@authhero/kysely-adapter 10.35.0 → 10.37.0

package/dist/kysely-adapter.mjs

@@ -3,15 +3,15 @@ var ue = (t) => {
   throw TypeError(t);
 };
 var Re = (t, e, r) => e in t ? Je(t, e, { enumerable: !0, configurable: !0, writable: !0, value: r }) : t[e] = r;
-var z = (t, e, r) => Re(t, typeof e != "symbol" ? e + "" : e, r), V = (t, e, r) => e.has(t) || ue("Cannot " + r);
-var d = (t, e, r) => (V(t, e, "read from private field"), r ? r.call(t) : e.get(t)), N = (t, e, r) => e.has(t) ? ue("Cannot add the same private member more than once") : e instanceof WeakSet ? e.add(t) : e.set(t, r), L = (t, e, r, a) => (V(t, e, "write to private field"), a ? a.call(t, r) : e.set(t, r), r), m = (t, e, r) => (V(t, e, "access private method"), r);
-import { parseUserId as ae, codeSchema as Ke, connectionSchema as Ue, loginSessionSchema as Be, promptSettingSchema as Qe, formSchema as Q, resourceServerSchema as qe } from "@authhero/adapter-interfaces";
+var R = (t, e, r) => Re(t, typeof e != "symbol" ? e + "" : e, r), Y = (t, e, r) => e.has(t) || ue("Cannot " + r);
+var d = (t, e, r) => (Y(t, e, "read from private field"), r ? r.call(t) : e.get(t)), S = (t, e, r) => e.has(t) ? ue("Cannot add the same private member more than once") : e instanceof WeakSet ? e.add(t) : e.set(t, r), K = (t, e, r, a) => (Y(t, e, "write to private field"), a ? a.call(t, r) : e.set(t, r), r), p = (t, e, r) => (Y(t, e, "access private method"), r);
+import { parseUserId as ie, codeSchema as Ke, connectionSchema as Ue, loginSessionSchema as Be, promptSettingSchema as Qe, formSchema as G, resourceServerSchema as qe } from "@authhero/adapter-interfaces";
 import "@hono/zod-openapi";
-var X = class extends Error {
+var te = class extends Error {
   constructor(e = 500, r) {
     super(r == null ? void 0 : r.message, { cause: r == null ? void 0 : r.cause });
-    z(this, "res");
-    z(this, "status");
+    R(this, "res");
+    R(this, "status");
     this.res = r == null ? void 0 : r.res, this.status = e;
   }
   getResponse() {
@@ -25,8 +25,8 @@ var X = class extends Error {
 };
 function Ve(t) {
   return async (e, r) => {
-    const { identities: a, ...o } = r, n = {
-      ...o,
+    const { identities: a, ...n } = r, o = {
+      ...n,
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       login_count: 0,
@@ -37,35 +37,35 @@ function Ve(t) {
       user_metadata: JSON.stringify(r.user_metadata)
     };
     try {
-      await t.insertInto("users").values(n).execute();
+      await t.insertInto("users").values(o).execute();
     } catch (s) {
-      throw s.code === "SQLITE_CONSTRAINT_UNIQUE" || s.message.includes("AlreadyExists") ? new X(409, { message: "User already exists" }) : new X(500, { message: `${s.code}, ${s.message}` });
+      throw s.code === "SQLITE_CONSTRAINT_UNIQUE" || s.message.includes("AlreadyExists") ? new te(409, { message: "User already exists" }) : new te(500, { message: `${s.code}, ${s.message}` });
     }
     return {
-      ...n,
+      ...o,
       // TODO: check if this is correct. Should it be optional?
-      email: n.email || "",
-      email_verified: n.email_verified === 1,
-      is_social: n.is_social === 1
+      email: o.email || "",
+      email_verified: o.email_verified === 1,
+      is_social: o.is_social === 1
     };
   };
 }
-function f(t) {
+function y(t) {
   if (t == null || typeof t != "object")
     return t;
   if (Array.isArray(t))
     return t.map(
       (r) => (
         // Only recurse into objects; leave primitives untouched
-        r !== null && typeof r == "object" ? f(r) : r
+        r !== null && typeof r == "object" ? y(r) : r
       )
     );
   const e = { ...t };
   for (const r in e) {
     const a = e[r];
     a === null ? delete e[r] : a !== null && typeof a == "object" && (Array.isArray(a) ? e[r] = a.map(
-      (o) => o !== null && typeof o == "object" ? f(o) : o
-    ) : e[r] = f(a));
+      (n) => n !== null && typeof n == "object" ? y(n) : n
+    ) : e[r] = y(a));
   }
   return e;
 }
@@ -79,7 +79,7 @@ function pe(t) {
   return {
     connection: t.connection,
     provider: t.provider,
-    user_id: ae(t.user_id).id,
+    user_id: ie(t.user_id).id,
     isSocial: !!t.is_social,
     profileData: {
       email: t.email,
@@ -90,13 +90,13 @@ function pe(t) {
 }
 function We(t) {
   return async (e, r) => {
-    const [a, o] = await Promise.all([
+    const [a, n] = await Promise.all([
       t.selectFrom("users").where("users.tenant_id", "=", e).where("users.user_id", "=", r).selectAll().executeTakeFirst(),
       t.selectFrom("users").where("users.tenant_id", "=", e).where("users.linked_to", "=", r).selectAll().execute()
     ]);
     if (!a)
       return null;
-    const { tenant_id: n, ...s } = a, l = {
+    const { tenant_id: o, ...s } = a, i = {
       ...s,
       email: a.email || "",
       email_verified: a.email_verified === 1,
@@ -107,148 +107,153 @@ function We(t) {
         {
           connection: a.connection,
           provider: a.provider,
-          user_id: ae(a.user_id).id,
+          user_id: ie(a.user_id).id,
           isSocial: !!a.is_social
         },
-        ...o.map(pe)
+        ...n.map(pe)
       ]
     };
-    return f(l);
+    return y(i);
   };
 }
-function C(t, e, r, a) {
-  return r.split(/\s+/).map((n) => n.replace(/^([^:]+)=/g, "$1:")).map((n) => {
-    let s = n.startsWith("-"), l = null, c = "", _ = !1, u;
-    if (n.startsWith("-_exists_:"))
-      l = n.substring(10), _ = !0, s = !0;
-    else if (n.startsWith("_exists_:"))
-      l = n.substring(9), _ = !0, s = !1;
-    else if (n.includes(":")) {
-      const h = s ? n.substring(1) : n, g = h.indexOf(":");
-      l = h.substring(0, g), c = h.substring(g + 1), _ = !1, c.startsWith(">=") ? (u = ">=", c = c.substring(2)) : c.startsWith(">") ? (u = ">", c = c.substring(1)) : c.startsWith("<=") ? (u = "<=", c = c.substring(2)) : c.startsWith("<") ? (u = "<", c = c.substring(1)) : u = "=";
+function T(t, e, r, a) {
+  return r.split(/\s+/).map((o) => o.replace(/^([^:]+)=/g, "$1:")).map((o) => {
+    let s = o.startsWith("-"), i = null, c = "", _ = !1, u;
+    if (o.startsWith("-_exists_:"))
+      i = o.substring(10), _ = !0, s = !0;
+    else if (o.startsWith("_exists_:"))
+      i = o.substring(9), _ = !0, s = !1;
+    else if (o.includes(":")) {
+      const m = s ? o.substring(1) : o, h = m.indexOf(":");
+      i = m.substring(0, h), c = m.substring(h + 1), _ = !1, c.startsWith(">=") ? (u = ">=", c = c.substring(2)) : c.startsWith(">") ? (u = ">", c = c.substring(1)) : c.startsWith("<=") ? (u = "<=", c = c.substring(2)) : c.startsWith("<") ? (u = "<", c = c.substring(1)) : u = "=";
     } else
-      l = null, c = n, _ = !1;
-    return { key: l, value: c, isNegation: s, isExistsQuery: _, operator: u };
-  }).forEach(({ key: n, value: s, isNegation: l, isExistsQuery: c, operator: _ }) => {
-    if (n)
+      i = null, c = o, _ = !1;
+    return { key: i, value: c, isNegation: s, isExistsQuery: _, operator: u };
+  }).forEach(({ key: o, value: s, isNegation: i, isExistsQuery: c, operator: _ }) => {
+    if (o)
       if (c)
-        l ? e = e.where(n, "is", null) : e = e.where(n, "is not", null);
-      else if (l)
+        i ? e = e.where(o, "is", null) : e = e.where(o, "is not", null);
+      else if (i)
         switch (_) {
           case ">":
-            e = e.where(n, "<=", s);
+            e = e.where(o, "<=", s);
             break;
           case ">=":
-            e = e.where(n, "<", s);
+            e = e.where(o, "<", s);
             break;
           case "<":
-            e = e.where(n, ">=", s);
+            e = e.where(o, ">=", s);
             break;
           case "<=":
-            e = e.where(n, ">", s);
+            e = e.where(o, ">", s);
             break;
           default:
-            e = e.where(n, "!=", s);
+            e = e.where(o, "!=", s);
         }
       else
-        e = e.where(n, _, s);
+        e = e.where(o, _, s);
     else if (s) {
       const { ref: u } = t.dynamic;
       e = e.where(
-        (h) => h.or(
-          a.map((g) => h(u(g), "like", `%${s}%`))
+        (m) => m.or(
+          a.map((h) => m(u(h), "like", `%${s}%`))
         )
       );
     }
   }), e;
 }
-function v(t) {
+function x(t) {
   return typeof t == "string" ? parseInt(t, 10) : typeof t == "bigint" ? Number(t) : t;
 }
 function Ge(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("users").where("users.tenant_id", "=", e);
-    if (r.q && (a = C(t, a, r.q, ["email", "name"])), r.sort && r.sort.sort_by) {
-      const { ref: u } = t.dynamic;
-      a = a.orderBy(u(r.sort.sort_by), r.sort.sort_order);
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, sort: s, q: i } = r;
+    let c = t.selectFrom("users").where("users.tenant_id", "=", e);
+    if (i && (c = T(t, c, i, ["email", "name"])), s && s.sort_by) {
+      const { ref: w } = t.dynamic;
+      c = c.orderBy(w(s.sort_by), s.sort_order);
     }
-    const n = await a.offset(r.page * r.per_page).limit(r.per_page).selectAll().execute(), s = n.map((u) => u.user_id), l = s.length ? await t.selectFrom("users").selectAll().where("users.tenant_id", "=", e).where("users.linked_to", "in", s).execute() : [], c = n.map((u) => {
-      const h = l.filter(
-        (g) => g.linked_to === u.user_id
+    const u = await c.offset(a * n).limit(n).selectAll().execute(), m = u.map((w) => w.user_id), h = m.length ? await t.selectFrom("users").selectAll().where("users.tenant_id", "=", e).where("users.linked_to", "in", m).execute() : [], f = u.map((w) => {
+      const b = h.filter(
+        (D) => D.linked_to === w.user_id
       );
-      return f({
-        ...u,
-        email_verified: u.email_verified === 1,
-        is_social: u.is_social === 1,
-        app_metadata: JSON.parse(u.app_metadata),
-        user_metadata: JSON.parse(u.user_metadata),
+      return y({
+        ...w,
+        email_verified: w.email_verified === 1,
+        is_social: w.is_social === 1,
+        app_metadata: JSON.parse(w.app_metadata),
+        user_metadata: JSON.parse(w.user_metadata),
         identities: [
           {
-            connection: u.connection,
-            provider: u.provider,
-            user_id: ae(u.user_id).id,
-            isSocial: !!u.is_social
+            connection: w.connection,
+            provider: w.provider,
+            user_id: ie(w.user_id).id,
+            isSocial: !!w.is_social
           },
-          ...h.map(pe)
+          ...b.map(pe)
         ]
       });
-    }), { count: _ } = await a.select((u) => u.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    });
+    if (!o)
+      return {
+        users: f,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: g } = await c.select((w) => w.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      users: c,
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(_)
+      users: f,
+      start: a * n,
+      limit: n,
+      length: x(g)
     };
   };
 }
 function He(t) {
   return async (e, r) => (await t.deleteFrom("users").where("users.tenant_id", "=", e).where("users.linked_to", "=", r).execute(), (await t.deleteFrom("users").where("users.tenant_id", "=", e).where("users.user_id", "=", r).execute()).length === 1);
 }
-function A(t, e = "", r = {}) {
+function J(t, e = "", r = {}) {
   for (let a in t)
     if (Object.prototype.hasOwnProperty.call(t, a)) {
-      const o = e ? `${e}_${a}` : a, n = t[a];
-      typeof n == "object" && n !== null && !Array.isArray(n) ? A(n, o, r) : typeof n == "boolean" ? r[o] = n ? 1 : 0 : r[o] = n;
+      const n = e ? `${e}_${a}` : a, o = t[a];
+      typeof o == "object" && o !== null && !Array.isArray(o) ? J(o, n, r) : typeof o == "boolean" ? r[n] = o ? 1 : 0 : r[n] = o;
     }
   return r;
 }
 function ge(t, e) {
   const r = {};
-  for (const [a, o] of Object.entries(t)) {
-    const n = e.find(
+  for (const [a, n] of Object.entries(t)) {
+    const o = e.find(
       (s) => a.startsWith(`${s}_`)
     );
-    if (!n)
-      r[a] = o;
+    if (!o)
+      r[a] = n;
     else {
-      const s = a.slice(n.length + 1);
-      r[n] = {
-        ...r[n],
-        [s]: o
+      const s = a.slice(o.length + 1);
+      r[o] = {
+        ...r[o],
+        [s]: n
       };
     }
   }
   return r;
 }
-function Xe(t) {
+function Ye(t) {
   return async (e, r, a) => {
-    const o = A({
+    const n = J({
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       app_metadata: a.app_metadata ? JSON.stringify(a.app_metadata) : void 0,
       user_metadata: a.user_metadata ? JSON.stringify(a.user_metadata) : void 0
     });
-    return (await t.updateTable("users").set(o).where("users.tenant_id", "=", e).where("users.user_id", "=", r).execute()).length === 1;
+    return (await t.updateTable("users").set(n).where("users.tenant_id", "=", e).where("users.user_id", "=", r).execute()).length === 1;
   };
 }
-function Ye(t) {
-  return async (e, r, a, o) => {
-    const n = { linked_to: null };
-    return (await t.updateTable("users").set(n).where("users.tenant_id", "=", e).where("users.user_id", "=", `${a}|${o}`).where("users.linked_to", "=", `${r}`).execute()).length === 1;
+function Xe(t) {
+  return async (e, r, a, n) => {
+    const o = { linked_to: null };
+    return (await t.updateTable("users").set(o).where("users.tenant_id", "=", e).where("users.user_id", "=", `${a}|${n}`).where("users.linked_to", "=", `${r}`).execute()).length === 1;
   };
 }
 function Ze(t) {
@@ -257,13 +262,13 @@ function Ze(t) {
     remove: He(t),
     get: We(t),
     list: Ge(t),
-    update: Xe(t),
+    update: Ye(t),
     // TODO - think about this more when other issues fixed
-    unlink: Ye(t)
+    unlink: Xe(t)
   };
 }
 const et = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
-let b = (t = 21) => {
+let O = (t = 21) => {
   let e = "", r = crypto.getRandomValues(new Uint8Array(t));
   for (; t--; )
     e += et[r[t] & 63];
@@ -272,7 +277,7 @@ let b = (t = 21) => {
 function tt(t) {
   return async (e) => {
     const r = {
-      id: e.id || b(),
+      id: e.id || O(),
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       ...e
@@ -283,32 +288,29 @@ function tt(t) {
 function rt(t) {
   return async (e) => {
     const r = await t.selectFrom("tenants").where("tenants.id", "=", e).selectAll().executeTakeFirst();
-    return r ? f(r) : null;
+    return r ? y(r) : null;
   };
 }
 function at(t) {
-  return async (e = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
+  return async (e) => {
     let r = t.selectFrom("tenants");
-    if (e.sort && e.sort.sort_by) {
-      const { ref: l } = t.dynamic;
-      r = r.orderBy(l(e.sort.sort_by), e.sort.sort_order);
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, sort: s, q: i } = e;
+    if (s && s.sort_by) {
+      const { ref: f } = t.dynamic;
+      r = r.orderBy(f(s.sort_by), s.sort_order);
     }
-    e.q && (r = r.where((l) => l.or([l("name", "like", `%${e.q}%`)])));
-    const o = await r.offset(e.page * e.per_page).limit(e.per_page).selectAll().execute();
-    if (!e.include_totals)
+    i && (r = r.where((f) => f.or([f("name", "like", `%${i}%`)])));
+    const u = (await r.offset(a * n).limit(n).selectAll().execute()).map(y);
+    if (!o)
       return {
-        tenants: o
+        tenants: u
       };
-    const { count: n } = await r.select((l) => l.fn.countAll().as("count")).executeTakeFirstOrThrow(), s = v(n);
+    const { count: m } = await r.select((f) => f.fn.countAll().as("count")).executeTakeFirstOrThrow(), h = x(m);
     return {
-      tenants: o.map(f),
-      start: (e.page - 1) * e.per_page,
-      limit: e.per_page,
-      length: s
+      tenants: u,
+      start: a * n,
+      limit: n,
+      length: h
     };
   };
 }
@@ -340,19 +342,19 @@ function me(t) {
 const it = 1024;
 function lt(t) {
   return async (e, r) => {
-    var o, n, s;
+    var n, o, s;
     const a = {
-      id: b(),
+      id: O(),
       ...r,
       user_agent: r.user_agent.slice(0, it)
     };
     return await t.insertInto("logs").values({
       ...a,
       // Truncate long strings to avoid database errors
-      description: (o = a.description) == null ? void 0 : o.substring(0, 256),
+      description: (n = a.description) == null ? void 0 : n.substring(0, 256),
       isMobile: r.isMobile ? 1 : 0,
       tenant_id: e,
-      scope: (n = r.scope) == null ? void 0 : n.join(","),
+      scope: (o = r.scope) == null ? void 0 : o.join(","),
       auth0_client: me(r.auth0_client),
       details: (s = me(r.details)) == null ? void 0 : s.substring(0, 8192)
     }).execute(), a;
@@ -381,28 +383,30 @@ function we(t) {
   };
 }
 function ct(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("logs").where("logs.tenant_id", "=", e);
-    r.q && (a = C(t, a, r.q, ["user_id", "ip"]));
-    let o = a;
-    if (r.sort && r.sort.sort_by) {
-      const { ref: l } = t.dynamic;
-      o = o.orderBy(
-        l(r.sort.sort_by),
-        r.sort.sort_order
-      );
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, sort: s, q: i } = r;
+    let c = t.selectFrom("logs").where("logs.tenant_id", "=", e);
+    i && (c = T(t, c, i, ["user_id", "ip"]));
+    let _ = c;
+    if (s && s.sort_by) {
+      const { ref: f } = t.dynamic;
+      _ = _.orderBy(f(s.sort_by), s.sort_order);
     }
-    o = o.offset(r.page * r.per_page).limit(r.per_page);
-    const n = await o.selectAll().execute(), { count: s } = await a.select((l) => l.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    _ = _.offset(a * n).limit(n);
+    const m = (await _.selectAll().execute()).map(we);
+    if (!o)
+      return {
+        logs: m,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: h } = await c.select((f) => f.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      logs: n.map(we),
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(s)
+      logs: m,
+      start: a * n,
+      limit: n,
+      length: x(h)
     };
   };
 }
@@ -424,10 +428,10 @@ function mt(t) {
     const a = await t.selectFrom("sessions").where("sessions.tenant_id", "=", e).where("sessions.id", "=", r).selectAll().executeTakeFirst();
     if (!a)
       return null;
-    const { tenant_id: o, device: n, clients: s, ...l } = a;
+    const { tenant_id: n, device: o, clients: s, ...i } = a;
     return {
-      ...l,
-      device: JSON.parse(n),
+      ...i,
+      device: JSON.parse(o),
       clients: JSON.parse(s)
     };
   };
@@ -454,42 +458,44 @@ function ht(t) {
 }
 function ft(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       device: a.device ? JSON.stringify(a.device) : void 0,
       clients: a.clients ? JSON.stringify(a.clients) : void 0
     };
-    return !!(await t.updateTable("sessions").set(o).where("tenant_id", "=", e).where("sessions.id", "=", r).execute()).length;
+    return !!(await t.updateTable("sessions").set(n).where("tenant_id", "=", e).where("sessions.id", "=", r).execute()).length;
   };
 }
 function pt(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("sessions").where("sessions.tenant_id", "=", e);
-    r.q && (a = C(t, a, r.q, ["user_id", "session_id"]));
-    let o = a;
-    if (r.sort && r.sort.sort_by) {
-      const { ref: c } = t.dynamic;
-      o = o.orderBy(
-        c(r.sort.sort_by),
-        r.sort.sort_order
-      );
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, sort: s, q: i } = r;
+    let c = t.selectFrom("sessions").where("sessions.tenant_id", "=", e);
+    i && (c = T(t, c, i, ["user_id", "session_id"]));
+    let _ = c;
+    if (s && s.sort_by) {
+      const { ref: g } = t.dynamic;
+      _ = _.orderBy(g(s.sort_by), s.sort_order);
     }
-    o = o.offset(r.page * r.per_page).limit(r.per_page);
-    const n = await o.selectAll().execute(), { count: s } = await a.select((c) => c.fn.countAll().as("count")).executeTakeFirstOrThrow(), l = v(s);
+    _ = _.offset(a * n).limit(n);
+    const m = (await _.selectAll().execute()).map((g) => ({
+      ...g,
+      device: JSON.parse(g.device),
+      clients: JSON.parse(g.clients)
+    }));
+    if (!o)
+      return {
+        sessions: m,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: h } = await c.select((g) => g.fn.countAll().as("count")).executeTakeFirstOrThrow(), f = x(h);
     return {
-      sessions: n.map((c) => ({
-        ...c,
-        device: JSON.parse(c.device),
-        clients: JSON.parse(c.clients)
-      })),
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: l
+      sessions: m,
+      start: a * n,
+      limit: n,
+      length: f
     };
   };
 }
@@ -507,8 +513,8 @@ function wt(t) {
     const a = await t.selectFrom("passwords").where("passwords.tenant_id", "=", e).where("passwords.user_id", "=", r).selectAll().executeTakeFirst();
     if (!a)
       return null;
-    const { tenant_id: o, ...n } = a;
-    return n;
+    const { tenant_id: n, ...o } = a;
+    return o;
   };
 }
 function yt(t) {
@@ -538,22 +544,27 @@ function Nt(t) {
   };
 }
 function Ct(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("codes").where("codes.tenant_id", "=", e);
-    r.q && (a = C(t, a, r.q, ["code", "login_id"]));
-    const n = await a.offset(r.page * r.per_page).limit(r.per_page).selectAll().execute(), { count: s } = await a.select((c) => c.fn.countAll().as("count")).executeTakeFirstOrThrow();
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, q: s } = r;
+    let i = t.selectFrom("codes").where("codes.tenant_id", "=", e);
+    s && (i = T(t, i, s, ["code", "login_id"]));
+    const u = (await i.offset(a * n).limit(n).selectAll().execute()).map((h) => {
+      const { tenant_id: f, ...g } = h;
+      return Ke.parse(y(g));
+    });
+    if (!o)
+      return {
+        codes: u,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: m } = await i.select((h) => h.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      codes: n.map((c) => {
-        const { tenant_id: _, ...u } = c;
-        return Ke.parse(f(u));
-      }),
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(s)
+      codes: u,
+      start: a * n,
+      limit: n,
+      length: x(m)
     };
   };
 }
@@ -574,10 +585,10 @@ function xt(t) {
 }
 function Tt(t) {
   return async (e, r, a) => {
-    let o = t.selectFrom("codes").where("codes.code_id", "=", r).where("codes.code_type", "=", a);
-    e.length && (o = o.where("codes.tenant_id", "=", e));
-    const n = await o.selectAll().executeTakeFirst();
-    return n ? f(n) : null;
+    let n = t.selectFrom("codes").where("codes.code_id", "=", r).where("codes.code_type", "=", a);
+    e.length && (n = n.where("codes.tenant_id", "=", e));
+    const o = await n.selectAll().executeTakeFirst();
+    return o ? y(o) : null;
   };
 }
 function St(t) {
@@ -599,38 +610,38 @@ function kt(t) {
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       ...r,
       disable_sign_ups: r.disable_sign_ups ?? !1
-    }, o = JSON.stringify(r.allowed_origins), n = JSON.stringify(r.callbacks), s = JSON.stringify(r.web_origins), l = JSON.stringify(r.allowed_logout_urls), c = JSON.stringify(r.allowed_clients);
+    }, n = JSON.stringify(r.allowed_origins), o = JSON.stringify(r.callbacks), s = JSON.stringify(r.web_origins), i = JSON.stringify(r.allowed_logout_urls), c = JSON.stringify(r.allowed_clients);
     return await t.insertInto("applications").values({
       ...a,
       tenant_id: e,
       disable_sign_ups: r.disable_sign_ups ? 1 : 0,
       addons: r.addons ? JSON.stringify(r.addons) : "{}",
-      callbacks: n,
-      allowed_origins: o,
+      callbacks: o,
+      allowed_origins: n,
       web_origins: s,
-      allowed_logout_urls: l,
+      allowed_logout_urls: i,
       allowed_clients: c
     }).execute(), a;
   };
 }
 function $t(t) {
   return async (e) => ({
-    applications: (await t.selectFrom("applications").where("applications.tenant_id", "=", e).selectAll().execute()).map((n) => ({
-      ...n,
-      disable_sign_ups: !!n.disable_sign_ups,
-      addons: n.addons ? JSON.parse(n.addons) : {},
-      callbacks: n.callbacks ? JSON.parse(n.callbacks) : [],
-      allowed_origins: n.allowed_origins ? JSON.parse(n.allowed_origins) : [],
-      web_origins: n.web_origins ? JSON.parse(n.web_origins) : [],
-      allowed_logout_urls: n.allowed_logout_urls ? JSON.parse(n.allowed_logout_urls) : [],
-      allowed_clients: n.allowed_logout_urls ? JSON.parse(n.allowed_logout_urls) : []
+    applications: (await t.selectFrom("applications").where("applications.tenant_id", "=", e).selectAll().execute()).map((o) => ({
+      ...o,
+      disable_sign_ups: !!o.disable_sign_ups,
+      addons: o.addons ? JSON.parse(o.addons) : {},
+      callbacks: o.callbacks ? JSON.parse(o.callbacks) : [],
+      allowed_origins: o.allowed_origins ? JSON.parse(o.allowed_origins) : [],
+      web_origins: o.web_origins ? JSON.parse(o.web_origins) : [],
+      allowed_logout_urls: o.allowed_logout_urls ? JSON.parse(o.allowed_logout_urls) : [],
+      allowed_clients: o.allowed_logout_urls ? JSON.parse(o.allowed_logout_urls) : []
     }))
   });
 }
 function It(t) {
   return async (e, r) => {
     const a = await t.selectFrom("applications").where("applications.tenant_id", "=", e).where("applications.id", "=", r).selectAll().executeTakeFirst();
-    return a ? f({
+    return a ? y({
       ...a,
       disable_sign_ups: !!a.disable_sign_ups,
       addons: JSON.parse(a.addons),
@@ -646,7 +657,7 @@ function Dt(t) {
 }
 function Pt(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       allowed_origins: a.allowed_origins ? JSON.stringify(a.allowed_origins) : void 0,
@@ -657,7 +668,7 @@ function Pt(t) {
       addons: a.addons ? JSON.stringify(a.addons) : "{}",
       disable_sign_ups: a.disable_sign_ups ? 1 : 0
     };
-    return await t.updateTable("applications").set(o).where("applications.id", "=", r).where("applications.tenant_id", "=", e).execute(), !0;
+    return await t.updateTable("applications").set(n).where("applications.id", "=", r).where("applications.tenant_id", "=", e).execute(), !0;
   };
 }
 function jt(t) {
@@ -672,7 +683,7 @@ function jt(t) {
 function Ft(t) {
   return async (e, r) => {
     const a = {
-      id: b(),
+      id: O(),
       ...r,
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -686,24 +697,29 @@ function Ft(t) {
   };
 }
 function Mt(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("connections").where("connections.tenant_id", "=", e);
-    r.q && (a = C(t, a, r.q, ["user_id", "ip"]));
-    const s = (await a.offset(r.page * r.per_page).limit(r.per_page).selectAll().execute()).map(
-      (c) => f({
-        ...c,
-        options: JSON.parse(c.options)
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, q: s } = r;
+    let i = t.selectFrom("connections").where("connections.tenant_id", "=", e);
+    s && (i = T(t, i, s, ["user_id", "ip"]));
+    const u = (await i.offset(a * n).limit(n).selectAll().execute()).map(
+      (h) => y({
+        ...h,
+        options: JSON.parse(h.options)
       })
-    ), { count: l } = await a.select((c) => c.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    );
+    if (!o)
+      return {
+        connections: u,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: m } = await i.select((h) => h.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      connections: s,
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(l)
+      connections: u,
+      start: a * n,
+      limit: n,
+      length: x(m)
     };
   };
 }
@@ -713,7 +729,7 @@ function At(t) {
 function zt(t) {
   return async (e, r) => {
     const a = await t.selectFrom("connections").where("connections.tenant_id", "=", e).where("connections.id", "=", r).selectAll().executeTakeFirst();
-    return a ? f({
+    return a ? y({
       ...a,
       options: JSON.parse(a.options)
     }) : null;
@@ -721,13 +737,13 @@ function zt(t) {
 }
 function Lt(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
     };
     return await t.updateTable("connections").set({
-      ...o,
-      options: o.options ? JSON.stringify(o.options) : void 0
+      ...n,
+      options: n.options ? JSON.stringify(n.options) : void 0
     }).where("connections.id", "=", r).where("connections.tenant_id", "=", e).execute(), !0;
   };
 }
@@ -748,13 +764,13 @@ function Jt(t) {
         return null;
       const a = await t.selectFrom("tenants").selectAll().where("id", "=", r.tenant_id).executeTakeFirst();
       if (!a)
-        throw new X(404, { message: "Tenant not found" });
-      const o = await t.selectFrom("connections").where("tenant_id", "=", r.tenant_id).selectAll().execute();
+        throw new te(404, { message: "Tenant not found" });
+      const n = await t.selectFrom("connections").where("tenant_id", "=", r.tenant_id).selectAll().execute();
       return {
         ...r,
-        connections: o.map(
+        connections: n.map(
           (s) => Ue.parse(
-            f({
+            y({
               ...s,
               options: s.options ? JSON.parse(s.options) : {}
             })
@@ -766,7 +782,7 @@ function Jt(t) {
         web_origins: r.web_origins ? JSON.parse(r.web_origins) : [],
         allowed_logout_urls: r.allowed_logout_urls ? JSON.parse(r.allowed_logout_urls) : [],
         allowed_clients: r.allowed_clients ? JSON.parse(r.allowed_clients) : [],
-        tenant: f(a),
+        tenant: y(a),
         // this is really an integer in the database
         disable_sign_ups: !!r.disable_sign_ups
       };
@@ -774,12 +790,46 @@ function Jt(t) {
   };
 }
 function Rt(t) {
-  return async () => await t.selectFrom("keys").where(
-    (r) => r.or([
-      r("revoked_at", ">", (/* @__PURE__ */ new Date()).toISOString()),
-      r("revoked_at", "is", null)
-    ])
-  ).selectAll().execute();
+  return async (e = {}) => {
+    const {
+      page: r = 0,
+      per_page: a = 100,
+      include_totals: n = !1,
+      sort: o,
+      q: s
+    } = e;
+    let i = t.selectFrom("keys").where(
+      (f) => f.or([
+        f("revoked_at", ">", (/* @__PURE__ */ new Date()).toISOString()),
+        f("revoked_at", "is", null)
+      ])
+    );
+    s && (i = T(t, i, s, [
+      "kid",
+      "connection",
+      "fingerprint",
+      "thumbprint",
+      "type"
+    ]));
+    let c = i.select((f) => f.fn.count("kid").as("count"));
+    const _ = r * a;
+    i = i.limit(a).offset(_), o && (i = i.orderBy(o.sort_by, o.sort_order));
+    const u = await i.selectAll().execute();
+    if (!n)
+      return {
+        signingKeys: u,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const m = await c.executeTakeFirst(), h = x((m == null ? void 0 : m.count) ?? 0);
+    return {
+      signingKeys: u,
+      start: _,
+      limit: a,
+      length: h
+    };
+  };
 }
 function Kt(t) {
   return async (e) => {
@@ -799,7 +849,7 @@ function Bt(t) {
 function Qt(t) {
   return async (e, r) => {
     const a = {
-      custom_domain_id: b(),
+      custom_domain_id: O(),
       status: "pending",
       primary: !1,
       ...r
@@ -833,12 +883,12 @@ function Wt(t) {
 }
 function Gt(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       primary: a.primary ? 1 : 0
     };
-    return (await t.updateTable("custom_domains").set(o).where("custom_domains.tenant_id", "=", e).where("custom_domains.custom_domain_id", "=", r).execute()).length > 0;
+    return (await t.updateTable("custom_domains").set(n).where("custom_domains.tenant_id", "=", e).where("custom_domains.custom_domain_id", "=", r).execute()).length > 0;
   };
 }
 function Ht(t) {
@@ -850,7 +900,7 @@ function Ht(t) {
     } : null;
   };
 }
-function Xt(t) {
+function Yt(t) {
   return {
     create: Qt(t),
     get: Wt(t),
@@ -860,29 +910,29 @@ function Xt(t) {
     update: Gt(t)
   };
 }
-function Yt(t) {
+function Xt(t) {
   return async (e) => {
     const [r] = await t.selectFrom("branding").where("branding.tenant_id", "=", e).selectAll().execute();
     if (!r)
       return null;
     const {
       tenant_id: a,
-      colors_primary: o,
-      colors_page_background_type: n,
+      colors_primary: n,
+      colors_page_background_type: o,
       colors_page_background_start: s,
-      colors_page_background_end: l,
+      colors_page_background_end: i,
       colors_page_background_angle_dev: c,
       font_url: _,
       ...u
     } = r;
-    return f({
+    return y({
       ...u,
       colors: {
-        primary: o,
+        primary: n,
         page_background: {
-          type: n,
+          type: o,
           start: s,
-          end: l,
+          end: i,
           angle_deg: c
         }
       },
@@ -892,26 +942,26 @@ function Yt(t) {
 }
 function Zt(t) {
   return async (e, r) => {
-    var s, l, c, _, u, h, g, I, D, O, U, ne, oe, se, ie, le, ce, de;
-    const { colors: a, font: o, ...n } = r;
+    var s, i, c, _, u, m, h, f, g, w, b, D, M, P, V, le, ce, de;
+    const { colors: a, font: n, ...o } = r;
     try {
       await t.insertInto("branding").values({
-        ...n,
+        ...o,
         colors_primary: a == null ? void 0 : a.primary,
-        colors_page_background_type: (l = (s = r.colors) == null ? void 0 : s.page_background) == null ? void 0 : l.type,
+        colors_page_background_type: (i = (s = r.colors) == null ? void 0 : s.page_background) == null ? void 0 : i.type,
         colors_page_background_start: (_ = (c = r.colors) == null ? void 0 : c.page_background) == null ? void 0 : _.start,
-        colors_page_background_end: (h = (u = r.colors) == null ? void 0 : u.page_background) == null ? void 0 : h.end,
-        colors_page_background_angle_dev: (I = (g = r.colors) == null ? void 0 : g.page_background) == null ? void 0 : I.angle_deg,
-        font_url: (D = r.font) == null ? void 0 : D.url,
+        colors_page_background_end: (m = (u = r.colors) == null ? void 0 : u.page_background) == null ? void 0 : m.end,
+        colors_page_background_angle_dev: (f = (h = r.colors) == null ? void 0 : h.page_background) == null ? void 0 : f.angle_deg,
+        font_url: (g = r.font) == null ? void 0 : g.url,
         tenant_id: e
       }).execute();
     } catch {
       await t.updateTable("branding").set({
-        ...n,
+        ...o,
         colors_primary: a == null ? void 0 : a.primary,
-        colors_page_background_type: (U = (O = r.colors) == null ? void 0 : O.page_background) == null ? void 0 : U.type,
-        colors_page_background_start: (oe = (ne = r.colors) == null ? void 0 : ne.page_background) == null ? void 0 : oe.start,
-        colors_page_background_end: (ie = (se = r.colors) == null ? void 0 : se.page_background) == null ? void 0 : ie.end,
+        colors_page_background_type: (b = (w = r.colors) == null ? void 0 : w.page_background) == null ? void 0 : b.type,
+        colors_page_background_start: (M = (D = r.colors) == null ? void 0 : D.page_background) == null ? void 0 : M.start,
+        colors_page_background_end: (V = (P = r.colors) == null ? void 0 : P.page_background) == null ? void 0 : V.end,
         colors_page_background_angle_dev: (ce = (le = r.colors) == null ? void 0 : le.page_background) == null ? void 0 : ce.angle_deg,
         font_url: (de = r.font) == null ? void 0 : de.url
       }).where("tenant_id", "=", e).execute();
@@ -920,38 +970,43 @@ function Zt(t) {
 }
 function er(t) {
   return {
-    get: Yt(t),
+    get: Xt(t),
     set: Zt(t)
   };
 }
 function tr(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("hooks").where("hooks.tenant_id", "=", e);
-    r.q && (a = C(t, a, r.q, ["url", "form_id"]));
-    const n = await a.offset(r.page * r.per_page).limit(r.per_page).selectAll().execute(), { count: s } = await a.select((c) => c.fn.countAll().as("count")).executeTakeFirstOrThrow();
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, q: s } = r;
+    let i = t.selectFrom("hooks").where("hooks.tenant_id", "=", e);
+    s && (i = T(t, i, s, ["url", "form_id"]));
+    const u = (await i.offset(a * n).limit(n).selectAll().execute()).map((h) => {
+      const { tenant_id: f, enabled: g, synchronous: w, ...b } = h;
+      return y({
+        ...b,
+        enabled: !!g,
+        synchronous: !!w
+      });
+    });
+    if (!o)
+      return {
+        hooks: u,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: m } = await i.select((h) => h.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      hooks: n.map((c) => {
-        const { tenant_id: _, enabled: u, synchronous: h, ...g } = c;
-        return f({
-          ...g,
-          enabled: !!u,
-          synchronous: !!h
-        });
-      }),
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(s)
+      hooks: u,
+      start: a * n,
+      limit: n,
+      length: x(m)
     };
   };
 }
 function rr(t) {
   return async (e, r) => {
     const a = await t.selectFrom("hooks").where("hooks.tenant_id", "=", e).where("hooks.hook_id", "=", r).selectAll().executeTakeFirst();
-    return a ? f({
+    return a ? y({
       ...a,
       enabled: !!a.enabled,
       synchronous: !!a.synchronous
@@ -964,7 +1019,7 @@ function ar(t) {
 function nr(t) {
   return async (e, r) => {
     const a = {
-      hook_id: b(),
+      hook_id: O(),
       ...r,
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -979,13 +1034,13 @@ function nr(t) {
 }
 function or(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       enabled: a.enabled !== void 0 ? a.enabled ? 1 : 0 : void 0,
       synchronous: a.enabled !== void 0 ? a.synchronous ? 1 : 0 : void 0
     };
-    return await t.updateTable("hooks").set(o).where("hooks.hook_id", "=", r).where("hooks.tenant_id", "=", e).execute(), !0;
+    return await t.updateTable("hooks").set(n).where("hooks.hook_id", "=", r).where("hooks.tenant_id", "=", e).execute(), !0;
   };
 }
 function sr(t) {
@@ -1000,15 +1055,15 @@ function sr(t) {
 function ir(t) {
   return async (e, r) => {
     const a = {
-      themeId: b(),
+      themeId: O(),
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       ...r
-    }, o = {
+    }, n = {
       ...a,
       tenant_id: e
     };
-    return await t.insertInto("themes").values(A(o)).execute(), a;
+    return await t.insertInto("themes").values(J(n)).execute(), a;
   };
 }
 function lr(t) {
@@ -1019,7 +1074,7 @@ function cr(t) {
     const a = await t.selectFrom("themes").where("themes.tenant_id", "=", e).where("themes.themeId", "=", r).selectAll().executeTakeFirst();
     if (!a)
       return null;
-    const o = {
+    const n = {
       ...a,
       borders_show_widget_shadow: !!a.borders_show_widget_shadow,
       fonts_body_text_bold: !!a.fonts_body_text_bold,
@@ -1029,8 +1084,8 @@ function cr(t) {
       fonts_subtitle_bold: !!a.fonts_subtitle_bold,
       fonts_title_bold: !!a.fonts_title_bold
     };
-    return f(
-      ge(o, [
+    return y(
+      ge(n, [
         "widget",
         "colors",
         "borders",
@@ -1042,11 +1097,11 @@ function cr(t) {
 }
 function dr(t) {
   return async (e, r, a) => {
-    const o = A({
+    const n = J({
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
     });
-    return await t.updateTable("themes").set(o).where("themes.themeId", "=", r).where("themes.tenant_id", "=", e).execute(), !0;
+    return await t.updateTable("themes").set(n).where("themes.themeId", "=", r).where("themes.tenant_id", "=", e).execute(), !0;
   };
 }
 function ur(t) {
@@ -1062,7 +1117,7 @@ function mr(t) {
     const a = await t.selectFrom("login_sessions").where("login_sessions.id", "=", r).selectAll().executeTakeFirst();
     return a ? Be.parse(
       ge(
-        f({
+        y({
           ...a,
           login_completed: !!a.login_completed
         }),
@@ -1073,24 +1128,24 @@ function mr(t) {
 }
 function _r(t) {
   return async (e, r) => {
-    var o;
+    var n;
     const a = {
-      id: b(),
+      id: O(),
       ...r,
-      authorization_url: (o = r.authorization_url) == null ? void 0 : o.slice(0, 1024),
+      authorization_url: (n = r.authorization_url) == null ? void 0 : n.slice(0, 1024),
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       login_completed: !!r.login_completed
     };
     return await t.insertInto("login_sessions").values({
-      ...A(a),
+      ...J(a),
       tenant_id: e
     }).execute(), a;
   };
 }
 function hr(t) {
   return async (e, r, a) => (await t.updateTable("login_sessions").set(
-    A({
+    J({
       ...a
     })
   ).where("login_sessions.id", "=", r).where("login_sessions.tenant_id", "=", e).execute()).length === 1;
@@ -1109,7 +1164,7 @@ function pr(t) {
 function gr(t) {
   return async (e) => {
     const [r] = await t.selectFrom("prompt_settings").where("prompt_settings.tenant_id", "=", e).selectAll().execute();
-    return f({
+    return y({
       identifier_first: !!(r != null && r.identifier_first),
       password_first: !!(r != null && r.password_first),
       webauthn_platform_first_factor: !!(r != null && r.webauthn_platform_first_factor),
@@ -1118,7 +1173,7 @@ function gr(t) {
   };
 }
 function he(t) {
-  return f({
+  return y({
     ...t,
     webauthn_platform_first_factor: t.webauthn_platform_first_factor ? !!t.webauthn_platform_first_factor : void 0,
     identifier_first: t.identifier_first ? !!t.identifier_first : void 0,
@@ -1152,38 +1207,38 @@ function vr(t) {
       return null;
     const {
       tenant_id: a,
-      credentials: o,
-      settings: n,
+      credentials: n,
+      settings: o,
       enabled: s,
-      ...l
+      ...i
     } = r;
-    return f({
-      ...l,
-      credentials: JSON.parse(o),
-      settings: JSON.parse(n),
+    return y({
+      ...i,
+      credentials: JSON.parse(n),
+      settings: JSON.parse(o),
       enabled: !!s
     });
   };
 }
 function Nr(t) {
   return async (e, r) => {
-    const { credentials: a, settings: o, enabled: n, ...s } = r;
+    const { credentials: a, settings: n, enabled: o, ...s } = r;
     await t.updateTable("email_providers").set({
       ...s,
       credentials: a ? JSON.stringify(a) : void 0,
-      settings: o ? JSON.stringify(o) : void 0,
-      enabled: n !== void 0 ? n ? 1 : 0 : void 0
+      settings: n ? JSON.stringify(n) : void 0,
+      enabled: o !== void 0 ? o ? 1 : 0 : void 0
     }).where("tenant_id", "=", e).execute();
   };
 }
 function Cr(t) {
   return async (e, r) => {
-    const { credentials: a, settings: o, enabled: n, ...s } = r;
+    const { credentials: a, settings: n, enabled: o, ...s } = r;
     await t.insertInto("email_providers").values({
       ...s,
-      enabled: n ? 1 : 0,
+      enabled: o ? 1 : 0,
       credentials: JSON.stringify(a),
-      settings: JSON.stringify(o),
+      settings: JSON.stringify(n),
       tenant_id: e,
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -1228,43 +1283,45 @@ function Sr(t) {
 }
 function Or(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       device: a.device ? JSON.stringify(a.device) : void 0,
       resource_servers: a.resource_servers ? JSON.stringify(a.resource_servers) : void 0,
       rotating: a.rotating ? 1 : 0
     };
-    return !!(await t.updateTable("refresh_tokens").set(o).where("tenant_id", "=", e).where("refresh_tokens.id", "=", r).execute()).length;
+    return !!(await t.updateTable("refresh_tokens").set(n).where("tenant_id", "=", e).where("refresh_tokens.id", "=", r).execute()).length;
   };
 }
 function kr(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", e);
-    r.q && (a = C(t, a, r.q, ["token", "session_id"]));
-    let o = a;
-    if (r.sort && r.sort.sort_by) {
-      const { ref: c } = t.dynamic;
-      o = o.orderBy(
-        c(r.sort.sort_by),
-        r.sort.sort_order
-      );
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, sort: s, q: i } = r;
+    let c = t.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", e);
+    i && (c = T(t, c, i, ["token", "session_id"]));
+    let _ = c;
+    if (s && s.sort_by) {
+      const { ref: g } = t.dynamic;
+      _ = _.orderBy(g(s.sort_by), s.sort_order);
     }
-    o = o.offset(r.page * r.per_page).limit(r.per_page);
-    const n = await o.selectAll().execute(), { count: s } = await a.select((c) => c.fn.countAll().as("count")).executeTakeFirstOrThrow(), l = v(s);
+    _ = _.offset(a * n).limit(n);
+    const m = (await _.selectAll().execute()).map((g) => ({
+      ...g,
+      rotating: !!g.rotating,
+      device: g.device ? JSON.parse(g.device) : {},
+      resource_servers: g.resource_servers ? JSON.parse(g.resource_servers) : []
+    }));
+    if (!o)
+      return {
+        refresh_tokens: m,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: h } = await c.select((g) => g.fn.countAll().as("count")).executeTakeFirstOrThrow(), f = x(h);
     return {
-      refresh_tokens: n.map((c) => ({
-        ...c,
-        rotating: !!c.rotating,
-        device: c.device ? JSON.parse(c.device) : {},
-        resource_servers: c.resource_servers ? JSON.parse(c.resource_servers) : []
-      })),
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: l
+      refresh_tokens: m,
+      start: a * n,
+      limit: n,
+      length: f
     };
   };
 }
@@ -1285,32 +1342,32 @@ function Ir(t) {
       Date.now() - 1e3 * 60 * 60 * 24 * 30 * 3
     ).toISOString();
     console.log("delete codes"), await t.deleteFrom("codes").where("created_at", "<", e).limit(1e5).execute(), console.log("delete sessions"), await t.deleteFrom("login_sessions").where("created_at", "<", r).where("session_id", "is", null).limit(1e5).execute(), console.log("delete logs"), await t.deleteFrom("logs").where("date", "<", a).limit(1e5).execute(), console.log("delete refresh tokens"), await t.deleteFrom("refresh_tokens").where(
-      (n) => n.or([
-        n("expires_at", "<", r),
-        n("idle_expires_at", "<", r)
+      (o) => o.or([
+        o("expires_at", "<", r),
+        o("idle_expires_at", "<", r)
       ])
     ).limit(1e4).execute(), console.log("delete sessions");
-    const o = await t.selectFrom("sessions").select("id").where(
-      (n) => n.or([
-        n("expires_at", "<", r),
-        n("idle_expires_at", "<", r)
+    const n = await t.selectFrom("sessions").select("id").where(
+      (o) => o.or([
+        o("expires_at", "<", r),
+        o("idle_expires_at", "<", r)
       ])
     ).where(
       "id",
       "not in",
       t.selectFrom("refresh_tokens").select("session_id")
     ).limit(1e5).execute();
-    o.length > 0 && await t.deleteFrom("sessions").where(
+    n.length > 0 && await t.deleteFrom("sessions").where(
       "id",
       "in",
-      o.map((n) => n.id)
+      n.map((o) => o.id)
     ).execute(), console.log("cleanup complete");
   };
 }
 function Dr(t) {
   return async (e, r) => {
-    const a = Q.parse({
-      id: b(),
+    const a = G.parse({
+      id: O(),
       ...r,
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -1322,41 +1379,46 @@ function Dr(t) {
       start: JSON.stringify(a.start || {}),
       ending: JSON.stringify(a.ending || {}),
       tenant_id: e
-    }).execute(), Q.parse(a);
+    }).execute(), G.parse(a);
   };
 }
 function Pr(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("forms").where("tenant_id", "=", e);
-    r != null && r.q && (a = C(t, a, r.q, []));
-    const s = (await a.offset(r.page * r.per_page).limit(r.per_page).selectAll().execute()).map((c) => {
-      const _ = { ...c };
-      if (typeof _.nodes == "string")
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, q: s } = r;
+    let i = t.selectFrom("forms").where("tenant_id", "=", e);
+    s && (i = T(t, i, s, []));
+    const u = (await i.offset(a * n).limit(n).selectAll().execute()).map((h) => {
+      const f = { ...h };
+      if (typeof f.nodes == "string")
         try {
-          _.nodes = JSON.parse(_.nodes);
+          f.nodes = JSON.parse(f.nodes);
         } catch {
         }
-      if (typeof _.start == "string")
+      if (typeof f.start == "string")
         try {
-          _.start = JSON.parse(_.start);
+          f.start = JSON.parse(f.start);
         } catch {
         }
-      if (typeof _.ending == "string")
+      if (typeof f.ending == "string")
         try {
-          _.ending = JSON.parse(_.ending);
+          f.ending = JSON.parse(f.ending);
         } catch {
         }
-      return Q.parse(f(_));
-    }), { count: l } = await a.select((c) => c.fn.countAll().as("count")).executeTakeFirstOrThrow();
+      return G.parse(y(f));
+    });
+    if (!o)
+      return {
+        forms: u,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: m } = await i.select((h) => h.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      forms: s,
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(l)
+      forms: u,
+      start: a * n,
+      limit: n,
+      length: x(m)
     };
   };
 }
@@ -1370,34 +1432,34 @@ function Fr(t) {
   return async (e, r) => {
     const a = await t.selectFrom("forms").selectAll().where("forms.id", "=", r).where("tenant_id", "=", e).executeTakeFirst();
     if (!a) return null;
-    const o = { ...a };
-    if (typeof o.nodes == "string")
+    const n = { ...a };
+    if (typeof n.nodes == "string")
       try {
-        o.nodes = JSON.parse(o.nodes);
+        n.nodes = JSON.parse(n.nodes);
       } catch {
       }
-    if (typeof o.start == "string")
+    if (typeof n.start == "string")
       try {
-        o.start = JSON.parse(o.start);
+        n.start = JSON.parse(n.start);
       } catch {
       }
-    if (typeof o.ending == "string")
+    if (typeof n.ending == "string")
       try {
-        o.ending = JSON.parse(o.ending);
+        n.ending = JSON.parse(n.ending);
       } catch {
       }
-    return Q.parse(f(o));
+    return G.parse(y(n));
   };
 }
 function Mr(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
     };
-    a.nodes && (o.nodes = JSON.stringify(a.nodes)), a.start && (o.start = JSON.stringify(a.start)), a.ending && (o.ending = JSON.stringify(a.ending));
-    const { numUpdatedRows: n } = await t.updateTable("forms").set(o).where("id", "=", r).where("tenant_id", "=", e).executeTakeFirst();
-    return n > 0;
+    a.nodes && (n.nodes = JSON.stringify(a.nodes)), a.start && (n.start = JSON.stringify(a.start)), a.ending && (n.ending = JSON.stringify(a.ending));
+    const { numUpdatedRows: o } = await t.updateTable("forms").set(n).where("id", "=", r).where("tenant_id", "=", e).executeTakeFirst();
+    return o > 0;
   };
 }
 function Ar(t) {
@@ -1411,22 +1473,22 @@ function Ar(t) {
 }
 function zr(t) {
   return async (e, r) => {
-    const a = (/* @__PURE__ */ new Date()).toISOString(), o = {
-      id: b(),
+    const a = (/* @__PURE__ */ new Date()).toISOString(), n = {
+      id: O(),
       ...r,
       created_at: a,
       updated_at: a
-    }, n = qe.parse(o), {
+    }, o = qe.parse(n), {
       verificationKey: s,
-      scopes: l,
+      scopes: i,
       options: c,
       skip_consent_for_verifiable_first_party_clients: _,
       allow_offline_access: u,
-      ...h
-    } = n, g = {
-      ...h,
+      ...m
+    } = o, h = {
+      ...m,
       tenant_id: e,
-      scopes: l ? JSON.stringify(l) : "[]",
+      scopes: i ? JSON.stringify(i) : "[]",
       options: c ? JSON.stringify(c) : "{}",
       skip_consent_for_verifiable_first_party_clients: _ ? 1 : 0,
       allow_offline_access: u ? 1 : 0,
@@ -1434,70 +1496,79 @@ function zr(t) {
       created_at: a,
       updated_at: a
     };
-    return await t.insertInto("resource_servers").values(g).execute(), f(n);
+    return await t.insertInto("resource_servers").values(h).execute(), y(o);
   };
 }
 function Lr(t) {
   return async (e, r) => {
     const a = await t.selectFrom("resource_servers").selectAll().where("tenant_id", "=", e).where("id", "=", r).executeTakeFirst();
     if (!a) return null;
-    const o = a, {
-      verification_key: n,
+    const n = a, {
+      verification_key: o,
       scopes: s,
-      options: l,
+      options: i,
       skip_consent_for_verifiable_first_party_clients: c,
       allow_offline_access: _,
       ...u
-    } = o, h = {
+    } = n, m = {
       ...u,
       scopes: s ? JSON.parse(s) : [],
-      options: l ? JSON.parse(l) : {},
+      options: i ? JSON.parse(i) : {},
       skip_consent_for_verifiable_first_party_clients: !!c,
       allow_offline_access: !!_,
       // Convert verification_key back to verificationKey for API
-      verificationKey: n
+      verificationKey: o
     };
-    return f(h);
+    return y(m);
   };
 }
 function Er(t) {
-  return async (e, r = { page: 0, per_page: 50, include_totals: !1 }) => {
-    let a = t.selectFrom("resource_servers").where("resource_servers.tenant_id", "=", e);
-    if (r.q) {
-      const c = r.q.trim(), _ = c.split(/\s+/), u = _.length === 1 ? _[0] : void 0, h = u ? u.match(/^(-)?(name|identifier):(.*)$/) : null, g = h ? h[3] : "", I = /^(>=|>|<=|<)/.test(g || "");
-      if (h && !I) {
-        const D = !!h[1], O = h[2] === "name" ? "resource_servers.name" : "resource_servers.identifier";
-        a = D ? a.where(O, "not like", `%${g}%`) : a.where(O, "like", `%${g}%`);
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, q: s } = r;
+    let i = t.selectFrom("resource_servers").where("resource_servers.tenant_id", "=", e);
+    if (s) {
+      const h = s.trim(), f = h.split(/\s+/), g = f.length === 1 ? f[0] : void 0, w = g ? g.match(/^(-)?(name|identifier):(.*)$/) : null, b = w ? w[3] : "", D = /^(>=|>|<=|<)/.test(b || "");
+      if (w && !D) {
+        const M = !!w[1], P = w[2] === "name" ? "resource_servers.name" : "resource_servers.identifier";
+        i = M ? i.where(P, "not like", `%${b}%`) : i.where(P, "like", `%${b}%`);
       } else
-        a = C(t, a, c, [
+        i = T(t, i, h, [
           "resource_servers.name",
           "resource_servers.identifier"
         ]);
     }
-    const s = (await a.offset(r.page * r.per_page).limit(r.per_page).selectAll().execute()).map((c) => {
-      const _ = c, {
-        verification_key: u,
-        scopes: h,
-        options: g,
-        skip_consent_for_verifiable_first_party_clients: I,
-        allow_offline_access: D,
-        ...O
-      } = _, U = {
-        ...O,
-        scopes: h ? JSON.parse(h) : [],
-        options: g ? JSON.parse(g) : {},
-        skip_consent_for_verifiable_first_party_clients: !!I,
-        allow_offline_access: !!D,
+    const u = (await i.offset(a * n).limit(n).selectAll().execute()).map((h) => {
+      const f = h, {
+        verification_key: g,
+        scopes: w,
+        options: b,
+        skip_consent_for_verifiable_first_party_clients: D,
+        allow_offline_access: M,
+        ...P
+      } = f, V = {
+        ...P,
+        scopes: w ? JSON.parse(w) : [],
+        options: b ? JSON.parse(b) : {},
+        skip_consent_for_verifiable_first_party_clients: !!D,
+        allow_offline_access: !!M,
         // Convert verification_key back to verificationKey for API
-        verificationKey: u
+        verificationKey: g
+      };
+      return y(V);
+    });
+    if (!o)
+      return {
+        resource_servers: u,
+        start: 0,
+        limit: 0,
+        length: 0
       };
-      return f(U);
-    }), { count: l } = await a.select((c) => c.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    const { count: m } = await i.select((h) => h.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      resource_servers: s,
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(l)
+      resource_servers: u,
+      start: a * n,
+      limit: n,
+      length: x(m)
     };
   };
 }
@@ -1510,19 +1581,19 @@ function Jr(t) {
 function Rr(t) {
   return async (e, r, a) => {
     const {
-      verificationKey: o,
-      scopes: n,
+      verificationKey: n,
+      scopes: o,
       options: s,
-      skip_consent_for_verifiable_first_party_clients: l,
+      skip_consent_for_verifiable_first_party_clients: i,
       allow_offline_access: c,
       ..._
     } = a, u = {
       ..._,
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
     };
-    o !== void 0 && (u.verification_key = o), n !== void 0 && (u.scopes = JSON.stringify(n)), s !== void 0 && (u.options = JSON.stringify(s)), l !== void 0 && (u.skip_consent_for_verifiable_first_party_clients = l ? 1 : 0), c !== void 0 && (u.allow_offline_access = c ? 1 : 0);
-    const h = await t.updateTable("resource_servers").set(u).where("tenant_id", "=", e).where("id", "=", r).executeTakeFirst();
-    return Number(h.numUpdatedRows) > 0;
+    n !== void 0 && (u.verification_key = n), o !== void 0 && (u.scopes = JSON.stringify(o)), s !== void 0 && (u.options = JSON.stringify(s)), i !== void 0 && (u.skip_consent_for_verifiable_first_party_clients = i ? 1 : 0), c !== void 0 && (u.allow_offline_access = c ? 1 : 0);
+    const m = await t.updateTable("resource_servers").set(u).where("tenant_id", "=", e).where("id", "=", r).executeTakeFirst();
+    return Number(m.numUpdatedRows) > 0;
   };
 }
 function Kr(t) {
@@ -1536,15 +1607,15 @@ function Kr(t) {
 }
 function Ur(t) {
   return async (e, r) => {
-    const a = (/* @__PURE__ */ new Date()).toISOString(), o = b(), n = {
-      id: o,
+    const a = (/* @__PURE__ */ new Date()).toISOString(), n = O(), o = {
+      id: n,
       ...r,
       tenant_id: e,
       created_at: a,
       updated_at: a
     };
-    return await t.insertInto("roles").values(n).execute(), {
-      id: o,
+    return await t.insertInto("roles").values(o).execute(), {
+      id: n,
       ...r,
       created_at: a,
       updated_at: a
@@ -1560,25 +1631,34 @@ function Br(t) {
   };
 }
 function Qr(t) {
-  return async (e, r = { page: 0, per_page: 50, include_totals: !1 }) => {
+  return async (e, r) => {
     let a = t.selectFrom("roles").where("roles.tenant_id", "=", e);
-    r.q && (a = C(t, a, r.q, ["name"]));
-    const n = await a.offset(r.page * r.per_page).limit(r.per_page).selectAll().execute(), { count: s } = await a.select((l) => l.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    const { page: n = 0, per_page: o = 50, include_totals: s = !1 } = r;
+    r.q && (a = T(t, a, r.q, ["name"]));
+    const c = await a.offset(n * o).limit(o).selectAll().execute();
+    if (!s)
+      return {
+        roles: c,
+        start: n * o,
+        limit: o,
+        length: c.length
+      };
+    const { count: _ } = await a.select((u) => u.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      roles: n,
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(s)
+      roles: c,
+      start: n * o,
+      limit: o,
+      length: x(_)
     };
   };
 }
 function qr(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
-    }, n = await t.updateTable("roles").set(o).where("roles.tenant_id", "=", e).where("roles.id", "=", r).executeTakeFirst();
-    return Number(n.numUpdatedRows) > 0;
+    }, o = await t.updateTable("roles").set(n).where("roles.tenant_id", "=", e).where("roles.id", "=", r).executeTakeFirst();
+    return Number(o.numUpdatedRows) > 0;
   };
 }
 function Vr(t) {
@@ -1599,31 +1679,31 @@ function Wr(t) {
 function Gr(t) {
   return async (e, r, a) => {
     if (a.length === 0) return !0;
-    const o = (/* @__PURE__ */ new Date()).toISOString();
+    const n = (/* @__PURE__ */ new Date()).toISOString();
     try {
-      for (const n of a) {
-        if (n.role_id !== r)
+      for (const o of a) {
+        if (o.role_id !== r)
           throw new Error(
-            `Permission role_id ${n.role_id} does not match expected role_id ${r}`
+            `Permission role_id ${o.role_id} does not match expected role_id ${r}`
           );
         const s = {
           tenant_id: e,
-          role_id: n.role_id,
-          resource_server_identifier: n.resource_server_identifier,
-          permission_name: n.permission_name,
-          created_at: o
+          role_id: o.role_id,
+          resource_server_identifier: o.resource_server_identifier,
+          permission_name: o.permission_name,
+          created_at: n
         };
         try {
           await t.insertInto("role_permissions").values(s).execute();
-        } catch (l) {
-          if (l.code === "SQLITE_CONSTRAINT_PRIMARYKEY" || l.code === "SQLITE_CONSTRAINT_UNIQUE")
+        } catch (i) {
+          if (i.code === "SQLITE_CONSTRAINT_PRIMARYKEY" || i.code === "SQLITE_CONSTRAINT_UNIQUE")
             continue;
-          throw l;
+          throw i;
         }
       }
       return !0;
-    } catch (n) {
-      return console.error("Error assigning role permissions:", n), !1;
+    } catch (o) {
+      return console.error("Error assigning role permissions:", o), !1;
     }
   };
 }
@@ -1633,78 +1713,83 @@ function Hr(t) {
     try {
       return (await Promise.all(
         a.map(
-          (n) => t.deleteFrom("role_permissions").where("tenant_id", "=", e).where("role_id", "=", r).where(
+          (o) => t.deleteFrom("role_permissions").where("tenant_id", "=", e).where("role_id", "=", r).where(
             "resource_server_identifier",
             "=",
-            n.resource_server_identifier
-          ).where("permission_name", "=", n.permission_name).executeTakeFirst()
+            o.resource_server_identifier
+          ).where("permission_name", "=", o.permission_name).executeTakeFirst()
         )
-      )).some((n) => Number(n.numDeletedRows) > 0);
-    } catch (o) {
-      return console.error("Error removing role permissions:", o), !1;
+      )).some((o) => Number(o.numDeletedRows) > 0);
+    } catch (n) {
+      return console.error("Error removing role permissions:", n), !1;
     }
   };
 }
-function Xr(t) {
-  return async (e, r, a = { page: 0, per_page: 50, include_totals: !1 }) => (await t.selectFrom("role_permissions").leftJoin(
-    "resource_servers",
-    (s) => s.onRef(
-      "role_permissions.tenant_id",
-      "=",
-      "resource_servers.tenant_id"
-    ).onRef(
+function Yr(t) {
+  return async (e, r, a = {}) => {
+    const { page: n = 0, per_page: o = 50, include_totals: s = !1 } = a;
+    let i = t.selectFrom("role_permissions").leftJoin(
+      "resource_servers",
+      (m) => m.onRef(
+        "role_permissions.tenant_id",
+        "=",
+        "resource_servers.tenant_id"
+      ).onRef(
+        "role_permissions.resource_server_identifier",
+        "=",
+        "resource_servers.id"
+      )
+    ).select([
+      "role_permissions.role_id",
       "role_permissions.resource_server_identifier",
-      "=",
-      "resource_servers.id"
-    )
-  ).select([
-    "role_permissions.role_id",
-    "role_permissions.resource_server_identifier",
-    "role_permissions.permission_name",
-    "role_permissions.created_at",
-    "resource_servers.name as resource_server_name"
-  ]).where("role_permissions.tenant_id", "=", e).where("role_permissions.role_id", "=", r).offset(a.page * a.per_page).limit(a.per_page).execute()).map((s) => ({
-    role_id: s.role_id,
-    resource_server_identifier: s.resource_server_identifier,
-    resource_server_name: s.resource_server_name || s.resource_server_identifier,
-    // Fallback to identifier if name is null
-    permission_name: s.permission_name,
-    description: null,
-    // No description available from role_permissions directly
-    created_at: s.created_at
-  }));
+      "role_permissions.permission_name",
+      "role_permissions.created_at",
+      "resource_servers.name as resource_server_name"
+    ]).where("role_permissions.tenant_id", "=", e).where("role_permissions.role_id", "=", r);
+    const u = (await i.offset(n * o).limit(o).execute()).map((m) => ({
+      role_id: m.role_id,
+      resource_server_identifier: m.resource_server_identifier,
+      resource_server_name: m.resource_server_name || m.resource_server_identifier,
+      // Fallback to identifier if name is null
+      permission_name: m.permission_name,
+      description: null,
+      // No description available from role_permissions directly
+      created_at: m.created_at
+    }));
+    return s && await i.select((m) => m.fn.countAll().as("count")).executeTakeFirstOrThrow(), u;
+  };
 }
-function Yr(t) {
+function Xr(t) {
   return {
     assign: Gr(t),
     remove: Hr(t),
-    list: Xr(t)
+    list: Yr(t)
   };
 }
 function Zr(t) {
   return async (e, r, a) => {
     if (a.length === 0) return !0;
-    const o = (/* @__PURE__ */ new Date()).toISOString();
+    const n = (/* @__PURE__ */ new Date()).toISOString();
     try {
-      for (const n of a) {
+      for (const o of a) {
         const s = {
           tenant_id: e,
           user_id: r,
-          resource_server_identifier: n.resource_server_identifier,
-          permission_name: n.permission_name,
-          created_at: o
+          resource_server_identifier: o.resource_server_identifier,
+          permission_name: o.permission_name,
+          created_at: n
         };
         try {
           await t.insertInto("user_permissions").values(s).execute();
-        } catch (l) {
-          if (l.code === "SQLITE_CONSTRAINT_PRIMARYKEY" || l.code === "SQLITE_CONSTRAINT_UNIQUE")
+        } catch (i) {
+          if (i.code === "SQLITE_CONSTRAINT_PRIMARYKEY" || i.code === "SQLITE_CONSTRAINT_UNIQUE")
             continue;
-          throw l;
+          throw i;
         }
       }
       return !0;
-    } catch (n) {
-      return console.error("Error assigning user permissions:", n), !1;
+    } catch (o) {
+      return console.error("Error assigning user permissions:", o), !1;
     }
   };
 }
@@ -1712,22 +1797,22 @@ function ea(t) {
   return async (e, r, a) => {
     if (a.length === 0) return !0;
     try {
-      for (const o of a)
+      for (const n of a)
         await t.deleteFrom("user_permissions").where("tenant_id", "=", e).where("user_id", "=", r).where(
           "resource_server_identifier",
           "=",
-          o.resource_server_identifier
-        ).where("permission_name", "=", o.permission_name).execute();
+          n.resource_server_identifier
+        ).where("permission_name", "=", n.permission_name).execute();
       return !0;
-    } catch (o) {
-      return console.error("Error removing user permissions:", o), !1;
+    } catch (n) {
+      return console.error("Error removing user permissions:", n), !1;
     }
   };
 }
 function ta(t) {
   return async (e, r, a) => (await t.selectFrom("user_permissions").leftJoin(
     "resource_servers",
-    (n) => n.onRef(
+    (o) => o.onRef(
       "user_permissions.tenant_id",
       "=",
       "resource_servers.tenant_id"
@@ -1742,15 +1827,15 @@ function ta(t) {
     "resource_servers.name as resource_server_name",
     "user_permissions.user_id",
     "user_permissions.created_at"
-  ]).where("user_permissions.tenant_id", "=", e).where("user_permissions.user_id", "=", r).execute()).map((n) => ({
-    resource_server_identifier: n.resource_server_identifier,
-    permission_name: n.permission_name,
+  ]).where("user_permissions.tenant_id", "=", e).where("user_permissions.user_id", "=", r).execute()).map((o) => ({
+    resource_server_identifier: o.resource_server_identifier,
+    permission_name: o.permission_name,
     description: null,
     // No description available from user_permissions directly
-    resource_server_name: n.resource_server_name || n.resource_server_identifier,
+    resource_server_name: o.resource_server_name || o.resource_server_identifier,
     // Fallback to identifier if name is null
-    user_id: n.user_id,
-    created_at: n.created_at
+    user_id: o.user_id,
+    created_at: o.created_at
   }));
 }
 function ra(t) {
@@ -1761,71 +1846,118 @@ function ra(t) {
   };
 }
 function aa(t) {
+  return async (e, r) => await t.selectFrom("user_roles as ur").innerJoin(
+    "roles as r",
+    (n) => n.onRef("ur.role_id", "=", "r.id").onRef("ur.tenant_id", "=", "r.tenant_id")
+  ).select([
+    "r.id",
+    "r.name",
+    "r.description",
+    "r.created_at",
+    "r.updated_at"
+  ]).where("ur.tenant_id", "=", e).where("ur.user_id", "=", r).execute();
+}
+function na(t) {
+  return async (e, r, a) => {
+    if (a.length === 0) return !0;
+    const n = (/* @__PURE__ */ new Date()).toISOString();
+    try {
+      for (const o of a)
+        try {
+          await t.insertInto("user_roles").values({ tenant_id: e, user_id: r, role_id: o, created_at: n }).execute();
+        } catch (s) {
+          if (s.code === "SQLITE_CONSTRAINT_PRIMARYKEY" || s.code === "SQLITE_CONSTRAINT_UNIQUE")
+            continue;
+          throw s;
+        }
+      return !0;
+    } catch (o) {
+      return console.error("Error assigning user roles:", o), !1;
+    }
+  };
+}
+function oa(t) {
+  return async (e, r, a) => {
+    try {
+      return a.length && await t.deleteFrom("user_roles").where("tenant_id", "=", e).where("user_id", "=", r).where((n) => n("role_id", "in", a)).execute(), !0;
+    } catch (n) {
+      return console.error("Error removing user roles:", n), !1;
+    }
+  };
+}
+function sa(t) {
+  return {
+    list: aa(t),
+    assign: na(t),
+    remove: oa(t)
+  };
+}
+function ia(t) {
   return t[t.length - 1];
 }
-function y(t) {
+function C(t) {
   return Object.freeze(t);
 }
-const B = y({
+const W = C({
   is(t) {
     return t.kind === "IdentifierNode";
   },
   create(t) {
-    return y({
+    return C({
       kind: "IdentifierNode",
       name: t
     });
   }
-}), Y = y({
+}), re = C({
   is(t) {
     return t.kind === "SchemableIdentifierNode";
   },
   create(t) {
-    return y({
+    return C({
       kind: "SchemableIdentifierNode",
-      identifier: B.create(t)
+      identifier: W.create(t)
     });
   },
   createWithSchema(t, e) {
-    return y({
+    return C({
       kind: "SchemableIdentifierNode",
-      schema: B.create(t),
-      identifier: B.create(e)
+      schema: W.create(t),
+      identifier: W.create(e)
     });
   }
-}), na = y({
+}), la = C({
   is(t) {
     return t.kind === "AliasNode";
   },
   create(t, e) {
-    return y({
+    return C({
       kind: "AliasNode",
       node: t,
       alias: e
     });
   }
-}), W = y({
+}), X = C({
   is(t) {
     return t.kind === "TableNode";
   },
   create(t) {
-    return y({
+    return C({
       kind: "TableNode",
-      table: Y.create(t)
+      table: re.create(t)
     });
   },
   createWithSchema(t, e) {
-    return y({
+    return C({
       kind: "TableNode",
-      table: Y.createWithSchema(t, e)
+      table: re.createWithSchema(t, e)
     });
   }
 });
-var q;
-class oa {
+var H;
+class ca {
   constructor() {
-    z(this, "nodeStack", []);
-    N(this, q, y({
+    R(this, "nodeStack", []);
+    S(this, H, C({
       AliasNode: this.transformAlias.bind(this),
       ColumnNode: this.transformColumn.bind(this),
       IdentifierNode: this.transformIdentifier.bind(this),
@@ -1926,13 +2058,13 @@ class oa {
       return e;
     this.nodeStack.push(e);
     const r = this.transformNodeImpl(e);
-    return this.nodeStack.pop(), y(r);
+    return this.nodeStack.pop(), C(r);
   }
   transformNodeImpl(e) {
-    return d(this, q)[e.kind](e);
+    return d(this, H)[e.kind](e);
   }
   transformNodeList(e) {
-    return e && y(e.map((r) => this.transformNode(r)));
+    return e && C(e.map((r) => this.transformNode(r)));
   }
   transformSelectQuery(e) {
     return {
@@ -2031,7 +2163,7 @@ class oa {
   transformRaw(e) {
     return {
       kind: "RawNode",
-      sqlFragments: y([...e.sqlFragments]),
+      sqlFragments: C([...e.sqlFragments]),
       parameters: this.transformNodeList(e.parameters)
     };
   }
@@ -2655,8 +2787,8 @@ class oa {
     return e;
   }
 }
-q = new WeakMap();
-const sa = y({
+H = new WeakMap();
+const da = C({
   AlterTableNode: !0,
   CreateIndexNode: !0,
   CreateSchemaNode: !0,
@@ -2675,88 +2807,88 @@ const sa = y({
   UpdateQueryNode: !0,
   MergeQueryNode: !0
 });
-var M, k, $, w, ye, ve, Ne, P, Z, Ce;
-class ia extends oa {
+var E, j, F, N, ye, ve, Ne, A, ae, Ce;
+class ua extends ca {
   constructor(r) {
     super();
-    N(this, w);
-    N(this, M);
-    N(this, k, /* @__PURE__ */ new Set());
-    N(this, $, /* @__PURE__ */ new Set());
-    L(this, M, r);
+    S(this, N);
+    S(this, E);
+    S(this, j, /* @__PURE__ */ new Set());
+    S(this, F, /* @__PURE__ */ new Set());
+    K(this, E, r);
   }
   transformNodeImpl(r) {
-    if (!m(this, w, ye).call(this, r))
+    if (!p(this, N, ye).call(this, r))
       return super.transformNodeImpl(r);
-    const a = m(this, w, Ne).call(this, r);
+    const a = p(this, N, Ne).call(this, r);
     for (const s of a)
-      d(this, $).add(s);
-    const o = m(this, w, ve).call(this, r);
-    for (const s of o)
-      d(this, k).add(s);
-    const n = super.transformNodeImpl(r);
-    for (const s of o)
-      d(this, k).delete(s);
+      d(this, F).add(s);
+    const n = p(this, N, ve).call(this, r);
+    for (const s of n)
+      d(this, j).add(s);
+    const o = super.transformNodeImpl(r);
+    for (const s of n)
+      d(this, j).delete(s);
     for (const s of a)
-      d(this, $).delete(s);
-    return n;
+      d(this, F).delete(s);
+    return o;
   }
   transformSchemableIdentifier(r) {
     const a = super.transformSchemableIdentifier(r);
-    return a.schema || !d(this, k).has(r.identifier.name) ? a : {
+    return a.schema || !d(this, j).has(r.identifier.name) ? a : {
       ...a,
-      schema: B.create(d(this, M))
+      schema: W.create(d(this, E))
     };
   }
   transformReferences(r) {
     const a = super.transformReferences(r);
     return a.table.table.schema ? a : {
       ...a,
-      table: W.createWithSchema(d(this, M), a.table.table.identifier.name)
+      table: X.createWithSchema(d(this, E), a.table.table.identifier.name)
     };
   }
 }
-M = new WeakMap(), k = new WeakMap(), $ = new WeakMap(), w = new WeakSet(), ye = function(r) {
-  return r.kind in sa;
+E = new WeakMap(), j = new WeakMap(), F = new WeakMap(), N = new WeakSet(), ye = function(r) {
+  return r.kind in da;
 }, ve = function(r) {
   const a = /* @__PURE__ */ new Set();
-  if ("name" in r && r.name && Y.is(r.name) && m(this, w, Z).call(this, r.name, a), "from" in r && r.from)
-    for (const o of r.from.froms)
-      m(this, w, P).call(this, o, a);
-  if ("into" in r && r.into && m(this, w, P).call(this, r.into, a), "table" in r && r.table && m(this, w, P).call(this, r.table, a), "joins" in r && r.joins)
-    for (const o of r.joins)
-      m(this, w, P).call(this, o.table, a);
-  return "using" in r && r.using && m(this, w, P).call(this, r.using, a), a;
+  if ("name" in r && r.name && re.is(r.name) && p(this, N, ae).call(this, r.name, a), "from" in r && r.from)
+    for (const n of r.from.froms)
+      p(this, N, A).call(this, n, a);
+  if ("into" in r && r.into && p(this, N, A).call(this, r.into, a), "table" in r && r.table && p(this, N, A).call(this, r.table, a), "joins" in r && r.joins)
+    for (const n of r.joins)
+      p(this, N, A).call(this, n.table, a);
+  return "using" in r && r.using && p(this, N, A).call(this, r.using, a), a;
 }, Ne = function(r) {
   const a = /* @__PURE__ */ new Set();
-  return "with" in r && r.with && m(this, w, Ce).call(this, r.with, a), a;
-}, P = function(r, a) {
-  const o = W.is(r) ? r : na.is(r) && W.is(r.node) ? r.node : null;
-  o && m(this, w, Z).call(this, o.table, a);
-}, Z = function(r, a) {
-  const o = r.identifier.name;
-  !d(this, k).has(o) && !d(this, $).has(o) && a.add(o);
+  return "with" in r && r.with && p(this, N, Ce).call(this, r.with, a), a;
+}, A = function(r, a) {
+  const n = X.is(r) ? r : la.is(r) && X.is(r.node) ? r.node : null;
+  n && p(this, N, ae).call(this, n.table, a);
+}, ae = function(r, a) {
+  const n = r.identifier.name;
+  !d(this, j).has(n) && !d(this, F).has(n) && a.add(n);
 }, Ce = function(r, a) {
-  for (const o of r.expressions) {
-    const n = o.name.table.table.identifier.name;
-    d(this, $).has(n) || a.add(n);
+  for (const n of r.expressions) {
+    const o = n.name.table.table.identifier.name;
+    d(this, F).has(o) || a.add(o);
   }
 };
-var R;
-class la {
+var Q;
+class ma {
   constructor(e) {
-    N(this, R);
-    L(this, R, new ia(e));
+    S(this, Q);
+    K(this, Q, new ua(e));
   }
   transformQuery(e) {
-    return d(this, R).transformNode(e.node);
+    return d(this, Q).transformNode(e.node);
   }
   async transformResult(e) {
     return e.result;
   }
 }
-R = new WeakMap();
-class ca {
+Q = new WeakMap();
+class _a {
   transformQuery(e) {
     return e.node;
   }
@@ -2764,13 +2896,13 @@ class ca {
     return e.result;
   }
 }
-const da = "kysely_migration", fe = "kysely_migration_lock", ua = !1, G = "migration_lock", ma = y({ __noMigrations__: !0 });
-var p, i, E, x, T, j, xe, S, Te, Se, Oe, ke, $e, ee, F, te, Ie, De, Pe, re, je, Fe, Me, Ae, ze, J;
+const ha = "kysely_migration", fe = "kysely_migration_lock", fa = !1, Z = "migration_lock", pa = C({ __noMigrations__: !0 });
+var v, l, U, k, $, z, xe, I, Te, Se, Oe, ke, $e, ne, L, oe, Ie, De, Pe, se, je, Fe, Me, Ae, ze, B;
 class be {
   constructor(e) {
-    N(this, i);
-    N(this, p);
-    L(this, p, y(e));
+    S(this, l);
+    S(this, v);
+    K(this, v, C(e));
   }
   /**
    * Returns a {@link MigrationInfo} object for each migration.
@@ -2778,13 +2910,13 @@ class be {
    * The returned array is sorted by migration name.
    */
   async getMigrations() {
-    const e = await m(this, i, F).call(this, d(this, i, T)) ? await d(this, p).db.withPlugin(d(this, i, S)).selectFrom(d(this, i, T)).select(["name", "timestamp"]).execute() : [];
-    return (await m(this, i, re).call(this)).map(({ name: a, ...o }) => {
-      const n = e.find((s) => s.name === a);
+    const e = await p(this, l, L).call(this, d(this, l, $)) ? await d(this, v).db.withPlugin(d(this, l, I)).selectFrom(d(this, l, $)).select(["name", "timestamp"]).execute() : [];
+    return (await p(this, l, se).call(this)).map(({ name: a, ...n }) => {
+      const o = e.find((s) => s.name === a);
       return {
         name: a,
-        migration: o,
-        executedAt: n ? new Date(n.timestamp) : void 0
+        migration: n,
+        executedAt: o ? new Date(o.timestamp) : void 0
       };
     });
   }
@@ -2836,7 +2968,7 @@ class be {
    * ```
    */
   async migrateToLatest() {
-    return m(this, i, E).call(this, () => ({ direction: "Up", step: 1 / 0 }));
+    return p(this, l, U).call(this, () => ({ direction: "Up", step: 1 / 0 }));
   }
   /**
    * Migrate up/down to a specific migration.
@@ -2862,16 +2994,16 @@ class be {
    * ```
    */
   async migrateTo(e) {
-    return m(this, i, E).call(this, ({ migrations: r, executedMigrations: a, pendingMigrations: o }) => {
-      if (e === ma)
+    return p(this, l, U).call(this, ({ migrations: r, executedMigrations: a, pendingMigrations: n }) => {
+      if (e === pa)
         return { direction: "Down", step: 1 / 0 };
-      if (!r.find((l) => l.name === e))
+      if (!r.find((i) => i.name === e))
         throw new Error(`migration "${e}" doesn't exist`);
-      const n = a.indexOf(e), s = o.findIndex((l) => l.name === e);
-      if (n !== -1)
+      const o = a.indexOf(e), s = n.findIndex((i) => i.name === e);
+      if (o !== -1)
         return {
           direction: "Down",
-          step: a.length - n - 1
+          step: a.length - o - 1
         };
       if (s !== -1)
         return { direction: "Up", step: s + 1 };
@@ -2893,7 +3025,7 @@ class be {
    * ```
    */
   async migrateUp() {
-    return m(this, i, E).call(this, () => ({ direction: "Up", step: 1 }));
+    return p(this, l, U).call(this, () => ({ direction: "Up", step: 1 }));
   }
   /**
    * Migrate one step down.
@@ -2910,194 +3042,194 @@ class be {
    * ```
    */
   async migrateDown() {
-    return m(this, i, E).call(this, () => ({ direction: "Down", step: 1 }));
+    return p(this, l, U).call(this, () => ({ direction: "Down", step: 1 }));
   }
 }
-p = new WeakMap(), i = new WeakSet(), E = async function(e) {
+v = new WeakMap(), l = new WeakSet(), U = async function(e) {
   try {
-    return await m(this, i, Te).call(this), await m(this, i, Ie).call(this, e);
+    return await p(this, l, Te).call(this), await p(this, l, Ie).call(this, e);
   } catch (r) {
-    return r instanceof H ? r.resultSet : { error: r };
-  }
-}, x = function() {
-  return d(this, p).migrationTableSchema;
-}, T = function() {
-  return d(this, p).migrationTableName ?? da;
-}, j = function() {
-  return d(this, p).migrationLockTableName ?? fe;
+    return r instanceof ee ? r.resultSet : { error: r };
+  }
+}, k = function() {
+  return d(this, v).migrationTableSchema;
+}, $ = function() {
+  return d(this, v).migrationTableName ?? ha;
+}, z = function() {
+  return d(this, v).migrationLockTableName ?? fe;
 }, xe = function() {
-  return d(this, p).allowUnorderedMigrations ?? ua;
-}, S = function() {
-  return d(this, i, x) ? new la(d(this, i, x)) : new ca();
+  return d(this, v).allowUnorderedMigrations ?? fa;
+}, I = function() {
+  return d(this, l, k) ? new ma(d(this, l, k)) : new _a();
 }, Te = async function() {
-  await m(this, i, Se).call(this), await m(this, i, Oe).call(this), await m(this, i, ke).call(this), await m(this, i, $e).call(this);
+  await p(this, l, Se).call(this), await p(this, l, Oe).call(this), await p(this, l, ke).call(this), await p(this, l, $e).call(this);
 }, Se = async function() {
-  if (d(this, i, x) && !await m(this, i, ee).call(this))
+  if (d(this, l, k) && !await p(this, l, ne).call(this))
     try {
-      await m(this, i, J).call(this, d(this, p).db.schema.createSchema(d(this, i, x)));
+      await p(this, l, B).call(this, d(this, v).db.schema.createSchema(d(this, l, k)));
     } catch (e) {
-      if (!await m(this, i, ee).call(this))
+      if (!await p(this, l, ne).call(this))
         throw e;
     }
 }, Oe = async function() {
-  if (!await m(this, i, F).call(this, d(this, i, T)))
+  if (!await p(this, l, L).call(this, d(this, l, $)))
     try {
-      d(this, i, x) && await m(this, i, J).call(this, d(this, p).db.schema.createSchema(d(this, i, x))), await m(this, i, J).call(this, d(this, p).db.schema.withPlugin(d(this, i, S)).createTable(d(this, i, T)).addColumn("name", "varchar(255)", (e) => e.notNull().primaryKey()).addColumn("timestamp", "varchar(255)", (e) => e.notNull()));
+      d(this, l, k) && await p(this, l, B).call(this, d(this, v).db.schema.createSchema(d(this, l, k))), await p(this, l, B).call(this, d(this, v).db.schema.withPlugin(d(this, l, I)).createTable(d(this, l, $)).addColumn("name", "varchar(255)", (e) => e.notNull().primaryKey()).addColumn("timestamp", "varchar(255)", (e) => e.notNull()));
     } catch (e) {
-      if (!await m(this, i, F).call(this, d(this, i, T)))
+      if (!await p(this, l, L).call(this, d(this, l, $)))
         throw e;
     }
 }, ke = async function() {
-  if (!await m(this, i, F).call(this, d(this, i, j)))
+  if (!await p(this, l, L).call(this, d(this, l, z)))
     try {
-      await m(this, i, J).call(this, d(this, p).db.schema.withPlugin(d(this, i, S)).createTable(d(this, i, j)).addColumn("id", "varchar(255)", (e) => e.notNull().primaryKey()).addColumn("is_locked", "integer", (e) => e.notNull().defaultTo(0)));
+      await p(this, l, B).call(this, d(this, v).db.schema.withPlugin(d(this, l, I)).createTable(d(this, l, z)).addColumn("id", "varchar(255)", (e) => e.notNull().primaryKey()).addColumn("is_locked", "integer", (e) => e.notNull().defaultTo(0)));
     } catch (e) {
-      if (!await m(this, i, F).call(this, d(this, i, j)))
+      if (!await p(this, l, L).call(this, d(this, l, z)))
         throw e;
     }
 }, $e = async function() {
-  if (!await m(this, i, te).call(this))
+  if (!await p(this, l, oe).call(this))
     try {
-      await d(this, p).db.withPlugin(d(this, i, S)).insertInto(d(this, i, j)).values({ id: G, is_locked: 0 }).execute();
+      await d(this, v).db.withPlugin(d(this, l, I)).insertInto(d(this, l, z)).values({ id: Z, is_locked: 0 }).execute();
     } catch (e) {
-      if (!await m(this, i, te).call(this))
+      if (!await p(this, l, oe).call(this))
         throw e;
     }
-}, ee = async function() {
-  return (await d(this, p).db.introspection.getSchemas()).some((r) => r.name === d(this, i, x));
-}, F = async function(e) {
-  const r = d(this, i, x);
-  return (await d(this, p).db.introspection.getTables({
+}, ne = async function() {
+  return (await d(this, v).db.introspection.getSchemas()).some((r) => r.name === d(this, l, k));
+}, L = async function(e) {
+  const r = d(this, l, k);
+  return (await d(this, v).db.introspection.getTables({
     withInternalKyselyTables: !0
-  })).some((o) => o.name === e && (!r || o.schema === r));
-}, te = async function() {
-  return !!await d(this, p).db.withPlugin(d(this, i, S)).selectFrom(d(this, i, j)).where("id", "=", G).select("id").executeTakeFirst();
+  })).some((n) => n.name === e && (!r || n.schema === r));
+}, oe = async function() {
+  return !!await d(this, v).db.withPlugin(d(this, l, I)).selectFrom(d(this, l, z)).where("id", "=", Z).select("id").executeTakeFirst();
 }, Ie = async function(e) {
-  const r = d(this, p).db.getExecutor().adapter, a = y({
-    lockTable: d(this, p).migrationLockTableName ?? fe,
-    lockRowId: G,
-    lockTableSchema: d(this, p).migrationTableSchema
-  }), o = async (n) => {
+  const r = d(this, v).db.getExecutor().adapter, a = C({
+    lockTable: d(this, v).migrationLockTableName ?? fe,
+    lockRowId: Z,
+    lockTableSchema: d(this, v).migrationTableSchema
+  }), n = async (o) => {
     try {
-      await r.acquireMigrationLock(n, a);
-      const s = await m(this, i, De).call(this, n);
+      await r.acquireMigrationLock(o, a);
+      const s = await p(this, l, De).call(this, o);
       if (s.migrations.length === 0)
         return { results: [] };
-      const { direction: l, step: c } = e(s);
-      return c <= 0 ? { results: [] } : l === "Down" ? await m(this, i, Ae).call(this, n, s, c) : l === "Up" ? await m(this, i, ze).call(this, n, s, c) : { results: [] };
+      const { direction: i, step: c } = e(s);
+      return c <= 0 ? { results: [] } : i === "Down" ? await p(this, l, Ae).call(this, o, s, c) : i === "Up" ? await p(this, l, ze).call(this, o, s, c) : { results: [] };
     } finally {
-      await r.releaseMigrationLock(n, a);
+      await r.releaseMigrationLock(o, a);
     }
   };
-  return r.supportsTransactionalDdl ? d(this, p).db.transaction().execute(o) : d(this, p).db.connection().execute(o);
+  return r.supportsTransactionalDdl ? d(this, v).db.transaction().execute(n) : d(this, v).db.connection().execute(n);
 }, De = async function(e) {
-  const r = await m(this, i, re).call(this), a = await m(this, i, je).call(this, e);
-  m(this, i, Fe).call(this, r, a), d(this, i, xe) || m(this, i, Me).call(this, r, a);
-  const o = m(this, i, Pe).call(this, r, a);
-  return y({
+  const r = await p(this, l, se).call(this), a = await p(this, l, je).call(this, e);
+  p(this, l, Fe).call(this, r, a), d(this, l, xe) || p(this, l, Me).call(this, r, a);
+  const n = p(this, l, Pe).call(this, r, a);
+  return C({
     migrations: r,
     executedMigrations: a,
-    lastMigration: aa(a),
-    pendingMigrations: o
+    lastMigration: ia(a),
+    pendingMigrations: n
   });
 }, Pe = function(e, r) {
   return e.filter((a) => !r.includes(a.name));
-}, re = async function() {
-  const e = await d(this, p).provider.getMigrations();
+}, se = async function() {
+  const e = await d(this, v).provider.getMigrations();
   return Object.keys(e).sort().map((r) => ({
     ...e[r],
     name: r
   }));
 }, je = async function(e) {
-  return (await e.withPlugin(d(this, i, S)).selectFrom(d(this, i, T)).select("name").orderBy(["timestamp", "name"]).execute()).map((a) => a.name);
+  return (await e.withPlugin(d(this, l, I)).selectFrom(d(this, l, $)).select("name").orderBy(["timestamp", "name"]).execute()).map((a) => a.name);
 }, Fe = function(e, r) {
   for (const a of r)
-    if (!e.some((o) => o.name === a))
+    if (!e.some((n) => n.name === a))
       throw new Error(`corrupted migrations: previously executed migration ${a} is missing`);
 }, Me = function(e, r) {
   for (let a = 0; a < r.length; ++a)
     if (e[a].name !== r[a])
       throw new Error(`corrupted migrations: expected previously executed migration ${r[a]} to be at index ${a} but ${e[a].name} was found in its place. New migrations must always have a name that comes alphabetically after the last executed migration.`);
 }, Ae = async function(e, r, a) {
-  const o = r.executedMigrations.slice().reverse().slice(0, a).map((s) => r.migrations.find((l) => l.name === s)), n = o.map((s) => ({
+  const n = r.executedMigrations.slice().reverse().slice(0, a).map((s) => r.migrations.find((i) => i.name === s)), o = n.map((s) => ({
     migrationName: s.name,
     direction: "Down",
     status: "NotExecuted"
   }));
-  for (let s = 0; s < n.length; ++s) {
-    const l = o[s];
+  for (let s = 0; s < o.length; ++s) {
+    const i = n[s];
     try {
-      l.down && (await l.down(e), await e.withPlugin(d(this, i, S)).deleteFrom(d(this, i, T)).where("name", "=", l.name).execute(), n[s] = {
-        migrationName: l.name,
+      i.down && (await i.down(e), await e.withPlugin(d(this, l, I)).deleteFrom(d(this, l, $)).where("name", "=", i.name).execute(), o[s] = {
+        migrationName: i.name,
         direction: "Down",
         status: "Success"
       });
     } catch (c) {
-      throw n[s] = {
-        migrationName: l.name,
+      throw o[s] = {
+        migrationName: i.name,
         direction: "Down",
         status: "Error"
-      }, new H({
+      }, new ee({
         error: c,
-        results: n
+        results: o
       });
     }
   }
-  return { results: n };
+  return { results: o };
 }, ze = async function(e, r, a) {
-  const n = r.pendingMigrations.slice(0, a).map((s) => ({
+  const o = r.pendingMigrations.slice(0, a).map((s) => ({
     migrationName: s.name,
     direction: "Up",
     status: "NotExecuted"
   }));
-  for (let s = 0; s < n.length; s++) {
-    const l = r.pendingMigrations[s];
+  for (let s = 0; s < o.length; s++) {
+    const i = r.pendingMigrations[s];
     try {
-      await l.up(e), await e.withPlugin(d(this, i, S)).insertInto(d(this, i, T)).values({
-        name: l.name,
+      await i.up(e), await e.withPlugin(d(this, l, I)).insertInto(d(this, l, $)).values({
+        name: i.name,
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      }).execute(), n[s] = {
-        migrationName: l.name,
+      }).execute(), o[s] = {
+        migrationName: i.name,
         direction: "Up",
         status: "Success"
       };
     } catch (c) {
-      throw n[s] = {
-        migrationName: l.name,
+      throw o[s] = {
+        migrationName: i.name,
         direction: "Up",
         status: "Error"
-      }, new H({
+      }, new ee({
         error: c,
-        results: n
+        results: o
       });
     }
   }
-  return { results: n };
-}, J = async function(e) {
-  d(this, p).db.getExecutor().adapter.supportsCreateIfNotExists && (e = e.ifNotExists()), await e.execute();
+  return { results: o };
+}, B = async function(e) {
+  d(this, v).db.getExecutor().adapter.supportsCreateIfNotExists && (e = e.ifNotExists()), await e.execute();
 };
-var K;
-class H extends Error {
+var q;
+class ee extends Error {
   constructor(r) {
     super();
-    N(this, K);
-    L(this, K, r);
+    S(this, q);
+    K(this, q, r);
   }
   get resultSet() {
-    return d(this, K);
+    return d(this, q);
   }
 }
-K = new WeakMap();
+q = new WeakMap();
 class Le {
   constructor(e) {
-    z(this, "migrations");
+    R(this, "migrations");
     this.migrations = e;
   }
   async getMigrations() {
     return this.migrations;
   }
 }
-async function _a(t) {
+async function ga(t) {
   await t.schema.createTable("tenants").addColumn("id", "varchar(255)", (e) => e.primaryKey()).addColumn("name", "varchar(255)").addColumn("audience", "varchar(255)").addColumn("sender_email", "varchar(255)").addColumn("sender_name", "varchar(255)").addColumn("language", "varchar(255)").addColumn("logo", "varchar(255)").addColumn("primary_color", "varchar(255)").addColumn("secondary_color", "varchar(255)").addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("updated_at", "varchar(255)", (e) => e.notNull()).execute(), await t.schema.createTable("users").addColumn("user_id", "varchar(255)", (e) => e.notNull()).addColumn(
     "tenant_id",
     "varchar(255)",
@@ -3169,35 +3301,35 @@ async function _a(t) {
     (e) => e.references("tenants.id").onDelete("cascade").notNull()
   ).addColumn("domain", "varchar(255)", (e) => e.notNull()).addColumn("email_service", "varchar(255)").addColumn("email_api_key", "varchar(255)").addColumn("dkim_private_key", "varchar(2048)").addColumn("dkim_public_key", "varchar(2048)").addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("updated_at", "varchar(255)", (e) => e.notNull()).execute();
 }
-async function ha(t) {
+async function wa(t) {
   await t.schema.dropTable("domains").execute(), await t.schema.dropTable("members").execute(), await t.schema.dropTable("users").execute(), await t.schema.dropTable("connections").execute(), await t.schema.dropTable("applications").execute(), await t.schema.dropTable("migrations").execute(), await t.schema.dropTable("tenants").execute();
 }
-const fa = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const ya = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ha,
-  up: _a
+  down: wa,
+  up: ga
 }, Symbol.toStringTag, { value: "Module" }));
-async function pa(t) {
+async function va(t) {
   await t.schema.alterTable("tenants").addColumn("support_url", "varchar(255)").execute();
 }
-async function ga(t) {
+async function Na(t) {
   await t.schema.alterTable("tenants").dropColumn("support_url").execute();
 }
-const wa = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ca = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ga,
-  up: pa
+  down: Na,
+  up: va
 }, Symbol.toStringTag, { value: "Module" }));
-async function ya(t) {
+async function ba(t) {
 }
-async function va(t) {
+async function xa(t) {
 }
-const Na = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ta = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: va,
-  up: ya
+  down: xa,
+  up: ba
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ca(t) {
+async function Sa(t) {
   await t.schema.createTable("logs").addColumn("id", "varchar(255)", (e) => e.notNull().primaryKey()).addColumn("category", "varchar(255)", (e) => e.notNull()).addColumn("tenant_id", "varchar(64)").addColumn("user_id", "varchar(64)").addForeignKeyConstraint(
     "tenant_id_constraint",
     ["tenant_id"],
@@ -3206,24 +3338,24 @@ async function Ca(t) {
     (e) => e.onDelete("cascade")
   ).addColumn("ip", "varchar(255)").addColumn("type", "varchar(8)", (e) => e.notNull()).addColumn("date", "varchar(25)", (e) => e.notNull()).addColumn("client_id", "varchar(255)").addColumn("client_name", "varchar(255)").addColumn("user_agent", "varchar(255)").addColumn("description", "varchar(255)").addColumn("details", "varchar(2048)").execute();
 }
-async function ba(t) {
+async function Oa(t) {
   await t.schema.dropTable("logs").execute();
 }
-const xa = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const ka = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ba,
-  up: Ca
+  down: Oa,
+  up: Sa
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ta(t) {
+async function $a(t) {
 }
-async function Sa(t) {
+async function Ia(t) {
 }
-const Oa = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Da = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Sa,
-  up: Ta
+  down: Ia,
+  up: $a
 }, Symbol.toStringTag, { value: "Module" }));
-async function ka(t) {
+async function Pa(t) {
   await t.schema.createTable("sessions").addColumn("id", "varchar(21)", (e) => e.primaryKey()).addColumn("tenant_id", "varchar(255)").addColumn("user_id", "varchar(255)").addForeignKeyConstraint(
     "user_id_constraint",
     ["user_id", "tenant_id"],
@@ -3248,15 +3380,15 @@ async function ka(t) {
     (e) => e.references("applications.id").onDelete("cascade").notNull()
   ).addColumn("code", "varchar(255)", (e) => e.notNull()).addColumn("email", "varchar(255)", (e) => e.notNull()).addColumn("user_id", "varchar(255)").addColumn("send", "varchar(255)").addColumn("nonce", "varchar(255)").addColumn("state", "varchar(1024)").addColumn("scope", "varchar(1024)").addColumn("response_type", "varchar(256)").addColumn("response_mode", "varchar(256)").addColumn("redirect_uri", "varchar(1024)").addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("expires_at", "varchar(255)", (e) => e.notNull()).addColumn("used_at", "varchar(255)").execute(), await t.schema.createIndex("otps_email_index").on("otps").column("email").execute(), await t.schema.createIndex("otps_expires_at_index").on("otps").column("expires_at").execute();
 }
-async function $a(t) {
+async function ja(t) {
   await t.schema.dropTable("sessions").execute(), await t.schema.dropTable("tickets").execute(), await t.schema.dropTable("otps").execute();
 }
-const Ia = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Fa = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: $a,
-  up: ka
+  down: ja,
+  up: Pa
 }, Symbol.toStringTag, { value: "Module" }));
-async function Da(t) {
+async function Ma(t) {
   await t.schema.createTable("passwords").addColumn("tenant_id", "varchar(255)").addColumn("user_id", "varchar(255)").addPrimaryKeyConstraint("passwords_pkey", ["user_id", "tenant_id"]).addForeignKeyConstraint(
     "user_id_constraint",
     ["user_id", "tenant_id"],
@@ -3271,24 +3403,24 @@ async function Da(t) {
     (e) => e.onDelete("cascade")
   ).addColumn("type", "varchar(255)", (e) => e.notNull()).addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("expires_at", "varchar(255)", (e) => e.notNull()).addColumn("used_at", "varchar(255)").execute(), await t.schema.createIndex("codes_expires_at_index").on("codes").column("expires_at").execute();
 }
-async function Pa(t) {
+async function Aa(t) {
   await t.schema.dropTable("passwords").execute(), await t.schema.dropTable("codes").execute();
 }
-const ja = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const za = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Pa,
-  up: Da
+  down: Aa,
+  up: Ma
 }, Symbol.toStringTag, { value: "Module" }));
-async function Fa(t) {
+async function La(t) {
 }
-async function Ma(t) {
+async function Ea(t) {
 }
-const Aa = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ja = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Ma,
-  up: Fa
+  down: Ea,
+  up: La
 }, Symbol.toStringTag, { value: "Module" }));
-async function za(t) {
+async function Ra(t) {
   await t.schema.alterTable("passwords").addColumn(
     "password",
     "varchar(255)",
@@ -3296,288 +3428,296 @@ async function za(t) {
     (e) => e.notNull()
   ).execute();
 }
-async function La(t) {
+async function Ka(t) {
   await t.schema.alterTable("passwords").dropColumn("password").execute();
 }
-const Ea = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ua = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: La,
-  up: za
+  down: Ka,
+  up: Ra
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ja(t) {
+async function Ba(t) {
 }
-async function Ra(t) {
+async function Qa(t) {
 }
-const Ka = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const qa = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Ra,
-  up: Ja
+  down: Qa,
+  up: Ba
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ua(t) {
+async function Va(t) {
 }
-async function Ba(t) {
+async function Wa(t) {
 }
-const Qa = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ga = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Ba,
-  up: Ua
+  down: Wa,
+  up: Va
 }, Symbol.toStringTag, { value: "Module" }));
-async function qa(t) {
+async function Ha(t) {
 }
-async function Va(t) {
+async function Ya(t) {
 }
-const Wa = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Xa = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Va,
-  up: qa
+  down: Ya,
+  up: Ha
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ga(t) {
+async function Za(t) {
   await t.schema.createIndex("users_email_index").on("users").column("email").execute();
 }
-async function Ha(t) {
+async function en(t) {
   await t.schema.dropIndex("users_email_index").execute();
 }
-const Xa = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const tn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Ha,
-  up: Ga
+  down: en,
+  up: Za
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ya(t) {
+async function rn(t) {
   await t.schema.alterTable("users").addColumn("profileData", "varchar(2048)").execute();
 }
-async function Za(t) {
+async function an(t) {
   await t.schema.alterTable("users").dropColumn("profileData").execute();
 }
-const en = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const nn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Za,
-  up: Ya
+  down: an,
+  up: rn
 }, Symbol.toStringTag, { value: "Module" }));
-async function tn(t) {
+async function on(t) {
   await t.schema.createIndex("users_linked_to_index").on("users").column("linked_to").execute();
 }
-async function rn(t) {
+async function sn(t) {
   await t.schema.dropIndex("users_linked_to_index");
 }
-const an = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const ln = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: rn,
-  up: tn
+  down: sn,
+  up: on
 }, Symbol.toStringTag, { value: "Module" }));
-async function nn(t) {
+async function cn(t) {
   await t.schema.alterTable("users").addColumn("locale", "varchar(255)").execute();
 }
-async function on(t) {
+async function dn(t) {
   await t.schema.alterTable("users").dropColumn("locale").execute();
 }
-const sn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const un = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: on,
-  up: nn
+  down: dn,
+  up: cn
 }, Symbol.toStringTag, { value: "Module" }));
-async function ln(t) {
+async function mn(t) {
   await t.schema.createTable("keys").addColumn("kid", "varchar(255)", (e) => e.primaryKey()).addColumn(
     "tenant_id",
     "varchar(255)",
     (e) => e.references("tenants.id").onDelete("cascade")
-  ).addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("revoked_at", "varchar(255)").addColumn("cert", "varchar(2048)").addColumn("pkcs7", "varchar(2048)").addColumn("fingerprint", "varchar(256)").addColumn("thumbprint", "varchar(256)").addColumn("current_since", "varchar(256)").addColumn("current_until", "varchar(256)").execute();
+  ).addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("revoked_at", "varchar(255)").addColumn("cert", "varchar(4096)").addColumn("pkcs7", "varchar(4096)").addColumn("fingerprint", "varchar(256)").addColumn("thumbprint", "varchar(256)").addColumn("current_since", "varchar(256)").addColumn("current_until", "varchar(256)").addColumn(
+    "type",
+    "varchar(50)",
+    (e) => e.notNull().defaultTo("jwt_signing")
+  ).addColumn(
+    "connection",
+    "varchar(255)",
+    (e) => e.references("connections.id").onDelete("cascade")
+  ).execute();
 }
-async function cn(t) {
+async function _n(t) {
   await t.schema.dropTable("keys").execute();
 }
-const dn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const hn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: cn,
-  up: ln
+  down: _n,
+  up: mn
 }, Symbol.toStringTag, { value: "Module" }));
-async function un(t) {
+async function fn(t) {
 }
-async function mn(t) {
+async function pn(t) {
 }
-const _n = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const gn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: mn,
-  up: un
+  down: pn,
+  up: fn
 }, Symbol.toStringTag, { value: "Module" }));
-async function hn(t) {
+async function wn(t) {
 }
-async function fn(t) {
+async function yn(t) {
 }
-const pn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const vn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: fn,
-  up: hn
+  down: yn,
+  up: wn
 }, Symbol.toStringTag, { value: "Module" }));
-async function gn(t) {
+async function Nn(t) {
   await t.schema.alterTable("otps").addColumn("audience", "varchar(255)").execute();
 }
-async function wn(t) {
+async function Cn(t) {
   await t.schema.alterTable("otps").dropColumn("audience").execute();
 }
-const yn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const bn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: wn,
-  up: gn
+  down: Cn,
+  up: Nn
 }, Symbol.toStringTag, { value: "Module" }));
-async function vn(t) {
+async function xn(t) {
 }
-async function Nn(t) {
+async function Tn(t) {
 }
-const Cn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Sn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Nn,
-  up: vn
+  down: Tn,
+  up: xn
 }, Symbol.toStringTag, { value: "Module" }));
-async function bn(t) {
+async function On(t) {
   await t.schema.alterTable("logs").dropColumn("category").execute();
 }
-async function xn(t) {
+async function kn(t) {
   await t.schema.alterTable("logs").addColumn("category", "varchar(255)", (e) => e.notNull()).execute();
 }
-const Tn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const $n = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: xn,
-  up: bn
+  down: kn,
+  up: On
 }, Symbol.toStringTag, { value: "Module" }));
-async function Sn(t) {
+async function In(t) {
   await t.schema.alterTable("users").dropColumn("tags").execute();
 }
-async function On(t) {
+async function Dn(t) {
   await t.schema.alterTable("users").addColumn("tags", "varchar(255)").execute();
 }
-const kn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Pn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: On,
-  up: Sn
+  down: Dn,
+  up: In
 }, Symbol.toStringTag, { value: "Module" }));
-async function $n(t) {
+async function jn(t) {
   await t.schema.createIndex("logs_user_id").on("logs").column("user_id").execute(), await t.schema.createIndex("logs_tenant_id").on("logs").column("tenant_id").execute(), await t.schema.createIndex("logs_date").on("logs").column("date").execute();
 }
-async function In(t) {
+async function Fn(t) {
   await t.schema.dropIndex("logs_user_id"), await t.schema.dropIndex("logs_tenant_id"), await t.schema.dropIndex("logs_date");
 }
-const Dn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Mn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: In,
-  up: $n
+  down: Fn,
+  up: jn
 }, Symbol.toStringTag, { value: "Module" }));
-async function Pn(t) {
+async function An(t) {
   await t.schema.alterTable("logs").dropColumn("details").execute(), await t.schema.alterTable("logs").addColumn("details", "varchar(8192)").execute();
 }
-async function jn(t) {
+async function zn(t) {
   await t.schema.alterTable("logs").dropColumn("details").execute(), await t.schema.alterTable("logs").addColumn("details", "varchar(2048)").execute();
 }
-const Fn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ln = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: jn,
-  up: Pn
+  down: zn,
+  up: An
 }, Symbol.toStringTag, { value: "Module" }));
-async function Mn(t) {
+async function En(t) {
   await t.schema.alterTable("logs").addColumn("user_name", "varchar(255)").execute(), await t.schema.alterTable("logs").addColumn("auth0_client", "varchar(255)").execute(), await t.schema.alterTable("logs").addColumn("isMobile", "boolean").execute(), await t.schema.alterTable("logs").addColumn("connection", "varchar(255)").execute(), await t.schema.alterTable("logs").addColumn("connection_id", "varchar(255)").execute(), await t.schema.alterTable("logs").addColumn("audience", "varchar(255)").execute(), await t.schema.alterTable("logs").addColumn("scope", "varchar(255)").execute(), await t.schema.alterTable("logs").addColumn("strategy", "varchar(255)").execute(), await t.schema.alterTable("logs").addColumn("strategy_type", "varchar(255)").execute(), await t.schema.alterTable("logs").addColumn("hostname", "varchar(255)").execute(), await t.schema.alterTable("logs").addColumn("session_connection", "varchar(255)").execute();
 }
-async function An(t) {
+async function Jn(t) {
   await t.schema.alterTable("logs").dropColumn("user_name").execute(), await t.schema.alterTable("logs").dropColumn("auth0_client").execute(), await t.schema.alterTable("logs").dropColumn("isMobile").execute(), await t.schema.alterTable("logs").dropColumn("connection").execute(), await t.schema.alterTable("logs").dropColumn("connection_id").execute(), await t.schema.alterTable("logs").dropColumn("audience").execute(), await t.schema.alterTable("logs").dropColumn("scope").execute(), await t.schema.alterTable("logs").dropColumn("strategy").execute(), await t.schema.alterTable("logs").dropColumn("strategy_type").execute(), await t.schema.alterTable("logs").dropColumn("hostname").execute(), await t.schema.alterTable("logs").dropColumn("session_connection").execute();
 }
-const zn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Rn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: An,
-  up: Mn
+  down: Jn,
+  up: En
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ln(t) {
+async function Kn(t) {
   await t.schema.createIndex("users_name_index").on("users").column("name").execute();
 }
-async function En(t) {
+async function Un(t) {
   await t.schema.dropIndex("users_name_index").execute();
 }
-const Jn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Bn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: En,
-  up: Ln
+  down: Un,
+  up: Kn
 }, Symbol.toStringTag, { value: "Module" }));
-async function Rn(t) {
+async function Qn(t) {
 }
-async function Kn(t) {
+async function qn(t) {
   await t.schema.alterTable("users").dropConstraint("unique_email_provider").execute();
 }
-const Un = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Vn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Kn,
-  up: Rn
+  down: qn,
+  up: Qn
 }, Symbol.toStringTag, { value: "Module" }));
-async function Bn(t) {
+async function Wn(t) {
   await t.schema.alterTable("otps").dropColumn("state").execute(), await t.schema.alterTable("otps").addColumn("state", "varchar(8192)").execute();
 }
-async function Qn(t) {
+async function Gn(t) {
   await t.schema.alterTable("otps").dropColumn("state").execute(), await t.schema.alterTable("otps").addColumn("state", "varchar(1024)").execute();
 }
-const qn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Hn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Qn,
-  up: Bn
+  down: Gn,
+  up: Wn
 }, Symbol.toStringTag, { value: "Module" }));
-async function Vn(t) {
+async function Yn(t) {
   await t.schema.alterTable("tickets").dropColumn("state").execute(), await t.schema.alterTable("tickets").addColumn("state", "varchar(8192)").execute();
 }
-async function Wn(t) {
+async function Xn(t) {
   await t.schema.alterTable("tickets").dropColumn("state").execute(), await t.schema.alterTable("tickets").addColumn("state", "varchar(1024)").execute();
 }
-const Gn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Zn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Wn,
-  up: Vn
+  down: Xn,
+  up: Yn
 }, Symbol.toStringTag, { value: "Module" }));
-async function Hn(t) {
+async function eo(t) {
   await t.schema.createTable("branding").addColumn(
     "tenant_id",
     "varchar(255)",
     (e) => e.references("tenants.id").onDelete("cascade").notNull().primaryKey()
   ).addColumn("logo_url", "varchar(512)").addColumn("favicon_url", "varchar(512)").addColumn("font_url", "varchar(512)").addColumn("colors_primary", "varchar(8)").addColumn("colors_page_background_type", "varchar(32)").addColumn("colors_page_background_start", "varchar(8)").addColumn("colors_page_background_end", "varchar(8)").addColumn("colors_page_background_angle_dev", "integer").execute();
 }
-async function Xn(t) {
+async function to(t) {
   await t.schema.dropTable("branding").execute();
 }
-const Yn = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const ro = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Xn,
-  up: Hn
+  down: to,
+  up: eo
 }, Symbol.toStringTag, { value: "Module" }));
-async function Zn(t) {
+async function ao(t) {
 }
-async function eo(t) {
+async function no(t) {
 }
-const to = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const oo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: eo,
-  up: Zn
+  down: no,
+  up: ao
 }, Symbol.toStringTag, { value: "Module" }));
-async function ro(t) {
+async function so(t) {
 }
-async function ao(t) {
+async function io(t) {
 }
-const no = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const lo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ao,
-  up: ro
+  down: io,
+  up: so
 }, Symbol.toStringTag, { value: "Module" }));
-async function oo(t) {
+async function co(t) {
 }
-async function so(t) {
+async function uo(t) {
 }
-const io = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const mo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: so,
-  up: oo
+  down: uo,
+  up: co
 }, Symbol.toStringTag, { value: "Module" }));
-async function lo(t) {
+async function _o(t) {
 }
-async function co(t) {
+async function ho(t) {
 }
-const uo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const fo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: co,
-  up: lo
+  down: ho,
+  up: _o
 }, Symbol.toStringTag, { value: "Module" }));
-async function mo(t) {
+async function po(t) {
   await t.schema.createTable("authentication_codes").addColumn(
     "tenant_id",
     "varchar(255)",
@@ -3588,55 +3728,55 @@ async function mo(t) {
     (e) => e.references("applications.id").onDelete("cascade").notNull()
   ).addColumn("user_id", "varchar(255)", (e) => e.notNull()).addColumn("nonce", "varchar(255)").addColumn("state", "varchar(8192)").addColumn("scope", "varchar(1024)").addColumn("response_type", "varchar(256)").addColumn("response_mode", "varchar(256)").addColumn("redirect_uri", "varchar(1024)").addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("expires_at", "varchar(255)", (e) => e.notNull()).addColumn("used_at", "varchar(255)").execute();
 }
-async function _o(t) {
+async function go(t) {
   await t.schema.dropTable("authentication_codes").execute();
 }
-const ho = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const wo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: _o,
-  up: mo
+  down: go,
+  up: po
 }, Symbol.toStringTag, { value: "Module" }));
-async function fo(t) {
+async function yo(t) {
 }
-async function po(t) {
+async function vo(t) {
 }
-const go = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const No = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: po,
-  up: fo
+  down: vo,
+  up: yo
 }, Symbol.toStringTag, { value: "Module" }));
-async function wo(t) {
+async function Co(t) {
   await t.schema.alterTable("otps").addColumn("ip", "varchar(64)").execute();
 }
-async function yo(t) {
+async function bo(t) {
   await t.schema.alterTable("otps").dropColumn("ip").execute();
 }
-const vo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const xo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: yo,
-  up: wo
+  down: bo,
+  up: Co
 }, Symbol.toStringTag, { value: "Module" }));
-async function No(t) {
+async function To(t) {
   await t.schema.alterTable("logs").dropColumn("user_agent").execute(), await t.schema.alterTable("logs").addColumn("user_agent", "varchar(1024)").execute();
 }
-async function Co(t) {
+async function So(t) {
   await t.schema.alterTable("logs").dropColumn("user_agent").execute(), await t.schema.alterTable("logs").addColumn("user_agent", "varchar(255)").execute();
 }
-const bo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Oo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Co,
-  up: No
+  down: So,
+  up: To
 }, Symbol.toStringTag, { value: "Module" }));
-async function xo(t) {
+async function ko(t) {
 }
-async function To(t) {
+async function $o(t) {
 }
-const So = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Io = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: To,
-  up: xo
+  down: $o,
+  up: ko
 }, Symbol.toStringTag, { value: "Module" }));
-async function Oo(t) {
+async function Do(t) {
   await t.schema.createTable("hooks").addColumn("hook_id", "varchar(255)", (e) => e.notNull().primaryKey()).addColumn(
     "tenant_id",
     "varchar(255)",
@@ -3647,33 +3787,33 @@ async function Oo(t) {
     (e) => e.defaultTo(!1).notNull()
   ).addColumn("priority", "integer").execute();
 }
-async function ko(t) {
+async function Po(t) {
   await t.schema.dropTable("hooks").execute();
 }
-const $o = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const jo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ko,
-  up: Oo
+  down: Po,
+  up: Do
 }, Symbol.toStringTag, { value: "Module" }));
-async function Io(t) {
+async function Fo(t) {
 }
-async function Do(t) {
+async function Mo(t) {
 }
-const Po = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ao = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Do,
-  up: Io
+  down: Mo,
+  up: Fo
 }, Symbol.toStringTag, { value: "Module" }));
-async function jo(t) {
+async function zo(t) {
 }
-async function Fo(t) {
+async function Lo(t) {
 }
-const Mo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Eo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Fo,
-  up: jo
+  down: Lo,
+  up: zo
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ao(t) {
+async function Jo(t) {
   await t.schema.createTable("logins").addColumn("login_id", "varchar(255)", (e) => e.primaryKey()).addColumn(
     "tenant_id",
     "varchar(255)",
@@ -3690,7 +3830,7 @@ async function Ao(t) {
     (e) => e.onDelete("cascade")
   ).addColumn("code_type", "varchar(255)", (e) => e.notNull()).addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("expires_at", "varchar(255)", (e) => e.notNull()).addColumn("used_at", "varchar(255)").execute();
 }
-async function zo(t) {
+async function Ro(t) {
   await t.schema.dropTable("logins").execute(), await t.schema.alterTable("passwords").dropColumn("algorithm").execute(), await t.schema.dropTable("codes").execute(), await t.schema.createTable("codes").addColumn("id", "varchar(255)", (e) => e.primaryKey()).addColumn("code", "varchar(255)", (e) => e.notNull()).addColumn("user_id", "varchar(255)").addColumn("tenant_id", "varchar(255)").addForeignKeyConstraint(
     "codes_user_id_tenant_id_constraint",
     ["user_id", "tenant_id"],
@@ -3699,90 +3839,90 @@ async function zo(t) {
     (e) => e.onDelete("cascade")
   ).addColumn("type", "varchar(255)", (e) => e.notNull()).addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("expires_at", "varchar(255)", (e) => e.notNull()).addColumn("used_at", "varchar(255)").execute();
 }
-const Lo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ko = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: zo,
-  up: Ao
+  down: Ro,
+  up: Jo
 }, Symbol.toStringTag, { value: "Module" }));
-async function Eo(t) {
+async function Uo(t) {
 }
-async function Jo(t) {
+async function Bo(t) {
 }
-const Ro = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Qo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Jo,
-  up: Eo
+  down: Bo,
+  up: Uo
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ko(t) {
+async function qo(t) {
   await t.schema.alterTable("logins").addColumn("auth0Client", "varchar(256)").execute();
 }
-async function Uo(t) {
+async function Vo(t) {
   await t.schema.alterTable("logins").dropColumn("auth0Client").execute();
 }
-const Bo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Wo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Uo,
-  up: Ko
+  down: Vo,
+  up: qo
 }, Symbol.toStringTag, { value: "Module" }));
-async function Qo(t) {
+async function Go(t) {
   await t.schema.alterTable("logins").dropColumn("authParams_state").execute(), await t.schema.alterTable("logins").addColumn("authParams_state", "varchar(8192)").execute();
 }
-async function qo(t) {
+async function Ho(t) {
   await t.schema.alterTable("logins").dropColumn("authParams_state").execute(), await t.schema.alterTable("logins").addColumn("authParams_state", "varchar(511)").execute();
 }
-const Vo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Yo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: qo,
-  up: Qo
+  down: Ho,
+  up: Go
 }, Symbol.toStringTag, { value: "Module" }));
-async function Wo(t) {
+async function Xo(t) {
 }
-async function Go(t) {
+async function Zo(t) {
 }
-const Ho = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const es = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Go,
-  up: Wo
+  down: Zo,
+  up: Xo
 }, Symbol.toStringTag, { value: "Module" }));
-async function Xo(t) {
+async function ts(t) {
 }
-async function Yo(t) {
+async function rs(t) {
 }
-const Zo = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const as = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Yo,
-  up: Xo
+  down: rs,
+  up: ts
 }, Symbol.toStringTag, { value: "Module" }));
-async function es(t) {
+async function ns(t) {
   await t.schema.alterTable("logins").addColumn("authParams_nonce", "varchar(255)").execute();
 }
-async function ts(t) {
+async function os(t) {
   await t.schema.alterTable("logins").dropColumn("nonce").execute();
 }
-const rs = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const ss = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ts,
-  up: es
+  down: os,
+  up: ns
 }, Symbol.toStringTag, { value: "Module" }));
-async function as(t) {
+async function is(t) {
 }
-async function ns(t) {
+async function ls(t) {
 }
-const os = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const cs = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ns,
-  up: as
+  down: ls,
+  up: is
 }, Symbol.toStringTag, { value: "Module" }));
-async function ss(t) {
+async function ds(t) {
 }
-async function is(t) {
+async function us(t) {
 }
-const ls = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const ms = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: is,
-  up: ss
+  down: us,
+  up: ds
 }, Symbol.toStringTag, { value: "Module" }));
-async function cs(t) {
+async function _s(t) {
   await t.schema.dropTable("codes").execute(), await t.schema.createTable("codes").addColumn("code_id", "varchar(255)", (e) => e.notNull()).addColumn(
     "tenant_id",
     "varchar(255)",
@@ -3798,7 +3938,7 @@ async function cs(t) {
     "code_type"
   ]).execute();
 }
-async function ds(t) {
+async function hs(t) {
   await t.schema.dropTable("codes").execute(), await t.schema.createTable("codes").addColumn("code_id", "varchar(255)", (e) => e.primaryKey()).addColumn(
     "tenant_id",
     "varchar(255)",
@@ -3811,15 +3951,15 @@ async function ds(t) {
     (e) => e.onDelete("cascade")
   ).addColumn("code_type", "varchar(255)", (e) => e.notNull()).addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("expires_at", "varchar(255)", (e) => e.notNull()).addColumn("used_at", "varchar(255)").execute();
 }
-const us = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const fs = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ds,
-  up: cs
+  down: hs,
+  up: _s
 }, Symbol.toStringTag, { value: "Module" }));
-async function ms(t) {
+async function ps(t) {
   await t.schema.dropTable("otps").execute(), await t.schema.dropTable("authentication_codes").execute();
 }
-async function _s(t) {
+async function gs(t) {
   await t.schema.alterTable("keys").addColumn("private_key", "varchar(2048)").addColumn("public_key", "varchar(2048)").execute(), await t.schema.createTable("otps").addColumn(
     "tenant_id",
     "varchar(255)",
@@ -3838,32 +3978,32 @@ async function _s(t) {
     (e) => e.references("applications.id").onDelete("cascade").notNull()
   ).addColumn("user_id", "varchar(255)", (e) => e.notNull()).addColumn("nonce", "varchar(255)").addColumn("state", "varchar(8192)").addColumn("scope", "varchar(1024)").addColumn("response_type", "varchar(256)").addColumn("response_mode", "varchar(256)").addColumn("redirect_uri", "varchar(1024)").addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("expires_at", "varchar(255)", (e) => e.notNull()).addColumn("used_at", "varchar(255)").execute();
 }
-const hs = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const ws = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: _s,
-  up: ms
+  down: gs,
+  up: ps
 }, Symbol.toStringTag, { value: "Module" }));
-async function fs(t) {
+async function ys(t) {
   await t.schema.createIndex("IDX_logs_tenant_date_type_user").on("logs").columns(["tenant_id", "date", "type", "user_id"]).execute();
 }
-async function ps(t) {
+async function vs(t) {
   await t.schema.dropIndex("IDX_logs_tenant_date_type_user").on("logs").execute();
 }
-const gs = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ns = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ps,
-  up: fs
+  down: vs,
+  up: ys
 }, Symbol.toStringTag, { value: "Module" }));
-async function ws(t) {
+async function Cs(t) {
 }
-async function ys(t) {
+async function bs(t) {
 }
-const vs = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const xs = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ys,
-  up: ws
+  down: bs,
+  up: Cs
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ns(t) {
+async function Ts(t) {
   await t.schema.createTable("prompt_settings").addColumn("tenant_id", "varchar(64)", (e) => e.primaryKey()).addColumn(
     "universal_login_experience",
     "varchar(16)",
@@ -3882,95 +4022,95 @@ async function Ns(t) {
     (e) => e.defaultTo(!1).notNull()
   ).execute();
 }
-async function Cs(t) {
+async function Ss(t) {
   await t.schema.dropTable("prompt_settings").execute();
 }
-const bs = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Os = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Cs,
-  up: Ns
+  down: Ss,
+  up: Ts
 }, Symbol.toStringTag, { value: "Module" }));
-async function xs(t) {
+async function ks(t) {
 }
-async function Ts(t) {
+async function $s(t) {
 }
-const Ss = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Is = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Ts,
-  up: xs
+  down: $s,
+  up: ks
 }, Symbol.toStringTag, { value: "Module" }));
-async function Os(t) {
+async function Ds(t) {
 }
-async function ks(t) {
+async function Ps(t) {
 }
-const $s = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const js = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ks,
-  up: Os
+  down: Ps,
+  up: Ds
 }, Symbol.toStringTag, { value: "Module" }));
-async function Is(t) {
+async function Fs(t) {
 }
-async function Ds(t) {
+async function Ms(t) {
 }
-const Ps = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const As = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Ds,
-  up: Is
+  down: Ms,
+  up: Fs
 }, Symbol.toStringTag, { value: "Module" }));
-async function js(t) {
+async function zs(t) {
   await t.schema.alterTable("logins").addColumn("authParams_ui_locales", "varchar(32)").execute();
 }
-async function Fs(t) {
+async function Ls(t) {
   await t.schema.alterTable("logins").dropColumn("authParams_ui_locales").execute();
 }
-const Ms = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Es = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Fs,
-  up: js
+  down: Ls,
+  up: zs
 }, Symbol.toStringTag, { value: "Module" }));
-async function As(t) {
+async function Js(t) {
   await t.schema.alterTable("logins").addColumn("authParams_prompt", "varchar(16)").execute();
 }
-async function zs(t) {
+async function Rs(t) {
   await t.schema.alterTable("logins").dropColumn("authParams_prompt").execute();
 }
-const Ls = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ks = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: zs,
-  up: As
+  down: Rs,
+  up: Js
 }, Symbol.toStringTag, { value: "Module" }));
-async function Es(t) {
+async function Us(t) {
 }
-async function Js(t) {
+async function Bs(t) {
 }
-const Rs = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Qs = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Js,
-  up: Es
+  down: Bs,
+  up: Us
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ks(t) {
+async function qs(t) {
   await t.schema.alterTable("logins").addColumn("authParams_act_as", "varchar(255)").execute();
 }
-async function Us(t) {
+async function Vs(t) {
   await t.schema.alterTable("logins").dropColumn("authParam_act_as").execute();
 }
-const Bs = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ws = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Us,
-  up: Ks
+  down: Vs,
+  up: qs
 }, Symbol.toStringTag, { value: "Module" }));
-async function Qs(t) {
+async function Gs(t) {
   await t.schema.alterTable("codes").addColumn("code_verifier", "varchar(128)").execute();
 }
-async function qs(t) {
+async function Hs(t) {
   await t.schema.alterTable("codes").dropColumn("code_verifier").execute();
 }
-const Vs = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ys = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: qs,
-  up: Qs
+  down: Hs,
+  up: Gs
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ws(t) {
+async function Xs(t) {
   await t.schema.createTable("email_providers").addColumn("tenant_id", "varchar(255)", (e) => e.primaryKey()).addColumn("name", "varchar(255)", (e) => e.notNull()).addColumn("enabled", "boolean", (e) => e.notNull()).addColumn("default_from_address", "varchar(255)").addColumn(
     "credentials",
     "varchar(2048)",
@@ -3981,18 +4121,18 @@ async function Ws(t) {
     (e) => e.notNull().defaultTo("{}")
   ).addColumn("created_at", "varchar(29)", (e) => e.notNull()).addColumn("updated_at", "varchar(29)", (e) => e.notNull()).execute();
 }
-async function Gs(t) {
+async function Zs(t) {
   await t.schema.dropTable("email_providers").execute();
 }
-const Hs = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const ei = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Gs,
-  up: Ws
+  down: Zs,
+  up: Xs
 }, Symbol.toStringTag, { value: "Module" }));
-async function Xs(t) {
+async function ti(t) {
   await t.schema.dropTable("tickets").execute();
 }
-async function Ys(t) {
+async function ri(t) {
   await t.schema.createTable("tickets").addColumn(
     "tenant_id",
     "varchar(255)",
@@ -4003,22 +4143,22 @@ async function Ys(t) {
     (e) => e.references("applications.id").onDelete("cascade").notNull()
   ).addColumn("email", "varchar(255)", (e) => e.notNull()).addColumn("nonce", "varchar(255)").addColumn("state", "varchar(1024)").addColumn("scope", "varchar(1024)").addColumn("response_type", "varchar(256)").addColumn("response_mode", "varchar(256)").addColumn("redirect_uri", "varchar(1024)").addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("expires_at", "varchar(255)", (e) => e.notNull()).addColumn("used_at", "varchar(255)").execute();
 }
-const Zs = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const ai = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Ys,
-  up: Xs
+  down: ri,
+  up: ti
 }, Symbol.toStringTag, { value: "Module" }));
-async function ei(t) {
+async function ni(t) {
 }
-async function ti(t) {
+async function oi(t) {
   await t.schema.alterTable("logins").dropColumn("ip").dropColumn("useragent").execute();
 }
-const ri = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const si = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ti,
-  up: ei
+  down: oi,
+  up: ni
 }, Symbol.toStringTag, { value: "Module" }));
-async function ai(t) {
+async function ii(t) {
   await t.schema.createTable("refresh_tokens").addColumn("id", "varchar(21)", (e) => e.primaryKey()).addColumn(
     "client_id",
     "varchar(21)",
@@ -4031,27 +4171,27 @@ async function ai(t) {
     (e) => e.onDelete("cascade")
   ).addColumn("created_at", "varchar(35)", (e) => e.notNull()).addColumn("expires_at", "varchar(35)").addColumn("idle_expires_at", "varchar(35)").addColumn("last_exchanged_at", "varchar(35)").addColumn("device", "varchar(2048)", (e) => e.notNull()).addColumn("resource_servers", "varchar(2048)", (e) => e.notNull()).addColumn("rotating", "boolean", (e) => e.notNull()).execute();
 }
-async function ni(t) {
+async function li(t) {
   await t.schema.dropTable("refresh_tokens").execute();
 }
-const oi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const ci = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ni,
-  up: ai
+  down: li,
+  up: ii
 }, Symbol.toStringTag, { value: "Module" }));
-async function si(t) {
+async function di(t) {
 }
-async function ii(t) {
+async function ui(t) {
 }
-const li = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const mi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ii,
-  up: si
+  down: ui,
+  up: di
 }, Symbol.toStringTag, { value: "Module" }));
-async function ci(t) {
+async function _i(t) {
   await t.schema.dropTable("sessions").execute(), await t.schema.dropTable("refresh_tokens").execute();
 }
-async function di(t) {
+async function hi(t) {
   await t.schema.createTable("sessions").addColumn("id", "varchar(21)", (e) => e.primaryKey()).addColumn("tenant_id", "varchar(255)").addColumn("user_id", "varchar(255)").addForeignKeyConstraint(
     "sessions_user_id_constraint",
     ["user_id", "tenant_id"],
@@ -4070,12 +4210,12 @@ async function di(t) {
     (e) => e.onDelete("cascade")
   ).addColumn("created_at", "varchar(35)", (e) => e.notNull()).addColumn("expires_at", "varchar(35)").addColumn("idle_expires_at", "varchar(35)").addColumn("last_exchanged_at", "varchar(35)").addColumn("device", "varchar(2048)", (e) => e.notNull()).addColumn("resource_servers", "varchar(2048)", (e) => e.notNull()).addColumn("rotating", "boolean", (e) => e.notNull()).execute();
 }
-const ui = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const fi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: di,
-  up: ci
+  down: hi,
+  up: _i
 }, Symbol.toStringTag, { value: "Module" }));
-async function mi(t) {
+async function pi(t) {
   await t.schema.createTable("sessions_2").addColumn("id", "varchar(21)", (e) => e.primaryKey()).addColumn("tenant_id", "varchar(255)").addColumn("user_id", "varchar(255)").addForeignKeyConstraint(
     "sessions_2_user_id_constraint",
     ["user_id", "tenant_id"],
@@ -4094,15 +4234,15 @@ async function mi(t) {
     (e) => e.onDelete("cascade")
   ).addColumn("created_at", "varchar(35)", (e) => e.notNull()).addColumn("expires_at", "varchar(35)").addColumn("idle_expires_at", "varchar(35)").addColumn("last_exchanged_at", "varchar(35)").addColumn("device", "varchar(2048)", (e) => e.notNull()).addColumn("resource_servers", "varchar(2048)", (e) => e.notNull()).addColumn("rotating", "boolean", (e) => e.notNull()).execute();
 }
-async function _i(t) {
+async function gi(t) {
   await t.schema.dropTable("sessions_2").execute(), await t.schema.dropTable("refresh_tokens_2").execute();
 }
-const hi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const wi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: _i,
-  up: mi
+  down: gi,
+  up: pi
 }, Symbol.toStringTag, { value: "Module" }));
-async function fi(t) {
+async function yi(t) {
   await t.schema.createTable("custom_domains").addColumn(
     "custom_domain_id",
     "varchar(21)",
@@ -4113,49 +4253,49 @@ async function fi(t) {
     (e) => e.references("tenants.id").onDelete("cascade").notNull()
   ).addColumn("domain", "varchar(255)", (e) => e.notNull()).addColumn("primary", "boolean", (e) => e.notNull()).addColumn("status", "varchar(50)", (e) => e.notNull()).addColumn("type", "varchar(50)", (e) => e.notNull()).addColumn("origin_domain_name", "varchar(255)").addColumn("verification", "varchar(2048)").addColumn("custom_client_ip_header", "varchar(50)").addColumn("tls_policy", "varchar(50)").addColumn("domain_metadata", "varchar(2048)").addColumn("created_at", "varchar(35)", (e) => e.notNull()).addColumn("updated_at", "varchar(35)", (e) => e.notNull()).execute(), await t.schema.dropTable("domains").execute();
 }
-async function pi(t) {
+async function vi(t) {
   await t.schema.dropTable("custom_domains").execute(), await t.schema.createTable("domains").addColumn("id", "varchar(255)", (e) => e.notNull().primaryKey()).addColumn(
     "tenant_id",
     "varchar(255)",
     (e) => e.references("tenants.id").onDelete("cascade").notNull()
   ).addColumn("domain", "varchar(255)", (e) => e.notNull()).addColumn("email_service", "varchar(255)").addColumn("email_api_key", "varchar(255)").addColumn("dkim_private_key", "varchar(2048)").addColumn("dkim_public_key", "varchar(2048)").addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("updated_at", "varchar(255)", (e) => e.notNull()).execute();
 }
-const gi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ni = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: pi,
-  up: fi
+  down: vi,
+  up: yi
 }, Symbol.toStringTag, { value: "Module" }));
-async function wi(t) {
+async function Ci(t) {
 }
-async function yi(t) {
+async function bi(t) {
   await t.schema.alterTable("logins").dropColumn("authParams_organization").dropColumn("authorization_url").execute();
 }
-const vi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const xi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: yi,
-  up: wi
+  down: bi,
+  up: Ci
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ni(t) {
+async function Ti(t) {
   await t.schema.alterTable("logins").dropColumn("authorization_url").execute(), await t.schema.alterTable("logins").addColumn("authorization_url", "varchar(2048)").execute();
 }
-async function Ci(t) {
+async function Si(t) {
   await t.schema.alterTable("logins").dropColumn("authorization_url").execute(), await t.schema.alterTable("logins").addColumn("authorization_url", "varchar(1024)").execute();
 }
-const bi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Oi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Ci,
-  up: Ni
+  down: Si,
+  up: Ti
 }, Symbol.toStringTag, { value: "Module" }));
-async function xi(t) {
+async function ki(t) {
 }
-async function Ti(t) {
+async function $i(t) {
 }
-const Si = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ii = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Ti,
-  up: xi
+  down: $i,
+  up: ki
 }, Symbol.toStringTag, { value: "Module" }));
-async function Oi(t) {
+async function Di(t) {
   await t.schema.createTable("sessions").addColumn("id", "varchar(21)", (e) => e.primaryKey()).addColumn("tenant_id", "varchar(255)").addColumn("user_id", "varchar(255)").addForeignKeyConstraint(
     "sessions_user_id_constraint",
     ["user_id", "tenant_id"],
@@ -4182,25 +4322,25 @@ async function Oi(t) {
     (e) => e.onDelete("cascade")
   ).addColumn("created_at", "varchar(35)", (e) => e.notNull()).addColumn("expires_at", "varchar(35)").addColumn("idle_expires_at", "varchar(35)").addColumn("last_exchanged_at", "varchar(35)").addColumn("device", "varchar(2048)", (e) => e.notNull()).addColumn("resource_servers", "varchar(2048)", (e) => e.notNull()).addColumn("rotating", "boolean", (e) => e.notNull()).execute();
 }
-async function ki(t) {
+async function Pi(t) {
   await t.schema.dropTable("sessions").execute(), await t.schema.dropTable("login_sessions").execute(), await t.schema.dropTable("refresh_tokens").execute();
 }
-const $i = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const ji = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: ki,
-  up: Oi
+  down: Pi,
+  up: Di
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ii(t) {
+async function Fi(t) {
   await t.schema.dropTable("logins").execute(), await t.schema.dropTable("sessions_2").execute(), await t.schema.dropTable("refresh_tokens_2").execute();
 }
-async function Di(t) {
+async function Mi(t) {
 }
-const Pi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ai = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Di,
-  up: Ii
+  down: Mi,
+  up: Fi
 }, Symbol.toStringTag, { value: "Module" }));
-async function ji(t) {
+async function zi(t) {
   await t.schema.dropTable("custom_domains").execute(), await t.schema.createTable("custom_domains").addColumn(
     "custom_domain_id",
     "varchar(256)",
@@ -4211,120 +4351,120 @@ async function ji(t) {
     (e) => e.references("tenants.id").onDelete("cascade").notNull()
   ).addColumn("domain", "varchar(255)", (e) => e.notNull()).addColumn("primary", "boolean", (e) => e.notNull()).addColumn("status", "varchar(50)", (e) => e.notNull()).addColumn("type", "varchar(50)", (e) => e.notNull()).addColumn("origin_domain_name", "varchar(255)").addColumn("verification", "varchar(2048)").addColumn("custom_client_ip_header", "varchar(50)").addColumn("tls_policy", "varchar(50)").addColumn("domain_metadata", "varchar(2048)").addColumn("created_at", "varchar(35)", (e) => e.notNull()).addColumn("updated_at", "varchar(35)", (e) => e.notNull()).execute();
 }
-async function Fi(t) {
+async function Li(t) {
 }
-const Mi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ei = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Fi,
-  up: ji
+  down: Li,
+  up: zi
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ai(t) {
+async function Ji(t) {
 }
-async function zi(t) {
+async function Ri(t) {
   await t.schema.alterTable("users").dropColumn("phone_number").dropColumn("phone_verified").dropColumn("username").execute();
 }
-const Li = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Ki = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: zi,
-  up: Ai
+  down: Ri,
+  up: Ji
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ei(t) {
+async function Ui(t) {
   await t.schema.createTable("forms").addColumn("id", "varchar(255)", (e) => e.primaryKey()).addColumn("name", "varchar(255)", (e) => e.notNull()).addColumn("tenant_id", "varchar(255)", (e) => e.notNull()).addColumn("messages", "varchar(255)").addColumn("languages", "varchar(255)").addColumn("translations", "varchar(4096)").addColumn("nodes", "varchar(4096)").addColumn("start", "varchar(255)").addColumn("ending", "varchar(255)").addColumn("style", "varchar(1042)").addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("updated_at", "varchar(255)", (e) => e.notNull()).execute(), await t.schema.createIndex("forms_tenant_id_idx").on("forms").column("tenant_id").execute();
 }
-async function Ji(t) {
+async function Bi(t) {
   await t.schema.dropTable("forms").execute();
 }
-const Ri = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Qi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Ji,
-  up: Ei
+  down: Bi,
+  up: Ui
 }, Symbol.toStringTag, { value: "Module" }));
-async function Ki(t) {
+async function qi(t) {
   await t.schema.alterTable("hooks").addColumn("form_id", "text").execute(), await t.schema.alterTable("hooks").addColumn("url_tmp", "varchar(512)").execute(), await t.updateTable("hooks").set((e) => ({ url_tmp: e.ref("url") })).execute(), await t.schema.alterTable("hooks").dropColumn("url").execute(), await t.schema.alterTable("hooks").renameColumn("url_tmp", "url").execute();
 }
-async function Ui(t) {
+async function Vi(t) {
   await t.schema.dropTable("hooks").ifExists().execute(), await t.schema.createTable("hooks").addColumn("hook_id", "text", (e) => e.primaryKey()).addColumn("tenant_id", "text", (e) => e.notNull()).addColumn("trigger_id", "text", (e) => e.notNull()).addColumn("enabled", "integer", (e) => e.notNull().defaultTo(0)).addColumn("url", "varchar(512)", (e) => e.notNull()).addColumn("synchronous", "integer", (e) => e.notNull().defaultTo(0)).addColumn("priority", "integer").addColumn("created_at", "text", (e) => e.notNull()).addColumn("updated_at", "text", (e) => e.notNull()).execute();
 }
-const Bi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Wi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Ui,
-  up: Ki
+  down: Vi,
+  up: qi
 }, Symbol.toStringTag, { value: "Module" }));
-async function Qi(t) {
+async function Gi(t) {
   await t.schema.alterTable("login_sessions").addColumn(
     "login_completed",
     "boolean",
     (e) => e.notNull().defaultTo(0)
   ).execute();
 }
-async function qi(t) {
+async function Hi(t) {
   await t.schema.alterTable("login_sessions").dropColumn("login_completed").execute();
 }
-const Vi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Yi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: qi,
-  up: Qi
+  down: Hi,
+  up: Gi
 }, Symbol.toStringTag, { value: "Module" }));
-async function Wi(t) {
+async function Xi(t) {
   await t.schema.alterTable("sessions").addColumn(
     "login_session_id",
     "varchar(21)",
     (e) => e.references("login_sessions.id").onDelete("set null")
   ).execute();
 }
-async function Gi(t) {
+async function Zi(t) {
   await t.schema.alterTable("sessions").dropColumn("login_session_id").execute();
 }
-const Hi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const el = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Gi,
-  up: Wi
+  down: Zi,
+  up: Xi
 }, Symbol.toStringTag, { value: "Module" }));
-async function Xi(t) {
+async function tl(t) {
   await t.schema.createIndex("IDX_sessions_login_session_id").on("sessions").column("login_session_id").execute();
 }
-async function Yi(t) {
+async function rl(t) {
   await t.schema.dropIndex("IDX_sessions_login_session_id").on("sessions").execute();
 }
-const Zi = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const al = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: Yi,
-  up: Xi
+  down: rl,
+  up: tl
 }, Symbol.toStringTag, { value: "Module" }));
-async function el(t) {
+async function nl(t) {
   await t.schema.alterTable("codes").addColumn("code_challenge", "varchar(128)").execute(), await t.schema.alterTable("codes").addColumn("code_challenge_method", "varchar(5)").execute();
 }
-async function tl(t) {
+async function ol(t) {
   await t.schema.alterTable("codes").dropColumn("code_challenge").execute(), await t.schema.alterTable("codes").dropColumn("code_challenge_method").execute();
 }
-const rl = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const sl = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: tl,
-  up: el
+  down: ol,
+  up: nl
 }, Symbol.toStringTag, { value: "Module" }));
-async function al(t) {
+async function il(t) {
   await t.schema.alterTable("codes").addColumn("redirect_uri", "varchar(1024)").execute();
 }
-async function nl(t) {
+async function ll(t) {
   await t.schema.alterTable("codes").dropColumn("redirect_uri").execute();
 }
-const ol = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const cl = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: nl,
-  up: al
+  down: ll,
+  up: il
 }, Symbol.toStringTag, { value: "Module" }));
-async function sl(t) {
+async function dl(t) {
   await t.schema.alterTable("codes").addColumn("nonce", "varchar(1024)").execute(), await t.schema.alterTable("codes").addColumn("state", "varchar(2048)").execute();
 }
-async function il(t) {
+async function ul(t) {
   await t.schema.alterTable("codes").dropColumn("nonce").execute(), await t.schema.alterTable("codes").dropColumn("state").execute();
 }
-const ll = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const ml = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: il,
-  up: sl
+  down: ul,
+  up: dl
 }, Symbol.toStringTag, { value: "Module" }));
-async function cl(t) {
+async function _l(t) {
   await t.schema.createTable("themes").addColumn(
     "tenant_id",
     "varchar(255)",
@@ -4399,31 +4539,31 @@ async function cl(t) {
     (e) => e.notNull()
   ).addColumn("created_at", "varchar(35)", (e) => e.notNull()).addColumn("updated_at", "varchar(35)", (e) => e.notNull()).addPrimaryKeyConstraint("themes_pkey", ["tenant_id", "themeId"]).execute(), await t.schema.createIndex("themes_tenant_id_idx").on("themes").column("tenant_id").execute();
 }
-async function dl(t) {
+async function hl(t) {
   await t.schema.dropTable("themes").execute();
 }
-const ul = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const fl = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: dl,
-  up: cl
+  down: hl,
+  up: _l
 }, Symbol.toStringTag, { value: "Module" }));
-async function ml(t) {
-  await t.schema.createTable("resource_servers").addColumn("id", "varchar(21)", (e) => e.notNull()).addColumn("tenant_id", "varchar(191)", (e) => e.notNull()).addColumn("identifier", "varchar(191)", (e) => e.notNull()).addColumn("name", "varchar(255)", (e) => e.notNull()).addColumn("scopes", "varchar(4096)").addColumn("signing_alg", "varchar(64)").addColumn("signing_secret", "varchar(2048)").addColumn("token_lifetime", "integer").addColumn("token_lifetime_for_web", "integer").addColumn("skip_consent_for_verifiable_first_party_clients", "integer").addColumn("allow_offline_access", "integer").addColumn("verification_key", "varchar(4096)").addColumn("options", "varchar(4096)").addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("updated_at", "varchar(255)", (e) => e.notNull()).addPrimaryKeyConstraint("resource_servers_pk", ["tenant_id", "id"]).execute(), await t.schema.createIndex("resource_servers_tenant_identifier_uq").on("resource_servers").columns(["tenant_id", "identifier"]).unique().execute(), await t.schema.createTable("roles").addColumn("id", "varchar(21)", (e) => e.notNull()).addColumn("tenant_id", "varchar(191)", (e) => e.notNull()).addColumn("name", "varchar(50)", (e) => e.notNull()).addColumn("description", "varchar(255)").addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("updated_at", "varchar(255)", (e) => e.notNull()).addPrimaryKeyConstraint("roles_pk", ["tenant_id", "id"]).execute(), await t.schema.createIndex("roles_tenant_name_uq").on("roles").columns(["tenant_id", "name"]).unique().execute();
+async function pl(t) {
+  await t.schema.createTable("resource_servers").addColumn("id", "varchar(21)", (e) => e.notNull()).addColumn("tenant_id", "varchar(191)", (e) => e.notNull()).addColumn("identifier", "varchar(191)", (e) => e.notNull()).addColumn("name", "varchar(255)", (e) => e.notNull()).addColumn("scopes", "varchar(4096)").addColumn("signing_alg", "varchar(64)").addColumn("signing_secret", "varchar(2048)").addColumn("token_lifetime", "integer").addColumn("token_lifetime_for_web", "integer").addColumn("skip_consent_for_verifiable_first_party_clients", "integer").addColumn("allow_offline_access", "integer").addColumn("verification_key", "varchar(4096)").addColumn("options", "varchar(4096)").addColumn("created_at", "varchar(35)", (e) => e.notNull()).addColumn("updated_at", "varchar(35)", (e) => e.notNull()).addPrimaryKeyConstraint("resource_servers_pk", ["tenant_id", "id"]).execute(), await t.schema.createIndex("resource_servers_tenant_identifier_uq").on("resource_servers").columns(["tenant_id", "identifier"]).unique().execute(), await t.schema.createTable("roles").addColumn("id", "varchar(21)", (e) => e.notNull()).addColumn("tenant_id", "varchar(191)", (e) => e.notNull()).addColumn("name", "varchar(50)", (e) => e.notNull()).addColumn("description", "varchar(255)").addColumn("created_at", "varchar(35)", (e) => e.notNull()).addColumn("updated_at", "varchar(35)", (e) => e.notNull()).addPrimaryKeyConstraint("roles_pk", ["tenant_id", "id"]).execute(), await t.schema.createIndex("roles_tenant_name_uq").on("roles").columns(["tenant_id", "name"]).unique().execute();
 }
-async function _l(t) {
+async function gl(t) {
   await t.schema.dropTable("roles").execute(), await t.schema.dropTable("resource_servers").execute();
 }
-const hl = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const wl = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: _l,
-  up: ml
+  down: gl,
+  up: pl
 }, Symbol.toStringTag, { value: "Module" }));
-async function fl(t) {
+async function yl(t) {
   await t.schema.createTable("role_permissions").addColumn("tenant_id", "varchar(191)", (e) => e.notNull()).addColumn("role_id", "varchar(21)", (e) => e.notNull()).addColumn(
     "resource_server_identifier",
     "varchar(191)",
     (e) => e.notNull()
-  ).addColumn("permission_name", "varchar(255)", (e) => e.notNull()).addColumn("created_at", "varchar(255)", (e) => e.notNull()).addPrimaryKeyConstraint("role_permissions_pk", [
+  ).addColumn("permission_name", "varchar(191)", (e) => e.notNull()).addColumn("created_at", "varchar(35)", (e) => e.notNull()).addPrimaryKeyConstraint("role_permissions_pk", [
     "tenant_id",
     "role_id",
     "resource_server_identifier",
@@ -4432,138 +4572,165 @@ async function fl(t) {
     "resource_server_identifier",
     "varchar(191)",
     (e) => e.notNull()
-  ).addColumn("permission_name", "varchar(255)", (e) => e.notNull()).addColumn("created_at", "varchar(255)", (e) => e.notNull()).addPrimaryKeyConstraint("user_permissions_pk", [
+  ).addColumn("permission_name", "varchar(191)", (e) => e.notNull()).addColumn("created_at", "varchar(35)", (e) => e.notNull()).addPrimaryKeyConstraint("user_permissions_pk", [
     "tenant_id",
     "user_id",
     "resource_server_identifier",
     "permission_name"
   ]).execute(), await t.schema.createIndex("user_permissions_user_fk").on("user_permissions").columns(["tenant_id", "user_id"]).execute(), await t.schema.createIndex("user_permissions_permission_fk").on("user_permissions").columns(["tenant_id", "resource_server_identifier", "permission_name"]).execute();
 }
-async function pl(t) {
+async function vl(t) {
   await t.schema.dropTable("user_permissions").execute(), await t.schema.dropTable("role_permissions").execute();
 }
-const gl = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Nl = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  down: pl,
-  up: fl
+  down: vl,
+  up: yl
+}, Symbol.toStringTag, { value: "Module" }));
+async function Cl(t) {
+  await t.schema.createTable("user_roles").addColumn("tenant_id", "varchar(191)", (e) => e.notNull()).addColumn("user_id", "varchar(191)", (e) => e.notNull()).addColumn("role_id", "varchar(21)", (e) => e.notNull()).addColumn("created_at", "varchar(35)", (e) => e.notNull()).addPrimaryKeyConstraint("user_roles_pk", [
+    "tenant_id",
+    "user_id",
+    "role_id"
+  ]).execute(), await t.schema.createIndex("user_roles_user_fk").on("user_roles").columns(["tenant_id", "user_id"]).execute(), await t.schema.createIndex("user_roles_role_fk").on("user_roles").columns(["tenant_id", "role_id"]).execute();
+}
+async function bl(t) {
+  await t.schema.dropTable("user_roles").execute();
+}
+const xl = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+  __proto__: null,
+  down: bl,
+  up: Cl
+}, Symbol.toStringTag, { value: "Module" }));
+async function Tl(t) {
+}
+async function Sl(t) {
+  await t.schema.alterTable("keys").dropColumn("connection").execute(), await t.schema.alterTable("keys").alterColumn("cert", (e) => e.setDataType("varchar(2048)")).execute(), await t.schema.alterTable("keys").alterColumn("pkcs7", (e) => e.setDataType("varchar(2048)")).execute(), await t.schema.alterTable("keys").dropColumn("type").execute();
+}
+const Ol = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+  __proto__: null,
+  down: Sl,
+  up: Tl
 }, Symbol.toStringTag, { value: "Module" })), Ee = {
-  m1_init: fa,
-  m2_magicLink: wa,
-  m3_updateAt: Na,
-  m4_logTable: xa,
-  m5_userProfile: Oa,
-  m6_sessions: Ia,
-  m7_passwords: ja,
-  m8_logsTableNewFields: Aa,
-  m9_passwordTableNewField: Ea,
-  n01_codesTable: Ka,
-  n11_universalLoginSession: Qa,
-  n12_userFields: Wa,
-  n13_userEmailIndex: Xa,
-  n14_profileDataField: en,
-  n15_userEmailIndex: an,
-  n16_userLocale: sn,
-  n17_signingKeys: dn,
-  n18_logsFields: _n,
-  n19_connectionsUserinfo: pn,
-  n20_missingFields: yn,
-  n21_sessionDeletedAt: Cn,
-  n22_dropLogsFields: Tn,
-  n23_dropUsersFields: kn,
-  n24_logsIndexes: Dn,
-  n25_logDescMaxLength: Fn,
-  n26_logsTableExtraFields: zn,
-  n27_usersTableNameIndex: Jn,
-  n28_usersEmailConstrain: Un,
-  n29_increaseOtpStateLength: qn,
-  n30_increaseTicketStateLength: Gn,
-  n31_branding: Yn,
-  n32_indexesAndNotNull: to,
-  n33_vendorIdInUniversalLoginSession: no,
-  n34_auth0ClientInUniversalLoginSession: io,
-  n35_increaseUniversalSessionStateLength: uo,
-  n36_authenticationCodes: ho,
-  n37_disableSignUps: go,
-  n38_otpIpAddress: vo,
-  n39_increaseUserAgentLength: bo,
-  n40_userId: So,
-  n41_hooks: $o,
-  n42_userIdIndexes: Po,
-  n43_userIdIndexes: Mo,
-  n44_codes: Lo,
-  n45_hookProperties: Ro,
-  n46_loginAuth0Client: Bo,
-  n47_loginAuth0Client: Vo,
-  n48_saml: Ho,
-  n49_removeFields: Zo,
-  n50_authParamsNonce: rs,
-  n51_connectionid: os,
-  n52_cert: ls,
-  n53_codes_primary_key: us,
-  n54_cleanup_tables: hs,
-  n55_logs_index: gs,
-  n56_application_fields: vs,
-  n57_prompt_settings: bs,
-  n58_connection_client_id: Ss,
-  n59_connection_options: $s,
-  n60_users_metadata: Ps,
-  n61_userLocales: Ms,
-  n62_prompt: Ls,
-  n63_connection_cleanup: Rs,
-  n64_act_as: Bs,
-  n65_code_verifier: Vs,
-  n66_email_providers: Hs,
-  n67_drop_tickets: Zs,
-  n68_login_useragents: ri,
-  n70_refresh_tokens: oi,
-  n71_session_new_fields: li,
-  n72_session_primary_key: ui,
-  n73_drop_sessions: hi,
-  n74_custom_domains: gi,
-  n75_organizations: vi,
-  n76_authorization_url_length: bi,
-  n77_drop_sessions: Si,
-  n78_login_sessions: $i,
-  n79_drop_sessions_2: Pi,
-  n80_recreate_custom_domains: Mi,
-  n81_phone: Li,
-  n82_forms: Ri,
-  n83_addFormsIdToHooks: Bi,
-  n84_login_completed: Vi,
-  n85_add_login_session_id_to_sessions: Hi,
-  n86_index_sessions_login_session_id: Zi,
-  n87_code_challenge: rl,
-  n88_add_redirect_uri_to_codes: ol,
-  n89_add_nonce_and_state_to_codes: ll,
-  n90_themes: ul,
-  n91_resource_servers_rules_permissions: hl,
-  n92_role_permissions: gl
+  m1_init: ya,
+  m2_magicLink: Ca,
+  m3_updateAt: Ta,
+  m4_logTable: ka,
+  m5_userProfile: Da,
+  m6_sessions: Fa,
+  m7_passwords: za,
+  m8_logsTableNewFields: Ja,
+  m9_passwordTableNewField: Ua,
+  n01_codesTable: qa,
+  n11_universalLoginSession: Ga,
+  n12_userFields: Xa,
+  n13_userEmailIndex: tn,
+  n14_profileDataField: nn,
+  n15_userEmailIndex: ln,
+  n16_userLocale: un,
+  n17_signingKeys: hn,
+  n18_logsFields: gn,
+  n19_connectionsUserinfo: vn,
+  n20_missingFields: bn,
+  n21_sessionDeletedAt: Sn,
+  n22_dropLogsFields: $n,
+  n23_dropUsersFields: Pn,
+  n24_logsIndexes: Mn,
+  n25_logDescMaxLength: Ln,
+  n26_logsTableExtraFields: Rn,
+  n27_usersTableNameIndex: Bn,
+  n28_usersEmailConstrain: Vn,
+  n29_increaseOtpStateLength: Hn,
+  n30_increaseTicketStateLength: Zn,
+  n31_branding: ro,
+  n32_indexesAndNotNull: oo,
+  n33_vendorIdInUniversalLoginSession: lo,
+  n34_auth0ClientInUniversalLoginSession: mo,
+  n35_increaseUniversalSessionStateLength: fo,
+  n36_authenticationCodes: wo,
+  n37_disableSignUps: No,
+  n38_otpIpAddress: xo,
+  n39_increaseUserAgentLength: Oo,
+  n40_userId: Io,
+  n41_hooks: jo,
+  n42_userIdIndexes: Ao,
+  n43_userIdIndexes: Eo,
+  n44_codes: Ko,
+  n45_hookProperties: Qo,
+  n46_loginAuth0Client: Wo,
+  n47_loginAuth0Client: Yo,
+  n48_saml: es,
+  n49_removeFields: as,
+  n50_authParamsNonce: ss,
+  n51_connectionid: cs,
+  n52_cert: ms,
+  n53_codes_primary_key: fs,
+  n54_cleanup_tables: ws,
+  n55_logs_index: Ns,
+  n56_application_fields: xs,
+  n57_prompt_settings: Os,
+  n58_connection_client_id: Is,
+  n59_connection_options: js,
+  n60_users_metadata: As,
+  n61_userLocales: Es,
+  n62_prompt: Ks,
+  n63_connection_cleanup: Qs,
+  n64_act_as: Ws,
+  n65_code_verifier: Ys,
+  n66_email_providers: ei,
+  n67_drop_tickets: ai,
+  n68_login_useragents: si,
+  n70_refresh_tokens: ci,
+  n71_session_new_fields: mi,
+  n72_session_primary_key: fi,
+  n73_drop_sessions: wi,
+  n74_custom_domains: Ni,
+  n75_organizations: xi,
+  n76_authorization_url_length: Oi,
+  n77_drop_sessions: Ii,
+  n78_login_sessions: ji,
+  n79_drop_sessions_2: Ai,
+  n80_recreate_custom_domains: Ei,
+  n81_phone: Ki,
+  n82_forms: Qi,
+  n83_addFormsIdToHooks: Wi,
+  n84_login_completed: Yi,
+  n85_add_login_session_id_to_sessions: el,
+  n86_index_sessions_login_session_id: al,
+  n87_code_challenge: sl,
+  n88_add_redirect_uri_to_codes: cl,
+  n89_add_nonce_and_state_to_codes: ml,
+  n90_themes: fl,
+  n91_resource_servers_rules_permissions: wl,
+  n92_role_permissions: Nl,
+  n93_add_permissions_to_roles: xl,
+  n94_keys_connection_and_extend_columns: Ol
 };
-async function Cl(t, e = !1) {
+async function Pl(t, e = !1) {
   e && console.log("migrating...");
   const r = new Le(Ee), a = new be({
     db: t,
     provider: r
-  }), { error: o, results: n } = await a.migrateToLatest();
-  if (n == null || n.forEach((s) => {
+  }), { error: n, results: o } = await a.migrateToLatest();
+  if (o == null || o.forEach((s) => {
     s.status === "Success" ? e && console.log(
       `migration "${s.migrationName}" was executed successfully`
     ) : s.status === "Error" && console.error(`failed to execute migration "${s.migrationName}"`);
-  }), o)
-    throw console.error("failed to migrate"), console.error(o), o;
+  }), n)
+    throw console.error("failed to migrate"), console.error(n), n;
 }
-async function bl(t) {
+async function jl(t) {
   console.log("migrating...");
   const e = new Le(Ee), r = new be({
     db: t,
     provider: e
-  }), { error: a, results: o } = await r.migrateDown();
-  if (o == null || o.forEach((n) => {
-    n.status === "Success" ? console.log(`migration "${n.migrationName}" was reverted successfully`) : n.status === "Error" && console.error(`failed to execute migration "${n.migrationName}"`);
+  }), { error: a, results: n } = await r.migrateDown();
+  if (n == null || n.forEach((o) => {
+    o.status === "Success" ? console.log(`migration "${o.migrationName}" was reverted successfully`) : o.status === "Error" && console.error(`failed to execute migration "${o.migrationName}"`);
   }), a)
     throw console.error("failed to migrate"), console.error(a), a;
 }
-function xl(t) {
+function Fl(t) {
   return {
     applications: jt(t),
     branding: er(t),
@@ -4572,7 +4739,7 @@ function xl(t) {
     codes: Ot(t),
     connections: Et(t),
     emailProviders: br(t),
-    customDomains: Xt(t),
+    customDomains: Yt(t),
     forms: Ar(t),
     hooks: sr(t),
     keys: Bt(t),
@@ -4582,8 +4749,9 @@ function xl(t) {
     promptSettings: yr(t),
     refreshTokens: $r(t),
     resourceServers: Kr(t),
-    rolePermissions: Yr(t),
+    rolePermissions: Xr(t),
     userPermissions: ra(t),
+    userRoles: sa(t),
     roles: Wr(t),
     sessions: gt(t),
     tenants: st(t),
@@ -4592,7 +4760,7 @@ function xl(t) {
   };
 }
 export {
-  xl as default,
-  bl as migrateDown,
-  Cl as migrateToLatest
+  Fl as default,
+  jl as migrateDown,
+  Pl as migrateToLatest
 };