@authhero/kysely-adapter 10.36.0 → 10.37.1

package/dist/kysely-adapter.mjs

@@ -3,15 +3,15 @@ var ue = (t) => {
   throw TypeError(t);
 };
 var Re = (t, e, r) => e in t ? Je(t, e, { enumerable: !0, configurable: !0, writable: !0, value: r }) : t[e] = r;
-var z = (t, e, r) => Re(t, typeof e != "symbol" ? e + "" : e, r), V = (t, e, r) => e.has(t) || ue("Cannot " + r);
-var d = (t, e, r) => (V(t, e, "read from private field"), r ? r.call(t) : e.get(t)), N = (t, e, r) => e.has(t) ? ue("Cannot add the same private member more than once") : e instanceof WeakSet ? e.add(t) : e.set(t, r), L = (t, e, r, a) => (V(t, e, "write to private field"), a ? a.call(t, r) : e.set(t, r), r), m = (t, e, r) => (V(t, e, "access private method"), r);
-import { parseUserId as ae, codeSchema as Ke, connectionSchema as Ue, loginSessionSchema as Be, promptSettingSchema as Qe, formSchema as Q, resourceServerSchema as qe } from "@authhero/adapter-interfaces";
+var R = (t, e, r) => Re(t, typeof e != "symbol" ? e + "" : e, r), Y = (t, e, r) => e.has(t) || ue("Cannot " + r);
+var d = (t, e, r) => (Y(t, e, "read from private field"), r ? r.call(t) : e.get(t)), S = (t, e, r) => e.has(t) ? ue("Cannot add the same private member more than once") : e instanceof WeakSet ? e.add(t) : e.set(t, r), K = (t, e, r, a) => (Y(t, e, "write to private field"), a ? a.call(t, r) : e.set(t, r), r), p = (t, e, r) => (Y(t, e, "access private method"), r);
+import { parseUserId as ie, codeSchema as Ke, connectionSchema as Ue, loginSessionSchema as Be, promptSettingSchema as Qe, formSchema as G, resourceServerSchema as qe } from "@authhero/adapter-interfaces";
 import "@hono/zod-openapi";
-var Y = class extends Error {
+var te = class extends Error {
   constructor(e = 500, r) {
     super(r == null ? void 0 : r.message, { cause: r == null ? void 0 : r.cause });
-    z(this, "res");
-    z(this, "status");
+    R(this, "res");
+    R(this, "status");
     this.res = r == null ? void 0 : r.res, this.status = e;
   }
   getResponse() {
@@ -25,8 +25,8 @@ var Y = class extends Error {
 };
 function Ve(t) {
   return async (e, r) => {
-    const { identities: a, ...o } = r, n = {
-      ...o,
+    const { identities: a, ...n } = r, o = {
+      ...n,
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       login_count: 0,
@@ -37,35 +37,35 @@ function Ve(t) {
       user_metadata: JSON.stringify(r.user_metadata)
     };
     try {
-      await t.insertInto("users").values(n).execute();
+      await t.insertInto("users").values(o).execute();
     } catch (s) {
-      throw s.code === "SQLITE_CONSTRAINT_UNIQUE" || s.message.includes("AlreadyExists") ? new Y(409, { message: "User already exists" }) : new Y(500, { message: `${s.code}, ${s.message}` });
+      throw s.code === "SQLITE_CONSTRAINT_UNIQUE" || s.message.includes("AlreadyExists") ? new te(409, { message: "User already exists" }) : new te(500, { message: `${s.code}, ${s.message}` });
     }
     return {
-      ...n,
+      ...o,
       // TODO: check if this is correct. Should it be optional?
-      email: n.email || "",
-      email_verified: n.email_verified === 1,
-      is_social: n.is_social === 1
+      email: o.email || "",
+      email_verified: o.email_verified === 1,
+      is_social: o.is_social === 1
     };
   };
 }
-function f(t) {
+function y(t) {
   if (t == null || typeof t != "object")
     return t;
   if (Array.isArray(t))
     return t.map(
       (r) => (
         // Only recurse into objects; leave primitives untouched
-        r !== null && typeof r == "object" ? f(r) : r
+        r !== null && typeof r == "object" ? y(r) : r
       )
     );
   const e = { ...t };
   for (const r in e) {
     const a = e[r];
     a === null ? delete e[r] : a !== null && typeof a == "object" && (Array.isArray(a) ? e[r] = a.map(
-      (o) => o !== null && typeof o == "object" ? f(o) : o
-    ) : e[r] = f(a));
+      (n) => n !== null && typeof n == "object" ? y(n) : n
+    ) : e[r] = y(a));
   }
   return e;
 }
@@ -79,7 +79,7 @@ function pe(t) {
   return {
     connection: t.connection,
     provider: t.provider,
-    user_id: ae(t.user_id).id,
+    user_id: ie(t.user_id).id,
     isSocial: !!t.is_social,
     profileData: {
       email: t.email,
@@ -90,13 +90,13 @@ function pe(t) {
 }
 function We(t) {
   return async (e, r) => {
-    const [a, o] = await Promise.all([
+    const [a, n] = await Promise.all([
       t.selectFrom("users").where("users.tenant_id", "=", e).where("users.user_id", "=", r).selectAll().executeTakeFirst(),
       t.selectFrom("users").where("users.tenant_id", "=", e).where("users.linked_to", "=", r).selectAll().execute()
     ]);
     if (!a)
       return null;
-    const { tenant_id: n, ...s } = a, l = {
+    const { tenant_id: o, ...s } = a, i = {
       ...s,
       email: a.email || "",
       email_verified: a.email_verified === 1,
@@ -107,128 +107,133 @@ function We(t) {
         {
           connection: a.connection,
           provider: a.provider,
-          user_id: ae(a.user_id).id,
+          user_id: ie(a.user_id).id,
           isSocial: !!a.is_social
         },
-        ...o.map(pe)
+        ...n.map(pe)
       ]
     };
-    return f(l);
+    return y(i);
   };
 }
-function C(t, e, r, a) {
-  return r.split(/\s+/).map((n) => n.replace(/^([^:]+)=/g, "$1:")).map((n) => {
-    let s = n.startsWith("-"), l = null, c = "", _ = !1, u;
-    if (n.startsWith("-_exists_:"))
-      l = n.substring(10), _ = !0, s = !0;
-    else if (n.startsWith("_exists_:"))
-      l = n.substring(9), _ = !0, s = !1;
-    else if (n.includes(":")) {
-      const h = s ? n.substring(1) : n, g = h.indexOf(":");
-      l = h.substring(0, g), c = h.substring(g + 1), _ = !1, c.startsWith(">=") ? (u = ">=", c = c.substring(2)) : c.startsWith(">") ? (u = ">", c = c.substring(1)) : c.startsWith("<=") ? (u = "<=", c = c.substring(2)) : c.startsWith("<") ? (u = "<", c = c.substring(1)) : u = "=";
+function T(t, e, r, a) {
+  return r.split(/\s+/).map((o) => o.replace(/^([^:]+)=/g, "$1:")).map((o) => {
+    let s = o.startsWith("-"), i = null, c = "", _ = !1, u;
+    if (o.startsWith("-_exists_:"))
+      i = o.substring(10), _ = !0, s = !0;
+    else if (o.startsWith("_exists_:"))
+      i = o.substring(9), _ = !0, s = !1;
+    else if (o.includes(":")) {
+      const m = s ? o.substring(1) : o, h = m.indexOf(":");
+      i = m.substring(0, h), c = m.substring(h + 1), _ = !1, c.startsWith(">=") ? (u = ">=", c = c.substring(2)) : c.startsWith(">") ? (u = ">", c = c.substring(1)) : c.startsWith("<=") ? (u = "<=", c = c.substring(2)) : c.startsWith("<") ? (u = "<", c = c.substring(1)) : u = "=";
     } else
-      l = null, c = n, _ = !1;
-    return { key: l, value: c, isNegation: s, isExistsQuery: _, operator: u };
-  }).forEach(({ key: n, value: s, isNegation: l, isExistsQuery: c, operator: _ }) => {
-    if (n)
+      i = null, c = o, _ = !1;
+    return { key: i, value: c, isNegation: s, isExistsQuery: _, operator: u };
+  }).forEach(({ key: o, value: s, isNegation: i, isExistsQuery: c, operator: _ }) => {
+    if (o)
       if (c)
-        l ? e = e.where(n, "is", null) : e = e.where(n, "is not", null);
-      else if (l)
+        i ? e = e.where(o, "is", null) : e = e.where(o, "is not", null);
+      else if (i)
         switch (_) {
           case ">":
-            e = e.where(n, "<=", s);
+            e = e.where(o, "<=", s);
             break;
           case ">=":
-            e = e.where(n, "<", s);
+            e = e.where(o, "<", s);
             break;
           case "<":
-            e = e.where(n, ">=", s);
+            e = e.where(o, ">=", s);
             break;
           case "<=":
-            e = e.where(n, ">", s);
+            e = e.where(o, ">", s);
             break;
           default:
-            e = e.where(n, "!=", s);
+            e = e.where(o, "!=", s);
         }
       else
-        e = e.where(n, _, s);
+        e = e.where(o, _, s);
     else if (s) {
       const { ref: u } = t.dynamic;
       e = e.where(
-        (h) => h.or(
-          a.map((g) => h(u(g), "like", `%${s}%`))
+        (m) => m.or(
+          a.map((h) => m(u(h), "like", `%${s}%`))
         )
       );
     }
   }), e;
 }
-function v(t) {
+function x(t) {
   return typeof t == "string" ? parseInt(t, 10) : typeof t == "bigint" ? Number(t) : t;
 }
 function Ge(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("users").where("users.tenant_id", "=", e);
-    if (r.q && (a = C(t, a, r.q, ["email", "name"])), r.sort && r.sort.sort_by) {
-      const { ref: u } = t.dynamic;
-      a = a.orderBy(u(r.sort.sort_by), r.sort.sort_order);
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, sort: s, q: i } = r;
+    let c = t.selectFrom("users").where("users.tenant_id", "=", e);
+    if (i && (c = T(t, c, i, ["email", "name"])), s && s.sort_by) {
+      const { ref: w } = t.dynamic;
+      c = c.orderBy(w(s.sort_by), s.sort_order);
     }
-    const n = await a.offset(r.page * r.per_page).limit(r.per_page).selectAll().execute(), s = n.map((u) => u.user_id), l = s.length ? await t.selectFrom("users").selectAll().where("users.tenant_id", "=", e).where("users.linked_to", "in", s).execute() : [], c = n.map((u) => {
-      const h = l.filter(
-        (g) => g.linked_to === u.user_id
+    const u = await c.offset(a * n).limit(n).selectAll().execute(), m = u.map((w) => w.user_id), h = m.length ? await t.selectFrom("users").selectAll().where("users.tenant_id", "=", e).where("users.linked_to", "in", m).execute() : [], f = u.map((w) => {
+      const b = h.filter(
+        (D) => D.linked_to === w.user_id
       );
-      return f({
-        ...u,
-        email_verified: u.email_verified === 1,
-        is_social: u.is_social === 1,
-        app_metadata: JSON.parse(u.app_metadata),
-        user_metadata: JSON.parse(u.user_metadata),
+      return y({
+        ...w,
+        email_verified: w.email_verified === 1,
+        is_social: w.is_social === 1,
+        app_metadata: JSON.parse(w.app_metadata),
+        user_metadata: JSON.parse(w.user_metadata),
         identities: [
           {
-            connection: u.connection,
-            provider: u.provider,
-            user_id: ae(u.user_id).id,
-            isSocial: !!u.is_social
+            connection: w.connection,
+            provider: w.provider,
+            user_id: ie(w.user_id).id,
+            isSocial: !!w.is_social
           },
-          ...h.map(pe)
+          ...b.map(pe)
         ]
       });
-    }), { count: _ } = await a.select((u) => u.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    });
+    if (!o)
+      return {
+        users: f,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: g } = await c.select((w) => w.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      users: c,
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(_)
+      users: f,
+      start: a * n,
+      limit: n,
+      length: x(g)
     };
   };
 }
 function He(t) {
   return async (e, r) => (await t.deleteFrom("users").where("users.tenant_id", "=", e).where("users.linked_to", "=", r).execute(), (await t.deleteFrom("users").where("users.tenant_id", "=", e).where("users.user_id", "=", r).execute()).length === 1);
 }
-function A(t, e = "", r = {}) {
+function J(t, e = "", r = {}) {
   for (let a in t)
     if (Object.prototype.hasOwnProperty.call(t, a)) {
-      const o = e ? `${e}_${a}` : a, n = t[a];
-      typeof n == "object" && n !== null && !Array.isArray(n) ? A(n, o, r) : typeof n == "boolean" ? r[o] = n ? 1 : 0 : r[o] = n;
+      const n = e ? `${e}_${a}` : a, o = t[a];
+      typeof o == "object" && o !== null && !Array.isArray(o) ? J(o, n, r) : typeof o == "boolean" ? r[n] = o ? 1 : 0 : r[n] = o;
     }
   return r;
 }
 function ge(t, e) {
   const r = {};
-  for (const [a, o] of Object.entries(t)) {
-    const n = e.find(
+  for (const [a, n] of Object.entries(t)) {
+    const o = e.find(
       (s) => a.startsWith(`${s}_`)
     );
-    if (!n)
-      r[a] = o;
+    if (!o)
+      r[a] = n;
     else {
-      const s = a.slice(n.length + 1);
-      r[n] = {
-        ...r[n],
-        [s]: o
+      const s = a.slice(o.length + 1);
+      r[o] = {
+        ...r[o],
+        [s]: n
       };
     }
   }
@@ -236,19 +241,19 @@ function ge(t, e) {
 }
 function Ye(t) {
   return async (e, r, a) => {
-    const o = A({
+    const n = J({
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       app_metadata: a.app_metadata ? JSON.stringify(a.app_metadata) : void 0,
       user_metadata: a.user_metadata ? JSON.stringify(a.user_metadata) : void 0
     });
-    return (await t.updateTable("users").set(o).where("users.tenant_id", "=", e).where("users.user_id", "=", r).execute()).length === 1;
+    return (await t.updateTable("users").set(n).where("users.tenant_id", "=", e).where("users.user_id", "=", r).execute()).length === 1;
   };
 }
 function Xe(t) {
-  return async (e, r, a, o) => {
-    const n = { linked_to: null };
-    return (await t.updateTable("users").set(n).where("users.tenant_id", "=", e).where("users.user_id", "=", `${a}|${o}`).where("users.linked_to", "=", `${r}`).execute()).length === 1;
+  return async (e, r, a, n) => {
+    const o = { linked_to: null };
+    return (await t.updateTable("users").set(o).where("users.tenant_id", "=", e).where("users.user_id", "=", `${a}|${n}`).where("users.linked_to", "=", `${r}`).execute()).length === 1;
   };
 }
 function Ze(t) {
@@ -263,7 +268,7 @@ function Ze(t) {
   };
 }
 const et = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
-let b = (t = 21) => {
+let O = (t = 21) => {
   let e = "", r = crypto.getRandomValues(new Uint8Array(t));
   for (; t--; )
     e += et[r[t] & 63];
@@ -272,7 +277,7 @@ let b = (t = 21) => {
 function tt(t) {
   return async (e) => {
     const r = {
-      id: e.id || b(),
+      id: e.id || O(),
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       ...e
@@ -283,32 +288,29 @@ function tt(t) {
 function rt(t) {
   return async (e) => {
     const r = await t.selectFrom("tenants").where("tenants.id", "=", e).selectAll().executeTakeFirst();
-    return r ? f(r) : null;
+    return r ? y(r) : null;
   };
 }
 function at(t) {
-  return async (e = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
+  return async (e) => {
     let r = t.selectFrom("tenants");
-    if (e.sort && e.sort.sort_by) {
-      const { ref: l } = t.dynamic;
-      r = r.orderBy(l(e.sort.sort_by), e.sort.sort_order);
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, sort: s, q: i } = e;
+    if (s && s.sort_by) {
+      const { ref: f } = t.dynamic;
+      r = r.orderBy(f(s.sort_by), s.sort_order);
     }
-    e.q && (r = r.where((l) => l.or([l("name", "like", `%${e.q}%`)])));
-    const o = await r.offset(e.page * e.per_page).limit(e.per_page).selectAll().execute();
-    if (!e.include_totals)
+    i && (r = r.where((f) => f.or([f("name", "like", `%${i}%`)])));
+    const u = (await r.offset(a * n).limit(n).selectAll().execute()).map(y);
+    if (!o)
       return {
-        tenants: o
+        tenants: u
       };
-    const { count: n } = await r.select((l) => l.fn.countAll().as("count")).executeTakeFirstOrThrow(), s = v(n);
+    const { count: m } = await r.select((f) => f.fn.countAll().as("count")).executeTakeFirstOrThrow(), h = x(m);
     return {
-      tenants: o.map(f),
-      start: (e.page - 1) * e.per_page,
-      limit: e.per_page,
-      length: s
+      tenants: u,
+      start: a * n,
+      limit: n,
+      length: h
     };
   };
 }
@@ -340,19 +342,19 @@ function me(t) {
 const it = 1024;
 function lt(t) {
   return async (e, r) => {
-    var o, n, s;
+    var n, o, s;
     const a = {
-      id: b(),
+      id: O(),
       ...r,
       user_agent: r.user_agent.slice(0, it)
     };
     return await t.insertInto("logs").values({
       ...a,
       // Truncate long strings to avoid database errors
-      description: (o = a.description) == null ? void 0 : o.substring(0, 256),
+      description: (n = a.description) == null ? void 0 : n.substring(0, 256),
       isMobile: r.isMobile ? 1 : 0,
       tenant_id: e,
-      scope: (n = r.scope) == null ? void 0 : n.join(","),
+      scope: (o = r.scope) == null ? void 0 : o.join(","),
       auth0_client: me(r.auth0_client),
       details: (s = me(r.details)) == null ? void 0 : s.substring(0, 8192)
     }).execute(), a;
@@ -381,28 +383,30 @@ function we(t) {
   };
 }
 function ct(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("logs").where("logs.tenant_id", "=", e);
-    r.q && (a = C(t, a, r.q, ["user_id", "ip"]));
-    let o = a;
-    if (r.sort && r.sort.sort_by) {
-      const { ref: l } = t.dynamic;
-      o = o.orderBy(
-        l(r.sort.sort_by),
-        r.sort.sort_order
-      );
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, sort: s, q: i } = r;
+    let c = t.selectFrom("logs").where("logs.tenant_id", "=", e);
+    i && (c = T(t, c, i, ["user_id", "ip"]));
+    let _ = c;
+    if (s && s.sort_by) {
+      const { ref: f } = t.dynamic;
+      _ = _.orderBy(f(s.sort_by), s.sort_order);
     }
-    o = o.offset(r.page * r.per_page).limit(r.per_page);
-    const n = await o.selectAll().execute(), { count: s } = await a.select((l) => l.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    _ = _.offset(a * n).limit(n);
+    const m = (await _.selectAll().execute()).map(we);
+    if (!o)
+      return {
+        logs: m,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: h } = await c.select((f) => f.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      logs: n.map(we),
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(s)
+      logs: m,
+      start: a * n,
+      limit: n,
+      length: x(h)
     };
   };
 }
@@ -424,10 +428,10 @@ function mt(t) {
     const a = await t.selectFrom("sessions").where("sessions.tenant_id", "=", e).where("sessions.id", "=", r).selectAll().executeTakeFirst();
     if (!a)
       return null;
-    const { tenant_id: o, device: n, clients: s, ...l } = a;
+    const { tenant_id: n, device: o, clients: s, ...i } = a;
     return {
-      ...l,
-      device: JSON.parse(n),
+      ...i,
+      device: JSON.parse(o),
       clients: JSON.parse(s)
     };
   };
@@ -454,42 +458,44 @@ function ht(t) {
 }
 function ft(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       device: a.device ? JSON.stringify(a.device) : void 0,
       clients: a.clients ? JSON.stringify(a.clients) : void 0
     };
-    return !!(await t.updateTable("sessions").set(o).where("tenant_id", "=", e).where("sessions.id", "=", r).execute()).length;
+    return !!(await t.updateTable("sessions").set(n).where("tenant_id", "=", e).where("sessions.id", "=", r).execute()).length;
   };
 }
 function pt(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("sessions").where("sessions.tenant_id", "=", e);
-    r.q && (a = C(t, a, r.q, ["user_id", "session_id"]));
-    let o = a;
-    if (r.sort && r.sort.sort_by) {
-      const { ref: c } = t.dynamic;
-      o = o.orderBy(
-        c(r.sort.sort_by),
-        r.sort.sort_order
-      );
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, sort: s, q: i } = r;
+    let c = t.selectFrom("sessions").where("sessions.tenant_id", "=", e);
+    i && (c = T(t, c, i, ["user_id", "session_id"]));
+    let _ = c;
+    if (s && s.sort_by) {
+      const { ref: g } = t.dynamic;
+      _ = _.orderBy(g(s.sort_by), s.sort_order);
     }
-    o = o.offset(r.page * r.per_page).limit(r.per_page);
-    const n = await o.selectAll().execute(), { count: s } = await a.select((c) => c.fn.countAll().as("count")).executeTakeFirstOrThrow(), l = v(s);
+    _ = _.offset(a * n).limit(n);
+    const m = (await _.selectAll().execute()).map((g) => ({
+      ...g,
+      device: JSON.parse(g.device),
+      clients: JSON.parse(g.clients)
+    }));
+    if (!o)
+      return {
+        sessions: m,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: h } = await c.select((g) => g.fn.countAll().as("count")).executeTakeFirstOrThrow(), f = x(h);
     return {
-      sessions: n.map((c) => ({
-        ...c,
-        device: JSON.parse(c.device),
-        clients: JSON.parse(c.clients)
-      })),
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: l
+      sessions: m,
+      start: a * n,
+      limit: n,
+      length: f
     };
   };
 }
@@ -507,8 +513,8 @@ function wt(t) {
     const a = await t.selectFrom("passwords").where("passwords.tenant_id", "=", e).where("passwords.user_id", "=", r).selectAll().executeTakeFirst();
     if (!a)
       return null;
-    const { tenant_id: o, ...n } = a;
-    return n;
+    const { tenant_id: n, ...o } = a;
+    return o;
   };
 }
 function yt(t) {
@@ -538,22 +544,27 @@ function Nt(t) {
   };
 }
 function Ct(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("codes").where("codes.tenant_id", "=", e);
-    r.q && (a = C(t, a, r.q, ["code", "login_id"]));
-    const n = await a.offset(r.page * r.per_page).limit(r.per_page).selectAll().execute(), { count: s } = await a.select((c) => c.fn.countAll().as("count")).executeTakeFirstOrThrow();
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, q: s } = r;
+    let i = t.selectFrom("codes").where("codes.tenant_id", "=", e);
+    s && (i = T(t, i, s, ["code", "login_id"]));
+    const u = (await i.offset(a * n).limit(n).selectAll().execute()).map((h) => {
+      const { tenant_id: f, ...g } = h;
+      return Ke.parse(y(g));
+    });
+    if (!o)
+      return {
+        codes: u,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: m } = await i.select((h) => h.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      codes: n.map((c) => {
-        const { tenant_id: _, ...u } = c;
-        return Ke.parse(f(u));
-      }),
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(s)
+      codes: u,
+      start: a * n,
+      limit: n,
+      length: x(m)
     };
   };
 }
@@ -574,10 +585,10 @@ function xt(t) {
 }
 function Tt(t) {
   return async (e, r, a) => {
-    let o = t.selectFrom("codes").where("codes.code_id", "=", r).where("codes.code_type", "=", a);
-    e.length && (o = o.where("codes.tenant_id", "=", e));
-    const n = await o.selectAll().executeTakeFirst();
-    return n ? f(n) : null;
+    let n = t.selectFrom("codes").where("codes.code_id", "=", r).where("codes.code_type", "=", a);
+    e.length && (n = n.where("codes.tenant_id", "=", e));
+    const o = await n.selectAll().executeTakeFirst();
+    return o ? y(o) : null;
   };
 }
 function St(t) {
@@ -599,38 +610,38 @@ function kt(t) {
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       ...r,
       disable_sign_ups: r.disable_sign_ups ?? !1
-    }, o = JSON.stringify(r.allowed_origins), n = JSON.stringify(r.callbacks), s = JSON.stringify(r.web_origins), l = JSON.stringify(r.allowed_logout_urls), c = JSON.stringify(r.allowed_clients);
+    }, n = JSON.stringify(r.allowed_origins), o = JSON.stringify(r.callbacks), s = JSON.stringify(r.web_origins), i = JSON.stringify(r.allowed_logout_urls), c = JSON.stringify(r.allowed_clients);
     return await t.insertInto("applications").values({
       ...a,
       tenant_id: e,
       disable_sign_ups: r.disable_sign_ups ? 1 : 0,
       addons: r.addons ? JSON.stringify(r.addons) : "{}",
-      callbacks: n,
-      allowed_origins: o,
+      callbacks: o,
+      allowed_origins: n,
       web_origins: s,
-      allowed_logout_urls: l,
+      allowed_logout_urls: i,
       allowed_clients: c
     }).execute(), a;
   };
 }
 function $t(t) {
   return async (e) => ({
-    applications: (await t.selectFrom("applications").where("applications.tenant_id", "=", e).selectAll().execute()).map((n) => ({
-      ...n,
-      disable_sign_ups: !!n.disable_sign_ups,
-      addons: n.addons ? JSON.parse(n.addons) : {},
-      callbacks: n.callbacks ? JSON.parse(n.callbacks) : [],
-      allowed_origins: n.allowed_origins ? JSON.parse(n.allowed_origins) : [],
-      web_origins: n.web_origins ? JSON.parse(n.web_origins) : [],
-      allowed_logout_urls: n.allowed_logout_urls ? JSON.parse(n.allowed_logout_urls) : [],
-      allowed_clients: n.allowed_logout_urls ? JSON.parse(n.allowed_logout_urls) : []
+    applications: (await t.selectFrom("applications").where("applications.tenant_id", "=", e).selectAll().execute()).map((o) => ({
+      ...o,
+      disable_sign_ups: !!o.disable_sign_ups,
+      addons: o.addons ? JSON.parse(o.addons) : {},
+      callbacks: o.callbacks ? JSON.parse(o.callbacks) : [],
+      allowed_origins: o.allowed_origins ? JSON.parse(o.allowed_origins) : [],
+      web_origins: o.web_origins ? JSON.parse(o.web_origins) : [],
+      allowed_logout_urls: o.allowed_logout_urls ? JSON.parse(o.allowed_logout_urls) : [],
+      allowed_clients: o.allowed_logout_urls ? JSON.parse(o.allowed_logout_urls) : []
     }))
   });
 }
 function It(t) {
   return async (e, r) => {
     const a = await t.selectFrom("applications").where("applications.tenant_id", "=", e).where("applications.id", "=", r).selectAll().executeTakeFirst();
-    return a ? f({
+    return a ? y({
       ...a,
       disable_sign_ups: !!a.disable_sign_ups,
       addons: JSON.parse(a.addons),
@@ -646,7 +657,7 @@ function Dt(t) {
 }
 function Pt(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       allowed_origins: a.allowed_origins ? JSON.stringify(a.allowed_origins) : void 0,
@@ -657,7 +668,7 @@ function Pt(t) {
       addons: a.addons ? JSON.stringify(a.addons) : "{}",
       disable_sign_ups: a.disable_sign_ups ? 1 : 0
     };
-    return await t.updateTable("applications").set(o).where("applications.id", "=", r).where("applications.tenant_id", "=", e).execute(), !0;
+    return await t.updateTable("applications").set(n).where("applications.id", "=", r).where("applications.tenant_id", "=", e).execute(), !0;
   };
 }
 function jt(t) {
@@ -672,7 +683,7 @@ function jt(t) {
 function Ft(t) {
   return async (e, r) => {
     const a = {
-      id: b(),
+      id: O(),
       ...r,
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -686,24 +697,29 @@ function Ft(t) {
   };
 }
 function Mt(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("connections").where("connections.tenant_id", "=", e);
-    r.q && (a = C(t, a, r.q, ["user_id", "ip"]));
-    const s = (await a.offset(r.page * r.per_page).limit(r.per_page).selectAll().execute()).map(
-      (c) => f({
-        ...c,
-        options: JSON.parse(c.options)
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, q: s } = r;
+    let i = t.selectFrom("connections").where("connections.tenant_id", "=", e);
+    s && (i = T(t, i, s, ["user_id", "ip"]));
+    const u = (await i.offset(a * n).limit(n).selectAll().execute()).map(
+      (h) => y({
+        ...h,
+        options: JSON.parse(h.options)
       })
-    ), { count: l } = await a.select((c) => c.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    );
+    if (!o)
+      return {
+        connections: u,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: m } = await i.select((h) => h.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      connections: s,
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(l)
+      connections: u,
+      start: a * n,
+      limit: n,
+      length: x(m)
     };
   };
 }
@@ -713,7 +729,7 @@ function At(t) {
 function zt(t) {
   return async (e, r) => {
     const a = await t.selectFrom("connections").where("connections.tenant_id", "=", e).where("connections.id", "=", r).selectAll().executeTakeFirst();
-    return a ? f({
+    return a ? y({
       ...a,
       options: JSON.parse(a.options)
     }) : null;
@@ -721,13 +737,13 @@ function zt(t) {
 }
 function Lt(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
     };
     return await t.updateTable("connections").set({
-      ...o,
-      options: o.options ? JSON.stringify(o.options) : void 0
+      ...n,
+      options: n.options ? JSON.stringify(n.options) : void 0
     }).where("connections.id", "=", r).where("connections.tenant_id", "=", e).execute(), !0;
   };
 }
@@ -748,13 +764,13 @@ function Jt(t) {
         return null;
       const a = await t.selectFrom("tenants").selectAll().where("id", "=", r.tenant_id).executeTakeFirst();
       if (!a)
-        throw new Y(404, { message: "Tenant not found" });
-      const o = await t.selectFrom("connections").where("tenant_id", "=", r.tenant_id).selectAll().execute();
+        throw new te(404, { message: "Tenant not found" });
+      const n = await t.selectFrom("connections").where("tenant_id", "=", r.tenant_id).selectAll().execute();
       return {
         ...r,
-        connections: o.map(
+        connections: n.map(
           (s) => Ue.parse(
-            f({
+            y({
               ...s,
               options: s.options ? JSON.parse(s.options) : {}
             })
@@ -766,7 +782,7 @@ function Jt(t) {
         web_origins: r.web_origins ? JSON.parse(r.web_origins) : [],
         allowed_logout_urls: r.allowed_logout_urls ? JSON.parse(r.allowed_logout_urls) : [],
         allowed_clients: r.allowed_clients ? JSON.parse(r.allowed_clients) : [],
-        tenant: f(a),
+        tenant: y(a),
         // this is really an integer in the database
         disable_sign_ups: !!r.disable_sign_ups
       };
@@ -774,12 +790,46 @@ function Jt(t) {
   };
 }
 function Rt(t) {
-  return async () => await t.selectFrom("keys").where(
-    (r) => r.or([
-      r("revoked_at", ">", (/* @__PURE__ */ new Date()).toISOString()),
-      r("revoked_at", "is", null)
-    ])
-  ).selectAll().execute();
+  return async (e = {}) => {
+    const {
+      page: r = 0,
+      per_page: a = 100,
+      include_totals: n = !1,
+      sort: o,
+      q: s
+    } = e;
+    let i = t.selectFrom("keys").where(
+      (f) => f.or([
+        f("revoked_at", ">", (/* @__PURE__ */ new Date()).toISOString()),
+        f("revoked_at", "is", null)
+      ])
+    );
+    s && (i = T(t, i, s, [
+      "kid",
+      "connection",
+      "fingerprint",
+      "thumbprint",
+      "type"
+    ]));
+    let c = i.select((f) => f.fn.count("kid").as("count"));
+    const _ = r * a;
+    i = i.limit(a).offset(_), o && (i = i.orderBy(o.sort_by, o.sort_order));
+    const u = await i.selectAll().execute();
+    if (!n)
+      return {
+        signingKeys: u,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const m = await c.executeTakeFirst(), h = x((m == null ? void 0 : m.count) ?? 0);
+    return {
+      signingKeys: u,
+      start: _,
+      limit: a,
+      length: h
+    };
+  };
 }
 function Kt(t) {
   return async (e) => {
@@ -799,7 +849,7 @@ function Bt(t) {
 function Qt(t) {
   return async (e, r) => {
     const a = {
-      custom_domain_id: b(),
+      custom_domain_id: O(),
       status: "pending",
       primary: !1,
       ...r
@@ -833,12 +883,12 @@ function Wt(t) {
 }
 function Gt(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       primary: a.primary ? 1 : 0
     };
-    return (await t.updateTable("custom_domains").set(o).where("custom_domains.tenant_id", "=", e).where("custom_domains.custom_domain_id", "=", r).execute()).length > 0;
+    return (await t.updateTable("custom_domains").set(n).where("custom_domains.tenant_id", "=", e).where("custom_domains.custom_domain_id", "=", r).execute()).length > 0;
   };
 }
 function Ht(t) {
@@ -867,22 +917,22 @@ function Xt(t) {
       return null;
     const {
       tenant_id: a,
-      colors_primary: o,
-      colors_page_background_type: n,
+      colors_primary: n,
+      colors_page_background_type: o,
       colors_page_background_start: s,
-      colors_page_background_end: l,
+      colors_page_background_end: i,
       colors_page_background_angle_dev: c,
       font_url: _,
       ...u
     } = r;
-    return f({
+    return y({
       ...u,
       colors: {
-        primary: o,
+        primary: n,
         page_background: {
-          type: n,
+          type: o,
           start: s,
-          end: l,
+          end: i,
           angle_deg: c
         }
       },
@@ -892,26 +942,26 @@ function Xt(t) {
 }
 function Zt(t) {
   return async (e, r) => {
-    var s, l, c, _, u, h, g, I, D, O, U, ne, oe, se, ie, le, ce, de;
-    const { colors: a, font: o, ...n } = r;
+    var s, i, c, _, u, m, h, f, g, w, b, D, M, P, V, le, ce, de;
+    const { colors: a, font: n, ...o } = r;
     try {
       await t.insertInto("branding").values({
-        ...n,
+        ...o,
         colors_primary: a == null ? void 0 : a.primary,
-        colors_page_background_type: (l = (s = r.colors) == null ? void 0 : s.page_background) == null ? void 0 : l.type,
+        colors_page_background_type: (i = (s = r.colors) == null ? void 0 : s.page_background) == null ? void 0 : i.type,
         colors_page_background_start: (_ = (c = r.colors) == null ? void 0 : c.page_background) == null ? void 0 : _.start,
-        colors_page_background_end: (h = (u = r.colors) == null ? void 0 : u.page_background) == null ? void 0 : h.end,
-        colors_page_background_angle_dev: (I = (g = r.colors) == null ? void 0 : g.page_background) == null ? void 0 : I.angle_deg,
-        font_url: (D = r.font) == null ? void 0 : D.url,
+        colors_page_background_end: (m = (u = r.colors) == null ? void 0 : u.page_background) == null ? void 0 : m.end,
+        colors_page_background_angle_dev: (f = (h = r.colors) == null ? void 0 : h.page_background) == null ? void 0 : f.angle_deg,
+        font_url: (g = r.font) == null ? void 0 : g.url,
         tenant_id: e
       }).execute();
     } catch {
       await t.updateTable("branding").set({
-        ...n,
+        ...o,
         colors_primary: a == null ? void 0 : a.primary,
-        colors_page_background_type: (U = (O = r.colors) == null ? void 0 : O.page_background) == null ? void 0 : U.type,
-        colors_page_background_start: (oe = (ne = r.colors) == null ? void 0 : ne.page_background) == null ? void 0 : oe.start,
-        colors_page_background_end: (ie = (se = r.colors) == null ? void 0 : se.page_background) == null ? void 0 : ie.end,
+        colors_page_background_type: (b = (w = r.colors) == null ? void 0 : w.page_background) == null ? void 0 : b.type,
+        colors_page_background_start: (M = (D = r.colors) == null ? void 0 : D.page_background) == null ? void 0 : M.start,
+        colors_page_background_end: (V = (P = r.colors) == null ? void 0 : P.page_background) == null ? void 0 : V.end,
         colors_page_background_angle_dev: (ce = (le = r.colors) == null ? void 0 : le.page_background) == null ? void 0 : ce.angle_deg,
         font_url: (de = r.font) == null ? void 0 : de.url
       }).where("tenant_id", "=", e).execute();
@@ -925,33 +975,38 @@ function er(t) {
   };
 }
 function tr(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("hooks").where("hooks.tenant_id", "=", e);
-    r.q && (a = C(t, a, r.q, ["url", "form_id"]));
-    const n = await a.offset(r.page * r.per_page).limit(r.per_page).selectAll().execute(), { count: s } = await a.select((c) => c.fn.countAll().as("count")).executeTakeFirstOrThrow();
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, q: s } = r;
+    let i = t.selectFrom("hooks").where("hooks.tenant_id", "=", e);
+    s && (i = T(t, i, s, ["url", "form_id"]));
+    const u = (await i.offset(a * n).limit(n).selectAll().execute()).map((h) => {
+      const { tenant_id: f, enabled: g, synchronous: w, ...b } = h;
+      return y({
+        ...b,
+        enabled: !!g,
+        synchronous: !!w
+      });
+    });
+    if (!o)
+      return {
+        hooks: u,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: m } = await i.select((h) => h.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      hooks: n.map((c) => {
-        const { tenant_id: _, enabled: u, synchronous: h, ...g } = c;
-        return f({
-          ...g,
-          enabled: !!u,
-          synchronous: !!h
-        });
-      }),
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(s)
+      hooks: u,
+      start: a * n,
+      limit: n,
+      length: x(m)
     };
   };
 }
 function rr(t) {
   return async (e, r) => {
     const a = await t.selectFrom("hooks").where("hooks.tenant_id", "=", e).where("hooks.hook_id", "=", r).selectAll().executeTakeFirst();
-    return a ? f({
+    return a ? y({
       ...a,
       enabled: !!a.enabled,
       synchronous: !!a.synchronous
@@ -964,7 +1019,7 @@ function ar(t) {
 function nr(t) {
   return async (e, r) => {
     const a = {
-      hook_id: b(),
+      hook_id: O(),
       ...r,
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -979,13 +1034,13 @@ function nr(t) {
 }
 function or(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       enabled: a.enabled !== void 0 ? a.enabled ? 1 : 0 : void 0,
       synchronous: a.enabled !== void 0 ? a.synchronous ? 1 : 0 : void 0
     };
-    return await t.updateTable("hooks").set(o).where("hooks.hook_id", "=", r).where("hooks.tenant_id", "=", e).execute(), !0;
+    return await t.updateTable("hooks").set(n).where("hooks.hook_id", "=", r).where("hooks.tenant_id", "=", e).execute(), !0;
   };
 }
 function sr(t) {
@@ -1000,15 +1055,15 @@ function sr(t) {
 function ir(t) {
   return async (e, r) => {
     const a = {
-      themeId: b(),
+      themeId: O(),
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       ...r
-    }, o = {
+    }, n = {
       ...a,
       tenant_id: e
     };
-    return await t.insertInto("themes").values(A(o)).execute(), a;
+    return await t.insertInto("themes").values(J(n)).execute(), a;
   };
 }
 function lr(t) {
@@ -1019,7 +1074,7 @@ function cr(t) {
     const a = await t.selectFrom("themes").where("themes.tenant_id", "=", e).where("themes.themeId", "=", r).selectAll().executeTakeFirst();
     if (!a)
       return null;
-    const o = {
+    const n = {
       ...a,
       borders_show_widget_shadow: !!a.borders_show_widget_shadow,
       fonts_body_text_bold: !!a.fonts_body_text_bold,
@@ -1029,8 +1084,8 @@ function cr(t) {
       fonts_subtitle_bold: !!a.fonts_subtitle_bold,
       fonts_title_bold: !!a.fonts_title_bold
     };
-    return f(
-      ge(o, [
+    return y(
+      ge(n, [
         "widget",
         "colors",
         "borders",
@@ -1042,11 +1097,11 @@ function cr(t) {
 }
 function dr(t) {
   return async (e, r, a) => {
-    const o = A({
+    const n = J({
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
     });
-    return await t.updateTable("themes").set(o).where("themes.themeId", "=", r).where("themes.tenant_id", "=", e).execute(), !0;
+    return await t.updateTable("themes").set(n).where("themes.themeId", "=", r).where("themes.tenant_id", "=", e).execute(), !0;
   };
 }
 function ur(t) {
@@ -1062,7 +1117,7 @@ function mr(t) {
     const a = await t.selectFrom("login_sessions").where("login_sessions.id", "=", r).selectAll().executeTakeFirst();
     return a ? Be.parse(
       ge(
-        f({
+        y({
           ...a,
           login_completed: !!a.login_completed
         }),
@@ -1073,24 +1128,24 @@ function mr(t) {
 }
 function _r(t) {
   return async (e, r) => {
-    var o;
+    var n;
     const a = {
-      id: b(),
+      id: O(),
       ...r,
-      authorization_url: (o = r.authorization_url) == null ? void 0 : o.slice(0, 1024),
+      authorization_url: (n = r.authorization_url) == null ? void 0 : n.slice(0, 1024),
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString(),
       login_completed: !!r.login_completed
     };
     return await t.insertInto("login_sessions").values({
-      ...A(a),
+      ...J(a),
       tenant_id: e
     }).execute(), a;
   };
 }
 function hr(t) {
   return async (e, r, a) => (await t.updateTable("login_sessions").set(
-    A({
+    J({
       ...a
     })
   ).where("login_sessions.id", "=", r).where("login_sessions.tenant_id", "=", e).execute()).length === 1;
@@ -1109,7 +1164,7 @@ function pr(t) {
 function gr(t) {
   return async (e) => {
     const [r] = await t.selectFrom("prompt_settings").where("prompt_settings.tenant_id", "=", e).selectAll().execute();
-    return f({
+    return y({
       identifier_first: !!(r != null && r.identifier_first),
       password_first: !!(r != null && r.password_first),
       webauthn_platform_first_factor: !!(r != null && r.webauthn_platform_first_factor),
@@ -1118,7 +1173,7 @@ function gr(t) {
   };
 }
 function he(t) {
-  return f({
+  return y({
     ...t,
     webauthn_platform_first_factor: t.webauthn_platform_first_factor ? !!t.webauthn_platform_first_factor : void 0,
     identifier_first: t.identifier_first ? !!t.identifier_first : void 0,
@@ -1152,38 +1207,38 @@ function vr(t) {
       return null;
     const {
       tenant_id: a,
-      credentials: o,
-      settings: n,
+      credentials: n,
+      settings: o,
       enabled: s,
-      ...l
+      ...i
     } = r;
-    return f({
-      ...l,
-      credentials: JSON.parse(o),
-      settings: JSON.parse(n),
+    return y({
+      ...i,
+      credentials: JSON.parse(n),
+      settings: JSON.parse(o),
       enabled: !!s
     });
   };
 }
 function Nr(t) {
   return async (e, r) => {
-    const { credentials: a, settings: o, enabled: n, ...s } = r;
+    const { credentials: a, settings: n, enabled: o, ...s } = r;
     await t.updateTable("email_providers").set({
       ...s,
       credentials: a ? JSON.stringify(a) : void 0,
-      settings: o ? JSON.stringify(o) : void 0,
-      enabled: n !== void 0 ? n ? 1 : 0 : void 0
+      settings: n ? JSON.stringify(n) : void 0,
+      enabled: o !== void 0 ? o ? 1 : 0 : void 0
     }).where("tenant_id", "=", e).execute();
   };
 }
 function Cr(t) {
   return async (e, r) => {
-    const { credentials: a, settings: o, enabled: n, ...s } = r;
+    const { credentials: a, settings: n, enabled: o, ...s } = r;
     await t.insertInto("email_providers").values({
       ...s,
-      enabled: n ? 1 : 0,
+      enabled: o ? 1 : 0,
       credentials: JSON.stringify(a),
-      settings: JSON.stringify(o),
+      settings: JSON.stringify(n),
       tenant_id: e,
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -1228,43 +1283,45 @@ function Sr(t) {
 }
 function Or(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       device: a.device ? JSON.stringify(a.device) : void 0,
       resource_servers: a.resource_servers ? JSON.stringify(a.resource_servers) : void 0,
       rotating: a.rotating ? 1 : 0
     };
-    return !!(await t.updateTable("refresh_tokens").set(o).where("tenant_id", "=", e).where("refresh_tokens.id", "=", r).execute()).length;
+    return !!(await t.updateTable("refresh_tokens").set(n).where("tenant_id", "=", e).where("refresh_tokens.id", "=", r).execute()).length;
   };
 }
 function kr(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", e);
-    r.q && (a = C(t, a, r.q, ["token", "session_id"]));
-    let o = a;
-    if (r.sort && r.sort.sort_by) {
-      const { ref: c } = t.dynamic;
-      o = o.orderBy(
-        c(r.sort.sort_by),
-        r.sort.sort_order
-      );
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, sort: s, q: i } = r;
+    let c = t.selectFrom("refresh_tokens").where("refresh_tokens.tenant_id", "=", e);
+    i && (c = T(t, c, i, ["token", "session_id"]));
+    let _ = c;
+    if (s && s.sort_by) {
+      const { ref: g } = t.dynamic;
+      _ = _.orderBy(g(s.sort_by), s.sort_order);
     }
-    o = o.offset(r.page * r.per_page).limit(r.per_page);
-    const n = await o.selectAll().execute(), { count: s } = await a.select((c) => c.fn.countAll().as("count")).executeTakeFirstOrThrow(), l = v(s);
+    _ = _.offset(a * n).limit(n);
+    const m = (await _.selectAll().execute()).map((g) => ({
+      ...g,
+      rotating: !!g.rotating,
+      device: g.device ? JSON.parse(g.device) : {},
+      resource_servers: g.resource_servers ? JSON.parse(g.resource_servers) : []
+    }));
+    if (!o)
+      return {
+        refresh_tokens: m,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: h } = await c.select((g) => g.fn.countAll().as("count")).executeTakeFirstOrThrow(), f = x(h);
     return {
-      refresh_tokens: n.map((c) => ({
-        ...c,
-        rotating: !!c.rotating,
-        device: c.device ? JSON.parse(c.device) : {},
-        resource_servers: c.resource_servers ? JSON.parse(c.resource_servers) : []
-      })),
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: l
+      refresh_tokens: m,
+      start: a * n,
+      limit: n,
+      length: f
     };
   };
 }
@@ -1285,32 +1342,32 @@ function Ir(t) {
       Date.now() - 1e3 * 60 * 60 * 24 * 30 * 3
     ).toISOString();
     console.log("delete codes"), await t.deleteFrom("codes").where("created_at", "<", e).limit(1e5).execute(), console.log("delete sessions"), await t.deleteFrom("login_sessions").where("created_at", "<", r).where("session_id", "is", null).limit(1e5).execute(), console.log("delete logs"), await t.deleteFrom("logs").where("date", "<", a).limit(1e5).execute(), console.log("delete refresh tokens"), await t.deleteFrom("refresh_tokens").where(
-      (n) => n.or([
-        n("expires_at", "<", r),
-        n("idle_expires_at", "<", r)
+      (o) => o.or([
+        o("expires_at", "<", r),
+        o("idle_expires_at", "<", r)
       ])
     ).limit(1e4).execute(), console.log("delete sessions");
-    const o = await t.selectFrom("sessions").select("id").where(
-      (n) => n.or([
-        n("expires_at", "<", r),
-        n("idle_expires_at", "<", r)
+    const n = await t.selectFrom("sessions").select("id").where(
+      (o) => o.or([
+        o("expires_at", "<", r),
+        o("idle_expires_at", "<", r)
       ])
     ).where(
       "id",
       "not in",
       t.selectFrom("refresh_tokens").select("session_id")
     ).limit(1e5).execute();
-    o.length > 0 && await t.deleteFrom("sessions").where(
+    n.length > 0 && await t.deleteFrom("sessions").where(
       "id",
       "in",
-      o.map((n) => n.id)
+      n.map((o) => o.id)
     ).execute(), console.log("cleanup complete");
   };
 }
 function Dr(t) {
   return async (e, r) => {
-    const a = Q.parse({
-      id: b(),
+    const a = G.parse({
+      id: O(),
       ...r,
       created_at: (/* @__PURE__ */ new Date()).toISOString(),
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
@@ -1322,41 +1379,46 @@ function Dr(t) {
       start: JSON.stringify(a.start || {}),
       ending: JSON.stringify(a.ending || {}),
       tenant_id: e
-    }).execute(), Q.parse(a);
+    }).execute(), G.parse(a);
   };
 }
 function Pr(t) {
-  return async (e, r = {
-    page: 0,
-    per_page: 50,
-    include_totals: !1
-  }) => {
-    let a = t.selectFrom("forms").where("tenant_id", "=", e);
-    r != null && r.q && (a = C(t, a, r.q, []));
-    const s = (await a.offset(r.page * r.per_page).limit(r.per_page).selectAll().execute()).map((c) => {
-      const _ = { ...c };
-      if (typeof _.nodes == "string")
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, q: s } = r;
+    let i = t.selectFrom("forms").where("tenant_id", "=", e);
+    s && (i = T(t, i, s, []));
+    const u = (await i.offset(a * n).limit(n).selectAll().execute()).map((h) => {
+      const f = { ...h };
+      if (typeof f.nodes == "string")
         try {
-          _.nodes = JSON.parse(_.nodes);
+          f.nodes = JSON.parse(f.nodes);
         } catch {
         }
-      if (typeof _.start == "string")
+      if (typeof f.start == "string")
         try {
-          _.start = JSON.parse(_.start);
+          f.start = JSON.parse(f.start);
         } catch {
         }
-      if (typeof _.ending == "string")
+      if (typeof f.ending == "string")
         try {
-          _.ending = JSON.parse(_.ending);
+          f.ending = JSON.parse(f.ending);
         } catch {
         }
-      return Q.parse(f(_));
-    }), { count: l } = await a.select((c) => c.fn.countAll().as("count")).executeTakeFirstOrThrow();
+      return G.parse(y(f));
+    });
+    if (!o)
+      return {
+        forms: u,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: m } = await i.select((h) => h.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      forms: s,
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(l)
+      forms: u,
+      start: a * n,
+      limit: n,
+      length: x(m)
     };
   };
 }
@@ -1370,34 +1432,34 @@ function Fr(t) {
   return async (e, r) => {
     const a = await t.selectFrom("forms").selectAll().where("forms.id", "=", r).where("tenant_id", "=", e).executeTakeFirst();
     if (!a) return null;
-    const o = { ...a };
-    if (typeof o.nodes == "string")
+    const n = { ...a };
+    if (typeof n.nodes == "string")
       try {
-        o.nodes = JSON.parse(o.nodes);
+        n.nodes = JSON.parse(n.nodes);
       } catch {
       }
-    if (typeof o.start == "string")
+    if (typeof n.start == "string")
       try {
-        o.start = JSON.parse(o.start);
+        n.start = JSON.parse(n.start);
       } catch {
       }
-    if (typeof o.ending == "string")
+    if (typeof n.ending == "string")
       try {
-        o.ending = JSON.parse(o.ending);
+        n.ending = JSON.parse(n.ending);
       } catch {
       }
-    return Q.parse(f(o));
+    return G.parse(y(n));
   };
 }
 function Mr(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
     };
-    a.nodes && (o.nodes = JSON.stringify(a.nodes)), a.start && (o.start = JSON.stringify(a.start)), a.ending && (o.ending = JSON.stringify(a.ending));
-    const { numUpdatedRows: n } = await t.updateTable("forms").set(o).where("id", "=", r).where("tenant_id", "=", e).executeTakeFirst();
-    return n > 0;
+    a.nodes && (n.nodes = JSON.stringify(a.nodes)), a.start && (n.start = JSON.stringify(a.start)), a.ending && (n.ending = JSON.stringify(a.ending));
+    const { numUpdatedRows: o } = await t.updateTable("forms").set(n).where("id", "=", r).where("tenant_id", "=", e).executeTakeFirst();
+    return o > 0;
   };
 }
 function Ar(t) {
@@ -1411,22 +1473,22 @@ function Ar(t) {
 }
 function zr(t) {
   return async (e, r) => {
-    const a = (/* @__PURE__ */ new Date()).toISOString(), o = {
-      id: b(),
+    const a = (/* @__PURE__ */ new Date()).toISOString(), n = {
+      id: O(),
       ...r,
       created_at: a,
       updated_at: a
-    }, n = qe.parse(o), {
+    }, o = qe.parse(n), {
       verificationKey: s,
-      scopes: l,
+      scopes: i,
       options: c,
       skip_consent_for_verifiable_first_party_clients: _,
       allow_offline_access: u,
-      ...h
-    } = n, g = {
-      ...h,
+      ...m
+    } = o, h = {
+      ...m,
       tenant_id: e,
-      scopes: l ? JSON.stringify(l) : "[]",
+      scopes: i ? JSON.stringify(i) : "[]",
       options: c ? JSON.stringify(c) : "{}",
       skip_consent_for_verifiable_first_party_clients: _ ? 1 : 0,
       allow_offline_access: u ? 1 : 0,
@@ -1434,70 +1496,79 @@ function zr(t) {
       created_at: a,
       updated_at: a
     };
-    return await t.insertInto("resource_servers").values(g).execute(), f(n);
+    return await t.insertInto("resource_servers").values(h).execute(), y(o);
   };
 }
 function Lr(t) {
   return async (e, r) => {
     const a = await t.selectFrom("resource_servers").selectAll().where("tenant_id", "=", e).where("id", "=", r).executeTakeFirst();
     if (!a) return null;
-    const o = a, {
-      verification_key: n,
+    const n = a, {
+      verification_key: o,
       scopes: s,
-      options: l,
+      options: i,
       skip_consent_for_verifiable_first_party_clients: c,
       allow_offline_access: _,
       ...u
-    } = o, h = {
+    } = n, m = {
       ...u,
       scopes: s ? JSON.parse(s) : [],
-      options: l ? JSON.parse(l) : {},
+      options: i ? JSON.parse(i) : {},
       skip_consent_for_verifiable_first_party_clients: !!c,
       allow_offline_access: !!_,
       // Convert verification_key back to verificationKey for API
-      verificationKey: n
+      verificationKey: o
     };
-    return f(h);
+    return y(m);
   };
 }
 function Er(t) {
-  return async (e, r = { page: 0, per_page: 50, include_totals: !1 }) => {
-    let a = t.selectFrom("resource_servers").where("resource_servers.tenant_id", "=", e);
-    if (r.q) {
-      const c = r.q.trim(), _ = c.split(/\s+/), u = _.length === 1 ? _[0] : void 0, h = u ? u.match(/^(-)?(name|identifier):(.*)$/) : null, g = h ? h[3] : "", I = /^(>=|>|<=|<)/.test(g || "");
-      if (h && !I) {
-        const D = !!h[1], O = h[2] === "name" ? "resource_servers.name" : "resource_servers.identifier";
-        a = D ? a.where(O, "not like", `%${g}%`) : a.where(O, "like", `%${g}%`);
+  return async (e, r = {}) => {
+    const { page: a = 0, per_page: n = 50, include_totals: o = !1, q: s } = r;
+    let i = t.selectFrom("resource_servers").where("resource_servers.tenant_id", "=", e);
+    if (s) {
+      const h = s.trim(), f = h.split(/\s+/), g = f.length === 1 ? f[0] : void 0, w = g ? g.match(/^(-)?(name|identifier):(.*)$/) : null, b = w ? w[3] : "", D = /^(>=|>|<=|<)/.test(b || "");
+      if (w && !D) {
+        const M = !!w[1], P = w[2] === "name" ? "resource_servers.name" : "resource_servers.identifier";
+        i = M ? i.where(P, "not like", `%${b}%`) : i.where(P, "like", `%${b}%`);
       } else
-        a = C(t, a, c, [
+        i = T(t, i, h, [
           "resource_servers.name",
           "resource_servers.identifier"
         ]);
     }
-    const s = (await a.offset(r.page * r.per_page).limit(r.per_page).selectAll().execute()).map((c) => {
-      const _ = c, {
-        verification_key: u,
-        scopes: h,
-        options: g,
-        skip_consent_for_verifiable_first_party_clients: I,
-        allow_offline_access: D,
-        ...O
-      } = _, U = {
-        ...O,
-        scopes: h ? JSON.parse(h) : [],
-        options: g ? JSON.parse(g) : {},
-        skip_consent_for_verifiable_first_party_clients: !!I,
-        allow_offline_access: !!D,
+    const u = (await i.offset(a * n).limit(n).selectAll().execute()).map((h) => {
+      const f = h, {
+        verification_key: g,
+        scopes: w,
+        options: b,
+        skip_consent_for_verifiable_first_party_clients: D,
+        allow_offline_access: M,
+        ...P
+      } = f, V = {
+        ...P,
+        scopes: w ? JSON.parse(w) : [],
+        options: b ? JSON.parse(b) : {},
+        skip_consent_for_verifiable_first_party_clients: !!D,
+        allow_offline_access: !!M,
         // Convert verification_key back to verificationKey for API
-        verificationKey: u
+        verificationKey: g
       };
-      return f(U);
-    }), { count: l } = await a.select((c) => c.fn.countAll().as("count")).executeTakeFirstOrThrow();
+      return y(V);
+    });
+    if (!o)
+      return {
+        resource_servers: u,
+        start: 0,
+        limit: 0,
+        length: 0
+      };
+    const { count: m } = await i.select((h) => h.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      resource_servers: s,
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(l)
+      resource_servers: u,
+      start: a * n,
+      limit: n,
+      length: x(m)
     };
   };
 }
@@ -1510,19 +1581,19 @@ function Jr(t) {
 function Rr(t) {
   return async (e, r, a) => {
     const {
-      verificationKey: o,
-      scopes: n,
+      verificationKey: n,
+      scopes: o,
       options: s,
-      skip_consent_for_verifiable_first_party_clients: l,
+      skip_consent_for_verifiable_first_party_clients: i,
       allow_offline_access: c,
       ..._
     } = a, u = {
       ..._,
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
     };
-    o !== void 0 && (u.verification_key = o), n !== void 0 && (u.scopes = JSON.stringify(n)), s !== void 0 && (u.options = JSON.stringify(s)), l !== void 0 && (u.skip_consent_for_verifiable_first_party_clients = l ? 1 : 0), c !== void 0 && (u.allow_offline_access = c ? 1 : 0);
-    const h = await t.updateTable("resource_servers").set(u).where("tenant_id", "=", e).where("id", "=", r).executeTakeFirst();
-    return Number(h.numUpdatedRows) > 0;
+    n !== void 0 && (u.verification_key = n), o !== void 0 && (u.scopes = JSON.stringify(o)), s !== void 0 && (u.options = JSON.stringify(s)), i !== void 0 && (u.skip_consent_for_verifiable_first_party_clients = i ? 1 : 0), c !== void 0 && (u.allow_offline_access = c ? 1 : 0);
+    const m = await t.updateTable("resource_servers").set(u).where("tenant_id", "=", e).where("id", "=", r).executeTakeFirst();
+    return Number(m.numUpdatedRows) > 0;
   };
 }
 function Kr(t) {
@@ -1536,15 +1607,15 @@ function Kr(t) {
 }
 function Ur(t) {
   return async (e, r) => {
-    const a = (/* @__PURE__ */ new Date()).toISOString(), o = b(), n = {
-      id: o,
+    const a = (/* @__PURE__ */ new Date()).toISOString(), n = O(), o = {
+      id: n,
       ...r,
       tenant_id: e,
       created_at: a,
       updated_at: a
     };
-    return await t.insertInto("roles").values(n).execute(), {
-      id: o,
+    return await t.insertInto("roles").values(o).execute(), {
+      id: n,
       ...r,
       created_at: a,
       updated_at: a
@@ -1560,25 +1631,34 @@ function Br(t) {
   };
 }
 function Qr(t) {
-  return async (e, r = { page: 0, per_page: 50, include_totals: !1 }) => {
+  return async (e, r) => {
     let a = t.selectFrom("roles").where("roles.tenant_id", "=", e);
-    r.q && (a = C(t, a, r.q, ["name"]));
-    const n = await a.offset(r.page * r.per_page).limit(r.per_page).selectAll().execute(), { count: s } = await a.select((l) => l.fn.countAll().as("count")).executeTakeFirstOrThrow();
+    const { page: n = 0, per_page: o = 50, include_totals: s = !1 } = r;
+    r.q && (a = T(t, a, r.q, ["name"]));
+    const c = await a.offset(n * o).limit(o).selectAll().execute();
+    if (!s)
+      return {
+        roles: c,
+        start: n * o,
+        limit: o,
+        length: c.length
+      };
+    const { count: _ } = await a.select((u) => u.fn.countAll().as("count")).executeTakeFirstOrThrow();
     return {
-      roles: n,
-      start: r.page * r.per_page,
-      limit: r.per_page,
-      length: v(s)
+      roles: c,
+      start: n * o,
+      limit: o,
+      length: x(_)
     };
   };
 }
 function qr(t) {
   return async (e, r, a) => {
-    const o = {
+    const n = {
       ...a,
       updated_at: (/* @__PURE__ */ new Date()).toISOString()
-    }, n = await t.updateTable("roles").set(o).where("roles.tenant_id", "=", e).where("roles.id", "=", r).executeTakeFirst();
-    return Number(n.numUpdatedRows) > 0;
+    }, o = await t.updateTable("roles").set(n).where("roles.tenant_id", "=", e).where("roles.id", "=", r).executeTakeFirst();
+    return Number(o.numUpdatedRows) > 0;
   };
 }
 function Vr(t) {
@@ -1599,31 +1679,31 @@ function Wr(t) {
 function Gr(t) {
   return async (e, r, a) => {
     if (a.length === 0) return !0;
-    const o = (/* @__PURE__ */ new Date()).toISOString();
+    const n = (/* @__PURE__ */ new Date()).toISOString();
     try {
-      for (const n of a) {
-        if (n.role_id !== r)
+      for (const o of a) {
+        if (o.role_id !== r)
           throw new Error(
-            `Permission role_id ${n.role_id} does not match expected role_id ${r}`
+            `Permission role_id ${o.role_id} does not match expected role_id ${r}`
           );
         const s = {
           tenant_id: e,
-          role_id: n.role_id,
-          resource_server_identifier: n.resource_server_identifier,
-          permission_name: n.permission_name,
-          created_at: o
+          role_id: o.role_id,
+          resource_server_identifier: o.resource_server_identifier,
+          permission_name: o.permission_name,
+          created_at: n
         };
         try {
           await t.insertInto("role_permissions").values(s).execute();
-        } catch (l) {
-          if (l.code === "SQLITE_CONSTRAINT_PRIMARYKEY" || l.code === "SQLITE_CONSTRAINT_UNIQUE")
+        } catch (i) {
+          if (i.code === "SQLITE_CONSTRAINT_PRIMARYKEY" || i.code === "SQLITE_CONSTRAINT_UNIQUE")
             continue;
-          throw l;
+          throw i;
         }
       }
       return !0;
-    } catch (n) {
-      return console.error("Error assigning role permissions:", n), !1;
+    } catch (o) {
+      return console.error("Error assigning role permissions:", o), !1;
     }
   };
 }
@@ -1633,46 +1713,51 @@ function Hr(t) {
     try {
       return (await Promise.all(
         a.map(
-          (n) => t.deleteFrom("role_permissions").where("tenant_id", "=", e).where("role_id", "=", r).where(
+          (o) => t.deleteFrom("role_permissions").where("tenant_id", "=", e).where("role_id", "=", r).where(
             "resource_server_identifier",
             "=",
-            n.resource_server_identifier
-          ).where("permission_name", "=", n.permission_name).executeTakeFirst()
+            o.resource_server_identifier
+          ).where("permission_name", "=", o.permission_name).executeTakeFirst()
         )
-      )).some((n) => Number(n.numDeletedRows) > 0);
-    } catch (o) {
-      return console.error("Error removing role permissions:", o), !1;
+      )).some((o) => Number(o.numDeletedRows) > 0);
+    } catch (n) {
+      return console.error("Error removing role permissions:", n), !1;
     }
   };
 }
 function Yr(t) {
-  return async (e, r, a = { page: 0, per_page: 50, include_totals: !1 }) => (await t.selectFrom("role_permissions").leftJoin(
-    "resource_servers",
-    (s) => s.onRef(
-      "role_permissions.tenant_id",
-      "=",
-      "resource_servers.tenant_id"
-    ).onRef(
+  return async (e, r, a = {}) => {
+    const { page: n = 0, per_page: o = 50, include_totals: s = !1 } = a;
+    let i = t.selectFrom("role_permissions").leftJoin(
+      "resource_servers",
+      (m) => m.onRef(
+        "role_permissions.tenant_id",
+        "=",
+        "resource_servers.tenant_id"
+      ).onRef(
+        "role_permissions.resource_server_identifier",
+        "=",
+        "resource_servers.id"
+      )
+    ).select([
+      "role_permissions.role_id",
       "role_permissions.resource_server_identifier",
-      "=",
-      "resource_servers.id"
-    )
-  ).select([
-    "role_permissions.role_id",
-    "role_permissions.resource_server_identifier",
-    "role_permissions.permission_name",
-    "role_permissions.created_at",
-    "resource_servers.name as resource_server_name"
-  ]).where("role_permissions.tenant_id", "=", e).where("role_permissions.role_id", "=", r).offset(a.page * a.per_page).limit(a.per_page).execute()).map((s) => ({
-    role_id: s.role_id,
-    resource_server_identifier: s.resource_server_identifier,
-    resource_server_name: s.resource_server_name || s.resource_server_identifier,
-    // Fallback to identifier if name is null
-    permission_name: s.permission_name,
-    description: null,
-    // No description available from role_permissions directly
-    created_at: s.created_at
-  }));
+      "role_permissions.permission_name",
+      "role_permissions.created_at",
+      "resource_servers.name as resource_server_name"
+    ]).where("role_permissions.tenant_id", "=", e).where("role_permissions.role_id", "=", r);
+    const u = (await i.offset(n * o).limit(o).execute()).map((m) => ({
+      role_id: m.role_id,
+      resource_server_identifier: m.resource_server_identifier,
+      resource_server_name: m.resource_server_name || m.resource_server_identifier,
+      // Fallback to identifier if name is null
+      permission_name: m.permission_name,
+      description: null,
+      // No description available from role_permissions directly
+      created_at: m.created_at
+    }));
+    return s && await i.select((m) => m.fn.countAll().as("count")).executeTakeFirstOrThrow(), u;
+  };
 }
 function Xr(t) {
   return {
@@ -1684,27 +1769,27 @@ function Xr(t) {
 function Zr(t) {
   return async (e, r, a) => {
     if (a.length === 0) return !0;
-    const o = (/* @__PURE__ */ new Date()).toISOString();
+    const n = (/* @__PURE__ */ new Date()).toISOString();
     try {
-      for (const n of a) {
+      for (const o of a) {
         const s = {
           tenant_id: e,
           user_id: r,
-          resource_server_identifier: n.resource_server_identifier,
-          permission_name: n.permission_name,
-          created_at: o
+          resource_server_identifier: o.resource_server_identifier,
+          permission_name: o.permission_name,
+          created_at: n
         };
         try {
           await t.insertInto("user_permissions").values(s).execute();
-        } catch (l) {
-          if (l.code === "SQLITE_CONSTRAINT_PRIMARYKEY" || l.code === "SQLITE_CONSTRAINT_UNIQUE")
+        } catch (i) {
+          if (i.code === "SQLITE_CONSTRAINT_PRIMARYKEY" || i.code === "SQLITE_CONSTRAINT_UNIQUE")
             continue;
-          throw l;
+          throw i;
         }
       }
       return !0;
-    } catch (n) {
-      return console.error("Error assigning user permissions:", n), !1;
+    } catch (o) {
+      return console.error("Error assigning user permissions:", o), !1;
     }
   };
 }
@@ -1712,22 +1797,22 @@ function ea(t) {
   return async (e, r, a) => {
     if (a.length === 0) return !0;
     try {
-      for (const o of a)
+      for (const n of a)
         await t.deleteFrom("user_permissions").where("tenant_id", "=", e).where("user_id", "=", r).where(
           "resource_server_identifier",
           "=",
-          o.resource_server_identifier
-        ).where("permission_name", "=", o.permission_name).execute();
+          n.resource_server_identifier
+        ).where("permission_name", "=", n.permission_name).execute();
       return !0;
-    } catch (o) {
-      return console.error("Error removing user permissions:", o), !1;
+    } catch (n) {
+      return console.error("Error removing user permissions:", n), !1;
     }
   };
 }
 function ta(t) {
   return async (e, r, a) => (await t.selectFrom("user_permissions").leftJoin(
     "resource_servers",
-    (n) => n.onRef(
+    (o) => o.onRef(
       "user_permissions.tenant_id",
       "=",
       "resource_servers.tenant_id"
@@ -1742,15 +1827,15 @@ function ta(t) {
     "resource_servers.name as resource_server_name",
     "user_permissions.user_id",
     "user_permissions.created_at"
-  ]).where("user_permissions.tenant_id", "=", e).where("user_permissions.user_id", "=", r).execute()).map((n) => ({
-    resource_server_identifier: n.resource_server_identifier,
-    permission_name: n.permission_name,
+  ]).where("user_permissions.tenant_id", "=", e).where("user_permissions.user_id", "=", r).execute()).map((o) => ({
+    resource_server_identifier: o.resource_server_identifier,
+    permission_name: o.permission_name,
     description: null,
     // No description available from user_permissions directly
-    resource_server_name: n.resource_server_name || n.resource_server_identifier,
+    resource_server_name: o.resource_server_name || o.resource_server_identifier,
     // Fallback to identifier if name is null
-    user_id: n.user_id,
-    created_at: n.created_at
+    user_id: o.user_id,
+    created_at: o.created_at
   }));
 }
 function ra(t) {
@@ -1763,7 +1848,7 @@ function ra(t) {
 function aa(t) {
   return async (e, r) => await t.selectFrom("user_roles as ur").innerJoin(
     "roles as r",
-    (o) => o.onRef("ur.role_id", "=", "r.id").onRef("ur.tenant_id", "=", "r.tenant_id")
+    (n) => n.onRef("ur.role_id", "=", "r.id").onRef("ur.tenant_id", "=", "r.tenant_id")
   ).select([
     "r.id",
     "r.name",
@@ -1775,28 +1860,28 @@ function aa(t) {
 function na(t) {
   return async (e, r, a) => {
     if (a.length === 0) return !0;
-    const o = (/* @__PURE__ */ new Date()).toISOString();
+    const n = (/* @__PURE__ */ new Date()).toISOString();
     try {
-      for (const n of a)
+      for (const o of a)
         try {
-          await t.insertInto("user_roles").values({ tenant_id: e, user_id: r, role_id: n, created_at: o }).execute();
+          await t.insertInto("user_roles").values({ tenant_id: e, user_id: r, role_id: o, created_at: n }).execute();
         } catch (s) {
           if (s.code === "SQLITE_CONSTRAINT_PRIMARYKEY" || s.code === "SQLITE_CONSTRAINT_UNIQUE")
             continue;
           throw s;
         }
       return !0;
-    } catch (n) {
-      return console.error("Error assigning user roles:", n), !1;
+    } catch (o) {
+      return console.error("Error assigning user roles:", o), !1;
     }
   };
 }
 function oa(t) {
   return async (e, r, a) => {
     try {
-      return a.length && await t.deleteFrom("user_roles").where("tenant_id", "=", e).where("user_id", "=", r).where((o) => o("role_id", "in", a)).execute(), !0;
-    } catch (o) {
-      return console.error("Error removing user roles:", o), !1;
+      return a.length && await t.deleteFrom("user_roles").where("tenant_id", "=", e).where("user_id", "=", r).where((n) => n("role_id", "in", a)).execute(), !0;
+    } catch (n) {
+      return console.error("Error removing user roles:", n), !1;
     }
   };
 }
@@ -1810,69 +1895,69 @@ function sa(t) {
 function ia(t) {
   return t[t.length - 1];
 }
-function y(t) {
+function C(t) {
   return Object.freeze(t);
 }
-const B = y({
+const W = C({
   is(t) {
     return t.kind === "IdentifierNode";
   },
   create(t) {
-    return y({
+    return C({
       kind: "IdentifierNode",
       name: t
     });
   }
-}), X = y({
+}), re = C({
   is(t) {
     return t.kind === "SchemableIdentifierNode";
   },
   create(t) {
-    return y({
+    return C({
       kind: "SchemableIdentifierNode",
-      identifier: B.create(t)
+      identifier: W.create(t)
     });
   },
   createWithSchema(t, e) {
-    return y({
+    return C({
       kind: "SchemableIdentifierNode",
-      schema: B.create(t),
-      identifier: B.create(e)
+      schema: W.create(t),
+      identifier: W.create(e)
     });
   }
-}), la = y({
+}), la = C({
   is(t) {
     return t.kind === "AliasNode";
   },
   create(t, e) {
-    return y({
+    return C({
       kind: "AliasNode",
       node: t,
       alias: e
     });
   }
-}), W = y({
+}), X = C({
   is(t) {
     return t.kind === "TableNode";
   },
   create(t) {
-    return y({
+    return C({
       kind: "TableNode",
-      table: X.create(t)
+      table: re.create(t)
     });
   },
   createWithSchema(t, e) {
-    return y({
+    return C({
       kind: "TableNode",
-      table: X.createWithSchema(t, e)
+      table: re.createWithSchema(t, e)
     });
   }
 });
-var q;
+var H;
 class ca {
   constructor() {
-    z(this, "nodeStack", []);
-    N(this, q, y({
+    R(this, "nodeStack", []);
+    S(this, H, C({
       AliasNode: this.transformAlias.bind(this),
       ColumnNode: this.transformColumn.bind(this),
       IdentifierNode: this.transformIdentifier.bind(this),
@@ -1973,13 +2058,13 @@ class ca {
       return e;
     this.nodeStack.push(e);
     const r = this.transformNodeImpl(e);
-    return this.nodeStack.pop(), y(r);
+    return this.nodeStack.pop(), C(r);
   }
   transformNodeImpl(e) {
-    return d(this, q)[e.kind](e);
+    return d(this, H)[e.kind](e);
   }
   transformNodeList(e) {
-    return e && y(e.map((r) => this.transformNode(r)));
+    return e && C(e.map((r) => this.transformNode(r)));
   }
   transformSelectQuery(e) {
     return {
@@ -2078,7 +2163,7 @@ class ca {
   transformRaw(e) {
     return {
       kind: "RawNode",
-      sqlFragments: y([...e.sqlFragments]),
+      sqlFragments: C([...e.sqlFragments]),
       parameters: this.transformNodeList(e.parameters)
     };
   }
@@ -2702,8 +2787,8 @@ class ca {
     return e;
   }
 }
-q = new WeakMap();
-const da = y({
+H = new WeakMap();
+const da = C({
   AlterTableNode: !0,
   CreateIndexNode: !0,
   CreateSchemaNode: !0,
@@ -2722,87 +2807,87 @@ const da = y({
   UpdateQueryNode: !0,
   MergeQueryNode: !0
 });
-var M, k, $, w, ye, ve, Ne, P, Z, Ce;
+var E, j, F, N, ye, ve, Ne, A, ae, Ce;
 class ua extends ca {
   constructor(r) {
     super();
-    N(this, w);
-    N(this, M);
-    N(this, k, /* @__PURE__ */ new Set());
-    N(this, $, /* @__PURE__ */ new Set());
-    L(this, M, r);
+    S(this, N);
+    S(this, E);
+    S(this, j, /* @__PURE__ */ new Set());
+    S(this, F, /* @__PURE__ */ new Set());
+    K(this, E, r);
   }
   transformNodeImpl(r) {
-    if (!m(this, w, ye).call(this, r))
+    if (!p(this, N, ye).call(this, r))
       return super.transformNodeImpl(r);
-    const a = m(this, w, Ne).call(this, r);
+    const a = p(this, N, Ne).call(this, r);
     for (const s of a)
-      d(this, $).add(s);
-    const o = m(this, w, ve).call(this, r);
-    for (const s of o)
-      d(this, k).add(s);
-    const n = super.transformNodeImpl(r);
-    for (const s of o)
-      d(this, k).delete(s);
+      d(this, F).add(s);
+    const n = p(this, N, ve).call(this, r);
+    for (const s of n)
+      d(this, j).add(s);
+    const o = super.transformNodeImpl(r);
+    for (const s of n)
+      d(this, j).delete(s);
     for (const s of a)
-      d(this, $).delete(s);
-    return n;
+      d(this, F).delete(s);
+    return o;
   }
   transformSchemableIdentifier(r) {
     const a = super.transformSchemableIdentifier(r);
-    return a.schema || !d(this, k).has(r.identifier.name) ? a : {
+    return a.schema || !d(this, j).has(r.identifier.name) ? a : {
       ...a,
-      schema: B.create(d(this, M))
+      schema: W.create(d(this, E))
     };
   }
   transformReferences(r) {
     const a = super.transformReferences(r);
     return a.table.table.schema ? a : {
       ...a,
-      table: W.createWithSchema(d(this, M), a.table.table.identifier.name)
+      table: X.createWithSchema(d(this, E), a.table.table.identifier.name)
     };
   }
 }
-M = new WeakMap(), k = new WeakMap(), $ = new WeakMap(), w = new WeakSet(), ye = function(r) {
+E = new WeakMap(), j = new WeakMap(), F = new WeakMap(), N = new WeakSet(), ye = function(r) {
   return r.kind in da;
 }, ve = function(r) {
   const a = /* @__PURE__ */ new Set();
-  if ("name" in r && r.name && X.is(r.name) && m(this, w, Z).call(this, r.name, a), "from" in r && r.from)
-    for (const o of r.from.froms)
-      m(this, w, P).call(this, o, a);
-  if ("into" in r && r.into && m(this, w, P).call(this, r.into, a), "table" in r && r.table && m(this, w, P).call(this, r.table, a), "joins" in r && r.joins)
-    for (const o of r.joins)
-      m(this, w, P).call(this, o.table, a);
-  return "using" in r && r.using && m(this, w, P).call(this, r.using, a), a;
+  if ("name" in r && r.name && re.is(r.name) && p(this, N, ae).call(this, r.name, a), "from" in r && r.from)
+    for (const n of r.from.froms)
+      p(this, N, A).call(this, n, a);
+  if ("into" in r && r.into && p(this, N, A).call(this, r.into, a), "table" in r && r.table && p(this, N, A).call(this, r.table, a), "joins" in r && r.joins)
+    for (const n of r.joins)
+      p(this, N, A).call(this, n.table, a);
+  return "using" in r && r.using && p(this, N, A).call(this, r.using, a), a;
 }, Ne = function(r) {
   const a = /* @__PURE__ */ new Set();
-  return "with" in r && r.with && m(this, w, Ce).call(this, r.with, a), a;
-}, P = function(r, a) {
-  const o = W.is(r) ? r : la.is(r) && W.is(r.node) ? r.node : null;
-  o && m(this, w, Z).call(this, o.table, a);
-}, Z = function(r, a) {
-  const o = r.identifier.name;
-  !d(this, k).has(o) && !d(this, $).has(o) && a.add(o);
+  return "with" in r && r.with && p(this, N, Ce).call(this, r.with, a), a;
+}, A = function(r, a) {
+  const n = X.is(r) ? r : la.is(r) && X.is(r.node) ? r.node : null;
+  n && p(this, N, ae).call(this, n.table, a);
+}, ae = function(r, a) {
+  const n = r.identifier.name;
+  !d(this, j).has(n) && !d(this, F).has(n) && a.add(n);
 }, Ce = function(r, a) {
-  for (const o of r.expressions) {
-    const n = o.name.table.table.identifier.name;
-    d(this, $).has(n) || a.add(n);
+  for (const n of r.expressions) {
+    const o = n.name.table.table.identifier.name;
+    d(this, F).has(o) || a.add(o);
   }
 };
-var R;
+var Q;
 class ma {
   constructor(e) {
-    N(this, R);
-    L(this, R, new ua(e));
+    S(this, Q);
+    K(this, Q, new ua(e));
   }
   transformQuery(e) {
-    return d(this, R).transformNode(e.node);
+    return d(this, Q).transformNode(e.node);
   }
   async transformResult(e) {
     return e.result;
   }
 }
-R = new WeakMap();
+Q = new WeakMap();
 class _a {
   transformQuery(e) {
     return e.node;
@@ -2811,13 +2896,13 @@ class _a {
     return e.result;
   }
 }
-const ha = "kysely_migration", fe = "kysely_migration_lock", fa = !1, G = "migration_lock", pa = y({ __noMigrations__: !0 });
-var p, i, E, x, T, j, xe, S, Te, Se, Oe, ke, $e, ee, F, te, Ie, De, Pe, re, je, Fe, Me, Ae, ze, J;
+const ha = "kysely_migration", fe = "kysely_migration_lock", fa = !1, Z = "migration_lock", pa = C({ __noMigrations__: !0 });
+var v, l, U, k, $, z, xe, I, Te, Se, Oe, ke, $e, ne, L, oe, Ie, De, Pe, se, je, Fe, Me, Ae, ze, B;
 class be {
   constructor(e) {
-    N(this, i);
-    N(this, p);
-    L(this, p, y(e));
+    S(this, l);
+    S(this, v);
+    K(this, v, C(e));
   }
   /**
    * Returns a {@link MigrationInfo} object for each migration.
@@ -2825,13 +2910,13 @@ class be {
    * The returned array is sorted by migration name.
    */
   async getMigrations() {
-    const e = await m(this, i, F).call(this, d(this, i, T)) ? await d(this, p).db.withPlugin(d(this, i, S)).selectFrom(d(this, i, T)).select(["name", "timestamp"]).execute() : [];
-    return (await m(this, i, re).call(this)).map(({ name: a, ...o }) => {
-      const n = e.find((s) => s.name === a);
+    const e = await p(this, l, L).call(this, d(this, l, $)) ? await d(this, v).db.withPlugin(d(this, l, I)).selectFrom(d(this, l, $)).select(["name", "timestamp"]).execute() : [];
+    return (await p(this, l, se).call(this)).map(({ name: a, ...n }) => {
+      const o = e.find((s) => s.name === a);
       return {
         name: a,
-        migration: o,
-        executedAt: n ? new Date(n.timestamp) : void 0
+        migration: n,
+        executedAt: o ? new Date(o.timestamp) : void 0
       };
     });
   }
@@ -2883,7 +2968,7 @@ class be {
    * ```
    */
   async migrateToLatest() {
-    return m(this, i, E).call(this, () => ({ direction: "Up", step: 1 / 0 }));
+    return p(this, l, U).call(this, () => ({ direction: "Up", step: 1 / 0 }));
   }
   /**
    * Migrate up/down to a specific migration.
@@ -2909,16 +2994,16 @@ class be {
    * ```
    */
   async migrateTo(e) {
-    return m(this, i, E).call(this, ({ migrations: r, executedMigrations: a, pendingMigrations: o }) => {
+    return p(this, l, U).call(this, ({ migrations: r, executedMigrations: a, pendingMigrations: n }) => {
       if (e === pa)
         return { direction: "Down", step: 1 / 0 };
-      if (!r.find((l) => l.name === e))
+      if (!r.find((i) => i.name === e))
         throw new Error(`migration "${e}" doesn't exist`);
-      const n = a.indexOf(e), s = o.findIndex((l) => l.name === e);
-      if (n !== -1)
+      const o = a.indexOf(e), s = n.findIndex((i) => i.name === e);
+      if (o !== -1)
         return {
           direction: "Down",
-          step: a.length - n - 1
+          step: a.length - o - 1
         };
       if (s !== -1)
         return { direction: "Up", step: s + 1 };
@@ -2940,7 +3025,7 @@ class be {
    * ```
    */
   async migrateUp() {
-    return m(this, i, E).call(this, () => ({ direction: "Up", step: 1 }));
+    return p(this, l, U).call(this, () => ({ direction: "Up", step: 1 }));
   }
   /**
    * Migrate one step down.
@@ -2957,187 +3042,187 @@ class be {
    * ```
    */
   async migrateDown() {
-    return m(this, i, E).call(this, () => ({ direction: "Down", step: 1 }));
+    return p(this, l, U).call(this, () => ({ direction: "Down", step: 1 }));
   }
 }
-p = new WeakMap(), i = new WeakSet(), E = async function(e) {
+v = new WeakMap(), l = new WeakSet(), U = async function(e) {
   try {
-    return await m(this, i, Te).call(this), await m(this, i, Ie).call(this, e);
+    return await p(this, l, Te).call(this), await p(this, l, Ie).call(this, e);
   } catch (r) {
-    return r instanceof H ? r.resultSet : { error: r };
-  }
-}, x = function() {
-  return d(this, p).migrationTableSchema;
-}, T = function() {
-  return d(this, p).migrationTableName ?? ha;
-}, j = function() {
-  return d(this, p).migrationLockTableName ?? fe;
+    return r instanceof ee ? r.resultSet : { error: r };
+  }
+}, k = function() {
+  return d(this, v).migrationTableSchema;
+}, $ = function() {
+  return d(this, v).migrationTableName ?? ha;
+}, z = function() {
+  return d(this, v).migrationLockTableName ?? fe;
 }, xe = function() {
-  return d(this, p).allowUnorderedMigrations ?? fa;
-}, S = function() {
-  return d(this, i, x) ? new ma(d(this, i, x)) : new _a();
+  return d(this, v).allowUnorderedMigrations ?? fa;
+}, I = function() {
+  return d(this, l, k) ? new ma(d(this, l, k)) : new _a();
 }, Te = async function() {
-  await m(this, i, Se).call(this), await m(this, i, Oe).call(this), await m(this, i, ke).call(this), await m(this, i, $e).call(this);
+  await p(this, l, Se).call(this), await p(this, l, Oe).call(this), await p(this, l, ke).call(this), await p(this, l, $e).call(this);
 }, Se = async function() {
-  if (d(this, i, x) && !await m(this, i, ee).call(this))
+  if (d(this, l, k) && !await p(this, l, ne).call(this))
     try {
-      await m(this, i, J).call(this, d(this, p).db.schema.createSchema(d(this, i, x)));
+      await p(this, l, B).call(this, d(this, v).db.schema.createSchema(d(this, l, k)));
     } catch (e) {
-      if (!await m(this, i, ee).call(this))
+      if (!await p(this, l, ne).call(this))
         throw e;
     }
 }, Oe = async function() {
-  if (!await m(this, i, F).call(this, d(this, i, T)))
+  if (!await p(this, l, L).call(this, d(this, l, $)))
     try {
-      d(this, i, x) && await m(this, i, J).call(this, d(this, p).db.schema.createSchema(d(this, i, x))), await m(this, i, J).call(this, d(this, p).db.schema.withPlugin(d(this, i, S)).createTable(d(this, i, T)).addColumn("name", "varchar(255)", (e) => e.notNull().primaryKey()).addColumn("timestamp", "varchar(255)", (e) => e.notNull()));
+      d(this, l, k) && await p(this, l, B).call(this, d(this, v).db.schema.createSchema(d(this, l, k))), await p(this, l, B).call(this, d(this, v).db.schema.withPlugin(d(this, l, I)).createTable(d(this, l, $)).addColumn("name", "varchar(255)", (e) => e.notNull().primaryKey()).addColumn("timestamp", "varchar(255)", (e) => e.notNull()));
     } catch (e) {
-      if (!await m(this, i, F).call(this, d(this, i, T)))
+      if (!await p(this, l, L).call(this, d(this, l, $)))
         throw e;
     }
 }, ke = async function() {
-  if (!await m(this, i, F).call(this, d(this, i, j)))
+  if (!await p(this, l, L).call(this, d(this, l, z)))
     try {
-      await m(this, i, J).call(this, d(this, p).db.schema.withPlugin(d(this, i, S)).createTable(d(this, i, j)).addColumn("id", "varchar(255)", (e) => e.notNull().primaryKey()).addColumn("is_locked", "integer", (e) => e.notNull().defaultTo(0)));
+      await p(this, l, B).call(this, d(this, v).db.schema.withPlugin(d(this, l, I)).createTable(d(this, l, z)).addColumn("id", "varchar(255)", (e) => e.notNull().primaryKey()).addColumn("is_locked", "integer", (e) => e.notNull().defaultTo(0)));
     } catch (e) {
-      if (!await m(this, i, F).call(this, d(this, i, j)))
+      if (!await p(this, l, L).call(this, d(this, l, z)))
         throw e;
     }
 }, $e = async function() {
-  if (!await m(this, i, te).call(this))
+  if (!await p(this, l, oe).call(this))
     try {
-      await d(this, p).db.withPlugin(d(this, i, S)).insertInto(d(this, i, j)).values({ id: G, is_locked: 0 }).execute();
+      await d(this, v).db.withPlugin(d(this, l, I)).insertInto(d(this, l, z)).values({ id: Z, is_locked: 0 }).execute();
     } catch (e) {
-      if (!await m(this, i, te).call(this))
+      if (!await p(this, l, oe).call(this))
         throw e;
     }
-}, ee = async function() {
-  return (await d(this, p).db.introspection.getSchemas()).some((r) => r.name === d(this, i, x));
-}, F = async function(e) {
-  const r = d(this, i, x);
-  return (await d(this, p).db.introspection.getTables({
+}, ne = async function() {
+  return (await d(this, v).db.introspection.getSchemas()).some((r) => r.name === d(this, l, k));
+}, L = async function(e) {
+  const r = d(this, l, k);
+  return (await d(this, v).db.introspection.getTables({
     withInternalKyselyTables: !0
-  })).some((o) => o.name === e && (!r || o.schema === r));
-}, te = async function() {
-  return !!await d(this, p).db.withPlugin(d(this, i, S)).selectFrom(d(this, i, j)).where("id", "=", G).select("id").executeTakeFirst();
+  })).some((n) => n.name === e && (!r || n.schema === r));
+}, oe = async function() {
+  return !!await d(this, v).db.withPlugin(d(this, l, I)).selectFrom(d(this, l, z)).where("id", "=", Z).select("id").executeTakeFirst();
 }, Ie = async function(e) {
-  const r = d(this, p).db.getExecutor().adapter, a = y({
-    lockTable: d(this, p).migrationLockTableName ?? fe,
-    lockRowId: G,
-    lockTableSchema: d(this, p).migrationTableSchema
-  }), o = async (n) => {
+  const r = d(this, v).db.getExecutor().adapter, a = C({
+    lockTable: d(this, v).migrationLockTableName ?? fe,
+    lockRowId: Z,
+    lockTableSchema: d(this, v).migrationTableSchema
+  }), n = async (o) => {
     try {
-      await r.acquireMigrationLock(n, a);
-      const s = await m(this, i, De).call(this, n);
+      await r.acquireMigrationLock(o, a);
+      const s = await p(this, l, De).call(this, o);
       if (s.migrations.length === 0)
         return { results: [] };
-      const { direction: l, step: c } = e(s);
-      return c <= 0 ? { results: [] } : l === "Down" ? await m(this, i, Ae).call(this, n, s, c) : l === "Up" ? await m(this, i, ze).call(this, n, s, c) : { results: [] };
+      const { direction: i, step: c } = e(s);
+      return c <= 0 ? { results: [] } : i === "Down" ? await p(this, l, Ae).call(this, o, s, c) : i === "Up" ? await p(this, l, ze).call(this, o, s, c) : { results: [] };
     } finally {
-      await r.releaseMigrationLock(n, a);
+      await r.releaseMigrationLock(o, a);
     }
   };
-  return r.supportsTransactionalDdl ? d(this, p).db.transaction().execute(o) : d(this, p).db.connection().execute(o);
+  return r.supportsTransactionalDdl ? d(this, v).db.transaction().execute(n) : d(this, v).db.connection().execute(n);
 }, De = async function(e) {
-  const r = await m(this, i, re).call(this), a = await m(this, i, je).call(this, e);
-  m(this, i, Fe).call(this, r, a), d(this, i, xe) || m(this, i, Me).call(this, r, a);
-  const o = m(this, i, Pe).call(this, r, a);
-  return y({
+  const r = await p(this, l, se).call(this), a = await p(this, l, je).call(this, e);
+  p(this, l, Fe).call(this, r, a), d(this, l, xe) || p(this, l, Me).call(this, r, a);
+  const n = p(this, l, Pe).call(this, r, a);
+  return C({
     migrations: r,
     executedMigrations: a,
     lastMigration: ia(a),
-    pendingMigrations: o
+    pendingMigrations: n
   });
 }, Pe = function(e, r) {
   return e.filter((a) => !r.includes(a.name));
-}, re = async function() {
-  const e = await d(this, p).provider.getMigrations();
+}, se = async function() {
+  const e = await d(this, v).provider.getMigrations();
   return Object.keys(e).sort().map((r) => ({
     ...e[r],
     name: r
   }));
 }, je = async function(e) {
-  return (await e.withPlugin(d(this, i, S)).selectFrom(d(this, i, T)).select("name").orderBy(["timestamp", "name"]).execute()).map((a) => a.name);
+  return (await e.withPlugin(d(this, l, I)).selectFrom(d(this, l, $)).select("name").orderBy(["timestamp", "name"]).execute()).map((a) => a.name);
 }, Fe = function(e, r) {
   for (const a of r)
-    if (!e.some((o) => o.name === a))
+    if (!e.some((n) => n.name === a))
       throw new Error(`corrupted migrations: previously executed migration ${a} is missing`);
 }, Me = function(e, r) {
   for (let a = 0; a < r.length; ++a)
     if (e[a].name !== r[a])
       throw new Error(`corrupted migrations: expected previously executed migration ${r[a]} to be at index ${a} but ${e[a].name} was found in its place. New migrations must always have a name that comes alphabetically after the last executed migration.`);
 }, Ae = async function(e, r, a) {
-  const o = r.executedMigrations.slice().reverse().slice(0, a).map((s) => r.migrations.find((l) => l.name === s)), n = o.map((s) => ({
+  const n = r.executedMigrations.slice().reverse().slice(0, a).map((s) => r.migrations.find((i) => i.name === s)), o = n.map((s) => ({
     migrationName: s.name,
     direction: "Down",
     status: "NotExecuted"
   }));
-  for (let s = 0; s < n.length; ++s) {
-    const l = o[s];
+  for (let s = 0; s < o.length; ++s) {
+    const i = n[s];
     try {
-      l.down && (await l.down(e), await e.withPlugin(d(this, i, S)).deleteFrom(d(this, i, T)).where("name", "=", l.name).execute(), n[s] = {
-        migrationName: l.name,
+      i.down && (await i.down(e), await e.withPlugin(d(this, l, I)).deleteFrom(d(this, l, $)).where("name", "=", i.name).execute(), o[s] = {
+        migrationName: i.name,
         direction: "Down",
         status: "Success"
       });
     } catch (c) {
-      throw n[s] = {
-        migrationName: l.name,
+      throw o[s] = {
+        migrationName: i.name,
         direction: "Down",
         status: "Error"
-      }, new H({
+      }, new ee({
         error: c,
-        results: n
+        results: o
       });
     }
   }
-  return { results: n };
+  return { results: o };
 }, ze = async function(e, r, a) {
-  const n = r.pendingMigrations.slice(0, a).map((s) => ({
+  const o = r.pendingMigrations.slice(0, a).map((s) => ({
     migrationName: s.name,
     direction: "Up",
     status: "NotExecuted"
   }));
-  for (let s = 0; s < n.length; s++) {
-    const l = r.pendingMigrations[s];
+  for (let s = 0; s < o.length; s++) {
+    const i = r.pendingMigrations[s];
     try {
-      await l.up(e), await e.withPlugin(d(this, i, S)).insertInto(d(this, i, T)).values({
-        name: l.name,
+      await i.up(e), await e.withPlugin(d(this, l, I)).insertInto(d(this, l, $)).values({
+        name: i.name,
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      }).execute(), n[s] = {
-        migrationName: l.name,
+      }).execute(), o[s] = {
+        migrationName: i.name,
         direction: "Up",
         status: "Success"
       };
     } catch (c) {
-      throw n[s] = {
-        migrationName: l.name,
+      throw o[s] = {
+        migrationName: i.name,
         direction: "Up",
         status: "Error"
-      }, new H({
+      }, new ee({
         error: c,
-        results: n
+        results: o
       });
     }
   }
-  return { results: n };
-}, J = async function(e) {
-  d(this, p).db.getExecutor().adapter.supportsCreateIfNotExists && (e = e.ifNotExists()), await e.execute();
+  return { results: o };
+}, B = async function(e) {
+  d(this, v).db.getExecutor().adapter.supportsCreateIfNotExists && (e = e.ifNotExists()), await e.execute();
 };
-var K;
-class H extends Error {
+var q;
+class ee extends Error {
   constructor(r) {
     super();
-    N(this, K);
-    L(this, K, r);
+    S(this, q);
+    K(this, q, r);
   }
   get resultSet() {
-    return d(this, K);
+    return d(this, q);
   }
 }
-K = new WeakMap();
+q = new WeakMap();
 class Le {
   constructor(e) {
-    z(this, "migrations");
+    R(this, "migrations");
     this.migrations = e;
   }
   async getMigrations() {
@@ -3427,7 +3512,15 @@ async function mn(t) {
     "tenant_id",
     "varchar(255)",
     (e) => e.references("tenants.id").onDelete("cascade")
-  ).addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("revoked_at", "varchar(255)").addColumn("cert", "varchar(2048)").addColumn("pkcs7", "varchar(2048)").addColumn("fingerprint", "varchar(256)").addColumn("thumbprint", "varchar(256)").addColumn("current_since", "varchar(256)").addColumn("current_until", "varchar(256)").execute();
+  ).addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("revoked_at", "varchar(255)").addColumn("cert", "varchar(4096)").addColumn("pkcs7", "varchar(4096)").addColumn("fingerprint", "varchar(256)").addColumn("thumbprint", "varchar(256)").addColumn("current_since", "varchar(256)").addColumn("current_until", "varchar(256)").addColumn(
+    "type",
+    "varchar(50)",
+    (e) => e.notNull().defaultTo("jwt_signing")
+  ).addColumn(
+    "connection",
+    "varchar(255)",
+    (e) => e.references("connections.id").onDelete("cascade")
+  ).execute();
 }
 async function _n(t) {
   await t.schema.dropTable("keys").execute();
@@ -4455,7 +4548,7 @@ const fl = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   up: _l
 }, Symbol.toStringTag, { value: "Module" }));
 async function pl(t) {
-  await t.schema.createTable("resource_servers").addColumn("id", "varchar(21)", (e) => e.notNull()).addColumn("tenant_id", "varchar(191)", (e) => e.notNull()).addColumn("identifier", "varchar(191)", (e) => e.notNull()).addColumn("name", "varchar(255)", (e) => e.notNull()).addColumn("scopes", "varchar(4096)").addColumn("signing_alg", "varchar(64)").addColumn("signing_secret", "varchar(2048)").addColumn("token_lifetime", "integer").addColumn("token_lifetime_for_web", "integer").addColumn("skip_consent_for_verifiable_first_party_clients", "integer").addColumn("allow_offline_access", "integer").addColumn("verification_key", "varchar(4096)").addColumn("options", "varchar(4096)").addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("updated_at", "varchar(255)", (e) => e.notNull()).addPrimaryKeyConstraint("resource_servers_pk", ["tenant_id", "id"]).execute(), await t.schema.createIndex("resource_servers_tenant_identifier_uq").on("resource_servers").columns(["tenant_id", "identifier"]).unique().execute(), await t.schema.createTable("roles").addColumn("id", "varchar(21)", (e) => e.notNull()).addColumn("tenant_id", "varchar(191)", (e) => e.notNull()).addColumn("name", "varchar(50)", (e) => e.notNull()).addColumn("description", "varchar(255)").addColumn("created_at", "varchar(255)", (e) => e.notNull()).addColumn("updated_at", "varchar(255)", (e) => e.notNull()).addPrimaryKeyConstraint("roles_pk", ["tenant_id", "id"]).execute(), await t.schema.createIndex("roles_tenant_name_uq").on("roles").columns(["tenant_id", "name"]).unique().execute();
+  await t.schema.createTable("resource_servers").addColumn("id", "varchar(21)", (e) => e.notNull()).addColumn("tenant_id", "varchar(191)", (e) => e.notNull()).addColumn("identifier", "varchar(191)", (e) => e.notNull()).addColumn("name", "varchar(255)", (e) => e.notNull()).addColumn("scopes", "varchar(4096)").addColumn("signing_alg", "varchar(64)").addColumn("signing_secret", "varchar(2048)").addColumn("token_lifetime", "integer").addColumn("token_lifetime_for_web", "integer").addColumn("skip_consent_for_verifiable_first_party_clients", "integer").addColumn("allow_offline_access", "integer").addColumn("verification_key", "varchar(4096)").addColumn("options", "varchar(4096)").addColumn("created_at", "varchar(35)", (e) => e.notNull()).addColumn("updated_at", "varchar(35)", (e) => e.notNull()).addPrimaryKeyConstraint("resource_servers_pk", ["tenant_id", "id"]).execute(), await t.schema.createIndex("resource_servers_tenant_identifier_uq").on("resource_servers").columns(["tenant_id", "identifier"]).unique().execute(), await t.schema.createTable("roles").addColumn("id", "varchar(21)", (e) => e.notNull()).addColumn("tenant_id", "varchar(191)", (e) => e.notNull()).addColumn("name", "varchar(50)", (e) => e.notNull()).addColumn("description", "varchar(255)").addColumn("created_at", "varchar(35)", (e) => e.notNull()).addColumn("updated_at", "varchar(35)", (e) => e.notNull()).addPrimaryKeyConstraint("roles_pk", ["tenant_id", "id"]).execute(), await t.schema.createIndex("roles_tenant_name_uq").on("roles").columns(["tenant_id", "name"]).unique().execute();
 }
 async function gl(t) {
   await t.schema.dropTable("roles").execute(), await t.schema.dropTable("resource_servers").execute();
@@ -4470,7 +4563,7 @@ async function yl(t) {
     "resource_server_identifier",
     "varchar(191)",
     (e) => e.notNull()
-  ).addColumn("permission_name", "varchar(255)", (e) => e.notNull()).addColumn("created_at", "varchar(255)", (e) => e.notNull()).addPrimaryKeyConstraint("role_permissions_pk", [
+  ).addColumn("permission_name", "varchar(191)", (e) => e.notNull()).addColumn("created_at", "varchar(35)", (e) => e.notNull()).addPrimaryKeyConstraint("role_permissions_pk", [
     "tenant_id",
     "role_id",
     "resource_server_identifier",
@@ -4479,7 +4572,7 @@ async function yl(t) {
     "resource_server_identifier",
     "varchar(191)",
     (e) => e.notNull()
-  ).addColumn("permission_name", "varchar(255)", (e) => e.notNull()).addColumn("created_at", "varchar(255)", (e) => e.notNull()).addPrimaryKeyConstraint("user_permissions_pk", [
+  ).addColumn("permission_name", "varchar(191)", (e) => e.notNull()).addColumn("created_at", "varchar(35)", (e) => e.notNull()).addPrimaryKeyConstraint("user_permissions_pk", [
     "tenant_id",
     "user_id",
     "resource_server_identifier",
@@ -4495,7 +4588,7 @@ const Nl = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   up: yl
 }, Symbol.toStringTag, { value: "Module" }));
 async function Cl(t) {
-  await t.schema.createTable("user_roles").addColumn("tenant_id", "varchar(191)", (e) => e.notNull()).addColumn("user_id", "varchar(191)", (e) => e.notNull()).addColumn("role_id", "varchar(21)", (e) => e.notNull()).addColumn("created_at", "varchar(255)", (e) => e.notNull()).addPrimaryKeyConstraint("user_roles_pk", [
+  await t.schema.createTable("user_roles").addColumn("tenant_id", "varchar(191)", (e) => e.notNull()).addColumn("user_id", "varchar(191)", (e) => e.notNull()).addColumn("role_id", "varchar(21)", (e) => e.notNull()).addColumn("created_at", "varchar(35)", (e) => e.notNull()).addPrimaryKeyConstraint("user_roles_pk", [
     "tenant_id",
     "user_id",
     "role_id"
@@ -4508,6 +4601,16 @@ const xl = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
   down: bl,
   up: Cl
+}, Symbol.toStringTag, { value: "Module" }));
+async function Tl(t) {
+}
+async function Sl(t) {
+  await t.schema.alterTable("keys").dropColumn("connection").execute(), await t.schema.alterTable("keys").modifyColumn("cert", "varchar(2048)").execute(), await t.schema.alterTable("keys").modifyColumn("pkcs7", "varchar(2048)").execute(), await t.schema.alterTable("keys").dropColumn("type").execute();
+}
+const Ol = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+  __proto__: null,
+  down: Sl,
+  up: Tl
 }, Symbol.toStringTag, { value: "Module" })), Ee = {
   m1_init: ya,
   m2_magicLink: Ca,
@@ -4600,33 +4703,34 @@ const xl = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   n90_themes: fl,
   n91_resource_servers_rules_permissions: wl,
   n92_role_permissions: Nl,
-  n93_add_permissions_to_roles: xl
+  n93_add_permissions_to_roles: xl,
+  n94_keys_connection_and_extend_columns: Ol
 };
-async function $l(t, e = !1) {
+async function Pl(t, e = !1) {
   e && console.log("migrating...");
   const r = new Le(Ee), a = new be({
     db: t,
     provider: r
-  }), { error: o, results: n } = await a.migrateToLatest();
-  if (n == null || n.forEach((s) => {
+  }), { error: n, results: o } = await a.migrateToLatest();
+  if (o == null || o.forEach((s) => {
     s.status === "Success" ? e && console.log(
       `migration "${s.migrationName}" was executed successfully`
     ) : s.status === "Error" && console.error(`failed to execute migration "${s.migrationName}"`);
-  }), o)
-    throw console.error("failed to migrate"), console.error(o), o;
+  }), n)
+    throw console.error("failed to migrate"), console.error(n), n;
 }
-async function Il(t) {
+async function jl(t) {
   console.log("migrating...");
   const e = new Le(Ee), r = new be({
     db: t,
     provider: e
-  }), { error: a, results: o } = await r.migrateDown();
-  if (o == null || o.forEach((n) => {
-    n.status === "Success" ? console.log(`migration "${n.migrationName}" was reverted successfully`) : n.status === "Error" && console.error(`failed to execute migration "${n.migrationName}"`);
+  }), { error: a, results: n } = await r.migrateDown();
+  if (n == null || n.forEach((o) => {
+    o.status === "Success" ? console.log(`migration "${o.migrationName}" was reverted successfully`) : o.status === "Error" && console.error(`failed to execute migration "${o.migrationName}"`);
   }), a)
     throw console.error("failed to migrate"), console.error(a), a;
 }
-function Dl(t) {
+function Fl(t) {
   return {
     applications: jt(t),
     branding: er(t),
@@ -4656,7 +4760,7 @@ function Dl(t) {
   };
 }
 export {
-  Dl as default,
-  Il as migrateDown,
-  $l as migrateToLatest
+  Fl as default,
+  jl as migrateDown,
+  Pl as migrateToLatest
 };