@authhero/kysely-adapter 10.131.1 → 10.131.3

package/dist/kysely-adapter.cjs

@@ -163,4 +163,4 @@
       user_id, created_at_ts, updated_at_ts, expires_at_ts,
       auth_connection, auth_strategy_strategy, auth_strategy_strategy_type,
       authenticated_at, auth_params
-    FROM login_sessions`.execute(t),await h.sql`DROP TABLE login_sessions`.execute(t),await h.sql`ALTER TABLE login_sessions_new RENAME TO login_sessions`.execute(t),await t.schema.createIndex("login_sessions_id_index").on("login_sessions").column("id").execute(),await t.schema.createIndex("idx_login_sessions_session_id").on("login_sessions").column("session_id").execute(),await t.schema.createIndex("login_sessions_tenant_user_idx").on("login_sessions").columns(["tenant_id","user_id"]).execute(),await t.schema.createIndex("login_sessions_state_idx").on("login_sessions").column("state").execute(),await t.schema.createIndex("idx_login_sessions_expires_at_ts").on("login_sessions").column("expires_at_ts").execute()}),w("  Recreated login_sessions without hoisted authParams_* columns")}async function Sm(e){}const Om=Object.freeze(Object.defineProperty({__proto__:null,down:Sm,up:Tm},Symbol.toStringTag,{value:"Module"}));async function km(e){await e.schema.alterTable("refresh_tokens").addColumn("revoked_at_ts","bigint").execute()}async function $m(e){await e.schema.alterTable("refresh_tokens").dropColumn("revoked_at_ts").execute()}const Em=Object.freeze(Object.defineProperty({__proto__:null,down:$m,up:km},Symbol.toStringTag,{value:"Module"}));async function Pm(e){await e.schema.alterTable("clients").addColumn("owner_user_id","varchar(255)").execute(),await e.schema.alterTable("clients").addColumn("registration_type","varchar(32)").execute(),await e.schema.alterTable("clients").addColumn("registration_metadata","text").execute(),await e.schema.createIndex("idx_clients_owner_user_id").on("clients").columns(["tenant_id","owner_user_id"]).execute(),await e.schema.createTable("client_registration_tokens").addColumn("id","varchar(255)",t=>t.primaryKey()).addColumn("tenant_id","varchar(191)",t=>t.references("tenants.id").onDelete("cascade").notNull()).addColumn("token_hash","varchar(64)",t=>t.notNull()).addColumn("type","varchar(8)",t=>t.notNull()).addColumn("client_id","varchar(191)").addColumn("sub","varchar(255)").addColumn("constraints","text").addColumn("single_use","integer",t=>t.defaultTo(0).notNull()).addColumn("used_at_ts","bigint").addColumn("expires_at_ts","bigint").addColumn("created_at_ts","bigint",t=>t.notNull()).addColumn("revoked_at_ts","bigint").execute(),await e.schema.createIndex("idx_client_registration_tokens_hash").on("client_registration_tokens").columns(["tenant_id","token_hash"]).unique().execute(),await e.schema.createIndex("idx_client_registration_tokens_client").on("client_registration_tokens").columns(["tenant_id","client_id"]).execute()}async function Im(e){await e.schema.dropTable("client_registration_tokens").execute(),await e.schema.dropIndex("idx_clients_owner_user_id").execute(),await e.schema.alterTable("clients").dropColumn("registration_metadata").execute(),await e.schema.alterTable("clients").dropColumn("registration_type").execute(),await e.schema.alterTable("clients").dropColumn("owner_user_id").execute()}const zm=Object.freeze(Object.defineProperty({__proto__:null,down:Im,up:Pm},Symbol.toStringTag,{value:"Module"}));async function Dm(e){try{return await h.sql`SELECT @@version_comment`.execute(e),"mysql"}catch{return"sqlite"}}const Am=[{index:"connections_tenant_id_idx",table:"connections",reason:"composite PK (tenant_id, id)"},{index:"idx_invites_tenant_id",table:"invites",reason:"idx_invites_tenant_created (tenant_id, created_at)"},{index:"idx_organizations_tenant_id",table:"organizations",reason:"idx_organizations_tenant_name_unique (tenant_id, name)"},{index:"role_permissions_role_fk",table:"role_permissions",reason:"role_permissions_pk (tenant_id, role_id, ...)"},{index:"themes_tenant_id_idx",table:"themes",reason:"themes_pkey (tenant_id, themeId)"},{index:"users_tenant_index",table:"users",reason:"stale on PlanetScale only; commented out locally in 2024"},{index:"idx_user_organizations_tenant_id",table:"user_organizations",reason:"already dropped locally; may linger on PlanetScale"}];async function Fm(e,t,a,n){try{t==="mysql"?await h.sql.raw(`DROP INDEX IF EXISTS \`${a}\` ON \`${n}\``).execute(e):await h.sql.raw(`DROP INDEX IF EXISTS "${a}"`).execute(e)}catch(o){const r=o instanceof Error?o.message:String(o);z(`  Warning: failed to drop index ${a} on ${n}: ${r}`)}}async function jm(e){const t=await Dm(e);for(const{index:a,table:n}of Am)await Fm(e,t,a,n);await e.schema.dropTable("members").ifExists().execute()}async function Rm(e){await e.schema.createTable("members").addColumn("id","varchar(255)",t=>t.notNull().primaryKey()).addColumn("tenant_id","varchar(255)",t=>t.references("tenants.id").onDelete("cascade").notNull()).addColumn("sub","varchar(255)").addColumn("email","varchar(255)").addColumn("name","varchar(255)").addColumn("status","varchar(255)").addColumn("role","varchar(255)").addColumn("picture","varchar(2083)").addColumn("created_at","varchar(255)",t=>t.notNull()).addColumn("updated_at","varchar(255)",t=>t.notNull()).execute(),await e.schema.createIndex("idx_user_organizations_tenant_id").on("user_organizations").column("tenant_id").execute(),await e.schema.createIndex("themes_tenant_id_idx").on("themes").column("tenant_id").execute(),await e.schema.createIndex("role_permissions_role_fk").on("role_permissions").columns(["tenant_id","role_id"]).execute(),await e.schema.createIndex("idx_organizations_tenant_id").on("organizations").column("tenant_id").execute(),await e.schema.createIndex("idx_invites_tenant_id").on("invites").column("tenant_id").execute(),await e.schema.createIndex("connections_tenant_id_idx").on("connections").column("tenant_id").execute()}const Mm=Object.freeze(Object.defineProperty({__proto__:null,down:Rm,up:jm},Symbol.toStringTag,{value:"Module"})),Pe={m1_init:Vo,m2_magicLink:tr,m3_updateAt:or,m4_logTable:ir,m5_userProfile:dr,m6_sessions:mr,m7_passwords:fr,m8_logsTableNewFields:yr,m9_passwordTableNewField:xr,n01_codesTable:br,n11_universalLoginSession:kr,n12_userFields:Pr,n13_userEmailIndex:Dr,n14_profileDataField:jr,n15_userEmailIndex:qr,n16_userLocale:Kr,n17_signingKeys:Qr,n18_logsFields:Wr,n19_connectionsUserinfo:Vr,n20_missingFields:ts,n21_sessionDeletedAt:os,n22_dropLogsFields:is,n23_dropUsersFields:ds,n24_logsIndexes:ms,n25_logDescMaxLength:fs,n26_logsTableExtraFields:ys,n27_usersTableNameIndex:xs,n28_usersEmailConstrain:bs,n29_increaseOtpStateLength:ks,n30_increaseTicketStateLength:Ps,n31_branding:Ds,n32_indexesAndNotNull:js,n33_vendorIdInUniversalLoginSession:qs,n34_auth0ClientInUniversalLoginSession:Ks,n35_increaseUniversalSessionStateLength:Qs,n36_authenticationCodes:Ws,n37_disableSignUps:Vs,n38_otpIpAddress:ti,n39_increaseUserAgentLength:oi,n40_userId:ii,n41_hooks:di,n42_userIdIndexes:mi,n43_userIdIndexes:fi,n44_codes:yi,n45_hookProperties:xi,n46_loginAuth0Client:bi,n47_loginAuth0Client:ki,n48_saml:Pi,n49_removeFields:Di,n50_authParamsNonce:ji,n51_connectionid:qi,n52_cert:Ki,n53_codes_primary_key:Qi,n54_cleanup_tables:Wi,n55_logs_index:Vi,n56_application_fields:tc,n57_prompt_settings:oc,n58_connection_client_id:ic,n59_connection_options:dc,n60_users_metadata:mc,n61_userLocales:fc,n62_prompt:yc,n63_connection_cleanup:xc,n64_act_as:bc,n65_code_verifier:kc,n66_email_providers:Pc,n67_drop_tickets:Dc,n68_login_useragents:jc,n70_refresh_tokens:qc,n71_session_new_fields:Kc,n72_session_primary_key:Qc,n73_drop_sessions:Wc,n74_custom_domains:Vc,n75_organizations:tl,n76_authorization_url_length:ol,n77_drop_sessions:il,n78_login_sessions:dl,n79_drop_sessions_2:ml,n80_recreate_custom_domains:fl,n81_phone:yl,n82_forms:xl,n83_addFormsIdToHooks:bl,n84_login_completed:kl,n85_add_login_session_id_to_sessions:Pl,n86_index_sessions_login_session_id:Dl,n87_code_challenge:jl,n88_add_redirect_uri_to_codes:ql,n89_add_nonce_and_state_to_codes:Kl,n90_themes:Ql,n91_resource_servers_rules_permissions:Wl,n92_role_permissions:Vl,n93_add_permissions_to_roles:td,n94_keys_connection_and_extend_columns:od,n95_create_organizations_table:id,n96_create_user_organizations_table:dd,n97_add_organization_to_user_permissions_and_roles:md,n98_clients:fd,n99_update_client_foreign_keys:Td,o001_client_grants:Sd,o002_drop_applications:$d,o003_phone_number_index:Id,o004_login_sessions_id_index:Ad,o005_connections_tenant_index:Rd,o006_remove_redundant_user_organizations_tenant_index:Jd,o007_tenant_settings:Bd,o008_merge_tenant_settings_into_tenants:Yd,o009_create_invites_table:Gd,o010_add_log_id_to_logs:Zd,o011_add_location_info_to_logs:au,o012_add_password_history:ru,o013_connection_display_name:cu,o014_client_connections:uu,o015_flows:hu,o016_add_is_system_column:gu,o017_connections_composite_key:vu,o018_login_session_state:Tu,o019_roles_resource_servers_metadata:Su,o020_session_add_timestamp_columns:Eu,o021_session_cleanup_and_ulid:zu,o022_oidc_profile_claims:Fu,o023_preferred_username:Mu,o024_user_address:Lu,o025_authparams_max_age:Uu,o026_auth0_conformant:Hu,o027_universal_login_templates:Xu,o028_custom_text:e_,o029_guardian_mfa:n_,o030_add_template_id_to_hooks:i_,o031_hooks_cleanup:d_,o032_unique_username_provider:m_,o033_add_login_id_to_refresh_tokens:f_,o034_refresh_tokens_replace_session_id_with_login_id:y_,o035_idle_expires_at_ts_indexes:x_,o036_add_connection_to_login_sessions:b_,o037_mfa_enrollments:k_,o038_add_otp_to_codes:P_,o039_rename_mfa_enrollments_to_authentication_methods:D_,o040_create_outbox_events:j_,o041_add_outbox_claim_columns:q_,o042_add_outbox_claim_index:K_,o043_add_code_hooks:Q_,o044_create_actions:W_,o045_outbox_dead_letter:V_,o046_user_registration_completed_at:tm,o047_outbox_dead_lettered_tenant_index:om,o048_add_auth_strategy_to_login_sessions:im,o049_login_sessions_auth_params:dm,o050_login_sessions_auth_params_backfill:hm,o051_relax_login_sessions_authparams:vm,o052_drop_login_sessions_hoisted_authparams:Om,o053_refresh_tokens_revoked_at:Em,o054_client_registration_tokens:zm,o055_planetscale_redundant_indexes_cleanup:Mm};async function qm(e,t=!1){be(t),t&&console.log("migrating...");const a=new Te(Pe),n=new h.Migrator({db:e,provider:a}),{error:o,results:r}=await n.migrateToLatest();if(r==null||r.forEach(s=>{s.status==="Success"?t&&console.log(`migration "${s.migrationName}" was executed successfully`):s.status==="Error"&&console.error(`failed to execute migration "${s.migrationName}"`)}),o)throw console.error("failed to migrate"),console.error(o),o}async function Jm(e,t=!1){be(t),t&&console.log("migrating...");const a=new Te(Pe),n=new h.Migrator({db:e,provider:a}),{error:o,results:r}=await n.migrateDown();if(r==null||r.forEach(s=>{s.status==="Success"?t&&console.log(`migration "${s.migrationName}" was reverted successfully`):s.status==="Error"&&console.error(`failed to execute migration "${s.migrationName}"`)}),o)throw console.error("failed to migrate"),console.error(o),o}function Ie(e,t={useTransactions:!0}){const a={actions:Ve(e),branding:Ma(e),clients:aa(e),clientConnections:ca(e),clientGrants:ha(e),clientRegistrationTokens:ba(e),codes:Lt(e),connections:Wt(e),emailProviders:xn(e),customDomains:Fa(e),flows:_t(e),forms:jn(e),hookCode:en(e),hooks:Wa(e),invites:$o(e),keys:$a(e),loginSessions:hn(e),logs:Nt(e),authenticationMethods:Ro(e),passwords:At(e),promptSettings:gn(e),refreshTokens:$n(e),resourceServers:Kn(e),rolePermissions:Zn(e),userPermissions:oo(e),userRoles:lo(e),roles:Wn(e),sessions:Et(e),sessionCleanup:Pn(e),tenants:yt(e),themes:rn(e),universalLoginTemplates:Ka(e),customText:Io(e),users:st(e),organizations:fo(e),userOrganizations:To(e),stats:Po(e),outbox:Wo(e),async transaction(n){return t.useTransactions===!1?n(a):e.transaction().execute(async o=>{const r=Ie(o,{...t,useTransactions:!1});return n(r)})}};return a}exports.default=Ie;exports.migrateDown=Jm;exports.migrateToLatest=qm;
+    FROM login_sessions`.execute(t),await h.sql`DROP TABLE login_sessions`.execute(t),await h.sql`ALTER TABLE login_sessions_new RENAME TO login_sessions`.execute(t),await t.schema.createIndex("login_sessions_id_index").on("login_sessions").column("id").execute(),await t.schema.createIndex("idx_login_sessions_session_id").on("login_sessions").column("session_id").execute(),await t.schema.createIndex("login_sessions_tenant_user_idx").on("login_sessions").columns(["tenant_id","user_id"]).execute(),await t.schema.createIndex("login_sessions_state_idx").on("login_sessions").column("state").execute(),await t.schema.createIndex("idx_login_sessions_expires_at_ts").on("login_sessions").column("expires_at_ts").execute()}),w("  Recreated login_sessions without hoisted authParams_* columns")}async function Sm(e){}const Om=Object.freeze(Object.defineProperty({__proto__:null,down:Sm,up:Tm},Symbol.toStringTag,{value:"Module"}));async function km(e){await e.schema.alterTable("refresh_tokens").addColumn("revoked_at_ts","bigint").execute()}async function $m(e){await e.schema.alterTable("refresh_tokens").dropColumn("revoked_at_ts").execute()}const Em=Object.freeze(Object.defineProperty({__proto__:null,down:$m,up:km},Symbol.toStringTag,{value:"Module"}));async function Pm(e){await e.schema.alterTable("clients").addColumn("owner_user_id","varchar(255)").execute(),await e.schema.alterTable("clients").addColumn("registration_type","varchar(32)").execute(),await e.schema.alterTable("clients").addColumn("registration_metadata","text").execute(),await e.schema.createIndex("idx_clients_owner_user_id").on("clients").columns(["tenant_id","owner_user_id"]).execute(),await e.schema.createTable("client_registration_tokens").addColumn("id","varchar(255)",t=>t.primaryKey()).addColumn("tenant_id","varchar(191)",t=>t.references("tenants.id").onDelete("cascade").notNull()).addColumn("token_hash","varchar(64)",t=>t.notNull()).addColumn("type","varchar(8)",t=>t.notNull()).addColumn("client_id","varchar(191)").addColumn("sub","varchar(255)").addColumn("constraints","text").addColumn("single_use","integer",t=>t.defaultTo(0).notNull()).addColumn("used_at_ts","bigint").addColumn("expires_at_ts","bigint").addColumn("created_at_ts","bigint",t=>t.notNull()).addColumn("revoked_at_ts","bigint").execute(),await e.schema.createIndex("idx_client_registration_tokens_hash").on("client_registration_tokens").columns(["tenant_id","token_hash"]).unique().execute(),await e.schema.createIndex("idx_client_registration_tokens_client").on("client_registration_tokens").columns(["tenant_id","client_id"]).execute()}async function Im(e){await e.schema.dropTable("client_registration_tokens").execute(),await e.schema.dropIndex("idx_clients_owner_user_id").execute(),await e.schema.alterTable("clients").dropColumn("registration_metadata").execute(),await e.schema.alterTable("clients").dropColumn("registration_type").execute(),await e.schema.alterTable("clients").dropColumn("owner_user_id").execute()}const zm=Object.freeze(Object.defineProperty({__proto__:null,down:Im,up:Pm},Symbol.toStringTag,{value:"Module"}));async function Dm(e){try{return await h.sql`SELECT @@version_comment`.execute(e),"mysql"}catch{return"sqlite"}}const Am=[{index:"connections_tenant_id_idx",table:"connections",reason:"composite PK (tenant_id, id)"},{index:"idx_invites_tenant_id",table:"invites",reason:"idx_invites_tenant_created (tenant_id, created_at)"},{index:"idx_organizations_tenant_id",table:"organizations",reason:"idx_organizations_tenant_name_unique (tenant_id, name)"},{index:"role_permissions_role_fk",table:"role_permissions",reason:"role_permissions_pk (tenant_id, role_id, ...)"},{index:"themes_tenant_id_idx",table:"themes",reason:"themes_pkey (tenant_id, themeId)"},{index:"users_tenant_index",table:"users",reason:"stale on PlanetScale only; commented out locally in 2024"},{index:"idx_user_organizations_tenant_id",table:"user_organizations",reason:"already dropped locally; may linger on PlanetScale"}];async function Fm(e,t,a,n){try{t==="mysql"?await h.sql.raw(`DROP INDEX IF EXISTS \`${a}\` ON \`${n}\``).execute(e):await h.sql.raw(`DROP INDEX IF EXISTS "${a}"`).execute(e)}catch(o){const r=o instanceof Error?o.message:String(o);z(`  Warning: failed to drop index ${a} on ${n}: ${r}`)}}async function jm(e){const t=await Dm(e);for(const{index:a,table:n}of Am)await Fm(e,t,a,n);await e.schema.dropTable("members").ifExists().execute()}async function Rm(e){await e.schema.createTable("members").addColumn("id","varchar(255)",t=>t.notNull().primaryKey()).addColumn("tenant_id","varchar(255)",t=>t.references("tenants.id").onDelete("cascade").notNull()).addColumn("sub","varchar(255)").addColumn("email","varchar(255)").addColumn("name","varchar(255)").addColumn("status","varchar(255)").addColumn("role","varchar(255)").addColumn("picture","varchar(2083)").addColumn("created_at","varchar(255)",t=>t.notNull()).addColumn("updated_at","varchar(255)",t=>t.notNull()).execute(),await e.schema.createIndex("idx_user_organizations_tenant_id").on("user_organizations").column("tenant_id").execute(),await e.schema.createIndex("themes_tenant_id_idx").on("themes").column("tenant_id").execute(),await e.schema.createIndex("role_permissions_role_fk").on("role_permissions").columns(["tenant_id","role_id"]).execute(),await e.schema.createIndex("idx_organizations_tenant_id").on("organizations").column("tenant_id").execute(),await e.schema.createIndex("idx_invites_tenant_id").on("invites").column("tenant_id").execute(),await e.schema.createIndex("connections_tenant_id_idx").on("connections").column("tenant_id").execute()}const Mm=Object.freeze(Object.defineProperty({__proto__:null,down:Rm,up:jm},Symbol.toStringTag,{value:"Module"}));async function qm(e){await e.schema.alterTable("clients").addColumn("user_linking_mode","varchar(16)").execute()}async function Jm(e){await e.schema.alterTable("clients").dropColumn("user_linking_mode").execute()}const Lm=Object.freeze(Object.defineProperty({__proto__:null,down:Jm,up:qm},Symbol.toStringTag,{value:"Module"})),Pe={m1_init:Vo,m2_magicLink:tr,m3_updateAt:or,m4_logTable:ir,m5_userProfile:dr,m6_sessions:mr,m7_passwords:fr,m8_logsTableNewFields:yr,m9_passwordTableNewField:xr,n01_codesTable:br,n11_universalLoginSession:kr,n12_userFields:Pr,n13_userEmailIndex:Dr,n14_profileDataField:jr,n15_userEmailIndex:qr,n16_userLocale:Kr,n17_signingKeys:Qr,n18_logsFields:Wr,n19_connectionsUserinfo:Vr,n20_missingFields:ts,n21_sessionDeletedAt:os,n22_dropLogsFields:is,n23_dropUsersFields:ds,n24_logsIndexes:ms,n25_logDescMaxLength:fs,n26_logsTableExtraFields:ys,n27_usersTableNameIndex:xs,n28_usersEmailConstrain:bs,n29_increaseOtpStateLength:ks,n30_increaseTicketStateLength:Ps,n31_branding:Ds,n32_indexesAndNotNull:js,n33_vendorIdInUniversalLoginSession:qs,n34_auth0ClientInUniversalLoginSession:Ks,n35_increaseUniversalSessionStateLength:Qs,n36_authenticationCodes:Ws,n37_disableSignUps:Vs,n38_otpIpAddress:ti,n39_increaseUserAgentLength:oi,n40_userId:ii,n41_hooks:di,n42_userIdIndexes:mi,n43_userIdIndexes:fi,n44_codes:yi,n45_hookProperties:xi,n46_loginAuth0Client:bi,n47_loginAuth0Client:ki,n48_saml:Pi,n49_removeFields:Di,n50_authParamsNonce:ji,n51_connectionid:qi,n52_cert:Ki,n53_codes_primary_key:Qi,n54_cleanup_tables:Wi,n55_logs_index:Vi,n56_application_fields:tc,n57_prompt_settings:oc,n58_connection_client_id:ic,n59_connection_options:dc,n60_users_metadata:mc,n61_userLocales:fc,n62_prompt:yc,n63_connection_cleanup:xc,n64_act_as:bc,n65_code_verifier:kc,n66_email_providers:Pc,n67_drop_tickets:Dc,n68_login_useragents:jc,n70_refresh_tokens:qc,n71_session_new_fields:Kc,n72_session_primary_key:Qc,n73_drop_sessions:Wc,n74_custom_domains:Vc,n75_organizations:tl,n76_authorization_url_length:ol,n77_drop_sessions:il,n78_login_sessions:dl,n79_drop_sessions_2:ml,n80_recreate_custom_domains:fl,n81_phone:yl,n82_forms:xl,n83_addFormsIdToHooks:bl,n84_login_completed:kl,n85_add_login_session_id_to_sessions:Pl,n86_index_sessions_login_session_id:Dl,n87_code_challenge:jl,n88_add_redirect_uri_to_codes:ql,n89_add_nonce_and_state_to_codes:Kl,n90_themes:Ql,n91_resource_servers_rules_permissions:Wl,n92_role_permissions:Vl,n93_add_permissions_to_roles:td,n94_keys_connection_and_extend_columns:od,n95_create_organizations_table:id,n96_create_user_organizations_table:dd,n97_add_organization_to_user_permissions_and_roles:md,n98_clients:fd,n99_update_client_foreign_keys:Td,o001_client_grants:Sd,o002_drop_applications:$d,o003_phone_number_index:Id,o004_login_sessions_id_index:Ad,o005_connections_tenant_index:Rd,o006_remove_redundant_user_organizations_tenant_index:Jd,o007_tenant_settings:Bd,o008_merge_tenant_settings_into_tenants:Yd,o009_create_invites_table:Gd,o010_add_log_id_to_logs:Zd,o011_add_location_info_to_logs:au,o012_add_password_history:ru,o013_connection_display_name:cu,o014_client_connections:uu,o015_flows:hu,o016_add_is_system_column:gu,o017_connections_composite_key:vu,o018_login_session_state:Tu,o019_roles_resource_servers_metadata:Su,o020_session_add_timestamp_columns:Eu,o021_session_cleanup_and_ulid:zu,o022_oidc_profile_claims:Fu,o023_preferred_username:Mu,o024_user_address:Lu,o025_authparams_max_age:Uu,o026_auth0_conformant:Hu,o027_universal_login_templates:Xu,o028_custom_text:e_,o029_guardian_mfa:n_,o030_add_template_id_to_hooks:i_,o031_hooks_cleanup:d_,o032_unique_username_provider:m_,o033_add_login_id_to_refresh_tokens:f_,o034_refresh_tokens_replace_session_id_with_login_id:y_,o035_idle_expires_at_ts_indexes:x_,o036_add_connection_to_login_sessions:b_,o037_mfa_enrollments:k_,o038_add_otp_to_codes:P_,o039_rename_mfa_enrollments_to_authentication_methods:D_,o040_create_outbox_events:j_,o041_add_outbox_claim_columns:q_,o042_add_outbox_claim_index:K_,o043_add_code_hooks:Q_,o044_create_actions:W_,o045_outbox_dead_letter:V_,o046_user_registration_completed_at:tm,o047_outbox_dead_lettered_tenant_index:om,o048_add_auth_strategy_to_login_sessions:im,o049_login_sessions_auth_params:dm,o050_login_sessions_auth_params_backfill:hm,o051_relax_login_sessions_authparams:vm,o052_drop_login_sessions_hoisted_authparams:Om,o053_refresh_tokens_revoked_at:Em,o054_client_registration_tokens:zm,o055_planetscale_redundant_indexes_cleanup:Mm,o056_client_user_linking_mode:Lm};async function Km(e,t=!1){be(t),t&&console.log("migrating...");const a=new Te(Pe),n=new h.Migrator({db:e,provider:a}),{error:o,results:r}=await n.migrateToLatest();if(r==null||r.forEach(s=>{s.status==="Success"?t&&console.log(`migration "${s.migrationName}" was executed successfully`):s.status==="Error"&&console.error(`failed to execute migration "${s.migrationName}"`)}),o)throw console.error("failed to migrate"),console.error(o),o}async function Bm(e,t=!1){be(t),t&&console.log("migrating...");const a=new Te(Pe),n=new h.Migrator({db:e,provider:a}),{error:o,results:r}=await n.migrateDown();if(r==null||r.forEach(s=>{s.status==="Success"?t&&console.log(`migration "${s.migrationName}" was reverted successfully`):s.status==="Error"&&console.error(`failed to execute migration "${s.migrationName}"`)}),o)throw console.error("failed to migrate"),console.error(o),o}function Ie(e,t={useTransactions:!0}){const a={actions:Ve(e),branding:Ma(e),clients:aa(e),clientConnections:ca(e),clientGrants:ha(e),clientRegistrationTokens:ba(e),codes:Lt(e),connections:Wt(e),emailProviders:xn(e),customDomains:Fa(e),flows:_t(e),forms:jn(e),hookCode:en(e),hooks:Wa(e),invites:$o(e),keys:$a(e),loginSessions:hn(e),logs:Nt(e),authenticationMethods:Ro(e),passwords:At(e),promptSettings:gn(e),refreshTokens:$n(e),resourceServers:Kn(e),rolePermissions:Zn(e),userPermissions:oo(e),userRoles:lo(e),roles:Wn(e),sessions:Et(e),sessionCleanup:Pn(e),tenants:yt(e),themes:rn(e),universalLoginTemplates:Ka(e),customText:Io(e),users:st(e),organizations:fo(e),userOrganizations:To(e),stats:Po(e),outbox:Wo(e),async transaction(n){return t.useTransactions===!1?n(a):e.transaction().execute(async o=>{const r=Ie(o,{...t,useTransactions:!1});return n(r)})}};return a}exports.default=Ie;exports.migrateDown=Bm;exports.migrateToLatest=Km;

package/dist/kysely-adapter.d.ts

@@ -1881,6 +1881,10 @@ declare const clientInsertSchema: z.ZodObject<{
 		"iat_dcr"
 	]>>;
 	registration_metadata: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	user_linking_mode: z.ZodOptional<z.ZodEnum<[
+		"builtin",
+		"off"
+	]>>;
 }, "strip", z.ZodTypeAny, {
 	name: string;
 	client_id: string;
@@ -1933,6 +1937,7 @@ declare const clientInsertSchema: z.ZodObject<{
 	owner_user_id?: string | undefined;
 	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
 	registration_metadata?: Record<string, any> | undefined;
+	user_linking_mode?: "builtin" | "off" | undefined;
 }, {
 	name: string;
 	client_id: string;
@@ -1985,6 +1990,7 @@ declare const clientInsertSchema: z.ZodObject<{
 	owner_user_id?: string | undefined;
 	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
 	registration_metadata?: Record<string, any> | undefined;
+	user_linking_mode?: "builtin" | "off" | undefined;
 }>;
 export type ClientInsert = z.input<typeof clientInsertSchema>;
 declare const clientSchema: z.ZodObject<{
@@ -2087,6 +2093,10 @@ declare const clientSchema: z.ZodObject<{
 		"iat_dcr"
 	]>>;
 	registration_metadata: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>>;
+	user_linking_mode: z.ZodOptional<z.ZodEnum<[
+		"builtin",
+		"off"
+	]>>;
 	created_at: z.ZodString;
 	updated_at: z.ZodString;
 }, "strip", z.ZodTypeAny, {
@@ -2143,6 +2153,7 @@ declare const clientSchema: z.ZodObject<{
 	owner_user_id?: string | undefined;
 	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
 	registration_metadata?: Record<string, any> | undefined;
+	user_linking_mode?: "builtin" | "off" | undefined;
 }, {
 	created_at: string;
 	updated_at: string;
@@ -2197,6 +2208,7 @@ declare const clientSchema: z.ZodObject<{
 	owner_user_id?: string | undefined;
 	registration_type?: "manual" | "open_dcr" | "iat_dcr" | undefined;
 	registration_metadata?: Record<string, any> | undefined;
+	user_linking_mode?: "builtin" | "off" | undefined;
 }>;
 export type Client = z.infer<typeof clientSchema>;
 declare const clientGrantInsertSchema: z.ZodObject<{
@@ -15342,6 +15354,7 @@ declare const hookInsertSchema: z.ZodUnion<[
 			"pre-user-registration",
 			"post-user-registration",
 			"post-user-login",
+			"post-user-update",
 			"validate-registration-username",
 			"pre-user-deletion",
 			"post-user-deletion"
@@ -15354,13 +15367,13 @@ declare const hookInsertSchema: z.ZodUnion<[
 	}, "strip", z.ZodTypeAny, {
 		url: string;
 		enabled: boolean;
-		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
 		synchronous: boolean;
 		priority?: number | undefined;
 		hook_id?: string | undefined;
 	}, {
 		url: string;
-		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
 		enabled?: boolean | undefined;
 		synchronous?: boolean | undefined;
 		priority?: number | undefined;
@@ -15398,11 +15411,14 @@ declare const hookInsertSchema: z.ZodUnion<[
 	z.ZodObject<{
 		trigger_id: z.ZodEnum<[
 			"post-user-login",
+			"post-user-registration",
+			"post-user-update",
 			"credentials-exchange"
 		]>;
 		template_id: z.ZodEnum<[
 			"ensure-username",
-			"set-preferred-username"
+			"set-preferred-username",
+			"account-linking"
 		]>;
 		enabled: z.ZodDefault<z.ZodBoolean>;
 		synchronous: z.ZodDefault<z.ZodBoolean>;
@@ -15410,14 +15426,14 @@ declare const hookInsertSchema: z.ZodUnion<[
 		hook_id: z.ZodOptional<z.ZodString>;
 	}, "strip", z.ZodTypeAny, {
 		enabled: boolean;
-		trigger_id: "post-user-login" | "credentials-exchange";
+		trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
 		synchronous: boolean;
-		template_id: "ensure-username" | "set-preferred-username";
+		template_id: "ensure-username" | "set-preferred-username" | "account-linking";
 		priority?: number | undefined;
 		hook_id?: string | undefined;
 	}, {
-		trigger_id: "post-user-login" | "credentials-exchange";
-		template_id: "ensure-username" | "set-preferred-username";
+		trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
+		template_id: "ensure-username" | "set-preferred-username" | "account-linking";
 		enabled?: boolean | undefined;
 		synchronous?: boolean | undefined;
 		priority?: number | undefined;
@@ -15462,6 +15478,7 @@ declare const hookSchema: z.ZodUnion<[
 			"pre-user-registration",
 			"post-user-registration",
 			"post-user-login",
+			"post-user-update",
 			"validate-registration-username",
 			"pre-user-deletion",
 			"post-user-deletion"
@@ -15474,7 +15491,7 @@ declare const hookSchema: z.ZodUnion<[
 		updated_at: string;
 		url: string;
 		enabled: boolean;
-		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
 		synchronous: boolean;
 		hook_id: string;
 		priority?: number | undefined;
@@ -15482,7 +15499,7 @@ declare const hookSchema: z.ZodUnion<[
 		created_at: string;
 		updated_at: string;
 		url: string;
-		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
+		trigger_id: "pre-user-registration" | "post-user-registration" | "post-user-login" | "post-user-update" | "validate-registration-username" | "pre-user-deletion" | "post-user-deletion";
 		hook_id: string;
 		enabled?: boolean | undefined;
 		synchronous?: boolean | undefined;
@@ -15527,12 +15544,15 @@ declare const hookSchema: z.ZodUnion<[
 		hook_id: z.ZodString;
 		template_id: z.ZodEnum<[
 			"ensure-username",
-			"set-preferred-username"
+			"set-preferred-username",
+			"account-linking"
 		]>;
 		created_at: z.ZodString;
 		updated_at: z.ZodString;
 		trigger_id: z.ZodEnum<[
 			"post-user-login",
+			"post-user-registration",
+			"post-user-update",
 			"credentials-exchange"
 		]>;
 		enabled: z.ZodDefault<z.ZodBoolean>;
@@ -15542,17 +15562,17 @@ declare const hookSchema: z.ZodUnion<[
 		created_at: string;
 		updated_at: string;
 		enabled: boolean;
-		trigger_id: "post-user-login" | "credentials-exchange";
+		trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
 		synchronous: boolean;
 		hook_id: string;
-		template_id: "ensure-username" | "set-preferred-username";
+		template_id: "ensure-username" | "set-preferred-username" | "account-linking";
 		priority?: number | undefined;
 	}, {
 		created_at: string;
 		updated_at: string;
-		trigger_id: "post-user-login" | "credentials-exchange";
+		trigger_id: "post-user-registration" | "post-user-login" | "post-user-update" | "credentials-exchange";
 		hook_id: string;
-		template_id: "ensure-username" | "set-preferred-username";
+		template_id: "ensure-username" | "set-preferred-username" | "account-linking";
 		enabled?: boolean | undefined;
 		synchronous?: boolean | undefined;
 		priority?: number | undefined;
@@ -16706,7 +16726,6 @@ declare const tenantSchema: z.ZodObject<{
 		enable_dynamic_client_registration: z.ZodOptional<z.ZodBoolean>;
 		dcr_require_initial_access_token: z.ZodOptional<z.ZodBoolean>;
 		dcr_allowed_grant_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-		dcr_allowed_integration_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 		allow_http_return_to: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
 		enable_idtoken_api2: z.ZodOptional<z.ZodBoolean>;
 		enable_legacy_logs_search_v2: z.ZodOptional<z.ZodBoolean>;
@@ -16744,7 +16763,6 @@ declare const tenantSchema: z.ZodObject<{
 		enable_dynamic_client_registration?: boolean | undefined;
 		dcr_require_initial_access_token?: boolean | undefined;
 		dcr_allowed_grant_types?: string[] | undefined;
-		dcr_allowed_integration_types?: string[] | undefined;
 		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
@@ -16782,7 +16800,6 @@ declare const tenantSchema: z.ZodObject<{
 		enable_dynamic_client_registration?: boolean | undefined;
 		dcr_require_initial_access_token?: boolean | undefined;
 		dcr_allowed_grant_types?: string[] | undefined;
-		dcr_allowed_integration_types?: string[] | undefined;
 		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
@@ -17065,7 +17082,6 @@ declare const tenantSchema: z.ZodObject<{
 		enable_dynamic_client_registration?: boolean | undefined;
 		dcr_require_initial_access_token?: boolean | undefined;
 		dcr_allowed_grant_types?: string[] | undefined;
-		dcr_allowed_integration_types?: string[] | undefined;
 		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
@@ -17195,7 +17211,6 @@ declare const tenantSchema: z.ZodObject<{
 		enable_dynamic_client_registration?: boolean | undefined;
 		dcr_require_initial_access_token?: boolean | undefined;
 		dcr_allowed_grant_types?: string[] | undefined;
-		dcr_allowed_integration_types?: string[] | undefined;
 		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
@@ -21150,7 +21165,6 @@ declare const sqlTenantSchema: z.ZodObject<{
 		enable_dynamic_client_registration: z.ZodOptional<z.ZodBoolean>;
 		dcr_require_initial_access_token: z.ZodOptional<z.ZodBoolean>;
 		dcr_allowed_grant_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-		dcr_allowed_integration_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 		allow_http_return_to: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
 		enable_idtoken_api2: z.ZodOptional<z.ZodBoolean>;
 		enable_legacy_logs_search_v2: z.ZodOptional<z.ZodBoolean>;
@@ -21188,7 +21202,6 @@ declare const sqlTenantSchema: z.ZodObject<{
 		enable_dynamic_client_registration?: boolean | undefined;
 		dcr_require_initial_access_token?: boolean | undefined;
 		dcr_allowed_grant_types?: string[] | undefined;
-		dcr_allowed_integration_types?: string[] | undefined;
 		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
@@ -21226,7 +21239,6 @@ declare const sqlTenantSchema: z.ZodObject<{
 		enable_dynamic_client_registration?: boolean | undefined;
 		dcr_require_initial_access_token?: boolean | undefined;
 		dcr_allowed_grant_types?: string[] | undefined;
-		dcr_allowed_integration_types?: string[] | undefined;
 		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
@@ -21505,7 +21517,6 @@ declare const sqlTenantSchema: z.ZodObject<{
 		enable_dynamic_client_registration?: boolean | undefined;
 		dcr_require_initial_access_token?: boolean | undefined;
 		dcr_allowed_grant_types?: string[] | undefined;
-		dcr_allowed_integration_types?: string[] | undefined;
 		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
@@ -21635,7 +21646,6 @@ declare const sqlTenantSchema: z.ZodObject<{
 		enable_dynamic_client_registration?: boolean | undefined;
 		dcr_require_initial_access_token?: boolean | undefined;
 		dcr_allowed_grant_types?: string[] | undefined;
-		dcr_allowed_integration_types?: string[] | undefined;
 		allow_http_return_to?: string[] | undefined;
 		enable_idtoken_api2?: boolean | undefined;
 		enable_legacy_logs_search_v2?: boolean | undefined;
@@ -22024,6 +22034,10 @@ declare const sqlClientSchema: z.ZodObject<{
 		"fapi2_sp_mtls_mtls"
 	]>>;
 	par_request_expiry: z.ZodOptional<z.ZodNumber>;
+	user_linking_mode: z.ZodOptional<z.ZodEnum<[
+		"builtin",
+		"off"
+	]>>;
 	created_at: z.ZodString;
 	updated_at: z.ZodString;
 }, "strip", z.ZodTypeAny, {
@@ -22081,6 +22095,7 @@ declare const sqlClientSchema: z.ZodObject<{
 	organization_require_behavior?: "no_prompt" | "pre_login_prompt" | "post_login_prompt" | undefined;
 	compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
 	par_request_expiry?: number | undefined;
+	user_linking_mode?: "builtin" | "off" | undefined;
 }, {
 	tenant_id: string;
 	created_at: string;
@@ -22136,6 +22151,7 @@ declare const sqlClientSchema: z.ZodObject<{
 	organization_require_behavior?: "no_prompt" | "pre_login_prompt" | "post_login_prompt" | undefined;
 	compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
 	par_request_expiry?: number | undefined;
+	user_linking_mode?: "builtin" | "off" | undefined;
 }>;
 declare const sqlClientRegistrationTokenSchema: z.ZodObject<{
 	id: z.ZodString;

package/dist/kysely-adapter.mjs

@@ -7321,6 +7321,17 @@ const Wm = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
   down: Hm,
   up: Ym
+}, Symbol.toStringTag, { value: "Module" }));
+async function Gm(e) {
+  await e.schema.alterTable("clients").addColumn("user_linking_mode", "varchar(16)").execute();
+}
+async function Xm(e) {
+  await e.schema.alterTable("clients").dropColumn("user_linking_mode").execute();
+}
+const Vm = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+  __proto__: null,
+  down: Xm,
+  up: Gm
 }, Symbol.toStringTag, { value: "Module" })), De = {
   m1_init: cr,
   m2_magicLink: ur,
@@ -7474,9 +7485,10 @@ const Wm = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   o052_drop_login_sessions_hoisted_authparams: jm,
   o053_refresh_tokens_revoked_at: Jm,
   o054_client_registration_tokens: Km,
-  o055_planetscale_redundant_indexes_cleanup: Wm
+  o055_planetscale_redundant_indexes_cleanup: Wm,
+  o056_client_user_linking_mode: Vm
 };
-async function ah(e, t = !1) {
+async function rh(e, t = !1) {
   ke(t), t && console.log("migrating...");
   const a = new Se(De), n = new ge({
     db: e,
@@ -7489,7 +7501,7 @@ async function ah(e, t = !1) {
   }), o)
     throw console.error("failed to migrate"), console.error(o), o;
 }
-async function nh(e, t = !1) {
+async function sh(e, t = !1) {
   ke(t), t && console.log("migrating...");
   const a = new Se(De), n = new ge({
     db: e,
@@ -7502,7 +7514,7 @@ async function nh(e, t = !1) {
   }), o)
     throw console.error("failed to migrate"), console.error(o), o;
 }
-function Gm(e, t = { useTransactions: !0 }) {
+function Zm(e, t = { useTransactions: !0 }) {
   const a = {
     actions: ct(e),
     branding: Wa(e),
@@ -7544,7 +7556,7 @@ function Gm(e, t = { useTransactions: !0 }) {
     outbox: rr(e),
     async transaction(n) {
       return t.useTransactions === !1 ? n(a) : e.transaction().execute(async (o) => {
-        const r = Gm(o, {
+        const r = Zm(o, {
           ...t,
           useTransactions: !1
         });
@@ -7555,7 +7567,7 @@ function Gm(e, t = { useTransactions: !0 }) {
   return a;
 }
 export {
-  Gm as default,
-  nh as migrateDown,
-  ah as migrateToLatest
+  Zm as default,
+  sh as migrateDown,
+  rh as migrateToLatest
 };

package/package.json

@@ -11,7 +11,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "10.131.1",
+  "version": "10.131.3",
   "files": [
     "dist"
   ],
@@ -42,7 +42,7 @@
   "dependencies": {
     "kysely": "^0.27.4",
     "nanoid": "^5.0.8",
-    "@authhero/adapter-interfaces": "1.9.0"
+    "@authhero/adapter-interfaces": "1.10.1"
   },
   "peerDependencies": {
     "@hono/zod-openapi": "^0.19.2",