@authhero/kysely-adapter 10.122.0 → 10.123.0

package/dist/kysely-adapter.mjs

@@ -1,7 +1,7 @@
 var $e = Object.defineProperty;
 var Ee = (e, t, a) => t in e ? $e(e, t, { enumerable: !0, configurable: !0, writable: !0, value: a }) : e[t] = a;
 var K = (e, t, a) => Ee(e, typeof t != "symbol" ? t + "" : t, a);
-import { customAlphabet as Ie, nanoid as $ } from "nanoid";
+import { customAlphabet as Ie, nanoid as E } from "nanoid";
 import { parseUserId as ze, flowSchema as B, codeSchema as Pe, loginSessionSchema as De, LoginSessionState as le, promptSettingSchema as Ae, formSchema as q, resourceServerSchema as je } from "@authhero/adapter-interfaces";
 import "@hono/zod-openapi";
 import { sql as h, Migrator as de } from "kysely";
@@ -87,7 +87,7 @@ function ue(e) {
 function D(e, t = (/* @__PURE__ */ new Date(0)).toISOString()) {
   return ue(e) ?? t;
 }
-function C(e) {
+function x(e) {
   if (!e || e === "")
     return null;
   const t = new Date(e);
@@ -130,14 +130,14 @@ function Ye(e) {
       supported_triggers: d,
       tenant_id: c,
       ...l
-    } = n, _ = z({ created_at_ts: o, updated_at_ts: r }, [
+    } = n, m = z({ created_at_ts: o, updated_at_ts: r }, [
       "created_at_ts",
       "updated_at_ts"
     ]);
     return {
       ...l,
       tenant_id: t,
-      ..._,
+      ...m,
       runtime: l.runtime ?? void 0,
       status: l.status || "built",
       deployed_at: s ? new Date(Number(s)).toISOString() : void 0,
@@ -149,17 +149,17 @@ function Ye(e) {
     };
   };
 }
-function O(e, t, a, n) {
+function k(e, t, a, n) {
   const o = a.split(/ OR /i);
   if (o.length > 1)
     return t.where((d) => {
       const c = o.map((l) => {
-        const _ = l.trim().match(/^([^:]+):(.+)$/);
-        if (_) {
-          const [, m, p] = _;
-          if (!m || !p) return null;
+        const m = l.trim().match(/^([^:]+):(.+)$/);
+        if (m) {
+          const [, _, p] = m;
+          if (!_ || !p) return null;
           const f = p.replace(/^"(.*)"$/, "$1");
-          return d(m.trim(), "=", f.trim());
+          return d(_.trim(), "=", f.trim());
         }
         return null;
       }).filter(Boolean);
@@ -172,23 +172,23 @@ function O(e, t, a, n) {
     c === '"' ? (i = !i, s += c) : c === " " && !i ? s.trim() && (r.push(s.trim()), s = "") : s += c;
   }
   return s.trim() && r.push(s.trim()), r.map((d) => d.replace(/^([^:]+)=/g, "$1:")).map((d) => {
-    let c = d.startsWith("-"), l = null, _ = "", m = !1, p;
+    let c = d.startsWith("-"), l = null, m = "", _ = !1, p;
     if (d.startsWith("-_exists_:"))
-      l = d.substring(10), m = !0, c = !0;
+      l = d.substring(10), _ = !0, c = !0;
     else if (d.startsWith("_exists_:"))
-      l = d.substring(9), m = !0, c = !1;
+      l = d.substring(9), _ = !0, c = !1;
     else if (d.includes(":")) {
       const f = c ? d.substring(1) : d, g = f.indexOf(":");
-      l = f.substring(0, g), _ = f.substring(g + 1), m = !1, _.startsWith(">=") ? (p = ">=", _ = _.substring(2)) : _.startsWith(">") ? (p = ">", _ = _.substring(1)) : _.startsWith("<=") ? (p = "<=", _ = _.substring(2)) : _.startsWith("<") ? (p = "<", _ = _.substring(1)) : p = "=", _.startsWith('"') && _.endsWith('"') && _.length > 1 && (_ = _.slice(1, -1));
+      l = f.substring(0, g), m = f.substring(g + 1), _ = !1, m.startsWith(">=") ? (p = ">=", m = m.substring(2)) : m.startsWith(">") ? (p = ">", m = m.substring(1)) : m.startsWith("<=") ? (p = "<=", m = m.substring(2)) : m.startsWith("<") ? (p = "<", m = m.substring(1)) : p = "=", m.startsWith('"') && m.endsWith('"') && m.length > 1 && (m = m.slice(1, -1));
     } else
-      l = null, _ = d, m = !1;
-    return { key: l, value: _, isNegation: c, isExistsQuery: m, operator: p };
-  }).forEach(({ key: d, value: c, isNegation: l, isExistsQuery: _, operator: m }) => {
+      l = null, m = d, _ = !1;
+    return { key: l, value: m, isNegation: c, isExistsQuery: _, operator: p };
+  }).forEach(({ key: d, value: c, isNegation: l, isExistsQuery: m, operator: _ }) => {
     if (d)
-      if (_)
+      if (m)
         l ? t = t.where(d, "is", null) : t = t.where(d, "is not", null);
       else if (l)
-        switch (m) {
+        switch (_) {
           case ">":
             t = t.where(d, "<=", c);
             break;
@@ -205,7 +205,7 @@ function O(e, t, a, n) {
             t = t.where(d, "!=", c);
         }
       else
-        t = t.where(d, m, c);
+        t = t.where(d, _, c);
     else if (c) {
       const { ref: p } = e.dynamic, f = c.includes("|") ? [...n, "user_id"] : n;
       t = t.where(
@@ -218,7 +218,7 @@ function O(e, t, a, n) {
     }
   }), t;
 }
-function k(e) {
+function $(e) {
   return typeof e == "string" ? parseInt(e, 10) : typeof e == "bigint" ? Number(e) : e;
 }
 function Y(e) {
@@ -233,34 +233,34 @@ function He(e) {
   return async (t, a = {}) => {
     const { page: n = 0, per_page: o = 50, include_totals: r = !1, q: s } = a;
     let i = e.selectFrom("actions").where("actions.tenant_id", "=", t);
-    s && (i = O(e, i, s, ["name"]));
-    const c = (await i.offset(n * o).limit(o).selectAll().execute()).map((_) => {
+    s && (i = k(e, i, s, ["name"]));
+    const c = (await i.offset(n * o).limit(o).selectAll().execute()).map((m) => {
       const {
-        created_at_ts: m,
+        created_at_ts: _,
         updated_at_ts: p,
         deployed_at_ts: f,
         secrets: g,
         dependencies: y,
-        supported_triggers: x,
+        supported_triggers: T,
         tenant_id: v,
-        ...T
-      } = _, E = z({ created_at_ts: m, updated_at_ts: p }, [
+        ...N
+      } = m, I = z({ created_at_ts: _, updated_at_ts: p }, [
         "created_at_ts",
         "updated_at_ts"
       ]);
       return {
-        ...T,
+        ...N,
         tenant_id: t,
-        ...E,
-        runtime: T.runtime ?? void 0,
-        status: T.status || "built",
+        ...I,
+        runtime: N.runtime ?? void 0,
+        status: N.status || "built",
         deployed_at: f ? new Date(Number(f)).toISOString() : void 0,
         secrets: Y(g),
         dependencies: Y(
           y
         ),
         supported_triggers: Y(
-          x
+          T
         )
       };
     });
@@ -271,12 +271,12 @@ function He(e) {
         limit: 0,
         length: 0
       };
-    const { count: l } = await i.select((_) => _.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    const { count: l } = await i.select((m) => m.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
       actions: c,
       start: n * o,
       limit: o,
-      length: k(l)
+      length: $(l)
     };
   };
 }
@@ -345,7 +345,7 @@ function Xe(e) {
       const u = async (d) => {
         if (await d.insertInto("users").values(i).execute(), r && i.user_id) {
           const c = {
-            id: $(),
+            id: E(),
             user_id: i.user_id,
             password: r.hash,
             algorithm: r.algorithm,
@@ -452,12 +452,12 @@ function tt(e) {
   return async (t, a = {}) => {
     const { page: n = 0, per_page: o = 50, include_totals: r = !1, sort: s, q: i } = a;
     let u = e.selectFrom("users").where("users.tenant_id", "=", t);
-    if (i && (u = O(e, u, i, ["email", "name", "phone_number"])), s && s.sort_by) {
+    if (i && (u = k(e, u, i, ["email", "name", "phone_number"])), s && s.sort_by) {
       const { ref: f } = e.dynamic;
       u = u.orderBy(f(s.sort_by), s.sort_order);
     }
-    const c = await u.offset(n * o).limit(o).selectAll().execute(), l = c.map((f) => f.user_id), _ = l.length ? await e.selectFrom("users").selectAll().where("users.tenant_id", "=", t).where("users.linked_to", "in", l).orderBy("created_at", "asc").execute() : [], m = c.map((f) => {
-      const g = _.filter(
+    const c = await u.offset(n * o).limit(o).selectAll().execute(), l = c.map((f) => f.user_id), m = l.length ? await e.selectFrom("users").selectAll().where("users.tenant_id", "=", t).where("users.linked_to", "in", l).orderBy("created_at", "asc").execute() : [], _ = c.map((f) => {
+      const g = m.filter(
         (y) => y.linked_to === f.user_id
       );
       return w({
@@ -476,17 +476,17 @@ function tt(e) {
     });
     if (!r)
       return {
-        users: m,
+        users: _,
         start: 0,
         limit: 0,
         length: 0
       };
     const { count: p } = await u.select((f) => f.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      users: m,
+      users: _,
       start: n * o,
       limit: o,
-      length: k(p)
+      length: $(p)
     };
   };
 }
@@ -563,7 +563,7 @@ function rt(e) {
 function st(e) {
   return async (t, a) => {
     const n = (/* @__PURE__ */ new Date()).toISOString(), o = B.parse({
-      id: `af_${$()}`,
+      id: `af_${E()}`,
       ...a,
       actions: a.actions || [],
       created_at: n,
@@ -609,13 +609,13 @@ function ct(e) {
   return async (t, a = {}) => {
     const { page: n = 0, per_page: o = 50, include_totals: r = !1, q: s } = a;
     let i = e.selectFrom("flows").where("tenant_id", "=", t);
-    s && (i = O(e, i, s, []));
-    const c = (await i.offset(n * o).limit(o).selectAll().execute()).map((_) => {
-      const m = {
-        ..._,
-        actions: A(_.actions, [])
+    s && (i = k(e, i, s, []));
+    const c = (await i.offset(n * o).limit(o).selectAll().execute()).map((m) => {
+      const _ = {
+        ...m,
+        actions: A(m.actions, [])
       };
-      return B.parse(w(m));
+      return B.parse(w(_));
     });
     if (!r)
       return {
@@ -624,12 +624,12 @@ function ct(e) {
         limit: 0,
         length: 0
       };
-    const { count: l } = await i.select((_) => _.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    const { count: l } = await i.select((m) => m.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
       flows: c,
       start: n * o,
       limit: o,
-      length: k(l)
+      length: $(l)
     };
   };
 }
@@ -685,7 +685,7 @@ function pe(e) {
   };
   return e.session_cookie && typeof e.session_cookie == "string" && (t.session_cookie = JSON.parse(e.session_cookie)), e.enabled_locales && typeof e.enabled_locales == "string" && (t.enabled_locales = JSON.parse(e.enabled_locales)), e.error_page && typeof e.error_page == "string" && (t.error_page = JSON.parse(e.error_page)), e.flags && typeof e.flags == "string" && (t.flags = JSON.parse(e.flags)), e.sandbox_versions_available && typeof e.sandbox_versions_available == "string" && (t.sandbox_versions_available = JSON.parse(
     e.sandbox_versions_available
-  )), e.change_password && typeof e.change_password == "string" && (t.change_password = JSON.parse(e.change_password)), e.guardian_mfa_page && typeof e.guardian_mfa_page == "string" && (t.guardian_mfa_page = JSON.parse(e.guardian_mfa_page)), e.sessions && typeof e.sessions == "string" && (t.sessions = JSON.parse(e.sessions)), e.oidc_logout && typeof e.oidc_logout == "string" && (t.oidc_logout = JSON.parse(e.oidc_logout)), e.device_flow && typeof e.device_flow == "string" && (t.device_flow = JSON.parse(e.device_flow)), e.default_token_quota && typeof e.default_token_quota == "string" && (t.default_token_quota = JSON.parse(e.default_token_quota)), e.allowed_logout_urls && typeof e.allowed_logout_urls == "string" && (t.allowed_logout_urls = JSON.parse(e.allowed_logout_urls)), e.acr_values_supported && typeof e.acr_values_supported == "string" && (t.acr_values_supported = JSON.parse(e.acr_values_supported)), e.mtls && typeof e.mtls == "string" && (t.mtls = JSON.parse(e.mtls)), e.mfa && typeof e.mfa == "string" && (t.mfa = JSON.parse(e.mfa)), e.allow_organization_name_in_authentication_api !== void 0 && (t.allow_organization_name_in_authentication_api = e.allow_organization_name_in_authentication_api === 1), e.customize_mfa_in_postlogin_action !== void 0 && (t.customize_mfa_in_postlogin_action = e.customize_mfa_in_postlogin_action === 1), e.pushed_authorization_requests_supported !== void 0 && (t.pushed_authorization_requests_supported = e.pushed_authorization_requests_supported === 1), e.authorization_response_iss_parameter_supported !== void 0 && (t.authorization_response_iss_parameter_supported = e.authorization_response_iss_parameter_supported === 1), w(t);
+  )), e.change_password && typeof e.change_password == "string" && (t.change_password = JSON.parse(e.change_password)), e.guardian_mfa_page && typeof e.guardian_mfa_page == "string" && (t.guardian_mfa_page = JSON.parse(e.guardian_mfa_page)), e.sessions && typeof e.sessions == "string" && (t.sessions = JSON.parse(e.sessions)), e.oidc_logout && typeof e.oidc_logout == "string" && (t.oidc_logout = JSON.parse(e.oidc_logout)), e.device_flow && typeof e.device_flow == "string" && (t.device_flow = JSON.parse(e.device_flow)), e.default_token_quota && typeof e.default_token_quota == "string" && (t.default_token_quota = JSON.parse(e.default_token_quota)), e.allowed_logout_urls && typeof e.allowed_logout_urls == "string" && (t.allowed_logout_urls = JSON.parse(e.allowed_logout_urls)), e.acr_values_supported && typeof e.acr_values_supported == "string" && (t.acr_values_supported = JSON.parse(e.acr_values_supported)), e.mtls && typeof e.mtls == "string" && (t.mtls = JSON.parse(e.mtls)), e.mfa && typeof e.mfa == "string" && (t.mfa = JSON.parse(e.mfa)), e.allow_organization_name_in_authentication_api !== void 0 && (t.allow_organization_name_in_authentication_api = e.allow_organization_name_in_authentication_api === 1), e.customize_mfa_in_postlogin_action !== void 0 && (t.customize_mfa_in_postlogin_action = e.customize_mfa_in_postlogin_action === 1), e.pushed_authorization_requests_supported !== void 0 && (t.pushed_authorization_requests_supported = e.pushed_authorization_requests_supported === 1), e.authorization_response_iss_parameter_supported !== void 0 && (t.authorization_response_iss_parameter_supported = e.authorization_response_iss_parameter_supported === 1), t.session_lifetime ?? (t.session_lifetime = 168), t.idle_session_lifetime ?? (t.idle_session_lifetime = 72), w(t);
 }
 function fe(e) {
   const t = { ...e };
@@ -715,7 +715,9 @@ function mt(e) {
   return async (t) => {
     var o, r;
     const a = {
-      id: t.id || $(),
+      id: t.id || E(),
+      session_lifetime: 168,
+      idle_session_lifetime: 72,
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       ...t
@@ -747,21 +749,21 @@ function pt(e) {
       q: i
     } = t || {};
     if (s && s.sort_by) {
-      const { ref: m } = e.dynamic;
-      a = a.orderBy(m(s.sort_by), s.sort_order);
+      const { ref: _ } = e.dynamic;
+      a = a.orderBy(_(s.sort_by), s.sort_order);
     }
-    i && (a = O(e, a, i, ["friendly_name"]));
+    i && (a = k(e, a, i, ["friendly_name"]));
     const c = (await a.offset(n * o).limit(o).selectAll().execute()).map(pe);
     if (!r)
       return {
         tenants: c
       };
-    const { count: l } = await a.select((m) => m.fn.countAll().as("count")).executeTakeFirstOrThrow(), _ = k(l);
+    const { count: l } = await a.select((_) => _.fn.countAll().as("count")).executeTakeFirstOrThrow(), m = $(l);
     return {
       tenants: c,
       start: n * o,
       limit: o,
-      length: _
+      length: m
     };
   };
 }
@@ -794,7 +796,7 @@ const yt = 256;
 function vt(e) {
   return async (t, a) => {
     var i, u, d;
-    const n = (i = a.user_agent) == null ? void 0 : i.slice(0, yt), o = a.log_id || $(), { location_info: r, ...s } = a;
+    const n = (i = a.user_agent) == null ? void 0 : i.slice(0, yt), o = a.log_id || E(), { location_info: r, ...s } = a;
     return await e.insertInto("logs").values({
       ...s,
       log_id: o,
@@ -853,11 +855,11 @@ function Ct(e) {
   return async (t, a = {}) => {
     const { page: n = 0, per_page: o = 50, include_totals: r = !1, sort: s, q: i } = a;
     let u = e.selectFrom("logs").where("logs.tenant_id", "=", t);
-    i && (u = O(e, u, i, ["user_id", "ip"]));
+    i && (u = k(e, u, i, ["user_id", "ip"]));
     let d = u;
     if (s && s.sort_by) {
-      const { ref: m } = e.dynamic;
-      d = d.orderBy(m(s.sort_by), s.sort_order);
+      const { ref: _ } = e.dynamic;
+      d = d.orderBy(_(s.sort_by), s.sort_order);
     }
     d = d.offset(n * o).limit(o);
     const l = (await d.selectAll().execute()).map(ge);
@@ -868,12 +870,12 @@ function Ct(e) {
         limit: 0,
         length: 0
       };
-    const { count: _ } = await u.select((m) => m.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    const { count: m } = await u.select((_) => _.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
       logs: l,
       start: n * o,
       limit: o,
-      length: k(_)
+      length: $(m)
     };
   };
 }
@@ -904,8 +906,8 @@ function Nt(e) {
       expires_at_ts: d,
       idle_expires_at_ts: c,
       authenticated_at_ts: l,
-      last_interaction_at_ts: _,
-      used_at_ts: m,
+      last_interaction_at_ts: m,
+      used_at_ts: _,
       revoked_at_ts: p,
       ...f
     } = n, g = z(
@@ -915,8 +917,8 @@ function Nt(e) {
         expires_at_ts: d,
         idle_expires_at_ts: c,
         authenticated_at_ts: l,
-        last_interaction_at_ts: _,
-        used_at_ts: m,
+        last_interaction_at_ts: m,
+        used_at_ts: _,
         revoked_at_ts: p
       },
       [
@@ -950,19 +952,19 @@ function bt(e) {
       revoked_at: d,
       device: c,
       clients: l,
-      ..._
+      ...m
     } = a;
     return await e.insertInto("sessions").values({
-      ..._,
+      ...m,
       tenant_id: t,
       created_at_ts: n,
       updated_at_ts: n,
       authenticated_at_ts: n,
       last_interaction_at_ts: n,
-      expires_at_ts: C(s),
-      idle_expires_at_ts: C(i),
-      used_at_ts: C(u),
-      revoked_at_ts: C(d),
+      expires_at_ts: x(s),
+      idle_expires_at_ts: x(i),
+      used_at_ts: x(u),
+      revoked_at_ts: x(d),
       device: JSON.stringify(c),
       clients: JSON.stringify(l)
     }).execute(), r;
@@ -978,16 +980,16 @@ function Ot(e) {
       device: n.device ? JSON.stringify(n.device) : void 0,
       clients: n.clients ? JSON.stringify(n.clients) : void 0
     };
-    return n.expires_at !== void 0 && (o.expires_at_ts = C(n.expires_at)), n.idle_expires_at !== void 0 && (o.idle_expires_at_ts = C(n.idle_expires_at)), n.authenticated_at !== void 0 && (o.authenticated_at_ts = C(n.authenticated_at)), n.last_interaction_at !== void 0 && (o.last_interaction_at_ts = C(
+    return n.expires_at !== void 0 && (o.expires_at_ts = x(n.expires_at)), n.idle_expires_at !== void 0 && (o.idle_expires_at_ts = x(n.idle_expires_at)), n.authenticated_at !== void 0 && (o.authenticated_at_ts = x(n.authenticated_at)), n.last_interaction_at !== void 0 && (o.last_interaction_at_ts = x(
       n.last_interaction_at
-    )), n.used_at !== void 0 && (o.used_at_ts = C(n.used_at)), n.revoked_at !== void 0 && (o.revoked_at_ts = C(n.revoked_at)), n.user_id !== void 0 && (o.user_id = n.user_id), n.login_session_id !== void 0 && (o.login_session_id = n.login_session_id), !!(await e.updateTable("sessions").set(o).where("tenant_id", "=", t).where("sessions.id", "=", a).execute()).length;
+    )), n.used_at !== void 0 && (o.used_at_ts = x(n.used_at)), n.revoked_at !== void 0 && (o.revoked_at_ts = x(n.revoked_at)), n.user_id !== void 0 && (o.user_id = n.user_id), n.login_session_id !== void 0 && (o.login_session_id = n.login_session_id), !!(await e.updateTable("sessions").set(o).where("tenant_id", "=", t).where("sessions.id", "=", a).execute()).length;
   };
 }
 function kt(e) {
   return async (t, a = {}) => {
     const { page: n = 0, per_page: o = 50, include_totals: r = !1, sort: s, q: i } = a;
     let u = e.selectFrom("sessions").where("sessions.tenant_id", "=", t);
-    i && (u = O(e, u, i, ["user_id", "session_id"]));
+    i && (u = k(e, u, i, ["user_id", "session_id"]));
     let d = u;
     if (s && s.sort_by) {
       const { ref: p } = e.dynamic;
@@ -999,22 +1001,22 @@ function kt(e) {
         tenant_id: f,
         device: g,
         clients: y,
-        created_at_ts: x,
+        created_at_ts: T,
         updated_at_ts: v,
-        expires_at_ts: T,
-        idle_expires_at_ts: E,
-        authenticated_at_ts: I,
+        expires_at_ts: N,
+        idle_expires_at_ts: I,
+        authenticated_at_ts: C,
         last_interaction_at_ts: P,
         used_at_ts: ee,
         revoked_at_ts: Se,
         ...Oe
       } = p, ke = z(
         {
-          created_at_ts: x,
+          created_at_ts: T,
           updated_at_ts: v,
-          expires_at_ts: T,
-          idle_expires_at_ts: E,
-          authenticated_at_ts: I,
+          expires_at_ts: N,
+          idle_expires_at_ts: I,
+          authenticated_at_ts: C,
           last_interaction_at_ts: P,
           used_at_ts: ee,
           revoked_at_ts: Se
@@ -1041,12 +1043,12 @@ function kt(e) {
         limit: 0,
         length: 0
       };
-    const { count: _ } = await u.select((p) => p.fn.countAll().as("count")).executeTakeFirstOrThrow(), m = k(_);
+    const { count: m } = await u.select((p) => p.fn.countAll().as("count")).executeTakeFirstOrThrow(), _ = $(m);
     return {
       sessions: l,
       start: n * o,
       limit: o,
-      length: m
+      length: _
     };
   };
 }
@@ -1073,7 +1075,7 @@ function Et(e) {
 }
 function It(e) {
   return async (t, a) => {
-    const n = a.id || $(), o = a.is_current ?? !0, r = {
+    const n = a.id || E(), o = a.is_current ?? !0, r = {
       id: n,
       ...a,
       is_current: o,
@@ -1119,9 +1121,9 @@ function At(e) {
   return async (t, a = {}) => {
     const { page: n = 0, per_page: o = 50, include_totals: r = !1, q: s } = a;
     let i = e.selectFrom("codes").where("codes.tenant_id", "=", t);
-    s && (i = O(e, i, s, ["code", "login_id"]));
-    const c = (await i.offset(n * o).limit(o).selectAll().execute()).map((_) => {
-      const { tenant_id: m, ...p } = _;
+    s && (i = k(e, i, s, ["code", "login_id"]));
+    const c = (await i.offset(n * o).limit(o).selectAll().execute()).map((m) => {
+      const { tenant_id: _, ...p } = m;
       return Pe.parse(w(p));
     });
     if (!r)
@@ -1131,12 +1133,12 @@ function At(e) {
         limit: 0,
         length: 0
       };
-    const { count: l } = await i.select((_) => _.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    const { count: l } = await i.select((m) => m.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
       codes: c,
       start: n * o,
       limit: o,
-      length: k(l)
+      length: $(l)
     };
   };
 }
@@ -1212,7 +1214,7 @@ function Ut(e) {
   return async (t, a = {}) => {
     const { page: n = 0, per_page: o = 50, include_totals: r = !1, q: s } = a;
     let i = e.selectFrom("connections").where("connections.tenant_id", "=", t);
-    s && (i = O(e, i, s, ["user_id", "ip"]));
+    s && (i = k(e, i, s, ["user_id", "ip"]));
     const d = await i.offset(n * o).limit(o).selectAll().execute(), c = qt(d);
     if (!r)
       return {
@@ -1221,12 +1223,12 @@ function Ut(e) {
         limit: 0,
         length: 0
       };
-    const { count: l } = await i.select((_) => _.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    const { count: l } = await i.select((m) => m.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
       connections: c,
       start: n * o,
       limit: o,
-      length: k(l)
+      length: $(l)
     };
   };
 }
@@ -1443,9 +1445,9 @@ function Xt(e) {
     if (a != null && a.include_totals) {
       let c = e.selectFrom("clients").select(h`count(*)`.as("count")).where("clients.tenant_id", "=", t);
       a != null && a.q && (c = c.where(
-        (_) => _.or([
-          _("name", "like", `%${a.q}%`),
-          _("client_id", "like", `%${a.q}%`)
+        (m) => m.or([
+          m("name", "like", `%${a.q}%`),
+          m("client_id", "like", `%${a.q}%`)
         ])
       ));
       const l = await c.executeTakeFirst();
@@ -1630,7 +1632,7 @@ function ia(e) {
 }
 function ca(e) {
   return async (t, a) => {
-    const n = (/* @__PURE__ */ new Date()).toISOString(), o = $(), { scope: r, authorization_details_types: s, ...i } = a, u = {
+    const n = (/* @__PURE__ */ new Date()).toISOString(), o = E(), { scope: r, authorization_details_types: s, ...i } = a, u = {
       id: o,
       tenant_id: t,
       ...i,
@@ -1683,38 +1685,38 @@ function da(e) {
     const { page: n = 0, per_page: o = 50, include_totals: r = !1, q: s, sort: i } = a;
     let u = e.selectFrom("client_grants").where("client_grants.tenant_id", "=", t);
     if (s) {
-      const m = s.trim(), p = m.split(/\s+/), f = p.length === 1 ? p[0] : void 0, g = f ? f.match(/^(-)?([a-zA-Z_][a-zA-Z0-9_]*):"?([^"]*)"?$/) : null, y = g ? g[3] : "", x = /^(>=|>|<=|<)/.test(y || "");
-      if (g && !x && y) {
-        const v = !!g[1], T = g[2], { ref: E } = e.dynamic, I = E(`client_grants.${T}`);
-        if (T === "allow_any_organization") {
+      const _ = s.trim(), p = _.split(/\s+/), f = p.length === 1 ? p[0] : void 0, g = f ? f.match(/^(-)?([a-zA-Z_][a-zA-Z0-9_]*):"?([^"]*)"?$/) : null, y = g ? g[3] : "", T = /^(>=|>|<=|<)/.test(y || "");
+      if (g && !T && y) {
+        const v = !!g[1], N = g[2], { ref: I } = e.dynamic, C = I(`client_grants.${N}`);
+        if (N === "allow_any_organization") {
           const P = y === "true" ? 1 : 0;
-          v ? u = u.where(I, "!=", P) : u = u.where(I, "=", P);
+          v ? u = u.where(C, "!=", P) : u = u.where(C, "=", P);
         } else
-          v ? u = u.where(I, "!=", y) : u = u.where(I, "=", y);
+          v ? u = u.where(C, "!=", y) : u = u.where(C, "=", y);
       } else
-        u = O(e, u, m, []);
+        u = k(e, u, _, []);
     }
     let d = u;
     if (i) {
-      const { ref: m } = e.dynamic;
-      d = d.orderBy(m(i.sort_by), i.sort_order);
+      const { ref: _ } = e.dynamic;
+      d = d.orderBy(_(i.sort_by), i.sort_order);
     } else
       d = d.orderBy("client_grants.created_at", "desc");
     d = d.limit(o).offset(n * o);
-    const l = (await d.selectAll().execute()).map((m) => {
+    const l = (await d.selectAll().execute()).map((_) => {
       const p = {
-        id: m.id,
-        client_id: m.client_id,
-        audience: m.audience,
-        scope: m.scope ? JSON.parse(m.scope) : [],
-        organization_usage: m.organization_usage,
+        id: _.id,
+        client_id: _.client_id,
+        audience: _.audience,
+        scope: _.scope ? JSON.parse(_.scope) : [],
+        organization_usage: _.organization_usage,
         // Convert integers back to booleans for API response (with defaults)
-        allow_any_organization: m.allow_any_organization !== void 0 ? !!m.allow_any_organization : !1,
-        is_system: m.is_system !== void 0 ? !!m.is_system : !1,
-        subject_type: m.subject_type,
-        authorization_details_types: m.authorization_details_types ? JSON.parse(m.authorization_details_types) : [],
-        created_at: m.created_at,
-        updated_at: m.updated_at
+        allow_any_organization: _.allow_any_organization !== void 0 ? !!_.allow_any_organization : !1,
+        is_system: _.is_system !== void 0 ? !!_.is_system : !1,
+        subject_type: _.subject_type,
+        authorization_details_types: _.authorization_details_types ? JSON.parse(_.authorization_details_types) : [],
+        created_at: _.created_at,
+        updated_at: _.updated_at
       };
       return w(p);
     });
@@ -1725,12 +1727,12 @@ function da(e) {
         limit: 0,
         length: 0
       };
-    const { count: _ } = await u.select((m) => m.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    const { count: m } = await u.select((_) => _.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
       client_grants: l,
       start: n * o,
       limit: o,
-      length: k(_)
+      length: $(m)
     };
   };
 }
@@ -1767,19 +1769,19 @@ function ha(e) {
       q: s
     } = t;
     let i = e.selectFrom("keys").where(
-      (m) => m.or([
-        m("revoked_at", ">", (/* @__PURE__ */ new Date()).toISOString()),
-        m("revoked_at", "is", null)
+      (_) => _.or([
+        _("revoked_at", ">", (/* @__PURE__ */ new Date()).toISOString()),
+        _("revoked_at", "is", null)
       ])
     );
-    s && (i = O(e, i, s, [
+    s && (i = k(e, i, s, [
       "kid",
       "connection",
       "fingerprint",
       "thumbprint",
       "type"
     ]));
-    let u = i.select((m) => m.fn.count("kid").as("count"));
+    let u = i.select((_) => _.fn.count("kid").as("count"));
     const d = a * n;
     i = i.limit(n).offset(d), r && (i = i.orderBy(r.sort_by, r.sort_order));
     const c = await i.selectAll().execute();
@@ -1790,12 +1792,12 @@ function ha(e) {
         limit: 0,
         length: 0
       };
-    const l = await u.executeTakeFirst(), _ = k((l == null ? void 0 : l.count) ?? 0);
+    const l = await u.executeTakeFirst(), m = $((l == null ? void 0 : l.count) ?? 0);
     return {
       signingKeys: c,
       start: d,
       limit: n,
-      length: _
+      length: m
     };
   };
 }
@@ -1817,7 +1819,7 @@ function ga(e) {
 function wa(e) {
   return async (t, a) => {
     const n = {
-      custom_domain_id: a.custom_domain_id || $(),
+      custom_domain_id: a.custom_domain_id || E(),
       status: "pending",
       primary: !1,
       ...a
@@ -1933,7 +1935,7 @@ function ba(e) {
 }
 function Sa(e) {
   return async (t, a) => {
-    var s, i, u, d, c, l, _, m, p, f, g, y, x, v, T, E, I, P;
+    var s, i, u, d, c, l, m, _, p, f, g, y, T, v, N, I, C, P;
     const { colors: n, font: o, ...r } = a;
     try {
       await e.insertInto("branding").values({
@@ -1942,7 +1944,7 @@ function Sa(e) {
         colors_page_background_type: (i = (s = a.colors) == null ? void 0 : s.page_background) == null ? void 0 : i.type,
         colors_page_background_start: (d = (u = a.colors) == null ? void 0 : u.page_background) == null ? void 0 : d.start,
         colors_page_background_end: (l = (c = a.colors) == null ? void 0 : c.page_background) == null ? void 0 : l.end,
-        colors_page_background_angle_dev: (m = (_ = a.colors) == null ? void 0 : _.page_background) == null ? void 0 : m.angle_deg,
+        colors_page_background_angle_dev: (_ = (m = a.colors) == null ? void 0 : m.page_background) == null ? void 0 : _.angle_deg,
         font_url: (p = a.font) == null ? void 0 : p.url,
         tenant_id: t
       }).execute();
@@ -1951,9 +1953,9 @@ function Sa(e) {
         ...r,
         colors_primary: n == null ? void 0 : n.primary,
         colors_page_background_type: (g = (f = a.colors) == null ? void 0 : f.page_background) == null ? void 0 : g.type,
-        colors_page_background_start: (x = (y = a.colors) == null ? void 0 : y.page_background) == null ? void 0 : x.start,
-        colors_page_background_end: (T = (v = a.colors) == null ? void 0 : v.page_background) == null ? void 0 : T.end,
-        colors_page_background_angle_dev: (I = (E = a.colors) == null ? void 0 : E.page_background) == null ? void 0 : I.angle_deg,
+        colors_page_background_start: (T = (y = a.colors) == null ? void 0 : y.page_background) == null ? void 0 : T.start,
+        colors_page_background_end: (N = (v = a.colors) == null ? void 0 : v.page_background) == null ? void 0 : N.end,
+        colors_page_background_angle_dev: (C = (I = a.colors) == null ? void 0 : I.page_background) == null ? void 0 : C.angle_deg,
         font_url: (P = a.font) == null ? void 0 : P.url
       }).where("tenant_id", "=", t).execute();
     }
@@ -2007,26 +2009,26 @@ function za(e) {
   return async (t, a = {}) => {
     const { page: n = 0, per_page: o = 50, include_totals: r = !1, q: s } = a;
     let i = e.selectFrom("hooks").where("hooks.tenant_id", "=", t);
-    s && (i = O(e, i, s, [
+    s && (i = k(e, i, s, [
       "url",
       "form_id",
       "template_id",
       "code_id"
     ]));
-    const c = (await i.offset(n * o).limit(o).selectAll().execute()).map((_) => {
+    const c = (await i.offset(n * o).limit(o).selectAll().execute()).map((m) => {
       const {
-        tenant_id: m,
+        tenant_id: _,
         enabled: p,
         synchronous: f,
         created_at_ts: g,
         updated_at_ts: y,
-        ...x
-      } = _, v = z({ created_at_ts: g, updated_at_ts: y }, [
+        ...T
+      } = m, v = z({ created_at_ts: g, updated_at_ts: y }, [
         "created_at_ts",
         "updated_at_ts"
       ]);
       return w({
-        ...x,
+        ...T,
         ...v,
         enabled: !!p,
         synchronous: !!f
@@ -2039,12 +2041,12 @@ function za(e) {
         limit: 0,
         length: 0
       };
-    const { count: l } = await i.select((_) => _.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    const { count: l } = await i.select((m) => m.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
       hooks: c,
       start: n * o,
       limit: o,
-      length: k(l)
+      length: $(l)
     };
   };
 }
@@ -2179,7 +2181,7 @@ function Ka(e) {
 function qa(e) {
   return async (t, a, n) => {
     const o = {
-      themeId: n || $(),
+      themeId: n || E(),
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       ...a
@@ -2307,7 +2309,7 @@ function Za(e) {
       updated_at_ts: Date.now(),
       // Only update expires_at_ts if a new expires_at was provided
       // Use !== undefined to preserve null values (which mean "doesn't expire")
-      ...s !== void 0 ? { expires_at_ts: C(s) } : {}
+      ...s !== void 0 ? { expires_at_ts: x(s) } : {}
     }).where("login_sessions.id", "=", a).where("login_sessions.tenant_id", "=", t).execute()).length === 1;
   };
 }
@@ -2463,17 +2465,17 @@ function _n(e) {
       resource_servers: d,
       rotating: c,
       ...l
-    } = a, _ = Date.now();
+    } = a, m = Date.now();
     return await e.insertInto("refresh_tokens").values({
       ...l,
       tenant_id: t,
       rotating: c ? 1 : 0,
       device: JSON.stringify(u),
       resource_servers: JSON.stringify(d),
-      created_at_ts: _,
-      expires_at_ts: C(r),
-      idle_expires_at_ts: s ? C(s) : null,
-      last_exchanged_at_ts: i ? C(i) : null
+      created_at_ts: m,
+      expires_at_ts: x(r),
+      idle_expires_at_ts: s ? x(s) : null,
+      last_exchanged_at_ts: i ? x(i) : null
     }).execute(), { ...a, ...o };
   };
 }
@@ -2491,25 +2493,25 @@ function hn(e) {
       resource_servers: d,
       rotating: c,
       ...l
-    } = n, _ = {
+    } = n, m = {
       ...l,
       device: u ? JSON.stringify(u) : void 0,
       resource_servers: d ? JSON.stringify(d) : void 0,
       rotating: c !== void 0 ? c ? 1 : 0 : void 0,
       // Convert date fields to bigint format
       // Use !== undefined to preserve null values (which mean "doesn't expire")
-      expires_at_ts: r !== void 0 ? C(r) : void 0,
-      idle_expires_at_ts: s !== void 0 ? C(s) : void 0,
-      last_exchanged_at_ts: i !== void 0 ? C(i) : void 0
+      expires_at_ts: r !== void 0 ? x(r) : void 0,
+      idle_expires_at_ts: s !== void 0 ? x(s) : void 0,
+      last_exchanged_at_ts: i !== void 0 ? x(i) : void 0
     };
-    return !!(await e.updateTable("refresh_tokens").set(_).where("tenant_id", "=", t).where("refresh_tokens.id", "=", a).execute()).length;
+    return !!(await e.updateTable("refresh_tokens").set(m).where("tenant_id", "=", t).where("refresh_tokens.id", "=", a).execute()).length;
   };
 }
 function pn(e) {
   return async (t, a = {}) => {
     const { page: n = 0, per_page: o = 50, include_totals: r = !1, sort: s, q: i } = a;
     let u = e.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", t);
-    i && (u = O(e, u, i, ["token", "login_id"]));
+    i && (u = k(e, u, i, ["token", "login_id"]));
     let d = u;
     if (s && s.sort_by) {
       const { ref: p } = e.dynamic;
@@ -2521,22 +2523,22 @@ function pn(e) {
         tenant_id: f,
         created_at_ts: g,
         expires_at_ts: y,
-        idle_expires_at_ts: x,
+        idle_expires_at_ts: T,
         last_exchanged_at_ts: v,
-        ...T
-      } = p, E = z(
+        ...N
+      } = p, I = z(
         {
           created_at_ts: g,
           expires_at_ts: y,
-          idle_expires_at_ts: x,
+          idle_expires_at_ts: T,
           last_exchanged_at_ts: v
         },
         ["created_at_ts"],
         ["expires_at_ts", "idle_expires_at_ts", "last_exchanged_at_ts"]
       );
       return {
-        ...T,
-        ...E,
+        ...N,
+        ...I,
         rotating: !!p.rotating,
         device: p.device ? JSON.parse(p.device) : {},
         resource_servers: p.resource_servers ? JSON.parse(p.resource_servers) : []
@@ -2549,12 +2551,12 @@ function pn(e) {
         limit: 0,
         length: 0
       };
-    const { count: _ } = await u.select((p) => p.fn.countAll().as("count")).executeTakeFirstOrThrow(), m = k(_);
+    const { count: m } = await u.select((p) => p.fn.countAll().as("count")).executeTakeFirstOrThrow(), _ = $(m);
     return {
       refresh_tokens: l,
       start: n * o,
       limit: o,
-      length: m
+      length: _
     };
   };
 }
@@ -2575,53 +2577,53 @@ function wn(e) {
     try {
       let c = 0;
       for (; ; ) {
-        let m = e.deleteFrom("refresh_tokens").where(
+        let _ = e.deleteFrom("refresh_tokens").where(
           (g) => g.or([
             g("expires_at_ts", "<", r),
             g("idle_expires_at_ts", "<", r)
           ])
         );
-        a && (m = m.where(
+        a && (_ = _.where(
           "tenant_id",
           "=",
           a
-        )), n && (m = m.where(
+        )), n && (_ = _.where(
           "user_id",
           "=",
           n
         ));
-        const p = await m.limit(s).execute(), f = Number(((i = p[0]) == null ? void 0 : i.numDeletedRows) ?? 0);
+        const p = await _.limit(s).execute(), f = Number(((i = p[0]) == null ? void 0 : i.numDeletedRows) ?? 0);
         if (c += f, f < s) break;
       }
       let l = 0;
       for (; ; ) {
-        let m = e.deleteFrom("sessions").where(
+        let _ = e.deleteFrom("sessions").where(
           (g) => g.or([
             g("expires_at_ts", "<", r),
             g("idle_expires_at_ts", "<", r)
           ])
         );
-        a && (m = m.where("tenant_id", "=", a)), n && (m = m.where("user_id", "=", n));
-        const p = await m.limit(s).execute(), f = Number(((u = p[0]) == null ? void 0 : u.numDeletedRows) ?? 0);
+        a && (_ = _.where("tenant_id", "=", a)), n && (_ = _.where("user_id", "=", n));
+        const p = await _.limit(s).execute(), f = Number(((u = p[0]) == null ? void 0 : u.numDeletedRows) ?? 0);
         if (l += f, f < s) break;
       }
-      let _ = 0;
+      let m = 0;
       for (; ; ) {
-        let m = e.deleteFrom("login_sessions").where("expires_at_ts", "<", r);
-        a && (m = m.where(
+        let _ = e.deleteFrom("login_sessions").where("expires_at_ts", "<", r);
+        a && (_ = _.where(
           "tenant_id",
           "=",
           a
-        )), n && (m = m.where(
+        )), n && (_ = _.where(
           "user_id",
           "=",
           n
         ));
-        const p = await m.limit(s).execute(), f = Number(((d = p[0]) == null ? void 0 : d.numDeletedRows) ?? 0);
-        if (_ += f, f < s) break;
+        const p = await _.limit(s).execute(), f = Number(((d = p[0]) == null ? void 0 : d.numDeletedRows) ?? 0);
+        if (m += f, f < s) break;
       }
-      (c > 0 || l > 0 || _ > 0) && console.log(
-        `Session cleanup: deleted ${c} refresh_tokens, ${l} sessions, ${_} login_sessions`
+      (c > 0 || l > 0 || m > 0) && console.log(
+        `Session cleanup: deleted ${c} refresh_tokens, ${l} sessions, ${m} login_sessions`
       );
     } catch (c) {
       console.error("Error during session cleanup:", c);
@@ -2631,7 +2633,7 @@ function wn(e) {
 function yn(e) {
   return async (t, a) => {
     const n = q.parse({
-      id: $(),
+      id: E(),
       ...a,
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -2650,25 +2652,25 @@ function vn(e) {
   return async (t, a = {}) => {
     const { page: n = 0, per_page: o = 50, include_totals: r = !1, q: s } = a;
     let i = e.selectFrom("forms").where("tenant_id", "=", t);
-    s && (i = O(e, i, s, []));
-    const c = (await i.offset(n * o).limit(o).selectAll().execute()).map((_) => {
-      const m = { ..._ };
-      if (typeof m.nodes == "string")
+    s && (i = k(e, i, s, []));
+    const c = (await i.offset(n * o).limit(o).selectAll().execute()).map((m) => {
+      const _ = { ...m };
+      if (typeof _.nodes == "string")
         try {
-          m.nodes = JSON.parse(m.nodes);
+          _.nodes = JSON.parse(_.nodes);
         } catch {
         }
-      if (typeof m.start == "string")
+      if (typeof _.start == "string")
         try {
-          m.start = JSON.parse(m.start);
+          _.start = JSON.parse(_.start);
         } catch {
         }
-      if (typeof m.ending == "string")
+      if (typeof _.ending == "string")
         try {
-          m.ending = JSON.parse(m.ending);
+          _.ending = JSON.parse(_.ending);
         } catch {
         }
-      return q.parse(w(m));
+      return q.parse(w(_));
     });
     if (!r)
       return {
@@ -2677,12 +2679,12 @@ function vn(e) {
         limit: 0,
         length: 0
       };
-    const { count: l } = await i.select((_) => _.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    const { count: l } = await i.select((m) => m.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
       forms: c,
       start: n * o,
       limit: o,
-      length: k(l)
+      length: $(l)
     };
   };
 }
@@ -2749,17 +2751,17 @@ function bn(e) {
       skip_consent_for_verifiable_first_party_clients: d,
       allow_offline_access: c,
       is_system: l,
-      metadata: _,
-      ...m
+      metadata: m,
+      ..._
     } = r, p = {
-      ...m,
+      ..._,
       tenant_id: t,
       scopes: i ? JSON.stringify(i) : "[]",
       options: u ? JSON.stringify(u) : "{}",
       skip_consent_for_verifiable_first_party_clients: d ? 1 : 0,
       allow_offline_access: c ? 1 : 0,
       is_system: l ? 1 : 0,
-      metadata: _ ? JSON.stringify(_) : void 0,
+      metadata: m ? JSON.stringify(m) : void 0,
       verification_key: s,
       created_at: n,
       updated_at: n
@@ -2779,9 +2781,9 @@ function Sn(e) {
       allow_offline_access: d,
       is_system: c,
       metadata: l,
-      ..._
-    } = o, m = {
-      ..._,
+      ...m
+    } = o, _ = w({
+      ...m,
       scopes: s ? JSON.parse(s) : [],
       options: i ? JSON.parse(i) : {},
       skip_consent_for_verifiable_first_party_clients: !!u,
@@ -2790,8 +2792,8 @@ function Sn(e) {
       metadata: l ? JSON.parse(l) : void 0,
       // Convert verification_key back to verificationKey for API
       verificationKey: r
-    };
-    return w(m);
+    });
+    return _.token_lifetime ?? (_.token_lifetime = 86400), _.token_lifetime_for_web ?? (_.token_lifetime_for_web = 7200), _;
   };
 }
 function On(e) {
@@ -2799,38 +2801,38 @@ function On(e) {
     const { page: n = 0, per_page: o = 50, include_totals: r = !1, q: s } = a;
     let i = e.selectFrom("resource_servers").where("resource_servers.tenant_id", "=", t);
     if (s) {
-      const _ = s.trim(), m = _.split(/\s+/), p = m.length === 1 ? m[0] : void 0, f = p ? p.match(/^(-)?(name|identifier):(.*)$/) : null, g = f ? f[3] : "", y = /^(>=|>|<=|<)/.test(g || "");
+      const m = s.trim(), _ = m.split(/\s+/), p = _.length === 1 ? _[0] : void 0, f = p ? p.match(/^(-)?(name|identifier):(.*)$/) : null, g = f ? f[3] : "", y = /^(>=|>|<=|<)/.test(g || "");
       if (f && !y) {
-        const x = !!f[1], v = f[2] === "name" ? "resource_servers.name" : "resource_servers.identifier";
-        i = x ? i.where(v, "not like", `%${g}%`) : i.where(v, "like", `%${g}%`);
+        const T = !!f[1], v = f[2] === "name" ? "resource_servers.name" : "resource_servers.identifier";
+        i = T ? i.where(v, "not like", `%${g}%`) : i.where(v, "like", `%${g}%`);
       } else
-        i = O(e, i, _, [
+        i = k(e, i, m, [
           "resource_servers.name",
           "resource_servers.identifier"
         ]);
     }
-    const c = (await i.offset(n * o).limit(o).selectAll().execute()).map((_) => {
-      const m = _, {
+    const c = (await i.offset(n * o).limit(o).selectAll().execute()).map((m) => {
+      const _ = m, {
         verification_key: p,
         scopes: f,
         options: g,
         skip_consent_for_verifiable_first_party_clients: y,
-        allow_offline_access: x,
+        allow_offline_access: T,
         is_system: v,
-        metadata: T,
-        ...E
-      } = m, I = {
-        ...E,
+        metadata: N,
+        ...I
+      } = _, C = w({
+        ...I,
         scopes: f ? JSON.parse(f) : [],
         options: g ? JSON.parse(g) : {},
         skip_consent_for_verifiable_first_party_clients: !!y,
-        allow_offline_access: !!x,
+        allow_offline_access: !!T,
         is_system: v ? !0 : void 0,
-        metadata: T ? JSON.parse(T) : void 0,
+        metadata: N ? JSON.parse(N) : void 0,
         // Convert verification_key back to verificationKey for API
         verificationKey: p
-      };
-      return w(I);
+      });
+      return C.token_lifetime ?? (C.token_lifetime = 86400), C.token_lifetime_for_web ?? (C.token_lifetime_for_web = 7200), C;
     });
     if (!r)
       return {
@@ -2839,12 +2841,12 @@ function On(e) {
         limit: 0,
         length: 0
       };
-    const { count: l } = await i.select((_) => _.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    const { count: l } = await i.select((m) => m.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
       resource_servers: c,
       start: n * o,
       limit: o,
-      length: k(l)
+      length: $(l)
     };
   };
 }
@@ -2865,17 +2867,17 @@ function $n(e) {
       is_system: d,
       metadata: c,
       ...l
-    } = n, _ = {
+    } = n, m = {
       ...l,
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
     };
-    if (o !== void 0 && (_.verification_key = o), r !== void 0 && (_.scopes = JSON.stringify(r)), s !== void 0) {
+    if (o !== void 0 && (m.verification_key = o), r !== void 0 && (m.scopes = JSON.stringify(r)), s !== void 0) {
       const p = await e.selectFrom("resource_servers").select("options").where("tenant_id", "=", t).where("id", "=", a).executeTakeFirst(), g = { ...p != null && p.options ? JSON.parse(p.options) : {}, ...s };
-      _.options = JSON.stringify(g);
+      m.options = JSON.stringify(g);
     }
-    c !== void 0 && (_.metadata = JSON.stringify(c)), i !== void 0 && (_.skip_consent_for_verifiable_first_party_clients = i ? 1 : 0), u !== void 0 && (_.allow_offline_access = u ? 1 : 0), d !== void 0 && (_.is_system = d ? 1 : 0);
-    const m = await e.updateTable("resource_servers").set(_).where("tenant_id", "=", t).where("id", "=", a).executeTakeFirst();
-    return Number(m.numUpdatedRows) > 0;
+    c !== void 0 && (m.metadata = JSON.stringify(c)), i !== void 0 && (m.skip_consent_for_verifiable_first_party_clients = i ? 1 : 0), u !== void 0 && (m.allow_offline_access = u ? 1 : 0), d !== void 0 && (m.is_system = d ? 1 : 0);
+    const _ = await e.updateTable("resource_servers").set(m).where("tenant_id", "=", t).where("id", "=", a).executeTakeFirst();
+    return Number(_.numUpdatedRows) > 0;
   };
 }
 function En(e) {
@@ -2889,7 +2891,7 @@ function En(e) {
 }
 function In(e) {
   return async (t, a) => {
-    const n = (/* @__PURE__ */ new Date()).toISOString(), o = a.id || $(), { is_system: r, id: s, metadata: i, ...u } = a, d = {
+    const n = (/* @__PURE__ */ new Date()).toISOString(), o = a.id || E(), { is_system: r, id: s, metadata: i, ...u } = a, d = {
       id: o,
       ...u,
       tenant_id: t,
@@ -2924,12 +2926,12 @@ function Pn(e) {
   return async (t, a) => {
     let n = e.selectFrom("roles").where("roles.tenant_id", "=", t);
     const { page: o = 0, per_page: r = 50, include_totals: s = !1 } = a;
-    a.q && (n = O(e, n, a.q, ["name"]));
+    a.q && (n = k(e, n, a.q, ["name"]));
     const d = (await n.offset(o * r).limit(r).selectAll().execute()).map((l) => {
-      const _ = l, { is_system: m, tenant_id: p, metadata: f, ...g } = _;
+      const m = l, { is_system: _, tenant_id: p, metadata: f, ...g } = m;
       return {
         ...g,
-        is_system: m ? !0 : void 0,
+        is_system: _ ? !0 : void 0,
         metadata: f ? JSON.parse(f) : void 0
       };
     });
@@ -2945,7 +2947,7 @@ function Pn(e) {
       roles: d,
       start: o * r,
       limit: r,
-      length: k(c)
+      length: $(c)
     };
   };
 }
@@ -3275,9 +3277,9 @@ function Zn(e) {
     if (a != null && a.include_totals) {
       let c = e.selectFrom("organizations").select(h`count(*)`.as("count")).where("tenant_id", "=", t);
       a != null && a.q && (c = c.where(
-        (_) => _.or([
-          _("name", "like", `%${a.q}%`),
-          _("display_name", "like", `%${a.q}%`)
+        (m) => m.or([
+          m("name", "like", `%${a.q}%`),
+          m("display_name", "like", `%${a.q}%`)
         ])
       ));
       const l = await c.executeTakeFirst();
@@ -3329,7 +3331,7 @@ function ao(e) {
 function no(e) {
   return async (t, a) => {
     const n = {
-      id: $(),
+      id: E(),
       tenant_id: t,
       user_id: a.user_id,
       organization_id: a.organization_id,
@@ -3798,7 +3800,7 @@ function bo(e) {
 }
 function So(e) {
   return async (t, a) => {
-    const n = $();
+    const n = E();
     return await e.insertInto("outbox_events").values({
       id: n,
       tenant_id: t,
@@ -5949,7 +5951,7 @@ async function Ud(e) {
     }
     for (const o of n)
       await e.insertInto("password_history").values({
-        id: $(),
+        id: E(),
         user_id: o.user_id,
         tenant_id: o.tenant_id,
         password: o.password,
@@ -6171,7 +6173,7 @@ async function hu(e) {
     return "sqlite";
   }
 }
-async function N(e, t, a, n) {
+async function b(e, t, a, n) {
   try {
     await e.schema.alterTable(t).addColumn(a, n).execute();
   } catch (o) {
@@ -6186,7 +6188,7 @@ async function N(e, t, a, n) {
 }
 async function pu(e) {
   const t = await hu(e);
-  await N(e, "refresh_tokens", "created_at_ts", "bigint"), await N(e, "refresh_tokens", "expires_at_ts", "bigint"), await N(e, "refresh_tokens", "idle_expires_at_ts", "bigint"), await N(e, "refresh_tokens", "last_exchanged_at_ts", "bigint"), await N(e, "sessions", "created_at_ts", "bigint"), await N(e, "sessions", "updated_at_ts", "bigint"), await N(e, "sessions", "expires_at_ts", "bigint"), await N(e, "sessions", "idle_expires_at_ts", "bigint"), await N(e, "sessions", "authenticated_at_ts", "bigint"), await N(e, "sessions", "last_interaction_at_ts", "bigint"), await N(e, "sessions", "used_at_ts", "bigint"), await N(e, "sessions", "revoked_at_ts", "bigint"), await N(e, "login_sessions", "created_at_ts", "bigint"), await N(e, "login_sessions", "updated_at_ts", "bigint"), await N(e, "login_sessions", "expires_at_ts", "bigint"), t === "mysql" && (await e.schema.alterTable("refresh_tokens").modifyColumn("created_at", "varchar(35)").execute(), await e.schema.alterTable("refresh_tokens").modifyColumn("expires_at", "varchar(35)").execute(), await e.schema.alterTable("sessions").modifyColumn("created_at", "varchar(35)").execute(), await e.schema.alterTable("sessions").modifyColumn("updated_at", "varchar(35)").execute(), await e.schema.alterTable("sessions").modifyColumn("expires_at", "varchar(35)").execute(), await e.schema.alterTable("login_sessions").modifyColumn("created_at", "varchar(35)").execute(), await e.schema.alterTable("login_sessions").modifyColumn("updated_at", "varchar(35)").execute(), await e.schema.alterTable("login_sessions").modifyColumn("expires_at", "varchar(35)").execute()), await e.schema.createIndex("idx_sessions_user_id").on("sessions").columns(["tenant_id", "user_id"]).execute(), await e.schema.createIndex("idx_refresh_tokens_user_id").on("refresh_tokens").columns(["tenant_id", "user_id"]).execute(), await e.schema.createIndex("idx_refresh_tokens_session_id").on("refresh_tokens").column("session_id").execute(), await e.schema.createIndex("idx_refresh_tokens_expires_at_ts").on("refresh_tokens").column("expires_at_ts").execute(), await e.schema.createIndex("idx_sessions_expires_at_ts").on("sessions").column("expires_at_ts").execute(), await e.schema.createIndex("idx_login_sessions_expires_at_ts").on("login_sessions").column("expires_at_ts").execute();
+  await b(e, "refresh_tokens", "created_at_ts", "bigint"), await b(e, "refresh_tokens", "expires_at_ts", "bigint"), await b(e, "refresh_tokens", "idle_expires_at_ts", "bigint"), await b(e, "refresh_tokens", "last_exchanged_at_ts", "bigint"), await b(e, "sessions", "created_at_ts", "bigint"), await b(e, "sessions", "updated_at_ts", "bigint"), await b(e, "sessions", "expires_at_ts", "bigint"), await b(e, "sessions", "idle_expires_at_ts", "bigint"), await b(e, "sessions", "authenticated_at_ts", "bigint"), await b(e, "sessions", "last_interaction_at_ts", "bigint"), await b(e, "sessions", "used_at_ts", "bigint"), await b(e, "sessions", "revoked_at_ts", "bigint"), await b(e, "login_sessions", "created_at_ts", "bigint"), await b(e, "login_sessions", "updated_at_ts", "bigint"), await b(e, "login_sessions", "expires_at_ts", "bigint"), t === "mysql" && (await e.schema.alterTable("refresh_tokens").modifyColumn("created_at", "varchar(35)").execute(), await e.schema.alterTable("refresh_tokens").modifyColumn("expires_at", "varchar(35)").execute(), await e.schema.alterTable("sessions").modifyColumn("created_at", "varchar(35)").execute(), await e.schema.alterTable("sessions").modifyColumn("updated_at", "varchar(35)").execute(), await e.schema.alterTable("sessions").modifyColumn("expires_at", "varchar(35)").execute(), await e.schema.alterTable("login_sessions").modifyColumn("created_at", "varchar(35)").execute(), await e.schema.alterTable("login_sessions").modifyColumn("updated_at", "varchar(35)").execute(), await e.schema.alterTable("login_sessions").modifyColumn("expires_at", "varchar(35)").execute()), await e.schema.createIndex("idx_sessions_user_id").on("sessions").columns(["tenant_id", "user_id"]).execute(), await e.schema.createIndex("idx_refresh_tokens_user_id").on("refresh_tokens").columns(["tenant_id", "user_id"]).execute(), await e.schema.createIndex("idx_refresh_tokens_session_id").on("refresh_tokens").column("session_id").execute(), await e.schema.createIndex("idx_refresh_tokens_expires_at_ts").on("refresh_tokens").column("expires_at_ts").execute(), await e.schema.createIndex("idx_sessions_expires_at_ts").on("sessions").column("expires_at_ts").execute(), await e.schema.createIndex("idx_login_sessions_expires_at_ts").on("login_sessions").column("expires_at_ts").execute();
 }
 async function F(e, t, a) {
   try {
@@ -6197,7 +6199,7 @@ async function F(e, t, a) {
     throw n;
   }
 }
-async function b(e, t, a) {
+async function S(e, t, a) {
   try {
     await e.schema.alterTable(t).dropColumn(a).execute();
   } catch (n) {
@@ -6207,7 +6209,7 @@ async function b(e, t, a) {
   }
 }
 async function fu(e) {
-  await F(e, "idx_sessions_user_id", "sessions"), await F(e, "idx_refresh_tokens_user_id", "refresh_tokens"), await F(e, "idx_refresh_tokens_session_id", "refresh_tokens"), await F(e, "idx_refresh_tokens_expires_at_ts", "refresh_tokens"), await F(e, "idx_sessions_expires_at_ts", "sessions"), await F(e, "idx_login_sessions_expires_at_ts", "login_sessions"), await b(e, "refresh_tokens", "created_at_ts"), await b(e, "refresh_tokens", "expires_at_ts"), await b(e, "refresh_tokens", "idle_expires_at_ts"), await b(e, "refresh_tokens", "last_exchanged_at_ts"), await b(e, "sessions", "created_at_ts"), await b(e, "sessions", "updated_at_ts"), await b(e, "sessions", "expires_at_ts"), await b(e, "sessions", "idle_expires_at_ts"), await b(e, "sessions", "authenticated_at_ts"), await b(e, "sessions", "last_interaction_at_ts"), await b(e, "sessions", "used_at_ts"), await b(e, "sessions", "revoked_at_ts"), await b(e, "login_sessions", "created_at_ts"), await b(e, "login_sessions", "updated_at_ts"), await b(e, "login_sessions", "expires_at_ts");
+  await F(e, "idx_sessions_user_id", "sessions"), await F(e, "idx_refresh_tokens_user_id", "refresh_tokens"), await F(e, "idx_refresh_tokens_session_id", "refresh_tokens"), await F(e, "idx_refresh_tokens_expires_at_ts", "refresh_tokens"), await F(e, "idx_sessions_expires_at_ts", "sessions"), await F(e, "idx_login_sessions_expires_at_ts", "login_sessions"), await S(e, "refresh_tokens", "created_at_ts"), await S(e, "refresh_tokens", "expires_at_ts"), await S(e, "refresh_tokens", "idle_expires_at_ts"), await S(e, "refresh_tokens", "last_exchanged_at_ts"), await S(e, "sessions", "created_at_ts"), await S(e, "sessions", "updated_at_ts"), await S(e, "sessions", "expires_at_ts"), await S(e, "sessions", "idle_expires_at_ts"), await S(e, "sessions", "authenticated_at_ts"), await S(e, "sessions", "last_interaction_at_ts"), await S(e, "sessions", "used_at_ts"), await S(e, "sessions", "revoked_at_ts"), await S(e, "login_sessions", "created_at_ts"), await S(e, "login_sessions", "updated_at_ts"), await S(e, "login_sessions", "expires_at_ts");
 }
 const gu = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
@@ -6221,7 +6223,7 @@ async function xe(e) {
     return "sqlite";
   }
 }
-async function S(e, t, a) {
+async function O(e, t, a) {
   try {
     await e.schema.alterTable(t).dropColumn(a).execute();
   } catch (n) {
@@ -6247,7 +6249,7 @@ async function wu(e) {
       `  Warning: Failed to drop index login_sessions_state_updated_idx: ${a instanceof Error ? a.message : String(a)}`
     );
   }
-  console.log("Dropping old date columns..."), await S(e, "refresh_tokens", "created_at"), await S(e, "refresh_tokens", "expires_at"), await S(e, "refresh_tokens", "idle_expires_at"), await S(e, "refresh_tokens", "last_exchanged_at"), await S(e, "sessions", "created_at"), await S(e, "sessions", "updated_at"), await S(e, "sessions", "expires_at"), await S(e, "sessions", "idle_expires_at"), await S(e, "sessions", "authenticated_at"), await S(e, "sessions", "last_interaction_at"), await S(e, "sessions", "used_at"), await S(e, "sessions", "revoked_at"), await S(e, "login_sessions", "created_at"), await S(e, "login_sessions", "updated_at"), await S(e, "login_sessions", "expires_at"), t === "mysql" && (console.log("Increasing ID column sizes for ULID support..."), await e.schema.alterTable("login_sessions").modifyColumn("id", "varchar(26)").execute(), await e.schema.alterTable("login_sessions").modifyColumn("session_id", "varchar(26)").execute(), await e.schema.alterTable("login_sessions").modifyColumn("csrf_token", "varchar(26)").execute(), await e.schema.alterTable("sessions").modifyColumn("id", "varchar(26)").execute(), await e.schema.alterTable("sessions").modifyColumn("login_session_id", "varchar(26)").execute(), await e.schema.alterTable("refresh_tokens").modifyColumn("id", "varchar(26)").execute(), await e.schema.alterTable("refresh_tokens").modifyColumn("session_id", "varchar(26)").execute()), console.log("Migration completed successfully");
+  console.log("Dropping old date columns..."), await O(e, "refresh_tokens", "created_at"), await O(e, "refresh_tokens", "expires_at"), await O(e, "refresh_tokens", "idle_expires_at"), await O(e, "refresh_tokens", "last_exchanged_at"), await O(e, "sessions", "created_at"), await O(e, "sessions", "updated_at"), await O(e, "sessions", "expires_at"), await O(e, "sessions", "idle_expires_at"), await O(e, "sessions", "authenticated_at"), await O(e, "sessions", "last_interaction_at"), await O(e, "sessions", "used_at"), await O(e, "sessions", "revoked_at"), await O(e, "login_sessions", "created_at"), await O(e, "login_sessions", "updated_at"), await O(e, "login_sessions", "expires_at"), t === "mysql" && (console.log("Increasing ID column sizes for ULID support..."), await e.schema.alterTable("login_sessions").modifyColumn("id", "varchar(26)").execute(), await e.schema.alterTable("login_sessions").modifyColumn("session_id", "varchar(26)").execute(), await e.schema.alterTable("login_sessions").modifyColumn("csrf_token", "varchar(26)").execute(), await e.schema.alterTable("sessions").modifyColumn("id", "varchar(26)").execute(), await e.schema.alterTable("sessions").modifyColumn("login_session_id", "varchar(26)").execute(), await e.schema.alterTable("refresh_tokens").modifyColumn("id", "varchar(26)").execute(), await e.schema.alterTable("refresh_tokens").modifyColumn("session_id", "varchar(26)").execute()), console.log("Migration completed successfully");
 }
 async function yu(e) {
   await xe(e) === "mysql" && (console.log("Restoring ID column sizes to varchar(21)..."), await e.schema.alterTable("login_sessions").modifyColumn("id", "varchar(21)").execute(), await e.schema.alterTable("login_sessions").modifyColumn("session_id", "varchar(21)").execute(), await e.schema.alterTable("login_sessions").modifyColumn("csrf_token", "varchar(21)").execute(), await e.schema.alterTable("sessions").modifyColumn("id", "varchar(21)").execute(), await e.schema.alterTable("sessions").modifyColumn("login_session_id", "varchar(21)").execute(), await e.schema.alterTable("refresh_tokens").modifyColumn("id", "varchar(21)").execute(), await e.schema.alterTable("refresh_tokens").modifyColumn("session_id", "varchar(21)").execute()), console.log("Re-adding old date columns (data will be empty)..."), await e.schema.alterTable("refresh_tokens").addColumn("created_at", "varchar(35)").execute(), await e.schema.alterTable("refresh_tokens").addColumn("expires_at", "varchar(35)").execute(), await e.schema.alterTable("refresh_tokens").addColumn("idle_expires_at", "varchar(35)").execute(), await e.schema.alterTable("refresh_tokens").addColumn("last_exchanged_at", "varchar(35)").execute(), await e.schema.alterTable("sessions").addColumn("created_at", "varchar(35)").execute(), await e.schema.alterTable("sessions").addColumn("updated_at", "varchar(35)").execute(), await e.schema.alterTable("sessions").addColumn("expires_at", "varchar(35)").execute(), await e.schema.alterTable("sessions").addColumn("idle_expires_at", "varchar(35)").execute(), await e.schema.alterTable("sessions").addColumn("authenticated_at", "varchar(35)").execute(), await e.schema.alterTable("sessions").addColumn("last_interaction_at", "varchar(35)").execute(), await e.schema.alterTable("sessions").addColumn("used_at", "varchar(35)").execute(), await e.schema.alterTable("sessions").addColumn("revoked_at", "varchar(35)").execute(), await e.schema.alterTable("login_sessions").addColumn("created_at", "varchar(35)").execute(), await e.schema.alterTable("login_sessions").addColumn("updated_at", "varchar(35)").execute(), await e.schema.alterTable("login_sessions").addColumn("expires_at", "varchar(35)").execute(), console.log("Rollback completed");
@@ -6475,11 +6477,11 @@ async function Wu(e) {
         SUM(CASE WHEN CHAR_LENGTH(hook_id) > 21 THEN 1 ELSE 0 END) AS long_hook_id,
         SUM(CASE WHEN CHAR_LENGTH(form_id) > 128 THEN 1 ELSE 0 END) AS long_form_id,
         SUM(CASE WHEN CHAR_LENGTH(template_id) > 64 THEN 1 ELSE 0 END) AS long_template_id
-      FROM hooks`.execute(e), l = Number(((i = c[0]) == null ? void 0 : i.long_hook_id) ?? 0), _ = Number(((u = c[0]) == null ? void 0 : u.long_form_id) ?? 0), m = Number(((d = c[0]) == null ? void 0 : d.long_template_id) ?? 0), p = [];
-    if (l > 0 && p.push(`${l} row(s) with hook_id longer than 21 chars`), _ > 0 && p.push(
-      `${_} row(s) with form_id longer than 128 chars`
-    ), m > 0 && p.push(
-      `${m} row(s) with template_id longer than 64 chars`
+      FROM hooks`.execute(e), l = Number(((i = c[0]) == null ? void 0 : i.long_hook_id) ?? 0), m = Number(((u = c[0]) == null ? void 0 : u.long_form_id) ?? 0), _ = Number(((d = c[0]) == null ? void 0 : d.long_template_id) ?? 0), p = [];
+    if (l > 0 && p.push(`${l} row(s) with hook_id longer than 21 chars`), m > 0 && p.push(
+      `${m} row(s) with form_id longer than 128 chars`
+    ), _ > 0 && p.push(
+      `${_} row(s) with template_id longer than 64 chars`
     ), p.length > 0)
       throw new Error(
         `Preflight length check failed: ${p.join("; ")}. Truncate or fix oversized values before running this migration.`