@authhero/kysely-adapter 10.129.0 → 10.130.0

package/dist/kysely-adapter.d.ts

@@ -353,6 +353,8 @@ declare const auditEventInsertSchema: z.ZodObject<{
 	connection: z.ZodOptional<z.ZodString>;
 	strategy: z.ZodOptional<z.ZodString>;
 	strategy_type: z.ZodOptional<z.ZodString>;
+	audience: z.ZodOptional<z.ZodString>;
+	scope: z.ZodOptional<z.ZodString>;
 	location: z.ZodOptional<z.ZodObject<{
 		country_code: z.ZodString;
 		city_name: z.ZodString;
@@ -434,6 +436,8 @@ declare const auditEventInsertSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	location?: {
 		country_code: string;
 		city_name: string;
@@ -491,6 +495,8 @@ declare const auditEventInsertSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	location?: {
 		country_code: string;
 		city_name: string;
@@ -621,6 +627,8 @@ declare const auditEventSchema: z.ZodObject<{
 	connection: z.ZodOptional<z.ZodString>;
 	strategy: z.ZodOptional<z.ZodString>;
 	strategy_type: z.ZodOptional<z.ZodString>;
+	audience: z.ZodOptional<z.ZodString>;
+	scope: z.ZodOptional<z.ZodString>;
 	location: z.ZodOptional<z.ZodObject<{
 		country_code: z.ZodString;
 		city_name: z.ZodString;
@@ -705,6 +713,8 @@ declare const auditEventSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	location?: {
 		country_code: string;
 		city_name: string;
@@ -763,6 +773,8 @@ declare const auditEventSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	location?: {
 		country_code: string;
 		city_name: string;
@@ -2180,8 +2192,8 @@ declare const clientGrantInsertSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
 	client_id: string;
 	audience: string;
-	organization_usage?: "deny" | "allow" | "require" | undefined;
 	scope?: string[] | undefined;
+	organization_usage?: "deny" | "allow" | "require" | undefined;
 	allow_any_organization?: boolean | undefined;
 	is_system?: boolean | undefined;
 	subject_type?: "user" | "client" | undefined;
@@ -2189,8 +2201,8 @@ declare const clientGrantInsertSchema: z.ZodObject<{
 }, {
 	client_id: string;
 	audience: string;
-	organization_usage?: "deny" | "allow" | "require" | undefined;
 	scope?: string[] | undefined;
+	organization_usage?: "deny" | "allow" | "require" | undefined;
 	allow_any_organization?: boolean | undefined;
 	is_system?: boolean | undefined;
 	subject_type?: "user" | "client" | undefined;
@@ -2222,8 +2234,8 @@ declare const clientGrantSchema: z.ZodObject<{
 	audience: string;
 	created_at?: string | undefined;
 	updated_at?: string | undefined;
-	organization_usage?: "deny" | "allow" | "require" | undefined;
 	scope?: string[] | undefined;
+	organization_usage?: "deny" | "allow" | "require" | undefined;
 	allow_any_organization?: boolean | undefined;
 	is_system?: boolean | undefined;
 	subject_type?: "user" | "client" | undefined;
@@ -2234,8 +2246,8 @@ declare const clientGrantSchema: z.ZodObject<{
 	audience: string;
 	created_at?: string | undefined;
 	updated_at?: string | undefined;
-	organization_usage?: "deny" | "allow" | "require" | undefined;
 	scope?: string[] | undefined;
+	organization_usage?: "deny" | "allow" | "require" | undefined;
 	allow_any_organization?: boolean | undefined;
 	is_system?: boolean | undefined;
 	subject_type?: "user" | "client" | undefined;
@@ -2901,9 +2913,9 @@ declare const connectionInsertSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -3004,9 +3016,9 @@ declare const connectionInsertSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -3116,9 +3128,9 @@ declare const connectionInsertSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -3234,9 +3246,9 @@ declare const connectionInsertSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -3777,9 +3789,9 @@ declare const connectionSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -3880,9 +3892,9 @@ declare const connectionSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -3994,9 +4006,9 @@ declare const connectionSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -4114,9 +4126,9 @@ declare const connectionSchema: z.ZodObject<{
 			} | undefined;
 		} | undefined;
 		client_id?: string | undefined;
+		scope?: string | undefined;
 		provider?: string | undefined;
 		client_secret?: string | undefined;
-		scope?: string | undefined;
 		kid?: string | undefined;
 		team_id?: string | undefined;
 		realms?: string | undefined;
@@ -15701,9 +15713,9 @@ declare const loginSessionInsertSchema: z.ZodObject<{
 		vendor_id: z.ZodOptional<z.ZodString>;
 	}, "strip", z.ZodTypeAny, {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -15720,9 +15732,9 @@ declare const loginSessionInsertSchema: z.ZodObject<{
 		vendor_id?: string | undefined;
 	}, {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -15766,9 +15778,9 @@ declare const loginSessionInsertSchema: z.ZodObject<{
 	csrf_token: string;
 	authParams: {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -15804,9 +15816,9 @@ declare const loginSessionInsertSchema: z.ZodObject<{
 	csrf_token: string;
 	authParams: {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -15867,9 +15879,9 @@ declare const loginSessionSchema: z.ZodObject<{
 		vendor_id: z.ZodOptional<z.ZodString>;
 	}, "strip", z.ZodTypeAny, {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -15886,9 +15898,9 @@ declare const loginSessionSchema: z.ZodObject<{
 		vendor_id?: string | undefined;
 	}, {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -15935,9 +15947,9 @@ declare const loginSessionSchema: z.ZodObject<{
 	csrf_token: string;
 	authParams: {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -15976,9 +15988,9 @@ declare const loginSessionSchema: z.ZodObject<{
 	csrf_token: string;
 	authParams: {
 		client_id: string;
-		username?: string | undefined;
 		audience?: string | undefined;
 		scope?: string | undefined;
+		username?: string | undefined;
 		act_as?: string | undefined;
 		response_type?: AuthorizationResponseType | undefined;
 		response_mode?: AuthorizationResponseMode | undefined;
@@ -16088,6 +16100,8 @@ declare const logInsertSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	auth0_client?: {
 		version: string;
 		name: string;
@@ -16098,8 +16112,6 @@ declare const logInsertSchema: z.ZodObject<{
 	hostname?: string | undefined;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
-	audience?: string | undefined;
-	scope?: string | undefined;
 	details?: any;
 	user_name?: string | undefined;
 	client_name?: string | undefined;
@@ -16123,6 +16135,8 @@ declare const logInsertSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	auth0_client?: {
 		version: string;
 		name: string;
@@ -16133,8 +16147,6 @@ declare const logInsertSchema: z.ZodObject<{
 	hostname?: string | undefined;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
-	audience?: string | undefined;
-	scope?: string | undefined;
 	details?: any;
 	user_name?: string | undefined;
 	client_name?: string | undefined;
@@ -16226,6 +16238,8 @@ declare const logSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	auth0_client?: {
 		version: string;
 		name: string;
@@ -16236,8 +16250,6 @@ declare const logSchema: z.ZodObject<{
 	hostname?: string | undefined;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
-	audience?: string | undefined;
-	scope?: string | undefined;
 	details?: any;
 	user_name?: string | undefined;
 	client_name?: string | undefined;
@@ -16261,6 +16273,8 @@ declare const logSchema: z.ZodObject<{
 	connection?: string | undefined;
 	strategy?: string | undefined;
 	strategy_type?: string | undefined;
+	audience?: string | undefined;
+	scope?: string | undefined;
 	auth0_client?: {
 		version: string;
 		name: string;
@@ -16271,8 +16285,6 @@ declare const logSchema: z.ZodObject<{
 	hostname?: string | undefined;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
-	audience?: string | undefined;
-	scope?: string | undefined;
 	details?: any;
 	user_name?: string | undefined;
 	client_name?: string | undefined;
@@ -19441,11 +19453,23 @@ export interface EmailProvidersAdapter {
 export interface ListRefreshTokenResponse extends Totals {
 	refresh_tokens: RefreshToken[];
 }
+export interface UpdateRefreshTokenOptions {
+	/**
+	 * When provided, the adapter also extends the parent login_session's
+	 * `expires_at` to `expires_at` (only if the current value is smaller).
+	 * The caller is expected to compute the new expiry so the adapter can
+	 * avoid a read-before-write and parallelise the two UPDATEs.
+	 */
+	loginSessionBump?: {
+		login_id: string;
+		expires_at: string;
+	};
+}
 export interface RefreshTokensAdapter {
 	create: (tenant_id: string, refresh_token: RefreshTokenInsert) => Promise<RefreshToken>;
 	get: (tenant_id: string, id: string) => Promise<RefreshToken | null>;
 	list(tenant_id: string, params?: ListParams): Promise<ListRefreshTokenResponse>;
-	update: (tenant_id: string, id: string, refresh_token: Partial<RefreshToken>) => Promise<boolean>;
+	update: (tenant_id: string, id: string, refresh_token: Partial<RefreshToken>, options?: UpdateRefreshTokenOptions) => Promise<boolean>;
 	remove: (tenant_id: string, id: string) => Promise<boolean>;
 	revokeByLoginSession: (tenant_id: string, login_session_id: string, revoked_at: string) => Promise<number>;
 }

package/dist/kysely-adapter.mjs

@@ -87,7 +87,7 @@ function fe(e) {
 function F(e, t = (/* @__PURE__ */ new Date(0)).toISOString()) {
   return fe(e) ?? t;
 }
-function N(e) {
+function C(e) {
   if (!e || e === "")
     return null;
   const t = new Date(e);
@@ -241,8 +241,8 @@ function at(e) {
         deployed_at_ts: f,
         secrets: g,
         dependencies: v,
-        supported_triggers: C,
-        tenant_id: x,
+        supported_triggers: N,
+        tenant_id: T,
         ...b
       } = m, I = D({ created_at_ts: _, updated_at_ts: p }, [
         "created_at_ts",
@@ -260,7 +260,7 @@ function at(e) {
           v
         ),
         supported_triggers: H(
-          C
+          N
         )
       };
     });
@@ -963,10 +963,10 @@ function zt(e) {
       updated_at_ts: n,
       authenticated_at_ts: n,
       last_interaction_at_ts: n,
-      expires_at_ts: N(s),
-      idle_expires_at_ts: N(i),
-      used_at_ts: N(u),
-      revoked_at_ts: N(d),
+      expires_at_ts: C(s),
+      idle_expires_at_ts: C(i),
+      used_at_ts: C(u),
+      revoked_at_ts: C(d),
       device: JSON.stringify(c),
       clients: JSON.stringify(l)
     }).execute(), r;
@@ -982,9 +982,9 @@ function At(e) {
       device: n.device ? JSON.stringify(n.device) : void 0,
       clients: n.clients ? JSON.stringify(n.clients) : void 0
     };
-    return n.expires_at !== void 0 && (o.expires_at_ts = N(n.expires_at)), n.idle_expires_at !== void 0 && (o.idle_expires_at_ts = N(n.idle_expires_at)), n.authenticated_at !== void 0 && (o.authenticated_at_ts = N(n.authenticated_at)), n.last_interaction_at !== void 0 && (o.last_interaction_at_ts = N(
+    return n.expires_at !== void 0 && (o.expires_at_ts = C(n.expires_at)), n.idle_expires_at !== void 0 && (o.idle_expires_at_ts = C(n.idle_expires_at)), n.authenticated_at !== void 0 && (o.authenticated_at_ts = C(n.authenticated_at)), n.last_interaction_at !== void 0 && (o.last_interaction_at_ts = C(
       n.last_interaction_at
-    )), n.used_at !== void 0 && (o.used_at_ts = N(n.used_at)), n.revoked_at !== void 0 && (o.revoked_at_ts = N(n.revoked_at)), n.user_id !== void 0 && (o.user_id = n.user_id), n.login_session_id !== void 0 && (o.login_session_id = n.login_session_id), !!(await e.updateTable("sessions").set(o).where("tenant_id", "=", t).where("sessions.id", "=", a).execute()).length;
+    )), n.used_at !== void 0 && (o.used_at_ts = C(n.used_at)), n.revoked_at !== void 0 && (o.revoked_at_ts = C(n.revoked_at)), n.user_id !== void 0 && (o.user_id = n.user_id), n.login_session_id !== void 0 && (o.login_session_id = n.login_session_id), !!(await e.updateTable("sessions").set(o).where("tenant_id", "=", t).where("sessions.id", "=", a).execute()).length;
   };
 }
 function Ft(e) {
@@ -1003,22 +1003,22 @@ function Ft(e) {
         tenant_id: f,
         device: g,
         clients: v,
-        created_at_ts: C,
-        updated_at_ts: x,
+        created_at_ts: N,
+        updated_at_ts: T,
         expires_at_ts: b,
         idle_expires_at_ts: I,
-        authenticated_at_ts: T,
+        authenticated_at_ts: x,
         last_interaction_at_ts: A,
         used_at_ts: ae,
         revoked_at_ts: De,
         ...Ae
       } = p, Fe = D(
         {
-          created_at_ts: C,
-          updated_at_ts: x,
+          created_at_ts: N,
+          updated_at_ts: T,
           expires_at_ts: b,
           idle_expires_at_ts: I,
-          authenticated_at_ts: T,
+          authenticated_at_ts: x,
           last_interaction_at_ts: A,
           used_at_ts: ae,
           revoked_at_ts: De
@@ -1687,14 +1687,14 @@ function wa(e) {
     const { page: n = 0, per_page: o = 50, include_totals: r = !1, q: s, sort: i } = a;
     let u = e.selectFrom("client_grants").where("client_grants.tenant_id", "=", t);
     if (s) {
-      const _ = s.trim(), p = _.split(/\s+/), f = p.length === 1 ? p[0] : void 0, g = f ? f.match(/^(-)?([a-zA-Z_][a-zA-Z0-9_]*):"?([^"]*)"?$/) : null, v = g ? g[3] : "", C = /^(>=|>|<=|<)/.test(v || "");
-      if (g && !C && v) {
-        const x = !!g[1], b = g[2], { ref: I } = e.dynamic, T = I(`client_grants.${b}`);
+      const _ = s.trim(), p = _.split(/\s+/), f = p.length === 1 ? p[0] : void 0, g = f ? f.match(/^(-)?([a-zA-Z_][a-zA-Z0-9_]*):"?([^"]*)"?$/) : null, v = g ? g[3] : "", N = /^(>=|>|<=|<)/.test(v || "");
+      if (g && !N && v) {
+        const T = !!g[1], b = g[2], { ref: I } = e.dynamic, x = I(`client_grants.${b}`);
         if (b === "allow_any_organization") {
           const A = v === "true" ? 1 : 0;
-          x ? u = u.where(T, "!=", A) : u = u.where(T, "=", A);
+          T ? u = u.where(x, "!=", A) : u = u.where(x, "=", A);
         } else
-          x ? u = u.where(T, "!=", v) : u = u.where(T, "=", v);
+          T ? u = u.where(x, "!=", v) : u = u.where(x, "=", v);
       } else
         u = $(e, u, _, []);
     }
@@ -1937,7 +1937,7 @@ function za(e) {
 }
 function Da(e) {
   return async (t, a) => {
-    var s, i, u, d, c, l, m, _, p, f, g, v, C, x, b, I, T, A;
+    var s, i, u, d, c, l, m, _, p, f, g, v, N, T, b, I, x, A;
     const { colors: n, font: o, ...r } = a;
     try {
       await e.insertInto("branding").values({
@@ -1955,9 +1955,9 @@ function Da(e) {
         ...r,
         colors_primary: n == null ? void 0 : n.primary,
         colors_page_background_type: (g = (f = a.colors) == null ? void 0 : f.page_background) == null ? void 0 : g.type,
-        colors_page_background_start: (C = (v = a.colors) == null ? void 0 : v.page_background) == null ? void 0 : C.start,
-        colors_page_background_end: (b = (x = a.colors) == null ? void 0 : x.page_background) == null ? void 0 : b.end,
-        colors_page_background_angle_dev: (T = (I = a.colors) == null ? void 0 : I.page_background) == null ? void 0 : T.angle_deg,
+        colors_page_background_start: (N = (v = a.colors) == null ? void 0 : v.page_background) == null ? void 0 : N.start,
+        colors_page_background_end: (b = (T = a.colors) == null ? void 0 : T.page_background) == null ? void 0 : b.end,
+        colors_page_background_angle_dev: (x = (I = a.colors) == null ? void 0 : I.page_background) == null ? void 0 : x.angle_deg,
         font_url: (A = a.font) == null ? void 0 : A.url
       }).where("tenant_id", "=", t).execute();
     }
@@ -2024,14 +2024,14 @@ function Ja(e) {
         synchronous: f,
         created_at_ts: g,
         updated_at_ts: v,
-        ...C
-      } = m, x = D({ created_at_ts: g, updated_at_ts: v }, [
+        ...N
+      } = m, T = D({ created_at_ts: g, updated_at_ts: v }, [
         "created_at_ts",
         "updated_at_ts"
       ]);
       return y({
-        ...C,
-        ...x,
+        ...N,
+        ...T,
         enabled: !!p,
         synchronous: !!f
       });
@@ -2325,7 +2325,7 @@ function cn(e) {
       updated_at_ts: Date.now(),
       // Only update expires_at_ts if a new expires_at was provided
       // Use !== undefined to preserve null values (which mean "doesn't expire")
-      ...s !== void 0 ? { expires_at_ts: N(s) } : {}
+      ...s !== void 0 ? { expires_at_ts: C(s) } : {}
     }).where("login_sessions.id", "=", a).where("login_sessions.tenant_id", "=", t).execute()).length === 1;
   };
 }
@@ -2488,7 +2488,7 @@ function vn(e) {
       resource_servers: d,
       rotating: c,
       ...l
-    } = a, m = Date.now(), _ = N(r), p = s ? N(s) : null, f = Math.max(
+    } = a, m = Date.now(), _ = C(r), p = s ? C(s) : null, f = Math.max(
       _ ?? 0,
       p ?? 0
     );
@@ -2502,7 +2502,7 @@ function vn(e) {
         created_at_ts: m,
         expires_at_ts: _,
         idle_expires_at_ts: p,
-        last_exchanged_at_ts: i ? N(i) : null
+        last_exchanged_at_ts: i ? C(i) : null
       }).execute(), f > 0 && a.login_id && await g.updateTable("login_sessions").set({
         expires_at_ts: f,
         updated_at_ts: m
@@ -2515,51 +2515,39 @@ function Cn(e) {
 }
 function xn(e) {
   return async (t, a, n) => {
-    const o = N(n), r = await e.updateTable("refresh_tokens").set({ revoked_at_ts: o }).where("tenant_id", "=", t).where("login_id", "=", a).where("revoked_at_ts", "is", null).executeTakeFirst();
+    const o = C(n), r = await e.updateTable("refresh_tokens").set({ revoked_at_ts: o }).where("tenant_id", "=", t).where("login_id", "=", a).where("revoked_at_ts", "is", null).executeTakeFirst();
     return Number(r.numUpdatedRows ?? 0);
   };
 }
 function Tn(e) {
-  return async (t, a, n) => {
+  return async (t, a, n, o) => {
     const {
-      created_at: o,
-      expires_at: r,
-      idle_expires_at: s,
-      last_exchanged_at: i,
-      revoked_at: u,
-      device: d,
-      resource_servers: c,
-      rotating: l,
-      ...m
-    } = n, _ = {
-      ...m,
-      device: d ? JSON.stringify(d) : void 0,
-      resource_servers: c ? JSON.stringify(c) : void 0,
-      rotating: l !== void 0 ? l ? 1 : 0 : void 0,
+      created_at: r,
+      expires_at: s,
+      idle_expires_at: i,
+      last_exchanged_at: u,
+      revoked_at: d,
+      device: c,
+      resource_servers: l,
+      rotating: m,
+      ..._
+    } = n, p = {
+      ..._,
+      device: c ? JSON.stringify(c) : void 0,
+      resource_servers: l ? JSON.stringify(l) : void 0,
+      rotating: m !== void 0 ? m ? 1 : 0 : void 0,
       // Convert date fields to bigint format
       // Use !== undefined to preserve null values (which mean "doesn't expire")
-      expires_at_ts: r !== void 0 ? N(r) : void 0,
-      idle_expires_at_ts: s !== void 0 ? N(s) : void 0,
-      last_exchanged_at_ts: i !== void 0 ? N(i) : void 0,
-      revoked_at_ts: u !== void 0 ? N(u) : void 0
-    };
-    return e.transaction().execute(async (p) => {
-      const g = !!(await p.updateTable("refresh_tokens").set(_).where("tenant_id", "=", t).where("refresh_tokens.id", "=", a).execute()).length, v = _.expires_at_ts !== void 0 || _.idle_expires_at_ts !== void 0;
-      if (g && v) {
-        const C = await p.selectFrom("refresh_tokens").select(["login_id", "expires_at_ts", "idle_expires_at_ts"]).where("tenant_id", "=", t).where("refresh_tokens.id", "=", a).executeTakeFirst();
-        if (C != null && C.login_id) {
-          const x = Math.max(
-            C.expires_at_ts ?? 0,
-            C.idle_expires_at_ts ?? 0
-          );
-          x > 0 && await p.updateTable("login_sessions").set({
-            expires_at_ts: x,
-            updated_at_ts: Date.now()
-          }).where("tenant_id", "=", t).where("id", "=", C.login_id).where("expires_at_ts", "<", x).execute();
-        }
-      }
-      return g;
-    });
+      expires_at_ts: s !== void 0 ? C(s) : void 0,
+      idle_expires_at_ts: i !== void 0 ? C(i) : void 0,
+      last_exchanged_at_ts: u !== void 0 ? C(u) : void 0,
+      revoked_at_ts: d !== void 0 ? C(d) : void 0
+    }, f = o == null ? void 0 : o.loginSessionBump, g = f ? C(f.expires_at) : null, v = await e.updateTable("refresh_tokens").set(p).where("tenant_id", "=", t).where("refresh_tokens.id", "=", a).executeTakeFirst();
+    return f != null && f.login_id && g && g > 0 && await e.updateTable("login_sessions").set({
+      expires_at_ts: g,
+      updated_at_ts: Date.now()
+    }).where("tenant_id", "=", t).where("id", "=", f.login_id).where("expires_at_ts", "<", g).execute().catch(() => {
+    }), ((v == null ? void 0 : v.numUpdatedRows) ?? 0n) > 0n;
   };
 }
 function Nn(e) {
@@ -2578,16 +2566,16 @@ function Nn(e) {
         tenant_id: f,
         created_at_ts: g,
         expires_at_ts: v,
-        idle_expires_at_ts: C,
-        last_exchanged_at_ts: x,
+        idle_expires_at_ts: N,
+        last_exchanged_at_ts: T,
         revoked_at_ts: b,
         ...I
-      } = p, T = D(
+      } = p, x = D(
         {
           created_at_ts: g,
           expires_at_ts: v,
-          idle_expires_at_ts: C,
-          last_exchanged_at_ts: x,
+          idle_expires_at_ts: N,
+          last_exchanged_at_ts: T,
           revoked_at_ts: b
         },
         ["created_at_ts"],
@@ -2600,7 +2588,7 @@ function Nn(e) {
       );
       return {
         ...I,
-        ...T,
+        ...x,
         rotating: !!p.rotating,
         device: p.device ? JSON.parse(p.device) : {},
         resource_servers: p.resource_servers ? JSON.parse(p.resource_servers) : []
@@ -2866,8 +2854,8 @@ function Fn(e) {
     if (s) {
       const m = s.trim(), _ = m.split(/\s+/), p = _.length === 1 ? _[0] : void 0, f = p ? p.match(/^(-)?(name|identifier):(.*)$/) : null, g = f ? f[3] : "", v = /^(>=|>|<=|<)/.test(g || "");
       if (f && !v) {
-        const C = !!f[1], x = f[2] === "name" ? "resource_servers.name" : "resource_servers.identifier";
-        i = C ? i.where(x, "not like", `%${g}%`) : i.where(x, "like", `%${g}%`);
+        const N = !!f[1], T = f[2] === "name" ? "resource_servers.name" : "resource_servers.identifier";
+        i = N ? i.where(T, "not like", `%${g}%`) : i.where(T, "like", `%${g}%`);
       } else
         i = $(e, i, m, [
           "resource_servers.name",
@@ -2880,22 +2868,22 @@ function Fn(e) {
         scopes: f,
         options: g,
         skip_consent_for_verifiable_first_party_clients: v,
-        allow_offline_access: C,
-        is_system: x,
+        allow_offline_access: N,
+        is_system: T,
         metadata: b,
         ...I
-      } = _, T = y({
+      } = _, x = y({
         ...I,
         scopes: f ? JSON.parse(f) : [],
         options: g ? JSON.parse(g) : {},
         skip_consent_for_verifiable_first_party_clients: !!v,
-        allow_offline_access: !!C,
-        is_system: x ? !0 : void 0,
+        allow_offline_access: !!N,
+        is_system: T ? !0 : void 0,
         metadata: b ? JSON.parse(b) : void 0,
         // Convert verification_key back to verificationKey for API
         verificationKey: p
       });
-      return T.token_lifetime ?? (T.token_lifetime = 86400), T.token_lifetime_for_web ?? (T.token_lifetime_for_web = 7200), T;
+      return x.token_lifetime ?? (x.token_lifetime = 86400), x.token_lifetime_for_web ?? (x.token_lifetime_for_web = 7200), x;
     });
     if (!r)
       return {