning({ id: Qe.connection_id })).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/logStreams.ts
-function rr(e) {
+function ir(e) {
 	return {
 		id: e.id,
 		name: e.name,
@@ -3210,7 +3254,7 @@ function rr(e) {
 		updated_at: e.updated_at
 	};
 }
-function ir(e) {
+function ar(e) {
 	return {
 		async create(t, n, r) {
 			let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = {
@@ -3225,27 +3269,27 @@ function ir(e) {
 				created_at: i?.created_at ?? a,
 				updated_at: i?.updated_at ?? a
 			};
-			return await e.insert(gt).values(o), rr(o);
+			return await e.insert(_t).values(o), ir(o);
 		},
 		async get(n, r) {
-			let i = await e.select().from(gt).where(t(a(gt.tenant_id, n), a(gt.id, r))).get();
-			return i ? rr(i) : null;
+			let i = await e.select().from(_t).where(t(a(_t.tenant_id, n), a(_t.id, r))).get();
+			return i ? ir(i) : null;
 		},
 		async list(t) {
-			return (await e.select().from(gt).where(a(gt.tenant_id, t)).all()).map(rr);
+			return (await e.select().from(_t).where(a(_t.tenant_id, t)).all()).map(ir);
 		},
 		async update(n, r, i) {
 			let o = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
-			return i.name !== void 0 && (o.name = i.name), i.type !== void 0 && (o.type = i.type), i.status !== void 0 && (o.status = i.status), i.sink !== void 0 && (o.sink = JSON.stringify(i.sink)), i.filters !== void 0 && (o.filters = i.filters ? JSON.stringify(i.filters) : null), i.isPriority !== void 0 && (o.is_priority = +!!i.isPriority), (await e.update(gt).set(o).where(t(a(gt.tenant_id, n), a(gt.id, r))).returning({ id: gt.id })).length > 0;
+			return i.name !== void 0 && (o.name = i.name), i.type !== void 0 && (o.type = i.type), i.status !== void 0 && (o.status = i.status), i.sink !== void 0 && (o.sink = JSON.stringify(i.sink)), i.filters !== void 0 && (o.filters = i.filters ? JSON.stringify(i.filters) : null), i.isPriority !== void 0 && (o.is_priority = +!!i.isPriority), (await e.update(_t).set(o).where(t(a(_t.tenant_id, n), a(_t.id, r))).returning({ id: _t.id })).length > 0;
 		},
 		async remove(n, r) {
-			return (await e.delete(gt).where(t(a(gt.tenant_id, n), a(gt.id, r))).returning({ id: gt.id })).length > 0;
+			return (await e.delete(_t).where(t(a(_t.tenant_id, n), a(_t.id, r))).returning({ id: _t.id })).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/migrationSources.ts
-function ar(e) {
+function or(e) {
 	return {
 		id: e.id,
 		name: e.name,
@@ -3257,8 +3301,8 @@ function ar(e) {
 		updated_at: e.updated_at
 	};
 }
-function or(e) {
-	let n = (e, n) => t(a(_t.tenant_id, e), a(_t.id, n));
+function sr(e) {
+	let n = (e, n) => t(a(vt.tenant_id, e), a(vt.id, n));
 	return {
 		async create(t, n, r) {
 			let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = {
@@ -3272,34 +3316,34 @@ function or(e) {
 				created_at: i?.created_at ?? a,
 				updated_at: i?.updated_at ?? a
 			};
-			return await e.insert(_t).values(o), ar(o);
+			return await e.insert(vt).values(o), or(o);
 		},
 		async get(t, r) {
-			let i = await e.select().from(_t).where(n(t, r)).get();
-			return i ? ar(i) : null;
+			let i = await e.select().from(vt).where(n(t, r)).get();
+			return i ? or(i) : null;
 		},
 		async list(t) {
-			return (await e.select().from(_t).where(a(_t.tenant_id, t)).all()).map(ar);
+			return (await e.select().from(vt).where(a(vt.tenant_id, t)).all()).map(or);
 		},
 		async update(t, r, i) {
 			let a = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
-			return i.name !== void 0 && (a.name = i.name), i.provider !== void 0 && (a.provider = i.provider), i.connection !== void 0 && (a.connection = i.connection), i.enabled !== void 0 && (a.enabled = +!!i.enabled), i.credentials !== void 0 && (a.credentials = JSON.stringify(i.credentials)), (await e.update(_t).set(a).where(n(t, r)).returning({ id: _t.id })).length > 0;
+			return i.name !== void 0 && (a.name = i.name), i.provider !== void 0 && (a.provider = i.provider), i.connection !== void 0 && (a.connection = i.connection), i.enabled !== void 0 && (a.enabled = +!!i.enabled), i.credentials !== void 0 && (a.credentials = JSON.stringify(i.credentials)), (await e.update(vt).set(a).where(n(t, r)).returning({ id: vt.id })).length > 0;
 		},
 		async remove(t, r) {
-			return (await e.delete(_t).where(n(t, r)).returning({ id: _t.id })).length > 0;
+			return (await e.delete(vt).where(n(t, r)).returning({ id: vt.id })).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/passwords.ts
-function sr(e) {
+function cr(e) {
 	let { tenant_id: t, is_current: n, ...r } = e;
 	return {
 		...r,
 		is_current: !!n
 	};
 }
-function cr(e) {
+function lr(e) {
 	return {
 		async create(n, r) {
 			let i = (/* @__PURE__ */ new Date()).toISOString(), o = r.id || b();
@@ -3314,18 +3358,18 @@ function cr(e) {
 				created_at: i,
 				updated_at: i
 			};
-			return await e.insert(j).values(s), sr({
+			return await e.insert(j).values(s), cr({
 				...s,
 				tenant_id: n
 			});
 		},
 		async get(n, r) {
 			let i = await e.select().from(j).where(t(a(j.tenant_id, n), a(j.user_id, r), a(j.is_current, 1))).get();
-			return i ? sr(i) : null;
+			return i ? cr(i) : null;
 		},
 		async list(n, r, o) {
 			let s = e.select().from(j).where(t(a(j.tenant_id, n), a(j.user_id, r))).orderBy(i(j.created_at)).$dynamic();
-			return o && (s = s.limit(o)), (await s).map(sr);
+			return o && (s = s.limit(o)), (await s).map(cr);
 		},
 		async update(n, r) {
 			let i = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -3335,16 +3379,19 @@ function cr(e) {
 }
 //#endregion
 //#region src/adapters/promptSettings.ts
-function lr(e) {
+function ur(e) {
 	return {
 		async get(t) {
-			let n = await e.select().from(it).where(a(it.tenant_id, t)).get();
+			let n = await e.select().from(at).where(a(at.tenant_id, t)).get();
 			return n ? {
 				universal_login_experience: n.universal_login_experience,
 				identifier_first: !!n.identifier_first,
 				password_first: !!n.password_first,
 				webauthn_platform_first_factor: !!n.webauthn_platform_first_factor,
-				show_last_used_connection: !!n.show_last_used_connection
+				show_last_used_connection: !!n.show_last_used_connection,
+				...n.scope ? { scope: n.scope } : {},
+				...n.override ? { override: n.override } : {},
+				...n.enforce == null ? {} : { enforce: !!n.enforce }
 			} : {
 				universal_login_experience: "new",
 				identifier_first: !0,
@@ -3354,21 +3401,27 @@ function lr(e) {
 			};
 		},
 		async set(t, n) {
-			await e.insert(it).values({
+			await e.insert(at).values({
 				tenant_id: t,
 				universal_login_experience: n.universal_login_experience,
 				identifier_first: n.identifier_first,
 				password_first: n.password_first,
 				webauthn_platform_first_factor: n.webauthn_platform_first_factor,
-				show_last_used_connection: n.show_last_used_connection
+				show_last_used_connection: n.show_last_used_connection,
+				scope: n.scope,
+				override: n.override,
+				enforce: n.enforce
 			}).onConflictDoUpdate({
-				target: it.tenant_id,
+				target: at.tenant_id,
 				set: {
 					universal_login_experience: n.universal_login_experience,
 					identifier_first: n.identifier_first,
 					password_first: n.password_first,
 					webauthn_platform_first_factor: n.webauthn_platform_first_factor,
-					show_last_used_connection: n.show_last_used_connection
+					show_last_used_connection: n.show_last_used_connection,
+					scope: n.scope,
+					override: n.override,
+					enforce: n.enforce
 				}
 			});
 		}
@@ -3376,10 +3429,10 @@ function lr(e) {
 }
 //#endregion
 //#region src/adapters/promptPartials.ts
-function ur(e) {
+function dr(e) {
 	return {
 		async get(n, r) {
-			let i = await e.select({ body: dt.body }).from(dt).where(t(a(dt.tenant_id, n), a(dt.prompt, r))).get();
+			let i = await e.select({ body: ft.body }).from(ft).where(t(a(ft.tenant_id, n), a(ft.prompt, r))).get();
 			if (!i) return null;
 			try {
 				return JSON.parse(i.body);
@@ -3389,14 +3442,14 @@ function ur(e) {
 		},
 		async set(t, n, r, i) {
 			let a = Date.now(), o = i?.importMetadata?.created_at, s = i?.importMetadata?.updated_at, c = o ? new Date(o).getTime() : a, l = s ? new Date(s).getTime() : c, u = JSON.stringify(r);
-			await e.insert(dt).values({
+			await e.insert(ft).values({
 				tenant_id: t,
 				prompt: n,
 				body: u,
 				created_at_ts: c,
 				updated_at_ts: l
 			}).onConflictDoUpdate({
-				target: [dt.tenant_id, dt.prompt],
+				target: [ft.tenant_id, ft.prompt],
 				set: {
 					body: u,
 					updated_at_ts: s ? l : a
@@ -3404,16 +3457,16 @@ function ur(e) {
 			});
 		},
 		async delete(n, r) {
-			await e.delete(dt).where(t(a(dt.tenant_id, n), a(dt.prompt, r)));
+			await e.delete(ft).where(t(a(ft.tenant_id, n), a(ft.prompt, r)));
 		},
 		async list(t) {
-			return (await e.select({ prompt: dt.prompt }).from(dt).where(a(dt.tenant_id, t)).all()).map(({ prompt: e }) => e);
+			return (await e.select({ prompt: ft.prompt }).from(ft).where(a(ft.tenant_id, t)).all()).map(({ prompt: e }) => e);
 		}
 	};
 }
 //#endregion
 //#region src/adapters/proxyRoutes.ts
-function dr(e) {
+function fr(e) {
 	if (!e) return { path: "/*" };
 	try {
 		let t = JSON.parse(e), n = xe.safeParse(t);
@@ -3421,7 +3474,7 @@ function dr(e) {
 	} catch {}
 	return { path: "/*" };
 }
-function fr(e) {
+function pr(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -3436,19 +3489,19 @@ function fr(e) {
 		return [];
 	}
 }
-function pr(e) {
+function mr(e) {
 	return {
 		id: e.id,
 		tenant_id: e.tenant_id,
 		custom_domain_id: e.custom_domain_id,
 		priority: e.priority,
-		match: dr(e.match),
-		handlers: fr(e.handlers),
+		match: fr(e.match),
+		handlers: pr(e.handlers),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function mr(e) {
+function hr(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
@@ -3474,14 +3527,14 @@ function mr(e) {
 		},
 		async get(n, r) {
 			let i = await e.select().from(J).where(t(a(J.tenant_id, n), a(J.id, r))).limit(1);
-			return i[0] ? pr(i[0]) : null;
+			return i[0] ? mr(i[0]) : null;
 		},
 		async list(r, i = {}) {
 			let o = i.page ?? 0, s = i.per_page ?? 50, c = [a(J.tenant_id, r)];
 			i.custom_domain_id && c.push(a(J.custom_domain_id, i.custom_domain_id));
 			let l = await e.select().from(J).where(t(...c)).orderBy(n(J.priority), n(J.created_at)).offset(o * s).limit(s);
 			return {
-				proxy_routes: l.map(pr),
+				proxy_routes: l.map(mr),
 				start: o * s,
 				limit: s,
 				length: l.length
@@ -3500,8 +3553,8 @@ function mr(e) {
 }
 //#endregion
 //#region src/adapters/tokenExchangeProfiles.ts
-var hr = ee("0123456789abcdefghijklmnopqrstuvwxyz", 17);
-function gr(e) {
+var gr = ee("0123456789abcdefghijklmnopqrstuvwxyz", 17);
+function _r(e) {
 	if (e) try {
 		let t = Ie.safeParse(JSON.parse(e));
 		return t.success ? t.data : void 0;
@@ -3509,7 +3562,7 @@ function gr(e) {
 		return;
 	}
 }
-function _r(e) {
+function vr(e) {
 	let t = {
 		id: e.id,
 		name: e.name,
@@ -3519,14 +3572,14 @@ function _r(e) {
 		updated_at: e.updated_at
 	};
 	e.action_id && (t.action_id = e.action_id);
-	let n = gr(e.jwt_verification);
+	let n = _r(e.jwt_verification);
 	return n && (t.jwt_verification = n), t;
 }
-function vr(e) {
+function yr(e) {
 	return {
 		async create(t, n, r) {
 			let i = r?.importMetadata, a = (/* @__PURE__ */ new Date()).toISOString(), o = {
-				id: i?.id ?? `tep_${hr()}`,
+				id: i?.id ?? `tep_${gr()}`,
 				tenant_id: t,
 				name: n.name,
 				subject_token_type: n.subject_token_type,
@@ -3536,27 +3589,27 @@ function vr(e) {
 				created_at: i?.created_at ?? a,
 				updated_at: i?.updated_at ?? a
 			};
-			return await e.insert(ht).values(o), _r(o);
+			return await e.insert(gt).values(o), vr(o);
 		},
 		async get(n, r) {
-			let i = await e.select().from(ht).where(t(a(ht.tenant_id, n), a(ht.id, r))).limit(1);
-			return i[0] ? _r(i[0]) : null;
+			let i = await e.select().from(gt).where(t(a(gt.tenant_id, n), a(gt.id, r))).limit(1);
+			return i[0] ? vr(i[0]) : null;
 		},
 		async list(t) {
-			return (await e.select().from(ht).where(a(ht.tenant_id, t)).orderBy(n(ht.created_at), n(ht.id))).map(_r);
+			return (await e.select().from(gt).where(a(gt.tenant_id, t)).orderBy(n(gt.created_at), n(gt.id))).map(vr);
 		},
 		async update(n, r, i) {
 			let o = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
-			return i.name !== void 0 && (o.name = i.name), i.subject_token_type !== void 0 && (o.subject_token_type = i.subject_token_type), i.jwt_verification !== void 0 && (o.jwt_verification = JSON.stringify(i.jwt_verification)), (await e.update(ht).set(o).where(t(a(ht.tenant_id, n), a(ht.id, r))).returning({ id: ht.id })).length > 0;
+			return i.name !== void 0 && (o.name = i.name), i.subject_token_type !== void 0 && (o.subject_token_type = i.subject_token_type), i.jwt_verification !== void 0 && (o.jwt_verification = JSON.stringify(i.jwt_verification)), (await e.update(gt).set(o).where(t(a(gt.tenant_id, n), a(gt.id, r))).returning({ id: gt.id })).length > 0;
 		},
 		async remove(n, r) {
-			return (await e.delete(ht).where(t(a(ht.tenant_id, n), a(ht.id, r))).returning({ id: ht.id })).length > 0;
+			return (await e.delete(gt).where(t(a(gt.tenant_id, n), a(gt.id, r))).returning({ id: gt.id })).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/scim.ts
-function yr(e) {
+function br(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -3571,7 +3624,7 @@ function yr(e) {
 		return [];
 	}
 }
-function br(e) {
+function xr(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -3580,16 +3633,16 @@ function br(e) {
 		return [];
 	}
 }
-function xr(e) {
+function Sr(e) {
 	return {
 		connection_id: e.connection_id,
 		user_id_attribute: e.user_id_attribute,
-		mapping: yr(e.mapping),
+		mapping: br(e.mapping),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	};
 }
-function Sr(e) {
+function Cr(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
@@ -3599,7 +3652,7 @@ function Sr(e) {
 				created_at: r,
 				updated_at: r
 			};
-			return await e.insert(pt).values({
+			return await e.insert(mt).values({
 				connection_id: i.connection_id,
 				tenant_id: t,
 				user_id_attribute: i.user_id_attribute,
@@ -3609,31 +3662,31 @@ function Sr(e) {
 			}), i;
 		},
 		async get(n, r) {
-			let i = await e.select().from(pt).where(t(a(pt.tenant_id, n), a(pt.connection_id, r))).limit(1);
-			return i[0] ? xr(i[0]) : null;
+			let i = await e.select().from(mt).where(t(a(mt.tenant_id, n), a(mt.connection_id, r))).limit(1);
+			return i[0] ? Sr(i[0]) : null;
 		},
 		async update(n, r, i) {
-			if ((await e.select({ connection_id: pt.connection_id }).from(pt).where(t(a(pt.tenant_id, n), a(pt.connection_id, r))).limit(1)).length === 0) return !1;
+			if ((await e.select({ connection_id: mt.connection_id }).from(mt).where(t(a(mt.tenant_id, n), a(mt.connection_id, r))).limit(1)).length === 0) return !1;
 			let o = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
-			return i.user_id_attribute !== void 0 && (o.user_id_attribute = i.user_id_attribute), i.mapping !== void 0 && (o.mapping = JSON.stringify(i.mapping)), await e.update(pt).set(o).where(t(a(pt.tenant_id, n), a(pt.connection_id, r))), !0;
+			return i.user_id_attribute !== void 0 && (o.user_id_attribute = i.user_id_attribute), i.mapping !== void 0 && (o.mapping = JSON.stringify(i.mapping)), await e.update(mt).set(o).where(t(a(mt.tenant_id, n), a(mt.connection_id, r))), !0;
 		},
 		async remove(n, r) {
-			return (await e.select({ connection_id: pt.connection_id }).from(pt).where(t(a(pt.tenant_id, n), a(pt.connection_id, r))).limit(1)).length === 0 ? !1 : (await e.delete(pt).where(t(a(pt.tenant_id, n), a(pt.connection_id, r))), !0);
+			return (await e.select({ connection_id: mt.connection_id }).from(mt).where(t(a(mt.tenant_id, n), a(mt.connection_id, r))).limit(1)).length === 0 ? !1 : (await e.delete(mt).where(t(a(mt.tenant_id, n), a(mt.connection_id, r))), !0);
 		}
 	};
 }
-function Cr(e) {
+function wr(e) {
 	return {
 		token_id: e.token_id,
 		connection_id: e.connection_id,
 		token_hash: e.token_hash,
-		scopes: br(e.scopes),
+		scopes: xr(e.scopes),
 		valid_until: e.valid_until ?? void 0,
 		created_at: e.created_at,
 		last_used_at: e.last_used_at ?? void 0
 	};
 }
-function wr(e) {
+function Tr(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
@@ -3656,14 +3709,14 @@ function wr(e) {
 		},
 		async get(n, r) {
 			let i = await e.select().from(Y).where(t(a(Y.tenant_id, n), a(Y.token_id, r))).limit(1);
-			return i[0] ? Cr(i[0]) : null;
+			return i[0] ? wr(i[0]) : null;
 		},
 		async getByHash(n, r) {
 			let i = await e.select().from(Y).where(t(a(Y.tenant_id, n), a(Y.token_hash, r))).limit(1);
-			return i[0] ? Cr(i[0]) : null;
+			return i[0] ? wr(i[0]) : null;
 		},
 		async listByConnection(n, r) {
-			return (await e.select().from(Y).where(t(a(Y.tenant_id, n), a(Y.connection_id, r)))).map(Cr);
+			return (await e.select().from(Y).where(t(a(Y.tenant_id, n), a(Y.connection_id, r)))).map(wr);
 		},
 		async markUsed(n, r, i) {
 			return (await e.select({ token_id: Y.token_id }).from(Y).where(t(a(Y.tenant_id, n), a(Y.token_id, r))).limit(1)).length === 0 ? !1 : (await e.update(Y).set({ last_used_at: i }).where(t(a(Y.tenant_id, n), a(Y.token_id, r))), !0);
@@ -3673,7 +3726,7 @@ function wr(e) {
 		}
 	};
 }
-function Tr(e) {
+function Er(e) {
 	return {
 		connection_id: e.connection_id,
 		external_id: e.external_id,
@@ -3681,7 +3734,7 @@ function Tr(e) {
 		created_at: e.created_at
 	};
 }
-function Er(e) {
+function Dr(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
@@ -3690,7 +3743,7 @@ function Er(e) {
 				user_id: n.user_id,
 				created_at: r
 			};
-			return await e.insert(mt).values({
+			return await e.insert(ht).values({
 				tenant_id: t,
 				connection_id: i.connection_id,
 				external_id: i.external_id,
@@ -3699,21 +3752,21 @@ function Er(e) {
 			}), i;
 		},
 		async getByExternalId(n, r, i) {
-			let o = await e.select().from(mt).where(t(a(mt.tenant_id, n), a(mt.connection_id, r), a(mt.external_id, i))).limit(1);
-			return o[0] ? Tr(o[0]) : null;
+			let o = await e.select().from(ht).where(t(a(ht.tenant_id, n), a(ht.connection_id, r), a(ht.external_id, i))).limit(1);
+			return o[0] ? Er(o[0]) : null;
 		},
 		async getByUserId(n, r, i) {
-			let o = await e.select().from(mt).where(t(a(mt.tenant_id, n), a(mt.connection_id, r), a(mt.user_id, i))).limit(1);
-			return o[0] ? Tr(o[0]) : null;
+			let o = await e.select().from(ht).where(t(a(ht.tenant_id, n), a(ht.connection_id, r), a(ht.user_id, i))).limit(1);
+			return o[0] ? Er(o[0]) : null;
 		},
 		async remove(n, r, i) {
-			return (await e.select({ user_id: mt.user_id }).from(mt).where(t(a(mt.tenant_id, n), a(mt.connection_id, r), a(mt.user_id, i))).limit(1)).length === 0 ? !1 : (await e.delete(mt).where(t(a(mt.tenant_id, n), a(mt.connection_id, r), a(mt.user_id, i))), !0);
+			return (await e.select({ user_id: ht.user_id }).from(ht).where(t(a(ht.tenant_id, n), a(ht.connection_id, r), a(ht.user_id, i))).limit(1)).length === 0 ? !1 : (await e.delete(ht).where(t(a(ht.tenant_id, n), a(ht.connection_id, r), a(ht.user_id, i))), !0);
 		}
 	};
 }
 //#endregion
 //#region src/adapters/refreshTokens.ts
-function Dr(e) {
+function Or(e) {
 	let { tenant_id: t, created_at_ts: n, expires_at_ts: r, idle_expires_at_ts: i, last_exchanged_at_ts: a, revoked_at_ts: o, rotated_at_ts: s, device: c, resource_servers: l, rotating: u, auth_strategy_strategy: d, auth_strategy_strategy_type: f, ...p } = e, m = ae({
 		created_at_ts: n,
 		expires_at_ts: r,
@@ -3740,10 +3793,10 @@ function Dr(e) {
 		} } : {}
 	});
 }
-function Or(e, t) {
+function kr(e, t) {
 	return Math.max(e ?? 0, t ?? 0);
 }
-function kr(e) {
+function Ar(e) {
 	return {
 		async create(n, r) {
 			let i = Date.now(), o = {
@@ -3769,39 +3822,39 @@ function kr(e) {
 				expires_at_ts: E(r.expires_at),
 				idle_expires_at_ts: E(r.idle_expires_at),
 				last_exchanged_at_ts: E(r.last_exchanged_at)
-			}, s = [e.insert(N).values(o)], c = Or(o.expires_at_ts, o.idle_expires_at_ts);
+			}, s = [e.insert(N).values(o)], c = kr(o.expires_at_ts, o.idle_expires_at_ts);
 			return c > 0 && o.login_id && s.push(e.update(P).set({
 				expires_at_ts: c,
 				updated_at_ts: i
-			}).where(t(a(P.tenant_id, n), a(P.id, o.login_id), m(P.expires_at_ts, c)))), await Pt(e, s), Dr({
+			}).where(t(a(P.tenant_id, n), a(P.id, o.login_id), m(P.expires_at_ts, c)))), await Ft(e, s), Or({
 				...o,
 				tenant_id: n
 			});
 		},
 		async get(n, r) {
 			let i = await e.select().from(N).where(t(a(N.tenant_id, n), a(N.id, r))).get();
-			return i ? Dr(i) : null;
+			return i ? Or(i) : null;
 		},
 		async getByLookup(n, r) {
 			let i = await e.select().from(N).where(t(a(N.tenant_id, n), a(N.token_lookup, r))).get();
-			return i ? Dr(i) : null;
+			return i ? Or(i) : null;
 		},
 		async update(n, r, i) {
 			let o = {};
 			return i.device !== void 0 && (o.device = JSON.stringify(i.device)), i.resource_servers !== void 0 && (o.resource_servers = JSON.stringify(i.resource_servers)), i.rotating !== void 0 && (o.rotating = i.rotating), i.token_lookup !== void 0 && (o.token_lookup = i.token_lookup), i.token_hash !== void 0 && (o.token_hash = i.token_hash), i.family_id !== void 0 && (o.family_id = i.family_id), i.rotated_to !== void 0 && (o.rotated_to = i.rotated_to), i.rotated_at !== void 0 && (o.rotated_at_ts = E(i.rotated_at)), i.expires_at !== void 0 && (o.expires_at_ts = E(i.expires_at)), i.idle_expires_at !== void 0 && (o.idle_expires_at_ts = E(i.idle_expires_at)), i.last_exchanged_at !== void 0 && (o.last_exchanged_at_ts = E(i.last_exchanged_at)), i.revoked_at !== void 0 && (o.revoked_at_ts = E(i.revoked_at)), (await e.update(N).set(o).where(t(a(N.tenant_id, n), a(N.id, r))).returning()).length > 0;
 		},
 		async list(o, s) {
-			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = f ? Ct(N, f, ["user_id", "login_id"]) : void 0, m = [
+			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = f ? wt(N, f, ["user_id", "login_id"]) : void 0, m = [
 				a(N.tenant_id, o),
 				...s?.user_id === void 0 ? [] : [a(N.user_id, s.user_id)],
 				...p ? [p] : []
 			], h = m.length === 1 ? m[0] : t(...m);
-			if (wt(s)) {
+			if (Tt(s)) {
 				let n = {
 					sortColumn: N.created_at_ts,
 					idColumn: N.id,
 					sortOrder: "desc"
-				}, r = Et(s, n), i = Z(s), { rows: a, next: o } = Dt(await e.select().from(N).where(r ? t(h, r) : h).orderBy(...Tt(n)).limit(i + 1), i, "created_at_ts"), c = a.map(Dr);
+				}, r = Dt(s, n), i = Z(s), { rows: a, next: o } = Ot(await e.select().from(N).where(r ? t(h, r) : h).orderBy(...Et(n)).limit(i + 1), i, "created_at_ts"), c = a.map(Or);
 				return {
 					refresh_tokens: c,
 					start: 0,
@@ -3815,7 +3868,7 @@ function kr(e) {
 				let e = N[d.sort_by];
 				e && (g = g.orderBy(d.sort_order === "desc" ? i(e) : n(e)));
 			}
-			let _ = (await g.offset(c * l).limit(l)).map(Dr);
+			let _ = (await g.offset(c * l).limit(l)).map(Or);
 			if (!u) return { refresh_tokens: _ };
 			let [v] = await e.select({ count: r() }).from(N).where(h);
 			return {
@@ -3844,15 +3897,15 @@ function kr(e) {
 }
 //#endregion
 //#region src/adapters/resourceServers.ts
-var Ar = ["name", "identifier"];
-function jr() {
+var jr = ["name", "identifier"];
+function Mr() {
 	return `api_${ee("0123456789abcdefghijklmnopqrstuvwxyz", 17)()}`;
 }
-var Mr = [
+var Nr = [
 	"skip_consent_for_verifiable_first_party_clients",
 	"allow_offline_access",
 	"is_system"
-], Nr = new Set([
+], Pr = new Set([
 	"id",
 	"tenant_id",
 	"identifier",
@@ -3871,17 +3924,17 @@ var Mr = [
 	"created_at",
 	"updated_at"
 ]);
-function Pr(e) {
+function Fr(e) {
 	let { tenant_id: t, verification_key: n, scopes: r, options: i, metadata: a, ...o } = e, s = { ...o };
 	s.scopes = X(r, []), s.options = X(i, {}), s.metadata = X(a), n !== void 0 && (s.verificationKey = n);
-	for (let e of Mr) o[e] !== void 0 && o[e] !== null && (s[e] = !!o[e]);
+	for (let e of Nr) o[e] !== void 0 && o[e] !== null && (s[e] = !!o[e]);
 	return D(s);
 }
-function Fr(e) {
+function Ir(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
-				id: n.id || jr(),
+				id: n.id || Mr(),
 				tenant_id: t,
 				identifier: n.identifier,
 				name: n.name,
@@ -3892,41 +3945,44 @@ function Fr(e) {
 				scopes: JSON.stringify(n.scopes || []),
 				options: JSON.stringify(n.options || {}),
 				metadata: n.metadata ? JSON.stringify(n.metadata) : void 0,
+				scope: n.scope,
+				override: n.override,
+				enforce: n.enforce,
 				verification_key: n.verificationKey || n.verification_key,
 				created_at: r,
 				updated_at: r
 			};
-			for (let e of Mr) n[e] !== void 0 && (i[e] = +!!n[e]);
-			return i.is_system === void 0 && (i.is_system = 0), await e.insert(G).values(i), Pr({
+			for (let e of Nr) n[e] !== void 0 && (i[e] = +!!n[e]);
+			return i.is_system === void 0 && (i.is_system = 0), await e.insert(G).values(i), Fr({
 				...i,
 				tenant_id: t
 			});
 		},
 		async get(n, r) {
 			let i = await e.select().from(G).where(t(a(G.tenant_id, n), a(G.id, r))).get();
-			return i ? Pr(i) : null;
+			return i ? Fr(i) : null;
 		},
 		async update(n, r, i) {
 			let o = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
-			i.name !== void 0 && (o.name = i.name), i.identifier !== void 0 && (o.identifier = i.identifier), i.signing_alg !== void 0 && (o.signing_alg = i.signing_alg), i.signing_secret !== void 0 && (o.signing_secret = i.signing_secret), i.token_lifetime !== void 0 && (o.token_lifetime = i.token_lifetime), i.token_lifetime_for_web !== void 0 && (o.token_lifetime_for_web = i.token_lifetime_for_web), i.scopes !== void 0 && (o.scopes = JSON.stringify(i.scopes)), i.options !== void 0 && (o.options = y`json_patch(COALESCE(${G.options}, '{}'), ${JSON.stringify(i.options)})`), i.metadata !== void 0 && (o.metadata = JSON.stringify(i.metadata)), i.verificationKey !== void 0 && (o.verification_key = i.verificationKey);
-			for (let e of Mr) i[e] !== void 0 && (o[e] = +!!i[e]);
+			i.name !== void 0 && (o.name = i.name), i.identifier !== void 0 && (o.identifier = i.identifier), i.signing_alg !== void 0 && (o.signing_alg = i.signing_alg), i.signing_secret !== void 0 && (o.signing_secret = i.signing_secret), i.token_lifetime !== void 0 && (o.token_lifetime = i.token_lifetime), i.token_lifetime_for_web !== void 0 && (o.token_lifetime_for_web = i.token_lifetime_for_web), i.scopes !== void 0 && (o.scopes = JSON.stringify(i.scopes)), i.options !== void 0 && (o.options = y`json_patch(COALESCE(${G.options}, '{}'), ${JSON.stringify(i.options)})`), i.metadata !== void 0 && (o.metadata = JSON.stringify(i.metadata)), i.scope !== void 0 && (o.scope = i.scope), i.override !== void 0 && (o.override = i.override), i.enforce !== void 0 && (o.enforce = i.enforce), i.verificationKey !== void 0 && (o.verification_key = i.verificationKey);
+			for (let e of Nr) i[e] !== void 0 && (o[e] = +!!i[e]);
 			return (await e.update(G).set(o).where(t(a(G.tenant_id, n), a(G.id, r))).returning()).length > 0;
 		},
 		async list(o, s) {
 			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = Math.max(0, Math.floor(Number(c) || 0)), m = Math.min(Math.max(1, Math.floor(Number(l) || 50)), 500), h = [a(G.tenant_id, o)];
 			if (f) {
-				let e = Ee(f, Ar);
+				let e = Ee(f, jr);
 				if (e) {
-					let t = Ct(G, e, Ar, ["name", "identifier"]);
+					let t = wt(G, e, jr, ["name", "identifier"]);
 					t && h.push(t);
 				}
 			}
-			if (wt(s)) {
+			if (Tt(s)) {
 				let n = {
 					sortColumn: G.created_at,
 					idColumn: G.id,
 					sortOrder: "desc"
-				}, r = Et(s, n), i = Z(s), { rows: a, next: o } = Dt(await e.select().from(G).where(t(...h, r)).orderBy(...Tt(n)).limit(i + 1), i, "created_at", "id"), c = a.map(Pr);
+				}, r = Dt(s, n), i = Z(s), { rows: a, next: o } = Ot(await e.select().from(G).where(t(...h, r)).orderBy(...Et(n)).limit(i + 1), i, "created_at", "id"), c = a.map(Fr);
 				return {
 					resource_servers: c,
 					start: 0,
@@ -3936,11 +3992,11 @@ function Fr(e) {
 				};
 			}
 			let g = e.select().from(G).where(t(...h)).$dynamic();
-			if (d?.sort_by && Nr.has(d.sort_by)) {
+			if (d?.sort_by && Pr.has(d.sort_by)) {
 				let e = G[d.sort_by];
 				g = g.orderBy(d.sort_order === "desc" ? i(e) : n(e));
 			}
-			let _ = (await g.offset(p * m).limit(m)).map(Pr);
+			let _ = (await g.offset(p * m).limit(m)).map(Fr);
 			if (!u) return { resource_servers: _ };
 			let [v] = await e.select({ count: r() }).from(G).where(t(...h));
 			return {
@@ -3957,7 +4013,7 @@ function Fr(e) {
 }
 //#endregion
 //#region src/adapters/rolePermissions.ts
-function Ir(e) {
+function Lr(e) {
 	return {
 		async assign(t, n, r) {
 			if (r.length === 0) return !0;
@@ -3976,21 +4032,21 @@ function Ir(e) {
 				permission_name: U.permission_name,
 				created_at: U.created_at
 			}).from(U).where(t(a(U.tenant_id, n), a(U.role_id, r))).orderBy(U.resource_server_identifier, U.permission_name).$dynamic();
-			return Lr(e, n, await (o === void 0 ? s : s.limit(o).offset((i?.page ?? 0) * o)).all());
+			return Rr(e, n, await (o === void 0 ? s : s.limit(o).offset((i?.page ?? 0) * o)).all());
 		},
 		async listCheckpoint(n, r, i = {}) {
 			let o = {
 				sortColumn: U.resource_server_identifier,
 				idColumn: U.permission_name,
 				sortOrder: "asc"
-			}, s = Z(i), { rows: c, next: l } = Dt(await e.select({
+			}, s = Z(i), { rows: c, next: l } = Ot(await e.select({
 				role_id: U.role_id,
 				resource_server_identifier: U.resource_server_identifier,
 				permission_name: U.permission_name,
 				created_at: U.created_at
-			}).from(U).where(t(a(U.tenant_id, n), a(U.role_id, r), Et(i, o))).orderBy(...Tt(o)).limit(s + 1).all(), s, "resource_server_identifier", "permission_name");
+			}).from(U).where(t(a(U.tenant_id, n), a(U.role_id, r), Dt(i, o))).orderBy(...Et(o)).limit(s + 1).all(), s, "resource_server_identifier", "permission_name");
 			return {
-				permissions: await Lr(e, n, c),
+				permissions: await Rr(e, n, c),
 				next: l
 			};
 		},
@@ -4001,7 +4057,7 @@ function Ir(e) {
 		}
 	};
 }
-async function Lr(e, n, r) {
+async function Rr(e, n, r) {
 	let i = [...new Set(r.map((e) => e.resource_server_identifier))], o = /* @__PURE__ */ new Map();
 	if (i.length > 0) {
 		let r = await e.select({
@@ -4017,18 +4073,18 @@ async function Lr(e, n, r) {
 }
 //#endregion
 //#region src/adapters/userPermissions.ts
-function Rr(e) {
+function zr(e) {
 	try {
 		let t = JSON.parse(e);
 		if (Array.isArray(t) && t.length === 2 && t.every((e) => typeof e == "string")) return t;
 	} catch {}
 	throw new Re(400, { message: "The `from` cursor is not valid" });
 }
-function zr(e) {
+function Br(e) {
 	return {
 		async create(t, n, r, i) {
 			try {
-				await e.insert(Qe).values({
+				await e.insert($e).values({
 					tenant_id: t,
 					user_id: n,
 					resource_server_identifier: r.resource_server_identifier,
@@ -4043,9 +4099,9 @@ function zr(e) {
 			return !0;
 		},
 		async list(n, r, i, o) {
-			let s = [a(Qe.tenant_id, n), a(Qe.user_id, r)];
-			o && s.push(a(Qe.organization_id, o));
-			let c = await e.select().from(Qe).where(t(...s)).all();
+			let s = [a($e.tenant_id, n), a($e.user_id, r)];
+			o && s.push(a($e.organization_id, o));
+			let c = await e.select().from($e).where(t(...s)).all();
 			return await Promise.all(c.map(async (r) => {
 				let i = await e.select({ name: G.name }).from(G).where(t(a(G.tenant_id, n), a(G.identifier, r.resource_server_identifier))).get();
 				return {
@@ -4057,15 +4113,15 @@ function zr(e) {
 			}));
 		},
 		async listCheckpoint(r, i, o = {}, s) {
-			let c = Z(o), u = [a(Qe.tenant_id, r), a(Qe.user_id, i)];
-			s !== void 0 && u.push(a(Qe.organization_id, s));
+			let c = Z(o), u = [a($e.tenant_id, r), a($e.user_id, i)];
+			s !== void 0 && u.push(a($e.organization_id, s));
 			let d = o.from ? ge(o.from) : null;
 			if (d) {
 				if (d.k !== void 0) throw new Re(400, { message: "The `from` cursor was issued under a different sort and cannot be used with this request" });
-				let [e, t] = Rr(d.i);
-				u.push(y`(${Qe.resource_server_identifier}, ${Qe.permission_name}, ${Qe.organization_id}) > (${d.s}, ${e}, ${t})`);
+				let [e, t] = zr(d.i);
+				u.push(y`(${$e.resource_server_identifier}, ${$e.permission_name}, ${$e.organization_id}) > (${d.s}, ${e}, ${t})`);
 			}
-			let f = await e.select().from(Qe).where(t(...u)).orderBy(n(Qe.resource_server_identifier), n(Qe.permission_name), n(Qe.organization_id)).limit(c + 1).all(), p = f.length > c, m = p ? f.slice(0, c) : f, h = m[m.length - 1], g = p && h ? _e({
+			let f = await e.select().from($e).where(t(...u)).orderBy(n($e.resource_server_identifier), n($e.permission_name), n($e.organization_id)).limit(c + 1).all(), p = f.length > c, m = p ? f.slice(0, c) : f, h = m[m.length - 1], g = p && h ? _e({
 				s: h.resource_server_identifier,
 				i: JSON.stringify([h.permission_name, h.organization_id])
 			}) : void 0, _ = [...new Set(m.map((e) => e.resource_server_identifier))], v = /* @__PURE__ */ new Map();
@@ -4089,13 +4145,13 @@ function zr(e) {
 			};
 		},
 		async remove(n, r, i, o) {
-			return (await e.delete(Qe).where(t(a(Qe.tenant_id, n), a(Qe.user_id, r), a(Qe.resource_server_identifier, i.resource_server_identifier), a(Qe.permission_name, i.permission_name), a(Qe.organization_id, o || ""))).returning()).length > 0;
+			return (await e.delete($e).where(t(a($e.tenant_id, n), a($e.user_id, r), a($e.resource_server_identifier, i.resource_server_identifier), a($e.permission_name, i.permission_name), a($e.organization_id, o || ""))).returning()).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/roles.ts
-function Br(e) {
+function Vr(e) {
 	let { tenant_id: t, is_system: n, metadata: r, ...i } = e;
 	return D({
 		...i,
@@ -4103,7 +4159,7 @@ function Br(e) {
 		metadata: X(r)
 	});
 }
-function Vr(e) {
+function Hr(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
@@ -4116,29 +4172,29 @@ function Vr(e) {
 				created_at: r,
 				updated_at: r
 			};
-			return await e.insert(H).values(i), Br({
+			return await e.insert(H).values(i), Vr({
 				...i,
 				tenant_id: t
 			});
 		},
 		async get(n, r) {
 			let i = await e.select().from(H).where(t(a(H.tenant_id, n), a(H.id, r))).get();
-			return i ? Br(i) : null;
+			return i ? Vr(i) : null;
 		},
 		async update(n, r, i) {
 			let o = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
 			return i.name !== void 0 && (o.name = i.name), i.description !== void 0 && (o.description = i.description), i.is_system !== void 0 && (o.is_system = +!!i.is_system), i.metadata !== void 0 && (o.metadata = JSON.stringify(i.metadata)), (await e.update(H).set(o).where(t(a(H.tenant_id, n), a(H.id, r))).returning()).length > 0;
 		},
 		async list(o, s) {
-			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = f ? Ct(H, f, ["name"]) : void 0, m = p ? t(a(H.tenant_id, o), p) : a(H.tenant_id, o);
-			if (wt(s)) {
+			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = f ? wt(H, f, ["name"]) : void 0, m = p ? t(a(H.tenant_id, o), p) : a(H.tenant_id, o);
+			if (Tt(s)) {
 				let n = {
 					sortColumn: H.created_at,
 					idColumn: H.id,
 					sortOrder: "desc"
-				}, r = Z(s), { rows: i, next: a } = Dt(await e.select().from(H).where(t(m, Et(s, n))).orderBy(...Tt(n)).limit(r + 1), r, "created_at");
+				}, r = Z(s), { rows: i, next: a } = Ot(await e.select().from(H).where(t(m, Dt(s, n))).orderBy(...Et(n)).limit(r + 1), r, "created_at");
 				return {
-					roles: i.map(Br),
+					roles: i.map(Vr),
 					start: 0,
 					limit: r,
 					length: i.length,
@@ -4150,7 +4206,7 @@ function Vr(e) {
 				let e = H[d.sort_by];
 				e && (h = h.orderBy(d.sort_order === "desc" ? i(e) : n(e)));
 			}
-			let g = (await h.offset(c * l).limit(l)).map(Br);
+			let g = (await h.offset(c * l).limit(l)).map(Vr);
 			if (!u) return { roles: g };
 			let [_] = await e.select({ count: r() }).from(H).where(m);
 			return {
@@ -4167,7 +4223,7 @@ function Vr(e) {
 }
 //#endregion
 //#region src/adapters/sessions.ts
-var Hr = ["created_at_ts", "updated_at_ts"], Ur = [
+var Ur = ["created_at_ts", "updated_at_ts"], Wr = [
 	"expires_at_ts",
 	"idle_expires_at_ts",
 	"authenticated_at_ts",
@@ -4175,7 +4231,7 @@ var Hr = ["created_at_ts", "updated_at_ts"], Ur = [
 	"used_at_ts",
 	"revoked_at_ts"
 ];
-function Wr(e) {
+function Gr(e) {
 	let { tenant_id: t, created_at_ts: n, updated_at_ts: r, expires_at_ts: i, idle_expires_at_ts: a, authenticated_at_ts: o, last_interaction_at_ts: s, used_at_ts: c, revoked_at_ts: l, device: u, clients: d, ...f } = e, p = ae({
 		created_at_ts: n,
 		updated_at_ts: r,
@@ -4185,7 +4241,7 @@ function Wr(e) {
 		last_interaction_at_ts: s,
 		used_at_ts: c,
 		revoked_at_ts: l
-	}, [...Hr], [...Ur]);
+	}, [...Ur], [...Wr]);
 	return D({
 		...f,
 		...p,
@@ -4193,10 +4249,10 @@ function Wr(e) {
 		clients: X(d, [])
 	});
 }
-function Gr(e, t) {
+function Kr(e, t) {
 	return Math.max(e ?? 0, t ?? 0);
 }
-function Kr(e) {
+function qr(e) {
 	return {
 		async create(n, r) {
 			let i = Date.now(), o = {
@@ -4214,23 +4270,23 @@ function Kr(e) {
 				last_interaction_at_ts: r.last_interaction_at ? E(r.last_interaction_at) : i,
 				used_at_ts: E(r.used_at),
 				revoked_at_ts: E(r.revoked_at)
-			}, s = [e.insert(M).values(o)], c = Gr(o.expires_at_ts, o.idle_expires_at_ts);
+			}, s = [e.insert(M).values(o)], c = Kr(o.expires_at_ts, o.idle_expires_at_ts);
 			return c > 0 && o.login_session_id && s.push(e.update(P).set({
 				expires_at_ts: c,
 				updated_at_ts: i
-			}).where(t(a(P.tenant_id, n), a(P.id, o.login_session_id), m(P.expires_at_ts, c)))), await Pt(e, s), Wr({
+			}).where(t(a(P.tenant_id, n), a(P.id, o.login_session_id), m(P.expires_at_ts, c)))), await Ft(e, s), Gr({
 				...o,
 				tenant_id: n
 			});
 		},
 		async get(n, r) {
 			let i = await e.select().from(M).where(t(a(M.tenant_id, n), a(M.id, r))).get();
-			return i ? Wr(i) : null;
+			return i ? Gr(i) : null;
 		},
 		async update(n, r, i) {
 			let o = { updated_at_ts: Date.now() };
 			i.user_id !== void 0 && (o.user_id = i.user_id), i.login_session_id !== void 0 && (o.login_session_id = i.login_session_id), i.device !== void 0 && (o.device = JSON.stringify(i.device)), i.clients !== void 0 && (o.clients = JSON.stringify(i.clients)), i.expires_at !== void 0 && (o.expires_at_ts = E(i.expires_at)), i.idle_expires_at !== void 0 && (o.idle_expires_at_ts = E(i.idle_expires_at)), i.authenticated_at !== void 0 && (o.authenticated_at_ts = E(i.authenticated_at)), i.last_interaction_at !== void 0 && (o.last_interaction_at_ts = E(i.last_interaction_at)), i.used_at !== void 0 && (o.used_at_ts = E(i.used_at)), i.revoked_at !== void 0 && (o.revoked_at_ts = E(i.revoked_at));
-			let s = await e.update(M).set(o).where(t(a(M.tenant_id, n), a(M.id, r))).returning(), c = Gr(o.expires_at_ts, o.idle_expires_at_ts), l = s[0];
+			let s = await e.update(M).set(o).where(t(a(M.tenant_id, n), a(M.id, r))).returning(), c = Kr(o.expires_at_ts, o.idle_expires_at_ts), l = s[0];
 			if (c > 0 && l) {
 				let r = i.login_session_id ?? l.login_session_id;
 				r && await e.update(P).set({
@@ -4241,13 +4297,13 @@ function Kr(e) {
 			return s.length > 0;
 		},
 		async list(o, s) {
-			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = f ? Ct(M, f, ["user_id", "id"]) : void 0, m = p ? t(a(M.tenant_id, o), p) : a(M.tenant_id, o);
-			if (wt(s)) {
+			let { page: c = 0, per_page: l = 50, include_totals: u = !1, sort: d, q: f } = s || {}, p = f ? wt(M, f, ["user_id", "id"]) : void 0, m = p ? t(a(M.tenant_id, o), p) : a(M.tenant_id, o);
+			if (Tt(s)) {
 				let n = {
 					sortColumn: M.created_at_ts,
 					idColumn: M.id,
 					sortOrder: "desc"
-				}, r = Z(s), i = Et(s, n), { rows: a, next: o } = Dt(await e.select().from(M).where(i ? t(m, i) : m).orderBy(...Tt(n)).limit(r + 1), r, "created_at_ts"), c = a.map(Wr);
+				}, r = Z(s), i = Dt(s, n), { rows: a, next: o } = Ot(await e.select().from(M).where(i ? t(m, i) : m).orderBy(...Et(n)).limit(r + 1), r, "created_at_ts"), c = a.map(Gr);
 				return {
 					sessions: c,
 					start: 0,
@@ -4261,7 +4317,7 @@ function Kr(e) {
 				let e = M[d.sort_by];
 				e && (h = h.orderBy(d.sort_order === "desc" ? i(e) : n(e)));
 			}
-			let g = (await h.offset(c * l).limit(l)).map(Wr);
+			let g = (await h.offset(c * l).limit(l)).map(Gr);
 			if (!u) return { sessions: g };
 			let [_] = await e.select({ count: r() }).from(M).where(m);
 			return {
@@ -4278,7 +4334,7 @@ function Kr(e) {
 }
 //#endregion
 //#region src/adapters/tenants.ts
-var qr = [
+var Jr = [
 	"session_cookie",
 	"enabled_locales",
 	"error_page",
@@ -4294,25 +4350,25 @@ var qr = [
 	"acr_values_supported",
 	"mtls",
 	"mfa"
-], Jr = [
+], Yr = [
 	"allow_organization_name_in_authentication_api",
 	"customize_mfa_in_postlogin_action",
 	"pushed_authorization_requests_supported",
 	"authorization_response_iss_parameter_supported"
 ];
-function Yr(e) {
+function Xr(e) {
 	let t = { ...e };
-	for (let e of qr) typeof t[e] == "string" && (t[e] = X(t[e]));
-	for (let e of Jr) t[e] !== void 0 && t[e] !== null && (t[e] = t[e] === 1);
+	for (let e of Jr) typeof t[e] == "string" && (t[e] = X(t[e]));
+	for (let e of Yr) t[e] !== void 0 && t[e] !== null && (t[e] = t[e] === 1);
 	return D(t);
 }
-function Xr(e) {
+function Zr(e) {
 	let t = { ...e };
-	le(e, qr, t);
-	for (let n of Jr) e[n] !== void 0 && (t[n] = +!!e[n]);
+	le(e, Jr, t);
+	for (let n of Yr) e[n] !== void 0 && (t[n] = +!!e[n]);
 	return ce(t);
 }
-function Zr(e) {
+function Qr(e) {
 	return {
 		async create(t) {
 			let n = {
@@ -4320,7 +4376,7 @@ function Zr(e) {
 				created_at: (/* @__PURE__ */ new Date()).toISOString(),
 				updated_at: (/* @__PURE__ */ new Date()).toISOString(),
 				...t
-			}, r = Xr(n);
+			}, r = Zr(n);
 			try {
 				await e.insert(O).values(r);
 			} catch (e) {
@@ -4331,15 +4387,15 @@ function Zr(e) {
 		},
 		async get(t) {
 			let n = await e.select().from(O).where(a(O.id, t)).get();
-			return n ? Yr(n) : null;
+			return n ? Xr(n) : null;
 		},
 		async list(t) {
-			let { page: a = 0, per_page: o = 50, include_totals: s = !1, sort: c, q: l } = t || {}, u = l ? Ct(O, l, ["id", "friendly_name"]) : void 0, d = e.select().from(O).$dynamic();
+			let { page: a = 0, per_page: o = 50, include_totals: s = !1, sort: c, q: l } = t || {}, u = l ? wt(O, l, ["id", "friendly_name"]) : void 0, d = e.select().from(O).$dynamic();
 			if (u && (d = d.where(u)), c?.sort_by) {
 				let e = O[c.sort_by];
 				e && (d = d.orderBy(c.sort_order === "desc" ? i(e) : n(e)));
 			}
-			let f = (await d.offset(a * o).limit(o)).map(Yr);
+			let f = (await d.offset(a * o).limit(o)).map(Xr);
 			if (!s) return { tenants: f };
 			let p = e.select({ count: r() }).from(O).$dynamic();
 			u && (p = p.where(u));
@@ -4354,7 +4410,7 @@ function Zr(e) {
 			};
 		},
 		async update(t, n) {
-			let r = Xr({
+			let r = Zr({
 				...n,
 				id: t,
 				updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -4368,62 +4424,62 @@ function Zr(e) {
 }
 //#endregion
 //#region src/adapters/themes.ts
-var Qr = [
+var $r = [
 	"colors",
 	"borders",
 	"fonts",
 	"page_background",
 	"widget"
 ];
-function $r(e) {
-	let { tenant_id: t, ...n } = e, r = bt(n, Qr);
+function ei(e) {
+	let { tenant_id: t, ...n } = e, r = xt(n, $r);
 	return r.borders && (r.borders.show_widget_shadow = !!r.borders.show_widget_shadow), r.fonts && (r.fonts.body_text_bold = !!r.fonts.body_text_bold, r.fonts.buttons_text_bold = !!r.fonts.buttons_text_bold, r.fonts.input_labels_bold = !!r.fonts.input_labels_bold, r.fonts.links_bold = !!r.fonts.links_bold, r.fonts.subtitle_bold = !!r.fonts.subtitle_bold, r.fonts.title_bold = !!r.fonts.title_bold), D(r);
 }
-function ei(e) {
+function ti(e) {
 	return {
 		async create(t, n, r, i) {
 			let a = i?.importMetadata, o = (/* @__PURE__ */ new Date()).toISOString(), s = a?.id || r || b(), c = {
-				...yt(n),
+				...bt(n),
 				tenant_id: t,
 				themeId: s,
 				created_at: a?.created_at ?? o,
 				updated_at: a?.updated_at ?? o
 			};
-			return await e.insert(tt).values(c), $r({
+			return await e.insert(nt).values(c), ei({
 				...c,
 				tenant_id: t
 			});
 		},
 		async get(n, r) {
-			let i = await e.select().from(tt).where(t(a(tt.tenant_id, n), a(tt.themeId, r))).get();
-			return i ? $r(i) : null;
+			let i = await e.select().from(nt).where(t(a(nt.tenant_id, n), a(nt.themeId, r))).get();
+			return i ? ei(i) : null;
 		},
 		async update(n, r, i) {
-			let o = yt(i);
-			return o.updated_at = (/* @__PURE__ */ new Date()).toISOString(), await e.update(tt).set(o).where(t(a(tt.tenant_id, n), a(tt.themeId, r))), !0;
+			let o = bt(i);
+			return o.updated_at = (/* @__PURE__ */ new Date()).toISOString(), await e.update(nt).set(o).where(t(a(nt.tenant_id, n), a(nt.themeId, r))), !0;
 		},
 		async remove(n, r) {
-			return (await e.delete(tt).where(t(a(tt.tenant_id, n), a(tt.themeId, r))).returning()).length > 0;
+			return (await e.delete(nt).where(t(a(nt.tenant_id, n), a(nt.themeId, r))).returning()).length > 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/universalLoginTemplates.ts
-function ti(e) {
+function ni(e) {
 	return {
 		async get(t) {
-			let n = await e.select({ body: et.body }).from(et).where(a(et.tenant_id, t)).get();
+			let n = await e.select({ body: tt.body }).from(tt).where(a(tt.tenant_id, t)).get();
 			return n ? { body: n.body } : null;
 		},
 		async set(t, n) {
 			let r = Date.now();
-			await e.insert(et).values({
+			await e.insert(tt).values({
 				tenant_id: t,
 				body: n.body,
 				created_at_ts: r,
 				updated_at_ts: r
 			}).onConflictDoUpdate({
-				target: et.tenant_id,
+				target: tt.tenant_id,
 				set: {
 					body: n.body,
 					updated_at_ts: r
@@ -4431,20 +4487,20 @@ function ti(e) {
 			});
 		},
 		async delete(t) {
-			await e.delete(et).where(a(et.tenant_id, t));
+			await e.delete(tt).where(a(tt.tenant_id, t));
 		}
 	};
 }
 //#endregion
 //#region src/adapters/userActivity.ts
-function ni(e) {
+function ri(e) {
 	let t = {};
 	return e.last_login !== void 0 && (t.last_login = e.last_login), e.last_ip !== void 0 && (t.last_ip = e.last_ip), e.login_count !== void 0 && (t.login_count = e.login_count), e.failed_logins !== void 0 && (t.failed_logins = JSON.stringify(e.failed_logins)), e.last_password_reset !== void 0 && (t.last_password_reset = e.last_password_reset), t;
 }
-function ri(e) {
+function ii(e) {
 	return {
 		async get(n, r) {
-			let i = await e.select().from(Ue).where(t(a(Ue.tenant_id, n), a(Ue.user_id, r))).get();
+			let i = await e.select().from(We).where(t(a(We.tenant_id, n), a(We.user_id, r))).get();
 			return i ? {
 				user_id: i.user_id,
 				last_login: i.last_login ?? void 0,
@@ -4455,7 +4511,7 @@ function ri(e) {
 			} : null;
 		},
 		async upsert(t, n, r) {
-			let i = ni(r), a = e.insert(Ue).values({
+			let i = ri(r), a = e.insert(We).values({
 				tenant_id: t,
 				user_id: n,
 				login_count: 0,
@@ -4466,7 +4522,7 @@ function ri(e) {
 				return;
 			}
 			await a.onConflictDoUpdate({
-				target: [Ue.tenant_id, Ue.user_id],
+				target: [We.tenant_id, We.user_id],
 				set: i
 			});
 		}
@@ -4474,13 +4530,13 @@ function ri(e) {
 }
 //#endregion
 //#region src/adapters/outbox.ts
-function ii(e) {
+function ai(e) {
 	return {
 		...e,
 		payload: X(e.payload, {})
 	};
 }
-function ai(e, t, n, r) {
+function oi(e, t, n, r) {
 	return e.insert(q).values({
 		id: t,
 		tenant_id: n,
@@ -4501,7 +4557,7 @@ function ai(e, t, n, r) {
 		claim_expires_at: null
 	});
 }
-function oi(e) {
+function si(e) {
 	return {
 		...X(e.payload, {}),
 		id: e.id,
@@ -4514,18 +4570,18 @@ function oi(e) {
 		final_error: e.final_error
 	};
 }
-function si(e) {
+function ci(e) {
 	return {
 		async create(t, n) {
 			let r = b();
-			return await ai(e, r, t, n), r;
+			return await oi(e, r, t, n), r;
 		},
 		async getByIds(t) {
-			return t.length === 0 ? [] : (await e.select().from(q).where(l(q.id, t)).all()).map(ii);
+			return t.length === 0 ? [] : (await e.select().from(q).where(l(q.id, t)).all()).map(ai);
 		},
 		async getUnprocessed(n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString();
-			return (await e.select().from(q).where(t(f(q.processed_at), v(f(q.next_retry_at), h(q.next_retry_at, r)), v(f(q.claimed_by), h(q.claim_expires_at, r)))).orderBy(q.created_at, q.id).limit(n).all()).map(ii);
+			return (await e.select().from(q).where(t(f(q.processed_at), v(f(q.next_retry_at), h(q.next_retry_at, r)), v(f(q.claimed_by), h(q.claim_expires_at, r)))).orderBy(q.created_at, q.id).limit(n).all()).map(ai);
 		},
 		async claimEvents(n, r, i) {
 			if (n.length === 0) return [];
@@ -4560,12 +4616,12 @@ function si(e) {
 		},
 		async listFailed(o, s = {}) {
 			let { page: c = 0, per_page: l = 50, include_totals: u = !1 } = s;
-			if (wt(s)) {
+			if (Tt(s)) {
 				let n = {
 					sortColumn: q.dead_lettered_at,
 					idColumn: q.id,
 					sortOrder: "desc"
-				}, r = Z(s), { rows: i, next: c } = Dt(await e.select().from(q).where(t(a(q.tenant_id, o), d(q.dead_lettered_at), Et(s, n))).orderBy(...Tt(n)).limit(r + 1).all(), r, "dead_lettered_at"), l = i.map(oi);
+				}, r = Z(s), { rows: i, next: c } = Ot(await e.select().from(q).where(t(a(q.tenant_id, o), d(q.dead_lettered_at), Dt(s, n))).orderBy(...Et(n)).limit(r + 1).all(), r, "dead_lettered_at"), l = i.map(si);
 				return {
 					events: l,
 					start: 0,
@@ -4574,7 +4630,7 @@ function si(e) {
 					next: c
 				};
 			}
-			let f = (await e.select().from(q).where(t(a(q.tenant_id, o), d(q.dead_lettered_at))).orderBy(i(q.dead_lettered_at), n(q.id)).offset(c * l).limit(l).all()).map(oi), p = f.length;
+			let f = (await e.select().from(q).where(t(a(q.tenant_id, o), d(q.dead_lettered_at))).orderBy(i(q.dead_lettered_at), n(q.id)).offset(c * l).limit(l).all()).map(si), p = f.length;
 			if (u) {
 				let [n] = await e.select({ total: r() }).from(q).where(t(a(q.tenant_id, o), d(q.dead_lettered_at)));
 				p = Number(n?.total ?? f.length);
@@ -4605,10 +4661,10 @@ function si(e) {
 }
 //#endregion
 //#region src/adapters/users.ts
-function ci(e, t, n) {
-	return (n?.outboxEvents ?? []).map((n) => ai(e, n.id, t, n));
+function li(e, t, n) {
+	return (n?.outboxEvents ?? []).map((n) => oi(e, n.id, t, n));
 }
-var li = [
+var ui = [
 	"user_id",
 	"email",
 	"email_verified",
@@ -4630,23 +4686,23 @@ var li = [
 	"login_count",
 	"created_at",
 	"updated_at"
-], ui = [
+], di = [
 	"email",
 	"name",
 	"phone_number",
 	"user_id"
-], di = new Set([
+], fi = new Set([
 	"last_login",
 	"last_ip",
 	"login_count"
-]), fi = o(A), pi = o(Ue), mi = Object.fromEntries(li.map((e) => [e, e === "login_count" ? {
-	coalesce: Ue.login_count,
+]), pi = o(A), mi = o(We), hi = Object.fromEntries(ui.map((e) => [e, e === "login_count" ? {
+	coalesce: We.login_count,
 	defaultValue: 0
-} : di.has(e) ? pi[e] : fi[e]]));
-function hi() {
-	return t(a(Ue.tenant_id, A.tenant_id), a(Ue.user_id, A.user_id));
+} : fi.has(e) ? mi[e] : pi[e]]));
+function gi() {
+	return t(a(We.tenant_id, A.tenant_id), a(We.user_id, A.user_id));
 }
-function gi(e, t) {
+function _i(e, t) {
 	return {
 		...e,
 		last_login: t?.last_login,
@@ -4654,7 +4710,7 @@ function gi(e, t) {
 		login_count: t?.login_count ?? 0
 	};
 }
-function _i(e, t) {
+function vi(e, t) {
 	let n = {
 		connection: e.connection,
 		provider: e.provider,
@@ -4667,8 +4723,8 @@ function _i(e, t) {
 		...typeof e.profileData == "string" ? X(e.profileData, {}) : {}
 	}, n;
 }
-function vi(e, t = []) {
-	let { tenant_id: n, app_metadata: r, user_metadata: i, address: a, email_verified: o, phone_verified: s, is_social: c, blocked: l, linked_to: u, profileData: d, ...f } = e, p = _i(e, !0), m = t.map((e) => _i(e, !1));
+function yi(e, t = []) {
+	let { tenant_id: n, app_metadata: r, user_metadata: i, address: a, email_verified: o, phone_verified: s, is_social: c, blocked: l, linked_to: u, profileData: d, ...f } = e, p = vi(e, !0), m = t.map((e) => vi(e, !1));
 	return D({
 		...f,
 		email: e.email || "",
@@ -4682,7 +4738,7 @@ function vi(e, t = []) {
 		identities: [p, ...m]
 	});
 }
-function yi(e) {
+function bi(e) {
 	let o = async (t, n, r) => {
 		let i = (/* @__PURE__ */ new Date()).toISOString(), a = {
 			user_id: n.user_id,
@@ -4720,7 +4776,7 @@ function yi(e) {
 		}, o = n.password ? b() : void 0, s = n.last_login !== void 0 || n.last_ip !== void 0 || n.login_count !== void 0;
 		try {
 			let c = [e.insert(A).values(a)];
-			s && c.push(e.insert(Ue).values({
+			s && c.push(e.insert(We).values({
 				tenant_id: t,
 				user_id: n.user_id,
 				last_login: n.last_login,
@@ -4736,12 +4792,12 @@ function yi(e) {
 				created_at: i,
 				updated_at: i
 			}));
-			for (let n of ci(e, t, r)) c.push(n);
-			c.length > 1 ? await Pt(e, c) : await e.insert(A).values(a);
+			for (let n of li(e, t, r)) c.push(n);
+			c.length > 1 ? await Ft(e, c) : await e.insert(A).values(a);
 		} catch (e) {
 			throw e?.message?.includes("UNIQUE constraint") || e?.message?.includes("AlreadyExists") ? new Re(409, { message: "User already exists" }) : (console.error("User upsert failed:", e?.code, e?.message), new Re(500, { message: "Internal server error" }));
 		}
-		return vi({
+		return yi({
 			...a,
 			last_login: n.last_login,
 			last_ip: n.last_ip,
@@ -4752,10 +4808,10 @@ function yi(e) {
 		create: o,
 		rawCreate: o,
 		async get(n, r) {
-			let i = await e.select().from(A).leftJoin(Ue, hi()).where(t(a(A.tenant_id, n), a(A.user_id, r))).get();
+			let i = await e.select().from(A).leftJoin(We, gi()).where(t(a(A.tenant_id, n), a(A.user_id, r))).get();
 			if (!i) return null;
 			let o = await e.select().from(A).where(t(a(A.tenant_id, n), a(A.linked_to, r))).all();
-			return vi(gi(i.users, i.user_activity), o);
+			return yi(_i(i.users, i.user_activity), o);
 		},
 		async update(n, r, i, o) {
 			let s = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
@@ -4782,8 +4838,8 @@ function yi(e) {
 				"zoneinfo"
 			]) i[e] !== void 0 && (s[e] = i[e]);
 			i.email_verified !== void 0 && (s.email_verified = i.email_verified), i.phone_verified !== void 0 && (s.phone_verified = i.phone_verified), i.is_social !== void 0 && (s.is_social = i.is_social), i.blocked !== void 0 && (s.blocked = i.blocked), i.app_metadata !== void 0 && (s.app_metadata = JSON.stringify(i.app_metadata)), i.user_metadata !== void 0 && (s.user_metadata = JSON.stringify(i.user_metadata)), i.address !== void 0 && (s.address = JSON.stringify(i.address)), i.profileData !== void 0 && (s.profileData = JSON.stringify(i.profileData));
-			let c = e.update(A).set(s).where(t(a(A.tenant_id, n), a(A.user_id, r))).returning(), l = ci(e, n, o), u;
-			return u = l.length > 0 ? (await Pt(e, [c, ...l]))[0] : await c, !Array.isArray(u) || u.length === 0 ? !1 : ((i.last_login !== void 0 || i.last_ip !== void 0 || i.login_count !== void 0) && await ri(e).upsert(n, r, {
+			let c = e.update(A).set(s).where(t(a(A.tenant_id, n), a(A.user_id, r))).returning(), l = li(e, n, o), u;
+			return u = l.length > 0 ? (await Ft(e, [c, ...l]))[0] : await c, !Array.isArray(u) || u.length === 0 ? !1 : ((i.last_login !== void 0 || i.last_ip !== void 0 || i.login_count !== void 0) && await ii(e).upsert(n, r, {
 				last_login: i.last_login,
 				last_ip: i.last_ip,
 				login_count: i.login_count
@@ -4792,24 +4848,24 @@ function yi(e) {
 		async list(o, s) {
 			let { page: c = 0, per_page: u = 50, include_totals: d = !1, sort: p, q: m } = s || {}, h = [a(A.tenant_id, o), f(A.linked_to)];
 			if (m) {
-				let e = Ee(m, li);
+				let e = Ee(m, ui);
 				if (e) {
-					let t = Ct(mi, e, ui);
+					let t = wt(hi, e, di);
 					t && h.push(t);
 				}
 			}
 			let g = t(...h), _ = async (n) => {
 				let r = n.map((e) => e.user_id), i = r.length > 0 ? await e.select().from(A).where(t(a(A.tenant_id, o), l(A.linked_to, r))) : [];
-				return n.map((e) => vi(e, i.filter((t) => t.linked_to === e.user_id)));
+				return n.map((e) => yi(e, i.filter((t) => t.linked_to === e.user_id)));
 			};
-			if (wt(s)) {
+			if (Tt(s)) {
 				if (p?.sort_by && p.sort_by !== "created_at") throw new Re(400, { message: `Sorting by ${p.sort_by} is not supported with checkpoint pagination (from/take); only created_at is` });
 				let n = p?.sort_order === "asc" ? "asc" : "desc", r = {
 					sortColumn: A.created_at,
 					idColumn: A.user_id,
 					sortOrder: n,
 					sortKey: `created_at:${n}`
-				}, i = Z(s), a = Et(s, r), { rows: o, next: c } = Dt((await e.select().from(A).leftJoin(Ue, hi()).where(a ? t(g, a) : g).orderBy(...Tt(r)).limit(i + 1)).map((e) => gi(e.users, e.user_activity)), i, "created_at", "user_id", r.sortKey), l = await _(o);
+				}, i = Z(s), a = Dt(s, r), { rows: o, next: c } = Ot((await e.select().from(A).leftJoin(We, gi()).where(a ? t(g, a) : g).orderBy(...Et(r)).limit(i + 1)).map((e) => _i(e.users, e.user_activity)), i, "created_at", "user_id", r.sortKey), l = await _(o);
 				return {
 					users: l,
 					start: 0,
@@ -4818,15 +4874,15 @@ function yi(e) {
 					next: c
 				};
 			}
-			let v = e.select().from(A).leftJoin(Ue, hi()).where(g).$dynamic();
+			let v = e.select().from(A).leftJoin(We, gi()).where(g).$dynamic();
 			if (p?.sort_by) {
-				let e = mi[p.sort_by];
+				let e = hi[p.sort_by];
 				if (e) {
-					let t = xt(e) ? St(e) : e;
+					let t = St(e) ? Ct(e) : e;
 					v = v.orderBy(p.sort_order === "desc" ? i(t) : n(t));
 				}
 			}
-			let [y, ee] = await Promise.all([v.offset(c * u).limit(u), d ? e.select({ count: r() }).from(A).leftJoin(Ue, hi()).where(g) : void 0]), b = await _(y.map((e) => gi(e.users, e.user_activity)));
+			let [y, ee] = await Promise.all([v.offset(c * u).limit(u), d ? e.select({ count: r() }).from(A).leftJoin(We, gi()).where(g) : void 0]), b = await _(y.map((e) => _i(e.users, e.user_activity)));
 			if (!ee) return { users: b };
 			let [te] = ee;
 			return {
@@ -4838,14 +4894,14 @@ function yi(e) {
 		},
 		async remove(n, r, i) {
 			let o = await e.select({ user_id: A.user_id }).from(A).where(t(a(A.tenant_id, n), v(a(A.user_id, r), a(A.linked_to, r)))), s = o.some((e) => e.user_id === r), c = o.map((e) => e.user_id).filter((e) => e !== r), u = [r, ...c], d = [
-				e.delete(ft).where(t(a(ft.tenant_id, n), l(ft.user_id, u))),
+				e.delete(pt).where(t(a(pt.tenant_id, n), l(pt.user_id, u))),
 				e.delete(j).where(t(a(j.tenant_id, n), l(j.user_id, u))),
-				e.delete(Ue).where(t(a(Ue.tenant_id, n), l(Ue.user_id, u))),
+				e.delete(We).where(t(a(We.tenant_id, n), l(We.user_id, u))),
 				e.delete(A).where(t(a(A.tenant_id, n), l(A.user_id, c))),
 				e.delete(A).where(t(a(A.tenant_id, n), a(A.user_id, r))).returning()
 			], f = d.length - 1;
-			if (s) for (let t of ci(e, n, i)) d.push(t);
-			let p = (await Pt(e, d))[f];
+			if (s) for (let t of li(e, n, i)) d.push(t);
+			let p = (await Ft(e, d))[f];
 			return Array.isArray(p) && p.length > 0;
 		},
 		async unlink(n, r, i, o) {
@@ -4856,7 +4912,7 @@ function yi(e) {
 }
 //#endregion
 //#region src/adapters/userRoles.ts
-function bi(e) {
+function xi(e) {
 	return {
 		async create(t, n, r, i) {
 			try {
@@ -4895,7 +4951,7 @@ function bi(e) {
 				sortColumn: H.id,
 				idColumn: H.id,
 				sortOrder: "asc"
-			}, l = Et(i, c), u = Z(i), { rows: d, next: f } = Dt((await e.selectDistinct({ role: H }).from(W).innerJoin(H, t(a(H.tenant_id, W.tenant_id), a(H.id, W.role_id))).where(t(...s, l)).orderBy(...Tt(c)).limit(u + 1).all()).map((e) => e.role), u, "id", "id");
+			}, l = Dt(i, c), u = Z(i), { rows: d, next: f } = Ot((await e.selectDistinct({ role: H }).from(W).innerJoin(H, t(a(H.tenant_id, W.tenant_id), a(H.id, W.role_id))).where(t(...s, l)).orderBy(...Et(c)).limit(u + 1).all()).map((e) => e.role), u, "id", "id");
 			return {
 				roles: d.map((e) => {
 					let { tenant_id: t, is_system: n, metadata: r, ...i } = e;
@@ -4910,12 +4966,12 @@ function bi(e) {
 		},
 		async listUsers(r, i, o) {
 			let s = t(a(W.tenant_id, r), a(W.role_id, i));
-			if (wt(o)) {
+			if (Tt(o)) {
 				let n = {
 					sortColumn: W.user_id,
 					idColumn: W.user_id,
 					sortOrder: "asc"
-				}, r = Et(o, n), i = Z(o), { rows: a, next: c } = Dt(await e.selectDistinct({ user_id: W.user_id }).from(W).where(r ? t(s, r) : s).orderBy(...Tt(n)).limit(i + 1).all(), i, "user_id", "user_id");
+				}, r = Dt(o, n), i = Z(o), { rows: a, next: c } = Ot(await e.selectDistinct({ user_id: W.user_id }).from(W).where(r ? t(s, r) : s).orderBy(...Et(n)).limit(i + 1).all(), i, "user_id", "user_id");
 				return {
 					userIds: a.map((e) => e.user_id),
 					start: 0,
@@ -4939,7 +4995,7 @@ function bi(e) {
 }
 //#endregion
 //#region src/adapters/userOrganizations.ts
-function xi(e) {
+function Si(e) {
 	return {
 		async create(t, n) {
 			let r = (/* @__PURE__ */ new Date()).toISOString(), i = {
@@ -4971,19 +5027,19 @@ function xi(e) {
 		async list(n, o) {
 			let { include_totals: s = !1, q: c } = o || {}, l = a(V.tenant_id, n), u = l;
 			if (c) {
-				let e = Ct(V, c, ["user_id", "organization_id"]);
+				let e = wt(V, c, ["user_id", "organization_id"]);
 				e && (u = t(l, e));
 			}
 			let d = (e) => {
 				let { tenant_id: t, ...n } = e;
 				return n;
 			};
-			if (wt(o)) {
+			if (Tt(o)) {
 				let n = {
 					sortColumn: V.created_at,
 					idColumn: V.id,
 					sortOrder: "desc"
-				}, r = Et(o, n), i = Z(o), { rows: a, next: s } = Dt((await e.select().from(V).where(r ? t(u, r) : u).orderBy(...Tt(n)).limit(i + 1)).map(d), i, "created_at");
+				}, r = Dt(o, n), i = Z(o), { rows: a, next: s } = Ot((await e.select().from(V).where(r ? t(u, r) : u).orderBy(...Et(n)).limit(i + 1)).map(d), i, "created_at");
 				return {
 					userOrganizations: a,
 					start: 0,
@@ -5004,12 +5060,12 @@ function xi(e) {
 		},
 		async listUserOrganizations(n, i, o) {
 			let { page: s = 0, per_page: c = 50, include_totals: l = !1 } = o || {};
-			if (wt(o)) {
+			if (Tt(o)) {
 				let r = {
 					sortColumn: V.created_at,
 					idColumn: V.id,
 					sortOrder: "desc"
-				}, s = Z(o), c = Et(o, r), { rows: l, next: u } = Dt(await e.select().from(V).where(t(a(V.tenant_id, n), a(V.user_id, i), c)).orderBy(...Tt(r)).limit(s + 1).all(), s, "created_at"), d = (await Promise.all(l.map((r) => e.select().from(B).where(t(a(B.tenant_id, n), a(B.id, r.organization_id))).get()))).filter(Boolean).map((e) => {
+				}, s = Z(o), c = Dt(o, r), { rows: l, next: u } = Ot(await e.select().from(V).where(t(a(V.tenant_id, n), a(V.user_id, i), c)).orderBy(...Et(r)).limit(s + 1).all(), s, "created_at"), d = (await Promise.all(l.map((r) => e.select().from(B).where(t(a(B.tenant_id, n), a(B.id, r.organization_id))).get()))).filter(Boolean).map((e) => {
 					let { tenant_id: t, branding: n, metadata: r, enabled_connections: i, token_quota: a, ...o } = e;
 					return D({
 						...o,
@@ -5055,19 +5111,19 @@ function xi(e) {
 }
 //#endregion
 //#region src/adapters/stats.ts
-var Si = ["s"], Ci = ["pwd_leak"];
-function wi(e) {
+var Ci = ["s"], wi = ["pwd_leak"];
+function Ti(e) {
 	return /^\d{8}$/.test(e) ? `${e.slice(0, 4)}-${e.slice(4, 6)}-${e.slice(6, 8)}` : e;
 }
-function Ti(e) {
+function Ei(e) {
 	return {
 		async getDaily(n, r) {
-			let i = /* @__PURE__ */ new Date(), o = r?.from ? wi(r.from) : (/* @__PURE__ */ new Date(i.getTime() - 720 * 60 * 60 * 1e3)).toISOString().split("T")[0], s = r?.to ? wi(r.to) : i.toISOString().split("T")[0];
+			let i = /* @__PURE__ */ new Date(), o = r?.from ? Ti(r.from) : (/* @__PURE__ */ new Date(i.getTime() - 720 * 60 * 60 * 1e3)).toISOString().split("T")[0], s = r?.to ? Ti(r.to) : i.toISOString().split("T")[0];
 			return (await e.select({
 				date: y`substr(${K.date}, 1, 10)`.as("date"),
-				logins: y`SUM(CASE WHEN ${K.type} IN (${y.join(Si.map((e) => y`${e}`), y`, `)}) THEN 1 ELSE 0 END)`.as("logins"),
+				logins: y`SUM(CASE WHEN ${K.type} IN (${y.join(Ci.map((e) => y`${e}`), y`, `)}) THEN 1 ELSE 0 END)`.as("logins"),
 				signups: y`SUM(CASE WHEN ${K.type} = 'ss' THEN 1 ELSE 0 END)`.as("signups"),
-				leaked_passwords: y`SUM(CASE WHEN ${K.type} IN (${y.join(Ci.map((e) => y`${e}`), y`, `)}) THEN 1 ELSE 0 END)`.as("leaked_passwords")
+				leaked_passwords: y`SUM(CASE WHEN ${K.type} IN (${y.join(wi.map((e) => y`${e}`), y`, `)}) THEN 1 ELSE 0 END)`.as("leaked_passwords")
 			}).from(K).where(t(a(K.tenant_id, n), c(K.date, o), h(K.date, `${s}T23:59:59.999Z`))).groupBy(y`substr(${K.date}, 1, 10)`).orderBy(y`substr(${K.date}, 1, 10)`).all()).map((e) => ({
 				date: e.date,
 				logins: Number(e.logins) || 0,
@@ -5078,14 +5134,14 @@ function Ti(e) {
 			}));
 		},
 		async getActiveUsers(n) {
-			let r = (/* @__PURE__ */ new Date(Date.now() - 720 * 60 * 60 * 1e3)).toISOString(), [i] = await e.select({ count: y`COUNT(DISTINCT ${K.user_id})`.as("count") }).from(K).where(t(a(K.tenant_id, n), c(K.date, r), y`${K.type} IN (${y.join(Si.map((e) => y`${e}`), y`, `)})`));
+			let r = (/* @__PURE__ */ new Date(Date.now() - 720 * 60 * 60 * 1e3)).toISOString(), [i] = await e.select({ count: y`COUNT(DISTINCT ${K.user_id})`.as("count") }).from(K).where(t(a(K.tenant_id, n), c(K.date, r), y`${K.type} IN (${y.join(Ci.map((e) => y`${e}`), y`, `)})`));
 			return Number(i?.count) || 0;
 		}
 	};
 }
 //#endregion
 //#region src/adapters/analytics.ts
-var Ei = {
+var Di = {
 	"active-users": ["s", "seacft"],
 	logins: [
 		"s",
@@ -5115,7 +5171,7 @@ var Ei = {
 		"fvr"
 	],
 	"codes-sent": ["cls", "cs"]
-}, Di = {
+}, Oi = {
 	"active-users": {
 		alias: "active_users",
 		type: "UInt64",
@@ -5172,7 +5228,7 @@ var Ei = {
 		agg: "count"
 	}
 };
-function Oi(e) {
+function ki(e) {
 	switch (e) {
 		case "hour": return y`substr(${K.date}, 1, 13)`;
 		case "month": return y`substr(${K.date}, 1, 7)`;
@@ -5181,10 +5237,10 @@ function Oi(e) {
 		default: throw Error(`Unsupported interval '${e}' for SQL analytics adapter`);
 	}
 }
-function ki(e) {
+function Ai(e) {
 	return `"${e.replace(/"/g, "\"\"")}"`;
 }
-function Ai(e) {
+function ji(e) {
 	switch (e) {
 		case "connection": return K.connection;
 		case "client_id": return K.client_id;
@@ -5193,10 +5249,10 @@ function Ai(e) {
 		case "time": throw Error("time dimension handled separately");
 	}
 }
-function ji(e) {
+function Mi(e) {
 	return {
 		async query(n, r, i) {
-			let o = Date.now(), s = Ei[r], u = Di[r], d = [
+			let o = Date.now(), s = Di[r], u = Oi[r], d = [
 				a(K.tenant_id, n),
 				c(K.date, i.from),
 				m(K.date, i.to),
@@ -5205,13 +5261,13 @@ function ji(e) {
 			i.filters.connection?.length && d.push(l(K.connection, i.filters.connection)), i.filters.client_id?.length && d.push(l(K.client_id, i.filters.client_id)), i.filters.user_type?.length && d.push(l(K.strategy_type, i.filters.user_type)), i.filters.user_id?.length && d.push(l(K.user_id, i.filters.user_id));
 			let f = {}, p = [], h = [];
 			for (let e of i.group_by) if (e === "time") {
-				let e = Oi(i.interval);
+				let e = ki(i.interval);
 				f.time = e, p.push(e), h.push({
 					name: "time",
 					type: i.interval === "hour" ? "DateTime" : "Date"
 				});
 			} else {
-				let t = Ai(e);
+				let t = ji(e);
 				f[e] = t, p.push(t), h.push({
 					name: e,
 					type: "String"
@@ -5227,9 +5283,9 @@ function ji(e) {
 			if (i.order_by) {
 				let e = i.order_by.startsWith("-"), t = e ? i.order_by.slice(1) : i.order_by;
 				if (!_.has(t)) throw Error(`Invalid order_by column '${t}' for analytics query`);
-				let n = ki(t);
+				let n = Ai(t);
 				g = g.orderBy(y.raw(`${n} ${e ? "DESC" : "ASC"}`));
-			} else g = i.group_by[0] === "time" ? g.orderBy(y.raw(`${ki("time")} ASC`)) : g.orderBy(y.raw(`${ki(u.alias)} DESC`));
+			} else g = i.group_by[0] === "time" ? g.orderBy(y.raw(`${Ai("time")} ASC`)) : g.orderBy(y.raw(`${Ai(u.alias)} DESC`));
 			g = g.limit(i.limit).offset(i.offset);
 			let v = (await g.all()).map((e) => {
 				let t = {};
@@ -5278,10 +5334,10 @@ function ji(e) {
 }
 //#endregion
 //#region src/adapters/cleanup.ts
-var Mi = 10080 * 60 * 1e3;
-function Ni(e) {
+var Ni = 10080 * 60 * 1e3;
+function Pi(e) {
 	return async (n) => {
-		let r = Date.now() - Mi;
+		let r = Date.now() - Ni;
 		try {
 			let i = [v(m(N.expires_at_ts, r), m(N.idle_expires_at_ts, r))];
 			n?.tenant_id && i.push(a(N.tenant_id, n.tenant_id)), await e.delete(N).where(t(...i)), i = [v(m(M.expires_at_ts, r), m(M.idle_expires_at_ts, r))], n?.tenant_id && i.push(a(M.tenant_id, n.tenant_id)), n?.user_id && i.push(a(M.user_id, n.user_id)), await e.delete(M).where(t(...i)), i = [m(P.expires_at_ts, r)], n?.tenant_id && i.push(a(P.tenant_id, n.tenant_id)), await e.delete(P).where(t(...i));
@@ -5316,7 +5372,7 @@ var Q = w("tenant_operations", {
 	x("tenant_operations_tenant_id_created_at_idx").on(e.tenant_id, e.created_at),
 	x("tenant_operations_rollout_id_idx").on(e.rollout_id),
 	x("tenant_operations_status_idx").on(e.status)
-]), Pi = w("tenant_operation_events", {
+]), Fi = w("tenant_operation_events", {
 	id: T("id", { length: 255 }).primaryKey(),
 	operation_id: T("operation_id", { length: 255 }).notNull(),
 	step: T("step", { length: 255 }).notNull(),
@@ -5347,7 +5403,7 @@ var Q = w("tenant_operations", {
 		name: "tenant_operation_rows_operation_id_constraint"
 	}).onDelete("cascade"),
 	x("tenant_operation_rows_operation_id_status_idx").on(e.operation_id, e.status)
-]), Fi = w("rollouts", {
+]), Ii = w("rollouts", {
 	id: T("id", { length: 255 }).primaryKey(),
 	kind: T("kind", { length: 32 }).notNull(),
 	status: T("status", { length: 32 }).notNull(),
@@ -5357,13 +5413,15 @@ var Q = w("tenant_operations", {
 	canary_tenant_ids: T("canary_tenant_ids"),
 	filter: T("filter"),
 	initiated_by: T("initiated_by", { length: 255 }),
+	config: T("config"),
+	paused_reason: T("paused_reason"),
 	created_at: T("created_at", { length: 35 }).notNull(),
 	updated_at: T("updated_at", { length: 35 }).notNull(),
 	finished_at: T("finished_at", { length: 35 })
 });
 //#endregion
 //#region src/adapters/tenantOperations.ts
-function Ii(e) {
+function Li(e) {
 	if (!e) return null;
 	try {
 		return JSON.parse(e);
@@ -5371,7 +5429,7 @@ function Ii(e) {
 		return null;
 	}
 }
-function Li(e) {
+function Ri(e) {
 	return Fe.parse({
 		id: e.id,
 		tenant_id: e.tenant_id,
@@ -5385,8 +5443,8 @@ function Li(e) {
 		target_database_version: e.target_database_version,
 		error: e.error,
 		initiated_by: e.initiated_by,
-		input: Ii(e.input),
-		result: Ii(e.result),
+		input: Li(e.input),
+		result: Li(e.result),
 		claimed_by: e.claimed_by,
 		claim_expires_at: e.claim_expires_at,
 		created_at: e.created_at,
@@ -5394,7 +5452,7 @@ function Li(e) {
 		finished_at: e.finished_at
 	});
 }
-function Ri(e) {
+function zi(e) {
 	return {
 		async create(t) {
 			let n = Me.parse(t), r = (/* @__PURE__ */ new Date()).toISOString(), i = {
@@ -5425,7 +5483,7 @@ function Ri(e) {
 		},
 		async get(t) {
 			let n = await e.select().from(Q).where(a(Q.id, t)).limit(1);
-			return n[0] ? Li(n[0]) : null;
+			return n[0] ? Ri(n[0]) : null;
 		},
 		async list(n = {}) {
 			let r = n.page ?? 0, o = n.per_page ?? 50, s = [];
@@ -5436,7 +5494,7 @@ function Ri(e) {
 			n.engine !== void 0 && s.push(a(Q.engine, n.engine)), n.updated_before !== void 0 && s.push(m(Q.updated_at, n.updated_before));
 			let c = await e.select().from(Q).where(s.length ? t(...s) : void 0).orderBy(i(Q.created_at), i(Q.id)).offset(r * o).limit(o);
 			return {
-				operations: c.map(Li),
+				operations: c.map(Ri),
 				start: r * o,
 				limit: o,
 				length: c.length
@@ -5462,7 +5520,7 @@ function Ri(e) {
 		},
 		async listResumable(r) {
 			let i = (/* @__PURE__ */ new Date()).toISOString();
-			return (await e.select().from(Q).where(t(l(Q.status, ["pending", "running"]), a(Q.kind, r.kind), v(f(Q.claimed_by), h(Q.claim_expires_at, i)))).orderBy(n(Q.created_at), n(Q.id)).limit(r.limit)).map(Li);
+			return (await e.select().from(Q).where(t(l(Q.status, ["pending", "running"]), a(Q.kind, r.kind), v(f(Q.claimed_by), h(Q.claim_expires_at, i)))).orderBy(n(Q.created_at), n(Q.id)).limit(r.limit)).map(Ri);
 		},
 		async remove(t) {
 			return (await e.select({ id: Q.id }).from(Q).where(a(Q.id, t)).limit(1)).length === 0 ? !1 : (await e.delete(Q).where(a(Q.id, t)), !0);
@@ -5471,19 +5529,19 @@ function Ri(e) {
 }
 //#endregion
 //#region src/adapters/tenantOperationRows.ts
-var zi = 50, Bi = 50;
-function Vi(e) {
+var Bi = 50, Vi = 50;
+function Hi(e) {
 	try {
 		return JSON.parse(e);
 	} catch {
 		return {};
 	}
 }
-function Hi(e) {
+function Ui(e) {
 	return Pe.parse({
 		operation_id: e.operation_id,
 		seq: e.seq,
-		payload: Vi(e.payload),
+		payload: Hi(e.payload),
 		status: e.status,
 		error_code: e.error_code,
 		error_message: e.error_message,
@@ -5493,12 +5551,12 @@ function Hi(e) {
 		updated_at: e.updated_at
 	});
 }
-function Ui(e, t) {
+function Wi(e, t) {
 	let n = [];
 	for (let r = 0; r < e.length; r += t) n.push(e.slice(r, r + t));
 	return n;
 }
-function Wi(e, n, r, i) {
+function Gi(e, n, r, i) {
 	return e.update($).set({
 		status: r.status,
 		error_code: r.error_code ?? null,
@@ -5508,7 +5566,7 @@ function Wi(e, n, r, i) {
 		updated_at: i
 	}).where(t(a($.operation_id, n), a($.seq, r.seq), a($.status, "pending")));
 }
-function Gi(e) {
+function Ki(e) {
 	return {
 		async createMany(t) {
 			if (t.length === 0) return 0;
@@ -5527,24 +5585,24 @@ function Gi(e) {
 					updated_at: n
 				};
 			});
-			for (let t of Ui(r, zi)) await e.insert($).values(t);
+			for (let t of Wi(r, Bi)) await e.insert($).values(t);
 			return r.length;
 		},
 		async claimPending(r, i) {
-			return (await e.select().from($).where(t(a($.operation_id, r), a($.status, "pending"))).orderBy(n($.seq)).limit(i)).map(Hi);
+			return (await e.select().from($).where(t(a($.operation_id, r), a($.status, "pending"))).orderBy(n($.seq)).limit(i)).map(Ui);
 		},
 		async recordOutcomes(n, r) {
 			if (r.length === 0) return 0;
 			let i = (/* @__PURE__ */ new Date()).toISOString(), o = r.map((e) => e.seq), s = /* @__PURE__ */ new Set();
-			for (let r of Ui(o, Bi)) {
+			for (let r of Wi(o, Vi)) {
 				let i = await e.select({ seq: $.seq }).from($).where(t(a($.operation_id, n), a($.status, "pending"), l($.seq, r)));
 				for (let e of i) s.add(e.seq);
 			}
 			let c = r.filter((e) => s.has(e.seq));
 			if (c.length === 0) return 0;
-			for (let t of Ui(c, Bi)) {
-				let [r, ...a] = t.map((t) => Wi(e, n, t, i));
-				r && await Pt(e, [r, ...a]);
+			for (let t of Wi(c, Vi)) {
+				let [r, ...a] = t.map((t) => Gi(e, n, t, i));
+				r && await Ft(e, [r, ...a]);
 			}
 			return c.length;
 		},
@@ -5579,7 +5637,7 @@ function Gi(e) {
 			}
 			let u = await e.select().from($).where(t(...c)).orderBy(n($.seq)).offset(o * s).limit(s);
 			return {
-				rows: u.map(Hi),
+				rows: u.map(Ui),
 				start: o * s,
 				limit: s,
 				length: u.length
@@ -5593,27 +5651,27 @@ function Gi(e) {
 }
 //#endregion
 //#region src/helpers/monotonic-id.ts
-var Ki = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", qi = 32, Ji = 10, Yi = 4, Xi = 10;
-function Zi(e, t) {
+var qi = "0123456789ABCDEFGHJKMNPQRSTVWXYZ", Ji = 32, Yi = 10, Xi = 4, Zi = 10;
+function Qi(e, t) {
 	let n = "";
-	for (let r = t; r > 0; r--) n = Ki.charAt(e % qi) + n, e = Math.floor(e / qi);
+	for (let r = t; r > 0; r--) n = qi.charAt(e % Ji) + n, e = Math.floor(e / Ji);
 	return n;
 }
-function Qi() {
-	let e = new Uint8Array(Xi);
+function $i() {
+	let e = new Uint8Array(Zi);
 	crypto.getRandomValues(e);
 	let t = "";
-	for (let n = 0; n < Xi; n++) t += Ki.charAt(e[n] % qi);
+	for (let n = 0; n < Zi; n++) t += qi.charAt(e[n] % Ji);
 	return t;
 }
-var $i = 0, ea = 0;
-function ta() {
+var ea = 0, ta = 0;
+function na() {
 	let e = Date.now();
-	return e === $i ? ea++ : ($i = e, ea = 0), Zi(e, Ji) + Zi(ea, Yi) + Qi();
+	return e === ea ? ta++ : (ea = e, ta = 0), Qi(e, Yi) + Qi(ta, Xi) + $i();
 }
 //#endregion
 //#region src/adapters/tenantOperationEvents.ts
-function na(e) {
+function ra(e) {
 	if (!e) return null;
 	try {
 		let t = JSON.parse(e);
@@ -5621,22 +5679,22 @@ function na(e) {
 	} catch {}
 	return null;
 }
-function ra(e) {
+function ia(e) {
 	return je.parse({
 		id: e.id,
 		operation_id: e.operation_id,
 		step: e.step,
 		outcome: e.outcome,
-		detail: na(e.detail),
+		detail: ra(e.detail),
 		attempt: e.attempt,
 		created_at: e.created_at
 	});
 }
-function ia(e) {
+function aa(e) {
 	return {
 		async create(t) {
 			let n = Ae.parse(t), r = {
-				id: `evt_${ta()}`,
+				id: `evt_${na()}`,
 				operation_id: n.operation_id,
 				step: n.step,
 				outcome: n.outcome,
@@ -5644,7 +5702,7 @@ function ia(e) {
 				attempt: n.attempt,
 				created_at: (/* @__PURE__ */ new Date()).toISOString()
 			};
-			return await e.insert(Pi).values(r), je.parse({
+			return await e.insert(Fi).values(r), je.parse({
 				id: r.id,
 				operation_id: r.operation_id,
 				step: r.step,
@@ -5655,9 +5713,9 @@ function ia(e) {
 			});
 		},
 		async listByOperation(t, r = {}) {
-			let i = r.page ?? 0, o = r.per_page ?? 100, s = await e.select().from(Pi).where(a(Pi.operation_id, t)).orderBy(n(Pi.created_at), n(Pi.id)).offset(i * o).limit(o);
+			let i = r.page ?? 0, o = r.per_page ?? 100, s = await e.select().from(Fi).where(a(Fi.operation_id, t)).orderBy(n(Fi.created_at), n(Fi.id)).offset(i * o).limit(o);
 			return {
-				events: s.map(ra),
+				events: s.map(ia),
 				start: i * o,
 				limit: o,
 				length: s.length
@@ -5667,7 +5725,7 @@ function ia(e) {
 }
 //#endregion
 //#region src/adapters/rollouts.ts
-function aa(e) {
+function oa(e) {
 	if (!e) return null;
 	try {
 		return JSON.parse(e);
@@ -5675,7 +5733,7 @@ function aa(e) {
 		return null;
 	}
 }
-function oa(e) {
+function sa(e) {
 	return Te.parse({
 		id: e.id,
 		kind: e.kind,
@@ -5683,15 +5741,17 @@ function oa(e) {
 		target_worker_version: e.target_worker_version,
 		target_database_version: e.target_database_version,
 		wave_size: e.wave_size,
-		canary_tenant_ids: aa(e.canary_tenant_ids),
-		filter: aa(e.filter),
+		canary_tenant_ids: oa(e.canary_tenant_ids),
+		filter: oa(e.filter),
 		initiated_by: e.initiated_by,
+		config: oa(e.config),
+		paused_reason: e.paused_reason,
 		created_at: e.created_at,
 		updated_at: e.updated_at,
 		finished_at: e.finished_at
 	});
 }
-function sa(e) {
+function ca(e) {
 	return {
 		async create(t) {
 			let n = we.parse(t), r = (/* @__PURE__ */ new Date()).toISOString(), i = {
@@ -5704,103 +5764,110 @@ function sa(e) {
 				canary_tenant_ids: n.canary_tenant_ids ? JSON.stringify(n.canary_tenant_ids) : null,
 				filter: n.filter ? JSON.stringify(n.filter) : null,
 				initiated_by: n.initiated_by ?? null,
+				config: n.config ? JSON.stringify(n.config) : null,
+				paused_reason: null,
 				created_at: r,
 				updated_at: r,
 				finished_at: null
 			};
-			await e.insert(Fi).values(i);
+			await e.insert(Ii).values(i);
 			let a = await this.get(i.id);
 			if (!a) throw Error(`Failed to create rollout ${i.id}`);
 			return a;
 		},
 		async get(t) {
-			let n = await e.select().from(Fi).where(a(Fi.id, t)).limit(1);
-			return n[0] ? oa(n[0]) : null;
+			let n = await e.select().from(Ii).where(a(Ii.id, t)).limit(1);
+			return n[0] ? sa(n[0]) : null;
 		},
-		async list(t = {}) {
-			let n = t.page ?? 0, r = t.per_page ?? 50, a = await e.select().from(Fi).orderBy(i(Fi.created_at), i(Fi.id)).offset(n * r).limit(r);
+		async list(n = {}) {
+			let r = n.page ?? 0, o = n.per_page ?? 50, s = [];
+			if (n.kind !== void 0 && s.push(a(Ii.kind, n.kind)), n.status !== void 0) {
+				let e = Array.isArray(n.status) ? n.status : [n.status];
+				s.push(l(Ii.status, e));
+			}
+			let c = await e.select().from(Ii).where(s.length ? t(...s) : void 0).orderBy(i(Ii.created_at), i(Ii.id)).offset(r * o).limit(o);
 			return {
-				rollouts: a.map(oa),
-				start: n * r,
-				limit: r,
-				length: a.length
+				rollouts: c.map(sa),
+				start: r * o,
+				limit: o,
+				length: c.length
 			};
 		},
 		async update(t, n) {
-			if ((await e.select({ id: Fi.id }).from(Fi).where(a(Fi.id, t)).limit(1)).length === 0) return !1;
+			if ((await e.select({ id: Ii.id }).from(Ii).where(a(Ii.id, t)).limit(1)).length === 0) return !1;
 			let r = { updated_at: (/* @__PURE__ */ new Date()).toISOString() };
-			return n.status !== void 0 && (r.status = n.status), n.wave_size !== void 0 && (r.wave_size = n.wave_size), n.canary_tenant_ids !== void 0 && (r.canary_tenant_ids = n.canary_tenant_ids ? JSON.stringify(n.canary_tenant_ids) : null), n.filter !== void 0 && (r.filter = n.filter ? JSON.stringify(n.filter) : null), n.finished_at !== void 0 && (r.finished_at = n.finished_at), await e.update(Fi).set(r).where(a(Fi.id, t)), !0;
+			return n.status !== void 0 && (r.status = n.status), n.wave_size !== void 0 && (r.wave_size = n.wave_size), n.canary_tenant_ids !== void 0 && (r.canary_tenant_ids = n.canary_tenant_ids ? JSON.stringify(n.canary_tenant_ids) : null), n.filter !== void 0 && (r.filter = n.filter ? JSON.stringify(n.filter) : null), n.config !== void 0 && (r.config = n.config ? JSON.stringify(n.config) : null), n.paused_reason !== void 0 && (r.paused_reason = n.paused_reason), n.finished_at !== void 0 && (r.finished_at = n.finished_at), await e.update(Ii).set(r).where(a(Ii.id, t)), !0;
 		},
 		async remove(t) {
-			return (await e.select({ id: Fi.id }).from(Fi).where(a(Fi.id, t)).limit(1)).length === 0 ? !1 : (await e.delete(Fi).where(a(Fi.id, t)), !0);
+			return (await e.select({ id: Ii.id }).from(Ii).where(a(Ii.id, t)).limit(1)).length === 0 ? !1 : (await e.delete(Ii).where(a(Ii.id, t)), !0);
 		}
 	};
 }
 //#endregion
 //#region src/adapters/index.ts
-function ca(e, t = { useTransactions: !0 }) {
+function la(e, t = { useTransactions: !0 }) {
 	let n = {
-		actions: At(e),
-		actionExecutions: Mt(e),
-		actionVersions: It(e),
-		branding: Rt(e),
-		clients: Wt(e),
-		clientConnections: Kt(e),
-		clientGrants: Jt(e),
-		clientRegistrationTokens: $t(e),
-		codes: rn(e),
-		connections: sn(e),
-		customDomains: ln(e),
-		customText: un(e),
-		emailProviders: dn(e),
-		emailTemplates: pn(e),
-		flows: gn(e),
-		forms: bn(e),
-		grants: wn(e),
-		hookCode: On(e),
-		hooks: Mn(e),
-		invites: In(e),
-		keys: Rn(e),
-		loginSessions: Un(e),
-		logs: Gn(e),
-		logStreams: ir(e),
-		migrationSources: or(e),
-		authenticationMethods: Xn(e),
-		organizations: er(e),
-		organizationConnections: nr(e),
-		passwords: cr(e),
-		promptSettings: lr(e),
-		promptPartials: ur(e),
-		proxyRoutes: mr(e),
-		scimConfigurations: Sr(e),
-		scimTokens: wr(e),
-		scimExternalIds: Er(e),
-		refreshTokens: kr(e),
-		resourceServers: Fr(e),
-		rolePermissions: Ir(e),
-		userPermissions: zr(e),
-		roles: Vr(e),
-		sessions: Kr(e),
-		sessionCleanup: Ni(e),
-		tenants: Zr(e),
-		tokenExchangeProfiles: vr(e),
+		actions: jt(e),
+		actionExecutions: Nt(e),
+		actionVersions: Lt(e),
+		branding: zt(e),
+		clients: Gt(e),
+		clientConnections: qt(e),
+		clientGrants: Yt(e),
+		clientRegistrationTokens: en(e),
+		codes: an(e),
+		connections: cn(e),
+		customDomains: un(e),
+		customText: dn(e),
+		emailProviders: fn(e),
+		emailTemplates: mn(e),
+		flows: _n(e),
+		forms: xn(e),
+		grants: Tn(e),
+		hookCode: kn(e),
+		hooks: Nn(e),
+		invites: Ln(e),
+		keys: zn(e),
+		loginSessions: Wn(e),
+		logs: Kn(e),
+		logStreams: ar(e),
+		migrationSources: sr(e),
+		authenticationMethods: Zn(e),
+		organizations: tr(e),
+		organizationConnections: rr(e),
+		passwords: lr(e),
+		promptSettings: ur(e),
+		promptPartials: dr(e),
+		proxyRoutes: hr(e),
+		scimConfigurations: Cr(e),
+		scimTokens: Tr(e),
+		scimExternalIds: Dr(e),
+		refreshTokens: Ar(e),
+		resourceServers: Ir(e),
+		rolePermissions: Lr(e),
+		userPermissions: Br(e),
+		roles: Hr(e),
+		sessions: qr(e),
+		sessionCleanup: Pi(e),
+		tenants: Qr(e),
+		tokenExchangeProfiles: yr(e),
 		...t.controlPlane ? {
-			tenantOperations: Ri(e),
-			tenantOperationEvents: ia(e),
-			tenantOperationRows: Gi(e),
-			rollouts: sa(e)
+			tenantOperations: zi(e),
+			tenantOperationEvents: aa(e),
+			tenantOperationRows: Ki(e),
+			rollouts: ca(e)
 		} : {},
-		themes: ei(e),
-		universalLoginTemplates: ti(e),
-		users: yi(e),
-		userActivity: ri(e),
-		userRoles: bi(e),
-		userOrganizations: xi(e),
-		stats: Ti(e),
-		analytics: ji(e),
-		outbox: si(e),
+		themes: ti(e),
+		universalLoginTemplates: ni(e),
+		users: bi(e),
+		userActivity: ii(e),
+		userRoles: xi(e),
+		userOrganizations: Si(e),
+		stats: Ei(e),
+		analytics: Mi(e),
+		outbox: ci(e),
 		async transaction(r) {
-			if (t.useTransactions === !1 || Nt(e)) return r(n);
+			if (t.useTransactions === !1 || Pt(e)) return r(n);
 			await e.run(y`BEGIN`);
 			try {
 				let t = await r(n);
@@ -5814,7 +5881,7 @@ function ca(e, t = { useTransactions: !0 }) {
 }
 //#endregion
 //#region src/adapters/resolveHost.ts
-function la(e) {
+function ua(e) {
 	if (!e) return { path: "/*" };
 	try {
 		let t = JSON.parse(e), n = xe.safeParse(t);
@@ -5822,7 +5889,7 @@ function la(e) {
 	} catch {}
 	return { path: "/*" };
 }
-function ua(e) {
+function da(e) {
 	if (!e) return [];
 	try {
 		let t = JSON.parse(e);
@@ -5837,20 +5904,20 @@ function ua(e) {
 		return [];
 	}
 }
-async function da(e, r) {
+async function fa(e, r) {
 	let i = r.toLowerCase(), o = (await e.select({
-		custom_domain_id: Je.custom_domain_id,
-		tenant_id: Je.tenant_id,
-		domain: Je.domain
-	}).from(Je).where(a(Je.domain, i)).limit(1))[0];
+		custom_domain_id: Ye.custom_domain_id,
+		tenant_id: Ye.tenant_id,
+		domain: Ye.domain
+	}).from(Ye).where(a(Ye.domain, i)).limit(1))[0];
 	if (!o) return null;
 	let s = (await e.select().from(J).where(t(a(J.tenant_id, o.tenant_id), a(J.custom_domain_id, o.custom_domain_id))).orderBy(n(J.priority), n(J.created_at))).map((e) => ({
 		id: e.id,
 		tenant_id: e.tenant_id,
 		custom_domain_id: e.custom_domain_id,
 		priority: e.priority,
-		match: la(e.match),
-		handlers: ua(e.handlers),
+		match: ua(e.match),
+		handlers: da(e.handlers),
 		created_at: e.created_at,
 		updated_at: e.updated_at
 	}));
@@ -5863,11 +5930,11 @@ async function da(e, r) {
 }
 //#endregion
 //#region src/adapters/proxyData.ts
-function fa(e) {
+function pa(e) {
 	return {
-		proxyRoutes: mr(e),
-		resolveHost: (t) => da(e, t)
+		proxyRoutes: hr(e),
+		resolveHost: (t) => fa(e, t)
 	};
 }
 //#endregion
-export { fa as createProxyDataAdapter, mr as createProxyRoutesAdapter, ca as default, vt as sqlite };
+export { pa as createProxyDataAdapter, hr as createProxyRoutesAdapter, la as default, yt as sqlite };